MZ@ !L!This program cannot be run in DOS mode. $%aoaoaoao\oهi`oe`oRichaoPEL+;`J tnq @&<@ T.text2o@o h.dataqq@INIT .rsrc@@@B.reloc  @B܅$6Npʂ,6Jjt΃6F^zƄ*@TlЅԁ+;K@+;+;$Extend$UpCase$Secure$BadClus$Boot$Bitmap$Root$AttrDef$Volume$LogFile$MftMirr$MftIRP_MN_QUERY_LEGACY_BUS_INFORMATIONIRP_MN_SURPRISE_REMOVALIRP_MN_DEVICE_USAGE_NOTIFICATIONIRP_MN_QUERY_BUS_INFORMATIONIRP_MN_QUERY_PNP_DEVICE_STATEIRP_MN_QUERY_IDIRP_MN_SET_LOCKIRP_MN_EJECTIRP_MN_WRITE_CONFIGIRP_MN_READ_CONFIGIRP_MN_FILTER_RESOURCE_REQUIREMENTSIRP_MN_QUERY_DEVICE_TEXTIRP_MN_QUERY_RESOURCE_REQUIREMENTSIRP_MN_QUERY_RESOURCESIRP_MN_QUERY_CAPABILITIESIRP_MN_QUERY_INTERFACEIRP_MN_QUERY_DEVICE_RELATIONSIRP_MN_CANCEL_STOP_DEVICEIRP_MN_QUERY_STOP_DEVICEIRP_MN_STOP_DEVICEIRP_MN_CANCEL_REMOVE_DEVICEIRP_MN_REMOVE_DEVICEIRP_MN_QUERY_REMOVE_DEVICEIRP_MN_START_DEVICEFileFsMaximumInformationFileFsControlSetInformationFileFsControlQueryInformationFileFsQuotaSetInformationFileFsQuotaQueryInformationFileFsAttributeInformationFileFsDeviceInformationFileFsSizeInformationFileFsLabelInformationFileFsVolumeInformationFileMaximumInformationFileOleInformationFileInheritContentIndexInformationFileContentIndexInformationFileOleDirectoryInformationFileOleAllInformationFileObjectIdInformationFileNetworkOpenInformationFileOleStateBitsInformationFileOleClassIdInformationFileMoveClusterInformationFileCompletionInformationFileCopyOnWriteInformationFileCompressionInformationFileMailslotSetInformationFileMailslotQueryInformationFilePipeRemoteInformationFilePipeLocalInformationFilePipeInformationFileStreamInformationFileAlternateNameInformationFileEndOfFileInformationFileAllocationInformationFileAllInformationFileAlignmentInformationFileModeInformationFileFullEaInformationFilePositionInformationFileDispositionInformationFileNamesInformationFileLinkInformationFileRenameInformationFileNameInformationFileAccessInformationFileEaInformationFileInternalInformationFileStandardInformationFileBasicInformationFileBothDirectoryInformationFileFullDirectoryInformationFileDirectoryInformation-\1\D$t<*t2SVW|$t2t$<*t.t*tt?u2;Gt.^t%uw8bt>wLr w3҉TT DM;ʉ8PPt 1p IHM;t PIHˍxsȃw_`|E ^[]SVW{jS|tpPpu'|܋ _^[VW{jV3ҋ|$ % ||t)98t Ћ@uttHJPPp _^SV3W95w=pvz3F;5wr395wvx3F;5wr%w%w_^[**%s%s%sUSVW}?]3u<;t D>FuutlF hDdk PjhM <tK>$>E ~*t?*tRWPh4E u?t G?`_^[] V|jVhwhzh@{hwhxh{ ^S\$V3;u2vUW|jU95wvxS7'u3F;5wr395wvzS7u%F;5wr2ۋ _]^[Vt$ jjF(NNHv,V^ USV3WSEjP}SG0P;u2vEF EF,EF([^M FPF`Nd$^ ^։HMHMxHF`$@JX @SjSESP39]_^[\\.\Pipe\\.\MailSlot%C:NTFS%C:%C:\%s\\.\Pipe\\.\MailSlot%C:\\.\Pipe\\.\MailSlot%C:\\.\Pipe%s: \\.\MailSlot%s: %C: \\.\Pipe%s: \\.\MailSlot%s: %C: \\.\Pipe\\.\MailSlot%C: U(S]VWt#=w} {jVM %|Et99t@ut*x3+ȃ{Q j^j+Zt'ItM tIy,tue E U} u,;u (u 4whDE 3 MM9H4MuyG;trjp YH3ua8EtEphTuERPju vt=E3%w/r w(40svhXS }hDdk hjhE}u?+Quj u vEjfEEPEPfM|wEǀ$u `-u lE @x,tvh|S MEuE<ȍEPeup} u ~4u3Mu 6u)qh9F0jPEP}>Mu hhuhhS qh}N4}F f9\}Etqtm0f8tdjPEP}HMu hhu hh(qh<S EPNE|}MuP}*u \Fx,tqhlS r3pOE$uM+AыʃM I4f9\taMtZfy0tS@\uM+Oȃ}v/{\Su&{\{u3+ȃ}t EP}t EPE @x,3ICS<;uEC:SC\3ɋt t<\uAG3+ȃC{:u#:SC\3ɋtŃt<\uAG3QSR \3hDdk уQPhEtVM P3+ȃ{jVMEP _^[SystemVW3>jPh tF0r3_^Ë:%d???