/ Quick PC 62 / Quick PC 62.iso / Programs / PowerQuest.PartitionMagic.v8.02.WinALL / DKeeper / DKeeper.cab / PqFsmonNt.sys / COFF_SYMBOLS

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000010| 03 00 00 00 00 00 82 13 | 00 00 b0 43 00 00 02 00 |........|...C....|
|00000020| 00 00 03 00 24 53 47 35 | 38 34 39 00 5e 3e 00 00 |....$SG5|849.^>..|
|00000030| 01 00 00 00 03 00 40 63 | 6f 6d 70 2e 69 64 00 00 |......@c|omp.id..|
|00000040| 00 00 ff ff 00 00 03 00 | 24 53 47 36 39 32 38 00 |........|$SG6928.|
|00000050| 52 2c 00 00 01 00 00 00 | 03 00 24 53 47 37 35 32 |R,......|..$SG752|
|00000060| 36 00 1c 3b 00 00 01 00 | 00 00 03 00 40 63 6f 6d |6..;....|....@com|
|00000070| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 24 54 |p.id....|......$T|
|00000080| 36 30 31 38 00 00 80 04 | 00 00 01 00 00 00 03 00 |6018....|........|
|00000090| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|000000a0| 03 00 40 63 6f 6d 70 2e | 69 64 00 00 00 00 ff ff |..@comp.|id......|
|000000b0| 00 00 03 00 40 63 6f 6d | 70 2e 69 64 00 00 00 00 |....@com|p.id....|
|000000c0| ff ff 00 00 03 00 40 63 | 6f 6d 70 2e 69 64 00 00 |......@c|omp.id..|
|000000d0| 00 00 ff ff 00 00 03 00 | 40 63 6f 6d 70 2e 69 64 |........|@comp.id|
|000000e0| 00 00 00 00 ff ff 00 00 | 03 00 24 53 47 35 38 32 |........|..$SG582|
|000000f0| 39 00 46 12 00 00 01 00 | 00 00 03 00 24 53 47 35 |9.F.....|....$SG5|
|00000100| 38 32 38 00 2a 12 00 00 | 01 00 00 00 03 00 24 53 |828.*...|......$S|
|00000110| 47 35 38 32 37 00 0e 12 | 00 00 01 00 00 00 03 00 |G5827...|........|
|00000120| 24 53 47 35 38 32 36 00 | f2 11 00 00 01 00 00 00 |$SG5826.|........|
|00000130| 03 00 24 53 47 35 38 32 | 35 00 d6 11 00 00 01 00 |..$SG582|5.......|
|00000140| 00 00 03 00 24 53 47 35 | 38 32 34 00 ba 11 00 00 |....$SG5|824.....|
|00000150| 01 00 00 00 03 00 24 53 | 47 35 38 32 33 00 9e 11 |......$S|G5823...|
|00000160| 00 00 01 00 00 00 03 00 | 24 53 47 35 38 32 32 00 |........|$SG5822.|
|00000170| 72 11 00 00 01 00 00 00 | 03 00 24 53 47 35 38 32 |r.......|..$SG582|
|00000180| 31 00 62 11 00 00 01 00 | 00 00 03 00 40 63 6f 6d |1.b.....|....@com|
|00000190| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 24 53 |p.id....|......$S|
|000001a0| 47 37 38 33 38 00 6a 0e | 00 00 01 00 00 00 03 00 |G7838.j.|........|
|000001b0| 24 53 47 37 38 33 36 00 | 56 0e 00 00 01 00 00 00 |$SG7836.|V.......|
|000001c0| 03 00 40 63 6f 6d 70 2e | 69 64 00 00 00 00 ff ff |..@comp.|id......|
|000001d0| 00 00 03 00 40 63 6f 6d | 70 2e 69 64 00 00 00 00 |....@com|p.id....|
|000001e0| ff ff 00 00 03 00 24 52 | 30 30 30 30 30 30 e0 8c |......$R|000000..|
|000001f0| 00 00 04 00 00 00 03 00 | 2e 69 64 61 74 61 24 36 |........|.idata$6|
|00000200| 1a 8c 00 00 03 00 00 00 | 03 00 2e 74 65 78 74 00 |........|...text.|
|00000210| 00 00 0c 42 00 00 01 00 | 00 00 03 01 d1 00 00 00 |...B....|........|
|00000220| 04 00 47 00 00 00 00 00 | 00 00 00 00 00 00 24 24 |..G.....|......$$|
|00000230| 24 30 30 30 30 31 14 42 | 00 00 01 00 20 00 03 01 |$00001.B|.... ...|
|00000240| 0e 00 00 00 00 00 00 00 | ae 01 00 00 13 00 00 00 |........|........|
|00000250| 00 00 24 24 24 30 30 30 | 30 34 dd 42 00 00 01 00 |..$$$000|04.B....|
|00000260| 20 00 03 01 23 00 00 00 | 00 00 00 00 52 03 00 00 | ...#...|....R...|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 a9 13 00 00 8c 42 |........|.......B|
|00000280| 00 00 01 00 00 00 03 00 | 00 00 00 00 b6 13 00 00 |........|........|
|00000290| 97 42 00 00 01 00 00 00 | 03 00 00 00 00 00 c2 13 |.B......|........|
|000002a0| 00 00 ba 42 00 00 01 00 | 00 00 03 00 5f 6c 68 5f |...B....|...._lh_|
|000002b0| 74 6f 70 00 43 42 00 00 | 01 00 00 00 03 00 00 00 |top.CB..|........|
|000002c0| 00 00 cd 13 00 00 9e 42 | 00 00 01 00 00 00 03 00 |.......B|........|
|000002d0| 00 00 00 00 d7 13 00 00 | a5 42 00 00 01 00 00 00 |........|.B......|
|000002e0| 03 00 2e 74 65 78 74 00 | 00 00 4c 41 00 00 01 00 |...text.|..LA....|
|000002f0| 00 00 03 01 bf 00 00 00 | 04 00 3d 00 00 00 00 00 |........|..=.....|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 e5 13 00 00 64 41 |........|......dA|
|00000310| 00 00 01 00 00 00 03 00 | 24 24 24 30 30 30 30 31 |........|$$$00001|
|00000320| 4c 41 00 00 01 00 20 00 | 03 01 0f 00 00 00 00 00 |LA.... .|........|
|00000330| 00 00 9c 01 00 00 14 00 | 00 00 00 00 24 24 24 30 |........|....$$$0|
|00000340| 30 30 30 33 6c 41 00 00 | 01 00 20 00 03 01 1d 00 |0003lA..|.. .....|
|00000350| 00 00 00 00 00 00 cc 01 | 00 00 22 00 00 00 00 00 |........|..".....|
|00000360| 00 00 00 00 f0 13 00 00 | 6c 41 00 00 01 00 20 00 |........|lA.... .|
|00000370| 03 01 24 00 00 00 22 00 | 00 00 d2 01 00 00 29 00 |..$...".|......).|
|00000380| 00 00 00 00 24 24 24 30 | 30 30 30 35 8e 41 00 00 |....$$$0|0005.A..|
|00000390| 01 00 20 00 03 01 2b 00 | 00 00 00 00 00 00 08 02 |.. ...+.|........|
|000003a0| 00 00 30 00 00 00 00 00 | 24 24 24 30 30 30 30 37 |..0.....|$$$00007|
|000003b0| e8 41 00 00 01 00 20 00 | 03 01 39 00 00 00 00 00 |.A.... .|..9.....|
|000003c0| 00 00 c2 02 00 00 3e 00 | 00 00 00 00 24 24 24 30 |......>.|....$$$0|
|000003d0| 30 30 30 39 0b 42 00 00 | 01 00 20 00 03 01 47 00 |0009.B..|.. ...G.|
|000003e0| 00 00 00 00 00 00 04 03 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 5f 6c 75 5f 64 6f 6e 65 | da 41 00 00 01 00 00 00 |_lu_done|.A......|
|00000400| 03 00 00 00 00 00 01 14 | 00 00 8d 41 00 00 01 00 |........|...A....|
|00000410| 00 00 03 00 00 00 00 00 | 0c 14 00 00 d8 41 00 00 |........|.....A..|
|00000420| 01 00 00 00 03 00 5f 6c | 75 5f 74 6f 70 00 ab 41 |......_l|u_top..A|
|00000430| 00 00 01 00 00 00 03 00 | 5f 61 74 5f 64 6f 6e 65 |........|_at_done|
|00000440| 0a 42 00 00 01 00 00 00 | 03 00 2e 69 64 61 74 61 |.B......|...idata|
|00000450| 24 36 74 8c 00 00 03 00 | 00 00 03 00 68 65 61 64 |$6t.....|....head|
