/ PCNet 2004 January - Disc 1
/ PCNET_CD_2004_01_1.iso / shareware / bwz.exe / KE386IO.SYS ![]() | < prev |
MS-DOS/Windows or OS/2 Executable | 2000-11-28 | 3.3 KB |
Confidence | Program | Detection | Match Type | Support |
---|---|---|---|---|
100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
1% | dexvert | MS-DOS Driver (executable/msDOSDriver) | ext | Unsupported |
1% | dexvert | OS/2 Device Driver (other/os2DeviceDriver) | ext | Unsupported |
1% | dexvert | SYSLINUX loader (other/syslinuxLoader) | ext | Unsupported |
1% | dexvert | FreeDOS KEYBoard layout collection (other/freeDOSKEYBoardLayoutCollection) | ext | Unsupported |
1% | dexvert | MS-DOS KEYBoard Layout file (other/msDOSKEYBoardLayoutFile) | ext | Unsupported |
100% | file | PE32 executable for MS Windows 4.00 (native), Intel i386, 4 sections | default | |
99% | file | data | default | |
35% | TrID | Win32 Executable (generic) | default | |
16% | TrID | Windows Icons Library (generic) | default (weak) | |
16% | TrID | OS/2 Executable (generic) | default | |
15% | TrID | Generic Win/DOS Executable | default | |
15% | TrID | DOS Executable Generic | default (weak) | |
1% | dearkID | deark: exe (PE32) | default (weak) | |
100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
100% | binwalkID | Microsoft executable, portable (PE) | default | |
100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 c0 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 14 21 7a 53 50 40 14 00 | 50 40 14 00 50 40 14 00 |.!zSP@..|P@..P@..|
|00000090| 50 40 14 00 5e 40 14 00 | b8 5f 1e 00 51 40 14 00 |P@..^@..|._..Q@..|
|000000a0| 52 69 63 68 50 40 14 00 | 00 00 00 00 00 00 00 00 |RichP@..|........|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000c0| 50 45 00 00 4c 01 04 00 | bc ac 30 36 e0 06 00 00 |PE..L...|..06....|
|000000d0| 1d 00 00 00 e0 00 06 01 | 0b 01 05 0a e0 03 00 00 |........|........|
|000000e0| 80 00 00 00 00 00 00 00 | ee 03 00 00 60 02 00 00 |........|....`...|
|000000f0| c0 04 00 00 00 00 01 00 | 20 00 00 00 20 00 00 00 |........| ... ...|
|00000100| 04 00 00 00 04 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000110| c0 06 00 00 60 02 00 00 | 87 96 00 00 01 00 00 00 |....`...|........|
|00000120| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|00000130| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| e0 04 00 00 28 00 00 00 | 00 00 00 00 00 00 00 00 |....(...|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 60 06 00 00 30 00 00 00 | 90 02 00 00 54 00 00 00 |`...0...|....T...|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 60 02 00 00 30 00 00 00 |........|`...0...|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|000001c0| 44 02 00 00 60 02 00 00 | 60 02 00 00 60 02 00 00 |D...`...|`...`...|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 68 |........|.... ..h|
