fastfat.sys-->ntoskrnl.exe-->FsRtlNormalizeNtstatus, Type: IAT modification 0xA9E98720-->8050A3D5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyCleanup, Type: IAT modification 0xA9E98790-->805E2B73 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyFullChangeDirectory, Type: IAT modification 0xA9E98794-->8061E173 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyFullReportChange, Type: IAT modification 0xA9E98788-->8061E1EB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyInitializeSync, Type: IAT modification 0xA9E989A0-->8059E2D8 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyUninitializeSync, Type: IAT modification 0xA9E989BC-->80583A91 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyVolumeEvent, Type: IAT modification 0xA9E98770-->805AB55A [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNumberOfRunsInLargeMcb, Type: IAT modification 0xA9E986F8-->804F91C1 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlOplockFsctrl, Type: IAT modification 0xA9E98920-->805DCF14 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlOplockIsFastIoPossible, Type: IAT modification 0xA9E98774-->8056FE85 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlPostPagingFileStackOverflow, Type: IAT modification 0xA9E9897C-->80531DEB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlPostStackOverflow, Type: IAT modification 0xA9E98978-->80531DC8 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlPrivateLock, Type: IAT modification 0xA9E98948-->80515DBA [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlProcessFileLock, Type: IAT modification 0xA9E98954-->80500AC5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlRemoveLargeMcbEntry, Type: IAT modification 0xA9E9891C-->804FD588 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlTeardownPerStreamContexts, Type: IAT modification 0xA9E9898C-->8057C788 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlTruncateLargeMcb, Type: IAT modification 0xA9E98710-->804F8FCB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlUninitializeFileLock, Type: IAT modification 0xA9E989A8-->804F99DB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlUninitializeLargeMcb, Type: IAT modification 0xA9E986FC-->804FC309 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlUninitializeOplock, Type: IAT modification 0xA9E989AC-->804FC261 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->InterlockedPopEntrySList, Type: IAT modification 0xA9E987B4-->804E131F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->InterlockedPushEntrySList, Type: IAT modification 0xA9E98990-->804E1343 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoAcquireVpbSpinLock, Type: IAT modification 0xA9E9876C-->805058D0 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoAllocateMdl, Type: IAT modification 0xA9E987E8-->804EDDB1 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoAllocateWorkItem, Type: IAT modification 0xA9E988FC-->804FEBBD [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoBuildAsynchronousFsdRequest, Type: IAT modification 0xA9E989DC-->804FC59C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoBuildDeviceIoControlRequest, Type: IAT modification 0xA9E98838-->80518674 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoBuildPartialMdl, Type: IAT modification 0xA9E98A00-->804EE132 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoBuildSynchronousFsdRequest, Type: IAT modification 0xA9E98930-->80518DB9 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoCheckEaBufferValidity, Type: IAT modification 0xA9E98894-->8059E280 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoCheckShareAccess, Type: IAT modification 0xA9E987C4-->8057B23E [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoCreateDevice, Type: IAT modification 0xA9E9890C-->805A170C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoCreateStreamFileObject, Type: IAT modification 0xA9E98718-->805D2CFC [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoDeleteDevice, Type: IAT modification 0xA9E98908-->80505760 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IofCallDriver, Type: IAT modification 0xA9E98808-->804E13B9 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IofCompleteRequest, Type: IAT modification 0xA9E98798-->804E17CF [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoFileObjectType, Type: IAT modification 0xA9E9892C-->80560D58 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoFreeIrp, Type: IAT modification 0xA9E98814-->804EAF62 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoFreeMdl, Type: IAT modification 0xA9E987E4-->804EDE66 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoFreeWorkItem, Type: IAT modification 0xA9E988C8-->804FEBA5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetCurrentProcess, Type: IAT modification 0xA9E987B8-->804E5E36 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetDeviceToVerify, Type: IAT modification 0xA9E988C4-->8050A371 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetFileObjectGenericMapping, Type: IAT modification 0xA9E98698-->80579683 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetRequestorProcess, Type: IAT modification 0xA9E98784-->804F4331 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetStackLimits, Type: IAT modification 0xA9E98964-->804DC214 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetTopLevelIrp, Type: IAT modification 0xA9E988A8-->804E84B2 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoIsOperationSynchronous, Type: IAT modification 0xA9E9880C-->804EAFCE [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoIsSystemThread, Type: IAT modification 0xA9E988B8-->80514E6B [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoMakeAssociatedIrp, Type: IAT modification 0xA9E98840-->80513B48 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoQueueWorkItem, Type: IAT modification 0xA9E987B0-->804E627F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoRaiseHardError, Type: IAT modification 0xA9E988BC-->8050A461 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoRaiseInformationalHardError, Type: IAT modification 0xA9E988B4-->805324C7 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoRegisterFileSystem, Type: IAT modification 0xA9E988E8-->805AF1B5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoReleaseVpbSpinLock, Type: IAT modification 0xA9E98768-->805058EC [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoRemoveShareAccess, Type: IAT modification 0xA9E9877C-->80579BF4 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoSetDeviceToVerify, Type: IAT modification 0xA9E988C0-->8050A388 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoSetHardErrorOrVerifyDevice, Type: IAT modification 0xA9E98724-->80508949 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoSetShareAccess, Type: IAT modification 0xA9E987C0-->80579C54 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoSetTopLevelIrp, Type: IAT modification 0xA9E987A0-->804E8495 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoUnregisterFileSystem, Type: IAT modification 0xA9E98988-->805B05C9 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoUpdateShareAccess, Type: IAT modification 0xA9E987D4-->8057BB20 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoVerifyVolume, Type: IAT modification 0xA9E989D8-->80620CB4 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeBugCheckEx, Type: IAT modification 