|00000460| 65 72 00 00 00 00 00 00 | fe ff 00 00 02 00 00 00 |er......|........|
|00000470| 00 00 fc 0a 00 00 00 00 | 00 00 ff ff 00 00 02 00 |........|........|
|00000480| 00 00 00 00 53 13 00 00 | 80 02 00 00 01 00 00 00 |....S...|........|
|00000490| 02 00 00 00 00 00 8d 08 | 00 00 84 02 00 00 01 00 |........|........|
|000004a0| 00 00 02 00 00 00 00 00 | 71 08 00 00 88 02 00 00 |........|q.......|
|000004b0| 01 00 00 00 02 00 00 00 | 00 00 6d 13 00 00 8c 02 |........|..m.....|
|000004c0| 00 00 01 00 00 00 02 00 | 00 00 00 00 c8 05 00 00 |........|........|
|000004d0| 90 02 00 00 01 00 00 00 | 02 00 00 00 00 00 e8 05 |........|........|
|000004e0| 00 00 94 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000004f0| 7a 05 00 00 98 02 00 00 | 01 00 00 00 02 00 00 00 |z.......|........|
|00000500| 00 00 23 06 00 00 9c 02 | 00 00 01 00 00 00 02 00 |..#.....|........|
|00000510| 00 00 00 00 0f 10 00 00 | a0 02 00 00 01 00 00 00 |........|........|
|00000520| 02 00 00 00 00 00 80 06 | 00 00 a4 02 00 00 01 00 |........|........|
|00000530| 00 00 02 00 00 00 00 00 | 9c 06 00 00 a8 02 00 00 |........|........|
|00000540| 01 00 00 00 02 00 00 00 | 00 00 ba 06 00 00 ac 02 |........|........|
|00000550| 00 00 01 00 00 00 02 00 | 00 00 00 00 d2 06 00 00 |........|........|
|00000560| b0 02 00 00 01 00 00 00 | 02 00 00 00 00 00 f0 06 |........|........|
|00000570| 00 00 b4 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000580| 09 07 00 00 b8 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000590| 00 00 43 07 00 00 bc 02 | 00 00 01 00 00 00 02 00 |..C.....|........|
|000005a0| 00 00 00 00 a9 10 00 00 | bc 02 00 00 01 00 00 00 |........|........|
|000005b0| 02 00 00 00 00 00 52 07 | 00 00 c0 02 00 00 01 00 |......R.|........|
|000005c0| 00 00 02 00 00 00 00 00 | 78 07 00 00 c4 02 00 00 |........|x.......|
|000005d0| 01 00 00 00 02 00 00 00 | 00 00 88 07 00 00 c8 02 |........|........|
|000005e0| 00 00 01 00 00 00 02 00 | 00 00 00 00 98 07 00 00 |........|........|
|000005f0| cc 02 00 00 01 00 00 00 | 02 00 00 00 00 00 d2 10 |........|........|
|00000600| 00 00 d0 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000610| 26 05 00 00 d4 02 00 00 | 01 00 00 00 02 00 00 00 |&.......|........|
|00000620| 00 00 97 0f 00 00 d8 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000630| 00 00 00 00 e5 09 00 00 | dc 02 00 00 01 00 00 00 |........|........|
|00000640| 02 00 00 00 00 00 f8 09 | 00 00 e0 02 00 00 01 00 |........|........|
|00000650| 00 00 02 00 00 00 00 00 | 0d 0a 00 00 e4 02 00 00 |........|........|
|00000660| 01 00 00 00 02 00 00 00 | 00 00 35 0a 00 00 e8 02 |........|..5.....|
|00000670| 00 00 01 00 00 00 02 00 | 00 00 00 00 55 0a 00 00 |........|....U...|
|00000680| ec 02 00 00 01 00 00 00 | 02 00 00 00 00 00 74 0a |........|......t.|
|00000690| 00 00 f0 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000006a0| 9c 0a 00 00 f4 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|000006b0| 00 00 99 11 00 00 f8 02 | 00 00 01 00 00 00 02 00 |........|........|
|000006c0| 00 00 00 00 d1 0a 00 00 | fc 02 00 00 01 00 00 00 |........|........|
|000006d0| 02 00 00 00 00 00 53 0e | 00 00 00 03 00 00 01 00 |......S.|........|
|000006e0| 00 00 02 00 00 00 00 00 | ba 0e 00 00 04 03 00 00 |........|........|
|000006f0| 01 00 00 00 02 00 00 00 | 00 00 cb 0e 00 00 08 03 |........|........|
|00000700| 00 00 01 00 00 00 02 00 | 00 00 00 00 62 12 00 00 |........|....b...|
|00000710| 0c 03 00 00 01 00 00 00 | 02 00 00 00 00 00 08 0f |........|........|
|00000720| 00 00 10 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000730| 2c 0f 00 00 14 03 00 00 | 01 00 00 00 02 00 00 00 |,.......|........|
|00000740| 00 00 43 0f 00 00 18 03 | 00 00 01 00 00 00 02 00 |..C.....|........|
|00000750| 00 00 00 00 fb 12 00 00 | 1c 03 00 00 01 00 00 00 |........|........|
|00000760| 02 00 00 00 00 00 3a 05 | 00 00 20 03 00 00 01 00 |......:.|.. .....|
|00000770| 00 00 02 00 00 00 00 00 | 08 09 00 00 24 03 00 00 |........|....$...|
|00000780| 01 00 00 00 02 00 00 00 | 00 00 0f 05 00 00 28 03 |........|......(.|
|00000790| 00 00 01 00 00 00 02 00 | 00 00 00 00 9a 09 00 00 |........|........|
|000007a0| 2c 03 00 00 01 00 00 00 | 02 00 00 00 00 00 e1 12 |,.......|........|
|000007b0| 00 00 30 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..0.....|........|
|000007c0| 13 00 00 00 94 03 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|000007d0| 00 00 69 00 00 00 b0 03 | 00 00 01 00 00 00 02 00 |..i.....|........|
|000007e0| 00 00 00 00 a5 00 00 00 | c0 03 00 00 01 00 00 00 |........|........|
|000007f0| 02 00 00 00 00 00 e1 00 | 00 00 d0 03 00 00 01 00 |........|........|
|00000800| 00 00 02 00 00 00 00 00 | 27 01 00 00 e4 03 00 00 |........|'.......|
|00000810| 01 00 00 00 02 00 00 00 | 00 00 5d 01 00 00 f4 03 |........|..].....|
|00000820| 00 00 01 00 00 00 02 00 | 00 00 00 00 9e 01 00 00 |........|........|
|00000830| 08 04 00 00 01 00 00 00 | 02 00 00 00 00 00 cf 01 |........|........|
|00000840| 00 00 14 04 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000850| 0b 02 00 00 24 04 00 00 | 01 00 00 00 02 00 00 00 |....$...|........|
|00000860| 00 00 28 02 00 00 28 04 | 00 00 01 00 00 00 02 00 |..(...(.|........|
|00000870| 00 00 00 00 69 02 00 00 | 3c 04 00 00 01 00 00 00 |....i...|<.......|
|00000880| 02 00 00 00 00 00 a5 02 | 00 00 4c 04 00 00 01 00 |........|..L.....|
|00000890| 00 00 02 00 00 00 00 00 | e6 02 00 00 60 04 00 00 |........|....`...|
|000008a0| 01 00 00 00 02 00 00 00 | 00 00 27 03 00 00 74 04 |........|..'...t.|
|000008b0| 00 00 01 00 00 00 02 00 | 00 00 00 00 52 03 00 00 |........|....R...|
|000008c0| 8c 04 00 00 01 00 20 00 | 02 00 00 00 00 00 73 03 |...... .|......s.|
|000008d0| 00 00 a4 04 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|000008e0| 89 03 00 00 b8 0d 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|000008f0| 00 00 a1 03 00 00 36 0e | 00 00 01 00 20 00 02 00 |......6.|.... ...|
