============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 08 76 00 00 00 00 00 00 00 00 00 00 C8 77 00 00 B8 76 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ◘v..........╚w..╕v.............. 00000020 00 00 00 00 00 00 00 00 58 79 00 00 76 77 00 00 8A 77 00 00 A2 77 00 00 BE 77 00 00 D6 77 00 00 ........Xy..vw..èw..ów..╛w..╓w.. 00000040 EE 77 00 00 0C 78 00 00 2C 78 00 00 4C 78 00 00 64 78 00 00 74 78 00 00 8C 78 00 00 9C 78 00 00 εw..♀x..,x..Lx..dx..tx..îx..£x.. 00000060 A6 78 00 00 BE 78 00 00 E0 78 00 00 EC 78 00 00 0C 79 00 00 18 79 00 00 2A 79 00 00 42 79 00 00 ªx..╛x..αx..∞x..♀y..↑y..*y..By.. 00000080 68 77 00 00 6E 79 00 00 7E 79 00 00 9A 79 00 00 AA 79 00 00 BC 79 00 00 DC 79 00 00 E6 79 00 00 hw..ny..~y..Üy..¬y..╝y..▄y..µy.. 000000A0 FE 79 00 00 0E 7A 00 00 26 7A 00 00 40 7A 00 00 60 7A 00 00 7E 7A 00 00 8E 7A 00 00 B0 7A 00 00 ■y..♫z..&z..@z..`z..~z..Äz..░z.. 000000C0 CA 7A 00 00 E8 7A 00 00 F4 7A 00 00 08 7B 00 00 24 7B 00 00 00 00 00 00 58 79 00 00 76 77 00 00 ╩z..Φz..⌠z..◘{..${......Xy..vw.. 000000E0 8A 77 00 00 A2 77 00 00 BE 77 00 00 D6 77 00 00 EE 77 00 00 0C 78 00 00 2C 78 00 00 4C 78 00 00 èw..ów..╛w..╓w..εw..♀x..,x..Lx.. 00000100 64 78 00 00 74 78 00 00 8C 78 00 00 9C 78 00 00 A6 78 00 00 BE 78 00 00 E0 78 00 00 EC 78 00 00 dx..tx..îx..£x..ªx..╛x..αx..∞x.. 00000120 0C 79 00 00 18 79 00 00 2A 79 00 00 42 79 00 00 68 77 00 00 6E 79 00 00 7E 79 00 00 9A 79 00 00 ♀y..↑y..*y..By..hw..ny..~y..Üy.. 00000140 AA 79 00 00 BC 79 00 00 DC 79 00 00 E6 79 00 00 FE 79 00 00 0E 7A 00 00 26 7A 00 00 40 7A 00 00 ¬y..╝y..▄y..µy..■y..♫z..&z..@z.. 00000160 60 7A 00 00 7E 7A 00 00 8E 7A 00 00 B0 7A 00 00 CA 7A 00 00 E8 7A 00 00 F4 7A 00 00 08 7B 00 00 `z..~z..Äz..░z..╩z..Φz..⌠z..◘{.. 00000180 24 7B 00 00 00 00 00 00 33 00 45 78 46 72 65 65 50 6F 6F 6C 00 00 CB 01 52 74 6C 43 6F 6D 70 61 ${......3.ExFreePool..╦☺RtlCompa 000001A0 72 65 4D 65 6D 6F 72 79 00 00 2D 00 45 78 41 6C 6C 6F 63 61 74 65 50 6F 6F 6C 57 69 74 68 54 61 reMemory..-.ExAllocatePoolWithTa 000001C0 67 00 42 00 45 78 49 6E 74 65 72 6C 6F 63 6B 65 64 50 6F 70 45 6E 74 72 79 4C 69 73 74 00 C5 02 g.B.ExInterlockedPopEntryList.┼☻ 000001E0 6D 65 6D 73 65 74 00 00 6E 74 6F 73 6B 72 6E 6C 2E 65 78 65 00 00 1B 01 4B 65 49 6E 69 74 69 61 memset..ntoskrnl.exe..←☺KeInitia 00000200 6C 69 7A 65 53 70 69 6E 4C 6F 63 6B 00 00 43 00 45 78 49 6E 74 65 72 6C 6F 63 6B 65 64 50 75 73 lizeSpinLock..C.ExInterlockedPus 00000220 68 45 6E 74 72 79 4C 69 73 74 00 00 D2 01 52 74 6C 43 6F 6E 76 65 72 74 55 6C 6F 6E 67 54 6F 4C hEntryList..╥☺RtlConvertUlongToL 00000240 61 72 67 65 49 6E 74 65 67 65 72 00 E3 00 49 6F 53 65 74 48 61 72 64 45 72 72 6F 72 4F 72 56 65 argeInteger.π.IoSetHardErrorOrVe 00000260 72 69 66 79 44 65 76 69 63 65 00 00 08 02 52 74 6C 49 6E 69 74 55 6E 69 63 6F 64 65 53 74 72 69 rifyDevice..◘☻RtlInitUnicodeStri 00000280 6E 67 00 00 A3 00 49 6F 41 6C 6C 6F 63 61 74 65 49 72 70 00 FD 01 52 74 6C 46 72 65 65 55 6E 69 ng..ú.IoAllocateIrp.