============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 88 55 00 00 00 00 00 00 00 00 00 00 C4 58 00 00 A8 56 00 00 3C 55 00 00 00 00 00 00 00 00 00 00 êU..........─X..¿V..<U.......... 00000020 3C 59 00 00 5C 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 5D 00 00 <Y..\V......................$].. 00000040 0A 5D 00 00 3C 5D 00 00 DE 5C 00 00 D0 5C 00 00 F2 5C 00 00 AA 5C 00 00 9A 5C 00 00 C2 5C 00 00 ◙]..<]..▐\..╨\..≥\..¬\..Ü\..┬\.. 00000060 76 5C 00 00 5C 5C 00 00 86 5C 00 00 00 59 00 00 46 5C 00 00 14 59 00 00 D2 58 00 00 EE 58 00 00 v\..\\..å\...Y..F\..¶Y..╥X..εX.. 00000080 28 59 00 00 00 00 00 00 A0 58 00 00 AC 58 00 00 44 59 00 00 5A 59 00 00 6E 59 00 00 8A 59 00 00 (Y......áX..¼X..DY..ZY..nY..èY.. 000000A0 9A 59 00 00 A6 59 00 00 C0 59 00 00 CE 59 00 00 DC 59 00 00 EE 59 00 00 FE 59 00 00 0E 5A 00 00 ÜY..ªY..└Y..╬Y..▄Y..εY..■Y..♫Z.. 000000C0 2A 5A 00 00 4C 58 00 00 88 58 00 00 66 5A 00 00 80 5A 00 00 9A 5A 00 00 B6 5A 00 00 CE 5A 00 00 *Z..LX..êX..fZ..ÇZ..ÜZ..╢Z..╬Z.. 000000E0 E0 5A 00 00 F8 5A 00 00 1A 5B 00 00 36 5B 00 00 52 5B 00 00 6A 5B 00 00 7C 5B 00 00 8C 5B 00 00 αZ..°Z..→[..6[..R[..j[..|[..î[.. 00000100 A2 5B 00 00 BA 5B 00 00 DA 5B 00 00 F8 5B 00 00 0C 5C 00 00 16 5C 00 00 20 5C 00 00 2E 5C 00 00 ó[..║[..┌[..°[..♀\..▬\.. \...\.. 00000120 3A 5C 00 00 70 58 00 00 14 58 00 00 3A 58 00 00 2C 58 00 00 C4 57 00 00 00 58 00 00 E6 57 00 00 :\..pX..¶X..:X..,X..─W...X..µW.. 00000140 90 57 00 00 AC 57 00 00 9A 57 00 00 3E 5A 00 00 7C 57 00 00 52 5A 00 00 00 00 00 00 24 5D 00 00 ÉW..¼W..ÜW..>Z..|W..RZ......$].. 00000160 0A 5D 00 00 3C 5D 00 00 DE 5C 00 00 D0 5C 00 00 F2 5C 00 00 AA 5C 00 00 9A 5C 00 00 C2 5C 00 00 ◙]..<]..▐\..╨\..≥\..¬\..Ü\..┬\.. 00000180 76 5C 00 00 5C 5C 00 00 86 5C 00 00 00 59 00 00 46 5C 00 00 14 59 00 00 D2 58 00 00 EE 58 00 00 v\..\\..å\...Y..F\..¶Y..╥X..εX.. 000001A0 28 59 00 00 00 00 00 00 A0 58 00 00 AC 58 00 00 44 59 00 00 5A 59 00 00 6E 59 00 00 8A 59 00 00 (Y......áX..¼X..DY..ZY..nY..èY.. 000001C0 9A 59 00 00 A6 59 00 00 C0 59 00 00 CE 59 00 00 DC 59 00 00 EE 59 00 00 FE 59 00 00 0E 5A 00 00 ÜY..ªY..└Y..╬Y..▄Y..εY..■Y..♫Z.. 000001E0 2A 5A 00 00 4C 58 00 00 88 58 00 00 66 5A 00 00 80 5A 00 00 9A 5A 00 00 B6 5A 00 00 CE 5A 00 00 *Z..LX..êX..fZ..ÇZ..ÜZ..╢Z..╬Z.. 00000200 E0 5A 00 00 F8 5A 00 00 1A 5B 00 00 36 5B 00 00 52 5B 00 00 6A 5B 00 00 7C 5B 00 00 8C 5B 00 00 αZ..