|00000900| 00 00 00 00 04 00 00 00 | 84 0e 00 00 01 00 20 00 |........|...... .|
|00000910| 02 00 00 00 00 00 b4 03 | 00 00 e0 10 00 00 01 00 |........|........|
|00000920| 20 00 02 00 00 00 00 00 | cb 03 00 00 52 11 00 00 | .......|....R...|
|00000930| 01 00 20 00 02 00 00 00 | 00 00 60 07 00 00 61 12 |.. .....|..`...a.|
|00000940| 00 00 01 00 20 00 02 00 | 00 00 00 00 c9 07 00 00 |.... ...|........|
|00000950| c2 12 00 00 01 00 20 00 | 02 00 00 00 00 00 de 07 |...... .|........|
|00000960| 00 00 5c 13 00 00 01 00 | 20 00 02 00 00 00 00 00 |..\.....| .......|
|00000970| f3 07 00 00 72 13 00 00 | 01 00 20 00 02 00 00 00 |....r...|.. .....|
|00000980| 00 00 07 08 00 00 82 13 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000990| 00 00 00 00 1a 08 00 00 | 9c 13 00 00 01 00 20 00 |........|...... .|
|000009a0| 02 00 00 00 00 00 39 08 | 00 00 66 14 00 00 01 00 |......9.|..f.....|
|000009b0| 20 00 02 00 00 00 00 00 | 58 08 00 00 a4 14 00 00 | .......|X.......|
|000009c0| 01 00 20 00 02 00 00 00 | 00 00 57 06 00 00 c8 14 |.. .....|..W.....|
|000009d0| 00 00 01 00 20 00 02 00 | 00 00 00 00 a9 08 00 00 |.... ...|........|
|000009e0| fc 14 00 00 01 00 20 00 | 02 00 00 00 00 00 c4 08 |...... .|........|
|000009f0| 00 00 80 15 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000a00| de 08 00 00 ee 15 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000a10| 00 00 b0 05 00 00 f8 16 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000a20| 00 00 00 00 16 09 00 00 | ca 17 00 00 01 00 20 00 |........|...... .|
|00000a30| 02 00 00 00 00 00 3d 06 | 00 00 04 18 00 00 01 00 |......=.|........|
|00000a40| 20 00 02 00 00 00 00 00 | 2f 09 00 00 2c 18 00 00 | .......|/...,...|
|00000a50| 01 00 20 00 02 00 00 00 | 00 00 49 09 00 00 68 18 |.. .....|..I...h.|
|00000a60| 00 00 01 00 20 00 02 00 | 00 00 00 00 49 05 00 00 |.... ...|....I...|
|00000a70| b0 18 00 00 01 00 20 00 | 02 00 00 00 00 00 64 09 |...... .|......d.|
|00000a80| 00 00 94 1b 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000a90| 7e 09 00 00 7e 1c 00 00 | 01 00 20 00 02 00 00 00 |~...~...|.. .....|
|00000aa0| 00 00 ab 09 00 00 82 1d | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000ab0| 00 00 00 00 cc 09 00 00 | b2 1d 00 00 01 00 20 00 |........|...... .|
|00000ac0| 02 00 00 00 00 00 95 05 | 00 00 d0 1e 00 00 01 00 |........|........|
|00000ad0| 20 00 02 00 00 00 00 00 | 1c 0b 00 00 64 21 00 00 | .......|....d!..|
|00000ae0| 01 00 20 00 02 00 00 00 | 00 00 3d 0b 00 00 6c 22 |.. .....|..=...l"|
|00000af0| 00 00 01 00 20 00 02 00 | 00 00 00 00 53 0b 00 00 |.... ...|....S...|
|00000b00| 74 23 00 00 01 00 20 00 | 02 00 00 00 00 00 6a 0b |t#.... .|......j.|
|00000b10| 00 00 7c 24 00 00 01 00 | 20 00 02 00 00 00 00 00 |..|$....| .......|
|00000b20| 8a 0b 00 00 7c 25 00 00 | 01 00 20 00 02 00 00 00 |....|%..|.. .....|
|00000b30| 00 00 ad 0b 00 00 7c 26 | 00 00 01 00 20 00 02 00 |......|&|.... ...|
|00000b40| 00 00 00 00 c3 0b 00 00 | 88 27 00 00 01 00 20 00 |........|.'.... .|
|00000b50| 02 00 00 00 00 00 e1 0b | 00 00 8e 28 00 00 01 00 |........|...(....|
|00000b60| 20 00 02 00 00 00 00 00 | fc 0b 00 00 8a 29 00 00 | .......|.....)..|
|00000b70| 01 00 20 00 02 00 00 00 | 00 00 1c 0c 00 00 8a 2a |.. .....|.......*|
|00000b80| 00 00 01 00 20 00 02 00 | 00 00 00 00 38 0c 00 00 |.... ...|....8...|
|00000b90| 6a 2b 00 00 01 00 20 00 | 02 00 00 00 00 00 54 0c |j+.... .|......T.|
|00000ba0| 00 00 54 2c 00 00 01 00 | 20 00 02 00 00 00 00 00 |..T,....| .......|
|00000bb0| 71 0c 00 00 d6 2c 00 00 | 01 00 20 00 02 00 00 00 |q....,..|.. .....|
|00000bc0| 00 00 97 0c 00 00 d6 2d | 00 00 01 00 20 00 02 00 |.......-|.... ...|
|00000bd0| 00 00 00 00 bb 0c 00 00 | d6 2e 00 00 01 00 20 00 |........|...... .|
|00000be0| 02 00 00 00 00 00 d4 0c | 00 00 dc 2f 00 00 01 00 |........|.../....|
|00000bf0| 20 00 02 00 00 00 00 00 | f5 0c 00 00 d6 30 00 00 | .......|.....0..|
|00000c00| 01 00 20 00 02 00 00 00 | 00 00 16 0d 00 00 e6 31 |.. .....|.......1|
|00000c10| 00 00 01 00 20 00 02 00 | 00 00 00 00 38 0d 00 00 |.... ...|....8...|
|00000c20| e2 32 00 00 01 00 20 00 | 02 00 00 00 00 00 58 0d |.2.... .|......X.|
|00000c30| 00 00 f0 33 00 00 01 00 | 20 00 02 00 00 00 00 00 |...3....| .......|
|00000c40| 79 0d 00 00 fe 34 00 00 | 01 00 20 00 02 00 00 00 |y....4..|.. .....|
|00000c50| 00 00 a4 0d 00 00 f8 35 | 00 00 01 00 20 00 02 00 |.......5|.... ...|
|00000c60| 00 00 00 00 d0 0d 00 00 | f4 36 00 00 01 00 20 00 |........|.6.... .|
|00000c70| 02 00 00 00 00 00 eb 0d | 00 00 2a 38 00 00 01 00 |........|..*8....|
|00000c80| 20 00 02 00 00 00 00 00 | 0f 0e 00 00 28 39 00 00 | .......|....(9..|
|00000c90| 01 00 20 00 02 00 00 00 | 00 00 31 0e 00 00 22 3a |.. .....|..1...":|
|00000ca0| 00 00 01 00 20 00 02 00 | 00 00 00 00 04 06 00 00 |.... ...|........|
|00000cb0| 30 3b 00 00 01 00 20 00 | 02 00 00 00 00 00 a4 0e |0;.... .|........|
|00000cc0| 00 00 7e 3e 00 00 01 00 | 20 00 02 00 00 00 00 00 |..~>....| .......|
|00000cd0| 75 0e 00 00 2c 40 00 00 | 01 00 20 00 02 00 00 00 |u...,@..|.. .....|
|00000ce0| 00 00 8b 0e 00 00 74 40 | 00 00 01 00 20 00 02 00 |......t@|.... ...|
|00000cf0| 00 00 00 00 61 05 00 00 | 34 41 00 00 01 00 20 00 |....a...|4A.... .|
|00000d00| 02 00 00 00 00 00 6f 06 | 00 00 3a 41 00 00 01 00 |......o.|..:A....|
|00000d10| 20 00 02 00 00 00 00 00 | bf 07 00 00 40 41 00 00 | .......|....@A..|
|00000d20| 01 00 20 00 02 00 00 00 | 00 00 bb 0a 00 00 46 41 |.. .....|......FA|
|00000d30| 00 00 01 00 20 00 02 00 | 00 00 00 00 d4 11 00 00 |.... ...|........|
|00000d40| 4c 41 00 00 01 00 20 00 | 02 00 00 00 00 00 e5 11 |LA.... .|........|
|00000d50| 00 00 8e 41 00 00 01 00 | 20 00 02 00 00 00 00 00 |...A....| .......|
