Generated by JEB on 2019/08/01
PE: C:\Windows\System32\drivers\fs_rec.sys Base=0x1C0000000 SHA-256=9535E81BD9F0D626E497310B98AD1BE501DFFFFEDB1E568BB4D822841343BA90
PDB: fs_rec.pdb GUID={21425B3B-F9A7-13A3-4DFA78BDF0A5C624} Age=1
110 located named symbols:
0x1C00098D0: FsRecCreateAndRegisterDO
0x1C0007B40: FsRecCreate
0x1C0006AE0: IsFatVolume
0x1C0005010: "__cdecl _imp_ZwLoadDriver" __imp_ZwLoadDriver
0x1C0002380: "\Fat" ??_C@_19HHFKNBBB@?$AA?2?$AAF?$AAa?$AAt?$AA?$AA@
0x1C00030B8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0002684: "BEA01" ??_C@_05FNCAPPHI@BEA01?$AA@
0x1C0005018: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C00011F0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C00026A4: "CDW01" ??_C@_05NOGOANCO@CDW01?$AA@
0x1C0005048: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0005070: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C00026E0: "\Registry\Machine\System\Current" ??_C@_1HC@FBCDNKPG@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C00026AC: "CDW02" ??_C@_05PFEDFOON@CDW02?$AA@
0x1C00050A8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C00022E8: "\ReFS" ??_C@_1M@JIAIJPIK@?$AA?2?$AAR?$AAe?$AAF?$AAS?$AA?$AA@
0x1C0005080: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0006780: ReFSRecFsControl
0x1C0002558: "EXFAT " ??_C@_08CIIHHIJH@EXFAT?5?5?5?$AA@
0x1C0001200: memcpy
0x1C0007B90: FsRecDeviceIoControl
0x1C00022A0: "\ReFSv1" ??_C@_1BA@NHEKEJPE@?$AA?2?$AAR?$AAe?$AAF?$AAS?$AAv?$AA1?$AA?$AA@
0x1C0002208: "\FileSystem\UdfsDiskRecognizer" ??_C@_1DO@OBGAKNEL@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAU?$AAd?$AAf?$AAs?$AAD?$AAi?$AAs?$AAk?$AAR?$AAe?$AAc?$AAo?$AAg?$AAn?$AAi?$AAz?$AAe?$AAr?$AA?$AA@
0x1C0005050: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C00026BC: "NSR02" ??_C@_05KMMDPGJD@NSR02?$AA@
0x1C0001200: memmove
0x1C0007EF4: CdfsRecFsControl
0x1C00085BC: NtfsRecFsControl
0x1C0001074: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0005028: "__cdecl _imp_IoRegisterFileSystem" __imp_IoRegisterFileSystem
0x1C0005020: "__cdecl _imp_IoBuildDeviceIoControlRequest" __imp_IoBuildDeviceIoControlRequest
0x1C0005038: "__cdecl _imp_IoUnregisterFileSystem" __imp_IoUnregisterFileSystem
0x1C0002340: "\FileSystem\FatDiskRecognizer" ??_C@_1DM@LGKMHHKI@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAF?$AAa?$AAt?$AAD?$AAi?$AAs?$AAk?$AAR?$AAe?$AAc?$AAo?$AAg?$AAn?$AAi?$AAz?$AAe?$AAr?$AA?$AA@
0x1C00080F4: UdfsRecGetOpenSessionStart
0x1C0002248: "\UdfsDisk" ??_C@_1BE@HFCJFKIJ@?$AA?2?$AAU?$AAd?$AAf?$AAs?$AAD?$AAi?$AAs?$AAk?$AA?$AA@
0x1C0005040: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C00021B0: "\FatCdrom" ??_C@_1BE@GHFDHLLB@?$AA?2?$AAF?$AAa?$AAt?$AAC?$AAd?$AAr?$AAo?$AAm?$AA?$AA@
0x1C0008438: IsNtfsVolume
0x1C00024E0: "\Registry\Machine\System\Current" ??_C@_1HE@BMHLJOFP@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0007B10: FsRecCleanupClose
0x1C0005090: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C00026C4: "BOOT2" ??_C@_05JDLMKANF@BOOT2?$AA@
0x1C0001050: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C00022F8: "\FileSystem\ExFatRecognizer" ??_C@_1DI@OAOKFMDI@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAE?$AAx?$AAF?$AAa?$AAt?$AAR?$AAe?$AAc?$AAo?$AAg?$AAn?$AAi?$AAz?$AAe?$AAr?$AA?$AA@
0x1C0002158: "\UdfsCdRom" ??_C@_1BG@IHJIIDPO@?$AA?2?$AAU?$AAd?$AAf?$AAs?$AAC?$AAd?$AAR?$AAo?$AAm?$AA?$AA@
0x1C0005000: "__cdecl _imp_ZwCreateFile" __imp_ZwCreateFile
0x1C0006B70: IsUdfsVolume
0x1C0005068: "__cdecl _imp_MmPageEntireDriver" __imp_MmPageEntireDriver
0x1C0008864: IsReFSVolume
0x1C0002390: "\Ntfs" ??_C@_1M@LCBFGFFB@?$AA?2?$AAN?$AAt?$AAf?$AAs?$AA?$AA@