|000001e0| 2e 64 61 74 61 00 00 00 | 04 00 00 00 c0 04 00 00 |.data...|........|
|000001f0| 20 00 00 00 c0 04 00 00 | 00 00 00 00 00 00 00 00 | .......|........|
|00000200| 00 00 00 00 40 00 00 c8 | 49 4e 49 54 00 00 00 00 |....@...|INIT....|
|00000210| 62 01 00 00 e0 04 00 00 | 80 01 00 00 e0 04 00 00 |b.......|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 e2 |........|.... ...|
|00000230| 2e 72 65 6c 6f 63 00 00 | 4e 00 00 00 60 06 00 00 |.reloc..|N...`...|
|00000240| 60 00 00 00 60 06 00 00 | 00 00 00 00 00 00 00 00 |`...`...|........|
|00000250| 00 00 00 00 40 00 00 42 | 00 00 00 00 00 00 00 00 |....@..B|........|
|00000260| c2 05 00 00 4a 05 00 00 | 62 05 00 00 7a 05 00 00 |....J...|b...z...|
|00000270| 92 05 00 00 a8 05 00 00 | 38 05 00 00 d8 05 00 00 |........|8.......|
|00000280| ee 05 00 00 06 06 00 00 | 18 06 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 bc ac 30 36 | 00 00 00 00 01 00 00 00 |......06|........|
|000002a0| 2a 05 00 00 00 00 00 00 | c0 06 00 00 00 00 00 00 |*.......|........|
|000002b0| bc ac 30 36 00 00 00 00 | 04 00 00 00 10 01 00 00 |..06....|........|
|000002c0| 00 00 00 00 ec 0b 00 00 | 00 00 00 00 bc ac 30 36 |........|......06|
|000002d0| 00 00 00 00 03 00 00 00 | 50 00 00 00 00 00 00 00 |........|P.......|
|000002e0| fc 0c 00 00 5c 00 44 00 | 6f 00 73 00 44 00 65 00 |....\.D.|o.s.D.e.|
|000002f0| 76 00 69 00 63 00 65 00 | 73 00 5c 00 4b 00 65 00 |v.i.c.e.|s.\.K.e.|
|00000300| 33 00 38 00 36 00 49 00 | 4f 00 00 00 55 8b ec 83 |3.8.6.I.|O...U...|
|00000310| ec 30 a1 c0 04 01 00 56 | 57 6a 0a 59 be e4 02 01 |.0.....V|Wj.Y....|
|00000320| 00 8d 7d d0 f3 a5 5f 5e | 85 c0 74 0c 68 00 20 00 |..}..._^|..t.h. .|
|00000330| 00 50 ff 15 6c 02 01 00 | 8d 45 d0 50 8d 45 f8 50 |.P..l...|.E.P.E.P|
|00000340| ff 15 68 02 01 00 8d 45 | f8 50 ff 15 64 02 01 00 |..h....E|.P..d...|
|00000350| 8b 45 08 ff 70 04 ff 15 | 78 02 01 00 c9 c2 04 00 |.E..p...|x.......|
|00000360| ff 74 24 04 ff 15 60 02 | 01 00 50 e8 2e 01 00 00 |.t$...`.|..P.....|
|00000370| ff 35 c0 04 01 00 6a 01 | e8 1b 01 00 00 c2 04 00 |.5....j.|........|
|00000380| 6a 01 e8 d9 ff ff ff c3 | e8 f3 ff ff ff 8b 4c 24 |j.......|......L$|
|00000390| 08 32 d2 83 61 1c 00 83 | 61 18 00 ff 15 7c 02 01 |.2..a...|a....|..|
|000003a0| 00 33 c0 c2 08 00 5c 00 | 44 00 65 00 76 00 69 00 |.3....\.|D.e.v.i.|
|000003b0| 63 00 65 00 5c 00 4b 00 | 65 00 33 00 38 00 36 00 |c.e.\.K.|e.3.8.6.|
|000003c0| 49 00 4f 00 00 00 5c 00 | 44 00 6f 00 73 00 44 00 |I.O...\.|D.o.s.D.|
|000003d0| 65 00 76 00 69 00 63 00 | 65 00 73 00 5c 00 4b 00 |e.v.i.c.|e.s.\.K.|
|000003e0| 65 00 33 00 38 00 36 00 | 49 00 4f 00 00 00 55 8b |e.3.8.6.|I.O...U.|