|00000d60| f5 11 00 00 e8 41 00 00 | 01 00 20 00 02 00 00 00 |.....A..|.. .....|
|00000d70| 00 00 0a 0b 00 00 14 42 | 00 00 01 00 20 00 02 00 |.......B|.... ...|
|00000d80| 00 00 00 00 0c 12 00 00 | c2 42 00 00 01 00 20 00 |........|.B.... .|
|00000d90| 02 00 00 00 00 00 e9 0e | 00 00 de 42 00 00 01 00 |........|...B....|
|00000da0| 20 00 02 00 00 00 00 00 | c6 11 00 00 e4 42 00 00 | .......|.....B..|
|00000db0| 01 00 20 00 02 00 00 00 | 00 00 e8 0a 00 00 ea 42 |.. .....|.......B|
|00000dc0| 00 00 01 00 20 00 02 00 | 00 00 00 00 e4 03 00 00 |.... ...|........|
|00000dd0| 00 43 00 00 02 00 00 00 | 02 00 00 00 00 00 27 07 |.C......|......'.|
|00000de0| 00 00 40 43 00 00 02 00 | 00 00 02 00 00 00 00 00 |..@C....|........|
|00000df0| fa 08 00 00 b4 43 00 00 | 02 00 00 00 02 00 00 00 |.....C..|........|
|00000e00| 00 00 ff 04 00 00 b8 43 | 00 00 02 00 00 00 02 00 |.......C|........|
|00000e10| 00 00 00 00 f5 04 00 00 | c0 43 00 00 02 00 00 00 |........|.C......|
|00000e20| 02 00 5f 73 74 61 74 73 | 00 00 40 44 00 00 02 00 |.._stats|..@D....|
|00000e30| 00 00 02 00 00 00 00 00 | e3 04 00 00 e0 44 00 00 |........|.....D..|
|00000e40| 02 00 00 00 02 00 00 00 | 00 00 d6 04 00 00 00 45 |........|.......E|
|00000e50| 00 00 02 00 00 00 02 00 | 00 00 00 00 ca 04 00 00 |........|........|
|00000e60| 08 45 00 00 02 00 00 00 | 02 00 00 00 00 00 a9 04 |.E......|........|
|00000e70| 00 00 20 45 00 00 02 00 | 00 00 02 00 00 00 00 00 |.. E....|........|
|00000e80| 9c 04 00 00 88 45 00 00 | 02 00 00 00 02 00 00 00 |.....E..|........|
|00000e90| 00 00 8e 04 00 00 a0 45 | 00 00 02 00 00 00 02 00 |.......E|........|
|00000ea0| 00 00 00 00 78 04 00 00 | e0 48 00 00 02 00 00 00 |....x...|.H......|
|00000eb0| 02 00 00 00 00 00 6c 04 | 00 00 00 49 00 00 02 00 |......l.|...I....|
|00000ec0| 00 00 02 00 00 00 00 00 | 5f 04 00 00 20 49 00 00 |........|_... I..|
|00000ed0| 02 00 00 00 02 00 00 00 | 00 00 4c 04 00 00 40 49 |........|..L...@I|
|00000ee0| 00 00 02 00 00 00 02 00 | 00 00 00 00 3c 04 00 00 |........|....<...|
|00000ef0| 60 49 00 00 02 00 00 00 | 02 00 00 00 00 00 30 04 |`I......|......0.|
|00000f00| 00 00 64 49 00 00 02 00 | 00 00 02 00 00 00 00 00 |..dI....|........|
|00000f10| 24 04 00 00 68 49 00 00 | 02 00 00 00 02 00 00 00 |$...hI..|........|
|00000f20| 00 00 19 04 00 00 80 49 | 00 00 02 00 00 00 02 00 |.......I|........|
|00000f30| 00 00 00 00 03 04 00 00 | 0c 88 00 00 02 00 00 00 |........|........|
|00000f40| 02 00 00 00 00 00 f3 03 | 00 00 20 88 00 00 02 00 |........|.. .....|
|00000f50| 00 00 02 00 00 00 00 00 | 6c 0f 00 00 40 88 00 00 |........|l...@...|
|00000f60| 03 00 00 00 02 00 00 00 | 00 00 25 13 00 00 54 88 |........|..%...T.|
|00000f70| 00 00 03 00 00 00 02 00 | 00 00 00 00 c8 12 00 00 |........|........|
|00000f80| 68 88 00 00 03 00 00 00 | 02 00 65 6e 64 00 00 00 |h.......|..end...|
|00000f90| 00 00 20 97 00 00 fe ff | 00 00 02 00 19 14 00 00 |.. .....|........|
|00000fa0| 5f 44 72 69 76 65 72 45 | 6e 74 72 79 40 38 00 3f |_DriverE|ntry@8.?|
|00000fb0| 3f 5f 43 40 5f 31 42 4b | 40 45 4a 50 4e 40 3f 24 |?_C@_1BK|@EJPN@?$|
|00000fc0| 41 41 70 3f 24 41 41 61 | 3f 24 41 41 67 3f 24 41 |AAp?$AAa|?$AAg?$A|
|00000fd0| 41 65 3f 24 41 41 66 3f | 24 41 41 69 3f 24 41 41 |Ae?$AAf?|$AAi?$AA|
|00000fe0| 6c 3f 24 41 41 65 3f 24 | 41 41 3f 34 3f 24 41 41 |l?$AAe?$|AA?4?$AA|
|00000ff0| 73 3f 24 41 41 79 3f 24 | 41 41 73 3f 24 41 41 3f |s?$AAy?$|AAs?$AA?|
|00001000| 24 41 41 40 00 3f 3f 5f | 43 40 5f 31 42 41 40 45 |$AA@.??_|C@_1BA@E|
|00001010| 4a 44 4d 40 3f 24 41 41 | 24 3f 24 41 41 45 3f 24 |JDM@?$AA|$?$AAE?$|
|00001020| 41 41 78 3f 24 41 41 74 | 3f 24 41 41 65 3f 24 41 |AAx?$AAt|?$AAe?$A|
|00001030| 41 6e 3f 24 41 41 64 3f | 24 41 41 3f 24 41 41 40 |An?$AAd?|$AA?$AA@|
|00001040| 00 3f 3f 5f 43 40 5f 31 | 42 41 40 4f 43 47 4d 40 |.??_C@_1|BA@OCGM@|
|00001050| 3f 24 41 41 24 3f 24 41 | 41 55 3f 24 41 41 70 3f |?$AA$?$A|AU?$AAp?|
|00001060| 24 41 41 43 3f 24 41 41 | 61 3f 24 41 41 73 3f 24 |$AAC?$AA|a?$AAs?$|
|00001070| 41 41 65 3f 24 41 41 3f | 24 41 41 40 00 3f 3f 5f |AAe?$AA?|$AA@.??_|
|00001080| 43 40 5f 31 42 45 40 44 | 4b 4a 4e 40 3f 24 41 41 |C@_1BE@D|KJN@?$AA|
|00001090| 24 3f 24 41 41 53 3f 24 | 41 41 65 3f 24 41 41 63 |$?$AAS?$|AAe?$AAc|
|000010a0| 3f 24 41 41 75 3f 24 41 | 41 72 3f 24 41 41 69 3f |?$AAu?$A|Ar?$AAi?|
|000010b0| 24 41 41 74 3f 24 41 41 | 79 3f 24 41 41 3f 24 41 |$AAt?$AA|y?$AA?$A|
|000010c0| 41 40 00 3f 3f 5f 43 40 | 5f 31 4f 40 47 4e 4b 44 |A@.??_C@|_1O@GNKD|
|000010d0| 40 3f 24 41 41 24 3f 24 | 41 41 51 3f 24 41 41 75 |@?$AA$?$|AAQ?$AAu|
|000010e0| 3f 24 41 41 6f 3f 24 41 | 41 74 3f 24 41 41 61 3f |?$AAo?$A|At?$AAa?|
|000010f0| 24 41 41 3f 24 41 41 40 | 00 3f 3f 5f 43 40 5f 31 |$AA?$AA@|.??_C@_1|
|00001100| 42 43 40 46 45 4c 48 40 | 3f 24 41 41 24 3f 24 41 |BC@FELH@|?$AA$?$A|
|00001110| 41 42 3f 24 41 41 61 3f | 24 41 41 64 3f 24 41 41 |AB?$AAa?|$AAd?$AA|
|00001120| 43 3f 24 41 41 6c 3f 24 | 41 41 75 3f 24 41 41 73 |C?$AAl?$|AAu?$AAs|
|00001130| 3f 24 41 41 3f 24 41 41 | 40 00 3f 3f 5f 43 40 5f |?$AA?$AA|@.??_C@_|
|00001140| 31 4d 40 4f 46 4b 45 40 | 3f 24 41 41 24 3f 24 41 |1M@OFKE@|?$AA$?$A|
|00001150| 41 42 3f 24 41 41 6f 3f | 24 41 41 6f 3f 24 41 41 |AB?$AAo?|$AAo?$AA|
|00001160| 74 3f 24 41 41 3f 24 41 | 41 40 00 3f 3f 5f 43 40 |t?$AA?$A|A@.??_C@|
|00001170| 5f 31 42 41 40 42 44 4c | 48 40 3f 24 41 41 24 3f |_1BA@BDL|H@?$AA$?|
|00001180| 24 41 41 42 3f 24 41 41 | 69 3f 24 41 41 74 3f 24 |$AAB?$AA|i?$AAt?$|
|00001190| 41 41 4d 3f 24 41 41 61 | 3f 24 41 41 70 3f 24 41 |AAM?$AAa|?$AAp?$A|
|000011a0| 41 3f 24 41 41 40 00 3f | 3f 5f 43 40 5f 31 33 44 |A?$AA@.?|?_C@_13D|
|000011b0| 4f 42 48 40 3f 24 41 41 | 3f 34 3f 24 41 41 3f 24 |OBH@?$AA|?4?$AA?$|
|000011c0| 41 41 40 00 3f 3f 5f 43 | 40 5f 31 42 43 40 49 4a |AA@.??_C|@_1BC@IJ|
|000011d0| 41 4b 40 3f 24 41 41 24 | 3f 24 41 41 41 3f 24 41 |AK@?$AA$|?$AAA?$A|
