============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 3C 20 00 00 00 00 00 00 00 00 00 00 D4 21 00 00 FC 20 00 00 5C 20 00 00 00 00 00 00 00 00 00 00 < ..........╘!..ⁿ ..\ .......... 00000020 DE 25 00 00 1C 21 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 BC 21 00 00 ▐%..∟!......................╝!.. 00000040 DC 21 00 00 F6 21 00 00 0A 22 00 00 26 22 00 00 42 22 00 00 54 22 00 00 00 00 00 00 68 22 00 00 ▄!..÷!..◙"..&"..B"..T"......h".. 00000060 7A 22 00 00 88 22 00 00 A2 22 00 00 B6 22 00 00 CC 22 00 00 DE 22 00 00 F6 22 00 00 08 23 00 00 z"..ê"..ó"..╢"..╠"..▐"..÷"..◘#.. 00000080 20 23 00 00 3C 23 00 00 5E 23 00 00 78 23 00 00 90 23 00 00 A4 23 00 00 C8 23 00 00 E2 23 00 00 #..<#..^#..x#..É#..ñ#..╚#..Γ#.. 000000A0 F4 23 00 00 08 24 00 00 1C 24 00 00 2E 24 00 00 46 24 00 00 56 24 00 00 68 24 00 00 8A 24 00 00 ⌠#..◘$..∟$...$..F$..V$..h$..è$.. 000000C0 A6 24 00 00 C6 24 00 00 E4 24 00 00 04 25 00 00 1C 25 00 00 38 25 00 00 4E 25 00 00 68 25 00 00 ª$..╞$..Σ$..♦%..∟%..8%..N%..h%.. 000000E0 82 25 00 00 8E 25 00 00 A6 25 00 00 B0 25 00 00 BE 25 00 00 CA 25 00 00 00 00 00 00 BC 21 00 00 é%..Ä%..ª%..░%..╛%..╩%......╝!.. 00000100 DC 21 00 00 F6 21 00 00 0A 22 00 00 26 22 00 00 42 22 00 00 54 22 00 00 00 00 00 00 68 22 00 00 ▄!..÷!..◙"..&"..B"..T"......h".. 00000120 7A 22 00 00 88 22 00 00 A2 22 00 00 B6 22 00 00 CC 22 00 00 DE 22 00 00 F6 22 00 00 08 23 00 00 z"..ê"..ó"..╢"..╠"..▐"..÷"..◘#.. 00000140 20 23 00 00 3C 23 00 00 5E 23 00 00 78 23 00 00 90 23 00 00 A4 23 00 00 C8 23 00 00 E2 23 00 00 #..<#..^#..x#..É#..ñ#..╚#..Γ#.. 00000160 F4 23 00 00 08 24 00 00 1C 24 00 00 2E 24 00 00 46 24 00 00 56 24 00 00 68 24 00 00 8A 24 00 00 ⌠#..◘$..∟$...$..F$..V$..h$..è$.. 00000180 A6 24 00 00 C6 24 00 00 E4 24 00 00 04 25 00 00 1C 25 00 00 38 25 00 00 4E 25 00 00 68 25 00 00 ª$..╞$..Σ$..♦%..∟%..8%..N%..h%.. 000001A0 82 25 00 00 8E 25 00 00 A6 25 00 00 B0 25 00 00 BE 25 00 00 CA 25 00 00 00 00 00 00 0E 00 48 61 é%..Ä%..ª%..░%..╛%..╩%......♫.Ha 000001C0 6C 47 65 74 49 6E 74 65 72 72 75 70 74 56 65 63 74 6F 72 00 48 41 4C 2E 64 6C 6C 00 21 00 48 61 lGetInterruptVector.HAL.dll.!.Ha 000001E0 6C 54 72 61 6E 73 6C 61 74 65 42 75 73 41 64 64 72 65 73 73 00 00 33 00 4B 65 47 65 74 43 75 72 lTranslateBusAddress..3.KeGetCur 00000200 72 65 6E 74 49 72 71 6C 00 00 35 00 4B 65 51 75 65 72 79 50 65 72 66 6F 72 6D 61 6E 63 65 43 6F rentIrql..5.KeQueryPerformanceCo 00000220 75 6E 74 65 72 00 38 00 4B 65 53 74 61 6C 6C 45 78 65 63 75 74 69 6F 6E 50 72 6F 63 65 73 73 6F unter.8.KeStallExecutionProcesso 00000240 72 00 3C 00 52 45 41 44 5F 50 4F 52 54 5F 55 43 48 41 52 00 42 00 57 52 49 54 45 5F 50 4F 52 54 r.<.READ_PORT_UCHAR.B.WRITE_PORT 00000260 5F 55 43 48 41 52 00 00 27 00 45 78 41 6C 6C 6F 63 61 74 65 50 6F 6F 6C 00 00 2D 00 45 78 46 72 _UCHAR..'.ExAllocatePool..-.ExFr 00000280 65 65 50 6F 6F 6C 00 00 85 00 49 6F 41 63 71 75 69 72 65 43 61 6E 63 65 6C 53 70 69 6E 4C 6F 63 eePool..à.IoAcquireCancelSpinLoc 000002A0 6B 00 99 00 49 6F 43 6F 6D 70 6C 65 74 65 52 65 71 75 65 73 74 00 9A 00 49 6F 43 6F 6E 6E 65 63 k.Ö.IoCompleteRequest.Ü.IoConnec 000002C0 74 49 6E 74 65 72 72 75 70 74 00 00 9C 00 49 6F 43 72 65 61 74 65 44 65 76 69 63 65 00 00 9F 00 tInterrupt..£.IoCreateDevice..ƒ. 000002E0 49 6F 43 72 65 61 74 65 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B 00 00 A3 00 49 6F 44 65 6C 65 74 65 IoCreateSymbolicLink..