|000003f0| ec 83 ec 5c 56 57 6a 08 | be a6 03 01 00 59 8d 7d |...\VWj.|.....Y.}|
|00000400| cc f3 a5 6a 0a be c6 03 | 01 00 59 8d 7d a4 f3 a5 |...j....|..Y.}...|
|00000410| 68 00 20 00 00 ff 15 88 | 02 01 00 8b f8 85 ff 89 |h. .....|........|
|00000420| 3d c0 04 01 00 75 07 b8 | 9a 00 00 c0 eb 63 b9 00 |=....u..|.....c..|
|00000430| 08 00 00 33 c0 8b 35 68 | 02 01 00 f3 ab 8d 45 cc |...3..5h|......E.|
|00000440| 50 8d 45 f4 50 ff d6 8d | 45 a4 50 8d 45 ec 50 ff |P.E.P...|E.P.E.P.|
|00000450| d6 8b 75 08 8d 45 fc 50 | 6a 00 6a 00 8d 45 f4 6a |..u..E.P|j.j..E.j|
|00000460| 22 50 6a 00 56 ff 15 84 | 02 01 00 85 c0 7c 22 8d |"Pj.V...|.....|".|
|00000470| 45 f4 50 8d 45 ec 50 ff | 15 80 02 01 00 85 c0 7c |E.P.E.P.|.......||
|00000480| 10 c7 46 38 88 03 01 00 | c7 46 34 0c 03 01 00 33 |..F8....|.F4....3|
|00000490| c0 5f 5e c9 c2 08 00 cc | ff 25 70 02 01 00 ff 25 |._^.....|.%p....%|
|000004a0| 74 02 01 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |t.......|........|
|000004b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004e0| 08 05 00 00 00 00 00 00 | 00 00 00 00 34 06 00 00 |........|....4...|
|000004f0| 60 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |`.......|........|
|00000500| 00 00 00 00 00 00 00 00 | c2 05 00 00 4a 05 00 00 |........|....J...|
|00000510| 62 05 00 00 7a 05 00 00 | 92 05 00 00 a8 05 00 00 |b...z...|........|
|00000520| 38 05 00 00 d8 05 00 00 | ee 05 00 00 06 06 00 00 |8.......|........|
|00000530| 18 06 00 00 00 00 00 00 | fb 00 49 6f 44 65 6c 65 |........|..IoDele|
|00000540| 74 65 44 65 76 69 63 65 | 00 00 fc 00 49 6f 44 65 |teDevice|....IoDe|
|00000550| 6c 65 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |leteSymb|olicLink|
|00000560| 00 00 d0 02 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |....RtlI|nitUnico|
|00000570| 64 65 53 74 72 69 6e 67 | 00 00 dc 01 4d 6d 46 72 |deString|....MmFr|
|00000580| 65 65 4e 6f 6e 43 61 63 | 68 65 64 4d 65 6d 6f 72 |eeNonCac|hedMemor|
|00000590| 79 00 4c 01 4b 65 33 38 | 36 53 65 74 49 6f 41 63 |y.L.Ke38|6SetIoAc|
|000005a0| 63 65 73 73 4d 61 70 00 | 4a 01 4b 65 33 38 36 49 |cessMap.|J.Ke386I|
|000005b0| 6f 53 65 74 41 63 63 65 | 73 73 50 72 6f 63 65 73 |oSetAcce|ssProces|
|000005c0| 73 00 0c 01 49 6f 47 65 | 74 43 75 72 72 65 6e 74 |s...IoGe|tCurrent|
|000005d0| 50 72 6f 63 65 73 73 00 | 45 01 49 6f 66 43 6f 6d |Process.|E.IofCom|
|000005e0| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 f7 00 |pleteReq|uest....|
|000005f0| 49 6f 43 72 65 61 74 65 | 53 79 6d 62 6f 6c 69 63 |IoCreate|Symbolic|
|00000600| 4c 69 6e 6b 00 00 f3 00 | 49 6f 43 72 65 61 74 65 |Link....|IoCreate|
|00000610| 44 65 76 69 63 65 00 00 | d2 01 4d 6d 41 6c 6c 6f |Device..|..MmAllo|
