==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  5C 00 4E 00 74 00 66 00  73 00 00 00 4E 00 74 00  66 00 73 00 44 00 69 00  73 00 61 00 62 00 6C 00  \.N.t.f.s...N.t.f.s.D.i.s.a.b.l.
00000020  65 00 38 00 64 00 6F 00  74 00 33 00 4E 00 61 00  6D 00 65 00 43 00 72 00  65 00 61 00 74 00 69 00  e.8.d.o.t.3.N.a.m.e.C.r.e.a.t.i.
00000040  6F 00 6E 00 00 00 C7 05  48 27 02 00 00 68 C4 61  83 EC 18 C7 05 4C 27 02  00 08 00 00 00 8D 44 24  o.n...╟♣H'☻..h─aâ∞↑╟♣L'☻.◘...ìD$
00000060  10 53 56 57 55 68 C0 B7  05 00 50 8B 2D 68 02 02  00 FF D5 8D 4C 24 14 8D  44 24 20 8B 74 24 2C 51  ►SVWUh└╖♣.Pï-h☻☻. ╒ìL$¶ìD$ ït$,Q
00000080  6A 00 6A 00 6A 08 50 6A  00 56 FF 15 40 02 02 00  85 C0 0F 8C B4 02 00 00  C7 46 38 58 D5 02 00 C7  j.j.j◘Pj.V §@☻☻.à└☼î┤☻..╟F8X╒☻.╟
000000A0  46 40 AD 95 02 00 C7 46  44 E7 51 01 00 C7 46 48  57 08 01 00 C7 46 4C 26  C0 04 00 C7 46 50 7F F1  F@¡ò☻.╟FDτQ☺.╟FHW◘☺.╟FL&└♦.╟FP⌂±
000000C0  02 00 C7 46 54 7A 08 05  00 C7 46 58 B6 09 05 00  C7 46 5C 78 7E 03 00 C7  46 60 42 A7 03 00 C7 46  ☻.╟FTz◘♣.╟FX╢○♣.╟F\x~♥.╟F`Bº♥.╟F
000000E0  64 4B 8D 05 00 C7 46 68  05 3A 02 00 C7 46 6C 43  8A 02 00 C7 46 70 6D B0  04 00 C7 46 7C AC 32 03  dKì♣.╟Fh♣:☻.╟FlCè☻.╟Fpm░♦.╟F|¼2♥
00000100  00 C7 86 80 00 00 00 17  9F 02 00 C7 86 88 00 00  00 6B 81 05 00 C7 86 8C  00 00 00 A7 82 05 00 A1  .╟åÇ...↨ƒ☻.╟åê...kü♣.╟åî...ºé♣.í
00000120  C4 01 02 00 8B 0D C8 01  02 00 C7 46 78 60 F2 01  00 C7 46 28 B0 27 02 00  A3 B8 27 02 00 89 0D BC  ─☺☻.ï♪╚☺☻.╟Fx`≥☺.╟F(░'☻.ú╕'☻.ë♪╝
00000140  27 02 00 C7 05 B0 27 02  00 38 00 00 00 C7 05 B4  27 02 00 02 32 03 00 C7  05 C0 27 02 00 88 72 02  '☻.╟♣░'☻.8...╟♣┤'☻.☻2♥.╟♣└'☻.êr☻
00000160  00 C7 05 C4 27 02 00 4F  ED 02 00 C7 05 C8 27 02  00 34 2E 03 00 33 DB 56  BF 01 00 00 00 89 1D D8  .╟♣─'☻.Oφ☻.╟♣╚'☻.4.♥.3█V┐☺...ë↔╪
00000180  27 02 00 C7 05 CC 27 02  00 4C 2F 03 00 C7 05 D0  27 02 00 30 43 05 00 C7  05 D4 27 02 00 B0 44 05  '☻.╟♣╠'☻.L/♥.╟♣╨'☻.0C♣.╟♣╘'☻.░D♣
000001A0  00 E8 E1 E1 FE FF 53 8B  35 C4 02 02 00 57 89 3D  90 27 02 00 68 9C 27 02  00 89 1D 98 27 02 00 FF  .Φßß■ Sï5─☻☻.Wë=É'☻.h£'☻.ë↔ÿ'☻. 
000001C0  D6 53 89 3D 60 27 02 00  57 89 1D 68 27 02 00 68  6C 27 02 00 FF D6 B8 80  27 02 00 88 1D 88 27 02  ╓Së=`'☻.Wë↔h'☻.hl'☻. ╓╕Ç'☻.ê↔ê'☻
000001E0  00 A3 84 27 02 00 A3 80  27 02 00 FF 15 CC 01 02  00 85 C0 0F 84 5D 01 00  00 C7 05 F0 21 02 00 E8  .úä'☻.úÇ'☻. §╠☺☻.à└☼ä]☺..╟♣≡!☻.Φ
00000200  03 00 00 C7 05 E8 27 02  00 F4 01 00 00 3B C7 0F  84 55 01 00 00 89 1D 40  27 02 00 68 4E 74 66 72  ♥..╟♣Φ'☻.⌠☺..;╟☼äU☺..ë↔@'☻.hNtfr
00000220  A1 3C 26 02 00 C1 E0 02  50 6A 00 FF 15 B4 02 02  00 A3 44 26 02 00 85 C0  75 08 6A 24 FF 15 D0 01  í<&☻.┴α☻Pj. §┤☻☻.úD&☻.à└u◘j$ §╨☺
00000240  02 00 8B 0D 3C 26 02 00  8B 3D 44 26 02 00 C1 E1  02 33 C0 C1 E9 02 F3 AB  FF 74 24 14 FF 15 D4 01  ☻.ï♪<&☻.ï=D&☻.┴ß☻3└┴Θ☻≤½ t$¶ §╘☺
00000260  02 00 E8 AE 98 FE FF 68  A8 1F 02 00 68 F0 27 02  00 FF D5 8D 4C 24 10 8D  44 24 18 C7 44 24 1C CC  ☻.Φ«ÿ■ h¿▼☻.h≡'☻. ╒ìL$►ìD$↑╟D$∟╠
00000280  B7 05 00 66 C7 44 24 18  38 00 66 C7 44 24 1A 3A  00 51 50 E8 5E 01 00 00  85 C0 7C 07 83 7C 24 10  ╖♣.f╟D$↑8.f╟D$→:.QPΦ^☺..à└|•â|$►
000002A0  00 75 07 80 0D 3F 27 02  00 10 33 FF 68 00 27 02  00 89 3D 38 27 02 00 89  3D 2C 27 02 00 C7 05 34  .u•Ç♪?'☻.►3 h.'☻.ë=8'☻.ë=,'☻.╟♣4
000002C0  27 02 00 F5 08 03 00 FF  15 D8 01 02 00 57 68 AE  63 01 00 68 E0 26 02 00  FF 15 DC 01 02 00 68 28  '☻.⌡◘♥. §╪☺☻.Wh«c☺.hα&☻. §▄☺☻.h(
000002E0  27 02 00 FF 15 10 02 02  00 68 4E 74 66 78 8B 1D  CC 00 02 00 68 00 00 01  00 57 FF D3 68 4E 74 66  '☻. §►☻☻.hNtfxï↔╠.☻.h..☺.W ╙hNtf
00000300  78 A3 78 21 02 00 68 00  00 01 00 57 FF D3 68 4E  74 66 78 A3 7C 21 02 00  68 00 00 01 00 57 FF D3  xúx!☻.h..☺.W ╙hNtfxú|!☻.h..☺.W ╙
00000320  57 A3 80 21 02 00 6A 01  89 3D 08 28 02 00 C7 05  00 28 02 00 01 00 00 00  68 0C 28 02 00 FF D6 68  WúÇ!☻.j☺ë=◘(☻.╟♣.(☻.☺...h♀(☻. ╓h
00000340  30 28 02 00 FF 15 14 02  02 00 33 C0 5D 5F 5E 5B  83 C4 18 C2 08 00 C7 05  F0 21 02 00 E8 03 00 00  0(☻. §¶☻☻.3└]_^[â─↑┬◘.╟♣≡!☻.Φ♥..
