home *** CD-ROM | disk | FTP | other *** search
/ PCGUIA 2010 Software/Programs / PCGuia_programas.iso / Software / Utils / Belarc_Advisor / advisor.exe / %MAINDIR% / System / BANTExt.sys < prev    next >
Microsoft Windows Dynamic Link Library  |  2009-11-16  |  3.8 KB
open in: MacOS 8.1     |     Win98     |     DOS

browse contents    |     view JSON data     |     view as text


This file was processed as: Microsoft Windows Dynamic Link Library (executable/dll).

ConfidenceProgramDetectionMatch TypeSupport
100% dexvert Microsoft Windows Dynamic Link Library (executable/dll) magic Supported
100% dexvert MS-DOS/Windows or OS/2 Executable (executable/exe) magic Supported
1% dexvert MS-DOS Driver (executable/msDOSDriver) ext Unsupported
1% dexvert OS/2 Device Driver (other/os2DeviceDriver) ext Unsupported
1% dexvert SYSLINUX loader (other/syslinuxLoader) ext Unsupported
1% dexvert FreeDOS KEYBoard layout collection (other/freeDOSKEYBoardLayoutCollection) ext Unsupported
1% dexvert MS-DOS KEYBoard Layout file (other/msDOSKEYBoardLayoutFile) ext Unsupported
100% file PE32 executable for MS Windows 4.00 (native), Intel i386, 3 sections default
99% file data default
34% TrID Win32 Dynamic Link Library (generic) default
23% TrID Win32 Executable (generic) default
10% TrID Windows Icons Library (generic) default (weak)
10% TrID OS/2 Executable (generic) default
10% TrID Generic Win/DOS Executable default
100% gt2 Ist eine ausf�hrbare Win32 Datei default
100% binwalkID Microsoft executable, portable (PE) default
100% xdgMime application/vnd.microsoft.portable-executable default (weak)


hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 b0 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| c4 61 6e 53 80 00 00 00 | 80 00 00 00 80 00 00 00 |.anS....|........|
|00000090| 80 00 00 00 92 00 00 00 | 52 69 63 68 80 00 00 00 |........|Rich....|
|000000a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000b0| 50 45 00 00 4c 01 03 00 | 51 cf 6c 35 80 08 00 00 |PE..L...|Q.l5....|
|000000c0| 1d 00 00 00 e0 00 06 01 | 0b 01 05 0a e0 05 00 00 |........|........|
|000000d0| 60 00 00 00 00 00 00 00 | fc 02 00 00 20 02 00 00 |`.......|.... ...|
|000000e0| 60 06 00 00 00 00 01 00 | 20 00 00 00 20 00 00 00 |`.......| ... ...|
|000000f0| 04 00 00 00 04 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000100| 60 08 00 00 20 02 00 00 | 51 bc 00 00 01 00 00 00 |`... ...|Q.......|
|00000110| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|00000120| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 60 06 00 00 3c 00 00 00 | 00 00 00 00 00 00 00 00 |`...<...|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 08 00 00 34 00 00 00 | 60 02 00 00 54 00 00 00 |....4...|`...T...|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 20 02 00 00 38 00 00 00 |........| ...8...|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|000001b0| 34 04 00 00 20 02 00 00 | 40 04 00 00 20 02 00 00 |4... ...|@... ...|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 68 |........|.... ..h|