0xA9E986C8-->8053769F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeCancelTimer, Type: IAT modification 0xA9E9875C-->804E61C5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeClearEvent, Type: IAT modification 0xA9E98810-->804E5AA4 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeDelayExecutionThread, Type: IAT modification 0xA9E9883C-->804E14F6 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeEnterCriticalRegion, Type: IAT modification 0xA9E987A4-->804D95F2 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeGetCurrentThread, Type: IAT modification 0xA9E98848-->804DB622 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeInitializeDpc, Type: IAT modification 0xA9E98998-->804E7DB8 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeInitializeEvent, Type: IAT modification 0xA9E98744-->804E7DE6 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeInitializeSpinLock, Type: IAT modification 0xA9E988F8-->804E2417 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeInitializeTimer, Type: IAT modification 0xA9E9899C-->804EC4FB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeLeaveCriticalRegion, Type: IAT modification 0xA9E9879C-->804D9604 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeNumberProcessors, Type: IAT modification 0xA9E98934-->8055BA60 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeQuerySystemTime, Type: IAT modification 0xA9E98760-->804D95AF [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeRemoveQueueDpc, Type: IAT modification 0xA9E98758-->80514F93 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeSetEvent, Type: IAT modification 0xA9E98804-->804E20A9 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeSetTimer, Type: IAT modification 0xA9E98754-->804E216F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeTickCount, Type: IAT modification 0xA9E989F4-->8055A000 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeWaitForSingleObject, Type: IAT modification 0xA9E9873C-->804DC400 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->memmove, Type: IAT modification 0xA9E98800-->804DADC5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmCanFileBeTruncated, Type: IAT modification 0xA9E987CC-->804F719D [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmFlushImageSection, Type: IAT modification 0xA9E987D8-->804F710E [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmMapLockedPagesSpecifyCache, Type: IAT modification 0xA9E98830-->804EDF4C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmProbeAndLockPages, Type: IAT modification 0xA9E9882C-->804F6BFF [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmQuerySystemSize, Type: IAT modification 0xA9E988F4-->8050896A [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmUnlockPages, Type: IAT modification 0xA9E9884C-->804F6EB5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmUnmapLockedPages, Type: IAT modification 0xA9E98828-->804EE0B8 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->NlsMbOemCodePageTag, Type: IAT modification 0xA9E9885C-->8069A720 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->NlsOemLeadByteInfo, Type: IAT modification 0xA9E988A0-->8056C4C0 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ObfDereferenceObject, Type: IAT modification 0xA9E98844-->804E1930 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ObfReferenceObject, Type: IAT modification 0xA9E988E4-->804DA06B [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ObReferenceObjectByHandle, Type: IAT modification 0xA9E98928-->8056C559 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ProbeForRead, Type: IAT modification 0xA9E9893C-->805838BB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ProbeForWrite, Type: IAT modification 0xA9E98938-->8056E89F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlAreBitsClear, Type: IAT modification 0xA9E98708-->804F8F41 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlClearBits, Type: IAT modification 0xA9E986D0-->804EA9A5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlCompareMemory, Type: IAT modification 0xA9E988E0-->804E5080 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlCompareString, Type: IAT modification 0xA9E9889C-->8063BFEB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlDelete, Type: IAT modification 0xA9E989C0-->804F2FC1 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlDowncaseUnicodeString, Type: IAT modification 0xA9E987F4-->8063B7C7 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlEqualString, Type: IAT modification 0xA9E989D4-->8050372A [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlFindClearBits, Type: IAT modification 0xA9E986DC-->804F044D [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlFindLongestRunClear, Type: IAT modification 0xA9E98704-->80543329 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlFreeOemString, Type: IAT modification 0xA9E98860-->805E5654 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlFreeUnicodeString, Type: IAT modification 0xA9E98994-->80582BB6 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlGenerate8dot3Name, Type: IAT modification 0xA9E98960-->80588A90 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlInitializeBitMap, Type: IAT modification 0xA9E986D4-->8057BF4E [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlInitUnicodeString, Type: IAT modification 0xA9E98910-->804DA2A5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlOemStringToCountedUnicodeString, Type: IAT modification 0xA9E98870-->8063BD83 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlOemToUnicodeN, Type: IAT modification 0xA9E98854-->805E36C0 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlSetBits, Type: IAT modification 0xA9E986CC-->804F03FD [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlSplay, Type: IAT modification 0xA9E989C4-->804F345D [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlTimeFieldsToTime, Type: IAT modification 0xA9E989C8-->80506F79 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlTimeToTimeFields, Type: IAT modification 0xA9E989CC-->8050A933 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlUnicodeStringToCountedOemString, Type: IAT modification 0xA9E9895C-->805899A0 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlUpcaseUnicodeString, Type: IAT modification 0xA9E987F0-->80570494 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlUpcaseUnicodeStringToCountedOemString, Type: IAT modification 0xA9E987F8-->8063BE4C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlUpperString, Type: IAT modification 0xA9E98898-->805C80F6 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlxOemStringToUnicodeSize, Type: IAT modification 0xA9E98858-->8063B947 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeAccessCheck, Type: IAT modification 0xA9E98694-->8056C2C7 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeExports, Type: IAT modification 0xA9E989F8-->8069AD50 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeFilterToken, Type: IAT modification 0xA9E989FC-->8063FBBC [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeLockSubjectContext, Type: IAT modification 0xA9E986A0-->8056C39C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SePrivilegeCheck, Type: IAT modification 0xA9E986A4-->805738F5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeReleaseSubjectContext, Type: IAT modification 0xA9E9869C-->8056CA9C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeSinglePrivilegeCheck, Type: IAT modification 0xA9E987D0-->8057898F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeUnlockSubjectContext, Type: IAT modification 0xA9E98690-->8056C3D1 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ZwClose, Type: IAT modification 0xA9E988D4-->804E3496 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ZwOpenKey, Type: IAT modification 0xA9E988DC-->804E3BEE [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ZwQueryValueKey, Type: IAT modification 0xA9E988D8-->804E4076 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_abnormal_termination, Type: IAT modification 0xA9E986C4-->804E30C4 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_alldiv, Type: IAT modification 0xA9E98880-->804DA42D [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_allmul, Type: IAT modification 0xA9E9887C-->804DA5B6 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_allshl, Type: IAT modification 0xA9E986EC-->804DA6DB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_allshr, Type: IAT modification 0xA9E986E8-->804DA6FA [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_except_handler3, Type: IAT modification 0xA9E98A04-->804E2EF8 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_local_unwind2, Type: IAT modification 0xA9E989E0-->804E3054 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->DbgPrint, Type: IAT modification 0xF74D9ACC-->80501F09 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ExAllocatePoolWithTag, Type: IAT modification 0xF74D9A98-->80551005 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ExFreePoolWithTag, Type: IAT modification 0xF74D9C60-->805511E6 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ExInitializeNPagedLookasideList, Type: IAT modification 0xF74D9BE0-->80508A20 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ExQueueWorkItem, Type: IAT modification 0xF74D9B40-->804DA3FC [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ExUuidCreate, Type: IAT modification 0xF74D9AB0-->805E9C7C [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->FsRtlIsTotalDeviceFailure, Type: IAT modification 0xF74D9BF4-->80503910 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->HalExamineMBR, Type: IAT modification 0xF74D9A9C-->8050D44B [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->InterlockedPopEntrySList, Type: IAT modification 0xF74D9BD8-->804E131F [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->InterlockedPushEntrySList, Type: IAT modification 0xF74D9BDC-->804E1343 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAcquireCancelSpinLock, Type: IAT modification 0xF74D9B68-->804E81D7 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAllocateErrorLogEntry, Type: IAT modification 0xF74D9BA0-->8050BB6D [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAllocateIrp, Type: IAT modification 0xF74D9BF0-->804EAFBD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAllocateMdl, Type: IAT modification 0xF74D9BE8-->804EDDB1 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAllocateWorkItem, Type: IAT modification 0xF74D9B24-->804FEBBD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAttachDeviceToDeviceStack, Type: IAT modification 0xF74D9B54-->80506BF6 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoBuildDeviceIoControlRequest, Type: IAT modification 0xF74D9AA0-->80518674 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoBuildPartialMdl, Type: IAT modification 0xF74D9C00-->804EE132 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoBuildSynchronousFsdRequest, Type: IAT modification 0xF74D9C4C-->80518DB9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoCreateDevice, Type: IAT modification 0xF74D9B5C-->805A170C [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoCreateSymbolicLink, Type: IAT modification 0xF74D9AE8-->805D2EFF [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoDeleteDevice, Type: IAT modification 0xF74D9B4C-->80505760 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoDeleteSymbolicLink, Type: IAT modification 0xF74D9AEC-->805D7E64 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoDetachDevice, Type: IAT modification 0xF74D9B50-->80507FC4 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IofCallDriver, Type: IAT modification 0xF74D9C50-->804E13B9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IofCompleteRequest, Type: IAT modification 0xF74D9AF8-->804E17CF [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoFreeIrp, Type: IAT modification 0xF74D9BF8-->804EAF62 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoFreeMdl, Type: IAT modification 0xF74D9BE4-->804EDE66 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoFreeWorkItem, Type: IAT modification 0xF74D9B1C-->804FEBA5 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoGetAttachedDeviceReference, Type: IAT modification 0xF74D9AA4-->8051527F [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoGetBootDiskInformation, Type: IAT modification 0xF74D9BAC-->805CC72D [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoGetDeviceObjectPointer, Type: IAT modification 0xF74D9ADC-->805E3B29 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoGetDeviceProperty, Type: IAT modification 0xF74D9BBC-->8059BFB5 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoGetFileObjectGenericMapping, Type: IAT modification 0xF74D9B08-->80579683 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoInvalidateDeviceRelations, Type: IAT modification 0xF74D9B8C-->80505DDD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoInvalidateDeviceState, Type: IAT modification 0xF74D9BB4-->8050BADF [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoQueueWorkItem, Type: IAT modification 0xF74D9B20-->804E627F [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoRaiseInformationalHardError, Type: IAT modification 0xF74D9C18-->805324C7 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoReadPartitionTableEx, Type: IAT modification 0xF74D9C5C-->805CC6CD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoRegisterBootDriverReinitialization, Type: IAT modification 0xF74D9BCC-->805C6911 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoRegisterDeviceInterface, Type: IAT modification 0xF74D9AF0-->805DCC64 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoRegisterDriverReinitialization, Type: IAT modification 0xF74D9BC8-->805C5D02 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoRegisterShutdownNotification, Type: IAT modification 0xF74D9B44-->805BB902 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoReleaseCancelSpinLock, Type: IAT modification 0xF74D9B2C-->804E81BD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoReportDetectedDevice, Type: IAT modification 0xF74D9BD4-->805CDE34 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoReportTargetDeviceChangeAsynchronous, Type: IAT modification 0xF74D9B6C-->805054D9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoReuseIrp, Type: IAT modification 0xF74D9BFC-->804ECE58 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoSetDeviceInterfaceState, Type: IAT modification 0xF74D9BB8-->805D7867 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoSetSystemPartition, Type: IAT modification 0xF74D9B7C-->8053294B [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoUnregisterShutdownNotification, Type: IAT modification 0xF74D9BC0-->80665347 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoWMIRegistrationControl, Type: IAT modification 