=wVtJW wt$ jQVf VP3IhQ _ t$^\Device\NamedPipe\Device\MailSlotUxSVWj Y8}jY\}] fu395wt 3u95wt EEPEPVVEj!jEjVEVPEPE hPEuE@uu|dEVPVVju |Eu;t-EPVVw,Vjul|EW`uT;uMu 2>MI(A\AA Mu Euww_^[|$uwt.@(` %w|$uwt@(` %w\DosDevices\A:\U\SVWjY}M y4 y3ۉu;hAffEEPEPSSEj!jEjSESPEPEhPE]E@]ԉ]ESPSSju|uu;t] y98tj=y|EPSSw,Sju l|1EW`Ep(EAF~F u$},Mu2zMu>bhDdk PSEh;ÉFt#MQPuju } vp^MuME@(@ _^[̋D$ yt@(` UQQeSVW yy} yMj^#Et;5wu3u Qu!uPE3ɋ9uj^ uA;|1u-5wt%3M;uV_jX!EF;|݃EE9]pE_^w[FSCTL_REQUEST_OPLOCK_LEVEL_1FSCTL_REQUEST_OPLOCK_LEVEL_2FSCTL_REQUEST_BATCH_OPLOCKFSCTL_OPLOCK_BREAK_ACKNOWLEDGEFSCTL_OPBATCH_ACK_CLOSE_PENDINGFSCTL_OPLOCK_BREAK_NOTIFYFSCTL_LOCK_VOLUMEFSCTL_UNLOCK_VOLUMEFSCTL_DISMOUNT_VOLUMEFSCTL_IS_VOLUME_MOUNTEDFSCTL_IS_PATHNAME_VALIDFSCTL_MARK_VOLUME_DIRTYFSCTL_QUERY_RETRIEVAL_POINTERSFSCTL_GET_COMPRESSIONFSCTL_SET_COMPRESSIONFSCTL_OPLOCK_BREAK_ACK_NO_2FSCTL_QUERY_FAT_BPBFSCTL_REQUEST_FILTER_OPLOCKFSCTL_FILESYSTEM_GET_STATISTICSFSCTL_GET_NTFS_VOLUME_DATAFSCTL_GET_NTFS_FILE_RECORDFSCTL_GET_VOLUME_BITMAPFSCTL_GET_RETRIEVAL_POINTERSFSCTL_MOVE_FILEFSCTL_IS_VOLUME_DIRTYFSCTL_ALLOW_EXTENDED_DASD_IOFSCTL_READ_PROPERTY_DATAFSCTL_WRITE_PROPERTY_DATAFSCTL_FIND_FILES_BY_SIDFSCTL_DUMP_PROPERTY_DATAFSCTL_SET_OBJECT_IDFSCTL_GET_OBJECT_IDFSCTL_DELETE_OBJECT_IDFSCTL_SET_REPARSE_POINTFSCTL_GET_REPARSE_POINTFSCTL_DELETE_REPARSE_POINTFSCTL_ENUM_USN_DATAFSCTL_SECURITY_ID_CHECKFSCTL_READ_USN_JOURNALFSCTL_SET_OBJECT_ID_EXTENDEDFSCTL_CREATE_OR_GET_OBJECT_IDFSCTL_SET_SPARSEFSCTL_SET_ZERO_DATAFSCTL_QUERY_ALLOCATED_RANGESFSCTL_ENABLE_UPGRADEFSCTL_SET_ENCRYPTIONFSCTL_ENCRYPTION_FSCTL_IOFSCTL_WRITE_RAW_ENCRYPTEDFSCTL_READ_RAW_ENCRYPTEDFSCTL_CREATE_USN_JOURNALFSCTL_READ_FILE_USN_DATAFSCTL_WRITE_USN_CLOSE_RECORDFSCTL_EXTEND_VOLUMEFSCTL_PIPE_DISCONNECTFSCTL_PIPE_ASSIGN_EVENTFSCTL_PIPE_QUERY_EVENTFSCTL_PIPE_LISTENFSCTL_PIPE_IMPERSONATEFSCTL_PIPE_WAITFSCTL_QUERY_CLIENT_PROCESSFSCTL_PIPE_SET_CLIENT_PROCESSFSCTL_PIPE_PEEKFSCTL_PIPE_INTERNAL_READReadLen: %dFSCTL_PIPE_INTERNAL_WRITEWriteLen: %dFSCTL_PIPE_TRANSCEIVEWriteLen: %d ReadLen: %dFSCTL_PIPE_INTERNAL_TRANSCEIVEWriteLen: %d ReadLen: %dFSCTL_MAILSLOT_PEEKFSCTL_NETWORK_GET_CONNECTION_INFOFSCTL_NETWORK_ENUMERATE_CONNECTIONSFSCTL_NETWORK_DELETE_CONNECTIONFSCTL_NETWORK_SET_CONFIGURATION_INFOFSCTL_NETWORK_GET_CONFIGURATION_INFOFSCTL_NETWORK_GET_STATISTICSFSCTL_NETWORK_SET_DOMAIN_NAMEFSCTL_NETWORK_REMOTE_BOOT_INIT_SCRTIOCTL: 0x%XUUE V";W.;( ;;w`tQȁ t:t(t$jYjYjY9jY,j8Yȁ t>t(tjYjYt}jXYjYP ;w^tOȁ, t8t& tI[j YyjYjYPjYCjL Y6ȁX t(tj Yj| Yjh Yj Y ;;w[tLȁh t5t#tI(!j!Yj Yj Y5j8!Yȁ t:t(t<j!YKj!YMjp!YQjP!YDj!Y7 ;w`tQȁ t:t(tj"Yj"Yj!Yj!Yj4"Yȁ t(tzj"Y<jh"Y|jL"Y"j"Y; ;;wdtUȁ t>t(tjd#YjL#Y}"j"Yj#Yȁ t:t(tj#Yj#Yj#Yj#Yj$Ys@ ;wctTȁ@ t=t+?t,j4#Y[j#Y.j#YAj|"Yj4 Yȁ@ t+tj$$Yj<$Yj%Yl$;%$;w^tHȁt4t%tdj$Yj$Y$jT$Yj$Y}ff= @ts=`tM=t*=}jYH%Efpph`%j}jY%Efph8%}jY$Eph%R$}}jY|%Efpph%R;wMtAȁt-ttuIj %Y[j%Y`j \&Ygj 4&Y]j&Y3ȁtAt+tPh&u .j &Y}j&Y}fj&Y}󥤋E_^]SUCCESSCRC ERRORNOT IMPLEMENTEDEAS NOT SUPPORTEDEA TOO LARGENONEXISTENT EA ENTRYBAD NETWORK