|000001d0| 49 4e 49 54 00 00 00 00 | 8a 01 00 00 60 06 00 00 |INIT....|....`...|
|000001e0| a0 01 00 00 60 06 00 00 | 00 00 00 00 00 00 00 00 |....`...|........|
|000001f0| 00 00 00 00 20 00 00 e2 | 2e 72 65 6c 6f 63 00 00 |.... ...|.reloc..|
|00000200| 56 00 00 00 00 08 00 00 | 60 00 00 00 00 08 00 00 |V.......|`.......|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000220| c8 07 00 00 00 00 00 00 | d4 06 00 00 10 07 00 00 |........|........|
|00000230| 28 07 00 00 3e 07 00 00 | e6 06 00 00 fe 06 00 00 |(...>...|........|
|00000240| 78 07 00 00 8e 07 00 00 | aa 07 00 00 56 07 00 00 |x.......|....V...|
|00000250| 6e 07 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |n.......|........|
|00000260| 00 00 00 00 51 cf 6c 35 | 00 00 00 00 01 00 00 00 |....Q.l5|........|
|00000270| 45 05 00 00 00 00 00 00 | 60 08 00 00 00 00 00 00 |E.......|`.......|
|00000280| 51 cf 6c 35 00 00 00 00 | 04 00 00 00 10 01 00 00 |Q.l5....|........|
|00000290| 00 00 00 00 a8 0d 00 00 | 00 00 00 00 51 cf 6c 35 |........|....Q.l5|
|000002a0| 00 00 00 00 03 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|000002b0| b8 0e 00 00 5c 00 44 00 | 65 00 76 00 69 00 63 00 |....\.D.|e.v.i.c.|
|000002c0| 65 00 5c 00 42 00 41 00 | 4e 00 54 00 45 00 78 00 |e.\.B.A.|N.T.E.x.|
|000002d0| 74 00 00 00 5c 00 44 00 | 6f 00 73 00 44 00 65 00 |t...\.D.|o.s.D.e.|
|000002e0| 76 00 69 00 63 00 65 00 | 73 00 5c 00 42 00 41 00 |v.i.c.e.|s.\.B.A.|
|000002f0| 4e 00 54 00 45 00 58 00 | 54 00 00 00 55 8b ec 83 |N.T.E.X.|T...U...|
|00000300| ec 5c 53 56 57 6a 08 59 | be b4 02 01 00 8d 7d cc |.\SVWj.Y|......}.|
|00000310| 6a 0a f3 a5 59 8d 45 cc | be d4 02 01 00 8d 7d a4 |j...Y.E.|......}.|
|00000320| 50 8d 45 f4 f3 a5 8b 3d | 2c 02 01 00 33 db 50 89 |P.E....=|,...3.P.|
|00000330| 5d fc ff d7 8b 75 08 8d | 45 fc 50 6a 01 53 8d 45 |]....u..|E.Pj.S.E|
|00000340| f4 68 00 80 00 00 50 53 | 56 ff 15 3c 02 01 00 8b |.h....PS|V..<....|
|00000350| d8 85 db 7c 3c b8 9a 03 | 01 00 c7 46 34 4e 04 01 |...|<...|...F4N..|
|00000360| 00 89 46 70 89 46 40 89 | 46 38 8d 45 a4 50 8d 45 |..Fp.F@.|F8.E.P.E|
|00000370| ec 50 ff d7 8d 45 f4 50 | 8d 45 ec 50 ff 15 38 02 |.P...E.P|.E.P..8.|
|00000380| 01 00 8b d8 85 db 7d 09 | ff 75 fc ff 15 28 02 01 |......}.|.u...(..|
|00000390| 00 5f 8b c3 5e 5b c9 c2 | 08 00 53 56 8b 74 24 10 |._..^[..|..SV.t$.|
|000003a0| 57 8b 46 60 83 66 18 00 | 83 66 1c 00 8b 56 0c 8a |W.F`.f..|.f...V..|
