home *** CD-ROM | disk | FTP | other *** search
| Unknown | 2007-10-08 | 2.5 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 8b ff | 55 8b ec 83 ec 14 56 57 |........|U.....VW|
|00000010| 33 c0 8d 7d ec ab ab ab | ab ab 8d 45 08 50 8d 45 |3..}....|...E.P.E|
|00000020| ec 50 33 f6 56 ff 75 0c | c7 45 ec 14 00 00 00 ff |.P3.V.u.|.E......|
|00000030| 75 08 c7 45 f0 e6 40 07 | 00 ff 35 58 3c 07 00 ff |u..E..@.|..5X<...|
|00000040| 15 08 38 07 00 8b f8 3b | fe 7c 27 8b 45 0c 89 35 |..8....;|.|'.E..5|
|00000050| 80 3e 07 00 89 35 84 3e | 07 00 89 35 88 3e 07 00 |.>...5.>|...5.>..|
|00000060| 89 35 8c 3e 07 00 6a 32 | be 94 3e 07 00 e8 54 c0 |.5.>..j2|..>...T.|
|00000070| f9 ff 8b c7 5f 5e c9 c2 | 08 00 cc cc cc cc cc 8b |...._^..|........|
|00000080| ff 55 8b ec a1 d4 f3 06 | 00 85 c0 b9 4e e6 40 bb |.U......|....N.@.|
|00000090| 74 04 3b c1 75 1e 8b 15 | f4 00 03 00 b8 d4 f3 06 |t.;.u...|........|
|000000a0| 00 c1 e8 08 33 02 a3 d4 | f3 06 00 75 07 8b c1 a3 |....3...|...u....|
|000000b0| d4 f3 06 00 f7 d0 a3 d8 | f3 06 00 5d e9 45 ff ff |........|...].E..|
|000000c0| ff cc cc cc 40 51 06 00 | 00 00 00 00 00 00 00 00 |....@Q..|........|
|000000d0| 40 57 06 00 2c 00 02 00 | 14 51 06 00 00 00 00 00 |@W..,...|.Q......|
|000000e0| 00 00 00 00 de 57 06 00 | 00 00 02 00 34 51 06 00 |.....W..|....4Q..|
|000000f0| 00 00 00 00 00 00 00 00 | 24 58 06 00 20 00 02 00 |........|$X.. ...|
|00000100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000110| 00 00 00 00 a0 57 06 00 | 62 57 06 00 c2 57 06 00 |.....W..|bW...W..|
|00000120| ae 57 06 00 4e 57 06 00 | 92 57 06 00 76 57 06 00 |.W..NW..|.W..vW..|
|00000130| 00 00 00 00 fe 57 06 00 | 12 58 06 00 00 00 00 00 |.....W..|.X......|
|00000140| 00 53 06 00 0e 53 06 00 | 1c 53 06 00 34 53 06 00 |.S...S..|.S..4S..|
|00000150| 40 53 06 00 54 53 06 00 | 66 53 06 00 7c 53 06 00 |@S..TS..|fS..|S..|
|00000160| 90 53 06 00 9c 53 06 00 | aa 53 06 00 c6 53 06 00 |.S...S..|.S...S..|
|00000170| d6 53 06 00 f8 53 06 00 | 18 54 06 00 32 54 06 00 |.S...S..|.T..2T..|
|00000180| 42 54 06 00 54 54 06 00 | 70 54 06 00 8c 54 06 00 |BT..TT..|pT...T..|
|00000190| ae 54 06 00 c4 54 06 00 | de 54 06 00 f0 54 06 00 |.T...T..|.T...T..|
|000001a0| 04 55 06 00 20 55 06 00 | f6 52 06 00 42 55 06 00 |.U.. U..|.R..BU..|
|000001b0| 5c 55 06 00 74 55 06 00 | 8e 55 06 00 a4 55 06 00 |\U..tU..|.U...U..|
|000001c0| c0 55 06 00 d8 55 06 00 | e2 55 06 00 f6 55 06 00 |.U...U..|.U...U..|
|000001d0| 0e 56 06 00 2c 56 06 00 | 3e 56 06 00 52 56 06 00 |.V..,V..|>V..RV..|
|000001e0| 5e 56 06 00 7c 56 06 00 | 9a 56 06 00 ac 56 06 00 |^V..|V..|.V...V..|
|000001f0| be 56 06 00 d4 56 06 00 | ea 56 06 00 f8 56 06 00 |.V...V..|.V...V..|
|00000200| 08 57 06 00 18 57 06 00 | 22 57 06 00 30 57 06 00 |.W...W..|"W..0W..|