NAMENOTIFY ENUM DIRFILE CORRUPTDISK CORRUPTRANGE NOT LOCKEDFILE CLOSEDIN PAGE ERRORCANCELLEDQUOTA EXCEEDEDNOT SUPPORTEDNO MORE FILESBUFFER TOO SMALLNAME INVALIDFILE NOT FOUNDNOT A DIRECTORYNO SUCH FILENAME COLLISIONNONEXISTENT SECTORBAD NETWORK PATHPATH NOT FOUNDINVALID PARAMETEREND OF FILENOTIFY CLEANUPBUFFER OVERFLOWNO MORE ENTRIESACCESS DENIEDSHARING VIOLATIONINVALID PARAMETEROPLOCK BREAKOPLOCK NOT GRANTEDFILE LOCK CONFLICTPENDINGREPARSEMOREDELETE PENDCANNOT DELETENOT GRANTEDIS DIRECTORYALREADY COMMITTEDINVALID EA FLAGINVALID INFO CLASSINVALID HANDLEINVALID DEVICE REQUESTWRONG VOLUMENETWORK ERRORDFS UNAVAILABLELOG FILE FULLINVALID DEVICE STATENO MEDIADISK FULLNOT EMPTYINSTANCE NOT AVAILABLEPIPE NOT AVAILABLEINVALID PIPE STATEPIPE BUSYPIPE DISCONNECTEDPIPE CLOSINGPIPE CONNECTEDPIPE LISTENINGINVALID READ MODEPIPE EMPTYPIPE BROKENIO TIMEOUT* 0x%XUEV;Wr;3# ;;Lt<=t.=t =t=S/0.=/-} l=t)=t=0).} u0} /Y?`7$<7"/B/뿾z/!/0 j0Y} 0} B1/aD;;XtL=#t7=2t&=3t=4&/?.Db.:.} /2/=:t)=?t=C/E-} =j/.=Otm=Pt\=QtH=Tt7=Ut&=Vt=~wr.jR0n0&0[j.Y.j-N1\;U?$t7.V/z0jf1YC~1111#1111} f"2} 0b;;btV=tE=t7=t&=t=R.FZ1B0 2넾../= t:=!t)=(t=K2} .^0.j*1Y} ;htO=t>=mt-t=udM :0>04M --# 11-M B0F0M AZȁtFt5t!ItPh.2u  /B./} f0} } J0E _^]=3,3[3G3m3w363Q365 5*5456>5E5O5Y5c5v56666 54664Supersede Create OpenIf Open Overwrite OverwriteIf Directory WriteThrough Sequential NoBufferByIDUU ESV"Wj[tgHtQHt>Ht)HtHuk37OW37OC37O637O37Of37OfEt38OfEt38OfEt3 8OEt3,8OE t388O_^[]AnyCTDRHSANUU VW"f}u3P9O¥SE t3T9OfE t3X9OfEt3\9OfEt3`9OfEt3d9OfEt3h9OfE t3l9OfEt3p9Of[_^]SUCCESSFAILURERead:Write:%s FASTIO_CHECK_IF_POSSIBLE %s %s Offset: %d Length: %d %sU8_ t9S+Eh0LuUEEPUPEh4LPEPSj6 }q^t uhyE_[ FAILURE%s FASTIO_PREPARE_MDL_WRITE %s Offset: %d Length: %d %sU|E S3;È]u2Wx(EX9G@@(;8H9XHhy;ÉE t PWuStE qV5S։EEPU(GPuHuI(uuu uQH8A|Et\8_ tWS+EU8]EUtEPE0\MPE u0Eu P5PEhdMPEPSj軾(} q^t u hyGE_[%s FASTIO_MDL_WRITE_COMPLETE %s Offset: %d OKU8_ t9S+EUEE U0EuPPEhNPEPSj膽 }q^t uhyE_[FAILURE%s FASTIO_READ_COMPRESSED %s Offset: %d Length: %d %sU|E,S3;È]u2Wx(9G@@(;8P9XPhyM;ÉE,t PWuSE,qV5S։EEPU(GPu(Hu$I(u uuuuu uQP8@|Et\8_ tWS+EU8]EUtEPE 0  PPE u0Eu,PPEhPPEPSj(},q^t u,hyE_[(FAILURE%s FASTIO_WRITE_COMPRESSED %s Offset: %d Length: %d %sU|E,S3;È]u2Wx(9G@@(;8T9XThy;ÉE,t PWuS[E,qV5S։EEPU(GPu(Hu$I(u uuuuu uQT8A|Et\8_ tWS+EU8]EUtEPE 0QPE u0Eu,PPEhQPEPSj虺(},q^t u,hy%E_[(OK%s FASTIO_MDL_READ_COMPLETE_COMPRESSED %s %sU8_ t9S+EhRuUEEPUPEhRPEPSjc }q^t uhyE_[ OK%s FASTIO_MDL_WRITE_COMPLETE_COMPRESSED %s Offset: %d %sUS+Eh.TUEE U0EuPPEh2TPEPSj$}q^t uhyE_[SUCCESSFAILURE%s FASTIO_QUERY_OPEN %s %sU } q^t u hyE_[%s FASTIO_RELEASE_FOR_CC_FLUSH %s %sU|M S3۸;ˉEWy(9G@@(;8l9Xlhy;ÉE t PWuS蠹E qV5S։EEPU(GPHuI(Ql8A|EtF8_ tAS+EUEEPUuPEu P膿PEhTYPEPSj } q^t u hyE_[FAILURE%s FASTIO_DEVICE_CONTROL %s IOCTL: 0x%X %sUjh hpdPd%SVWe耥pU(r(39>a]$;{M ;_ t,t%wC}s #}juuM`|w98u9xu{8t;=wtEew}ȃ󤋅tK}t Pp9w `|!jXËeE$ M2`|wH;tQPQp w߉8=wj^9u9urE0^MswtdtI t"$ti}r]E0۾W}rKE0rtu@8j^9ur*E뀁}rj@Yu@{f"#ƅpF@@(;8(9x(PVuWWӉxP(FHI(Pu$u uuuuu uQ(p~ tfW+EUptEPE$0(ZPu PPP觻PhZEPxPWj*$pMd _^[$%s FASTIO_ACQUIRE_FILE %s OKUu?3FI;rڋu3EP9}t;uC 4qEVPheEWPEPj蝢$E upC 4qEVPh.e[C =t t,tQtVQQPSϻPEPheE p tvvvhrePEWPWWW6uuuW MtPEuPheEWPEPjˡu E EPheEWPEPj褡rC;t3PEs VPhe?EVPhe}s EVPhfLEVPh>fbEVPh^fVCPEVPhzf#C<w rfPEVPhfEWPEPj PEPhfEWPEPje HHuu ;tqt VhyWj Y{=wu.