|000003b0| 08 8b 78 08 8b 58 04 84 | c9 74 56 80 f9 0e 75 51 |..x..X..|.tV...uQ|
|000003c0| 8b 40 0c 3d 00 20 00 80 | 74 24 3d 04 20 00 80 75 |.@.=. ..|t$=. ..u|
|000003d0| 39 83 ff 04 72 0f ff 32 | 6a ff ff 15 34 02 01 00 |9...r..2|j...4...|
|000003e0| 89 46 18 eb 2c c7 46 18 | 9a 00 00 c0 eb 23 53 57 |.F..,.F.|.....#SW|
|000003f0| 52 ff 74 24 1c e8 c2 00 | 00 00 85 c0 89 46 18 7c |R.t$....|.....F.||
|00000400| 09 c7 46 1c 04 00 00 00 | eb 07 c7 46 18 0d 00 00 |..F.....|...F....|
|00000410| c0 8b 7e 18 32 d2 8b ce | ff 15 30 02 01 00 8b c7 |..~.2...|..0.....|
|00000420| 5f 5e 5b c2 08 00 5c 00 | 44 00 6f 00 73 00 44 00 |_^[...\.|D.o.s.D.|
|00000430| 65 00 76 00 69 00 63 00 | 65 00 73 00 5c 00 42 00 |e.v.i.c.|e.s.\.B.|
|00000440| 41 00 4e 00 54 00 45 00 | 58 00 54 00 00 00 55 8b |A.N.T.E.|X.T...U.|
|00000450| ec 83 ec 30 56 57 6a 0a | 8d 45 d0 59 be 26 04 01 |...0VWj.|.E.Y.&..|
|00000460| 00 50 8d 7d d0 8d 45 f8 | f3 a5 50 ff 15 2c 02 01 |.P.}..E.|..P..,..|
|00000470| 00 8d 45 f8 50 ff 15 4c | 02 01 00 8b 45 08 ff 70 |..E.P..L|....E..p|
|00000480| 04 ff 15 28 02 01 00 5f | 5e c9 c2 04 00 cc 5c 00 |...(..._|^.....\.|
|00000490| 44 00 65 00 76 00 69 00 | 63 00 65 00 5c 00 50 00 |D.e.v.i.|c.e.\.P.|
|000004a0| 68 00 79 00 73 00 69 00 | 63 00 61 00 6c 00 4d 00 |h.y.s.i.|c.a.l.M.|
|000004b0| 65 00 6d 00 6f 00 72 00 | 79 00 00 00 55 8b ec 83 |e.m.o.r.|y...U...|
|000004c0| ec 60 53 56 57 6a 18 5f | 33 db 39 7d 10 89 5d fc |.`SVWj._|3.9}..].|
|000004d0| 89 5d f4 0f 82 6a 01 00 | 00 83 7d 14 04 0f 82 60 |.]...j..|..}....`|
|000004e0| 01 00 00 8b 75 0c 68 8e | 04 01 00 8b 06 89 45 e8 |....u.h.|......E.|
|000004f0| 8b 46 04 89 45 ec 8b 46 | 08 89 45 c0 8b 46 0c 89 |.F..E..F|..E..F..|
|00000500| 45 c4 8b 46 10 89 45 f0 | 89 45 0c 8b 46 14 89 45 |E..F..E.|.E..F..E|
|00000510| f8 8d 45 c8 50 ff 15 2c | 02 01 00 8d 45 c8 89 7d |..E.P..,|....E..}|
|00000520| a0 89 45 a8 8d 45 a0 50 | bf 1f 00 0f 00 8d 45 fc |..E..E.P|......E.|
|00000530| 57 50 89 5d a4 c7 45 ac | 40 00 00 00 89 5d b0 89 |WP.]..E.|@....]..|
|00000540| 5d b4 ff 15 48 02 01 00 | 3b c3 89 45 10 0f 8c f7 |]...H...|;..E....|
|00000550| 00 00 00 8d 45 f4 53 50 | 53 53 57 ff 75 fc ff 15 |....E.SP|SSW.u...|
|00000560| 44 02 01 00 3b c3 89 45 | 10 0f 8c c9 00 00 00 2b |D...;..E|.......+|
|00000570| d2 8b 45 f8 89 55 bc 89 | 45 b8 8b 45 c0 8b 55 c4 |..E..U..|E..E..U.|
|00000580| 03 45 b8 13 55 bc 89 45 | e0 8d 45 d8 50 8d 45 0c |.E..U..E|..E.P.E.|
|00000590| 50 8b 3d 20 02 01 00 ff | 75 c4 89 55 e4 ff 75 c0 |P.= ....|u..U..u.|
|000005a0| ff 75 ec ff 75 e8 ff d7 | 88 45 13 8d 45 e0 50 8d |.u..u...|.E..E.P.|
|000005b0| 45 f0 50 ff 75 e4 ff 75 | e0 ff 75 ec ff 75 e8 ff |E.P.u..u|..u..u..|
|000005c0| d7 38 5d 13 74 6b 3a c3 | 74 67 8b 45 e0 8b 55 e4 |.8].tk:.|tg.E..U.|