°Z..→[..6[..R[..j[..|[..î[.. 00000220 A2 5B 00 00 BA 5B 00 00 DA 5B 00 00 F8 5B 00 00 0C 5C 00 00 16 5C 00 00 20 5C 00 00 2E 5C 00 00 ó[..║[..┌[..°[..♀\..▬\.. \...\.. 00000240 3A 5C 00 00 70 58 00 00 14 58 00 00 3A 58 00 00 2C 58 00 00 C4 57 00 00 00 58 00 00 E6 57 00 00 :\..pX..¶X..:X..,X..─W...X..µW.. 00000260 90 57 00 00 AC 57 00 00 9A 57 00 00 3E 5A 00 00 7C 57 00 00 52 5A 00 00 00 00 00 00 4C 01 4B 65 ÉW..¼W..ÜW..>Z..|W..RZ......L☺Ke 00000280 49 6E 73 65 72 74 51 75 65 75 65 44 70 63 00 00 3D 03 6D 65 6D 6D 6F 76 65 00 5F 01 4B 65 52 65 InsertQueueDpc..=♥memmove._☺KeRe 000002A0 6C 65 61 73 65 4D 75 74 65 78 00 00 7A 01 4B 65 57 61 69 74 46 6F 72 53 69 6E 67 6C 65 4F 62 6A leaseMutex..z☺KeWaitForSingleObj 000002C0 65 63 74 00 FA 00 49 6F 52 65 67 69 73 74 65 72 53 68 75 74 64 6F 77 6E 4E 6F 74 69 66 69 63 61 ect.·.IoRegisterShutdownNotifica 000002E0 74 69 6F 6E 00 00 8B 02 52 74 6C 51 75 65 72 79 52 65 67 69 73 74 72 79 56 61 6C 75 65 73 00 00 tion..ï☻RtlQueryRegistryValues.. 00000300 42 01 4B 65 49 6E 69 74 69 61 6C 69 7A 65 4D 75 74 65 78 00 2E 00 45 78 41 6C 6C 6F 63 61 74 65 B☺KeInitializeMutex...ExAllocate 00000320 50 6F 6F 6C 57 69 74 68 54 61 67 00 36 00 45 78 46 72 65 65 50 6F 6F 6C 00 00 B6 01 4D 6D 55 6E PoolWithTag.6.ExFreePool..╢☺MmUn 00000340 6D 61 70 49 6F 53 70 61 63 65 00 00 0F 01 49 6F 55 6E 72 65 67 69 73 74 65 72 53 68 75 74 64 6F mapIoSpace..☼☺IoUnregisterShutdo 00000360 77 6E 4E 6F 74 69 66 69 63 61 74 69 6F 6E 00 00 D9 00 49 6F 44 69 73 63 6F 6E 6E 65 63 74 49 6E wnNotification..┘.IoDisconnectIn 00000380 74 65 72 72 75 70 74 00 68 02 52 74 6C 49 6E 69 74 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 terrupt.h☻RtlInitUnicodeString.. 000003A0 30 03 5F 77 63 73 69 63 6D 70 00 00 45 01 4B 65 49 6E 69 74 69 61 6C 69 7A 65 53 70 69 6E 4C 6F 0♥_wcsicmp..E☺KeInitializeSpinLo 000003C0 63 6B 00 00 6E 74 6F 73 6B 72 6E 6C 2E 65 78 65 00 00 45 00 4B 65 53 74 61 6C 6C 45 78 65 63 75 ck..ntoskrnl.exe..E.KeStallExecu 000003E0 74 69 6F 6E 50 72 6F 63 65 73 73 6F 72 00 4D 00 52 45 41 44 5F 50 4F 52 54 5F 55 43 48 41 52 00 tionProcessor.M.READ_PORT_UCHAR. 00000400 49 00 4B 66 52 65 6C 65 61 73 65 53 70 69 6E 4C 6F 63 6B 00 53 00 57 52 49 54 45 5F 50 4F 52 54 I.KfReleaseSpinLock.S.WRITE_PORT 00000420 5F 55 43 48 41 52 00 00 46 00 4B 66 41 63 71 75 69 72 65 53 70 69 6E 4C 6F 63 6B 00 48 41 4C 2E _UCHAR..F.KfAcquireSpinLock.HAL. 00000440 64 6C 6C 00 16 01 49 6F 66 43 6F 6D 70 6C 65 74 65 52 65 71 75 65 73 74 00 00 A7 01 4D 6D 4D 61 dll.