|000011e0| 41 74 3f 24 41 41 74 3f | 24 41 41 72 3f 24 41 41 |At?$AAt?|$AAr?$AA|
|000011f0| 44 3f 24 41 41 65 3f 24 | 41 41 66 3f 24 41 41 3f |D?$AAe?$|AAf?$AA?|
|00001200| 24 41 41 40 00 3f 3f 5f | 43 40 5f 31 42 41 40 50 |$AA@.??_|C@_1BA@P|
|00001210| 4d 4f 48 40 3f 24 41 41 | 24 3f 24 41 41 56 3f 24 |MOH@?$AA|$?$AAV?$|
|00001220| 41 41 6f 3f 24 41 41 6c | 3f 24 41 41 75 3f 24 41 |AAo?$AAl|?$AAu?$A|
|00001230| 41 6d 3f 24 41 41 65 3f | 24 41 41 3f 24 41 41 40 |Am?$AAe?|$AA?$AA@|
|00001240| 00 3f 3f 5f 43 40 5f 31 | 42 43 40 4b 4d 41 4c 40 |.??_C@_1|BC@KMAL@|
|00001250| 3f 24 41 41 24 3f 24 41 | 41 4c 3f 24 41 41 6f 3f |?$AA$?$A|AL?$AAo?|
|00001260| 24 41 41 67 3f 24 41 41 | 46 3f 24 41 41 69 3f 24 |$AAg?$AA|F?$AAi?$|
|00001270| 41 41 6c 3f 24 41 41 65 | 3f 24 41 41 3f 24 41 41 |AAl?$AAe|?$AA?$AA|
|00001280| 40 00 3f 3f 5f 43 40 5f | 31 42 43 40 43 4c 50 48 |@.??_C@_|1BC@CLPH|
|00001290| 40 3f 24 41 41 24 3f 24 | 41 41 4d 3f 24 41 41 66 |@?$AA$?$|AAM?$AAf|
|000012a0| 3f 24 41 41 74 3f 24 41 | 41 4d 3f 24 41 41 69 3f |?$AAt?$A|AM?$AAi?|
|000012b0| 24 41 41 72 3f 24 41 41 | 72 3f 24 41 41 3f 24 41 |$AAr?$AA|r?$AA?$A|
|000012c0| 41 40 00 3f 3f 5f 43 40 | 5f 31 39 47 47 45 4e 40 |A@.??_C@|_19GGEN@|
|000012d0| 3f 24 41 41 24 3f 24 41 | 41 4d 3f 24 41 41 66 3f |?$AA$?$A|AM?$AAf?|
|000012e0| 24 41 41 74 3f 24 41 41 | 3f 24 41 41 40 00 5f 6e |$AAt?$AA|?$AA@._n|
|000012f0| 74 66 73 6d 6f 6e 48 6f | 6f 6b 43 6f 6d 70 6c 65 |tfsmonHo|okComple|
|00001300| 74 69 6f 6e 52 6f 75 74 | 69 6e 65 40 31 32 00 5f |tionRout|ine@12._|
|00001310| 6e 74 66 73 6d 6f 6e 48 | 6f 6f 6b 52 6f 75 74 69 |ntfsmonH|ookRouti|
|00001320| 6e 65 40 38 00 5f 6e 74 | 66 73 6d 6f 6e 44 65 76 |ne@8._nt|fsmonDev|
|00001330| 69 63 65 52 6f 75 74 69 | 6e 65 40 38 00 5f 6e 74 |iceRouti|ne@8._nt|
|00001340| 66 73 6d 6f 6e 44 69 73 | 70 61 74 63 68 40 38 00 |fsmonDis|patch@8.|
|00001350| 5f 6e 74 66 73 6d 6f 6e | 49 73 4d 6f 6e 69 74 6f |_ntfsmon|IsMonito|
|00001360| 72 65 64 40 31 36 00 5f | 6e 74 66 73 6d 6f 6e 50 |red@16._|ntfsmonP|
|00001370| 72 6f 63 65 73 73 54 68 | 69 73 49 52 50 40 34 00 |rocessTh|isIRP@4.|
|00001380| 5f 66 69 6c 74 65 72 65 | 64 4e 61 6d 65 73 00 5f |_filtere|dNames._|
|00001390| 68 61 73 68 54 61 62 6c | 65 4d 75 74 65 78 00 5f |hashTabl|eMutex._|
|000013a0| 6f 73 4d 69 6e 6f 72 56 | 65 72 73 69 6f 6e 4e 75 |osMinorV|ersionNu|
|000013b0| 6d 62 65 72 00 5f 68 61 | 73 68 54 61 62 6c 65 00 |mber._ha|shTable.|
|000013c0| 5f 64 72 69 76 65 47 72 | 6f 75 70 00 5f 75 73 65 |_driveGr|oup._use|
|000013d0| 72 44 65 76 69 63 65 00 | 5f 61 74 6f 6d 69 63 49 |rDevice.|_atomicI|
|000013e0| 6e 63 4d 75 74 65 78 00 | 5f 6d 6f 6e 69 74 6f 72 |ncMutex.|_monitor|
|000013f0| 50 72 6f 70 73 4d 75 74 | 65 78 00 5f 70 72 6f 63 |PropsMut|ex._proc|
|00001400| 65 73 73 4e 61 6d 65 00 | 5f 73 74 61 74 73 4d 75 |essName.|_statsMu|
|00001410| 74 65 78 00 5f 6f 73 4d | 61 6a 6f 72 56 65 72 73 |tex._osM|ajorVers|
|00001420| 69 6f 6e 4e 75 6d 62 65 | 72 00 5f 6d 6f 6e 69 74 |ionNumbe|r._monit|
|00001430| 6f 72 50 72 6f 70 73 00 | 5f 64 61 74 61 53 74 6f |orProps.|_dataSto|
|00001440| 72 61 67 65 00 5f 64 72 | 69 76 65 44 65 76 69 63 |rage._dr|iveDevic|
|00001450| 65 73 00 5f 70 72 6f 63 | 65 73 73 4e 61 6d 65 4f |es._proc|essNameO|
|00001460| 66 66 73 65 74 00 5f 75 | 73 65 72 41 70 70 50 69 |ffset._u|serAppPi|
|00001470| 64 00 5f 6c 61 73 74 41 | 70 70 54 69 6d 65 00 5f |d._lastA|ppTime._|
|00001480| 64 61 74 61 53 74 6f 72 | 61 67 65 4d 75 74 65 78 |dataStor|ageMutex|
|00001490| 00 5f 64 72 69 76 65 4d | 61 70 00 5f 63 75 72 72 |._driveM|ap._curr|
|000014a0| 65 6e 74 53 74 6f 72 61 | 67 65 00 5f 5f 69 6d 70 |entStora|ge.__imp|
|000014b0| 5f 40 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 40 |_@IofCal|lDriver@|
|000014c0| 38 00 5f 5f 69 6d 70 5f | 5f 45 78 46 72 65 65 50 |8.__imp_|_ExFreeP|
|000014d0| 6f 6f 6c 40 34 00 5f 5f | 69 6d 70 5f 5f 77 63 73 |ool@4.__|imp__wcs|
|000014e0| 6e 63 70 79 00 5f 6e 74 | 66 73 6d 6f 6e 41 64 64 |ncpy._nt|fsmonAdd|
|000014f0| 44 61 74 61 45 6e 74 72 | 79 40 33 32 00 5f 50 73 |DataEntr|y@32._Ps|
|00001500| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00001510| 73 49 64 40 30 00 5f 5f | 69 6d 70 5f 5f 4b 65 51 |sId@0.__|imp__KeQ|
|00001520| 75 65 72 79 53 79 73 74 | 65 6d 54 69 6d 65 40 34 |uerySyst|emTime@4|
|00001530| 00 5f 6e 74 66 73 6d 6f | 6e 47 65 74 46 69 6c 65 |._ntfsmo|nGetFile|
|00001540| 46 75 6c 6c 50 61 74 68 | 40 31 36 00 5f 6e 74 66 |FullPath|@16._ntf|
|00001550| 73 6d 6f 6e 46 72 65 65 | 48 61 73 68 45 6e 74 72 |smonFree|HashEntr|
|00001560| 79 40 34 00 5f 5f 69 6d | 70 5f 5f 45 78 41 6c 6c |y@4.__im|p__ExAll|
|00001570| 6f 63 61 74 65 50 6f 6f | 6c 57 69 74 68 54 61 67 |ocatePoo|lWithTag|
|00001580| 40 31 32 00 5f 5f 69 6d | 70 5f 40 49 6f 66 43 6f |@12.__im|p_@IofCo|
|00001590| 6d 70 6c 65 74 65 52 65 | 71 75 65 73 74 40 38 00 |mpleteRe|quest@8.|
|000015a0| 5f 6e 74 66 73 6d 6f 6e | 46 61 73 74 49 6f 44 65 |_ntfsmon|FastIoDe|
|000015b0| 76 69 63 65 43 6f 6e 74 | 72 6f 6c 40 33 36 00 5f |viceCont|rol@36._|
|000015c0| 5f 69 6d 70 5f 5f 4d 6d | 4d 61 70 4c 6f 63 6b 65 |_imp__Mm|MapLocke|
|000015d0| 64 50 61 67 65 73 40 38 | 00 5f 6e 74 66 73 6d 6f |dPages@8|._ntfsmo|
|000015e0| 6e 44 61 74 61 53 74 6f | 72 61 67 65 49 6e 69 74 |nDataSto|rageInit|
|000015f0| 40 30 00 5f 6e 74 66 73 | 6d 6f 6e 48 61 73 68 54 |@0._ntfs|monHashT|
|00001600| 61 62 6c 65 49 6e 69 74 | 40 30 00 5f 50 73 47 65 |ableInit|@0._PsGe|
|00001610| 74 56 65 72 73 69 6f 6e | 40 31 36 00 5f 5f 69 6d |tVersion|@16.__im|
|00001620| 70 5f 5f 4b 65 49 6e 69 | 74 69 61 6c 69 7a 65 45 |p__KeIni|tializeE|
|00001630| 76 65 6e 74 40 31 32 00 | 5f 5f 69 6d 70 5f 5f 4b |vent@12.|__imp__K|
|00001640| 65 49 6e 69 74 69 61 6c | 69 7a 65 53 70 69 6e 4c |eInitial|izeSpinL|
|00001650| 6f 63 6b 40 34 00 5f 5f | 69 6d 70 5f 5f 49 6f 44 |ock@4.__|imp__IoD|
