home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-01-19 | 2.5 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 08 92 01 00 85 |.......U|........|
|00000010| c0 b9 4e e6 40 bb 74 04 | 3b c1 75 1a a1 e0 80 01 |..N.@.t.|;.u.....|
|00000020| 00 8b 00 35 08 92 01 00 | a3 08 92 01 00 75 07 8b |...5....|.....u..|
|00000030| c1 a3 08 92 01 00 f7 d0 | a3 0c 92 01 00 5d e9 25 |........|.....].%|
|00000040| a9 ff ff cc 8c c0 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 86 c6 00 00 0c 80 00 00 | 80 c0 00 00 00 00 00 00 |........|........|
|00000060| 00 00 00 00 bc c6 00 00 | 00 80 00 00 00 00 00 00 |........|........|
|00000070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000080| 94 c6 00 00 a8 c6 00 00 | 00 00 00 00 1a c2 00 00 |........|........|
|00000090| 2c c2 00 00 44 c2 00 00 | 4e c2 00 00 58 c2 00 00 |,...D...|N...X...|
|000000a0| 74 c2 00 00 8c c2 00 00 | a0 c2 00 00 bc c2 00 00 |t.......|........|
|000000b0| cc c2 00 00 e2 c2 00 00 | f0 c2 00 00 fa c2 00 00 |........|........|
|000000c0| 0c c3 00 00 1a c3 00 00 | 32 c3 00 00 52 c3 00 00 |........|2...R...|
|000000d0| 66 c3 00 00 7e c3 00 00 | 9e c3 00 00 b2 c3 00 00 |f...~...|........|
|000000e0| c8 c3 00 00 da c3 00 00 | fc c3 00 00 1c c4 00 00 |........|........|
|000000f0| 3c c4 00 00 54 c4 00 00 | 06 c2 00 00 92 c4 00 00 |<...T...|........|
|00000100| 9e c4 00 00 ae c4 00 00 | be c4 00 00 ca c4 00 00 |........|........|
|00000110| d8 c4 00 00 f8 c4 00 00 | 0c c5 00 00 16 c5 00 00 |........|........|
|00000120| 20 c5 00 00 2a c5 00 00 | 44 c5 00 00 62 c5 00 00 | ...*...|D...b...|
|00000130| 74 c5 00 00 88 c5 00 00 | 9e c5 00 00 b6 c5 00 00 |t.......|........|
|00000140| c8 c5 00 00 de c5 00 00 | ea c5 00 00 fc c5 00 00 |........|........|
|00000150| 0c c6 00 00 22 c6 00 00 | 32 c6 00 00 4a c6 00 00 |...."...|2...J...|
|00000160| 68 c6 00 00 76 c6 00 00 | fc c1 00 00 76 c4 00 00 |h...v...|....v...|
|00000170| e0 c1 00 00 c4 c6 00 00 | d0 c6 00 00 ec c6 00 00 |........|........|
|00000180| 02 c7 00 00 18 c7 00 00 | 2a c7 00 00 4a c7 00 00 |........|*...J...|
|00000190| 6a c7 00 00 8a c7 00 00 | aa c7 00 00 b8 c7 00 00 |j.......|........|
|000001a0| d6 c7 00 00 f4 c7 00 00 | 00 c8 00 00 1a c8 00 00 |........|........|
|000001b0| 26 c8 00 00 40 c8 00 00 | 50 c8 00 00 5a c8 00 00 |&...@...|P...Z...|
|000001c0| 78 c8 00 00 98 c8 00 00 | b6 c8 00 00 c2 c8 00 00 |x.......|........|
|000001d0| d0 c8 00 00 e2 c8 00 00 | f2 c8 00 00 00 00 00 00 |........|........|
|000001e0| 37 04 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |7.ObRefe|renceObj|
|000001f0| 65 63 74 42 79 48 61 6e | 64 6c 65 00 4b 07 5f 61 |ectByHan|dle.K._a|
|00000200| 6c 6c 6d 75 6c 00 85 00 | 45 78 46 72 65 65 50 6f |llmul...|ExFreePo|
|00000210| 6f 6c 57 69 74 68 54 61 | 67 00 8e 02 49 6f 57 4d |olWithTa|g...IoWM|
|00000220| 49 57 72 69 74 65 45 76 | 65 6e 74 00 6d 00 45 78 |IWriteEv|ent.m.Ex|
|00000230| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00000240| 54 61 67 00 7e 07 6d 65 | 6d 63 70 79 00 00 80 07 |Tag.~.me|mcpy....|
