==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  83 EC 08 33 C0 B9 1E 00  00 00 53 56 57 55 BF 50  96 01 00 F3 AB 33 FF FF  15 64 84 01 00 57 A3 28  â∞◘3└╣▲...SVWU┐Pû☺.≤½3  §dä☺.Wú(
00000020  8A 01 00 A1 9C 83 01 00  6A 01 68 30 8A 01 00 8B  35 78 85 01 00 0F BE 08  89 0D 78 8C 01 00 FF D6  è☺.í£â☺.j☺h0è☺.ï5xà☺.☼╛◘ë♪xî☺. ╓
00000040  57 6A 01 68 F0 98 01 00  FF D6 A1 A0 83 01 00 68  7C 8A 01 00 8B 35 14 83  01 00 8B 08 89 0D A0 83  Wj☺h≡ÿ☺. ╓íáâ☺.h|è☺.ï5¶â☺.ï◘ë♪áâ
00000060  01 00 FF D6 68 1C 8B 01  00 FF D6 68 60 8B 01 00  8B 2D 10 83 01 00 FF D5  68 98 8B 01 00 FF D5 68  ☺. ╓h∟ï☺. ╓h`ï☺.ï-►â☺. ╒hÿï☺. ╒h
00000080  08 8C 01 00 FF D5 68 D0  8B 01 00 FF D5 68 40 8C  01 00 FF D5 68 18 99 01  00 FF D5 68 20 97 01 00  ◘î☺. ╒h╨ï☺. ╒h@î☺. ╒h↑Ö☺. ╒h ù☺.
000000A0  FF D5 B8 98 8E 01 00 A3  9C 8E 01 00 A3 98 8E 01  00 C7 05 C0 8E 01 00 C9  2E 02 00 B8 A0 8E 01 00   ╒╕ÿÄ☺.ú£Ä☺.úÿÄ☺.╟♣└Ä☺.╔.☻.╕áÄ☺.
000000C0  89 3D C4 8E 01 00 A3 A4  8E 01 00 A3 A0 8E 01 00  B8 B0 8E 01 00 89 3D B8  8E 01 00 A3 B4 8E 01 00  ë=─Ä☺.úñÄ☺.úáÄ☺.╕░Ä☺.ë=╕Ä☺.ú┤Ä☺.
000000E0  A3 B0 8E 01 00 89 3D A8  8E 01 00 B8 F4 8E 01 00  89 3D DC 8E 01 00 C7 05  D8 8E 01 00 12 4F 01 00  ú░Ä☺.ë=¿Ä☺.╕⌠Ä☺.ë=▄Ä☺.╟♣╪Ä☺.↕O☺.
00000100  89 3D D0 8E 01 00 8D 48  FC 89 08 83 C0 08 89 09  3D F4 92 01 00 72 EF 68  10 98 01 00 33 DB FF D5  ë=╨Ä☺.ìHⁿë◘â└◘ë○=⌠Æ☺.r∩h►ÿ☺.3█ ╒
00000120  88 1D 64 98 01 00 88 1D  84 98 01 00 68 D8 99 01  00 88 1D A4 98 01 00 88  1D C4 98 01 00 88 1D E4  ê↔dÿ☺.ê↔äÿ☺.h╪Ö☺.ê↔ñÿ☺.ê↔─ÿ☺.ê↔Σ
00000140  98 01 00 FF D5 C7 05 5C  99 01 00 02 00 00 00 B8  10 99 01 00 88 1D 60 99  01 00 A3 14 99 01 00 A3  ÿ☺. ╒╟♣\Ö☺.☻...╕►Ö☺.ê↔`Ö☺.ú¶Ö☺.ú
00000160  10 99 01 00 B8 50 99 01  00 8D 54 24 10 A3 54 99  01 00 A3 50 99 01 00 FF  35 AC 9A 01 00 52 88 1D  ►Ö☺.╕PÖ☺.ìT$►úTÖ☺.úPÖ☺. 5¼Ü☺.Rê↔
00000180  61 99 01 00 FF 15 D4 84  01 00 8D 4C 24 10 6A 01  51 8B 2D E0 84 01 00 68  E0 95 01 00 FF D5 FF 35  aÖ☺. §╘ä☺.ìL$►j☺Qï-αä☺.hαò☺. ╒ 5
000001A0  60 9A 01 00 68 E8 95 01  00 8B 3D 98 85 01 00 FF  D7 FF 35 88 9A 01 00 68  F0 95 01 00 FF D7 53 68  `Ü☺.hΦò☺.ï=ÿà☺. ╫ 5êÜ☺.h≡ò☺. ╫Sh
000001C0  C8 96 01 00 FF D7 53 8B  2D C0 83 01 00 68 D0 96  01 00 FF D5 53 68 D8 96  01 00 FF D5 A1 24 A4 01  ╚û☺. ╫Sï-└â☺.h╨û☺. ╒Sh╪û☺. ╒í$ñ☺
000001E0  00 50 68 F0 96 01 00 FF  D7 A1 3C A4 01 00 BB 50  A3 01 00 50 68 F8 96 01  00 FF D5 C7 05 70 99 01  .Ph≡û☺. ╫í<ñ☺.╗Pú☺.Ph°û☺. ╒╟♣pÖ☺
00000200  00 B9 0B 00 00 C7 05 80  99 01 00 BA 0B 00 00 BD  C0 97 01 00 FF 33 55 83  C5 08 FF D7 83 C3 04 81  .╣♂..╟♣ÇÖ☺.║♂..╜└ù☺. 3Uâ┼◘ ╫â├♦ü
00000220  FB 68 A3 01 00 76 ED B9  F8 97 01 00 8B 59 FC 8D  41 F8 8B 10 89 11 83 C1  08 81 F9 10 98 01 00 89  √hú☺.vφ╣°ù☺.ïYⁿìA°ï►ë◄â┴◘ü∙►ÿ☺.ë
00000240  59 FC 72 E8 68 3C 8B 01  00 BF 9C 8A 01 00 FF D6  57 FF D6 83 C7 20 81 FF  1C 8B 01 00 72 F2 C7 05  YⁿrΦh<ï☺.┐£è☺. ╓W ╓â╟ ü ∟ï☺.r≥╟♣
00000260  40 8A 01 00 07 00 00 00  FF 15 F8 84 01 00 8B C8  2B D2 B8 80 F0 FA 02 5D  F7 F1 5F A3 30 9A 01 00  @è☺.•... §°ä☺.ï╚+╥╕Ç≡·☻]≈±_ú0Ü☺.