00000360  C7 05 E8 27 02 00 F4 01  00 00 C7 05 40 27 02 00  00 00 00 00 E9 A2 FE FF  FF CC 5C 00 52 00 65 00  ╟♣Φ'☻.⌠☺..╟♣@'☻.....Θó■  ╠\.R.e.
00000380  67 00 69 00 73 00 74 00  72 00 79 00 5C 00 4D 00  61 00 63 00 68 00 69 00  6E 00 65 00 5C 00 53 00  g.i.s.t.r.y.\.M.a.c.h.i.n.e.\.S.
000003A0  79 00 73 00 74 00 65 00  6D 00 5C 00 43 00 75 00  72 00 72 00 65 00 6E 00  74 00 43 00 6F 00 6E 00  y.s.t.e.m.\.C.u.r.r.e.n.t.C.o.n.
000003C0  74 00 72 00 6F 00 6C 00  53 00 65 00 74 00 5C 00  43 00 6F 00 6E 00 74 00  72 00 6F 00 6C 00 5C 00  t.r.o.l.S.e.t.\.C.o.n.t.r.o.l.\.
000003E0  46 00 69 00 6C 00 65 00  53 00 79 00 73 00 74 00  65 00 6D 00 00 00 55 8B  EC 81 EC 88 00 00 00 66  F.i.l.e.S.y.s.t.e.m...Uï∞ü∞ê...f
00000400  C7 45 EC 7A 00 C7 45 F0  3A BB 05 00 C7 45 D4 18  00 00 00 C7 45 E0 40 00  00 00 53 8D 45 EC 66 C7  ╟E∞z.╟E≡:╗♣.╟E╘↑...╟Eα@...SìE∞f╟
00000420  45 EE 7C 00 56 57 33 F6  8D 4D D4 51 89 75 D8 68  19 00 02 00 8D 55 F8 52  89 45 DC 89 75 E4 89 75  Eε|.VW3÷ìM╘Qëu╪h↓.☻.ìU°RëE▄ëuΣëu
00000440  E8 FF 15 B8 01 02 00 85  C0 7C 5A BB 5C 00 00 00  8D B5 78 FF FF FF 8B 7D  08 8D 45 F4 50 53 56 6A  Φ §╕☺☻.à└|Z╗\...ì╡x   ï}◘ìE⌠PSVj
00000460  01 57 FF 75 F8 FF 15 BC  01 02 00 89 45 FC 3D 05  00 00 80 75 39 8D 85 78  FF FF FF 3B F0 74 07 56  ☺W u° §╝☺☻.ëEⁿ=♣..Çu9ìàx   ;≡t•V
00000480  FF 15 7C 02 02 00 81 C3  00 01 00 00 68 4E 74 66  78 53 6A 01 FF 15 B4 02  02 00 8B F0 85 F6 75 B9   §|☻☻.ü├.☺..hNtfxSj☺ §┤☻☻.ï≡à÷u╣
000004A0  B8 17 00 00 C0 5F 5E 5B  8B E5 5D C2 08 00 FF 75  F8 FF 15 C0 01 02 00 83  7D FC 00 7C 11 83 7E 0C  ╕↨..└_^[ïσ]┬◘. u° §└☺☻.â}ⁿ.|◄â~♀
000004C0  00 74 21 8B 46 08 8B 55  0C 8B 0C 30 89 0A 8D 85  78 FF FF FF 3B F0 74 07  56 FF 15 7C 02 02 00 8B  .t!ïF◘ïU♀ï♀0ë◙ìàx   ;≡t•V §|☻☻.ï
000004E0  45 FC EB C1 C7 45 FC 34  00 00 C0 EB E1 CC CC CC  F0 BC 04 00 00 00 00 00  00 00 00 00 50 C0 04 00  Eⁿδ┴╟Eⁿ4..└δß╠╠╠≡╝♦.........P└♦.
00000500  C0 00 01 00 38 C0 04 00  00 00 00 00 00 00 00 00  D8 D4 04 00 08 04 01 00  00 00 00 00 00 00 00 00  └.☺.8└♦.........╪╘♦.◘♦☺.........
00000520  00 00 00 00 00 00 00 00  00 00 00 00 CC CC CC CC  60 C0 04 00 74 C0 04 00  A0 C0 04 00 C2 C0 04 00  ............╠╠╠╠`└♦.t└♦.á└♦.┬└♦.
00000540  DE C0 04 00 00 C1 04 00  18 C1 04 00 30 C1 04 00  4A C1 04 00 6A C1 04 00  8C C1 04 00 A0 C1 04 00  ▐└♦..┴♦.↑┴♦.0┴♦.J┴♦.j┴♦.î┴♦.á┴♦.
00000560  BE C1 04 00 D0 C1 04 00  E0 C1 04 00 F0 C1 04 00  12 C2 04 00 32 C2 04 00  46 C2 04 00 62 C2 04 00  ╛┴♦.╨┴♦.α┴♦.≡┴♦.↕┬♦.2┬♦.F┬♦.b┬♦.
00000580  80 C2 04 00 9E C2 04 00  B8 C2 04 00 E0 C2 04 00  00 C3 04 00 18 C3 04 00  34 C3 04 00 60 C3 04 00  Ç┬♦.₧┬♦.╕┬♦.α┬♦..├♦.↑├♦.4├♦.`├♦.
000005A0  80 C3 04 00 A0 C3 04 00  B8 C3 04 00 D4 C3 04 00  F0 C3 04 00 08 C4 04 00  28 C4 04 00 50 C4 04 00  Ç├♦.á├♦.╕├♦.╘├♦.≡├♦.◘─♦.(─♦.P─♦.
000005C0  70 C4 04 00 80 C4 04 00  96 C4 04 00 AA C4 04 00  C2 C4 04 00 DC C4 04 00  FE C4 04 00 20 C5 04 00  p─♦.Ç─♦.û─♦.¬─♦.┬─♦.▄─♦.■─♦. ┼♦.
000005E0  40 C5 04 00 60 C5 04 00  7E C5 04 00 9E C5 04 00  C0 C5 04 00 DE C5 04 00  F4 C5 04 00 0C C6 04 00  @┼♦.`┼♦.~┼♦.₧┼♦.└┼♦.▐┼♦.⌠┼♦.♀╞♦.
00000600  24 C6 04 00 40 C6 04 00  62 C6 04 00 90 C6 04 00  B0 C6 04 00 D0 C6 04 00  DC C6 04 00 00 C7 04 00  $╞♦.@╞♦.b╞♦.É╞♦.░╞♦.╨╞♦.▄╞♦..╟♦.
00000620  1A C7 04 00 26 C7 04 00  32 C7 04 00 40 C7 04 00  52 C7 04 00 5C C7 04 00  70 C7 04 00 84 C7 04 00  →╟♦.&╟♦.2╟♦.@╟♦.R╟♦.\╟♦.p╟♦.ä╟♦.
00000640  98 C7 04 00 A6 C7 04 00  BE C7 04 00 D8 C7 04 00  EC C7 04 00 00 C8 04 00  20 C8 04 00 3C C8 04 00  ÿ╟♦.ª╟♦.╛╟♦.╪╟♦.∞╟♦..╚♦. ╚♦.<╚♦.
00000660  5C C8 04 00 72 C8 04 00  98 C8 04 00 AC C8 04 00  C0 C8 04 00 D6 C8 04 00  F4 C8 04 00 14 C9 04 00  \╚♦.r╚♦.ÿ╚♦.¼╚♦.└╚♦.╓╚♦.⌠╚♦.¶╔♦.