|00000210| ec 52 06 00 d0 52 06 00 | b4 52 06 00 a4 52 06 00 |.R...R..|.R...R..|
|00000220| 98 52 06 00 88 52 06 00 | 70 52 06 00 62 52 06 00 |.R...R..|pR..bR..|
|00000230| e6 57 06 00 4e 52 06 00 | 38 55 06 00 44 52 06 00 |.W..NR..|8U..DR..|
|00000240| 00 00 00 00 03 06 6d 65 | 6d 73 65 74 00 00 4a 02 |......me|mset..J.|
|00000250| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 45 76 65 6e |KeInitia|lizeEven|
|00000260| 74 00 93 02 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |t...KeSe|tEvent..|
|00000270| ae 02 4b 65 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |..KeWait|ForSingl|
|00000280| 65 4f 62 6a 65 63 74 00 | 0a 02 49 6f 66 43 61 6c |eObject.|..IofCal|
|00000290| 6c 44 72 69 76 65 72 00 | 88 01 49 6f 46 72 65 65 |lDriver.|..IoFree|
|000002a0| 49 72 70 00 49 01 49 6f | 41 6c 6c 6f 63 61 74 65 |Irp.I.Io|Allocate|
|000002b0| 49 72 70 00 7c 04 52 74 | 6c 49 6e 74 65 67 65 72 |Irp.|.Rt|lInteger|
|000002c0| 54 6f 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |ToUnicod|eString.|
|000002d0| fb 03 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |..RtlApp|endUnico|
|000002e0| 64 65 54 6f 53 74 72 69 | 6e 67 00 00 01 06 6d 65 |deToStri|ng....me|
|000002f0| 6d 63 70 79 00 00 5e 05 | 5a 77 43 6c 6f 73 65 00 |mcpy..^.|ZwClose.|
|00000300| 65 05 5a 77 43 72 65 61 | 74 65 4b 65 79 00 6c 05 |e.ZwCrea|teKey.l.|
|00000310| 5a 77 44 65 6c 65 74 65 | 4b 65 79 00 02 05 52 74 |ZwDelete|Key...Rt|
|00000320| 6c 57 72 69 74 65 52 65 | 67 69 73 74 72 79 56 61 |lWriteRe|gistryVa|
|00000330| 6c 75 65 00 88 05 5a 77 | 4f 70 65 6e 4b 65 79 00 |lue...Zw|OpenKey.|
|00000340| 6d 05 5a 77 44 65 6c 65 | 74 65 56 61 6c 75 65 4b |m.ZwDele|teValueK|
|00000350| 65 79 00 00 a9 05 5a 77 | 51 75 65 72 79 56 61 6c |ey....Zw|QueryVal|
|00000360| 75 65 4b 65 79 00 04 04 | 52 74 6c 43 68 65 63 6b |ueKey...|RtlCheck|
|00000370| 52 65 67 69 73 74 72 79 | 4b 65 79 00 6b 02 4b 65 |Registry|Key.k.Ke|
|00000380| 51 75 65 72 79 53 79 73 | 74 65 6d 54 69 6d 65 00 |QuerySys|temTime.|
|00000390| da 05 5f 61 75 6c 6c 64 | 69 76 00 00 9d 02 4b 65 |.._aulld|iv....Ke|
|000003a0| 53 65 74 54 69 6d 65 72 | 00 00 d5 02 4d 6d 42 75 |SetTimer|....MmBu|
|000003b0| 69 6c 64 4d 64 6c 46 6f | 72 4e 6f 6e 50 61 67 65 |ildMdlFo|rNonPage|
|000003c0| 64 50 6f 6f 6c 00 4a 01 | 49 6f 41 6c 6c 6f 63 61 |dPool.J.|IoAlloca|
|000003d0| 74 65 4d 64 6c 00 b0 02 | 4b 65 66 52 65 6c 65 61 |teMdl...|KefRelea|
|000003e0| 73 65 53 70 69 6e 4c 6f | 63 6b 46 72 6f 6d 44 70 |seSpinLo|ckFromDp|
|000003f0| 63 4c 65 76 65 6c 00 00 | af 02 4b 65 66 41 63 71 |cLevel..|..KefAcq|
|00000400| 75 69 72 65 53 70 69 6e | 4c 6f 63 6b 41 74 44 70 |uireSpin|LockAtDp|
|00000410| 63 4c 65 76 65 6c 00 00 | 2b 02 4b 65 44 65 6c 61 |cLevel..|+.KeDela|