²☺RtlFreeUni 000002A0 63 6F 64 65 53 74 72 69 6E 67 00 00 07 02 52 74 6C 49 6E 69 74 53 74 72 69 6E 67 00 71 02 5A 77 codeString..•☻RtlInitString.q☻Zw 000002C0 43 6C 6F 73 65 00 3B 00 45 78 49 6E 74 65 72 6C 6F 63 6B 65 64 41 64 64 55 6C 6F 6E 67 00 48 00 Close.;.ExInterlockedAddUlong.H. 000002E0 45 78 4D 69 70 73 49 6E 74 65 72 6C 6F 63 6B 65 64 44 65 63 72 65 6D 65 6E 74 4C 6F 6E 67 00 00 ExMipsInterlockedDecrementLong.. 00000300 8C 02 5A 77 4F 70 65 6E 4B 65 79 00 C6 00 49 6F 47 65 74 43 6F 6E 66 69 67 75 72 61 74 69 6F 6E î☻ZwOpenKey.╞.IoGetConfiguration 00000320 49 6E 66 6F 72 6D 61 74 69 6F 6E 00 C4 00 49 6F 46 72 65 65 49 72 70 00 B5 00 49 6F 43 72 65 61 Information.─.IoFreeIrp.╡.IoCrea 00000340 74 65 44 65 76 69 63 65 00 00 B8 00 49 6F 43 72 65 61 74 65 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B teDevice..╕.IoCreateSymbolicLink 00000360 00 00 F7 00 49 6F 66 43 6F 6D 70 6C 65 74 65 52 65 71 75 65 73 74 00 00 0F 02 52 74 6C 4C 61 72 ..≈.IofCompleteRequest..☼☻RtlLar 00000380 67 65 49 6E 74 65 67 65 72 41 64 64 00 00 F6 00 49 6F 66 43 61 6C 6C 44 72 69 76 65 72 00 C8 00 geIntegerAdd..÷.IofCallDriver.╚. 000003A0 49 6F 47 65 74 44 65 76 69 63 65 4F 62 6A 65 63 74 50 6F 69 6E 74 65 72 00 00 9F 02 5A 77 53 65 IoGetDeviceObjectPointer..ƒ☻ZwSe 000003C0 74 56 61 6C 75 65 4B 65 79 00 BC 00 49 6F 44 65 6C 65 74 65 44 65 76 69 63 65 00 00 BE 01 52 74 tValueKey.╝.IoDeleteDevice..╛☺Rt 000003E0 6C 41 6E 73 69 53 74 72 69 6E 67 54 6F 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 C8 02 73 70 lAnsiStringToUnicodeString..╚☻sp 00000400 72 69 6E 74 66 00 A8 01 4F 62 66 44 65 72 65 66 65 72 65 6E 63 65 4F 62 6A 65 63 74 00 00 70 01 rintf.¿☺ObfDereferenceObject..p☺ 00000420 4D 6D 55 6E 6C 6F 63 6B 50 61 67 65 73 00 4E 01 4B 65 57 61 69 74 46 6F 72 53 69 6E 67 6C 65 4F MmUnlockPages.N☺KeWaitForSingleO 00000440 62 6A 65 63 74 00 05 01 4B 65 44 65 6C 61 79 45 78 65 63 75 74 69 6F 6E 54 68 72 65 61 64 00 00 bject.♣☺KeDelayExecutionThread.. 00000460 A9 00 49 6F 42 75 69 6C 64 44 65 76 69 63 65 49 6F 43 6F 6E 74 72 6F 6C 52 65 71 75 65 73 74 00 ⌐.IoBuildDeviceIoControlRequest. 00000480 EC 01 52 74 6C 45 78 74 65 6E 64 65 64 49 6E 74 65 67 65 72 4D 75 6C 74 69 70 6C 79 00 00 A4 00 ∞☺RtlExtendedIntegerMultiply..ñ. 000004A0 49 6F 41 6C 6C 6F 63 61 74 65 4D 64 6C 00 4A 00 45 78 4D 69 70 73 49 6E 74 65 72 6C 6F 63 6B 65 IoAllocateMdl.J.ExMipsInterlocke 000004C0 64 49 6E 63 72 65 6D 65 6E 74 4C 6F 6E 67 00 00 A2 00 49 6F 41 6C 6C 6F 63 61 74 65 45 72 72 6F dIncrementLong..ó.IoAllocateErro 000004E0 72 4C 6F 67 45 6E 74 72 79 00 A7 01 4F 62 52 65 66 65 72 65 6E 63 65 4F 62 6A 65 63 74 42 79 50 rLogEntry.º☺ObReferenceObjectByP 00000500 6F 69 6E 74 65 72 00 00 C5 00 49 6F 46 72 65 65 4D 64 6C 00 15 01 4B 65 49 6E 69 74 69 61 6C 69 ointer..┼.IoFreeMdl.§☺KeInitiali 00000520 7A 65 45 76 65 6E 74 00 59 01 4D 6D 42 75 69 6C 64 4D 64 6C 46 6F 72 4E 6F 6E 50 61 67 65 64 50 zeEvent.Y☺MmBuildMdlForNonPagedP 00000540 6F 6F 6C 00 F3 00 49 6F 57 72 69 74 65 45 72 72 6F 72 4C 6F 67 45 6E 74 72 79 00 00 00 00 00 00 ool.≤.IoWriteErrorLogEntry......