home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-01-19 | 1.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 00 70 01 00 85 |.......U|....p...|
|00000010| c0 b9 4e e6 40 bb 74 04 | 3b c1 75 1a a1 6c 60 01 |..N.@.t.|;.u..l`.|
|00000020| 00 8b 00 35 00 70 01 00 | a3 00 70 01 00 75 07 8b |...5.p..|..p..u..|
|00000030| c1 a3 00 70 01 00 f7 d0 | a3 04 70 01 00 5d e9 b5 |...p....|..p..]..|
|00000040| 90 ff ff cc 88 a0 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 3a a3 00 00 08 60 00 00 | 80 a0 00 00 00 00 00 00 |:....`..|........|
|00000060| 00 00 00 00 68 a3 00 00 | 00 60 00 00 00 00 00 00 |....h...|.`......|
|00000070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000080| 54 a3 00 00 00 00 00 00 | 26 a1 00 00 32 a1 00 00 |T.......|&...2...|
|00000090| 44 a1 00 00 54 a1 00 00 | 70 a1 00 00 88 a1 00 00 |D...T...|p.......|
|000000a0| 9c a1 00 00 b4 a1 00 00 | c8 a1 00 00 da a1 00 00 |........|........|
|000000b0| f2 a1 00 00 0a a2 00 00 | 22 a2 00 00 30 a2 00 00 |........|"...0...|
|000000c0| 1a a1 00 00 50 a2 00 00 | 68 a2 00 00 88 a2 00 00 |....P...|h.......|
|000000d0| 92 a2 00 00 9c a2 00 00 | b8 a2 00 00 c4 a2 00 00 |........|........|
|000000e0| d4 a2 00 00 f0 a2 00 00 | 08 a3 00 00 1c a3 00 00 |........|........|
|000000f0| 2a a3 00 00 48 a3 00 00 | 44 a2 00 00 10 a1 00 00 |*...H...|D.......|
|00000100| 70 a3 00 00 8e a3 00 00 | aa a3 00 00 00 00 00 00 |p.......|........|
|00000110| ad 06 5a 77 43 6c 6f 73 | 65 00 3c 00 44 62 67 50 |..ZwClos|e.<.DbgP|
|00000120| 72 69 6e 74 00 00 e6 06 | 5a 77 4f 70 65 6e 4b 65 |rint....|ZwOpenKe|
|00000130| 79 00 13 07 5a 77 51 75 | 65 72 79 56 61 6c 75 65 |y...ZwQu|eryValue|
|00000140| 4b 65 79 00 9a 04 50 73 | 47 65 74 56 65 72 73 69 |Key...Ps|GetVersi|
|00000150| 6f 6e 00 00 8a 03 4d 6d | 47 65 74 53 79 73 74 65 |on....Mm|GetSyste|
|00000160| 6d 52 6f 75 74 69 6e 65 | 41 64 64 72 65 73 73 00 |mRoutine|Address.|
|00000170| 5f 05 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |_.RtlIni|tUnicode|
|00000180| 53 74 72 69 6e 67 00 00 | d9 02 4b 65 49 6e 69 74 |String..|..KeInit|
|00000190| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 41 04 4f 62 |ializeEv|ent.A.Ob|
|000001a0| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|000001b0| 63 74 00 00 85 00 45 78 | 46 72 65 65 50 6f 6f 6c |ct....Ex|FreePool|
|000001c0| 57 69 74 68 54 61 67 00 | 3d 07 5a 77 55 6e 6c 6f |WithTag.|=.ZwUnlo|
|000001d0| 61 64 44 72 69 76 65 72 | 00 00 48 03 4b 65 57 61 |adDriver|..H.KeWa|