|00000620| 63 61 74 65 4e 6f 6e 43 | 61 63 68 65 64 4d 65 6d |cateNonC|achedMem|
|00000630| 6f 72 79 00 6e 74 6f 73 | 6b 72 6e 6c 2e 65 78 65 |ory.ntos|krnl.exe|
|00000640| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000650| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000660| 00 00 00 00 30 00 00 00 | 13 33 1d 33 34 33 42 33 |....0...|.3.343B3|
|00000670| 4c 33 58 33 66 33 72 33 | 9d 33 f9 33 06 34 17 34 |L3X3f3r3|.3.3.4.4|
|00000680| 21 34 37 34 67 34 79 34 | 84 34 8b 34 9a 34 a0 34 |!474g4y4|.4.4.4.4|
|00000690| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006c0| 1d 00 00 00 20 00 00 00 | 00 00 00 00 20 00 00 00 |.... ...|.... ...|
|000006d0| 60 02 00 00 40 06 00 00 | c0 04 00 00 e0 02 00 00 |`...@...|........|
|000006e0| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|000006f0| 03 00 24 53 47 35 36 34 | 32 00 e4 02 00 00 01 00 |..$SG564|2.......|
|00000700| 00 00 03 00 24 53 47 35 | 36 37 32 00 c6 03 00 00 |....$SG5|672.....|
|00000710| 01 00 00 00 03 00 24 53 | 47 35 36 37 30 00 a6 03 |......$S|G5670...|
|00000720| 00 00 01 00 00 00 03 00 | 2e 69 64 61 74 61 24 36 |........|.idata$6|
|00000730| 34 06 00 00 03 00 00 00 | 03 00 68 65 61 64 65 72 |4.......|..header|
|00000740| 00 00 00 00 00 00 fe ff | 00 00 02 00 00 00 00 00 |........|........|
|00000750| 0f 01 00 00 60 02 00 00 | 01 00 00 00 02 00 00 00 |....`...|........|
|00000760| 00 00 82 00 00 00 64 02 | 00 00 01 00 00 00 02 00 |......d.|........|
|00000770| 00 00 00 00 a0 00 00 00 | 68 02 00 00 01 00 00 00 |........|h.......|
|00000780| 02 00 00 00 00 00 be 00 | 00 00 6c 02 00 00 01 00 |........|..l.....|
|00000790| 00 00 02 00 00 00 00 00 | 1a 02 00 00 70 02 00 00 |........|....p...|
|000007a0| 01 00 00 00 02 00 00 00 | 00 00 37 02 00 00 74 02 |........|..7...t.|
|000007b0| 00 00 01 00 00 00 02 00 | 00 00 00 00 6a 00 00 00 |........|....j...|
|000007c0| 78 02 00 00 01 00 00 00 | 02 00 00 00 00 00 2c 01 |x.......|......,.|
|000007d0| 00 00 7c 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..|.....|........|
|000007e0| 48 01 00 00 80 02 00 00 | 01 00 00 00 02 00 00 00 |H.......|........|
|000007f0| 00 00 66 01 00 00 84 02 | 00 00 01 00 00 00 02 00 |..f.....|........|
|00000800| 00 00 00 00 7f 01 00 00 | 88 02 00 00 01 00 00 00 |........|........|
|00000810| 02 00 00 00 00 00 e6 02 | 00 00 8c 02 00 00 01 00 |........|........|
|00000820| 00 00 02 00 00 00 00 00 | 13 00 00 00 0c 03 00 00 |........|........|
|00000830| 01 00 20 00 02 00 00 00 | 00 00 24 00 00 00 60 03 |.. .....|..$...`.|
|00000840| 00 00 01 00 20 00 02 00 | 00 00 00 00 3a 00 00 00 |.... ...|....:...|
|00000850| 80 03 00 00 01 00 20 00 | 02 00 00 00 00 00 45 00 |...... .|......E.|