00000280  5E 5B 83 C4 08 C3 83 EC  08 A1 1C 9B 01 00 8D 4C  24 00 56 57 50 51 FF 15  98 85 01 00 8D 4C 24 08  ^[â─◘├â∞◘í∟¢☺.ìL$.VWPQ §ÿà☺.ìL$◘
000002A0  68 18 8A 01 00 8B 7C 24  18 6A 00 6A 00 6A 12 51  6A 00 57 FF 15 1C 85 01  00 8B F0 85 F6 7D 1E 6A  h↑è☺.ï|$↑j.j.j↕Qj.W §∟à☺.ï≡à÷}▲j
000002C0  00 6A 00 6A 00 6A 00 56  68 D2 07 00 C0 57 E8 71  72 FD FF 8B C6 5F 5E 83  C4 08 C2 08 00 83 C7 38  .j.j.j.Vh╥•.└WΦqr² ï╞_^â─◘┬◘.â╟8
000002E0  B8 6F 2F 02 00 B9 18 00  00 00 C7 47 FC 32 D6 02  00 F3 AB A1 18 8A 01 00  50 FF 15 20 85 01 00 8B  ╕o/☻.╣↑...╟Gⁿ2╓☻.≤½í↑è☺.P § à☺.ï
00000300  F0 85 F6 7C 07 C6 05 24  8A 01 00 01 E8 EF FC FF  FF EB C0 CC CC CC CC CC  CC CC CC CC CC CC CC CC  ≡à÷|•╞♣$è☺.☺Φ∩ⁿ  δ└╠╠╠╠╠╠╠╠╠╠╠╠╠
00000320  30 ED 02 00 00 00 00 00  00 00 00 00 40 F0 02 00  00 83 00 00 18 F0 02 00  00 00 00 00 00 00 00 00  0φ☻.........@≡☻..â..↑≡☻.........
00000340  50 01 03 00 E8 85 00 00  30 F0 02 00 00 00 00 00  00 00 00 00 B8 01 03 00  00 86 00 00 00 00 00 00  P☺♥.Φà..0≡☻.........╕☺♥..å......
00000360  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  60 F0 02 00 80 F0 02 00  96 F0 02 00 A8 F0 02 00  ................`≡☻.Ç≡☻.û≡☻.¿≡☻.
00000380  C2 F0 02 00 DE F0 02 00  F6 F0 02 00 16 F1 02 00  2E F1 02 00 46 F1 02 00  62 F1 02 00 88 F1 02 00  ┬≡☻.▐≡☻.÷≡☻.▬±☻..±☻.F±☻.b±☻.ê±☻.
000003A0  9E F1 02 00 B0 F1 02 00  C2 F1 02 00 D8 F1 02 00  E8 F1 02 00 F8 F1 02 00  04 F2 02 00 24 F2 02 00  ₧±☻.░±☻.┬±☻.╪±☻.Φ±☻.°±☻.♦≥☻.$≥☻.
000003C0  42 F2 02 00 66 F2 02 00  80 F2 02 00 96 F2 02 00  AA F2 02 00 BA F2 02 00  DA F2 02 00 F4 F2 02 00  B≥☻.f≥☻.Ç≥☻.û≥☻.¬≥☻.║≥☻.┌≥☻.⌠≥☻.
000003E0  04 F3 02 00 16 F3 02 00  30 F3 02 00 50 F3 02 00  60 F3 02 00 70 F3 02 00  8A F3 02 00 9A F3 02 00  ♦≤☻.▬≤☻.0≤☻.P≤☻.`≤☻.p≤☻.è≤☻.Ü≤☻.
00000400  B2 F3 02 00 D0 F3 02 00  F0 F3 02 00 0C F4 02 00  22 F4 02 00 2E F4 02 00  3A F4 02 00 4E F4 02 00  ▓≤☻.╨≤☻.≡≤☻.♀⌠☻."⌠☻..⌠☻.:⌠☻.N⌠☻.
00000420  64 F4 02 00 76 F4 02 00  88 F4 02 00 A2 F4 02 00  B8 F4 02 00 CC F4 02 00  E0 F4 02 00 F2 F4 02 00  d⌠☻.v⌠☻.ê⌠☻.ó⌠☻.╕⌠☻.╠⌠☻.α⌠☻.≥⌠☻.
00000440  FC F4 02 00 08 F5 02 00  20 F5 02 00 34 F5 02 00  4A F5 02 00 5A F5 02 00  74 F5 02 00 8A F5 02 00  ⁿ⌠☻.◘⌡☻. ⌡☻.4⌡☻.J⌡☻.Z⌡☻.t⌡☻.è⌡☻.
00000460  A8 F5 02 00 C0 F5 02 00  E0 F5 02 00 04 F6 02 00  16 F6 02 00 32 F6 02 00  3E F6 02 00 50 F6 02 00  ¿⌡☻.└⌡☻.α⌡☻.♦÷☻.▬÷☻.2÷☻.>÷☻.P÷☻.
00000480  60 F6 02 00 78 F6 02 00  8E F6 02 00 A6 F6 02 00  BE F6 02 00 D4 F6 02 00  DE F6 02 00 EC F6 02 00  `÷☻.x÷☻.Ä÷☻.ª÷☻.╛÷☻.╘÷☻.▐÷☻.∞÷☻.
000004A0  08 F7 02 00 1E F7 02 00  3C F7 02 00 58 F7 02 00  70 F7 02 00 88 F7 02 00  A2 F7 02 00 B4 F7 02 00  ◘≈☻.▲≈☻.<≈☻.X≈☻.p≈☻.ê≈☻.ó≈☻.┤≈☻.
000004C0  C8 F7 02 00 E8 F7 02 00  F8 F7 02 00 10 F8 02 00  30 F8 02 00 40 F8 02 00  56 F8 02 00 72 F8 02 00  ╚≈☻.Φ≈☻.°≈☻.►°☻.0°☻.@°☻.V°☻.r°☻.
000004E0  82 F8 02 00 A0 F8 02 00  B6 F8 02 00 D0 F8 02 00  E8 F8 02 00 F6 F8 02 00  10 F9 02 00 2C F9 02 00  é°☻.á°☻.╢°☻.╨°☻.Φ°☻.÷°☻.►∙☻.,∙☻.
00000500  48 F9 02 00 64 F9 02 00  78 F9 02 00 A0 F9 02 00  C0 F9 02 00 DC F9 02 00  FC F9 02 00 16 FA 02 00  H∙☻.d∙☻.x∙☻.á∙☻.└∙☻.▄∙☻.ⁿ∙☻.▬·☻.