|00000250| 6d 65 6d 73 65 74 00 00 | 8a 03 4d 6d 47 65 74 53 |memset..|..MmGetS|
|00000260| 79 73 74 65 6d 52 6f 75 | 74 69 6e 65 41 64 64 72 |ystemRou|tineAddr|
|00000270| 65 73 73 00 5f 05 52 74 | 6c 49 6e 69 74 55 6e 69 |ess._.Rt|lInitUni|
|00000280| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 ef 04 52 74 |codeStri|ng....Rt|
|00000290| 6c 43 6f 6d 70 61 72 65 | 4d 65 6d 6f 72 79 00 00 |lCompare|Memory..|
|000002a0| 89 02 49 6f 57 4d 49 52 | 65 67 69 73 74 72 61 74 |..IoWMIR|egistrat|
|000002b0| 69 6f 6e 43 6f 6e 74 72 | 6f 6c 00 00 95 02 49 6f |ionContr|ol....Io|
|000002c0| 66 43 61 6c 6c 44 72 69 | 76 65 72 00 96 02 49 6f |fCallDri|ver...Io|
|000002d0| 66 43 6f 6d 70 6c 65 74 | 65 52 65 71 75 65 73 74 |fComplet|eRequest|
|000002e0| 00 00 2a 03 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |..*.KeSe|tEvent..|
|000002f0| ad 06 5a 77 43 6c 6f 73 | 65 00 d3 06 5a 77 46 73 |..ZwClos|e...ZwFs|
|00000300| 43 6f 6e 74 72 6f 6c 46 | 69 6c 65 00 e4 06 5a 77 |ControlF|ile...Zw|
|00000310| 4f 70 65 6e 46 69 6c 65 | 00 00 48 03 4b 65 57 61 |OpenFile|..H.KeWa|
|00000320| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|00000330| 74 00 bb 01 49 6f 42 75 | 69 6c 64 44 65 76 69 63 |t...IoBu|ildDevic|
|00000340| 65 49 6f 43 6f 6e 74 72 | 6f 6c 52 65 71 75 65 73 |eIoContr|olReques|
|00000350| 74 00 d9 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |t...KeIn|itialize|
|00000360| 45 76 65 6e 74 00 41 04 | 4f 62 66 44 65 72 65 66 |Event.A.|ObfDeref|
|00000370| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 00 02 |erenceOb|ject....|
|00000380| 49 6f 47 65 74 41 74 74 | 61 63 68 65 64 44 65 76 |IoGetAtt|achedDev|
|00000390| 69 63 65 52 65 66 65 72 | 65 6e 63 65 00 00 f5 01 |iceRefer|ence....|
|000003a0| 49 6f 46 69 6c 65 4f 62 | 6a 65 63 74 54 79 70 65 |IoFileOb|jectType|
|000003b0| 00 00 dd 06 5a 77 4d 61 | 70 56 69 65 77 4f 66 53 |....ZwMa|pViewOfS|
|000003c0| 65 63 74 69 6f 6e 00 00 | bb 06 5a 77 43 72 65 61 |ection..|..ZwCrea|
|000003d0| 74 65 53 65 63 74 69 6f | 6e 00 68 05 52 74 6c 49 |teSectio|n.h.RtlI|
|000003e0| 6e 73 65 72 74 45 6c 65 | 6d 65 6e 74 47 65 6e 65 |nsertEle|mentGene|
|000003f0| 72 69 63 54 61 62 6c 65 | 41 76 6c 00 15 07 5a 77 |ricTable|Avl...Zw|
|00000400| 51 75 65 72 79 56 6f 6c | 75 6d 65 49 6e 66 6f 72 |QueryVol|umeInfor|
|00000410| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 63 05 52 74 |mationFi|le..c.Rt|
|00000420| 6c 49 6e 69 74 69 61 6c | 69 7a 65 47 65 6e 65 72 |lInitial|izeGener|
|00000430| 69 63 54 61 62 6c 65 41 | 76 6c 00 00 40 07 5a 77 |icTableA|vl..@.Zw|
|00000440| 55 6e 6d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |UnmapVie|wOfSecti|
|00000450| 6f 6e 00 00 9a 05 52 74 | 6c 4c 6f 6f 6b 75 70 45 |on....Rt|lLookupE|
|00000460| 6c 65 6d 65 6e 74 47 65 | 6e 65 72 69 63 54 61 62 |lementGe|nericTab|
|00000470| 6c 65 41 76 6c 00 78 03 | 4d 6d 42 75 69 6c 64 4d |leAvl.x.|MmBuildM|
|00000480| 64 6c 46 6f 72 4e 6f 6e | 50 61 67 65 64 50 6f 6f |dlForNon|PagedPoo|