|00000420| 79 45 78 65 63 75 74 69 | 6f 6e 54 68 72 65 61 64 |yExecuti|onThread|
|00000430| 00 00 27 02 4b 65 43 61 | 6e 63 65 6c 54 69 6d 65 |..'.KeCa|ncelTime|
|00000440| 72 00 98 01 49 6f 47 65 | 74 44 6d 61 41 64 61 70 |r...IoGe|tDmaAdap|
|00000450| 74 65 72 00 84 00 45 78 | 52 65 6c 65 61 73 65 46 |ter...Ex|ReleaseF|
|00000460| 61 73 74 4d 75 74 65 78 | 55 6e 73 61 66 65 00 00 |astMutex|Unsafe..|
|00000470| 37 00 45 78 41 63 71 75 | 69 72 65 46 61 73 74 4d |7.ExAcqu|ireFastM|
|00000480| 75 74 65 78 55 6e 73 61 | 66 65 00 00 5e 00 45 78 |utexUnsa|fe..^.Ex|
|00000490| 49 6e 69 74 69 61 6c 69 | 7a 65 4e 50 61 67 65 64 |Initiali|zeNPaged|
|000004a0| 4c 6f 6f 6b 61 73 69 64 | 65 4c 69 73 74 00 96 02 |Lookasid|eList...|
|000004b0| 4b 65 53 65 74 49 6d 70 | 6f 72 74 61 6e 63 65 44 |KeSetImp|ortanceD|
|000004c0| 70 63 00 00 9b 02 4b 65 | 53 65 74 54 61 72 67 65 |pc....Ke|SetTarge|
|000004d0| 74 50 72 6f 63 65 73 73 | 6f 72 44 70 63 00 49 02 |tProcess|orDpc.I.|
|000004e0| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 44 70 63 00 |KeInitia|lizeDpc.|
|000004f0| 53 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |S.KeInit|ializeTi|
|00000500| 6d 65 72 00 e8 04 52 74 | 6c 55 6e 69 63 6f 64 65 |mer...Rt|lUnicode|
|00000510| 53 74 72 69 6e 67 54 6f | 49 6e 74 65 67 65 72 00 |StringTo|Integer.|
|00000520| 6c 04 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |l.RtlIni|tUnicode|
|00000530| 53 74 72 69 6e 67 00 00 | 02 06 6d 65 6d 6d 6f 76 |String..|..memmov|
|00000540| 65 00 b9 04 52 74 6c 51 | 75 65 72 79 52 65 67 69 |e...RtlQ|ueryRegi|
|00000550| 73 74 72 79 56 61 6c 75 | 65 73 00 00 05 02 49 6f |stryValu|es....Io|
|00000560| 57 72 69 74 65 45 72 72 | 6f 72 4c 6f 67 45 6e 74 |WriteErr|orLogEnt|
|00000570| 72 79 00 00 48 01 49 6f | 41 6c 6c 6f 63 61 74 65 |ry..H.Io|Allocate|
|00000580| 45 72 72 6f 72 4c 6f 67 | 45 6e 74 72 79 00 63 02 |ErrorLog|Entry.c.|
|00000590| 4b 65 4e 75 6d 62 65 72 | 50 72 6f 63 65 73 73 6f |KeNumber|Processo|
|000005a0| 72 73 00 00 e5 02 4d 6d | 47 65 74 53 79 73 74 65 |rs....Mm|GetSyste|
|000005b0| 6d 52 6f 75 74 69 6e 65 | 41 64 64 72 65 73 73 00 |mRoutine|Address.|
|000005c0| 45 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |E.ExAllo|catePool|
|000005d0| 57 69 74 68 54 61 67 00 | d5 05 5f 61 6c 6c 6d 75 |WithTag.|.._allmu|
|000005e0| 6c 00 5a 02 4b 65 49 6e | 73 65 72 74 51 75 65 75 |l.Z.KeIn|sertQueu|
|000005f0| 65 44 70 63 00 00 68 02 | 4b 65 51 75 65 72 79 49 |eDpc..h.|KeQueryI|
|00000600| 6e 74 65 72 72 75 70 74 | 54 69 6d 65 00 00 49 00 |nterrupt|Time..I.|
|00000610| 45 78 44 65 6c 65 74 65 | 4e 50 61 67 65 64 4c 6f |ExDelete|NPagedLo|
|00000620| 6f 6b 61 73 69 64 65 4c | 69 73 74 00 11 03 4d 6d |okasideL|ist...Mm|