00000520  2A FA 02 00 3C FA 02 00  50 FA 02 00 68 FA 02 00  7C FA 02 00 92 FA 02 00  A8 FA 02 00 C8 FA 02 00  *·☻.<·☻.P·☻.h·☻.|·☻.Æ·☻.¿·☻.╚·☻.
00000540  E8 FA 02 00 08 FB 02 00  18 FB 02 00 34 FB 02 00  58 FB 02 00 78 FB 02 00  90 FB 02 00 A4 FB 02 00  Φ·☻.◘√☻.↑√☻.4√☻.X√☻.x√☻.É√☻.ñ√☻.
00000560  B8 FB 02 00 D0 FB 02 00  E0 FB 02 00 F8 FB 02 00  0C FC 02 00 20 FC 02 00  2E FC 02 00 44 FC 02 00  ╕√☻.╨√☻.α√☻.°√☻.♀ⁿ☻. ⁿ☻..ⁿ☻.Dⁿ☻.
00000580  54 FC 02 00 68 FC 02 00  7A FC 02 00 8C FC 02 00  9E FC 02 00 C0 FC 02 00  E0 FC 02 00 00 FD 02 00  Tⁿ☻.hⁿ☻.zⁿ☻.îⁿ☻.₧ⁿ☻.└ⁿ☻.αⁿ☻..²☻.
000005A0  10 FD 02 00 1A FD 02 00  40 FD 02 00 58 FD 02 00  66 FD 02 00 80 FD 02 00  94 FD 02 00 B0 FD 02 00  ►²☻.→²☻.@²☻.X²☻.f²☻.Dz☻.ö²☻.░²☻.
000005C0  C0 FD 02 00 CA FD 02 00  E8 FD 02 00 04 FE 02 00  1A FE 02 00 2C FE 02 00  3C FE 02 00 50 FE 02 00  └²☻.╩²☻.Φ²☻.♦■☻.→■☻.,■☻.<■☻.P■☻.
000005E0  68 FE 02 00 80 FE 02 00  9E FE 02 00 B2 FE 02 00  C8 FE 02 00 E2 FE 02 00  F8 FE 02 00 18 FF 02 00  h■☻.Ç■☻.₧■☻.▓■☻.╚■☻.Γ■☻.°■☻.↑ ☻.
00000600  38 FF 02 00 48 FF 02 00  70 FF 02 00 88 FF 02 00  A6 FF 02 00 BA FF 02 00  D2 FF 02 00 EA FF 02 00  8 ☻.H ☻.p ☻.ê ☻.ª ☻.║ ☻.╥ ☻.Ω ☻.
00000620  04 00 03 00 14 00 03 00  2C 00 03 00 44 00 03 00  68 00 03 00 78 00 03 00  90 00 03 00 9E 00 03 00  ♦.♥.¶.♥.,.♥.D.♥.h.♥.x.♥.É.♥.₧.♥.
00000640  B6 00 03 00 CE 00 03 00  E8 00 03 00 10 01 03 00  28 01 03 00 00 00 00 00  58 01 03 00 70 01 03 00  ╢.♥.╬.♥.Φ.♥.►☺♥.(☺♥.....X☺♥.p☺♥.
00000660  7E 01 03 00 8C 01 03 00  A0 01 03 00 00 00 00 00  C0 01 03 00 D8 01 03 00  00 00 00 00 CC CC CC CC  ~☺♥.î☺♥.á☺♥.....└☺♥.╪☺♥.....╠╠╠╠
00000680  6E 74 6F 73 6B 72 6E 6C  2E 65 78 65 00 00 CC CC  CC CC CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  ntoskrnl.exe..╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠
000006A0  7C 00 46 73 52 74 6C 44  6F 65 73 4E 61 6D 65 43  6F 6E 74 61 69 6E 57 69  6C 64 43 61 72 64 73 00  |.FsRtlDoesNameContainWildCards.
000006C0  9F 02 52 74 6C 54 69 6D  65 54 6F 54 69 6D 65 46  69 65 6C 64 73 00 DE 00  49 6F 46 72 65 65 49 72  ƒ☻RtlTimeToTimeFields.▐.IoFreeIr
000006E0  70 00 CC CC CC CC CC CC  E3 01 4E 74 53 65 74 49  6E 66 6F 72 6D 61 74 69  6F 6E 54 68 72 65 61 64  p.╠╠╠╠╠╠π☺NtSetInformationThread
00000700  00 00 3A 00 45 78 49 6E  69 74 69 61 6C 69 7A 65  52 65 73 6F 75 72 63 65  4C 69 74 65 00 00 45 01  ..:.ExInitializeResourceLite..E☺
00000720  4B 65 49 6E 69 74 69 61  6C 69 7A 65 53 70 69 6E  4C 6F 63 6B 00 00 62 00  45 78 66 49 6E 74 65 72  KeInitializeSpinLock..b.ExfInter
00000740  6C 6F 63 6B 65 64 52 65  6D 6F 76 65 48 65 61 64  4C 69 73 74 00 00 22 03  5A 77 57 61 69 74 46 6F  lockedRemoveHeadList.."♥ZwWaitFo
00000760  72 53 69 6E 67 6C 65 4F  62 6A 65 63 74 00 44 01  4B 65 49 6E 69 74 69 61  6C 69 7A 65 53 65 6D 61  rSingleObject.D☺KeInitializeSema
00000780  70 68 6F 72 65 00 78 01  4B 65 57 61 69 74 46 6F  72 4D 75 6C 74 69 70 6C  65 4F 62 6A 65 63 74 73  phore.x☺KeWaitForMultipleObjects
000007A0  00 00 5F 00 45 78 66 49  6E 74 65 72 6C 6F 63 6B  65 64 49 6E 73 65 72 74  54 61 69 6C 4C 69 73 74  .._.ExfInterlockedInsertTailList
000007C0  00 00 CC CC CC CC CC CC  60 01 4B 65 52 65 6C 65  61 73 65 53 65 6D 61 70  68 6F 72 65 00 00 19 03  ..╠╠╠╠╠╠`☺KeReleaseSemaphore..↓♥
000007E0  5A 77 53 65 74 45 76 65  6E 74 00 00 CC CC CC CC  EC 02 5A 77 43 72 65 61  74 65 53 65 63 74 69 6F  ZwSetEvent..╠╠╠╠∞☻ZwCreateSectio
00000800  6E 00 FE 02 5A 77 4D 61  70 56 69 65 77 4F 66 53  65 63 74 69 6F 6E 00 00  E9 02 5A 77 43 72 65 61  n.■☻ZwMapViewOfSection..Θ☻ZwCrea
00000820  74 65 45 76 65 6E 74 00  67 01 4B 65 52 65 73 65  74 45 76 65 6E 74 00 00  E5 02 5A 77 43 6C 6F 73  teEvent.g☺KeResetEvent..σ☻ZwClos