|00000490| 6c 00 fb 01 49 6f 46 72 | 65 65 4d 64 6c 00 ae 01 |l...IoFr|eeMdl...|
|000004a0| 49 6f 41 6c 6c 6f 63 61 | 74 65 49 72 70 00 af 01 |IoAlloca|teIrp...|
|000004b0| 49 6f 41 6c 6c 6f 63 61 | 74 65 4d 64 6c 00 fa 01 |IoAlloca|teMdl...|
|000004c0| 49 6f 46 72 65 65 49 72 | 70 00 16 07 5a 77 52 65 |IoFreeIr|p...ZwRe|
|000004d0| 61 64 46 69 6c 65 00 00 | 9b 03 4d 6d 4d 61 70 4c |adFile..|..MmMapL|
|000004e0| 6f 63 6b 65 64 50 61 67 | 65 73 53 70 65 63 69 66 |ockedPag|esSpecif|
|000004f0| 79 43 61 63 68 65 00 00 | bc 01 49 6f 42 75 69 6c |yCache..|..IoBuil|
|00000500| 64 50 61 72 74 69 61 6c | 4d 64 6c 00 49 07 5f 61 |dPartial|Mdl.I._a|
|00000510| 6c 6c 64 69 76 00 4f 07 | 5f 61 6c 6c 72 65 6d 00 |lldiv.O.|_allrem.|
|00000520| 51 07 5f 61 6c 6c 73 68 | 72 00 fe 03 4e 74 51 75 |Q._allsh|r...NtQu|
|00000530| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |eryInfor|mationFi|
|00000540| 6c 65 00 00 22 02 49 6f | 49 6e 76 61 6c 69 64 61 |le..".Io|Invalida|
|00000550| 74 65 44 65 76 69 63 65 | 52 65 6c 61 74 69 6f 6e |teDevice|Relation|
|00000560| 73 00 e6 01 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |s...IoDe|leteDevi|
|00000570| 63 65 00 00 de 03 4e 74 | 44 75 70 6c 69 63 61 74 |ce....Nt|Duplicat|
|00000580| 65 4f 62 6a 65 63 74 00 | 70 04 50 73 47 65 74 43 |eObject.|p.PsGetC|
|00000590| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 34 04 |urrentPr|ocess.4.|
|000005a0| 4f 62 4f 70 65 6e 4f 62 | 6a 65 63 74 42 79 50 6f |ObOpenOb|jectByPo|
|000005b0| 69 6e 74 65 72 00 ab 00 | 45 78 51 75 65 75 65 57 |inter...|ExQueueW|
|000005c0| 6f 72 6b 49 74 65 6d 00 | 42 04 4f 62 66 52 65 66 |orkItem.|B.ObfRef|
|000005d0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 3c 00 |erenceOb|ject..<.|
|000005e0| 44 62 67 50 72 69 6e 74 | 00 00 e9 01 49 6f 44 65 |DbgPrint|....IoDe|
|000005f0| 74 61 63 68 44 65 76 69 | 63 65 00 00 49 04 50 6f |tachDevi|ce..I.Po|
|00000600| 43 61 6c 6c 44 72 69 76 | 65 72 00 00 5c 04 50 6f |CallDriv|er..\.Po|
|00000610| 53 74 61 72 74 4e 65 78 | 74 50 6f 77 65 72 49 72 |StartNex|tPowerIr|
|00000620| 70 00 1e 03 4b 65 52 65 | 73 65 74 45 76 65 6e 74 |p...KeRe|setEvent|
|00000630| 00 00 69 04 50 73 43 72 | 65 61 74 65 53 79 73 74 |..i.PsCr|eateSyst|
|00000640| 65 6d 54 68 72 65 61 64 | 00 00 b8 01 49 6f 41 74 |emThread|....IoAt|
|00000650| 74 61 63 68 44 65 76 69 | 63 65 54 6f 44 65 76 69 |tachDevi|ceToDevi|
|00000660| 63 65 53 74 61 63 6b 00 | 3f 03 4b 65 54 69 63 6b |ceStack.|?.KeTick|
|00000670| 43 6f 75 6e 74 00 b3 02 | 4b 65 42 75 67 43 68 65 |Count...|KeBugChe|
|00000680| 63 6b 45 78 00 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |ckEx..nt|oskrnl.e|
|00000690| 78 65 00 00 5f 00 4b 66 | 52 65 6c 65 61 73 65 53 |xe.._.Kf|ReleaseS|
|000006a0| 70 69 6e 4c 6f 63 6b 00 | 5c 00 4b 66 41 63 71 75 |pinLock.|\.KfAcqu|
|000006b0| 69 72 65 53 70 69 6e 4c | 6f 63 6b 00 48 41 4c 2e |ireSpinL|ock.HAL.|
|000006c0| 64 6c 6c 00 53 07 5f 61 | 75 6c 6c 64 76 72 6d 00 |dll.S._a|ulldvrm.|