▬☺IofCompleteRequest..º☺MmMa 00000460 70 4C 6F 63 6B 65 64 50 61 67 65 73 00 00 94 01 4D 6D 42 75 69 6C 64 4D 64 6C 46 6F 72 4E 6F 6E pLockedPages..ö☺MmBuildMdlForNon 00000480 50 61 67 65 64 50 6F 6F 6C 00 BD 00 49 6F 41 6C 6C 6F 63 61 74 65 4D 64 6C 00 DF 00 49 6F 46 72 PagedPool.╜.IoAllocateMdl.▀.IoFr 000004A0 65 65 4D 64 6C 00 72 01 4B 65 53 79 6E 63 68 72 6F 6E 69 7A 65 45 78 65 63 75 74 69 6F 6E 00 00 eeMdl.r☺KeSynchronizeExecution.. 000004C0 6B 01 4B 65 53 65 74 45 76 65 6E 74 00 00 71 01 4B 65 53 65 74 54 69 6D 65 72 00 00 3E 01 4B 65 k☺KeSetEvent..q☺KeSetTimer..>☺Ke 000004E0 49 6E 69 74 69 61 6C 69 7A 65 44 70 63 00 67 01 4B 65 52 65 73 65 74 45 76 65 6E 74 00 00 23 01 InitializeDpc.g☺KeResetEvent..#☺ 00000500 4B 65 43 61 6E 63 65 6C 54 69 6D 65 72 00 B9 00 49 6F 41 6C 6C 6F 63 61 74 65 41 64 61 70 74 65 KeCancelTimer.╣.IoAllocateAdapte 00000520 72 43 68 61 6E 6E 65 6C 00 00 3F 01 4B 65 49 6E 69 74 69 61 6C 69 7A 65 45 76 65 6E 74 00 46 01 rChannel..?☺KeInitializeEvent.F☺ 00000540 4B 65 49 6E 69 74 69 61 6C 69 7A 65 54 69 6D 65 72 00 03 01 49 6F 53 65 74 53 68 61 72 65 41 63 KeInitializeTimer.♥☺IoSetShareAc 00000560 63 65 73 73 00 00 FB 00 49 6F 52 65 6C 65 61 73 65 43 61 6E 63 65 6C 53 70 69 6E 4C 6F 63 6B 00 cess..√.IoReleaseCancelSpinLock. 00000580 B6 00 49 6F 41 63 71 75 69 72 65 43 61 6E 63 65 6C 53 70 69 6E 4C 6F 63 6B 00 F0 00 49 6F 51 75 ╢.IoAcquireCancelSpinLock.≡.IoQu 000005A0 65 72 79 44 65 76 69 63 65 44 65 73 63 72 69 70 74 69 6F 6E 00 00 FF 00 49 6F 52 65 70 6F 72 74 eryDeviceDescription.. .IoReport 000005C0 52 65 73 6F 75 72 63 65 55 73 61 67 65 00 D5 00 49 6F 44 65 6C 65 74 65 44 65 76 69 63 65 00 00 ResourceUsage.╒.IoDeleteDevice.. 000005E0 D6 00 49 6F 44 65 6C 65 74 65 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B 00 00 1C 02 52 74 6C 41 70 70 ╓.IoDeleteSymbolicLink..∟☻RtlApp 00000600 65 6E 64 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 54 6F 53 74 72 69 6E 67 00 00 70 02 52 74 6C 49 endUnicodeStringToString..p☻RtlI 00000620 6E 74 65 67 65 72 54 6F 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 1D 02 52 74 6C 41 70 70 65 6E ntegerToUnicodeString.