00000840  65 00 CC CC 63 02 52 74  6C 47 65 74 4F 77 6E 65  72 53 65 63 75 72 69 74  79 44 65 73 63 72 69 70  e.╠╠c☻RtlGetOwnerSecurityDescrip
00000860  74 6F 72 00 36 02 52 74  6C 43 72 65 61 74 65 53  65 63 75 72 69 74 79 44  65 73 63 72 69 70 74 6F  tor.6☻RtlCreateSecurityDescripto
00000880  72 00 0F 01 49 6F 55 6E  72 65 67 69 73 74 65 72  53 68 75 74 64 6F 77 6E  4E 6F 74 69 66 69 63 61  r.☼☺IoUnregisterShutdownNotifica
000008A0  74 69 6F 6E 00 00 8D 01  4C 73 61 46 72 65 65 52  65 74 75 72 6E 42 75 66  66 65 72 00 CC CC CC CC  tion..ì☺LsaFreeReturnBuffer.╠╠╠╠
000008C0  CD 01 4E 74 46 72 65 65  56 69 72 74 75 61 6C 4D  65 6D 6F 72 79 00 59 02  52 74 6C 46 72 65 65 41  ═☺NtFreeVirtualMemory.Y☻RtlFreeA
000008E0  6E 73 69 53 74 72 69 6E  67 00 8E 01 4C 73 61 4C  6F 67 6F 6E 55 73 65 72  00 00 A1 02 52 74 6C 55  nsiString.Ä☺LsaLogonUser..í☻RtlU
00000900  6E 69 63 6F 64 65 53 74  72 69 6E 67 54 6F 41 6E  73 69 53 74 72 69 6E 67  00 00 C2 01 4E 74 41 6C  nicodeStringToAnsiString..┬☺NtAl
00000920  6C 6F 63 61 74 65 56 69  72 74 75 61 6C 4D 65 6D  6F 72 79 00 5A 02 52 74  6C 46 72 65 65 48 65 61  locateVirtualMemory.Z☻RtlFreeHea
00000940  70 00 CC CC 17 02 52 74  6C 41 6C 6C 6F 63 61 74  65 48 65 61 70 00 3E 02  52 74 6C 44 65 73 74 72  p.╠╠↨☻RtlAllocateHeap.>☻RtlDestr
00000960  6F 79 48 65 61 70 00 00  CC CC CC CC CC CC CC CC  C8 01 4E 74 43 72 65 61  74 65 53 65 63 74 69 6F  oyHeap..╠╠╠╠╠╠╠╠╚☺NtCreateSectio
00000980  6E 00 CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  C5 01 4E 74 43 6F 6E 6E  65 63 74 50 6F 72 74 00  n.╠╠╠╠╠╠╠╠╠╠╠╠╠╠┼☺NtConnectPort.
000009A0  34 02 52 74 6C 43 72 65  61 74 65 48 65 61 70 00  0B 02 50 73 54 65 72 6D  69 6E 61 74 65 53 79 73  4☻RtlCreateHeap.♂☻PsTerminateSys
000009C0  74 65 6D 54 68 72 65 61  64 00 65 01 4B 65 52 65  6D 6F 76 65 51 75 65 75  65 00 FD 01 50 73 43 72  temThread.e☺KeRemoveQueue.²☺PsCr
000009E0  65 61 74 65 53 79 73 74  65 6D 54 68 72 65 61 64  00 00 A2 01 4D 6D 49 73  54 68 69 73 41 6E 4E 74  eateSystemThread..ó☺MmIsThisAnNt
00000A00  41 73 53 79 73 74 65 6D  00 00 CC CC CC CC CC CC  B5 02 52 74 6C 56 61 6C  69 64 53 65 63 75 72 69  AsSystem..╠╠╠╠╠╠╡☻RtlValidSecuri
00000A20  74 79 44 65 73 63 72 69  70 74 6F 72 00 00 CC CC  9E 02 52 74 6C 54 69 6D  65 54 6F 53 65 63 6F 6E  tyDescriptor..╠╠₧☻RtlTimeToSecon
00000A40  64 73 53 69 6E 63 65 31  39 38 30 00 50 01 4B 65  4E 75 6D 62 65 72 50 72  6F 63 65 73 73 6F 72 73  dsSince1980.P☺KeNumberProcessors
00000A60  00 00 C9 02 53 65 45 78  70 6F 72 74 73 00 32 03  5F 77 63 73 6E 69 63 6D  70 00 7D 02 52 74 6C 4D  ..╔☻SeExports.2♥_wcsnicmp.}☻RtlM
00000A80  61 70 47 65 6E 65 72 69  63 4D 61 73 6B 00 CA 02  53 65 46 72 65 65 50 72  69 76 69 6C 65 67 65 73  apGenericMask.╩☻SeFreePrivileges
00000AA0  00 00 CC CC 20 01 4B 65  41 74 74 61 63 68 50 72  6F 63 65 73 73 00 29 01  4B 65 44 65 74 61 63 68  ..╠╠ ☺KeAttachProcess.)☺KeDetach
00000AC0  50 72 6F 63 65 73 73 00  71 02 52 74 6C 49 73 4E  61 6D 65 4C 65 67 61 6C  44 4F 53 38 44 6F 74 33  Process.q☻RtlIsNameLegalDOS8Dot3
00000AE0  00 00 8A 00 46 73 52 74  6C 49 73 46 61 74 44 62  63 73 4C 65 67 61 6C 00  65 02 52 74 6C 49 6E 69  ..è.FsRtlIsFatDbcsLegal.e☻RtlIni
00000B00  74 41 6E 73 69 53 74 72  69 6E 67 00 03 03 5A 77  4F 70 65 6E 4B 65 79 00  CC CC CC CC CC CC CC CC  tAnsiString.♥♥ZwOpenKey.╠╠╠╠╠╠╠╠
00000B20  13 03 5A 77 51 75 65 72  79 56 61 6C 75 65 4B 65  79 00 C4 01 4E 74 43 6C  6F 73 65 00 4F 03 77 63  ‼♥ZwQueryValueKey.─☺NtClose.O♥wc
00000B40  73 63 6D 70 00 00 CC CC  A3 00 46 73 52 74 6C 50  72 65 70 61 72 65 4D 64  6C 57 72 69 74 65 00 00  scmp..╠╠ú.FsRtlPrepareMdlWrite..