|00001660| 65 6c 65 74 65 44 65 76 | 69 63 65 40 34 00 5f 5f |eleteDev|ice@4.__|
|00001670| 69 6d 70 5f 5f 49 6f 43 | 72 65 61 74 65 53 79 6d |imp__IoC|reateSym|
|00001680| 62 6f 6c 69 63 4c 69 6e | 6b 40 38 00 5f 5f 69 6d |bolicLin|k@8.__im|
|00001690| 70 5f 5f 49 6f 43 72 65 | 61 74 65 44 65 76 69 63 |p__IoCre|ateDevic|
|000016a0| 65 40 32 38 00 5f 5f 69 | 6d 70 5f 5f 52 74 6c 49 |e@28.__i|mp__RtlI|
|000016b0| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|000016c0| 40 38 00 5f 6e 74 66 73 | 6d 6f 6e 46 61 73 74 49 |@8._ntfs|monFastI|
|000016d0| 4f 44 69 73 70 61 74 63 | 68 54 61 62 6c 65 00 5f |ODispatc|hTable._|
|000016e0| 4e 74 42 75 69 6c 64 4e | 75 6d 62 65 72 00 5f 5f |NtBuildN|umber.__|
|000016f0| 69 6d 70 5f 5f 77 63 73 | 63 61 74 00 5f 6e 74 66 |imp__wcs|cat._ntf|
|00001700| 73 6d 6f 6e 52 65 6c 65 | 61 73 65 53 69 67 6e 4f |smonRele|aseSignO|
|00001710| 6e 40 30 00 5f 5f 69 6d | 70 5f 5f 74 6f 77 75 70 |n@0.__im|p__towup|
|00001720| 70 65 72 00 5f 5f 69 6d | 70 5f 5f 5f 77 63 73 69 |per.__im|p___wcsi|
|00001730| 63 6d 70 00 5f 5f 69 6d | 70 5f 5f 77 63 73 6c 65 |cmp.__im|p__wcsle|
|00001740| 6e 00 5f 6e 74 66 73 6d | 6f 6e 52 65 6c 65 61 73 |n._ntfsm|onReleas|
|00001750| 65 53 69 67 6e 4f 66 66 | 40 30 00 5f 44 62 67 50 |eSignOff|@0._DbgP|
|00001760| 72 69 6e 74 00 5f 6e 74 | 66 73 6d 6f 6e 43 6c 65 |rint._nt|fsmonCle|
|00001770| 61 72 53 74 61 74 73 40 | 30 00 5f 6e 74 66 73 6d |arStats@|0._ntfsm|
|00001780| 6f 6e 53 74 61 72 74 53 | 74 61 74 73 40 30 00 5f |onStartS|tats@0._|
|00001790| 6e 74 66 73 6d 6f 6e 53 | 74 6f 70 53 74 61 74 73 |ntfsmonS|topStats|
|000017a0| 40 30 00 5f 6e 74 66 73 | 6d 6f 6e 47 65 74 53 74 |@0._ntfs|monGetSt|
|000017b0| 61 74 73 40 34 00 5f 6e | 74 66 73 6d 6f 6e 53 65 |ats@4._n|tfsmonSe|
|000017c0| 74 4d 6f 6e 69 74 6f 72 | 50 72 6f 70 65 72 74 69 |tMonitor|Properti|
|000017d0| 65 73 40 34 00 5f 6e 74 | 66 73 6d 6f 6e 47 65 74 |es@4._nt|fsmonGet|
|000017e0| 4d 6f 6e 69 74 6f 72 50 | 72 6f 70 65 72 74 69 65 |MonitorP|ropertie|
|000017f0| 73 40 34 00 5f 6e 74 66 | 73 6d 6f 6e 55 70 64 61 |s@4._ntf|smonUpda|
|00001800| 74 65 44 72 69 76 65 53 | 65 74 40 34 00 5f 5f 69 |teDriveS|et@4.__i|
|00001810| 6d 70 5f 40 45 78 52 65 | 6c 65 61 73 65 46 61 73 |mp_@ExRe|leaseFas|
|00001820| 74 4d 75 74 65 78 40 34 | 00 5f 5f 69 6d 70 5f 40 |tMutex@4|.__imp_@|
|00001830| 45 78 41 63 71 75 69 72 | 65 46 61 73 74 4d 75 74 |ExAcquir|eFastMut|
|00001840| 65 78 40 34 00 5f 6e 74 | 66 73 6d 6f 6e 48 61 73 |ex@4._nt|fsmonHas|
|00001850| 68 54 61 62 6c 65 43 6c | 65 61 6e 75 70 40 30 00 |hTableCl|eanup@0.|
|00001860| 5f 6e 74 66 73 6d 6f 6e | 48 61 73 68 54 61 62 6c |_ntfsmon|HashTabl|
|00001870| 65 4c 6f 6f 6b 75 70 40 | 38 00 5f 6e 74 66 73 6d |eLookup@|8._ntfsm|
|00001880| 6f 6e 48 61 73 68 54 61 | 62 6c 65 41 64 64 45 6e |onHashTa|bleAddEn|
|00001890| 74 72 79 40 38 00 5f 66 | 72 65 65 48 61 73 68 4c |try@8._f|reeHashL|
|000018a0| 69 73 74 00 5f 5f 69 6d | 70 5f 5f 77 63 73 63 70 |ist.__im|p__wcscp|
|000018b0| 79 00 5f 6e 74 66 73 6d | 6f 6e 44 65 61 64 41 70 |y._ntfsm|onDeadAp|
|000018c0| 70 54 69 6d 65 6f 75 74 | 40 30 00 5f 6e 74 66 73 |pTimeout|@0._ntfs|
|000018d0| 6d 6f 6e 46 72 65 65 44 | 61 74 61 53 74 6f 72 61 |monFreeD|ataStora|
|000018e0| 67 65 40 30 00 5f 6e 74 | 66 73 6d 6f 6e 44 61 74 |ge@0._nt|fsmonDat|
|000018f0| 61 53 74 6f 72 61 67 65 | 45 72 72 6f 72 40 34 00 |aStorage|Error@4.|
|00001900| 5f 6e 74 66 73 6d 6f 6e | 47 65 74 44 61 74 61 45 |_ntfsmon|GetDataE|
|00001910| 6e 74 72 69 65 73 40 31 | 32 00 5f 6e 74 66 73 6d |ntries@1|2._ntfsm|
|00001920| 6f 6e 49 73 44 75 70 6c | 69 63 61 74 65 45 6e 74 |onIsDupl|icateEnt|
|00001930| 72 79 40 31 36 00 5f 5f | 69 6d 70 5f 5f 5f 77 63 |ry@16.__|imp___wc|
|00001940| 73 6e 69 63 6d 70 00 5f | 6e 74 66 73 6d 6f 6e 51 |snicmp._|ntfsmonQ|
|00001950| 75 65 72 79 46 69 6c 65 | 4e 61 6d 65 43 6f 6d 70 |ueryFile|NameComp|
|00001960| 6c 65 74 65 40 31 32 00 | 5f 6e 74 66 73 6d 6f 6e |lete@12.|_ntfsmon|
|00001970| 51 75 65 72 79 46 69 6c | 65 4e 61 6d 65 40 31 36 |QueryFil|eName@16|
|00001980| 00 5f 5f 69 6d 70 5f 5f | 49 6f 46 72 65 65 49 72 |.__imp__|IoFreeIr|
|00001990| 70 40 34 00 5f 5f 69 6d | 70 5f 5f 4b 65 53 65 74 |p@4.__im|p__KeSet|
|000019a0| 45 76 65 6e 74 40 31 32 | 00 5f 5f 69 6d 70 5f 5f |Event@12|.__imp__|
|000019b0| 45 78 52 65 6c 65 61 73 | 65 52 65 73 6f 75 72 63 |ExReleas|eResourc|
|000019c0| 65 46 6f 72 54 68 72 65 | 61 64 4c 69 74 65 40 38 |eForThre|adLite@8|
|000019d0| 00 5f 5f 69 6d 70 5f 5f | 4b 65 57 61 69 74 46 6f |.__imp__|KeWaitFo|
|000019e0| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 40 32 30 |rSingleO|bject@20|
|000019f0| 00 5f 5f 69 6d 70 5f 5f | 4b 65 4c 65 61 76 65 43 |.__imp__|KeLeaveC|
|00001a00| 72 69 74 69 63 61 6c 52 | 65 67 69 6f 6e 40 30 00 |riticalR|egion@0.|
|00001a10| 5f 5f 69 6d 70 5f 5f 45 | 78 41 63 71 75 69 72 65 |__imp__E|xAcquire|
|00001a20| 52 65 73 6f 75 72 63 65 | 45 78 63 6c 75 73 69 76 |Resource|Exclusiv|
|00001a30| 65 4c 69 74 65 40 38 00 | 5f 5f 69 6d 70 5f 5f 4b |eLite@8.|__imp__K|
|00001a40| 65 45 6e 74 65 72 43 72 | 69 74 69 63 61 6c 52 65 |eEnterCr|iticalRe|
|00001a50| 67 69 6f 6e 40 30 00 5f | 4b 65 47 65 74 43 75 72 |gion@0._|KeGetCur|
|00001a60| 72 65 6e 74 54 68 72 65 | 61 64 40 30 00 5f 5f 69 |rentThre|ad@0.__i|
|00001a70| 6d 70 5f 5f 49 6f 41 6c | 6c 6f 63 61 74 65 49 72 |mp__IoAl|locateIr|
|00001a80| 70 40 38 00 5f 4b 65 47 | 65 74 43 75 72 72 65 6e |p@8._KeG|etCurren|
|00001a90| 74 49 72 71 6c 40 30 00 | 5f 5f 65 78 63 65 70 74 |tIrql@0.|__except|
|00001aa0| 5f 6c 69 73 74 00 5f 5f | 65 78 63 65 70 74 5f 68 |_list.__|except_h|
|00001ab0| 61 6e 64 6c 65 72 33 00 | 5f 6e 74 66 73 6d 6f 6e |andler3.|_ntfsmon|
|00001ac0| 46 61 73 74 49 6f 43 68 | 65 63 6b 49 66 50 6f 73 |FastIoCh|eckIfPos|
|00001ad0| 73 69 62 6c 65 40 33 32 | 00 5f 6e 74 66 73 6d 6f |sible@32|._ntfsmo|
