==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  CC 41 00 00 00 00 00 00  00 00 00 00 5E 45 00 00  90 02 00 00 BC 41 00 00  00 00 00 00 00 00 00 00  ╠A..........^E..É☻..╝A..........
00000020  B8 45 00 00 80 02 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 9C 45 00 00  ╕E..Ç☻......................£E..
00000040  84 45 00 00 6C 45 00 00  00 00 00 00 08 43 00 00  12 43 00 00 20 43 00 00  40 43 00 00 54 43 00 00  äE..lE......◘C..↕C.. C..@C..TC..
00000060  6C 43 00 00 F8 42 00 00  84 43 00 00 96 43 00 00  AA 43 00 00 B4 43 00 00  CC 43 00 00 DE 43 00 00  lC..°B..äC..ûC..¬C..┤C..╠C..▐C..
00000080  F8 43 00 00 A4 42 00 00  D8 42 00 00 3E 44 00 00  48 44 00 00 60 44 00 00  7A 44 00 00 84 44 00 00  °C..ñB..╪B..>D..HD..`D..zD..äD..
000000A0  9C 44 00 00 8C 42 00 00  D0 44 00 00 E4 44 00 00  F8 44 00 00 18 45 00 00  2A 45 00 00 42 45 00 00  £D..îB..╨D..ΣD..°D..↑E..*E..BE..
000000C0  4E 45 00 00 BC 42 00 00  0E 44 00 00 2E 44 00 00  BC 44 00 00 C0 45 00 00  E0 45 00 00 EC 45 00 00  NE..╝B..♫D...D..╝D..└E..αE..∞E..
000000E0  F8 45 00 00 08 46 00 00  26 46 00 00 3E 46 00 00  58 46 00 00 76 46 00 00  94 46 00 00 B0 46 00 00  °E..◘F..&F..>F..XF..vF..öF..░F..
00000100  C0 46 00 00 D8 46 00 00  00 00 00 00 F2 01 4F 62  66 44 65 72 65 66 65 72  65 6E 63 65 4F 62 6A 65  └F..╪F......≥☺ObfDereferenceObje
00000120  63 74 00 00 5C 02 52 74  6C 46 72 65 65 55 6E 69  63 6F 64 65 53 74 72 69  6E 67 00 00 E3 00 49 6F  ct..\☻RtlFreeUnicodeString..π.Io
00000140  47 65 74 44 65 76 69 63  65 4F 62 6A 65 63 74 50  6F 69 6E 74 65 72 00 00  19 02 52 74 6C 41 6E 73  GetDeviceObjectPointer..↓☻RtlAns
00000160  69 53 74 72 69 6E 67 54  6F 55 6E 69 63 6F 64 65  53 74 72 69 6E 67 00 00  67 02 52 74 6C 49 6E 69  iStringToUnicodeString..g☻RtlIni
00000180  74 53 74 72 69 6E 67 00  42 03 73 70 72 69 6E 74  66 00 36 00 45 78 46 72  65 65 50 6F 6F 6C 00 00  tString.B♥sprintf.6.ExFreePool..
000001A0  E1 00 49 6F 47 65 74 43  6F 6E 66 69 67 75 72 61  74 69 6F 6E 49 6E 66 6F  72 6D 61 74 69 6F 6E 00  ß.IoGetConfigurationInformation.
000001C0  3B 00 45 78 49 6E 69 74  69 61 6C 69 7A 65 5A 6F  6E 65 00 00 45 01 4B 65  49 6E 69 74 69 61 6C 69  ;.ExInitializeZone..E☺KeInitiali
000001E0  7A 65 53 70 69 6E 4C 6F  63 6B 00 00 2E 00 45 78  41 6C 6C 6F 63 61 74 65  50 6F 6F 6C 57 69 74 68  zeSpinLock....ExAllocatePoolWith
00000200  54 61 67 00 CE 00 49 6F  43 72 65 61 74 65 44 65  76 69 63 65 00 00 B1 00  48 61 6C 44 69 73 70 61  Tag.╬.IoCreateDevice..▒.HalDispa
00000220  74 63 68 54 61 62 6C 65  00 00 E5 02 5A 77 43 6C  6F 73 65 00 FD 02 5A 77  4D 61 6B 65 54 65 6D 70  tchTable..σ☻ZwClose.²☻ZwMakeTemp
00000240  6F 72 61 72 79 4F 62 6A  65 63 74 00 D5 00 49 6F  44 65 6C 65 74 65 44 65  76 69 63 65 00 00 E8 02  oraryObject.╒.IoDeleteDevice..Φ☻
00000260  5A 77 43 72 65 61 74 65  44 69 72 65 63 74 6F 72  79 4F 62 6A 65 63 74 00  16 01 49 6F 66 43 6F 6D  ZwCreateDirectoryObject.▬☺IofCom
00000280  70 6C 65 74 65 52 65 71  75 65 73 74 00 00 01 01  49 6F 53 65 74 48 61 72  64 45 72 72 6F 72 4F 72  pleteRequest..☺☺IoSetHardErrorOr
000002A0  56 65 72 69 66 79 44 65  76 69 63 65 00 00 15 01  49 6F 66 43 61 6C 6C 44  72 69 76 65 72 00 3E 03  VerifyDevice..§☺IofCallDriver.>♥
000002C0  6D 65 6D 6D 6F 76 65 00  12 01 49 6F 57 72 69 74  65 45 72 72 6F 72 4C 6F  67 45 6E 74 72 79 00 00  memmove.↕☺IoWriteErrorLogEntry..