0x1C00021C8: "\FileSystem\FatCdRomRecognizer" ??_C@_1DO@FJNIINEG@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAF?$AAa?$AAt?$AAC?$AAd?$AAR?$AAo?$AAm?$AAR?$AAe?$AAc?$AAo?$AAg?$AAn?$AAi?$AAz?$AAe?$AAr?$AA?$AA@
0x1C00027E0: "\Registry\Machine\System\Current" ??_C@_1HC@HLDOCACN@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0009010: GsDriverEntry
0x1C00050A0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0007C88: FsRecGetDeviceSectorSize
0x1C00082C8: UdfsRecSendSptCdb
0x1C0005078: "__cdecl _imp_IoBuildSynchronousFsdRequest" __imp_IoBuildSynchronousFsdRequest
0x1C000269C: "CD001" ??_C@_05HIJPMCJE@CD001?$AA@
0x1C0002760: "\Registry\Machine\System\Current" ??_C@_1HG@HJOLPDNC@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0001010: "__cdecl _security_check_cookie" __security_check_cookie
0x1C00022B0: "\FileSystem\ReFSRecognizer" ??_C@_1DG@FIOLAIDM@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAR?$AAe?$AAF?$AAS?$AAR?$AAe?$AAc?$AAo?$AAg?$AAn?$AAi?$AAz?$AAe?$AAr?$AA?$AA@
0x1C00050B0: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0007ED0: FsRecUnload
0x1C000A000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0002610: "\Registry\Machine\System\Current" ??_C@_1HC@NIGGGAGN@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0002000: "__cdecl load_config_used" _load_config_used
0x1C0002148: "\Cdfs" ??_C@_1M@DLFANPMK@?$AA?2?$AAC?$AAd?$AAf?$AAs?$AA?$AA@
0x1C0002110: "\FileSystem\CdfsRecognizer" ??_C@_1DG@GENBGEOA@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAd?$AAf?$AAs?$AAR?$AAe?$AAc?$AAo?$AAg?$AAn?$AAi?$AAz?$AAe?$AAr?$AA?$AA@
0x1C00030C0: FsRecLoadSync
0x1C0005088: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0002330: "\ExFat" ??_C@_1O@KGODPJFK@?$AA?2?$AAE?$AAx?$AAF?$AAa?$AAt?$AA?$AA@
0x1C000805C: UdfsFindInParseTable
0x1C00026B4: "NSR01" ??_C@_05IHOOKFFA@NSR01?$AA@
0x1C0005060: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C000268C: "TEA01" ??_C@_05IIKPBOPO@TEA01?$AA@
0x1C00011D0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C00010F0: memcmp
0x1C0007D6C: FsRecReadBlock
0x1C00026CC: "NSR03" ??_C@_05LFNIMHNC@NSR03?$AA@
0x1C00023E0: "\Registry\Machine\System\Current" ??_C@_1HC@PCNGJBMC@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C00030B0: "__cdecl _security_cookie" __security_cookie
0x1C00080A0: UdfsReadTrackInfo
0x1C0002260: "\FileSystem\ReFSv1Recognizer" ??_C@_1DK@KJOCAMNF@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAR?$AAe?$AAF?$AAS?$AAv?$AA1?$AAR?$AAe?$AAc?$AAo?$AAg?$AAn?$AAi?$AAz?$AAe?$AAr?$AA?$AA@
0x1C0003000: VsdIdentParseTable
0x1C0009044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0006010: FsRecFsControl
0x1C0005030: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C00023A0: "\FileSystem\NtfsRecognizer" ??_C@_1DG@IKBLMEBJ@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAN?$AAt?$AAf?$AAs?$AAR?$AAe?$AAc?$AAo?$AAg?$AAn?$AAi?$AAz?$AAe?$AAr?$AA?$AA@
0x1C0002460: "\Registry\Machine\System\Current" ??_C@_1HI@JGDNHHI@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0002694: "CDROM" ??_C@_05DFJHOEIL@CDROM?$AA@
0x1C0001040: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0005098: ntoskrnl_NULL_THUNK_DATA
0x1C0005058: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0005008: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C0002170: "\FileSystem\UdfsCdRomRecognizer" ??_C@_1EA@EKINEBGP@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAU?$AAd?$AAf?$AAs?$AAC?$AAd?$AAR?$AAo?$AAm?$AAR?$AAe?$AAc?$AAo?$AAg?$AAn?$AAi?$AAz?$AAe?$AAr?$AA?$AA@
0x1C0009080: DriverEntry
0x1C0001540: memset
0x1C00050C4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]