00000680  2C C9 04 00 44 C9 04 00  60 C9 04 00 72 C9 04 00  88 C9 04 00 A0 C9 04 00  BC C9 04 00 E0 C9 04 00  ,╔♦.D╔♦.`╔♦.r╔♦.ê╔♦.á╔♦.╝╔♦.α╔♦.
000006A0  F4 C9 04 00 10 CA 04 00  20 CA 04 00 40 CA 04 00  54 CA 04 00 70 CA 04 00  92 CA 04 00 A0 CA 04 00  ⌠╔♦.►╩♦. ╩♦.@╩♦.T╩♦.p╩♦.Æ╩♦.á╩♦.
000006C0  B4 CA 04 00 D0 CA 04 00  00 CB 04 00 20 CB 04 00  38 CB 04 00 50 CB 04 00  70 CB 04 00 88 CB 04 00  ┤╩♦.╨╩♦..╦♦. ╦♦.8╦♦.P╦♦.p╦♦.ê╦♦.
000006E0  A2 CB 04 00 B4 CB 04 00  D0 CB 04 00 E6 CB 04 00  F8 CB 04 00 12 CC 04 00  28 CC 04 00 48 CC 04 00  ó╦♦.┤╦♦.╨╦♦.µ╦♦.°╦♦.↕╠♦.(╠♦.H╠♦.
00000700  60 CC 04 00 80 CC 04 00  9C CC 04 00 AA CC 04 00  C4 CC 04 00 E8 CC 04 00  00 CD 04 00 10 CD 04 00  `╠♦.Ç╠♦.£╠♦.¬╠♦.─╠♦.Φ╠♦..═♦.►═♦.
00000720  30 CD 04 00 40 CD 04 00  58 CD 04 00 72 CD 04 00  8E CD 04 00 AA CD 04 00  BE CD 04 00 D8 CD 04 00  0═♦.@═♦.X═♦.r═♦.Ä═♦.¬═♦.╛═♦.╪═♦.
00000740  EE CD 04 00 10 CE 04 00  24 CE 04 00 3A CE 04 00  50 CE 04 00 64 CE 04 00  70 CE 04 00 84 CE 04 00  ε═♦.►╬♦.$╬♦.:╬♦.P╬♦.d╬♦.p╬♦.ä╬♦.
00000760  94 CE 04 00 B0 CE 04 00  C0 CE 04 00 D0 CE 04 00  F0 CE 04 00 08 CF 04 00  1C CF 04 00 38 CF 04 00  ö╬♦.░╬♦.└╬♦.╨╬♦.≡╬♦.◘╧♦.∟╧♦.8╧♦.
00000780  4E CF 04 00 64 CF 04 00  80 CF 04 00 94 CF 04 00  A8 CF 04 00 CA CF 04 00  E0 CF 04 00 F8 CF 04 00  N╧♦.d╧♦.Ç╧♦.ö╧♦.¿╧♦.╩╧♦.α╧♦.°╧♦.
000007A0  0C D0 04 00 24 D0 04 00  3A D0 04 00 56 D0 04 00  78 D0 04 00 8E D0 04 00  A4 D0 04 00 BC D0 04 00  ♀╨♦.$╨♦.:╨♦.V╨♦.x╨♦.Ä╨♦.ñ╨♦.╝╨♦.
000007C0  D8 D0 04 00 F4 D0 04 00  08 D1 04 00 20 D1 04 00  2E D1 04 00 44 D1 04 00  5C D1 04 00 74 D1 04 00  ╪╨♦.⌠╨♦.◘╤♦. ╤♦..╤♦.D╤♦.\╤♦.t╤♦.
000007E0  82 D1 04 00 96 D1 04 00  A4 D1 04 00 B8 D1 04 00  C4 D1 04 00 E0 D1 04 00  F8 D1 04 00 10 D2 04 00  é╤♦.û╤♦.ñ╤♦.╕╤♦.─╤♦.α╤♦.°╤♦.►╥♦.
00000800  2A D2 04 00 42 D2 04 00  56 D2 04 00 72 D2 04 00  8E D2 04 00 A6 D2 04 00  BA D2 04 00 CA D2 04 00  *╥♦.B╥♦.V╥♦.r╥♦.Ä╥♦.ª╥♦.║╥♦.╩╥♦.
00000820  E0 D2 04 00 EE D2 04 00  00 D3 04 00 10 D3 04 00  2C D3 04 00 44 D3 04 00  60 D3 04 00 80 D3 04 00  α╥♦.ε╥♦..╙♦.►╙♦.,╙♦.D╙♦.`╙♦.Ç╙♦.
00000840  98 D3 04 00 C0 D3 04 00  DC D3 04 00 F0 D3 04 00  0C D4 04 00 28 D4 04 00  38 D4 04 00 50 D4 04 00  ÿ╙♦.└╙♦.▄╙♦.≡╙♦.♀╘♦.(╘♦.8╘♦.P╘♦.
00000860  60 D4 04 00 78 D4 04 00  88 D4 04 00 96 D4 04 00  B4 D4 04 00 00 00 00 00  E0 D4 04 00 FA D4 04 00  `╘♦.x╘♦.ê╘♦.û╘♦.┤╘♦.....α╘♦.·╘♦.
00000880  0E D5 04 00 28 D5 04 00  3E D5 04 00 00 00 00 00  6E 74 6F 73 6B 72 6E 6C  2E 65 78 65 00 00 CC CC  ♫╒♦.(╒♦.>╒♦.....ntoskrnl.exe..╠╠
000008A0  29 02 52 74 6C 43 6F 6D  70 61 72 65 53 74 72 69  6E 67 00 00 67 02 52 74  6C 49 6E 69 74 53 74 72  )☻RtlCompareString..g☻RtlInitStr
000008C0  69 6E 67 00 CC CC CC CC  CC CC CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  ing.╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠
000008E0  27 00 45 78 41 63 71 75  69 72 65 52 65 73 6F 75  72 63 65 45 78 63 6C 75  73 69 76 65 4C 69 74 65  '.ExAcquireResourceExclusiveLite
00000900  00 00 6E 00 46 73 52 74  6C 41 6C 6C 6F 63 61 74  65 50 6F 6F 6C 57 69 74  68 54 61 67 00 00 27 02  ..n.FsRtlAllocatePoolWithTag..'☻
00000920  52 74 6C 43 6F 6D 70 61  72 65 4D 65 6D 6F 72 79  00 00 CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  RtlCompareMemory..╠╠╠╠╠╠╠╠╠╠╠╠╠╠
00000940  4D 02 52 74 6C 46 69 6C  6C 4D 65 6D 6F 72 79 55  6C 6F 6E 67 00 00 CC CC  1E 00 43 63 55 6E 70 69  M☻RtlFillMemoryUlong..╠╠▲.CcUnpi
00000960  6E 44 61 74 61 46 6F 72  54 68 72 65 61 64 00 00  C3 02 53 65 43 61 70 74  75 72 65 53 75 62 6A 65  nDataForThread..├☻SeCaptureSubje
00000980  63 74 43 6F 6E 74 65 78  74 00 7C 00 46 73 52 74  6C 44 6F 65 73 4E 61 6D  65 43 6F 6E 74 61 69 6E  ctContext.|.FsRtlDoesNameContain
000009A0  57 69 6C 64 43 61 72 64  73 00 98 00 46 73 52 74  6C 4E 6F 74 69 66 79 46  75 6C 6C 43 68 61 6E 67  WildCards.ÿ.FsRtlNotifyFullChang
000009C0  65 44 69 72 65 63 74 6F  72 79 00 00 E9 00 49 6F  47 65 74 54 6F 70 4C 65  76 65 6C 49 72 70 00 00  eDirectory..Θ.IoGetTopLevelIrp..