0xF74D9AF4-->805A218B [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoWriteErrorLogEntry, Type: IAT modification 0xF74D9B9C-->8050BDCD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeBugCheckEx, Type: IAT modification 0xF74D9BA8-->8053769F [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeClearEvent, Type: IAT modification 0xF74D9B74-->804E5AA4 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeGetCurrentThread, Type: IAT modification 0xF74D9C1C-->804DB622 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeInitializeEvent, Type: IAT modification 0xF74D9B70-->804E7DE6 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeInitializeSemaphore, Type: IAT modification 0xF74D9B48-->804E88F1 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeInitializeSpinLock, Type: IAT modification 0xF74D9B58-->804E2417 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeQuerySystemTime, Type: IAT modification 0xF74D9AAC-->804D95AF [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeReleaseSemaphore, Type: IAT modification 0xF74D9B28-->804E90CE [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeSetEvent, Type: IAT modification 0xF74D9B30-->804E20A9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeWaitForSingleObject, Type: IAT modification 0xF74D9C54-->804DC400 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->memmove, Type: IAT modification 0xF74D9ABC-->804DADC5 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->MmBuildMdlForNonPagedPool, Type: IAT modification 0xF74D9BEC-->804EDEBC [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->MmLockPagableDataSection, Type: IAT modification 0xF74D9BB0-->805E7DA9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->MmMapLockedPages, Type: IAT modification 0xF74D9C14-->804F97B4 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->MmUnmapLockedPages, Type: IAT modification 0xF74D9C04-->804EE0B8 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ObfDereferenceObject, Type: IAT modification 0xF74D9AA8-->804E1930 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ObfReferenceObject, Type: IAT modification 0xF74D9B98-->804DA06B [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ObReferenceObjectByHandle, Type: IAT modification 0xF74D9AD0-->8056C559 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PoCallDriver, Type: IAT modification 0xF74D9B34-->805072A3 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PoRequestPowerIrp, Type: IAT modification 0xF74D9B60-->80507355 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PoSetPowerState, Type: IAT modification 0xF74D9B64-->80507E25 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PoStartNextPowerIrp, Type: IAT modification 0xF74D9B38-->80507169 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PsCreateSystemThread, Type: IAT modification 0xF74D9B90-->805762A6 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PsTerminateSystemThread, Type: IAT modification 0xF74D9B3C-->80583248 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlAddAccessAllowedAce, Type: IAT modification 0xF74D9C38-->805852BE [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCompareMemory, Type: IAT modification 0xF74D9AC8-->804E5080 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCompareUnicodeString, Type: IAT modification 0xF74D9AD8-->80574887 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCopyUnicodeString, Type: IAT modification 0xF74D9BD0-->804F2DB1 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCreateAcl, Type: IAT modification 0xF74D9C3C-->8057545D [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCreateRegistryKey, Type: IAT modification 0xF74D9B18-->805B66DD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCreateSecurityDescriptor, Type: IAT modification 0xF74D9C34-->8056FC49 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlDeleteRegistryValue, Type: IAT modification 0xF74D9B14-->805C2D41 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlEqualUnicodeString, Type: IAT modification 0xF74D9B94-->8056C684 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlInitUnicodeString, Type: IAT modification 0xF74D9AE0-->804DA2A5 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlLengthSid, Type: IAT modification 0xF74D9C40-->805DF5CA [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlQueryRegistryValues, Type: IAT modification 0xF74D9AC4-->8059B907 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlSetDaclSecurityDescriptor, Type: IAT modification 0xF74D9C30-->80585052 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlStringFromGUID, Type: IAT modification 0xF74D9B78-->8059CA05 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlVolumeDeviceToDosName, Type: IAT modification 0xF74D9BA4-->80534DE2 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlWriteRegistryValue, Type: IAT modification 0xF74D9AC0-->805B61D7 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeAccessCheck, Type: IAT modification 0xF74D9B04-->8056C2C7 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeCaptureSubjectContext, Type: IAT modification 0xF74D9B10-->80573991 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeExports, Type: IAT modification 0xF74D9C44-->8069AD50 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeLockSubjectContext, Type: IAT modification 0xF74D9B0C-->8056C39C [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeReleaseSubjectContext, Type: IAT modification 0xF74D9AFC-->8056CA9C [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeUnlockSubjectContext, Type: IAT modification 0xF74D9B00-->8056C3D1 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->strncmp, Type: IAT modification 0xF74D9C58-->804DB478 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->swprintf, Type: IAT modification 0xF74D9AE4-->804FCA51 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->wcslen, Type: IAT modification 0xF74D9C20-->804EA4A9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwClose, Type: IAT modification 0xF74D9B80-->804E3496 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwFsControlFile, Type: IAT modification 0xF74D9B84-->804E3932 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwOpenFile, Type: IAT modification 0xF74D9B88-->804E3BB2 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwOpenKey, Type: IAT modification 0xF74D9C28-->804E3BEE [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwQueryValueKey, Type: IAT modification 0xF74D9C24-->804E4076 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwSetSecurityObject, Type: IAT modification 0xF74D9C2C-->804E4526 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_alldiv, Type: IAT modification 0xF74D9BC4-->804DA42D [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_alldvrm, Type: IAT modification 0xF74D9C0C-->804DA4D7 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_allmul, Type: IAT modification 0xF74D9AB8-->804DA5B6 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_allrem, Type: IAT modification 0xF74D9C08-->804DA627 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_allshl, Type: IAT modification 0xF74D9C10-->804DA6DB [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_allshr, Type: IAT modification 0xF74D9AB4-->804DA6FA [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_except_handler3, Type: IAT modification 0xF74D9C48-->804E2EF8 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_purecall, Type: IAT modification 