00000B60  0D 00 43 63 4D 64 6C 52  65 61 64 43 6F 6D 70 6C  65 74 65 00 B7 01 4D 6D  55 6E 6D 61 70 4C 6F 63  ♪.CcMdlReadComplete.╖☺MmUnmapLoc
00000B80  6B 65 64 50 61 67 65 73  00 00 94 00 46 73 52 74  6C 4D 64 6C 52 65 61 64  00 00 DB 01 4E 74 51 75  kedPages..ö.FsRtlMdlRead..█☺NtQu
00000BA0  65 72 79 53 65 63 75 72  69 74 79 4F 62 6A 65 63  74 00 CC CC E4 01 4E 74  53 65 74 53 65 63 75 72  erySecurityObject.╠╠Σ☺NtSetSecur
00000BC0  69 74 79 4F 62 6A 65 63  74 00 61 00 45 78 66 49  6E 74 65 72 6C 6F 63 6B  65 64 50 75 73 68 45 6E  ityObject.a.ExfInterlockedPushEn
00000BE0  74 72 79 4C 69 73 74 00  CA 01 4E 74 44 65 76 69  63 65 49 6F 43 6F 6E 74  72 6F 6C 46 69 6C 65 00  tryList.╩☺NtDeviceIoControlFile.
00000C00  AC 02 52 74 6C 55 70 63  61 73 65 55 6E 69 63 6F  64 65 53 74 72 69 6E 67  00 00 CC CC CC CC CC CC  ¼☻RtlUpcaseUnicodeString..╠╠╠╠╠╠
00000C20  AF 02 52 74 6C 55 70 63  61 73 65 55 6E 69 63 6F  64 65 53 74 72 69 6E 67  54 6F 4F 65 6D 53 74 72  »☻RtlUpcaseUnicodeStringToOemStr
00000C40  69 6E 67 00 CE 01 4E 74  46 73 43 6F 6E 74 72 6F  6C 46 69 6C 65 00 90 02  52 74 6C 53 65 63 6F 6E  ing.╬☺NtFsControlFile.É☻RtlSecon
00000C60  64 73 53 69 6E 63 65 31  39 37 30 54 6F 54 69 6D  65 00 8E 02 52 74 6C 52  61 6E 64 6F 6D 00 2C 03  dsSince1970ToTime.Ä☻RtlRandom.,♥
00000C80  5F 73 74 72 69 63 6D 70  00 00 CC CC CC CC CC CC  4E 03 77 63 73 63 68 72  00 00 CC CC CC CC CC CC  _stricmp..╠╠╠╠╠╠N♥wcschr..╠╠╠╠╠╠
00000CA0  F5 00 49 6F 52 65 61 64  4F 70 65 72 61 74 69 6F  6E 43 6F 75 6E 74 00 00  F6 00 49 6F 52 65 61 64  ⌡.IoReadOperationCount..÷.IoRead
00000CC0  54 72 61 6E 73 66 65 72  43 6F 75 6E 74 00 13 01  49 6F 57 72 69 74 65 4F  70 65 72 61 74 69 6F 6E  TransferCount.‼☺IoWriteOperation
00000CE0  43 6F 75 6E 74 00 14 01  49 6F 57 72 69 74 65 54  72 61 6E 73 66 65 72 43  6F 75 6E 74 00 00 09 01  Count.¶☺IoWriteTransferCount..○☺
00000D00  49 6F 53 74 61 74 69 73  74 69 63 73 4C 6F 63 6B  00 00 CC CC 50 03 77 63  73 63 70 79 00 00 C6 00  IoStatisticsLock..╠╠P♥wcscpy..╞.
00000D20  49 6F 43 61 6E 63 65 6C  49 72 70 00 70 02 52 74  6C 49 6E 74 65 67 65 72  54 6F 55 6E 69 63 6F 64  IoCancelIrp.p☻RtlIntegerToUnicod
00000D40  65 53 74 72 69 6E 67 00  B4 00 49 6E 74 65 72 6C  6F 63 6B 65 64 45 78 63  68 61 6E 67 65 00 82 02  eString.┤.InterlockedExchange.é☻
00000D60  52 74 6C 4E 74 53 74 61  74 75 73 54 6F 44 6F 73  45 72 72 6F 72 4E 6F 54  65 62 00 00 DF 01 4E 74  RtlNtStatusToDosErrorNoTeb..▀☺Nt
00000D80  52 65 71 75 65 73 74 57  61 69 74 52 65 70 6C 79  50 6F 72 74 00 00 CC CC  31 03 5F 77 63 73 69 63  RequestWaitReplyPort..╠╠1♥_wcsic
00000DA0  6D 70 00 00 CC CC CC CC  CC CC CC CC CC CC CC CC  C9 00 49 6F 43 68 65 63  6B 46 75 6E 63 74 69 6F  mp..╠╠╠╠╠╠╠╠╠╠╠╠╔.IoCheckFunctio
00000DC0  6E 41 63 63 65 73 73 00  8B 02 52 74 6C 50 72 65  66 69 78 55 6E 69 63 6F  64 65 53 74 72 69 6E 67  nAccess.ï☻RtlPrefixUnicodeString
00000DE0  00 00 C7 01 4E 74 43 72  65 61 74 65 46 69 6C 65  00 00 CC CC 47 02 52 74  6C 45 71 75 61 6C 53 74  ..╟☺NtCreateFile..╠╠G☻RtlEqualSt
00000E00  72 69 6E 67 00 00 CC CC  A3 01 4D 6D 4C 6F 63 6B  50 61 67 61 62 6C 65 44  61 74 61 53 65 63 74 69  ring..╠╠ú☺MmLockPagableDataSecti
00000E20  6F 6E 00 00 CC CC CC CC  BD 00 49 6F 41 6C 6C 6F  63 61 74 65 4D 64 6C 00  AC 01 4D 6D 50 72 6F 62  on..╠╠╠╠╜.IoAllocateMdl.¼☺MmProb
00000E40  65 41 6E 64 4C 6F 63 6B  50 61 67 65 73 00 CC CC  F1 01 4F 62 52 65 66 65  72 65 6E 63 65 4F 62 6A  eAndLockPages.╠╠±☺ObReferenceObj
00000E60  65 63 74 42 79 50 6F 69  6E 74 65 72 00 00 CC CC  BC 00 49 6F 41 6C 6C 6F  63 61 74 65 49 72 70 00  ectByPointer..╠╠╝.IoAllocateIrp.