} t(EC ECE @`@aM$H @E @``$`@aEU H_^[ghhzhh5iNiii&iiiijkqlkkkLh ll%lqlqlqlql6lU SVW} 3ҋw`_WG NMNMN M E+tnIIt< ukO;tAtA RQHuSu uPuujv4%wOEpjЯj藭j萭w2ҋD_^3[̋D$t$H(P9u*Y\Device\Filemon\DosDevices\FilemonUXSVWjY|n}j Yn}Eu=PEP5y׍E3PjSEhPjVl;E@(EPEP׍EPEPX;}j~8Y\n3|F(`sjw_h|SWhl|=`|5Th|h{hhFilmhSSShyPhDdk hSh;ãwuEPLu8wX=w3_^[%d%%%%4USVWUjjhLpuz]_^[]ËL$AtD$T$SVWD$PjhTpd5d%D$ Xp t ;t$$t4v L$H |uTd _^[3d yTpuQ R 9QuVC20XC00USVWU] E@uwEEEECs {tV v|t:VUkT]^] t(x1{SkVS vC T{ v4문UkjS]]_^[]UL$)APAP]%\%     h P < $        l P <        ` D (  hP4 hL0tXD( |`<(hD<0$p:v<=p?GAB]DE GZ|^_`_HIKWLMOJPQ*SkTUWHXzY…8܅$6Npʂ,6Jjt΃6F^zƄ*@TlЅԁBExFreePool6ExAllocatePoolWithTagInterlockedIncrementvsprintfKeLeaveCriticalRegionmExReleaseResourceLite.ExAcquireResourceExclusiveLite[KeEnterCriticalRegionsprintf/ExAcquireResourceSharedLiteIoFreeIrpKeSetEventKeWaitForSingleObjectDIofCallDriver`KeGetCurrentThreadIoAllocateIrppKeInitializeEventmemmoveRtlFreeAnsiStringRtlUnicodeStringToAnsiStringstrncmp IoGetCurrentProcessTPsGetCurrentProcessIdstrncpy[ZwCloseDObfDereferenceObjectIoAttachDeviceToDeviceStackIoCreateDeviceIoGetRelatedDeviceObject?ObReferenceObjectByHandle`ZwCreateFileRtlInitUnicodeStringIoQueryVolumeInformationIoAttachDeviceByPointerKeQuerySystemTimeWExInterlockedPopEntrySListYExInterlockedPushEntrySListMProbeForWriteIoDeleteDeviceIoDetachDevicebExQueueWorkItemEIofCompleteRequestMmMapLockedPagesIoDeleteSymbolicLinkGExInitializeNPagedLookasideListJExInitializeResourceLiteIoCreateSymbolicLinkntoskrnl.exeRtlUnwindExReleaseFastMutexExAcquireFastMutexDKeQueryPerformanceCounterBKeGetCurrentIrqlHAL.dll0 Hll4VS_VERSION_INFO""?StringFileInfo040904B0h$CompanyNameSysinternals - www.sysinternals.coml"FileDescriptionWindows NT/2K File System Monitor*FileVersion4.348 InternalNamefilemon.sys7LegalCopyrightCopyright (C) M. Russinovich and B. Cogswell 1996-2001@ OriginalFilenamefilemon.SysTProductNameFilemon for Windows NT/2K.ProductVersion4.34DVarFileInfo$Translation |;<<<<<<<<<<= =(=-=?=K=Q=`=j=s========G>[>c>i>y>~>>>>>>>>>>>>#?+?1?A?G?N?\?f?m?{????000$0+050>0k0p0y000000000000000 11&12181f1m111122333334,424y4444455 5D55555566>6M6`6r6666666666 777!7.7M7a7w7~77B8R89$9X9]9f9{999999999::+::::::;1;>;Y;z;;;;;;;;; >>3>r>> b7o7|77777777+888E8R8_888888899 9J9W9d9q9~999999 ::&:3::::::::;;";Z;g;t;;;;;;;"3H3R3^3n3{33333334$414;4z44444444445 55!5+555?5F5P5Z5d5w55555556,6<6C6M6Y66666666666777-7<7@7D7H7L7P7T7X7\7t7x7|777777777777777777m888888889'9>999999::0:F::;$;7;_;t;;;;;;;;;<<<<<"=U=s===&>F>M>`>>>>>>????@0k000000111112(2?2T2k2v2363=3P3{33333 444444595k5556.656H6d66666W7w7~77777888888959K9b9m9:":):<:X::::K;k;r;;;;;<<<<<<< ='=>=I==>>,>Q>>>>>N?n?u??????P00000/1M1d1o1 2+222E2s22222t3333333444444 5 5C5Z5e56=6C6W6u666666_7777778888888969A9999::Q:h:s:::M;;;;;;; <<<$->>>>>?&?Q?h?r???