000009E0  28 00 45 78 41 63 71 75  69 72 65 52 65 73 6F 75  72 63 65 53 68 61 72 65  64 4C 69 74 65 00 19 00  (.ExAcquireResourceSharedLite.↓.
00000A00  43 63 53 65 74 46 69 6C  65 53 69 7A 65 73 00 00  AA 02 52 74 6C 55 6E 77  69 6E 64 00 CC CC CC CC  CcSetFileSizes..¬☻RtlUnwind.╠╠╠╠
00000A20  03 00 43 63 44 65 66 65  72 57 72 69 74 65 00 00  2A 00 45 78 41 63 71 75  69 72 65 53 68 61 72 65  ♥.CcDeferWrite..*.ExAcquireShare
00000A40  64 57 61 69 74 46 6F 72  45 78 63 6C 75 73 69 76  65 00 73 00 46 73 52 74  6C 43 68 65 63 6B 4C 6F  dWaitForExclusive.s.FsRtlCheckLo
00000A60  63 6B 46 6F 72 57 72 69  74 65 41 63 63 65 73 73  00 00 11 00 43 63 50 72  65 70 61 72 65 4D 64 6C  ckForWriteAccess..◄.CcPrepareMdl
00000A80  57 72 69 74 65 00 E7 00  49 6F 47 65 74 52 65 6C  61 74 65 64 44 65 76 69  63 65 4F 62 6A 65 63 74  Write.τ.IoGetRelatedDeviceObject
00000AA0  00 00 4D 00 45 78 51 75  65 72 79 50 6F 6F 6C 42  6C 6F 63 6B 53 69 7A 65  00 00 CC CC CC CC CC CC  ..M.ExQueryPoolBlockSize..╠╠╠╠╠╠
00000AC0  55 00 45 78 52 65 69 6E  69 74 69 61 6C 69 7A 65  52 65 73 6F 75 72 63 65  4C 69 74 65 00 00 D4 02  U.ExReinitializeResourceLite..╘☻
00000AE0  53 65 52 65 6C 65 61 73  65 53 75 62 6A 65 63 74  43 6F 6E 74 65 78 74 00  85 00 46 73 52 74 6C 49  SeReleaseSubjectContext.à.FsRtlI
00000B00  6E 69 74 69 61 6C 69 7A  65 46 69 6C 65 4C 6F 63  6B 00 CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  nitializeFileLock.╠╠╠╠╠╠╠╠╠╠╠╠╠╠
00000B20  AD 00 46 73 52 74 6C 55  6E 69 6E 69 74 69 61 6C  69 7A 65 46 69 6C 65 4C  6F 63 6B 00 CC CC CC CC  ¡.FsRtlUninitializeFileLock.╠╠╠╠
00000B40  88 00 46 73 52 74 6C 49  6E 69 74 69 61 6C 69 7A  65 4F 70 6C 6F 63 6B 00  B0 00 46 73 52 74 6C 55  ê.FsRtlInitializeOplock.░.FsRtlU
00000B60  6E 69 6E 69 74 69 61 6C  69 7A 65 4F 70 6C 6F 63  6B 00 CC CC 44 02 52 74  6C 45 6E 75 6D 65 72 61  ninitializeOplock.╠╠D☻RtlEnumera
00000B80  74 65 47 65 6E 65 72 69  63 54 61 62 6C 65 57 69  74 68 6F 75 74 53 70 6C  61 79 69 6E 67 00 CC CC  teGenericTableWithoutSplaying.╠╠
00000BA0  6D 02 52 74 6C 49 6E 73  65 72 74 45 6C 65 6D 65  6E 74 47 65 6E 65 72 69  63 54 61 62 6C 65 00 00  m☻RtlInsertElementGenericTable..
00000BC0  9C 00 46 73 52 74 6C 4E  6F 74 69 66 79 55 6E 69  6E 69 74 69 61 6C 69 7A  65 53 79 6E 63 00 CC CC  £.FsRtlNotifyUninitializeSync.╠╠
00000BE0  D5 00 49 6F 44 65 6C 65  74 65 44 65 76 69 63 65  00 00 CC CC CC CC CC CC  6A 02 52 74 6C 49 6E 69  ╒.IoDeleteDevice..╠╠╠╠╠╠j☻RtlIni
00000C00  74 69 61 6C 69 7A 65 47  65 6E 65 72 69 63 54 61  62 6C 65 00 9A 00 46 73  52 74 6C 4E 6F 74 69 66  tializeGenericTable.Ü.FsRtlNotif
00000C20  79 49 6E 69 74 69 61 6C  69 7A 65 53 79 6E 63 00  A2 01 4D 6D 49 73 54 68  69 73 41 6E 4E 74 41 73  yInitializeSync.ó☺MmIsThisAnNtAs
00000C40  53 79 73 74 65 6D 00 00  C4 00 49 6F 42 75 69 6C  64 53 79 6E 63 68 72 6F  6E 6F 75 73 46 73 64 52  System..─.IoBuildSynchronousFsdR
00000C60  65 71 75 65 73 74 00 00  DA 02 53 65 56 61 6C 69  64 53 65 63 75 72 69 74  79 44 65 73 63 72 69 70  equest..┌☻SeValidSecurityDescrip
00000C80  74 6F 72 00 CC CC CC CC  CC CC CC CC CC CC CC CC  CC 02 53 65 4C 6F 63 6B  53 75 62 6A 65 63 74 43  tor.╠╠╠╠╠╠╠╠╠╠╠╠╠☻SeLockSubjectC
00000CA0  6F 6E 74 65 78 74 00 00  CC CC CC CC CC CC CC CC  BE 02 53 65 41 63 63 65  73 73 43 68 65 63 6B 00  ontext..╠╠╠╠╠╠╠╠╛☻SeAccessCheck.
00000CC0  BF 02 53 65 41 70 70 65  6E 64 50 72 69 76 69 6C  65 67 65 73 00 00 CA 02  53 65 46 72 65 65 50 72  ┐☻SeAppendPrivileges..╩☻SeFreePr
00000CE0  69 76 69 6C 65 67 65 73  00 00 C1 02 53 65 41 75  64 69 74 69 6E 67 46 69  6C 65 45 76 65 6E 74 73  ivileges..┴☻SeAuditingFileEvents
00000D00  00 00 32 02 52 74 6C 43  6F 70 79 55 6E 69 63 6F  64 65 53 74 72 69 6E 67  00 00 CC CC 1C 02 52 74  ..2☻RtlCopyUnicodeString..╠╠∟☻Rt
00000D20  6C 41 70 70 65 6E 64 55  6E 69 63 6F 64 65 53 74  72 69 6E 67 54 6F 53 74  72 69 6E 67 00 00 CD 02  lAppendUnicodeStringToString..═☻
00000D40  53 65 4F 70 65 6E 4F 62  6A 65 63 74 41 75 64 69  74 41 6C 61 72 6D 00 00  CC CC CC CC CC CC CC CC  SeOpenObjectAuditAlarm..╠╠╠╠╠╠╠╠
00000D60  D9 02 53 65 55 6E 6C 6F  63 6B 53 75 62 6A 65 63  74 43 6F 6E 74 65 78 74  00 00 CC CC CC CC CC CC  ┘☻SeUnlockSubjectContext..╠╠╠╠╠╠
00000D80  D2 02 53 65 51 75 65 72  79 53 65 63 75 72 69 74  79 44 65 73 63 72 69 70  74 6F 72 49 6E 66 6F 00  ╥☻SeQuerySecurityDescriptorInfo.
00000DA0  D5 02 53 65 53 65 74 53  65 63 75 72 69 74 79 44  65 73 63 72 69 70 74 6F  72 49 6E 66 6F 00 E5 00  ╒☻SeSetSecurityDescriptorInfo.σ.