|00000860| 00 00 88 03 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000870| 04 00 00 00 ee 03 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000880| 00 00 dd 00 00 00 98 04 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000890| 00 00 00 00 f4 00 00 00 | 9e 04 00 00 01 00 20 00 |........|...... .|
|000008a0| 02 00 00 00 00 00 5e 00 | 00 00 c0 04 00 00 02 00 |......^.|........|
|000008b0| 00 00 02 00 00 00 00 00 | b4 01 00 00 e0 04 00 00 |........|........|
|000008c0| 03 00 00 00 02 00 00 00 | 00 00 cd 02 00 00 f4 04 |........|........|
|000008d0| 00 00 03 00 00 00 02 00 | 65 6e 64 00 00 00 00 00 |........|end.....|
|000008e0| c0 06 00 00 fe ff 00 00 | 02 00 00 03 00 00 5f 44 |........|......_D|
|000008f0| 72 69 76 65 72 45 6e 74 | 72 79 40 38 00 5f 4b 65 |riverEnt|ry@8._Ke|
|00000900| 33 38 36 49 4f 55 6e 6c | 6f 61 64 40 34 00 5f 53 |386IOUnl|oad@4._S|
|00000910| 65 74 49 4f 50 65 72 6d | 69 73 73 69 6f 6e 4d 61 |etIOPerm|issionMa|
|00000920| 70 40 34 00 5f 4b 65 33 | 38 36 49 4f 40 30 00 5f |p@4._Ke3|86IO@0._|
|00000930| 4b 65 33 38 36 49 4f 43 | 72 65 61 74 65 44 69 73 |Ke386IOC|reateDis|
|00000940| 70 61 74 63 68 40 38 00 | 5f 49 4f 50 4d 5f 6c 6f |patch@8.|_IOPM_lo|
|00000950| 63 61 6c 00 5f 5f 69 6d | 70 5f 5f 49 6f 44 65 6c |cal.__im|p__IoDel|
|00000960| 65 74 65 44 65 76 69 63 | 65 40 34 00 5f 5f 69 6d |eteDevic|e@4.__im|
|00000970| 70 5f 5f 49 6f 44 65 6c | 65 74 65 53 79 6d 62 6f |p__IoDel|eteSymbo|
|00000980| 6c 69 63 4c 69 6e 6b 40 | 34 00 5f 5f 69 6d 70 5f |licLink@|4.__imp_|
|00000990| 5f 52 74 6c 49 6e 69 74 | 55 6e 69 63 6f 64 65 53 |_RtlInit|UnicodeS|
|000009a0| 74 72 69 6e 67 40 38 00 | 5f 5f 69 6d 70 5f 5f 4d |tring@8.|__imp__M|
|000009b0| 6d 46 72 65 65 4e 6f 6e | 43 61 63 68 65 64 4d 65 |mFreeNon|CachedMe|
|000009c0| 6d 6f 72 79 40 38 00 5f | 4b 65 33 38 36 53 65 74 |mory@8._|Ke386Set|
|000009d0| 49 6f 41 63 63 65 73 73 | 4d 61 70 40 38 00 5f 4b |IoAccess|Map@8._K|
|000009e0| 65 33 38 36 49 6f 53 65 | 74 41 63 63 65 73 73 50 |e386IoSe|tAccessP|
|000009f0| 72 6f 63 65 73 73 40 38 | 00 5f 5f 69 6d 70 5f 5f |rocess@8|.__imp__|
|00000a00| 49 6f 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |IoGetCur|rentProc|
|00000a10| 65 73 73 40 30 00 5f 5f | 69 6d 70 5f 40 49 6f 66 |ess@0.__|imp_@Iof|
|00000a20| 43 6f 6d 70 6c 65 74 65 | 52 65 71 75 65 73 74 40 |Complete|Request@|
|00000a30| 38 00 5f 5f 69 6d 70 5f | 5f 49 6f 43 72 65 61 74 |8.__imp_|_IoCreat|
|00000a40| 65 53 79 6d 62 6f 6c 69 | 63 4c 69 6e 6b 40 38 00 |eSymboli|cLink@8.|
|00000a50| 5f 5f 69 6d 70 5f 5f 49 | 6f 43 72 65 61 74 65 44 |__imp__I|oCreateD|
|00000a60| 65 76 69 63 65 40 32 38 | 00 5f 5f 69 6d 70 5f 5f |evice@28|.__imp__|
|00000a70| 4d 6d 41 6c 6c 6f 63 61 | 74 65 4e 6f 6e 43 61 63 |MmAlloca|teNonCac|