|000005d0| 2b 45 d8 1b 55 dc 3b c3 | 89 55 bc 74 54 39 5d 0c |+E..U.;.|.U.tT9].|
|000005e0| 89 45 f8 74 05 8b 45 d8 | eb 40 8b 4d d8 6a 02 89 |.E.t..E.|.@.M.j..|
|000005f0| 4d d0 8b 4d dc 89 4d d4 | 53 8d 4d f8 6a 01 51 8d |M..M..M.|S.M.j.Q.|
|00000600| 4d d0 51 50 8d 45 14 53 | 50 6a ff ff 75 fc 89 5d |M.QP.E.S|Pj..u..]|
|00000610| 14 ff 15 40 02 01 00 3b | c3 89 45 10 7c 1a 8b 45 |...@...;|..E.|..E|
|00000620| d8 2b 45 d0 01 45 14 8b | 45 14 89 06 89 5d 10 eb |.+E..E..|E....]..|
|00000630| 07 c7 45 10 01 00 00 c0 | ff 75 fc ff 15 50 02 01 |..E.....|.u...P..|
|00000640| 00 eb 07 c7 45 10 9a 00 | 00 c0 8b 45 10 5f 5e 5b |....E...|...E._^[|
|00000650| c9 c2 10 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000660| a4 06 00 00 00 00 00 00 | 00 00 00 00 ba 07 00 00 |........|........|
|00000670| 28 02 00 00 9c 06 00 00 | 00 00 00 00 00 00 00 00 |(.......|........|
|00000680| e2 07 00 00 20 02 00 00 | 00 00 00 00 00 00 00 00 |.... ...|........|
|00000690| 00 00 00 00 00 00 00 00 | 00 00 00 00 c8 07 00 00 |........|........|
|000006a0| 00 00 00 00 d4 06 00 00 | 10 07 00 00 28 07 00 00 |........|....(...|
|000006b0| 3e 07 00 00 e6 06 00 00 | fe 06 00 00 78 07 00 00 |>.......|....x...|
|000006c0| 8e 07 00 00 aa 07 00 00 | 56 07 00 00 6e 07 00 00 |........|V...n...|
|000006d0| 00 00 00 00 fb 00 49 6f | 44 65 6c 65 74 65 44 65 |......Io|DeleteDe|
|000006e0| 76 69 63 65 00 00 f7 00 | 49 6f 43 72 65 61 74 65 |vice....|IoCreate|
|000006f0| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 f3 00 |Symbolic|Link....|
|00000700| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|00000710| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00000720| 53 74 72 69 6e 67 00 00 | 45 01 49 6f 66 43 6f 6d |String..|E.IofCom|
|00000730| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 9f 03 |pleteReq|uest....|
|00000740| 5a 77 55 6e 6d 61 70 56 | 69 65 77 4f 66 53 65 63 |ZwUnmapV|iewOfSec|
|00000750| 74 69 6f 6e 00 00 fc 00 | 49 6f 44 65 6c 65 74 65 |tion....|IoDelete|
|00000760| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 5b 03 |Symbolic|Link..[.|
|00000770| 5a 77 43 6c 6f 73 65 00 | 74 03 5a 77 4d 61 70 56 |ZwClose.|t.ZwMapV|
|00000780| 69 65 77 4f 66 53 65 63 | 74 69 6f 6e 00 00 3f 02 |iewOfSec|tion..?.|
|00000790| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|000007a0| 74 42 79 48 61 6e 64 6c | 65 00 7c 03 5a 77 4f 70 |tByHandl|e.|.ZwOp|
|000007b0| 65 6e 53 65 63 74 69 6f | 6e 00 6e 74 6f 73 6b 72 |enSectio|n.ntoskr|
|000007c0| 6e 6c 2e 65 78 65 00 00 | 2f 00 48 61 6c 54 72 61 |nl.exe..|/.HalTra|
|000007d0| 6e 73 6c 61 74 65 42 75 | 73 41 64 64 72 65 73 73 |nslateBu|sAddress|
|000007e0| 00 00 48 41 4c 2e 64 6c | 6c 00 00 00 00 00 00 00 |..HAL.dl|l.......|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| 00 00 00 00 34 00 00 00 | 09 33 19 33 28 33 4b 33 |....4...|.3.3(3K3|