00000DC0  49 6F 47 65 74 46 69 6C  65 4F 62 6A 65 63 74 47  65 6E 65 72 69 63 4D 61  70 70 69 6E 67 00 C0 02  IoGetFileObjectGenericMapping.└☻
00000DE0  53 65 41 73 73 69 67 6E  53 65 63 75 72 69 74 79  00 00 CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  SeAssignSecurity..╠╠╠╠╠╠╠╠╠╠╠╠╠╠
00000E00  7A 02 52 74 6C 4C 65 6E  67 74 68 53 65 63 75 72  69 74 79 44 65 73 63 72  69 70 74 6F 72 00 C7 02  z☻RtlLengthSecurityDescriptor.╟☻
00000E20  53 65 44 65 61 73 73 69  67 6E 53 65 63 75 72 69  74 79 00 00 B7 00 49 6F  41 63 71 75 69 72 65 56  SeDeassignSecurity..╖.IoAcquireV
00000E40  70 62 53 70 69 6E 4C 6F  63 6B 00 00 FC 00 49 6F  52 65 6C 65 61 73 65 56  70 62 53 70 69 6E 4C 6F  pbSpinLock..ⁿ.IoReleaseVpbSpinLo
00000E60  63 6B 00 00 A1 01 4D 6D  49 73 52 65 63 75 72 73  69 76 65 49 6F 46 61 75  6C 74 00 00 CC CC CC CC  ck..í☺MmIsRecursiveIoFault..╠╠╠╠
00000E80  29 00 45 78 41 63 71 75  69 72 65 53 68 61 72 65  64 53 74 61 72 76 65 45  78 63 6C 75 73 69 76 65  ).ExAcquireSharedStarveExclusive
00000EA0  00 00 49 00 45 78 49 73  52 65 73 6F 75 72 63 65  41 63 71 75 69 72 65 64  53 68 61 72 65 64 4C 69  ..I.ExIsResourceAcquiredSharedLi
00000EC0  74 65 00 00 CC CC CC CC  CC CC CC CC CC CC CC CC  72 00 46 73 52 74 6C 43  68 65 63 6B 4C 6F 63 6B  te..╠╠╠╠╠╠╠╠╠╠╠╠r.FsRtlCheckLock
00000EE0  46 6F 72 52 65 61 64 41  63 63 65 73 73 00 CC CC  1B 00 43 63 53 65 74 52  65 61 64 41 68 65 61 64  ForReadAccess.╠╠←.CcSetReadAhead
00000F00  47 72 61 6E 75 6C 61 72  69 74 79 00 CC CC CC CC  0C 00 43 63 4D 64 6C 52  65 61 64 00 A1 00 46 73  Granularity.╠╠╠╠♀.CcMdlRead.í.Fs
00000F20  52 74 6C 50 6F 73 74 50  61 67 69 6E 67 46 69 6C  65 53 74 61 63 6B 4F 76  65 72 66 6C 6F 77 00 00  RtlPostPagingFileStackOverflow..
00000F40  A2 00 46 73 52 74 6C 50  6F 73 74 53 74 61 63 6B  4F 76 65 72 66 6C 6F 77  00 00 99 02 52 74 6C 53  ó.FsRtlPostStackOverflow..Ö☻RtlS
00000F60  70 6C 61 79 00 00 3B 02  52 74 6C 44 65 6C 65 74  65 00 03 03 5A 77 4F 70  65 6E 4B 65 79 00 CC CC  play..;☻RtlDelete.♥♥ZwOpenKey.╠╠
00000F80  13 03 5A 77 51 75 65 72  79 56 61 6C 75 65 4B 65  79 00 E5 02 5A 77 43 6C  6F 73 65 00 75 00 46 73  ‼♥ZwQueryValueKey.σ☻ZwClose.u.Fs
00000FA0  52 74 6C 43 6F 70 79 52  65 61 64 00 CC CC CC CC  76 00 46 73 52 74 6C 43  6F 70 79 57 72 69 74 65  RtlCopyRead.╠╠╠╠v.FsRtlCopyWrite
00000FC0  00 00 CC CC AD 01 4D 6D  51 75 65 72 79 53 79 73  74 65 6D 53 69 7A 65 00  21 01 4B 65 42 75 67 43  ..╠╠¡☺MmQuerySystemSize.!☺KeBugC
00000FE0  68 65 63 6B 00 00 F8 00  49 6F 52 65 67 69 73 74  65 72 46 69 6C 65 53 79  73 74 65 6D 00 00 46 01  heck..°.IoRegisterFileSystem..F☺
00001000  4B 65 49 6E 69 74 69 61  6C 69 7A 65 54 69 6D 65  72 00 CC CC CC CC CC CC  3E 01 4B 65 49 6E 69 74  KeInitializeTimer.╠╠╠╠╠╠>☺KeInit
00001020  69 61 6C 69 7A 65 44 70  63 00 CC CC ED 00 49 6F  49 73 53 79 73 74 65 6D  54 68 72 65 61 64 00 00  ializeDpc.╠╠φ.IoIsSystemThread..
00001040  F4 00 49 6F 52 61 69 73  65 49 6E 66 6F 72 6D 61  74 69 6F 6E 61 6C 48 61  72 64 45 72 72 6F 72 00  ⌠.IoRaiseInformationalHardError.
00001060  7D 00 46 73 52 74 6C 46  61 73 74 43 68 65 63 6B  4C 6F 63 6B 46 6F 72 52  65 61 64 00 7E 00 46 73  }.FsRtlFastCheckLockForRead.~.Fs
00001080  52 74 6C 46 61 73 74 43  68 65 63 6B 4C 6F 63 6B  46 6F 72 57 72 69 74 65  00 00 CC CC 8A 00 46 73  RtlFastCheckLockForWrite..╠╠è.Fs
000010A0  52 74 6C 49 73 46 61 74  44 62 63 73 4C 65 67 61  6C 00 A2 02 52 74 6C 55  6E 69 63 6F 64 65 53 74  RtlIsFatDbcsLegal.ó☻RtlUnicodeSt
000010C0  72 69 6E 67 54 6F 43 6F  75 6E 74 65 64 4F 65 6D  53 74 72 69 6E 67 00 00  5B 02 52 74 6C 46 72 65  ringToCountedOemString..[☻RtlFre
000010E0  65 4F 65 6D 53 74 72 69  6E 67 00 00 7A 00 46 73  52 74 6C 44 69 73 73 65  63 74 4E 61 6D 65 00 00  eOemString..z.FsRtlDissectName..
00001100  A9 00 46 73 52 74 6C 53  70 6C 69 74 4C 61 72 67  65 4D 63 62 00 00 9D 00  46 73 52 74 6C 4E 75 6D  ⌐.FsRtlSplitLargeMcb..¥.FsRtlNum
00001120  62 65 72 4F 66 52 75 6E  73 49 6E 4C 61 72 67 65  4D 63 62 00 91 00 46 73  52 74 6C 4C 6F 6F 6B 75  berOfRunsInLargeMcb.æ.FsRtlLooku
00001140  70 4C 61 73 74 4C 61 72  67 65 4D 63 62 45 6E 74  72 79 00 00 32 00 45 78  44 65 6C 65 74 65 52 65  pLastLargeMcbEntry..2.ExDeleteRe
00001160  73 6F 75 72 63 65 4C 69  74 65 00 00 45 01 4B 65  49 6E 69 74 69 61 6C 69  7A 65 53 70 69 6E 4C 6F  sourceLite..E☺KeInitializeSpinLo
00001180  63 6B 00 00 3A 00 45 78  49 6E 69 74 69 61 6C 69  7A 65 52 65 73 6F 75 72  63 65 4C 69 74 65 00 00  ck..:.ExInitializeResourceLite..
000011A0  05 00 43 63 47 65 74 44  69 72 74 79 50 61 67 65  73 00 6E 01 4B 65 53 65  74 50 72 69 6F 72 69 74  ♣.CcGetDirtyPages.n☺KeSetPriorit
000011C0  79 54 68 72 65 61 64 00  A5 00 46 73 52 74 6C 50  72 6F 63 65 73 73 46 69  6C 65 4C 6F 63 6B 00 00  yThread.Ñ.FsRtlProcessFileLock..