|000001e0| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|000001f0| 74 00 bd 02 4b 65 45 6e | 74 65 72 43 72 69 74 69 |t...KeEn|terCriti|
|00000200| 63 61 6c 52 65 67 69 6f | 6e 00 f0 02 4b 65 4c 65 |calRegio|n...KeLe|
|00000210| 61 76 65 43 72 69 74 69 | 63 61 6c 52 65 67 69 6f |aveCriti|calRegio|
|00000220| 6e 00 2a 03 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |n.*.KeSe|tEvent..|
|00000230| 3c 05 52 74 6c 46 72 65 | 65 41 6e 73 69 53 74 72 |<.RtlFre|eAnsiStr|
|00000240| 69 6e 67 00 62 07 5f 73 | 74 72 6e 69 63 6d 70 00 |ing.b._s|trnicmp.|
|00000250| 6d 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |m.ExAllo|catePool|
|00000260| 57 69 74 68 54 61 67 00 | ee 05 52 74 6c 55 6e 69 |WithTag.|..RtlUni|
|00000270| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 41 6e 73 69 |codeStri|ngToAnsi|
|00000280| 53 74 72 69 6e 67 00 00 | 80 07 6d 65 6d 73 65 74 |String..|..memset|
|00000290| 00 00 7e 07 6d 65 6d 63 | 70 79 00 00 6f 05 52 74 |..~.memc|py..o.Rt|
|000002a0| 6c 49 6e 74 65 67 65 72 | 54 6f 55 6e 69 63 6f 64 |lInteger|ToUnicod|
|000002b0| 65 53 74 72 69 6e 67 00 | 6c 07 5f 77 63 73 69 63 |eString.|l._wcsic|
|000002c0| 6d 70 00 00 d8 06 5a 77 | 4c 6f 61 64 44 72 69 76 |mp....Zw|LoadDriv|
|000002d0| 65 72 00 00 09 02 49 6f | 47 65 74 44 65 76 69 63 |er....Io|GetDevic|
|000002e0| 65 4f 62 6a 65 63 74 50 | 6f 69 6e 74 65 72 00 00 |eObjectP|ointer..|
|000002f0| ff 04 52 74 6c 43 6f 70 | 79 55 6e 69 63 6f 64 65 |..RtlCop|yUnicode|
|00000300| 53 74 72 69 6e 67 00 00 | ef 04 52 74 6c 43 6f 6d |String..|..RtlCom|
|00000310| 70 61 72 65 4d 65 6d 6f | 72 79 00 00 3f 03 4b 65 |pareMemo|ry..?.Ke|
|00000320| 54 69 63 6b 43 6f 75 6e | 74 00 b3 02 4b 65 42 75 |TickCoun|t...KeBu|
|00000330| 67 43 68 65 63 6b 45 78 | 00 00 6e 74 6f 73 6b 72 |gCheckEx|..ntoskr|
|00000340| 6e 6c 2e 65 78 65 00 00 | f8 05 52 74 6c 55 6e 77 |nl.exe..|..RtlUnw|
|00000350| 69 6e 64 00 50 00 4b 65 | 47 65 74 43 75 72 72 65 |ind.P.Ke|GetCurre|
|00000360| 6e 74 49 72 71 6c 00 00 | 48 41 4c 2e 64 6c 6c 00 |ntIrql..|HAL.dll.|
|00000370| 6c 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |l.ExAllo|catePool|
|00000380| 57 69 74 68 51 75 6f 74 | 61 54 61 67 00 00 12 07 |WithQuot|aTag....|
|00000390| 5a 77 51 75 65 72 79 53 | 79 73 74 65 6d 49 6e 66 |ZwQueryS|ystemInf|
|000003a0| 6f 72 6d 61 74 69 6f 6e | 00 00 d9 04 52 74 6c 41 |ormation|....RtlA|
|000003b0| 6e 73 69 43 68 61 72 54 | 6f 55 6e 69 63 6f 64 65 |nsiCharT|oUnicode|
|000003c0| 43 68 61 72 00 00 00 00 | 00 00 00 00 00 00 00 00 |Char....|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+