|00000a80| 68 65 64 4d 65 6d 6f 72 | 79 40 34 00 5f 49 6f 44 |hedMemor|y@4._IoD|
|00000a90| 65 6c 65 74 65 44 65 76 | 69 63 65 40 34 00 5f 5f |eleteDev|ice@4.__|
|00000aa0| 49 4d 50 4f 52 54 5f 44 | 45 53 43 52 49 50 54 4f |IMPORT_D|ESCRIPTO|
|00000ab0| 52 5f 6e 74 6f 73 6b 72 | 6e 6c 00 5f 49 6f 44 65 |R_ntoskr|nl._IoDe|
|00000ac0| 6c 65 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |leteSymb|olicLink|
|00000ad0| 40 34 00 5f 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |@4._RtlI|nitUnico|
|00000ae0| 64 65 53 74 72 69 6e 67 | 40 38 00 5f 4d 6d 46 72 |deString|@8._MmFr|
|00000af0| 65 65 4e 6f 6e 43 61 63 | 68 65 64 4d 65 6d 6f 72 |eeNonCac|hedMemor|
|00000b00| 79 40 38 00 5f 5f 69 6d | 70 5f 5f 4b 65 33 38 36 |y@8.__im|p__Ke386|
|00000b10| 53 65 74 49 6f 41 63 63 | 65 73 73 4d 61 70 40 38 |SetIoAcc|essMap@8|
|00000b20| 00 5f 5f 69 6d 70 5f 5f | 4b 65 33 38 36 49 6f 53 |.__imp__|Ke386IoS|
|00000b30| 65 74 41 63 63 65 73 73 | 50 72 6f 63 65 73 73 40 |etAccess|Process@|
|00000b40| 38 00 5f 49 6f 47 65 74 | 43 75 72 72 65 6e 74 50 |8._IoGet|CurrentP|
|00000b50| 72 6f 63 65 73 73 40 30 | 00 40 49 6f 66 43 6f 6d |rocess@0|.@IofCom|
|00000b60| 70 6c 65 74 65 52 65 71 | 75 65 73 74 40 38 00 5f |pleteReq|uest@8._|
|00000b70| 49 6f 43 72 65 61 74 65 | 53 79 6d 62 6f 6c 69 63 |IoCreate|Symbolic|
|00000b80| 4c 69 6e 6b 40 38 00 5f | 49 6f 43 72 65 61 74 65 |Link@8._|IoCreate|
|00000b90| 44 65 76 69 63 65 40 32 | 38 00 5f 4d 6d 41 6c 6c |Device@2|8._MmAll|
|00000ba0| 6f 63 61 74 65 4e 6f 6e | 43 61 63 68 65 64 4d 65 |ocateNon|CachedMe|
|00000bb0| 6d 6f 72 79 40 34 00 5f | 5f 4e 55 4c 4c 5f 49 4d |mory@4._|_NULL_IM|
|00000bc0| 50 4f 52 54 5f 44 45 53 | 43 52 49 50 54 4f 52 00 |PORT_DES|CRIPTOR.|
|00000bd0| 7f 6e 74 6f 73 6b 72 6e | 6c 5f 4e 55 4c 4c 5f 54 |.ntoskrn|l_NULL_T|
|00000be0| 48 55 4e 4b 5f 44 41 54 | 41 00 00 00 01 00 00 00 |HUNK_DAT|A.......|
|00000bf0| 10 01 00 00 00 00 00 00 | 2e 5c 69 33 38 36 5c 66 |........|.\i386\f|
|00000c00| 72 65 65 5c 4b 65 33 38 | 36 49 4f 2e 73 79 73 00 |ree\Ke38|6IO.sys.|
|00000c10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ca0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ce0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 0c 03 00 00 |........|........|
|00000d00| 54 00 00 00 0d 00 00 00 | 01 00 0d d2 60 03 00 00 |T.......|....`...|
|00000d10| 20 00 00 00 00 00 00 00 | 01 00 00 00 80 03 00 00 | .......|........|
|00000d20| 08 00 00 00 00 00 00 00 | 00 00 00 00 88 03 00 00 |........|........|
|00000d30| 1e 00 00 00 00 00 00 00 | 02 00 00 00 ee 03 00 00 |........|........|
|00000d40| a9 00 00 00 18 00 00 00 | 02 00 08 d2 00 00 00 00 |........|........|
|00000d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+