000011E0  80 00 46 73 52 74 6C 46  61 73 74 55 6E 6C 6F 63  6B 41 6C 6C 42 79 4B 65  79 00 CC CC 81 00 46 73  Ç.FsRtlFastUnlockAllByKey.╠╠ü.Fs
00001200  52 74 6C 46 61 73 74 55  6E 6C 6F 63 6B 53 69 6E  67 6C 65 00 CC CC CC CC  CC CC CC CC CC CC CC CC  RtlFastUnlockSingle.╠╠╠╠╠╠╠╠╠╠╠╠
00001220  A4 00 46 73 52 74 6C 50  72 69 76 61 74 65 4C 6F  63 6B 00 00 5D 00 45 78  66 49 6E 74 65 72 6C 6F  ñ.FsRtlPrivateLock..].ExfInterlo
00001240  63 6B 65 64 41 64 64 55  6C 6F 6E 67 00 00 CC CC  00 00 43 63 43 61 6E 49  57 72 69 74 65 00 CC CC  ckedAddUlong..╠╠..CcCanIWrite.╠╠
00001260  C2 00 49 6F 42 75 69 6C  64 44 65 76 69 63 65 49  6F 43 6F 6E 74 72 6F 6C  52 65 71 75 65 73 74 00  ┬.IoBuildDeviceIoControlRequest.
00001280  9F 00 46 73 52 74 6C 4F  70 6C 6F 63 6B 46 73 63  74 72 6C 00 CE 00 49 6F  43 72 65 61 74 65 44 65  ƒ.FsRtlOplockFsctrl.╬.IoCreateDe
000012A0  76 69 63 65 00 00 CC CC  CC CC CC CC CC CC CC CC  16 00 43 63 53 65 74 41  64 64 69 74 69 6F 6E 61  vice..╠╠╠╠╠╠╠╠╠╠▬.CcSetAdditiona
000012C0  6C 43 61 63 68 65 41 74  74 72 69 62 75 74 65 73  00 00 01 00 43 63 43 6F  70 79 52 65 61 64 00 00  lCacheAttributes..☺.CcCopyRead..
000012E0  EF 01 4F 62 51 75 65 72  79 4E 61 6D 65 53 74 72  69 6E 67 00 71 00 46 73  52 74 6C 42 61 6C 61 6E  ∩☺ObQueryNameString.q.FsRtlBalan
00001300  63 65 52 65 61 64 73 00  CC CC CC CC CC CC CC CC  95 00 46 73 52 74 6C 4E  6F 72 6D 61 6C 69 7A 65  ceReads.╠╠╠╠╠╠╠╠ò.FsRtlNormalize
00001320  4E 74 73 74 61 74 75 73  00 00 CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  Ntstatus..╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠
00001340  3C 02 52 74 6C 44 65 6C  65 74 65 45 6C 65 6D 65  6E 74 47 65 6E 65 72 69  63 54 61 62 6C 65 00 00  <☻RtlDeleteElementGenericTable..
00001360  BD 01 4E 6C 73 4D 62 4F  65 6D 43 6F 64 65 50 61  67 65 54 61 67 00 CC CC  BE 01 4E 6C 73 4F 65 6D  ╜☺NlsMbOemCodePageTag.╠╠╛☺NlsOem
00001380  4C 65 61 64 42 79 74 65  49 6E 66 6F 00 00 CC CC  8F 00 46 73 52 74 6C 4C  65 67 61 6C 41 6E 73 69  LeadByteInfo..╠╠Å.FsRtlLegalAnsi
000013A0  43 68 61 72 61 63 74 65  72 41 72 72 61 79 00 00  68 02 52 74 6C 49 6E 69  74 55 6E 69 63 6F 64 65  CharacterArray..h☻RtlInitUnicode
000013C0  53 74 72 69 6E 67 00 00  8D 00 46 73 52 74 6C 49  73 4E 74 73 74 61 74 75  73 45 78 70 65 63 74 65  String..ì.FsRtlIsNtstatusExpecte
000013E0  64 00 B4 02 52 74 6C 55  70 70 65 72 53 74 72 69  6E 67 00 00 59 00 45 78  52 65 6C 65 61 73 65 52  d.┤☻RtlUpperString..Y.ExReleaseR
00001400  65 73 6F 75 72 63 65 4C  69 74 65 00 CC CC CC CC  69 02 52 74 6C 49 6E 69  74 69 61 6C 69 7A 65 42  esourceLite.╠╠╠╠i☻RtlInitializeB
00001420  69 74 4D 61 70 00 36 00  45 78 46 72 65 65 50 6F  6F 6C 00 00 CC CC CC CC  8C 00 46 73 52 74 6C 49  itMap.6.ExFreePool..╠╠╠╠î.FsRtlI
00001440  73 4E 61 6D 65 49 6E 45  78 70 72 65 73 73 69 6F  6E 00 70 00 46 73 52 74  6C 41 72 65 4E 61 6D 65  sNameInExpression.p.FsRtlAreName
00001460  73 45 71 75 61 6C 00 00  7C 02 52 74 6C 4C 6F 6F  6B 75 70 45 6C 65 6D 65  6E 74 47 65 6E 65 72 69  sEqual..|☻RtlLookupElementGeneri
00001480  63 54 61 62 6C 65 00 00  DC 00 49 6F 46 69 6C 65  4F 62 6A 65 63 74 54 79  70 65 00 00 CC CC CC CC  cTable..▄.IoFileObjectType..╠╠╠╠
000014A0  F1 01 4F 62 52 65 66 65  72 65 6E 63 65 4F 62 6A  65 63 74 42 79 50 6F 69  6E 74 65 72 00 00 CC CC  ±☺ObReferenceObjectByPointer..╠╠
000014C0  8E 00 46 73 52 74 6C 49  73 54 6F 74 61 6C 44 65  76 69 63 65 46 61 69 6C  75 72 65 00 6B 01 4B 65  Ä.FsRtlIsTotalDeviceFailure.k☺Ke
000014E0  53 65 74 45 76 65 6E 74  00 00 B3 00 49 6E 74 65  72 6C 6F 63 6B 65 64 44  65 63 72 65 6D 65 6E 74  SetEvent..│.InterlockedDecrement
00001500  00 00 CC CC 58 00 45 78  52 65 6C 65 61 73 65 52  65 73 6F 75 72 63 65 46  6F 72 54 68 72 65 61 64  ..╠╠X.ExReleaseResourceForThread
00001520  4C 69 74 65 00 00 CC CC  7A 01 4B 65 57 61 69 74  46 6F 72 53 69 6E 67 6C  65 4F 62 6A 65 63 74 00  Lite..╠╠z☺KeWaitForSingleObject.
00001540  67 01 4B 65 52 65 73 65  74 45 76 65 6E 74 00 00  C1 00 49 6F 42 75 69 6C  64 41 73 79 6E 63 68 72  g☺KeResetEvent..┴.IoBuildAsynchr
00001560  6F 6E 6F 75 73 46 73 64  52 65 71 75 65 73 74 00  B5 01 4D 6D 55 6E 6C 6F  63 6B 50 61 67 65 73 00  onousFsdRequest.╡☺MmUnlockPages.