0xF74D9AD4-->8054AF1F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyCleanup, Type: IAT modification 0xA9E98790-->805E2B73 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyFullChangeDirectory, Type: IAT modification 0xA9E98794-->8061E173 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyFullReportChange, Type: IAT modification 0xA9E98788-->8061E1EB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyInitializeSync, Type: IAT modification 0xA9E989A0-->8059E2D8 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyUninitializeSync, Type: IAT modification 0xA9E989BC-->80583A91 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNotifyVolumeEvent, Type: IAT modification 0xA9E98770-->805AB55A [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlNumberOfRunsInLargeMcb, Type: IAT modification 0xA9E986F8-->804F91C1 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlOplockFsctrl, Type: IAT modification 0xA9E98920-->805DCF14 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlOplockIsFastIoPossible, Type: IAT modification 0xA9E98774-->8056FE85 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlPostPagingFileStackOverflow, Type: IAT modification 0xA9E9897C-->80531DEB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlPostStackOverflow, Type: IAT modification 0xA9E98978-->80531DC8 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlPrivateLock, Type: IAT modification 0xA9E98948-->80515DBA [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlProcessFileLock, Type: IAT modification 0xA9E98954-->80500AC5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlRemoveLargeMcbEntry, Type: IAT modification 0xA9E9891C-->804FD588 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlTeardownPerStreamContexts, Type: IAT modification 0xA9E9898C-->8057C788 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlTruncateLargeMcb, Type: IAT modification 0xA9E98710-->804F8FCB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlUninitializeFileLock, Type: IAT modification 0xA9E989A8-->804F99DB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlUninitializeLargeMcb, Type: IAT modification 0xA9E986FC-->804FC309 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->FsRtlUninitializeOplock, Type: IAT modification 0xA9E989AC-->804FC261 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->InterlockedPopEntrySList, Type: IAT modification 0xA9E987B4-->804E131F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->InterlockedPushEntrySList, Type: IAT modification 0xA9E98990-->804E1343 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoAcquireVpbSpinLock, Type: IAT modification 0xA9E9876C-->805058D0 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoAllocateMdl, Type: IAT modification 0xA9E987E8-->804EDDB1 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoAllocateWorkItem, Type: IAT modification 0xA9E988FC-->804FEBBD [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoBuildAsynchronousFsdRequest, Type: IAT modification 0xA9E989DC-->804FC59C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoBuildDeviceIoControlRequest, Type: IAT modification 0xA9E98838-->80518674 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoBuildPartialMdl, Type: IAT modification 0xA9E98A00-->804EE132 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoBuildSynchronousFsdRequest, Type: IAT modification 0xA9E98930-->80518DB9 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoCheckEaBufferValidity, Type: IAT modification 0xA9E98894-->8059E280 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoCheckShareAccess, Type: IAT modification 0xA9E987C4-->8057B23E [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoCreateDevice, Type: IAT modification 0xA9E9890C-->805A170C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoCreateStreamFileObject, Type: IAT modification 0xA9E98718-->805D2CFC [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoDeleteDevice, Type: IAT modification 0xA9E98908-->80505760 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IofCallDriver, Type: IAT modification 0xA9E98808-->804E13B9 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IofCompleteRequest, Type: IAT modification 0xA9E98798-->804E17CF [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoFileObjectType, Type: IAT modification 0xA9E9892C-->80560D58 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoFreeIrp, Type: IAT modification 0xA9E98814-->804EAF62 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoFreeMdl, Type: IAT modification 0xA9E987E4-->804EDE66 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoFreeWorkItem, Type: IAT modification 0xA9E988C8-->804FEBA5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetCurrentProcess, Type: IAT modification 0xA9E987B8-->804E5E36 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetDeviceToVerify, Type: IAT modification 0xA9E988C4-->8050A371 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetFileObjectGenericMapping, Type: IAT modification 0xA9E98698-->80579683 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetRequestorProcess, Type: IAT modification 0xA9E98784-->804F4331 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetStackLimits, Type: IAT modification 0xA9E98964-->804DC214 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoGetTopLevelIrp, Type: IAT modification 0xA9E988A8-->804E84B2 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoIsOperationSynchronous, Type: IAT modification 0xA9E9880C-->804EAFCE [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoIsSystemThread, Type: IAT modification 0xA9E988B8-->80514E6B [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoMakeAssociatedIrp, Type: IAT modification 0xA9E98840-->80513B48 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoQueueWorkItem, Type: IAT modification 0xA9E987B0-->804E627F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoRaiseHardError, Type: IAT modification 0xA9E988BC-->8050A461 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoRaiseInformationalHardError, Type: IAT modification 0xA9E988B4-->805324C7 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoRegisterFileSystem, Type: IAT modification 0xA9E988E8-->805AF1B5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoReleaseVpbSpinLock, Type: IAT modification 0xA9E98768-->805058EC [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoRemoveShareAccess, Type: IAT modification 0xA9E9877C-->80579BF4 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoSetDeviceToVerify, Type: IAT modification 0xA9E988C0-->8050A388 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoSetHardErrorOrVerifyDevice, Type: IAT modification 0xA9E98724-->80508949 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoSetShareAccess, Type: IAT modification 0xA9E987C0-->80579C54 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoSetTopLevelIrp, Type: IAT modification 0xA9E987A0-->804E8495 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoUnregisterFileSystem, Type: IAT modification 0xA9E98988-->805B05C9 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoUpdateShareAccess, Type: IAT modification 0xA9E987D4-->8057BB20 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->IoVerifyVolume, Type: IAT modification 0xA9E989D8-->80620CB4 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeBugCheckEx, Type: IAT modification 0xA9E986C8-->8053769F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeCancelTimer, Type: IAT modification 0xA9E9875C-->804E61C5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeClearEvent, Type: IAT modification 0xA9E98810-->804E5AA4 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeDelayExecutionThread, Type: IAT modification 0xA9E9883C-->804E14F6 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeEnterCriticalRegion, Type: IAT modification 0xA9E987A4-->804D95F2 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeGetCurrentThread, Type: IAT modification 0xA9E98848-->804DB622 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeInitializeDpc, Type: IAT modification 0xA9E98998-->804E7DB8 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeInitializeEvent, Type: IAT modification 0xA9E98744-->804E7DE6 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeInitializeSpinLock, Type: IAT modification 0xA9E988F8-->804E2417 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeInitializeTimer, Type: IAT modification 0xA9E9899C-->804EC4FB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeLeaveCriticalRegion, Type: IAT modification 0xA9E9879C-->804D9604 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeNumberProcessors, Type: IAT modification 0xA9E98934-->8055BA60 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeQuerySystemTime, Type: IAT modification 0xA9E98760-->804D95AF [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeRemoveQueueDpc, Type: IAT modification 0xA9E98758-->80514F93 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeSetEvent, Type: IAT modification 0xA9E98804-->804E20A9 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeSetTimer, Type: IAT modification 0xA9E98754-->804E216F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeTickCount, Type: IAT modification 0xA9E989F4-->8055A000 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->KeWaitForSingleObject, Type: IAT modification 0xA9E9873C-->804DC400 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->memmove, Type: IAT modification 0xA9E98800-->804DADC5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmCanFileBeTruncated, Type: IAT modification 0xA9E987CC-->804F719D [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmFlushImageSection, Type: IAT modification 0xA9E987D8-->804F710E [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmMapLockedPagesSpecifyCache, Type: IAT modification 0xA9E98830-->804EDF4C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmProbeAndLockPages, Type: IAT modification 0xA9E9882C-->804F6BFF [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmQuerySystemSize, Type: IAT modification 0xA9E988F4-->8050896A [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmUnlockPages, Type: IAT modification 0xA9E9884C-->804F6EB5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->MmUnmapLockedPages, Type: IAT modification 0xA9E98828-->804EE0B8 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->NlsMbOemCodePageTag, Type: IAT modification 0xA9E9885C-->8069A720 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->NlsOemLeadByteInfo, Type: IAT modification 0xA9E988A0-->8056C4C0 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ObfDereferenceObject, Type: IAT modification 0xA9E98844-->804E1930 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ObfReferenceObject, Type: IAT modification 0xA9E988E4-->804DA06B [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ObReferenceObjectByHandle, Type: IAT modification 0xA9E98928-->8056C559 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ProbeForRead, Type: IAT modification 0xA9E9893C-->805838BB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ProbeForWrite, Type: IAT modification 0xA9E98938-->8056E89F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlAreBitsClear, Type: IAT modification 0xA9E98708-->804F8F41 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlClearBits, Type: IAT modification 0xA9E986D0-->804EA9A5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlCompareMemory, Type: IAT modification 0xA9E988E0-->804E5080 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlCompareString, Type: IAT modification 0xA9E9889C-->8063BFEB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlDelete, Type: IAT modification 0xA9E989C0-->804F2FC1 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlDowncaseUnicodeString, Type: IAT modification 0xA9E987F4-->8063B7C7 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlEqualString, Type: IAT modification 0xA9E989D4-->8050372A [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlFindClearBits, Type: IAT modification 0xA9E986DC-->804F044D [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlFindLongestRunClear, Type: IAT modification 0xA9E98704-->80543329 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlFreeOemString, Type: IAT modification 0xA9E98860-->805E5654 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlFreeUnicodeString, Type: IAT modification 0xA9E98994-->80582BB6 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlGenerate8dot3Name, Type: IAT modification 0xA9E98960-->80588A90 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlInitializeBitMap, Type: IAT modification 0xA9E986D4-->8057BF4E [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlInitUnicodeString, Type: IAT modification 0xA9E98910-->804DA2A5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlOemStringToCountedUnicodeString, Type: IAT modification 0xA9E98870-->8063BD83 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlOemToUnicodeN, Type: IAT modification 0xA9E98854-->805E36C0 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlSetBits, Type: IAT modification 0xA9E986CC-->804F03FD [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlSplay, Type: IAT modification 0xA9E989C4-->804F345D [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlTimeFieldsToTime, Type: IAT modification 0xA9E989C8-->80506F79 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlTimeToTimeFields, Type: IAT modification 0xA9E989CC-->8050A933 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlUnicodeStringToCountedOemString, Type: IAT modification 0xA9E9895C-->805899A0 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlUpcaseUnicodeString, Type: IAT modification 0xA9E987F0-->80570494 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlUpcaseUnicodeStringToCountedOemString, Type: IAT modification 0xA9E987F8-->8063BE4C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlUpperString, Type: IAT modification 0xA9E98898-->805C80F6 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->RtlxOemStringToUnicodeSize, Type: IAT modification 0xA9E98858-->8063B947 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeAccessCheck, Type: IAT modification 0xA9E98694-->8056C2C7 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeExports, Type: IAT modification 0xA9E989F8-->8069AD50 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeFilterToken, Type: IAT modification 0xA9E989FC-->8063FBBC [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeLockSubjectContext, Type: IAT modification 0xA9E986A0-->8056C39C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SePrivilegeCheck, Type: IAT modification 0xA9E986A4-->805738F5 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeReleaseSubjectContext, Type: IAT modification 0xA9E9869C-->8056CA9C [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeSinglePrivilegeCheck, Type: IAT modification 0xA9E987D0-->8057898F [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->SeUnlockSubjectContext, Type: IAT modification 0xA9E98690-->8056C3D1 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ZwClose, Type: IAT modification 0xA9E988D4-->804E3496 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ZwOpenKey, Type: IAT modification 0xA9E988DC-->804E3BEE [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->ZwQueryValueKey, Type: IAT modification 0xA9E988D8-->804E4076 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_abnormal_termination, Type: IAT modification 0xA9E986C4-->804E30C4 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_alldiv, Type: IAT modification 0xA9E98880-->804DA42D [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_allmul, Type: IAT modification 0xA9E9887C-->804DA5B6 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_allshl, Type: IAT modification 0xA9E986EC-->804DA6DB [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_allshr, Type: IAT modification 0xA9E986E8-->804DA6FA [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_except_handler3, Type: IAT modification 0xA9E98A04-->804E2EF8 [ntoskrnl.exe]
fastfat.sys-->ntoskrnl.exe-->_local_unwind2, Type: IAT modification 0xA9E989E0-->804E3054 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->DbgPrint, Type: IAT modification 0xF74D9ACC-->80501F09 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ExAllocatePoolWithTag, Type: IAT modification 0xF74D9A98-->80551005 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ExFreePoolWithTag, Type: IAT modification 0xF74D9C60-->805511E6 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ExInitializeNPagedLookasideList, Type: IAT modification 0xF74D9BE0-->80508A20 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ExQueueWorkItem, Type: IAT modification 0xF74D9B40-->804DA3FC [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ExUuidCreate, Type: IAT modification 0xF74D9AB0-->805E9C7C [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->FsRtlIsTotalDeviceFailure, Type: IAT modification 0xF74D9BF4-->80503910 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->HalExamineMBR, Type: IAT modification 0xF74D9A9C-->8050D44B [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->InterlockedPopEntrySList, Type: IAT modification 0xF74D9BD8-->804E131F [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->InterlockedPushEntrySList, Type: IAT modification 0xF74D9BDC-->804E1343 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAcquireCancelSpinLock, Type: IAT modification 0xF74D9B68-->804E81D7 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAllocateErrorLogEntry, Type: IAT modification 0xF74D9BA0-->8050BB6D [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAllocateIrp, Type: IAT modification 0xF74D9BF0-->804EAFBD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAllocateMdl, Type: IAT modification 0xF74D9BE8-->804EDDB1 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAllocateWorkItem, Type: IAT modification 0xF74D9B24-->804FEBBD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoAttachDeviceToDeviceStack, Type: IAT modification 0xF74D9B54-->80506BF6 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoBuildDeviceIoControlRequest, Type: IAT modification 0xF74D9AA0-->80518674 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoBuildPartialMdl, Type: IAT modification 0xF74D9C00-->804EE132 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoBuildSynchronousFsdRequest, Type: IAT modification 0xF74D9C4C-->80518DB9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoCreateDevice, Type: IAT modification 0xF74D9B5C-->805A170C [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoCreateSymbolicLink, Type: IAT modification 0xF74D9AE8-->805D2EFF [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoDeleteDevice, Type: IAT modification 0xF74D9B4C-->80505760 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoDeleteSymbolicLink, Type: IAT modification 0xF74D9AEC-->805D7E64 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoDetachDevice, Type: IAT modification 0xF74D9B50-->80507FC4 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IofCallDriver, Type: IAT modification 0xF74D9C50-->804E13B9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IofCompleteRequest, Type: IAT modification 0xF74D9AF8-->804E17CF [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoFreeIrp, Type: IAT modification 0xF74D9BF8-->804EAF62 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoFreeMdl, Type: IAT modification 0xF74D9BE4-->804EDE66 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoFreeWorkItem, Type: IAT modification 0xF74D9B1C-->804FEBA5 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoGetAttachedDeviceReference, Type: IAT modification 0xF74D9AA4-->8051527F [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoGetBootDiskInformation, Type: IAT modification 0xF74D9BAC-->805CC72D [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoGetDeviceObjectPointer, Type: IAT modification 0xF74D9ADC-->805E3B29 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoGetDeviceProperty, Type: IAT modification 0xF74D9BBC-->8059BFB5 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoGetFileObjectGenericMapping, Type: IAT modification 0xF74D9B08-->80579683 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoInvalidateDeviceRelations, Type: IAT modification 0xF74D9B8C-->80505DDD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoInvalidateDeviceState, Type: IAT modification 0xF74D9BB4-->8050BADF [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoQueueWorkItem, Type: IAT modification 0xF74D9B20-->804E627F [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoRaiseInformationalHardError, Type: IAT modification 0xF74D9C18-->805324C7 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoReadPartitionTableEx, Type: IAT modification 0xF74D9C5C-->805CC6CD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoRegisterBootDriverReinitialization, Type: IAT modification 0xF74D9BCC-->805C6911 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoRegisterDeviceInterface, Type: IAT modification 0xF74D9AF0-->805DCC64 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoRegisterDriverReinitialization, Type: IAT modification 0xF74D9BC8-->805C5D02 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoRegisterShutdownNotification, Type: IAT modification 0xF74D9B44-->805BB902 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoReleaseCancelSpinLock, Type: IAT modification 0xF74D9B2C-->804E81BD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoReportDetectedDevice, Type: IAT modification 0xF74D9BD4-->805CDE34 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoReportTargetDeviceChangeAsynchronous, Type: IAT modification 0xF74D9B6C-->805054D9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoReuseIrp, Type: IAT modification 0xF74D9BFC-->804ECE58 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoSetDeviceInterfaceState, Type: IAT modification 0xF74D9BB8-->805D7867 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoSetSystemPartition, Type: IAT modification 0xF74D9B7C-->8053294B [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoUnregisterShutdownNotification, Type: IAT modification 0xF74D9BC0-->80665347 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoWMIRegistrationControl, Type: IAT modification 0xF74D9AF4-->805A218B [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->IoWriteErrorLogEntry, Type: IAT modification 0xF74D9B9C-->8050BDCD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeBugCheckEx, Type: IAT modification 0xF74D9BA8-->8053769F [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeClearEvent, Type: IAT modification 0xF74D9B74-->804E5AA4 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeGetCurrentThread, Type: IAT modification 0xF74D9C1C-->804DB622 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeInitializeEvent, Type: IAT modification 0xF74D9B70-->804E7DE6 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeInitializeSemaphore, Type: IAT modification 0xF74D9B48-->804E88F1 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeInitializeSpinLock, Type: IAT modification 0xF74D9B58-->804E2417 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeQuerySystemTime, Type: IAT modification 0xF74D9AAC-->804D95AF [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeReleaseSemaphore, Type: IAT modification 0xF74D9B28-->804E90CE [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeSetEvent, Type: IAT modification 0xF74D9B30-->804E20A9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->KeWaitForSingleObject, Type: IAT modification 0xF74D9C54-->804DC400 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->memmove, Type: IAT modification 0xF74D9ABC-->804DADC5 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->MmBuildMdlForNonPagedPool, Type: IAT modification 0xF74D9BEC-->804EDEBC [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->MmLockPagableDataSection, Type: IAT modification 0xF74D9BB0-->805E7DA9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->MmMapLockedPages, Type: IAT modification 0xF74D9C14-->804F97B4 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->MmUnmapLockedPages, Type: IAT modification 0xF74D9C04-->804EE0B8 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ObfDereferenceObject, Type: IAT modification 0xF74D9AA8-->804E1930 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ObfReferenceObject, Type: IAT modification 0xF74D9B98-->804DA06B [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ObReferenceObjectByHandle, Type: IAT modification 0xF74D9AD0-->8056C559 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PoCallDriver, Type: IAT modification 0xF74D9B34-->805072A3 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PoRequestPowerIrp, Type: IAT modification 0xF74D9B60-->80507355 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PoSetPowerState, Type: IAT modification 0xF74D9B64-->80507E25 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PoStartNextPowerIrp, Type: IAT modification 0xF74D9B38-->80507169 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PsCreateSystemThread, Type: IAT modification 0xF74D9B90-->805762A6 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->PsTerminateSystemThread, Type: IAT modification 0xF74D9B3C-->80583248 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlAddAccessAllowedAce, Type: IAT modification 0xF74D9C38-->805852BE [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCompareMemory, Type: IAT modification 0xF74D9AC8-->804E5080 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCompareUnicodeString, Type: IAT modification 0xF74D9AD8-->80574887 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCopyUnicodeString, Type: IAT modification 0xF74D9BD0-->804F2DB1 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCreateAcl, Type: IAT modification 0xF74D9C3C-->8057545D [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCreateRegistryKey, Type: IAT modification 0xF74D9B18-->805B66DD [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlCreateSecurityDescriptor, Type: IAT modification 0xF74D9C34-->8056FC49 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlDeleteRegistryValue, Type: IAT modification 0xF74D9B14-->805C2D41 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlEqualUnicodeString, Type: IAT modification 0xF74D9B94-->8056C684 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlInitUnicodeString, Type: IAT modification 0xF74D9AE0-->804DA2A5 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlLengthSid, Type: IAT modification 0xF74D9C40-->805DF5CA [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlQueryRegistryValues, Type: IAT modification 0xF74D9AC4-->8059B907 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlSetDaclSecurityDescriptor, Type: IAT modification 0xF74D9C30-->80585052 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlStringFromGUID, Type: IAT modification 0xF74D9B78-->8059CA05 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlVolumeDeviceToDosName, Type: IAT modification 0xF74D9BA4-->80534DE2 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->RtlWriteRegistryValue, Type: IAT modification 0xF74D9AC0-->805B61D7 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeAccessCheck, Type: IAT modification 0xF74D9B04-->8056C2C7 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeCaptureSubjectContext, Type: IAT modification 0xF74D9B10-->80573991 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeExports, Type: IAT modification 0xF74D9C44-->8069AD50 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeLockSubjectContext, Type: IAT modification 0xF74D9B0C-->8056C39C [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeReleaseSubjectContext, Type: IAT modification 0xF74D9AFC-->8056CA9C [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->SeUnlockSubjectContext, Type: IAT modification 0xF74D9B00-->8056C3D1 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->strncmp, Type: IAT modification 0xF74D9C58-->804DB478 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->swprintf, Type: IAT modification 0xF74D9AE4-->804FCA51 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->wcslen, Type: IAT modification 0xF74D9C20-->804EA4A9 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwClose, Type: IAT modification 0xF74D9B80-->804E3496 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwFsControlFile, Type: IAT modification 0xF74D9B84-->804E3932 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwOpenFile, Type: IAT modification 0xF74D9B88-->804E3BB2 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwOpenKey, Type: IAT modification 0xF74D9C28-->804E3BEE [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwQueryValueKey, Type: IAT modification 0xF74D9C24-->804E4076 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->ZwSetSecurityObject, Type: IAT modification 0xF74D9C2C-->804E4526 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_alldiv, Type: IAT modification 0xF74D9BC4-->804DA42D [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_alldvrm, Type: IAT modification 0xF74D9C0C-->804DA4D7 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_allmul, Type: IAT modification 0xF74D9AB8-->804DA5B6 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_allrem, Type: IAT modification 0xF74D9C08-->804DA627 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_allshl, Type: IAT modification 0xF74D9C10-->804DA6DB [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_allshr, Type: IAT modification 0xF74D9AB4-->804DA6FA [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_except_handler3, Type: IAT modification 0xF74D9C48-->804E2EF8 [ntoskrnl.exe]
ftdisk.sys-->ntoskrnl.exe-->_purecall, Type: IAT modification 0xF74D9AD4-->8054AF1F [ntoskrnl.exe]