ú.IoDelete 00000300 44 65 76 69 63 65 00 00 A4 00 49 6F 44 65 6C 65 74 65 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B 00 00 Device..ñ.IoDeleteSymbolicLink.. 00000320 B4 00 49 6F 51 75 65 72 79 44 65 76 69 63 65 44 65 73 63 72 69 70 74 69 6F 6E 00 00 BB 00 49 6F ┤.IoQueryDeviceDescription..╗.Io 00000340 52 65 67 69 73 74 65 72 53 68 75 74 64 6F 77 6E 4E 6F 74 69 66 69 63 61 74 69 6F 6E 00 00 BC 00 RegisterShutdownNotification..╝. 00000360 49 6F 52 65 6C 65 61 73 65 43 61 6E 63 65 6C 53 70 69 6E 4C 6F 63 6B 00 C0 00 49 6F 52 65 70 6F IoReleaseCancelSpinLock.└.IoRepo 00000380 72 74 52 65 73 6F 75 72 63 65 55 73 61 67 65 00 C3 00 49 6F 53 65 74 53 68 61 72 65 41 63 63 65 rtResourceUsage.├.IoSetShareAcce 000003A0 73 73 00 00 CB 00 49 6F 55 6E 72 65 67 69 73 74 65 72 53 68 75 74 64 6F 77 6E 4E 6F 74 69 66 69 ss..╦.IoUnregisterShutdownNotifi 000003C0 63 61 74 69 6F 6E 00 00 DF 00 4B 65 44 65 6C 61 79 45 78 65 63 75 74 69 6F 6E 54 68 72 65 61 64 cation..▀.KeDelayExecutionThread 000003E0 00 00 F0 00 4B 65 49 6E 69 74 69 61 6C 69 7A 65 44 70 63 00 F4 00 4B 65 49 6E 69 74 69 61 6C 69 ..≡.KeInitializeDpc.⌠.KeInitiali 00000400 7A 65 4D 75 74 65 78 00 02 01 4B 65 51 75 65 72 79 53 79 73 74 65 6D 54 69 6D 65 00 0A 01 4B 65 zeMutex.☻☺KeQuerySystemTime.◙☺Ke 00000420 52 65 6C 65 61 73 65 4D 75 74 65 78 00 00 1F 01 4B 65 57 61 69 74 46 6F 72 53 69 6E 67 6C 65 4F ReleaseMutex..▼☺KeWaitForSingleO 00000440 62 6A 65 63 74 00 3A 01 4D 6D 4D 61 70 49 6F 53 70 61 63 65 00 00 41 01 4D 6D 55 6E 6D 61 70 49 bject.:☺MmMapIoSpace..A☺MmUnmapI 00000460 6F 53 70 61 63 65 00 00 8C 01 52 74 6C 41 70 70 65 6E 64 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 oSpace..î☺RtlAppendUnicodeString 00000480 54 6F 53 74 72 69 6E 67 00 00 8D 01 52 74 6C 41 70 70 65 6E 64 55 6E 69 63 6F 64 65 54 6F 53 74 ToString..ì☺RtlAppendUnicodeToSt 000004A0 72 69 6E 67 00 00 99 01 52 74 6C 43 6F 6E 76 65 72 74 4C 6F 6E 67 54 6F 4C 61 72 67 65 49 6E 74 ring..Ö☺RtlConvertLongToLargeInt 000004C0 65 67 65 72 00 00 B2 01 52 74 6C 45 78 74 65 6E 64 65 64 49 6E 74 65 67 65 72 4D 75 6C 74 69 70 eger..▓☺RtlExtendedIntegerMultip 000004E0 6C 79 00 00 B3 01 52 74 6C 45 78 74 65 6E 64 65 64 4C 61 72 67 65 49 6E 74 65 67 65 72 44 69 76 ly..│☺RtlExtendedLargeIntegerDiv 00000500 69 64 65 00 CE 01 52 74 6C 49 6E 69 74 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 D4 01 52 74 ide.╬☺RtlInitUnicodeString..╘☺Rt 00000520 6C 49 6E 74 65 67 65 72 54 6F 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 D5 01 52 74 6C 4C 61 72 lIntegerToUnicodeString.╒☺RtlLar 00000540 67 65 49 6E 74 65 67 65 72 41 64 64 00 00 DB 01 52 74 6C 4C 61 72 67 65 49 6E 74 65 67 65 72 53 geIntegerAdd..█☺RtlLargeIntegerS 00000560 75 62 74 72 61 63 74 00 EE 01 52 74 6C 51 75 65 72 79 52 65 67 69 73 74 72 79 56 61 6C 75 65 73 ubtract.ε☺RtlQueryRegistryValues 00000580 00 00 0A 02 52 74 6C 55 6E 77 69 6E 64 00 17 02 52 74 6C 57 72 69 74 65 52 65 67 69 73 74 72 79 ..◙☻RtlUnwind.↨☻RtlWriteRegistry 000005A0 56 61 6C 75 65 00 36 02 5A 77 43 6C 6F 73 65 00 44 02 5A 77 46 6C 75 73 68 4B 65 79 00 00 4B 02 Value.6☻ZwClose.D☻ZwFlushKey..K☻ 000005C0 5A 77 4F 70 65 6E 4B 65 79 00 5B 02 5F 65 78 63 65 70 74 5F 68 61 6E 64 6C 65 72 32 00 00 6E 74 ZwOpenKey.[☻_except_handler2..nt 000005E0 6F 73 6B 72 6E 6C 2E 65 78 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 oskrnl.exe......................