00001580  2E 00 45 78 41 6C 6C 6F  63 61 74 65 50 6F 6F 6C  57 69 74 68 54 61 67 00  27 01 4B 65 44 65 6C 61  ..ExAllocatePoolWithTag.'☺KeDela
000015A0  79 45 78 65 63 75 74 69  6F 6E 54 68 72 65 61 64  00 00 37 00 45 78 47 65  74 45 78 63 6C 75 73 69  yExecutionThread..7.ExGetExclusi
000015C0  76 65 57 61 69 74 65 72  43 6F 75 6E 74 00 94 01  4D 6D 42 75 69 6C 64 4D  64 6C 46 6F 72 4E 6F 6E  veWaiterCount.ö☺MmBuildMdlForNon
000015E0  50 61 67 65 64 50 6F 6F  6C 00 3F 01 4B 65 49 6E  69 74 69 61 6C 69 7A 65  45 76 65 6E 74 00 3A 02  PagedPool.?☺KeInitializeEvent.:☻
00001600  52 74 6C 44 65 63 6F 6D  70 72 65 73 73 46 72 61  67 6D 65 6E 74 00 CC CC  39 02 52 74 6C 44 65 63  RtlDecompressFragment.╠╠9☻RtlDec
00001620  6F 6D 70 72 65 73 73 42  75 66 66 65 72 00 5F 02  52 74 6C 47 65 74 43 6F  6D 70 72 65 73 73 69 6F  ompressBuffer._☻RtlGetCompressio
00001640  6E 57 6F 72 6B 53 70 61  63 65 53 69 7A 65 00 00  2B 02 52 74 6C 43 6F 6D  70 72 65 73 73 42 75 66  nWorkSpaceSize..+☻RtlCompressBuf
00001660  66 65 72 00 30 01 4B 65  47 65 74 43 75 72 72 65  6E 74 54 68 72 65 61 64  00 00 EE 00 49 6F 4D 61  fer.0☺KeGetCurrentThread..ε.IoMa
00001680  6B 65 41 73 73 6F 63 69  61 74 65 64 49 72 70 00  C3 00 49 6F 42 75 69 6C  64 50 61 72 74 69 61 6C  keAssociatedIrp.├.IoBuildPartial
000016A0  4D 64 6C 00 DE 00 49 6F  46 72 65 65 49 72 70 00  A7 01 4D 6D 4D 61 70 4C  6F 63 6B 65 64 50 61 67  Mdl.▐.IoFreeIrp.º☺MmMapLockedPag
000016C0  65 73 00 00 BD 00 49 6F  41 6C 6C 6F 63 61 74 65  4D 64 6C 00 AC 01 4D 6D  50 72 6F 62 65 41 6E 64  es..╜.IoAllocateMdl.¼☺MmProbeAnd
000016E0  4C 6F 63 6B 50 61 67 65  73 00 CC CC CC CC CC CC  DF 00 49 6F 46 72 65 65  4D 64 6C 00 CC CC CC CC  LockPages.╠╠╠╠╠╠▀.IoFreeMdl.╠╠╠╠
00001700  15 01 49 6F 66 43 61 6C  6C 44 72 69 76 65 72 00  77 00 46 73 52 74 6C 43  75 72 72 65 6E 74 42 61  §☺IofCallDriver.w.FsRtlCurrentBa
00001720  74 63 68 4F 70 6C 6F 63  6B 00 CC CC CC CC CC CC  10 01 49 6F 55 70 64 61  74 65 53 68 61 72 65 41  tchOplock.╠╠╠╠╠╠►☺IoUpdateShareA
00001740  63 63 65 73 73 00 CC CC  03 01 49 6F 53 65 74 53  68 61 72 65 41 63 63 65  73 73 00 00 C8 00 49 6F  ccess.╠╠♥☺IoSetShareAccess..╚.Io
00001760  43 68 65 63 6B 45 61 42  75 66 66 65 72 56 61 6C  69 64 69 74 79 00 CC CC  CA 00 49 6F 43 68 65 63  CheckEaBufferValidity.╠╠╩.IoChec
00001780  6B 53 68 61 72 65 41 63  63 65 73 73 00 00 9A 01  4D 6D 46 6C 75 73 68 49  6D 61 67 65 53 65 63 74  kShareAccess..Ü☺MmFlushImageSect
000017A0  69 6F 6E 00 D6 02 53 65  53 69 6E 67 6C 65 50 72  69 76 69 6C 65 67 65 43  68 65 63 6B 00 00 CC CC  ion.╓☻SeSinglePrivilegeCheck..╠╠
000017C0  02 01 49 6F 53 65 74 49  6E 66 6F 72 6D 61 74 69  6F 6E 00 00 4E 00 45 78  51 75 65 75 65 57 6F 72  ☻☺IoSetInformation..N.ExQueueWor
000017E0  6B 49 74 65 6D 00 CC CC  2F 00 45 78 43 6F 6E 76  65 72 74 45 78 63 6C 75  73 69 76 65 54 6F 53 68  kItem.╠╠/.ExConvertExclusiveToSh
00001800  61 72 65 64 4C 69 74 65  00 00 E2 00 49 6F 47 65  74 43 75 72 72 65 6E 74  50 72 6F 63 65 73 73 00  aredLite..Γ.IoGetCurrentProcess.
00001820  97 00 46 73 52 74 6C 4E  6F 74 69 66 79 43 6C 65  61 6E 75 70 00 00 CC CC  74 00 46 73 52 74 6C 43  ù.FsRtlNotifyCleanup..╠╠t.FsRtlC
00001840  68 65 63 6B 4F 70 6C 6F  63 6B 00 00 E8 00 49 6F  47 65 74 52 65 71 75 65  73 74 6F 72 50 72 6F 63  heckOplock..Φ.IoGetRequestorProc
00001860  65 73 73 00 7F 00 46 73  52 74 6C 46 61 73 74 55  6E 6C 6F 63 6B 41 6C 6C  00 00 83 00 46 73 52 74  ess.⌂.FsRtlFastUnlockAll..â.FsRt
00001880  6C 47 65 74 4E 65 78 74  4C 61 72 67 65 4D 63 62  45 6E 74 72 79 00 99 00  46 73 52 74 6C 4E 6F 74  lGetNextLargeMcbEntry.Ö.FsRtlNot
000018A0  69 66 79 46 75 6C 6C 52  65 70 6F 72 74 43 68 61  6E 67 65 00 CC CC CC CC  FD 00 49 6F 52 65 6D 6F  ifyFullReportChange.╠╠╠╠².IoRemo
000018C0  76 65 53 68 61 72 65 41  63 63 65 73 73 00 13 00  43 63 50 75 72 67 65 43  61 63 68 65 53 65 63 74  veShareAccess.‼.CcPurgeCacheSect
000018E0  69 6F 6E 00 16 01 49 6F  66 43 6F 6D 70 6C 65 74  65 52 65 71 75 65 73 74  00 00 CC CC 2B 01 4B 65  ion.▬☺IofCompleteRequest..╠╠+☺Ke
00001900  45 6E 74 65 72 43 72 69  74 69 63 61 6C 52 65 67  69 6F 6E 00 CC CC CC CC  EC 00 49 6F 49 73 4F 70  EnterCriticalRegion.╠╠╠╠∞.IoIsOp
00001920  65 72 61 74 69 6F 6E 53  79 6E 63 68 72 6F 6E 6F  75 73 00 00 04 01 49 6F  53 65 74 54 6F 70 4C 65  erationSynchronous..♦☺IoSetTopLe
00001940  76 65 6C 49 72 70 00 00  4E 01 4B 65 4C 65 61 76  65 43 72 69 74 69 63 61  6C 52 65 67 69 6F 6E 00  velIrp..N☺KeLeaveCriticalRegion.