|000006d0| d9 04 52 74 6c 41 6e 73 | 69 43 68 61 72 54 6f 55 |..RtlAns|iCharToU|
|000006e0| 6e 69 63 6f 64 65 43 68 | 61 72 00 00 34 07 5a 77 |nicodeCh|ar..4.Zw|
|000006f0| 53 65 74 53 65 63 75 72 | 69 74 79 4f 62 6a 65 63 |SetSecur|ityObjec|
|00000700| 74 00 ec 01 49 6f 44 65 | 76 69 63 65 4f 62 6a 65 |t...IoDe|viceObje|
|00000710| 63 74 54 79 70 65 00 00 | d1 01 49 6f 43 72 65 61 |ctType..|..IoCrea|
|00000720| 74 65 44 65 76 69 63 65 | 00 00 46 05 52 74 6c 47 |teDevice|..F.RtlG|
|00000730| 65 74 44 61 63 6c 53 65 | 63 75 72 69 74 79 44 65 |etDaclSe|curityDe|
|00000740| 73 63 72 69 70 74 6f 72 | 00 00 51 05 52 74 6c 47 |scriptor|..Q.RtlG|
|00000750| 65 74 53 61 63 6c 53 65 | 63 75 72 69 74 79 44 65 |etSaclSe|curityDe|
|00000760| 73 63 72 69 70 74 6f 72 | 00 00 4b 05 52 74 6c 47 |scriptor|..K.RtlG|
|00000770| 65 74 47 72 6f 75 70 53 | 65 63 75 72 69 74 79 44 |etGroupS|ecurityD|
|00000780| 65 73 63 72 69 70 74 6f | 72 00 4f 05 52 74 6c 47 |escripto|r.O.RtlG|
|00000790| 65 74 4f 77 6e 65 72 53 | 65 63 75 72 69 74 79 44 |etOwnerS|ecurityD|
|000007a0| 65 73 63 72 69 70 74 6f | 72 00 5f 07 5f 73 6e 77 |escripto|r._._snw|
|000007b0| 70 72 69 6e 74 66 00 00 | 94 05 52 74 6c 4c 65 6e |printf..|..RtlLen|
|000007c0| 67 74 68 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |gthSecur|ityDescr|
|000007d0| 69 70 74 6f 72 00 1f 06 | 53 65 43 61 70 74 75 72 |iptor...|SeCaptur|
|000007e0| 65 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |eSecurit|yDescrip|
|000007f0| 74 6f 72 00 2e 06 53 65 | 45 78 70 6f 72 74 73 00 |tor...Se|Exports.|
|00000800| 29 02 49 6f 49 73 57 64 | 6d 56 65 72 73 69 6f 6e |).IoIsWd|mVersion|
|00000810| 41 76 61 69 6c 61 62 6c | 65 00 6e 07 5f 77 63 73 |Availabl|e.n._wcs|
|00000820| 6e 69 63 6d 70 00 d3 04 | 52 74 6c 41 64 64 41 63 |nicmp...|RtlAddAc|
|00000830| 63 65 73 73 41 6c 6c 6f | 77 65 64 41 63 65 00 00 |cessAllo|wedAce..|
|00000840| 95 05 52 74 6c 4c 65 6e | 67 74 68 53 69 64 00 00 |..RtlLen|gthSid..|
|00000850| 9a 07 77 63 73 63 68 72 | 00 00 d2 04 52 74 6c 41 |..wcschr|....RtlA|
|00000860| 62 73 6f 6c 75 74 65 54 | 6f 53 65 6c 66 52 65 6c |bsoluteT|oSelfRel|
|00000870| 61 74 69 76 65 53 44 00 | cd 05 52 74 6c 53 65 74 |ativeSD.|..RtlSet|
|00000880| 44 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |DaclSecu|rityDesc|
|00000890| 72 69 70 74 6f 72 00 00 | 04 05 52 74 6c 43 72 65 |riptor..|..RtlCre|
|000008a0| 61 74 65 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ateSecur|ityDescr|
|000008b0| 69 70 74 6f 72 00 e6 06 | 5a 77 4f 70 65 6e 4b 65 |iptor...|ZwOpenKe|
|000008c0| 79 00 b8 06 5a 77 43 72 | 65 61 74 65 4b 65 79 00 |y...ZwCr|eateKey.|
|000008d0| 13 07 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |..ZwQuer|yValueKe|
|000008e0| 79 00 38 07 5a 77 53 65 | 74 56 61 6c 75 65 4b 65 |y.8.ZwSe|tValueKe|
|000008f0| 79 00 40 05 52 74 6c 46 | 72 65 65 55 6e 69 63 6f |y.@.RtlF|reeUnico|
|00000900| 64 65 53 74 72 69 6e 67 | 00 00 00 00 00 00 00 00 |deString|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+