|00000810| 56 33 5d 33 7e 33 8d 33 | dc 33 1a 34 5d 34 6d 34 |V3]3~3.3|.3.4]4m4|
|00000820| 77 34 83 34 e7 34 17 35 | 44 35 60 35 93 35 13 36 |w4.4.4.5|D5`5.5.6|
|00000830| 3d 36 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |=6......|........|
|00000840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000860| 1d 00 00 00 20 00 00 00 | 00 00 00 00 20 00 00 00 |.... ...|.... ...|
|00000870| 20 02 00 00 00 08 00 00 | 60 06 00 00 80 02 00 00 | .......|`.......|
|00000880| 24 53 47 33 30 39 37 00 | d4 02 00 00 01 00 00 00 |$SG3097.|........|
|00000890| 03 00 24 53 47 33 30 39 | 34 00 b4 02 00 00 01 00 |..$SG309|4.......|
|000008a0| 00 00 03 00 24 53 47 33 | 31 33 32 00 26 04 00 00 |....$SG3|132.&...|
|000008b0| 01 00 00 00 03 00 24 53 | 47 33 31 36 31 00 8e 04 |......$S|G3161...|
|000008c0| 00 00 01 00 00 00 03 00 | 2e 69 64 61 74 61 24 36 |........|.idata$6|
|000008d0| ba 07 00 00 02 00 00 00 | 03 00 2e 69 64 61 74 61 |........|...idata|
|000008e0| 24 36 e2 07 00 00 02 00 | 00 00 03 00 68 65 61 64 |$6......|....head|
|000008f0| 65 72 00 00 00 00 00 00 | fe ff 00 00 02 00 00 00 |er......|........|
|00000900| 00 00 39 01 00 00 20 02 | 00 00 01 00 00 00 02 00 |..9... .|........|
|00000910| 00 00 00 00 06 03 00 00 | 24 02 00 00 01 00 00 00 |........|$.......|
|00000920| 02 00 00 00 00 00 46 00 | 00 00 28 02 00 00 01 00 |......F.|..(.....|
|00000930| 00 00 02 00 00 00 00 00 | 95 00 00 00 2c 02 00 00 |........|....,...|
|00000940| 01 00 00 00 02 00 00 00 | 00 00 b3 00 00 00 30 02 |........|......0.|
|00000950| 00 00 01 00 00 00 02 00 | 00 00 00 00 cf 00 00 00 |........|........|
|00000960| 34 02 00 00 01 00 00 00 | 02 00 00 00 00 00 5e 00 |4.......|......^.|
|00000970| 00 00 38 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..8.....|........|
|00000980| 7c 00 00 00 3c 02 00 00 | 01 00 00 00 02 00 00 00 ||...<...|........|
|00000990| 00 00 1c 01 00 00 40 02 | 00 00 01 00 00 00 02 00 |......@.|........|
|000009a0| 00 00 00 00 5a 01 00 00 | 44 02 00 00 01 00 00 00 |....Z...|D.......|
|000009b0| 02 00 00 00 00 00 7e 01 | 00 00 48 02 00 00 01 00 |......~.|..H.....|
|000009c0| 00 00 02 00 00 00 00 00 | ed 00 00 00 4c 02 00 00 |........|....L...|
|000009d0| 01 00 00 00 02 00 00 00 | 00 00 0b 01 00 00 50 02 |........|......P.|
|000009e0| 00 00 01 00 00 00 02 00 | 00 00 00 00 b9 02 00 00 |........|........|
|000009f0| 54 02 00 00 01 00 00 00 | 02 00 00 00 00 00 04 00 |T.......|........|
|00000a00| 00 00 fc 02 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000a10| 13 00 00 00 9a 03 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000a20| 00 00 23 00 00 00 4e 04 | 00 00 01 00 20 00 02 00 |..#...N.|.... ...|