000002E0  BB 00 49 6F 41 6C 6C 6F  63 61 74 65 45 72 72 6F  72 4C 6F 67 45 6E 74 72  79 00 45 03 73 74 72 6E  ╗.IoAllocateErrorLogEntry.E♥strn
00000300  63 6D 70 00 7A 01 4B 65  57 61 69 74 46 6F 72 53  69 6E 67 6C 65 4F 62 6A  65 63 74 00 C4 00 49 6F  cmp.z☺KeWaitForSingleObject.─.Io
00000320  42 75 69 6C 64 53 79 6E  63 68 72 6F 6E 6F 75 73  46 73 64 52 65 71 75 65  73 74 00 00 3F 01 4B 65  BuildSynchronousFsdRequest..?☺Ke
00000340  49 6E 69 74 69 61 6C 69  7A 65 45 76 65 6E 74 00  59 02 52 74 6C 46 72 65  65 41 6E 73 69 53 74 72  InitializeEvent.Y☻RtlFreeAnsiStr
00000360  69 6E 67 00 29 02 52 74  6C 43 6F 6D 70 61 72 65  53 74 72 69 6E 67 00 00  A1 02 52 74 6C 55 6E 69  ing.)☻RtlCompareString..í☻RtlUni
00000380  63 6F 64 65 53 74 72 69  6E 67 54 6F 41 6E 73 69  53 74 72 69 6E 67 00 00  13 03 5A 77 51 75 65 72  codeStringToAnsiString..‼♥ZwQuer
000003A0  79 56 61 6C 75 65 4B 65  79 00 68 02 52 74 6C 49  6E 69 74 55 6E 69 63 6F  64 65 53 74 72 69 6E 67  yValueKey.h☻RtlInitUnicodeString
000003C0  00 00 03 03 5A 77 4F 70  65 6E 4B 65 79 00 BC 00  49 6F 41 6C 6C 6F 63 61  74 65 49 72 70 00 6E 74  ..♥♥ZwOpenKey.╝.IoAllocateIrp.nt
000003E0  6F 73 6B 72 6E 6C 2E 65  78 65 00 00 34 00 49 6F  52 65 61 64 50 61 72 74  69 74 69 6F 6E 54 61 62  oskrnl.exe..4.IoReadPartitionTab
00000400  6C 65 00 00 36 00 49 6F  57 72 69 74 65 50 61 72  74 69 74 69 6F 6E 54 61  62 6C 65 00 35 00 49 6F  le..6.IoWritePartitionTable.5.Io
00000420  53 65 74 50 61 72 74 69  74 69 6F 6E 49 6E 66 6F  72 6D 61 74 69 6F 6E 00  48 41 4C 2E 64 6C 6C 00  SetPartitionInformation.HAL.dll.
00000440  C2 00 49 6F 42 75 69 6C  64 44 65 76 69 63 65 49  6F 43 6F 6E 74 72 6F 6C  52 65 71 75 65 73 74 00  ┬.IoBuildDeviceIoControlRequest.
00000460  DE 00 49 6F 46 72 65 65  49 72 70 00 DF 00 49 6F  46 72 65 65 4D 64 6C 00  B5 01 4D 6D 55 6E 6C 6F  ▐.IoFreeIrp.▀.IoFreeMdl.╡☺MmUnlo
00000480  63 6B 50 61 67 65 73 00  61 00 45 78 66 49 6E 74  65 72 6C 6F 63 6B 65 64  50 75 73 68 45 6E 74 72  ckPages.a.ExfInterlockedPushEntr
000004A0  79 4C 69 73 74 00 B3 00  49 6E 74 65 72 6C 6F 63  6B 65 64 44 65 63 72 65  6D 65 6E 74 00 00 27 01  yList.│.InterlockedDecrement..'☺
000004C0  4B 65 44 65 6C 61 79 45  78 65 63 75 74 69 6F 6E  54 68 72 65 61 64 00 00  49 02 52 74 6C 45 78 74  KeDelayExecutionThread..I☻RtlExt
000004E0  65 6E 64 65 64 49 6E 74  65 67 65 72 4D 75 6C 74  69 70 6C 79 00 00 60 00  45 78 66 49 6E 74 65 72  endedIntegerMultiply..`.ExfInter
00000500  6C 6F 63 6B 65 64 50 6F  70 45 6E 74 72 79 4C 69  73 74 00 00 94 01 4D 6D  42 75 69 6C 64 4D 64 6C  lockedPopEntryList..ö☺MmBuildMdl
00000520  46 6F 72 4E 6F 6E 50 61  67 65 64 50 6F 6F 6C 00  BD 00 49 6F 41 6C 6C 6F  63 61 74 65 4D 64 6C 00  ForNonPagedPool.╜.IoAllocateMdl.
00000540  B5 00 49 6E 74 65 72 6C  6F 63 6B 65 64 49 6E 63  72 65 6D 65 6E 74 00 00  F1 01 4F 62 52 65 66 65  ╡.InterlockedIncrement..±☺ObRefe
00000560  72 65 6E 63 65 4F 62 6A  65 63 74 42 79 50 6F 69  6E 74 65 72 00 00 00 00  00 00 00 00 00 00 00 00  renceObjectByPointer............