`$0#0)0<0Q0|00000(1;1F1M1z1111112;2l2s2}2222(797]77777-8t8|88889,9;9E9d9o999999999:4:::::::+;J;Q;d;|;;;;;<<<0D>N>>>>>???U?c?j?x??????????????p0 000$0*000@000111222 22222 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|222222222222222222222222222222222333 33333 3$3(3,3034383<3@3D3H3L3P3T3X3\3d3h3l3p3t3x3|333333333333333333333J `wq@comp.id!s$SG6651$SG6650$SG6649$SG6648$SG6647$SG6826p$SG6824l$SG6821\$SG6818P$SG6816<$SG6814($SG6813$SG6810$SG6809$SG6804$SG6802$SG6801$SG6798$SG6797$SG6793$SG6791$SG6788$SG6781|$SG6778l$SG6775`$SG6765X$SG6761T$SG6759H$SG6754D$SG67524$SG6749($SG6860$SG6872$SG6870$SG6889\$SG68878$SG6944$SG7178&$SG7180&$SG7182&$SG7184&$SG7172&$SG71744&$SG7176\&$SG7168%$SG7170%$SG7164%$SG7163|%$SG7152$$SG7155%$SG7154$$SG71588%$SG7157%$SG7161`%$SG7160H%$SG7148$$SG7140T$$SG7146$$SG7144$$SG7150$$SG7142l$$SG7166%$SG7138<$$SG7136$$$SG70584 $SG7104|"$SG7116#$SG7114#$SG71184#$SG7134$$SG7126#$SG7128#$SG7130#$SG7132#$SG7124#$SG7110"$SG7112"$SG7120L#$SG7122d#$SG7108"$SG7100L"$SG7102h"$SG7106"$SG70984"$SG7090!$SG7092!$SG7094"$SG7096"$SG7088!$SG7080P!$SG7082p!$SG7084!$SG7086!$SG70788!$SG7070 $SG7072 $SG7074!$SG7076(!$SG7068 $SG7062h $SG7064| $SG7066 $SG7060L $SG7050$SG7052$SG7054$SG7056 $SG7048$SG7040X$SG7042t$SG7044$SG7046$SG70388$SG7030$SG7032$SG7034$SG7036$SG7314J0$SG72990$SG7281/$SG7218B.$SG7403.2$SG7311B0$SG73531$SG7350 1$SG7197-$SG7308:0$SG7356*1$SG7236.$SG7320^0$SG7230.$SG73982$SG7257/$SG7215..$SG7395 2$SG73020$SG7365Z1$SG7221R.$SG73470$SG7401"2$SG73921$SG73891$SG73861$SG73831$SG73801$SG73771$SG73741$SG7371~1$SG7368f1$SG7326z0$SG7269V/$SG7242.$SG7362N1$SG7206-$SG7209.$SG7212.$SG7305&0$SG7323n0$SG7317R0$SG7227r.$SG7239.$SG7272j/$SG7200-$SG7293/$SG72632/$SG7248.$SG7224b.$SG7251.$SG7254/$SG7290/$SG7359B1$SG73440$SG73410$SG73290$SG7278/$SG7275z/$SG7266B/$SG7260"/$SG7296/$SG73350$SG7233.$SG73380$SG7203-$SG7284/$SG7245.$SG73320$SG7287/$SG743688$SG7434,8$SG7432 8$SG74308$SG74288$SG74167$SG74227$SG74187$SG74207$SG74247$SG74267$SG7460p9$SG7458l9$SG7456h9$SG7454d9$SG7452`9$SG7450\9$SG7448X9$SG7446T9$SG7444P9$SG7502x:$SG7501p:$SG7500h:$SG7499`:$SG7498X:$SG7542J<$SG7541B<$SG7582=$SG7581=$SG7627N?$SG7626F?$SG7622?$SG7621?$SG7668"A$SG7667A$SG7664@$SG7662@$SG7712B$SG7711B$SG7710B$SG7709B$SG77500D$SG7749(D$SG7782E$SG7781E$SG7816F$SG7815F$SG78506H$SG7849.H$SG7882I$SG7920J$SG7919J$SG79504L$SG79490L$SG7989dM$SG7988\M$SG8019N$SG8063P$SG8062 P$SG8107Q$SG8106Q$SG8136R$SG8135R$SG81672T$SG8166.T$SG8200U$SG8199U$SG8198xU$SG8231V$SG8260"X$SG8289TY$SG8409Z$SG8408Z$T9405 $SG8436^^$SG8464_$SG8488`$SG8484`$SG8527a$SG8524a$SG8692f$SG8689f$SG8688f$SG8685zf$SG8682^f$SG8679>f$SG8676f$SG8673e$SG8670e$SG8664e$SG8658e$SG8654re$SG8661e$SG8643.e$SG8640e$SG8624d$SG8646Re$SG8616d$SG8613d$SG8610jd$SG8607Rd$SG8603.d$SG8600 d$SG8597c$SG8594c$SG8591c$SG8587c$SG8583Nc$SG8580c$SG8576b$SG8761n$SG8758|n@comp.id$R000000.idata$6….textpG$$$00001p $$$00004q #R!tq!q!q_lh_top+q!q!q.text4p=!Lp$$$000014p $$$00003Tp " "Tp $")$$$00005vp +0$$$00007p 9>$$$00009p G_lu_donep"up%"p_lu_topp_at_donep.idata$68headerxy!!