|00000a30| 00 00 00 00 31 00 00 00 | bc 04 00 00 01 00 20 00 |....1...|...... .|
|00000a40| 02 00 00 00 00 00 a8 01 | 00 00 60 06 00 00 02 00 |........|..`.....|
|00000a50| 00 00 02 00 00 00 00 00 | ee 02 00 00 74 06 00 00 |........|....t...|
|00000a60| 02 00 00 00 02 00 00 00 | 00 00 a0 02 00 00 88 06 |........|........|
|00000a70| 00 00 02 00 00 00 02 00 | 65 6e 64 00 00 00 00 00 |........|end.....|
|00000a80| 60 08 00 00 fe ff 00 00 | 02 00 1b 03 00 00 5f 44 |`.......|......_D|
|00000a90| 72 69 76 65 72 45 6e 74 | 72 79 40 38 00 5f 42 41 |riverEnt|ry@8._BA|
|00000aa0| 4e 54 44 69 73 70 61 74 | 63 68 40 38 00 5f 42 41 |NTDispat|ch@8._BA|
|00000ab0| 4e 54 55 6e 6c 6f 61 64 | 40 34 00 5f 42 41 4e 54 |NTUnload|@4._BANT|
|00000ac0| 4d 61 70 54 68 65 4d 65 | 6d 6f 72 79 40 31 36 00 |MapTheMe|mory@16.|
|00000ad0| 5f 5f 69 6d 70 5f 5f 49 | 6f 44 65 6c 65 74 65 44 |__imp__I|oDeleteD|
|00000ae0| 65 76 69 63 65 40 34 00 | 5f 5f 69 6d 70 5f 5f 49 |evice@4.|__imp__I|
|00000af0| 6f 43 72 65 61 74 65 53 | 79 6d 62 6f 6c 69 63 4c |oCreateS|ymbolicL|
|00000b00| 69 6e 6b 40 38 00 5f 5f | 69 6d 70 5f 5f 49 6f 43 |ink@8.__|imp__IoC|
|00000b10| 72 65 61 74 65 44 65 76 | 69 63 65 40 32 38 00 5f |reateDev|ice@28._|
|00000b20| 5f 69 6d 70 5f 5f 52 74 | 6c 49 6e 69 74 55 6e 69 |_imp__Rt|lInitUni|
|00000b30| 63 6f 64 65 53 74 72 69 | 6e 67 40 38 00 5f 5f 69 |codeStri|ng@8.__i|
|00000b40| 6d 70 5f 40 49 6f 66 43 | 6f 6d 70 6c 65 74 65 52 |mp_@IofC|ompleteR|
|00000b50| 65 71 75 65 73 74 40 38 | 00 5f 5f 69 6d 70 5f 5f |equest@8|.__imp__|
|00000b60| 5a 77 55 6e 6d 61 70 56 | 69 65 77 4f 66 53 65 63 |ZwUnmapV|iewOfSec|
|00000b70| 74 69 6f 6e 40 38 00 5f | 5f 69 6d 70 5f 5f 49 6f |tion@8._|_imp__Io|
|00000b80| 44 65 6c 65 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |DeleteSy|mbolicLi|
|00000b90| 6e 6b 40 34 00 5f 5f 69 | 6d 70 5f 5f 5a 77 43 6c |nk@4.__i|mp__ZwCl|
|00000ba0| 6f 73 65 40 34 00 5f 5f | 69 6d 70 5f 5f 5a 77 4d |ose@4.__|imp__ZwM|
|00000bb0| 61 70 56 69 65 77 4f 66 | 53 65 63 74 69 6f 6e 40 |apViewOf|Section@|
|00000bc0| 34 30 00 5f 5f 69 6d 70 | 5f 5f 48 61 6c 54 72 61 |40.__imp|__HalTra|
|00000bd0| 6e 73 6c 61 74 65 42 75 | 73 41 64 64 72 65 73 73 |nslateBu|sAddress|
|00000be0| 40 32 34 00 5f 5f 69 6d | 70 5f 5f 4f 62 52 65 66 |@24.__im|p__ObRef|
|00000bf0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 42 79 48 61 |erenceOb|jectByHa|
|00000c00| 6e 64 6c 65 40 32 34 00 | 5f 5f 69 6d 70 5f 5f 5a |ndle@24.|__imp__Z|
|00000c10| 77 4f 70 65 6e 53 65 63 | 74 69 6f 6e 40 31 32 00 |wOpenSec|tion@12.|
|00000c20| 5f 49 6f 44 65 6c 65 74 | 65 44 65 76 69 63 65 40 |_IoDelet|eDevice@|
|00000c30| 34 00 5f 5f 49 4d 50 4f | 52 54 5f 44 45 53 43 52 |4.__IMPO|RT_DESCR|