00000E80  E2 00 49 6F 47 65 74 43  75 72 72 65 6E 74 50 72  6F 63 65 73 73 00 F0 01  4F 62 52 65 66 65 72 65  Γ.IoGetCurrentProcess.≡☺ObRefere
00000EA0  6E 63 65 4F 62 6A 65 63  74 42 79 48 61 6E 64 6C  65 00 22 01 4B 65 42 75  67 43 68 65 63 6B 45 78  nceObjectByHandle."☺KeBugCheckEx
00000EC0  00 00 E7 00 49 6F 47 65  74 52 65 6C 61 74 65 64  44 65 76 69 63 65 4F 62  6A 65 63 74 00 00 CC CC  ..τ.IoGetRelatedDeviceObject..╠╠
00000EE0  9C 02 52 74 6C 54 69 6D  65 46 69 65 6C 64 73 54  6F 54 69 6D 65 00 4A 00  45 78 4C 6F 63 61 6C 54  £☻RtlTimeFieldsToTime.J.ExLocalT
00000F00  69 6D 65 54 6F 53 79 73  74 65 6D 54 69 6D 65 00  59 00 45 78 52 65 6C 65  61 73 65 52 65 73 6F 75  imeToSystemTime.Y.ExReleaseResou
00000F20  72 63 65 4C 69 74 65 00  DD 01 4E 74 52 65 61 64  46 69 6C 65 00 00 5B 00  45 78 53 79 73 74 65 6D  rceLite.▌☺NtReadFile..[.ExSystem
00000F40  54 69 6D 65 54 6F 4C 6F  63 61 6C 54 69 6D 65 00  9D 02 52 74 6C 54 69 6D  65 54 6F 53 65 63 6F 6E  TimeToLocalTime.¥☻RtlTimeToSecon
00000F60  64 73 53 69 6E 63 65 31  39 37 30 00 2E 00 45 78  41 6C 6C 6F 63 61 74 65  50 6F 6F 6C 57 69 74 68  dsSince1970...ExAllocatePoolWith
00000F80  54 61 67 00 CC CC CC CC  27 01 4B 65 44 65 6C 61  79 45 78 65 63 75 74 69  6F 6E 54 68 72 65 61 64  Tag.╠╠╠╠'☺KeDelayExecutionThread
00000FA0  00 00 CC CC 5B 02 52 74  6C 46 72 65 65 4F 65 6D  53 74 72 69 6E 67 00 00  60 02 52 74 6C 47 65 74  ..╠╠[☻RtlFreeOemString..`☻RtlGet
00000FC0  44 61 63 6C 53 65 63 75  72 69 74 79 44 65 73 63  72 69 70 74 6F 72 00 00  CC CC CC CC CC CC CC CC  DaclSecurityDescriptor..╠╠╠╠╠╠╠╠
00000FE0  5D 00 45 78 66 49 6E 74  65 72 6C 6F 63 6B 65 64  41 64 64 55 6C 6F 6E 67  00 00 CC CC CC CC CC CC  ].ExfInterlockedAddUlong..╠╠╠╠╠╠
00001000  8C 01 4C 73 61 44 65 72  65 67 69 73 74 65 72 4C  6F 67 6F 6E 50 72 6F 63  65 73 73 00 B4 01 4D 6D  î☺LsaDeregisterLogonProcess.┤☺Mm
00001020  55 6E 6C 6F 63 6B 50 61  67 61 62 6C 65 49 6D 61  67 65 53 65 63 74 69 6F  6E 00 CC CC D4 02 53 65  UnlockPagableImageSection.╠╠╘☻Se
00001040  52 65 6C 65 61 73 65 53  75 62 6A 65 63 74 43 6F  6E 74 65 78 74 00 43 01  4B 65 49 6E 69 74 69 61  ReleaseSubjectContext.C☺KeInitia
00001060  6C 69 7A 65 51 75 65 75  65 00 CF 00 49 6F 43 72  65 61 74 65 46 69 6C 65  00 00 CC CC 3E 01 4B 65  lizeQueue.╧.IoCreateFile..╠╠>☺Ke
00001080  49 6E 69 74 69 61 6C 69  7A 65 44 70 63 00 CC CC  79 02 52 74 6C 4C 65 6E  67 74 68 52 65 71 75 69  InitializeDpc.╠╠y☻RtlLengthRequi
000010A0  72 65 64 53 69 64 00 00  6B 02 52 74 6C 49 6E 69  74 69 61 6C 69 7A 65 53  69 64 00 00 9B 02 52 74  redSid..k☻RtlInitializeSid..¢☻Rt
000010C0  6C 53 75 62 41 75 74 68  6F 72 69 74 79 53 69 64  00 00 33 02 52 74 6C 43  72 65 61 74 65 41 63 6C  lSubAuthoritySid..3☻RtlCreateAcl
000010E0  00 00 CC CC CC CC CC CC  14 02 52 74 6C 41 64 64  41 63 63 65 73 73 41 6C  6C 6F 77 65 64 41 63 65  ..╠╠╠╠╠╠¶☻RtlAddAccessAllowedAce
00001100  00 00 CC CC CC CC CC CC  94 02 52 74 6C 53 65 74  44 61 63 6C 53 65 63 75  72 69 74 79 44 65 73 63  ..╠╠╠╠╠╠ö☻RtlSetDaclSecurityDesc
00001120  72 69 70 74 6F 72 00 00  96 02 52 74 6C 53 65 74  4F 77 6E 65 72 53 65 63  75 72 69 74 79 44 65 73  riptor..û☻RtlSetOwnerSecurityDes
00001140  63 72 69 70 74 6F 72 00  67 02 52 74 6C 49 6E 69  74 53 74 72 69 6E 67 00  90 01 4C 73 61 52 65 67  criptor.g☻RtlInitString.É☺LsaReg
00001160  69 73 74 65 72 4C 6F 67  6F 6E 50 72 6F 63 65 73  73 00 CC CC 8F 01 4C 73  61 4C 6F 6F 6B 75 70 41  isterLogonProcess.╠╠Å☺LsaLookupA
00001180  75 74 68 65 6E 74 69 63  61 74 69 6F 6E 50 61 63  6B 61 67 65 00 00 CC CC  19 02 52 74 6C 41 6E 73  uthenticationPackage..╠╠↓☻RtlAns
000011A0  69 53 74 72 69 6E 67 54  6F 55 6E 69 63 6F 64 65  53 74 72 69 6E 67 00 00  5C 02 52 74 6C 46 72 65  iStringToUnicodeString..\☻RtlFre
000011C0  65 55 6E 69 63 6F 64 65  53 74 72 69 6E 67 00 00  A7 01 4D 6D 4D 61 70 4C  6F 63 6B 65 64 50 61 67  eUnicodeString..º☺MmMapLockedPag
000011E0  65 73 00 00 C3 00 49 6F  42 75 69 6C 64 50 61 72  74 69 61 6C 4D 64 6C 00  DF 00 49 6F 46 72 65 65  es..├.IoBuildPartialMdl.▀.IoFree
00001200  4D 64 6C 00 CC CC CC CC  CC CC CC CC CC CC CC CC  45 02 52 74 6C 45 71 75  61 6C 4C 75 69 64 00 00  Mdl.╠╠╠╠╠╠╠╠╠╠╠╠E☻RtlEqualLuid..
