==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  07 01 00 00 28 00 00 00  00 00 00 00 00 00 00 00  18 00 00 00 00 00 00 00  08 00 00 00 00 00 00 00  •☺..(...........↑.......◘.......
00000020  FF 74 24 20 FF 74 24 20  FF 74 24 20 FF 74 24 20  FF 74 24 20 FF 74 24 20  FF 74 24 20 FF 74 24 20   t$  t$  t$  t$  t$  t$  t$  t$ 
00000040  FF 15 00 00 00 00 C3 90  22 00 00 00 04 00 00 04  04 00 00 00 05 00 00 00  00 00 00 00 1B 00 00 00   §....├É"...♦..♦♦...♣.......←...
00000060  24 00 AF 01 22 00 00 00  46 00 00 00 5F 47 65 74  56 6F 6C 75 6D 65 49 6E  66 6F 72 6D 61 74 69 6F  $.»☺"...F..._GetVolumeInformatio
00000080  6E 57 00 5F 5F 49 6D 70  4E 54 5F 47 65 74 56 6F  6C 75 6D 65 49 6E 66 6F  72 6D 61 74 69 6F 6E 57  nW.__ImpNT_GetVolumeInformationW
000000A0  3D 4B 45 52 4E 45 4C 33  32 2E 64 6C 6C 00                                                          =KERNEL32.dll.