>]l\9Hc. Eg $(B,f0T48<@D7HLPTX!\`adXh,lDp t-Ga|$01<HDyh8\(< `M|~4 b(DXt>f#0SLh/Z4P<hh$ R  (  D  `  > k      I < p P  l    J s     $  < = P i h      M ]  j        n  t   :  3h K [J xz    ~  2    (& >52 M=8 dr9 ~: ; < v< = p? 0GA SB i]D E  G _H I  K %WL FM gO JP Q *S kT !U <W `HX zY Z |^ _ ` a /a Cf Ym q\n n p p "p  (p .p z4p vp p p q lq q _MaxLogqqqrr0s`swvwcwQw@w+ww ww_NumLogw1w!xy yyz{@{`|||*.!Ԁ end@2"_DriverEntry@8??_C@_07MOPH@$Extend?$AA@??_C@_07OBDC@$UpCase?$AA@??_C@_07GLMP@$Secure?$AA@??_C@_08MFLJ@$BadClus?$AA@??_C@_05CMEP@$Boot?$AA@??_C@_07MDHP@$Bitmap?$AA@??_C@_05HJGO@$Root?$AA@??_C@_08OGDD@$AttrDef?$AA@??_C@_07IHAJ@$Volume?$AA@??_C@_08FDME@$LogFile?$AA@??_C@_08LGDL@$MftMirr?$AA@??_C@_04MMFN@$Mft?$AA@??_C@_0CE@CBCK@IRP_MN_QUERY_LEGACY_BUS_INFORMAT@??_C@_0BI@DPHM@IRP_MN_SURPRISE_REMOVAL?$AA@??_C@_0CB@KAJ@IRP_MN_DEVICE_USAGE_NOTIFICATION@??_C@_0BN@INCI@IRP_MN_QUERY_BUS_INFORMATION?$AA@??_C@_0BO@HDMB@IRP_MN_QUERY_PNP_DEVICE_STATE?$AA@??_C@_0BA@CAHA@IRP_MN_QUERY_ID?$AA@??_C@_0BA@OKEC@IRP_MN_SET_LOCK?$AA@??_C@_0N@JHBK@IRP_MN_EJECT?$AA@??_C@_0BE@EFAO@IRP_MN_WRITE_CONFIG?$AA@??_C@_0BD@ICKD@IRP_MN_READ_CONFIG?$AA@??_C@_0CE@EHHF@IRP_MN_FILTER_RESOURCE_REQUIREME@??_C@_0BJ@EFDI@IRP_MN_QUERY_DEVICE_TEXT?$AA@??_C@_0CD@JGIK@IRP_MN_QUERY_RESOURCE_REQUIREMEN@??_C@_0BH@NLOI@IRP_MN_QUERY_RESOURCES?$AA@??_C@_0BK@OENO@IRP_MN_QUERY_CAPABILITIES?$AA@??_C@_0BH@FIBO@IRP_MN_QUERY_INTERFACE?$AA@??_C@_0BO@BNCN@IRP_MN_QUERY_DEVICE_RELATIONS?$AA@??_C@_0BK@GFJB@IRP_MN_CANCEL_STOP_DEVICE?$AA@??_C@_0BJ@PACP@IRP_MN_QUERY_STOP_DEVICE?$AA@??_C@_0BD@BDCC@IRP_MN_STOP_DEVICE?$AA@??_C@_0BM@JPLL@IRP_MN_CANCEL_REMOVE_DEVICE?$AA@??_C@_0BF@GMPC@IRP_MN_REMOVE_DEVICE?$AA@??_C@_0BL@CLML@IRP_MN_QUERY_REMOVE_DEVICE?$AA@??_C@_0BE@IBKL@IRP_MN_START_DEVICE?$AA@??_C@_0BJ@OMCA@FileFsMaximumInformation?$AA@??_C@_0BM@CNAK@FileFsControlSetInformation?$AA@??_C@_0BO@EHGB@FileFsControlQueryInformation?$AA@??_C@_0BK@BNLO@FileFsQuotaSetInformation?$AA@??_C@_0BM@MGGA@FileFsQuotaQueryInformation?$AA@??_C@_0BL@KDHD@FileFsAttributeInformation?$AA@??_C@_0BI@IDAA@FileFsDeviceInformation?$AA@??_C@_0BG@PCMP@FileFsSizeInformation?$AA@??_C@_0BH@CNKM@FileFsLabelInformation?$AA@??_C@_0BI@DEFD@FileFsVolumeInformation?$AA@??_C@_0BH@LIDB@FileMaximumInformation?$AA@??_C@_0BD@EFEF@FileOleInformation?$AA@??_C@_0CD@MDEJ@FileInheritContentIndexInformati@??_C@_0BM@DHPE@FileContentIndexInformation?$AA@??_C@_0BM@ECDK@FileOleDirectoryInformation?$AA@??_C@_0BG@FKPG@FileOleAllInformation?$AA@??_C@_0BI@HHLA@FileObjectIdInformation?$AA@??_C@_0BL@KHMC@FileNetworkOpenInformation?$AA@??_C@_0BM@NBLL@FileOleStateBitsInformation?$AA@??_C@_0BK@JMGE@FileOleClassIdInformation?$AA@??_C@_0BL@FNGO@FileMoveClusterInformation?$AA@??_C@_0BK@EHAH@FileCompletionInformation?$AA@??_C@_0BL@CAGK@FileCopyOnWriteInformation?$AA@??_C@_0BL@DJHK@FileCompressionInformation?$AA@??_C@_0BL@KBFB@FileMailslotSetInformation?$AA@??_C@_0BN@PNGK@FileMailslotQueryInformation?$AA@??_C@_0BK@KFOO@FilePipeRemoteInformation?$AA@??_C@_0BJ@LLIA@FilePipeLocalInformation?$AA@??_C@_0BE@BCDO@FilePipeInformation?