|00001ae0| 6e 46 61 73 74 49 6f 52 | 65 61 64 40 33 32 00 5f |nFastIoR|ead@32._|
|00001af0| 6e 74 66 73 6d 6f 6e 46 | 61 73 74 49 6f 57 72 69 |ntfsmonF|astIoWri|
|00001b00| 74 65 40 33 32 00 5f 6e | 74 66 73 6d 6f 6e 46 61 |te@32._n|tfsmonFa|
|00001b10| 73 74 49 6f 51 75 65 72 | 79 42 61 73 69 63 49 6e |stIoQuer|yBasicIn|
|00001b20| 66 6f 40 32 30 00 5f 6e | 74 66 73 6d 6f 6e 46 61 |fo@20._n|tfsmonFa|
|00001b30| 73 74 49 6f 51 75 65 72 | 79 53 74 61 6e 64 61 72 |stIoQuer|yStandar|
|00001b40| 64 49 6e 66 6f 40 32 30 | 00 5f 6e 74 66 73 6d 6f |dInfo@20|._ntfsmo|
|00001b50| 6e 46 61 73 74 49 6f 4c | 6f 63 6b 40 33 36 00 5f |nFastIoL|ock@36._|
|00001b60| 6e 74 66 73 6d 6f 6e 46 | 61 73 74 49 6f 55 6e 6c |ntfsmonF|astIoUnl|
|00001b70| 6f 63 6b 53 69 6e 67 6c | 65 40 32 38 00 5f 6e 74 |ockSingl|e@28._nt|
|00001b80| 66 73 6d 6f 6e 46 61 73 | 74 49 6f 55 6e 6c 6f 63 |fsmonFas|tIoUnloc|
|00001b90| 6b 41 6c 6c 40 31 36 00 | 5f 6e 74 66 73 6d 6f 6e |kAll@16.|_ntfsmon|
|00001ba0| 46 61 73 74 49 6f 55 6e | 6c 6f 63 6b 41 6c 6c 42 |FastIoUn|lockAllB|
|00001bb0| 79 4b 65 79 40 32 30 00 | 5f 6e 74 66 73 6d 6f 6e |yKey@20.|_ntfsmon|
|00001bc0| 46 61 73 74 49 6f 41 63 | 71 75 69 72 65 46 69 6c |FastIoAc|quireFil|
|00001bd0| 65 40 34 00 5f 6e 74 66 | 73 6d 6f 6e 46 61 73 74 |e@4._ntf|smonFast|
|00001be0| 49 6f 52 65 6c 65 61 73 | 65 46 69 6c 65 40 34 00 |IoReleas|eFile@4.|
|00001bf0| 5f 6e 74 66 73 6d 6f 6e | 46 61 73 74 49 6f 44 65 |_ntfsmon|FastIoDe|
|00001c00| 74 61 63 68 44 65 76 69 | 63 65 40 38 00 5f 6e 74 |tachDevi|ce@8._nt|
|00001c10| 66 73 6d 6f 6e 46 61 73 | 74 49 6f 51 75 65 72 79 |fsmonFas|tIoQuery|
|00001c20| 4e 65 74 77 6f 72 6b 4f | 70 65 6e 49 6e 66 6f 40 |NetworkO|penInfo@|
|00001c30| 32 30 00 5f 6e 74 66 73 | 6d 6f 6e 46 61 73 74 49 |20._ntfs|monFastI|
|00001c40| 6f 41 63 71 75 69 72 65 | 46 6f 72 4d 6f 64 57 72 |oAcquire|ForModWr|
|00001c50| 69 74 65 40 31 36 00 5f | 6e 74 66 73 6d 6f 6e 46 |ite@16._|ntfsmonF|
|00001c60| 61 73 74 49 6f 4d 64 6c | 52 65 61 64 40 32 38 00 |astIoMdl|Read@28.|
|00001c70| 5f 6e 74 66 73 6d 6f 6e | 46 61 73 74 49 6f 4d 64 |_ntfsmon|FastIoMd|
|00001c80| 6c 52 65 61 64 43 6f 6d | 70 6c 65 74 65 40 31 32 |lReadCom|plete@12|
|00001c90| 00 5f 6e 74 66 73 6d 6f | 6e 46 61 73 74 49 6f 50 |._ntfsmo|nFastIoP|
|00001ca0| 72 65 70 61 72 65 4d 64 | 6c 57 72 69 74 65 40 32 |repareMd|lWrite@2|
|00001cb0| 38 00 5f 6e 74 66 73 6d | 6f 6e 46 61 73 74 49 6f |8._ntfsm|onFastIo|
|00001cc0| 4d 64 6c 57 72 69 74 65 | 43 6f 6d 70 6c 65 74 65 |MdlWrite|Complete|
|00001cd0| 40 31 36 00 5f 6e 74 66 | 73 6d 6f 6e 46 61 73 74 |@16._ntf|smonFast|
|00001ce0| 49 6f 52 65 61 64 43 6f | 6d 70 72 65 73 73 65 64 |IoReadCo|mpressed|
|00001cf0| 40 34 30 00 5f 6e 74 66 | 73 6d 6f 6e 46 61 73 74 |@40._ntf|smonFast|
|00001d00| 49 6f 57 72 69 74 65 43 | 6f 6d 70 72 65 73 73 65 |IoWriteC|ompresse|
|00001d10| 64 40 34 30 00 5f 6e 74 | 66 73 6d 6f 6e 46 61 73 |d@40._nt|fsmonFas|
|00001d20| 74 49 6f 4d 64 6c 52 65 | 61 64 43 6f 6d 70 6c 65 |tIoMdlRe|adComple|
|00001d30| 74 65 43 6f 6d 70 72 65 | 73 73 65 64 40 31 32 00 |teCompre|ssed@12.|
|00001d40| 5f 6e 74 66 73 6d 6f 6e | 46 61 73 74 49 6f 4d 64 |_ntfsmon|FastIoMd|
|00001d50| 6c 57 72 69 74 65 43 6f | 6d 70 6c 65 74 65 43 6f |lWriteCo|mpleteCo|
|00001d60| 6d 70 72 65 73 73 65 64 | 40 31 36 00 5f 6e 74 66 |mpressed|@16._ntf|
|00001d70| 73 6d 6f 6e 46 61 73 74 | 49 6f 51 75 65 72 79 4f |smonFast|IoQueryO|
|00001d80| 70 65 6e 40 31 32 00 5f | 6e 74 66 73 6d 6f 6e 46 |pen@12._|ntfsmonF|
|00001d90| 61 73 74 49 6f 52 65 6c | 65 61 73 65 46 6f 72 4d |astIoRel|easeForM|
|00001da0| 6f 64 57 72 69 74 65 40 | 31 32 00 5f 6e 74 66 73 |odWrite@|12._ntfs|
|00001db0| 6d 6f 6e 46 61 73 74 49 | 6f 41 63 71 75 69 72 65 |monFastI|oAcquire|
|00001dc0| 46 6f 72 43 63 46 6c 75 | 73 68 40 38 00 5f 6e 74 |ForCcFlu|sh@8._nt|
|00001dd0| 66 73 6d 6f 6e 46 61 73 | 74 49 6f 52 65 6c 65 61 |fsmonFas|tIoRelea|
|00001de0| 73 65 46 6f 72 43 63 46 | 6c 75 73 68 40 38 00 5f |seForCcF|lush@8._|
|00001df0| 5f 69 6d 70 5f 5f 49 6f | 47 65 74 52 65 6c 61 74 |_imp__Io|GetRelat|
|00001e00| 65 64 44 65 76 69 63 65 | 4f 62 6a 65 63 74 40 34 |edDevice|Object@4|
|00001e10| 00 5f 6e 74 66 73 6d 6f | 6e 44 65 74 61 63 68 44 |._ntfsmo|nDetachD|
|00001e20| 72 69 76 65 40 38 00 5f | 6e 74 66 73 6d 6f 6e 41 |rive@8._|ntfsmonA|
|00001e30| 74 74 61 63 68 44 72 69 | 76 65 53 65 74 40 38 00 |ttachDri|veSet@8.|
|00001e40| 5f 6e 74 66 73 6d 6f 6e | 41 74 74 61 63 68 44 72 |_ntfsmon|AttachDr|
|00001e50| 69 76 65 40 38 00 5f 5f | 69 6d 70 5f 5f 5a 77 43 |ive@8.__|imp__ZwC|
|00001e60| 6c 6f 73 65 40 34 00 5f | 5f 69 6d 70 5f 40 4f 62 |lose@4._|_imp_@Ob|
|00001e70| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|00001e80| 63 74 40 34 00 5f 49 6f | 41 74 74 61 63 68 44 65 |ct@4._Io|AttachDe|
|00001e90| 76 69 63 65 54 6f 44 65 | 76 69 63 65 53 74 61 63 |viceToDe|viceStac|
|00001ea0| 6b 40 38 00 5f 5f 69 6d | 70 5f 5f 4f 62 52 65 66 |k@8.__im|p__ObRef|
|00001eb0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 42 79 48 61 |erenceOb|jectByHa|
|00001ec0| 6e 64 6c 65 40 32 34 00 | 5f 5f 69 6d 70 5f 5f 5a |ndle@24.|__imp__Z|
|00001ed0| 77 43 72 65 61 74 65 46 | 69 6c 65 40 34 34 00 5f |wCreateF|ile@44._|
|00001ee0| 5f 69 6d 70 5f 5f 49 6f | 44 65 74 61 63 68 44 65 |_imp__Io|DetachDe|
|00001ef0| 76 69 63 65 40 34 00 40 | 49 6f 66 43 61 6c 6c 44 |vice@4.@|IofCallD|
|00001f00| 72 69 76 65 72 40 38 00 | 5f 5f 49 4d 50 4f 52 54 |river@8.|__IMPORT|
|00001f10| 5f 44 45 53 43 52 49 50 | 54 4f 52 5f 6e 74 6f 73 |_DESCRIP|TOR_ntos|
|00001f20| 6b 72 6e 6c 00 5f 45 78 | 46 72 65 65 50 6f 6f 6c |krnl._Ex|FreePool|
|00001f30| 40 34 00 5f 5f 69 6d 70 | 5f 5f 50 73 47 65 74 43 |@4.__imp|__PsGetC|
|00001f40| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 49 64 40 |urrentPr|ocessId@|