|00000630| 55 6e 6d 61 70 49 6f 53 | 70 61 63 65 00 00 57 00 |UnmapIoS|pace..W.|
|00000640| 45 78 46 72 65 65 50 6f | 6f 6c 57 69 74 68 54 61 |ExFreePo|olWithTa|
|00000650| 67 00 89 01 49 6f 46 72 | 65 65 4d 64 6c 00 70 00 |g...IoFr|eeMdl.p.|
|00000660| 45 78 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 6f 70 |ExInterl|ockedPop|
|00000670| 45 6e 74 72 79 53 4c 69 | 73 74 00 00 72 00 45 78 |EntrySLi|st..r.Ex|
|00000680| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 50 75 73 68 45 |Interloc|kedPushE|
|00000690| 6e 74 72 79 53 4c 69 73 | 74 00 8a 01 49 6f 46 72 |ntrySLis|t...IoFr|
|000006a0| 65 65 57 6f 72 6b 49 74 | 65 6d 00 00 b8 01 49 6f |eeWorkIt|em....Io|
|000006b0| 51 75 65 75 65 57 6f 72 | 6b 49 74 65 6d 00 4b 01 |QueueWor|kItem.K.|
|000006c0| 49 6f 41 6c 6c 6f 63 61 | 74 65 57 6f 72 6b 49 74 |IoAlloca|teWorkIt|
|000006d0| 65 6d 00 00 95 01 49 6f | 47 65 74 44 65 76 69 63 |em....Io|GetDevic|
|000006e0| 65 50 72 6f 70 65 72 74 | 79 00 77 05 5a 77 46 6c |ePropert|y.w.ZwFl|
|000006f0| 75 73 68 4b 65 79 00 00 | c3 05 5a 77 53 65 74 56 |ushKey..|..ZwSetV|
|00000700| 61 6c 75 65 4b 65 79 00 | f3 02 4d 6d 4d 61 70 49 |alueKey.|..MmMapI|
|00000710| 6f 53 70 61 63 65 00 00 | d3 05 5f 61 6c 6c 64 69 |oSpace..|.._alldi|
|00000720| 76 00 a5 02 4b 65 54 69 | 63 6b 43 6f 75 6e 74 00 |v...KeTi|ckCount.|
|00000730| 26 02 4b 65 42 75 67 43 | 68 65 63 6b 45 78 00 00 |&.KeBugC|heckEx..|
|00000740| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 4f 00 |ntoskrnl|.exe..O.|
|00000750| 4b 66 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KfReleas|eSpinLoc|
|00000760| 6b 00 4c 00 4b 66 41 63 | 71 75 69 72 65 53 70 69 |k.L.KfAc|quireSpi|
|00000770| 6e 4c 6f 63 6b 00 49 00 | 4b 65 53 74 61 6c 6c 45 |nLock.I.|KeStallE|
|00000780| 78 65 63 75 74 69 6f 6e | 50 72 6f 63 65 73 73 6f |xecution|Processo|
|00000790| 72 00 4d 00 4b 66 4c 6f | 77 65 72 49 72 71 6c 00 |r.M.KfLo|werIrql.|
|000007a0| 4e 00 4b 66 52 61 69 73 | 65 49 72 71 6c 00 40 00 |N.KfRais|eIrql.@.|
|000007b0| 4b 65 47 65 74 43 75 72 | 72 65 6e 74 49 72 71 6c |KeGetCur|rentIrql|
|000007c0| 00 00 42 00 4b 65 51 75 | 65 72 79 50 65 72 66 6f |..B.KeQu|eryPerfo|
|000007d0| 72 6d 61 6e 63 65 43 6f | 75 6e 74 65 72 00 48 41 |rmanceCo|unter.HA|
|000007e0| 4c 2e 64 6c 6c 00 e6 04 | 52 74 6c 43 6f 70 79 55 |L.dll...|RtlCopyU|
|000007f0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 07 00 |nicodeSt|ring....|
|00000800| 57 64 66 56 65 72 73 69 | 6f 6e 55 6e 62 69 6e 64 |WdfVersi|onUnbind|
|00000810| 00 00 06 00 57 64 66 56 | 65 72 73 69 6f 6e 42 69 |....WdfV|ersionBi|
|00000820| 6e 64 00 00 57 44 46 4c | 44 52 2e 53 59 53 00 00 |nd..WDFL|DR.SYS..|
|00000830| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000860| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+