↔☻RtlAppen 00000640 64 55 6E 69 63 6F 64 65 54 6F 53 74 72 69 6E 67 00 00 D1 00 49 6F 43 72 65 61 74 65 53 79 6D 62 dUnicodeToString..╤.IoCreateSymb 00000660 6F 6C 69 63 4C 69 6E 6B 00 00 CE 00 49 6F 43 72 65 61 74 65 44 65 76 69 63 65 00 00 A6 01 4D 6D olicLink..╬.IoCreateDevice..ª☺Mm 00000680 4D 61 70 49 6F 53 70 61 63 65 00 00 CC 00 49 6F 43 6F 6E 6E 65 63 74 49 6E 74 65 72 72 75 70 74 MapIoSpace..╠.IoConnectInterrupt 000006A0 00 00 B6 02 52 74 6C 57 72 69 74 65 52 65 67 69 73 74 72 79 56 61 6C 75 65 00 4A 02 52 74 6C 45 ..╢☻RtlWriteRegistryValue.J☻RtlE 000006C0 78 74 65 6E 64 65 64 4C 61 72 67 65 49 6E 74 65 67 65 72 44 69 76 69 64 65 00 49 02 52 74 6C 45 xtendedLargeIntegerDivide.I☻RtlE 000006E0 78 74 65 6E 64 65 64 49 6E 74 65 67 65 72 4D 75 6C 74 69 70 6C 79 00 00 54 01 4B 65 51 75 65 72 xtendedIntegerMultiply..T☺KeQuer 00000700 79 53 79 73 74 65 6D 54 69 6D 65 00 4C 03 77 63 73 63 61 74 00 00 E4 02 5A 77 43 6C 6F 73 65 00 ySystemTime.L♥wcscat..Σ☻ZwClose. 00000720 F8 02 5A 77 46 6C 75 73 68 4B 65 79 00 00 02 03 5A 77 4F 70 65 6E 4B 65 79 00 A9 02 52 74 6C 55 °☻ZwFlushKey..☻♥ZwOpenKey.⌐☻RtlU 00000740 6E 77 69 6E 64 00 12 00 48 61 6C 46 72 65 65 43 6F 6D 6D 6F 6E 42 75 66 66 65 72 00 07 00 48 61 nwind.↕.HalFreeCommonBuffer.•.Ha 00000760 6C 41 6C 6C 6F 63 61 74 65 43 6F 6D 6D 6F 6E 42 75 66 66 65 72 00 13 00 48 61 6C 47 65 74 41 64 lAllocateCommonBuffer.‼.HalGetAd 00000780 61 70 74 65 72 00 1F 00 48 61 6C 52 65 61 64 44 6D 61 43 6F 75 6E 74 65 72 00 33 00 49 6F 4D 61 apter.▼.HalReadDmaCounter.3.IoMa 000007A0 70 54 72 61 6E 73 66 65 72 00 30 00 49 6F 46 6C 75 73 68 41 64 61 70 74 65 72 42 75 66 66 65 72 pTransfer.0.IoFlushAdapterBuffer 000007C0 73 00 47 00 4B 66 4C 6F 77 65 72 49 72 71 6C 00 48 00 4B 66 52 61 69 73 65 49 72 71 6C 00 40 00 s.G.KfLowerIrql.H.KfRaiseIrql.@. 000007E0 4B 65 47 65 74 43 75 72 72 65 6E 74 49 72 71 6C 00 00 31 00 49 6F 46 72 65 65 41 64 61 70 74 65 KeGetCurrentIrql..1.IoFreeAdapte 00000800 72 43 68 61 6E 6E 65 6C 00 00 2E 00 48 61 6C 54 72 61 6E 73 6C 61 74 65 42 75 73 41 64 64 72 65 rChannel....HalTranslateBusAddre 00000820 73 73 00 00 17 00 48 61 6C 47 65 74 49 6E 74 65 72 72 75 70 74 56 65 63 74 6F 72 00 42 00 4B 65 ss..↨.HalGetInterruptVector.B.Ke 00000840 51 75 65 72 79 50 65 72 66 6F 72 6D 61 6E 63 65 43 6F 75 6E 74 65 72 00 00 00 00 00 00 00 00 00 QueryPerformanceCounter.........