|00001f50| 30 00 5f 4b 65 51 75 65 | 72 79 53 79 73 74 65 6d |0._KeQue|rySystem|
|00001f60| 54 69 6d 65 40 34 00 5f | 45 78 41 6c 6c 6f 63 61 |Time@4._|ExAlloca|
|00001f70| 74 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 40 31 32 |tePoolWi|thTag@12|
|00001f80| 00 40 49 6f 66 43 6f 6d | 70 6c 65 74 65 52 65 71 |.@IofCom|pleteReq|
|00001f90| 75 65 73 74 40 38 00 5f | 4d 6d 4d 61 70 4c 6f 63 |uest@8._|MmMapLoc|
|00001fa0| 6b 65 64 50 61 67 65 73 | 40 38 00 5f 5f 69 6d 70 |kedPages|@8.__imp|
|00001fb0| 5f 5f 50 73 47 65 74 56 | 65 72 73 69 6f 6e 40 31 |__PsGetV|ersion@1|
|00001fc0| 36 00 5f 4b 65 49 6e 69 | 74 69 61 6c 69 7a 65 45 |6._KeIni|tializeE|
|00001fd0| 76 65 6e 74 40 31 32 00 | 5f 4b 65 49 6e 69 74 69 |vent@12.|_KeIniti|
|00001fe0| 61 6c 69 7a 65 53 70 69 | 6e 4c 6f 63 6b 40 34 00 |alizeSpi|nLock@4.|
|00001ff0| 5f 49 6f 44 65 6c 65 74 | 65 44 65 76 69 63 65 40 |_IoDelet|eDevice@|
|00002000| 34 00 5f 49 6f 43 72 65 | 61 74 65 53 79 6d 62 6f |4._IoCre|ateSymbo|
|00002010| 6c 69 63 4c 69 6e 6b 40 | 38 00 5f 49 6f 43 72 65 |licLink@|8._IoCre|
|00002020| 61 74 65 44 65 76 69 63 | 65 40 32 38 00 5f 52 74 |ateDevic|e@28._Rt|
|00002030| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00002040| 6e 67 40 38 00 5f 5f 69 | 6d 70 5f 5f 4e 74 42 75 |ng@8.__i|mp__NtBu|
|00002050| 69 6c 64 4e 75 6d 62 65 | 72 00 5f 74 6f 77 75 70 |ildNumbe|r._towup|
|00002060| 70 65 72 00 5f 5f 77 63 | 73 69 63 6d 70 00 5f 5f |per.__wc|sicmp.__|
|00002070| 69 6d 70 5f 5f 44 62 67 | 50 72 69 6e 74 00 5f 5f |imp__Dbg|Print.__|
|00002080| 77 63 73 6e 69 63 6d 70 | 00 5f 49 6f 46 72 65 65 |wcsnicmp|._IoFree|
|00002090| 49 72 70 40 34 00 5f 4b | 65 53 65 74 45 76 65 6e |Irp@4._K|eSetEven|
|000020a0| 74 40 31 32 00 5f 45 78 | 52 65 6c 65 61 73 65 52 |t@12._Ex|ReleaseR|
|000020b0| 65 73 6f 75 72 63 65 46 | 6f 72 54 68 72 65 61 64 |esourceF|orThread|
|000020c0| 4c 69 74 65 40 38 00 5f | 4b 65 57 61 69 74 46 6f |Lite@8._|KeWaitFo|
|000020d0| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 40 32 30 |rSingleO|bject@20|
|000020e0| 00 5f 4b 65 4c 65 61 76 | 65 43 72 69 74 69 63 61 |._KeLeav|eCritica|
|000020f0| 6c 52 65 67 69 6f 6e 40 | 30 00 5f 45 78 41 63 71 |lRegion@|0._ExAcq|
|00002100| 75 69 72 65 52 65 73 6f | 75 72 63 65 45 78 63 6c |uireReso|urceExcl|
|00002110| 75 73 69 76 65 4c 69 74 | 65 40 38 00 5f 4b 65 45 |usiveLit|e@8._KeE|
|00002120| 6e 74 65 72 43 72 69 74 | 69 63 61 6c 52 65 67 69 |nterCrit|icalRegi|
|00002130| 6f 6e 40 30 00 5f 5f 69 | 6d 70 5f 5f 4b 65 47 65 |on@0.__i|mp__KeGe|
|00002140| 74 43 75 72 72 65 6e 74 | 54 68 72 65 61 64 40 30 |tCurrent|Thread@0|
|00002150| 00 5f 49 6f 41 6c 6c 6f | 63 61 74 65 49 72 70 40 |._IoAllo|cateIrp@|
|00002160| 38 00 5f 52 74 6c 55 6e | 77 69 6e 64 40 31 36 00 |8._RtlUn|wind@16.|
|00002170| 5f 5f 67 6c 6f 62 61 6c | 5f 75 6e 77 69 6e 64 32 |__global|_unwind2|
|00002180| 00 5f 5f 6c 6f 63 61 6c | 5f 75 6e 77 69 6e 64 32 |.__local|_unwind2|
|00002190| 00 5f 5f 61 62 6e 6f 72 | 6d 61 6c 5f 74 65 72 6d |.__abnor|mal_term|
|000021a0| 69 6e 61 74 69 6f 6e 00 | 5f 5f 73 65 68 5f 6c 6f |ination.|__seh_lo|
|000021b0| 6e 67 6a 6d 70 5f 75 6e | 77 69 6e 64 40 34 00 5f |ngjmp_un|wind@4._|
|000021c0| 49 6f 47 65 74 52 65 6c | 61 74 65 64 44 65 76 69 |IoGetRel|atedDevi|
|000021d0| 63 65 4f 62 6a 65 63 74 | 40 34 00 5f 5a 77 43 6c |ceObject|@4._ZwCl|
|000021e0| 6f 73 65 40 34 00 40 4f | 62 66 44 65 72 65 66 65 |ose@4.@O|bfDerefe|
|000021f0| 72 65 6e 63 65 4f 62 6a | 65 63 74 40 34 00 5f 5f |renceObj|ect@4.__|
|00002200| 69 6d 70 5f 5f 49 6f 41 | 74 74 61 63 68 44 65 76 |imp__IoA|ttachDev|
|00002210| 69 63 65 54 6f 44 65 76 | 69 63 65 53 74 61 63 6b |iceToDev|iceStack|
|00002220| 40 38 00 5f 4f 62 52 65 | 66 65 72 65 6e 63 65 4f |@8._ObRe|ferenceO|
|00002230| 62 6a 65 63 74 42 79 48 | 61 6e 64 6c 65 40 32 34 |bjectByH|andle@24|
|00002240| 00 5f 5a 77 43 72 65 61 | 74 65 46 69 6c 65 40 34 |._ZwCrea|teFile@4|
|00002250| 34 00 5f 49 6f 44 65 74 | 61 63 68 44 65 76 69 63 |4._IoDet|achDevic|
|00002260| 65 40 34 00 5f 5f 4e 55 | 4c 4c 5f 49 4d 50 4f 52 |e@4.__NU|LL_IMPOR|
|00002270| 54 5f 44 45 53 43 52 49 | 50 54 4f 52 00 7f 6e 74 |T_DESCRI|PTOR..nt|
|00002280| 6f 73 6b 72 6e 6c 5f 4e | 55 4c 4c 5f 54 48 55 4e |oskrnl_N|ULL_THUN|
|00002290| 4b 5f 44 41 54 41 00 5f | 5f 69 6d 70 5f 5f 52 74 |K_DATA._|_imp__Rt|
|000022a0| 6c 55 6e 77 69 6e 64 40 | 31 36 00 40 45 78 52 65 |lUnwind@|16.@ExRe|
|000022b0| 6c 65 61 73 65 46 61 73 | 74 4d 75 74 65 78 40 34 |leaseFas|tMutex@4|
|000022c0| 00 5f 5f 49 4d 50 4f 52 | 54 5f 44 45 53 43 52 49 |.__IMPOR|T_DESCRI|
|000022d0| 50 54 4f 52 5f 48 41 4c | 00 40 45 78 41 63 71 75 |PTOR_HAL|.@ExAcqu|
|000022e0| 69 72 65 46 61 73 74 4d | 75 74 65 78 40 34 00 5f |ireFastM|utex@4._|
|000022f0| 5f 69 6d 70 5f 5f 4b 65 | 47 65 74 43 75 72 72 65 |_imp__Ke|GetCurre|
|00002300| 6e 74 49 72 71 6c 40 30 | 00 7f 48 41 4c 5f 4e 55 |ntIrql@0|..HAL_NU|
|00002310| 4c 4c 5f 54 48 55 4e 4b | 5f 44 41 54 41 00 5f 3f |LL_THUNK|_DATA._?|
|00002320| 64 72 69 76 65 53 74 72 | 40 3f 31 3f 3f 6e 74 66 |driveStr|@?1??ntf|
|00002330| 73 6d 6f 6e 41 74 74 61 | 63 68 44 72 69 76 65 40 |smonAtta|chDrive@|
|00002340| 40 39 40 39 00 5f 6c 68 | 5f 63 6f 6e 74 69 6e 75 |@9@9._lh|_continu|
|00002350| 65 00 5f 6c 68 5f 64 69 | 73 6d 69 73 73 00 5f 6c |e._lh_di|smiss._l|
|00002360| 68 5f 72 65 74 75 72 6e | 00 5f 6c 68 5f 62 61 67 |h_return|._lh_bag|
|00002370| 69 74 00 5f 6c 68 5f 75 | 6e 77 69 6e 64 69 6e 67 |it._lh_u|nwinding|
|00002380| 00 5f 67 75 5f 72 65 74 | 75 72 6e 00 5f 5f 75 6e |._gu_ret|urn.__un|
|00002390| 77 69 6e 64 5f 68 61 6e | 64 6c 65 72 00 5f 75 68 |wind_han|dler._uh|
|000023a0| 5f 72 65 74 75 72 6e 00 | 5f 6c 75 5f 63 6f 6e 74 |_return.|_lu_cont|
|000023b0| 69 6e 75 65 00          |                         |inue.   |        |
+--------+-------------------------+-------------------------+--------+--------+