$AA@??_C@_0BG@GFAP@FileStreamInformation?$AA@??_C@_0BN@MDOC@FileAlternateNameInformation?$AA@??_C@_0BJ@NOKH@FileEndOfFileInformation?$AA@??_C@_0BK@COFJ@FileAllocationInformation?$AA@??_C@_0BD@IEJH@FileAllInformation?$AA@??_C@_0BJ@HPGN@FileAlignmentInformation?$AA@??_C@_0BE@HHJG@FileModeInformation?$AA@??_C@_0BG@IAJP@FileFullEaInformation?$AA@??_C@_0BI@NADN@FilePositionInformation?$AA@??_C@_0BL@CBNC@FileDispositionInformation?$AA@??_C@_0BF@GDPD@FileNamesInformation?$AA@??_C@_0BE@FOEO@FileLinkInformation?$AA@??_C@_0BG@LJIJ@FileRenameInformation?$AA@??_C@_0BE@CJBI@FileNameInformation?$AA@??_C@_0BG@LHBE@FileAccessInformation?$AA@??_C@_0BC@NENN@FileEaInformation?$AA@??_C@_0BI@DGHH@FileInternalInformation?$AA@??_C@_0BI@EGIK@FileStandardInformation?$AA@??_C@_0BF@DMOG@FileBasicInformation?$AA@??_C@_0BN@CCJP@FileBothDirectoryInformation?$AA@??_C@_0BN@LBFB@FileFullDirectoryInformation?$AA@??_C@_0BJ@GJNE@FileDirectoryInformation?$AA@??_C@_00A@?$AA@_MatchOkay@4_MatchWithPattern@8_FilemonFreeLog@0_FilemonAllocateLog@0_FilemonGetOldestLog@0_FilemonResetLog@0_LogRecord_FilemonHashCleanup@0_FilemonFreeHashEntry@4_FilemonFreeFilters@0_MakeFilterArray@12_FilemonUpdateFilters@0_ApplyFilters@4_FilemonQueryFileComplete@12_FilemonQueryFile@20_FilemonGetFullPath@16_FilemonGetProcessNameOffset@0_FilemonGetProcess@4_HookSpecialFs@8_UnhookSpecialFs@4_HookDrive@8_UnhookDrive@4_HookDriveSet@8_ControlCodeString@16_ErrorString@8_CreateOptionsString@8_CreateAttributesString@8_FilemonFastIoCheckifPossible@32_ExAllocateFromNPagedLookasideList@4_ExFreeToNPagedLookasideList@8_FilemonFastIoRead@32_FilemonFastIoWrite@32_FilemonFastIoQueryBasicInfo@20_FilemonFastIoQueryStandardInfo@20_FilemonFastIoLock@36_FilemonFastIoUnlockSingle@28_FilemonFastIoUnlockAll@16_FilemonFastIoUnlockAllByKey@20_FilemonFastIoQueryNetworkOpenInfo@20_FilemonFastIoAcquireForModWrite@16_FilemonFastIoMdlRead@28_FilemonFastIoMdlReadComplete@12_FilemonFastIoPrepareMdlWrite@28_FilemonFastIoMdlWriteComplete@16_FilemonFastIoReadCompressed@40_FilemonFastIoWriteCompressed@40_FilemonFastIoMdlReadCompleteCompressed@12_FilemonFastIoMdlWriteCompleteCompressed@16_FilemonFastIoQueryOpen@12_FilemonFastIoReleaseForModWrite@12_FilemonFastIoAcquireForCcFlush@8_FilemonFastIoReleaseForCcFlush@8_FilemonFastIoDeviceControl@36_FilemonFastIoAcquireFile@4_FilemonFastIoReleaseFile@4_FilemonFastIoDetachDevice@8_FilemonHookDoneWork@4_FilemonHookDone@12_FilemonHookRoutine@8_FilemonDeviceRoutine@8_FilemonDispatch@8_FilemonUnload@4_FastIOHook_NtfsMetadataFileNames_PnpMinorCode_VolumeInformation_FileInformation_InsufficientResources_Sequence_CurrentLog_MailSlotHookDevice_NamedPipeHookDevice_CurrentDriveSet_UnloadInProgress_NumExcludeFilters_NumIncludeFilters_FilterOn_HashTable_FilterResource_LogMutex_CountMutex_FilterDef_HashResource_IncludeFilters_FullPathLookaside_DriveHookDevices_FilemonDriver_ExcludeFilters_ProcessNameOffset__imp__ExFreePool@4__imp__ExAllocatePoolWithTag@12__imp_@ExReleaseFastMutex@4__imp_@ExAcquireFastMutex@4@InterlockedIncrement@4__imp__vsprintf__imp__KeLeaveCriticalRegion@0__imp_@ExReleaseResourceLite@4__imp__ExAcquireResourceExclusiveLite@8__imp__KeEnterCriticalRegion@0__imp__sprintf__imp__ExAcquireResourceSharedLite@8__imp__IoFreeIrp@4__imp__KeSetEvent@12__imp__KeWaitForSingleObject@20__imp_@IofCallDriver@8_KeGetCurrentThread@0__imp__IoAllocateIrp@8__imp__KeInitializeEvent@12__imp__memmove__imp__RtlFreeAnsiString@4__imp__RtlUnicodeStringToAnsiString@12__imp__strncmp__imp__IoGetCurrentProcess@0_PsGetCurrentProcessId@0__imp__strncpy__imp__ZwClose@4__imp_@ObfDereferenceObject@4_IoAttachDeviceToDeviceStack@8__imp__IoCreateDevice@28__imp__IoGetRelatedDeviceObject@4__imp__ObReferenceObjectByHandle@24__imp__ZwCreateFile@44__imp__RtlInitUnicodeString@8__imp__IoQueryVolumeInformation@20__imp__IoAttachDeviceByPointer@8__imp__KeQuerySystemTime@4__imp__KeQueryPerformanceCounter@4__imp_@ExInterlockedPopEntrySList@8__imp_@ExInterlockedPushEntrySList@12_ProbeForWrite@12__except_list__except_handler3__imp__IoDeleteDevice@4__imp__IoDetachDevice@4__imp__ExQueueWorkItem@8_KeGetCurrentIrql@0__imp_@IofCompleteRequest@8__imp__MmMapLockedPages@8__imp__ExDeleteResourceLite@4__imp__ExDeleteNPagedLookasideList@4__imp__IoDeleteSymbolicLink@4__imp__ExInitializeNPagedLookasideList@28__imp__ExInitializeResourceLite@4__imp__IoCreateSymbolicLink@8_ExFreePool@4__IMPORT_DESCRIPTOR_ntoskrnl_ExAllocatePoolWithTag@12__imp_@InterlockedIncrement@4_vsprintf_KeLeaveCriticalRegion@0@ExReleaseResourceLite@4_ExAcquireResourceExclusiveLite@8_KeEnterCriticalRegion@0_ExAcquireResourceSharedLite@8_IoFreeIrp@4_KeSetEvent@12_KeWaitForSingleObject@20@IofCallDriver@8__imp__KeGetCurrentThread@0_IoAllocateIrp@8_KeInitializeEvent@12_RtlFreeAnsiString@4_RtlUnicodeStringToAnsiString@12_IoGetCurrentProcess@0__imp__PsGetCurrentProcessId@0_ZwClose@4@ObfDereferenceObject@4__imp__IoAttachDeviceToDeviceStack@8_IoCreateDevice@28_IoGetRelatedDeviceObject@4_ObReferenceObjectByHandle@24_ZwCreateFile@44_RtlInitUnicodeString@8_IoQueryVolumeInformation@20_IoAttachDeviceByPointer@8_KeQuerySystemTime@4@ExInterlockedPopEntrySList@8@ExInterlockedPushEntrySList@12__imp__ProbeForWrite@12_RtlUnwind@16__global_unwind2__local_unwind2__abnormal_termination__seh_longjmp_unwind@4_IoDeleteDevice@4_IoDetachDevice@4_ExQueueWorkItem@8@IofCompleteRequest@8_MmMapLockedPages@8_ExDeleteResourceLite@4_ExDeleteNPagedLookasideList@4_IoDeleteSymbolicLink@4_ExInitializeNPagedLookasideList@28_ExInitializeResourceLite@4_IoCreateSymbolicLink@8__NULL_IMPORT_DESCRIPTORntoskrnl_NULL_THUNK_DATA__imp__RtlUnwind@16@ExReleaseFastMutex@4__IMPORT_DESCRIPTOR_HAL@ExAcquireFastMutex@4_KeQueryPerformanceCounter@4__imp__KeGetCurrentIrql@0HAL_NULL_THUNK_DATA_?text@?1??LogRecord@@9@9_lh_continue_lh_dismiss_lh_return_lh_bagit_lh_unwinding_gu_return__unwind_handler_uh_return_lu_continue d:\nt4ddk\lib\i386\free\filem.sys   S % Pn tRt:YhRJ0z Ӂ   ӓ6e~R A2  &52=8r9ӳ:6 ;*<.v<1  =1  p?r0 GAA B\ ]DB  E  G   _H   ӴI  K.  WL ӜM:  O JP7 Q7 *S kT  ӤUHW  HX   zY   ӹZ- )|^ Ӡ_  `Ӳa(a#fDӜm \n nR