00001220  56 01 4B 65 51 75 65 72  79 54 69 6D 65 49 6E 63  72 65 6D 65 6E 74 00 00  5A 01 4B 65 52 65 61 64  V☺KeQueryTimeIncrement..Z☺KeRead
00001240  53 74 61 74 65 51 75 65  75 65 00 00 2B 00 45 78  41 6C 6C 6F 63 61 74 65  50 6F 6F 6C 00 00 CC CC  StateQueue..+.ExAllocatePool..╠╠
00001260  36 00 45 78 46 72 65 65  50 6F 6F 6C 00 00 16 01  49 6F 66 43 6F 6D 70 6C  65 74 65 52 65 71 75 65  6.ExFreePool..▬☺IofCompleteReque
00001280  73 74 00 00 15 01 49 6F  66 43 61 6C 6C 44 72 69  76 65 72 00 49 01 4B 65  49 6E 73 65 72 74 48 65  st..§☺IofCallDriver.I☺KeInsertHe
000012A0  61 64 51 75 65 75 65 00  4E 00 45 78 51 75 65 75  65 57 6F 72 6B 49 74 65  6D 00 D5 00 49 6F 44 65  adQueue.N.ExQueueWorkItem.╒.IoDe
000012C0  6C 65 74 65 44 65 76 69  63 65 00 00 CE 00 49 6F  43 72 65 61 74 65 44 65  76 69 63 65 00 00 FA 00  leteDevice..╬.IoCreateDevice..·.
000012E0  49 6F 52 65 67 69 73 74  65 72 53 68 75 74 64 6F  77 6E 4E 6F 74 69 66 69  63 61 74 69 6F 6E 00 00  IoRegisterShutdownNotification..
00001300  BB 00 49 6F 41 6C 6C 6F  63 61 74 65 45 72 72 6F  72 4C 6F 67 45 6E 74 72  79 00 CC CC CC CC CC CC  ╗.IoAllocateErrorLogEntry.╠╠╠╠╠╠
00001320  12 01 49 6F 57 72 69 74  65 45 72 72 6F 72 4C 6F  67 45 6E 74 72 79 00 00  CC CC CC CC CC CC CC CC  ↕☺IoWriteErrorLogEntry..╠╠╠╠╠╠╠╠
00001340  B3 02 52 74 6C 55 70 70  65 72 43 68 61 72 00 00  3E 03 6D 65 6D 6D 6F 76  65 00 A5 02 52 74 6C 55  │☻RtlUpperChar..>♥memmove.Ñ☻RtlU
00001360  6E 69 63 6F 64 65 53 74  72 69 6E 67 54 6F 4F 65  6D 53 74 72 69 6E 67 00  CC CC CC CC CC CC CC CC  nicodeStringToOemString.╠╠╠╠╠╠╠╠
00001380  E1 01 4E 74 53 65 74 49  6E 66 6F 72 6D 61 74 69  6F 6E 46 69 6C 65 00 00  E8 01 4E 74 57 72 69 74  ß☺NtSetInformationFile..Φ☺NtWrit
000013A0  65 46 69 6C 65 00 4A 01  4B 65 49 6E 73 65 72 74  51 75 65 75 65 00 CC CC  CC CC CC CC CC CC CC CC  eFile.J☺KeInsertQueue.╠╠╠╠╠╠╠╠╠╠
000013C0  EA 00 49 6F 49 6E 69 74  69 61 6C 69 7A 65 49 72  70 00 CC CC 94 01 4D 6D  42 75 69 6C 64 4D 64 6C  Ω.IoInitializeIrp.╠╠ö☺MmBuildMdl
000013E0  46 6F 72 4E 6F 6E 50 61  67 65 64 50 6F 6F 6C 00  B3 01 4D 6D 53 69 7A 65  4F 66 4D 64 6C 00 CC CC  ForNonPagedPool.│☺MmSizeOfMdl.╠╠
00001400  52 03 77 63 73 6C 65 6E  00 00 88 02 52 74 6C 4F  65 6D 53 74 72 69 6E 67  54 6F 55 6E 69 63 6F 64  R♥wcslen..ê☻RtlOemStringToUnicod
00001420  65 53 74 72 69 6E 67 00  6F 01 4B 65 53 65 74 54  61 72 67 65 74 50 72 6F  63 65 73 73 6F 72 44 70  eString.o☺KeSetTargetProcessorDp
00001440  63 00 CC CC 0E 00 43 63  4D 64 6C 57 72 69 74 65  43 6F 6D 70 6C 65 74 65  00 00 24 01 4B 65 43 6C  c.╠╠♫.CcMdlWriteComplete..$☺KeCl
00001460  65 61 72 45 76 65 6E 74  00 00 CC CC 71 01 4B 65  53 65 74 54 69 6D 65 72  00 00 CC CC 23 01 4B 65  earEvent..╠╠q☺KeSetTimer..╠╠#☺Ke
00001480  43 61 6E 63 65 6C 54 69  6D 65 72 00 CC CC CC CC  57 01 4B 65 52 65 61 64  53 74 61 74 65 45 76 65  CancelTimer.╠╠╠╠W☺KeReadStateEve
000014A0  6E 74 00 00 CC CC CC CC  7A 01 4B 65 57 61 69 74  46 6F 72 53 69 6E 67 6C  65 4F 62 6A 65 63 74 00  nt..╠╠╠╠z☺KeWaitForSingleObject.