00001960  20 00 43 63 5A 65 72 6F  44 61 74 61 00 00 0D 00  43 63 4D 64 6C 52 65 61  64 43 6F 6D 70 6C 65 74   .CcZeroData..♪.CcMdlReadComplet
00001980  65 00 CC CC 0E 00 43 63  4D 64 6C 57 72 69 74 65  43 6F 6D 70 6C 65 74 65  00 00 CC CC 18 00 43 63  e.╠╠♫.CcMdlWriteComplete..╠╠↑.Cc
000019A0  53 65 74 44 69 72 74 79  50 69 6E 6E 65 64 44 61  74 61 00 00 71 01 4B 65  53 65 74 54 69 6D 65 72  SetDirtyPinnedData..q☺KeSetTimer
000019C0  00 00 12 00 43 63 50 72  65 70 61 72 65 50 69 6E  57 72 69 74 65 00 10 00  43 63 50 69 6E 52 65 61  ..↕.CcPreparePinWrite.►.CcPinRea
000019E0  64 00 CC CC 0F 00 43 63  50 69 6E 4D 61 70 70 65  64 44 61 74 61 00 CC CC  0B 00 43 63 4D 61 70 44  d.╠╠☼.CcPinMappedData.╠╠♂.CcMapD
00001A00  61 74 61 00 D0 00 49 6F  43 72 65 61 74 65 53 74  72 65 61 6D 46 69 6C 65  4F 62 6A 65 63 74 00 00  ata.╨.IoCreateStreamFileObject..
00001A20  09 00 43 63 49 6E 69 74  69 61 6C 69 7A 65 43 61  63 68 65 4D 61 70 00 00  1A 00 43 63 53 65 74 4C  ○.CcInitializeCacheMap..→.CcSetL
00001A40  6F 67 48 61 6E 64 6C 65  46 6F 72 46 69 6C 65 00  1C 00 43 63 55 6E 69 6E  69 74 69 61 6C 69 7A 65  ogHandleForFile.∟.CcUninitialize
00001A60  43 61 63 68 65 4D 61 70  00 00 F2 01 4F 62 66 44  65 72 65 66 65 72 65 6E  63 65 4F 62 6A 65 63 74  CacheMap..≥☺ObfDereferenceObject
00001A80  00 00 E6 00 49 6F 47 65  74 49 6E 69 74 69 61 6C  53 74 61 63 6B 00 A7 00  46 73 52 74 6C 52 65 6D  ..µ.IoGetInitialStack.º.FsRtlRem
00001AA0  6F 76 65 4C 61 72 67 65  4D 63 62 45 6E 74 72 79  00 00 90 00 46 73 52 74  6C 4C 6F 6F 6B 75 70 4C  oveLargeMcbEntry..É.FsRtlLookupL
00001AC0  61 72 67 65 4D 63 62 45  6E 74 72 79 00 00 95 01  4D 6D 43 61 6E 46 69 6C  65 42 65 54 72 75 6E 63  argeMcbEntry..ò☺MmCanFileBeTrunc
00001AE0  61 74 65 64 00 00 4E 02  52 74 6C 46 69 6E 64 43  6C 65 61 72 42 69 74 73  00 00 26 02 52 74 6C 43  ated..N☻RtlFindClearBits..&☻RtlC
00001B00  6C 65 61 72 42 69 74 73  00 00 20 02 52 74 6C 41  72 65 42 69 74 73 53 65  74 00 CC CC CC CC CC CC  learBits.. ☻RtlAreBitsSet.╠╠╠╠╠╠
00001B20  93 02 52 74 6C 53 65 74  42 69 74 73 00 00 1F 02  52 74 6C 41 72 65 42 69  74 73 43 6C 65 61 72 00  ô☻RtlSetBits..▼☻RtlAreBitsClear.
00001B40  04 00 43 63 46 6C 75 73  68 43 61 63 68 65 00 00  AE 00 46 73 52 74 6C 55  6E 69 6E 69 74 69 61 6C  ♦.CcFlushCache..«.FsRtlUninitial
00001B60  69 7A 65 4C 61 72 67 65  4D 63 62 00 AB 00 46 73  52 74 6C 54 72 75 6E 63  61 74 65 4C 61 72 67 65  izeLargeMcb.½.FsRtlTruncateLarge
00001B80  4D 63 62 00 84 02 52 74  6C 4E 75 6D 62 65 72 4F  66 43 6C 65 61 72 42 69  74 73 00 00 CC CC CC CC  Mcb.ä☻RtlNumberOfClearBits..╠╠╠╠
00001BA0  52 02 52 74 6C 46 69 6E  64 4C 6F 6E 67 65 73 74  52 75 6E 43 6C 65 61 72  00 00 CC CC CC CC CC CC  R☻RtlFindLongestRunClear..╠╠╠╠╠╠
00001BC0  69 00 46 73 52 74 6C 41  64 64 4C 61 72 67 65 4D  63 62 45 6E 74 72 79 00  86 00 46 73 52 74 6C 49  i.FsRtlAddLargeMcbEntry.å.FsRtlI
00001BE0  6E 69 74 69 61 6C 69 7A  65 4C 61 72 67 65 4D 63  62 00 CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  nitializeLargeMcb.╠╠╠╠╠╠╠╠╠╠╠╠╠╠
00001C00  B1 01 4D 6D 53 65 74 41  64 64 72 65 73 73 52 61  6E 67 65 4D 6F 64 69 66  69 65 64 00 54 01 4B 65  ▒☺MmSetAddressRangeModified.T☺Ke
00001C20  51 75 65 72 79 53 79 73  74 65 6D 54 69 6D 65 00  25 00 45 78 41 63 71 75  69 72 65 46 61 73 74 4D  QuerySystemTime.%.ExAcquireFastM
00001C40  75 74 65 78 55 6E 73 61  66 65 00 00 56 00 45 78  52 65 6C 65 61 73 65 46  61 73 74 4D 75 74 65 78  utexUnsafe..V.ExReleaseFastMutex
00001C60  55 6E 73 61 66 65 00 00  53 00 45 78 52 61 69 73  65 53 74 61 74 75 73 00  02 00 43 63 43 6F 70 79  Unsafe..S.ExRaiseStatus.☻.CcCopy
00001C80  57 72 69 74 65 00 CC CC  CC CC CC CC CC CC CC CC  22 01 4B 65 42 75 67 43  68 65 63 6B 45 78 00 00  Write.╠╠╠╠╠╠╠╠╠╠"☺KeBugCheckEx..
00001CA0  5D 02 52 74 6C 47 65 6E  65 72 61 74 65 38 64 6F  74 33 4E 61 6D 65 00 00  3E 03 6D 65 6D 6D 6F 76  ]☻RtlGenerate8dot3Name..>♥memmov
00001CC0  65 00 CC CC CC CC CC CC  1D 00 43 63 55 6E 70 69  6E 44 61 74 61 00 A0 00  46 73 52 74 6C 4F 70 6C  e.╠╠╠╠╠╠↔.CcUnpinData.á.FsRtlOpl
00001CE0  6F 63 6B 49 73 46 61 73  74 49 6F 50 6F 73 73 69  62 6C 65 00 48 00 45 78  49 73 52 65 73 6F 75 72  ockIsFastIoPossible.H.ExIsResour
00001D00  63 65 41 63 71 75 69 72  65 64 45 78 63 6C 75 73  69 76 65 4C 69 74 65 00  48 41 4C 2E 64 6C 6C 00  ceAcquiredExclusiveLite.HAL.dll.
00001D20  02 00 45 78 54 72 79 54  6F 41 63 71 75 69 72 65  46 61 73 74 4D 75 74 65  78 00 46 00 4B 66 41 63  ☻.ExTryToAcquireFastMutex.F.KfAc
00001D40  71 75 69 72 65 53 70 69  6E 4C 6F 63 6B 00 49 00  4B 66 52 65 6C 65 61 73  65 53 70 69 6E 4C 6F 63  quireSpinLock.I.KfReleaseSpinLoc
00001D60  6B 00 CC CC CC CC CC CC  00 00 45 78 41 63 71 75  69 72 65 46 61 73 74 4D  75 74 65 78 00 00 01 00  k.╠╠╠╠╠╠..ExAcquireFastMutex..☺.
00001D80  45 78 52 65 6C 65 61 73  65 46 61 73 74 4D 75 74  65 78 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ExReleaseFastMutex..............