|00000c40| 49 50 54 4f 52 5f 6e 74 | 6f 73 6b 72 6e 6c 00 5f |IPTOR_nt|oskrnl._|
|00000c50| 49 6f 43 72 65 61 74 65 | 53 79 6d 62 6f 6c 69 63 |IoCreate|Symbolic|
|00000c60| 4c 69 6e 6b 40 38 00 5f | 49 6f 43 72 65 61 74 65 |Link@8._|IoCreate|
|00000c70| 44 65 76 69 63 65 40 32 | 38 00 5f 52 74 6c 49 6e |Device@2|8._RtlIn|
|00000c80| 69 74 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 40 |itUnicod|eString@|
|00000c90| 38 00 40 49 6f 66 43 6f | 6d 70 6c 65 74 65 52 65 |8.@IofCo|mpleteRe|
|00000ca0| 71 75 65 73 74 40 38 00 | 5f 5a 77 55 6e 6d 61 70 |quest@8.|_ZwUnmap|
|00000cb0| 56 69 65 77 4f 66 53 65 | 63 74 69 6f 6e 40 38 00 |ViewOfSe|ction@8.|
|00000cc0| 5f 49 6f 44 65 6c 65 74 | 65 53 79 6d 62 6f 6c 69 |_IoDelet|eSymboli|
|00000cd0| 63 4c 69 6e 6b 40 34 00 | 5f 5a 77 43 6c 6f 73 65 |cLink@4.|_ZwClose|
|00000ce0| 40 34 00 5f 5a 77 4d 61 | 70 56 69 65 77 4f 66 53 |@4._ZwMa|pViewOfS|
|00000cf0| 65 63 74 69 6f 6e 40 34 | 30 00 5f 4f 62 52 65 66 |ection@4|0._ObRef|
|00000d00| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 42 79 48 61 |erenceOb|jectByHa|
|00000d10| 6e 64 6c 65 40 32 34 00 | 5f 5a 77 4f 70 65 6e 53 |ndle@24.|_ZwOpenS|
|00000d20| 65 63 74 69 6f 6e 40 31 | 32 00 5f 5f 4e 55 4c 4c |ection@1|2.__NULL|
|00000d30| 5f 49 4d 50 4f 52 54 5f | 44 45 53 43 52 49 50 54 |_IMPORT_|DESCRIPT|
|00000d40| 4f 52 00 7f 6e 74 6f 73 | 6b 72 6e 6c 5f 4e 55 4c |OR..ntos|krnl_NUL|
|00000d50| 4c 5f 54 48 55 4e 4b 5f | 44 41 54 41 00 5f 48 61 |L_THUNK_|DATA._Ha|
|00000d60| 6c 54 72 61 6e 73 6c 61 | 74 65 42 75 73 41 64 64 |lTransla|teBusAdd|
|00000d70| 72 65 73 73 40 32 34 00 | 5f 5f 49 4d 50 4f 52 54 |ress@24.|__IMPORT|
|00000d80| 5f 44 45 53 43 52 49 50 | 54 4f 52 5f 48 41 4c 00 |_DESCRIP|TOR_HAL.|
|00000d90| 7f 48 41 4c 5f 4e 55 4c | 4c 5f 54 48 55 4e 4b 5f |.HAL_NUL|L_THUNK_|
|00000da0| 44 41 54 41 00 00 00 00 | 01 00 00 00 10 01 00 00 |DATA....|........|
|00000db0| 00 00 00 00 6b 3a 5c 74 | 6f 6f 6c 73 5c 6d 69 63 |....k:\t|ools\mic|
|00000dc0| 72 6f 73 6f 66 74 5c 6d | 73 64 64 6b 2d 6a 61 6e |rosoft\m|sddk-jan|
|00000dd0| 39 37 5c 6c 69 62 5c 69 | 33 38 36 5c 66 72 65 65 |97\lib\i|386\free|
|00000de0| 5c 42 41 4e 54 45 78 74 | 2e 73 79 73 00 00 00 00 |\BANTExt|.sys....|
|00000df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ea0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000eb0| 00 00 00 00 00 00 00 00 | fc 02 00 00 9e 00 00 00 |........|........|
|00000ec0| 18 00 00 00 02 00 09 d3 | 9a 03 00 00 8c 00 00 00 |........|........|
|00000ed0| 00 00 00 00 02 00 00 03 | 4e 04 00 00 3f 00 00 00 |........|N...?...|
|00000ee0| 0d 00 00 00 01 00 08 d2 | bc 04 00 00 98 01 00 00 |........|........|
|00000ef0| 19 00 00 00 04 00 09 d3 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+