000014C0  60 00 45 78 66 49 6E 74  65 72 6C 6F 63 6B 65 64  50 6F 70 45 6E 74 72 79  4C 69 73 74 00 00 3F 01  `.ExfInterlockedPopEntryList..?☺
000014E0  4B 65 49 6E 69 74 69 61  6C 69 7A 65 45 76 65 6E  74 00 46 01 4B 65 49 6E  69 74 69 61 6C 69 7A 65  KeInitializeEvent.F☺KeInitialize
00001500  54 69 6D 65 72 00 CC CC  D8 01 4E 74 51 75 65 72  79 49 6E 66 6F 72 6D 61  74 69 6F 6E 46 69 6C 65  Timer.╠╠╪☺NtQueryInformationFile
00001520  00 00 BD 01 4E 6C 73 4D  62 4F 65 6D 43 6F 64 65  50 61 67 65 54 61 67 00  BD 02 52 74 6C 78 55 6E  ..╜☺NlsMbOemCodePageTag.╜☻RtlxUn
00001540  69 63 6F 64 65 53 74 72  69 6E 67 54 6F 4F 65 6D  53 69 7A 65 00 00 CC CC  7B 01 4B 65 66 41 63 71  icodeStringToOemSize..╠╠{☺KefAcq
00001560  75 69 72 65 53 70 69 6E  4C 6F 63 6B 41 74 44 70  63 4C 65 76 65 6C 00 00  D3 01 4E 74 4F 70 65 6E  uireSpinLockAtDpcLevel..╙☺NtOpen
00001580  46 69 6C 65 00 00 CC CC  DC 01 4E 74 51 75 65 72  79 56 6F 6C 75 6D 65 49  6E 66 6F 72 6D 61 74 69  File..╠╠▄☺NtQueryVolumeInformati
000015A0  6F 6E 46 69 6C 65 00 00  CC CC CC CC CC CC CC CC  68 02 52 74 6C 49 6E 69  74 55 6E 69 63 6F 64 65  onFile..╠╠╠╠╠╠╠╠h☻RtlInitUnicode
000015C0  53 74 72 69 6E 67 00 00  7A 02 52 74 6C 4C 65 6E  67 74 68 53 65 63 75 72  69 74 79 44 65 73 63 72  String..z☻RtlLengthSecurityDescr
000015E0  69 70 74 6F 72 00 54 01  4B 65 51 75 65 72 79 53  79 73 74 65 6D 54 69 6D  65 00 32 02 52 74 6C 43  iptor.T☺KeQuerySystemTime.2☻RtlC
00001600  6F 70 79 55 6E 69 63 6F  64 65 53 74 72 69 6E 67  00 00 C7 00 49 6F 43 68  65 63 6B 44 65 73 69 72  opyUnicodeString..╟.IoCheckDesir
00001620  65 64 41 63 63 65 73 73  00 00 C3 02 53 65 43 61  70 74 75 72 65 53 75 62  6A 65 63 74 43 6F 6E 74  edAccess..├☻SeCaptureSubjectCont
00001640  65 78 74 00 BE 02 53 65  41 63 63 65 73 73 43 68  65 63 6B 00 48 02 52 74  6C 45 71 75 61 6C 55 6E  ext.╛☻SeAccessCheck.H☻RtlEqualUn
00001660  69 63 6F 64 65 53 74 72  69 6E 67 00 B3 00 49 6E  74 65 72 6C 6F 63 6B 65  64 44 65 63 72 65 6D 65  icodeString.│.InterlockedDecreme
00001680  6E 74 00 00 7C 01 4B 65  66 52 65 6C 65 61 73 65  53 70 69 6E 4C 6F 63 6B  46 72 6F 6D 44 70 63 4C  nt..|☺KefReleaseSpinLockFromDpcL
000016A0  65 76 65 6C 00 00 CC CC  6B 01 4B 65 53 65 74 45  76 65 6E 74 00 00 CC CC  AB 02 52 74 6C 55 70 63  evel..╠╠k☺KeSetEvent..╠╠½☻RtlUpc
000016C0  61 73 65 55 6E 69 63 6F  64 65 43 68 61 72 00 00  74 01 4B 65 54 69 63 6B  43 6F 75 6E 74 00 32 00  aseUnicodeChar..t☺KeTickCount.2.
000016E0  45 78 44 65 6C 65 74 65  52 65 73 6F 75 72 63 65  4C 69 74 65 00 00 F2 01  4F 62 66 44 65 72 65 66  ExDeleteResourceLite..≥☺ObfDeref
00001700  65 72 65 6E 63 65 4F 62  6A 65 63 74 00 00 27 02  52 74 6C 43 6F 6D 70 61  72 65 4D 65 6D 6F 72 79  erenceObject..'☻RtlCompareMemory
00001720  00 00 CC CC CC CC CC CC  2A 02 52 74 6C 43 6F 6D  70 61 72 65 55 6E 69 63  6F 64 65 53 74 72 69 6E  ..╠╠╠╠╠╠*☻RtlCompareUnicodeStrin
00001740  67 00 CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  B5 00 49 6E 74 65 72 6C  6F 63 6B 65 64 49 6E 63  g.╠╠╠╠╠╠╠╠╠╠╠╠╠╠╡.InterlockedInc
00001760  72 65 6D 65 6E 74 00 00  27 00 45 78 41 63 71 75  69 72 65 52 65 73 6F 75  72 63 65 45 78 63 6C 75  rement..'.ExAcquireResourceExclu
00001780  73 69 76 65 4C 69 74 65  00 00 CC CC CC CC CC CC  48 41 4C 2E 64 6C 6C 00  40 00 4B 65 47 65 74 43  siveLite..╠╠╠╠╠╠HAL.dll.@.KeGetC
000017A0  75 72 72 65 6E 74 49 72  71 6C 00 00 CC CC CC CC  48 00 4B 66 52 61 69 73  65 49 72 71 6C 00 47 00  urrentIrql..╠╠╠╠H.KfRaiseIrql.G.
000017C0  4B 66 4C 6F 77 65 72 49  72 71 6C 00 46 00 4B 66  41 63 71 75 69 72 65 53  70 69 6E 4C 6F 63 6B 00  KfLowerIrql.F.KfAcquireSpinLock.
000017E0  49 00 4B 66 52 65 6C 65  61 73 65 53 70 69 6E 4C  6F 63 6B 00 CC CC CC CC  54 44 49 2E 53 59 53 00  I.KfReleaseSpinLock.╠╠╠╠TDI.SYS.
00001800  18 00 54 64 69 4F 70 65  6E 4E 65 74 62 69 6F 73  41 64 64 72 65 73 73 00  0D 00 54 64 69 43 6F 70  ↑.TdiOpenNetbiosAddress.♪.TdiCop
00001820  79 42 75 66 66 65 72 54  6F 4D 64 6C 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  yBufferToMdl....................