home *** CD-ROM | disk | FTP | other *** search
Unknown | 2000-08-24 | 1.8 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 55 8b ec 83 ec 18 c7 45 | fc 01 00 00 c0 6a 14 e8 |U......E|.....j..|
|00000010| 5c 95 ff ff 89 45 f8 83 | 7d f8 00 74 15 8b 45 0c |\....E..|}..t..E.|
|00000020| 50 8b 4d 08 51 8b 4d f8 | e8 e3 cf ff ff 89 45 ec |P.M.Q.M.|......E.|
|00000030| eb 07 c7 45 ec 00 00 00 | 00 8b 55 ec 89 15 9c 6f |...E....|..U....o|
|00000040| 01 00 83 3d 9c 6f 01 00 | 00 74 3e 8b 0d 9c 6f 01 |...=.o..|.t>...o.|
|00000050| 00 e8 8a 9f ff ff 89 45 | fc 83 7d fc 00 7d 2a a1 |.......E|..}..}*.|
|00000060| 9c 6f 01 00 89 45 f0 8b | 4d f0 89 4d f4 83 7d f4 |.o...E..|M..M..}.|
|00000070| 00 74 0f 6a 01 8b 4d f4 | e8 73 9f ff ff 89 45 e8 |.t.j..M.|.s....E.|
|00000080| eb 07 c7 45 e8 00 00 00 | 00 8b 55 08 c7 42 34 00 |...E....|..U..B4.|
|00000090| 00 00 00 8b 45 fc 8b e5 | 5d c2 08 00 00 71 00 00 |....E...|]....q..|
|000000a0| 00 00 00 00 00 00 00 00 | 8c 72 00 00 94 02 00 00 |........|.r......|
|000000b0| 1c 71 00 00 00 00 00 00 | 00 00 00 00 6c 76 00 00 |.q......|....lv..|
|000000c0| b0 02 00 00 ec 70 00 00 | 00 00 00 00 00 00 00 00 |.....p..|........|
|000000d0| da 76 00 00 80 02 00 00 | 00 00 00 00 00 00 00 00 |.v......|........|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 c6 76 00 00 |........|.....v..|
|000000f0| 9c 76 00 00 b2 76 00 00 | 86 76 00 00 00 00 00 00 |.v...v..|.v......|
|00000100| 6e 72 00 00 56 72 00 00 | 38 72 00 00 f8 71 00 00 |nr..Vr..|8r...q..|
|00000110| 0c 72 00 00 22 72 00 00 | 00 00 00 00 1a 73 00 00 |.r.."r..|.....s..|
|00000120| 2a 73 00 00 34 73 00 00 | 08 73 00 00 f0 72 00 00 |*s..4s..|.s...r..|
|00000130| 4c 73 00 00 80 73 00 00 | 98 73 00 00 ae 73 00 00 |Ls...s..|.s...s..|
|00000140| c6 73 00 00 d4 73 00 00 | 64 73 00 00 ec 73 00 00 |.s...s..|ds...s..|
|00000150| 00 74 00 00 0a 74 00 00 | 14 74 00 00 20 74 00 00 |.t...t..|.t.. t..|
|00000160| 2c 74 00 00 36 74 00 00 | 42 74 00 00 62 74 00 00 |,t..6t..|Bt..bt..|
|00000170| 72 74 00 00 7c 74 00 00 | 8a 74 00 00 96 74 00 00 |rt..|t..|.t...t..|
|00000180| f6 73 00 00 06 75 00 00 | c8 74 00 00 d2 74 00 00 |.s...u..|.t...t..|
|00000190| f2 74 00 00 d8 72 00 00 | 16 75 00 00 30 75 00 00 |.t...r..|.u..0u..|
|000001a0| 46 75 00 00 5a 75 00 00 | 64 75 00 00 6e 75 00 00 |Fu..Zu..|du..nu..|
|000001b0| 88 75 00 00 a0 75 00 00 | b6 75 00 00 d0 75 00 00 |.u...u..|.u...u..|
|000001c0| e8 75 00 00 00 76 00 00 | 0e 76 00 00 2c 76 00 00 |.u...v..|.v..,v..|
|000001d0| 38 76 00 00 4a 76 00 00 | 5c 76 00 00 7a 76 00 00 |8v..Jv..|\v..zv..|
|000001e0| c6 72 00 00 ae 72 00 00 | 9a 72 00 00 a0 74 00 00 |.r...r..|.r...t..|
|000001f0| b0 74 00 00 00 00 00 00 | 00 00 45 76 65 6e 74 4f |.t......|..EventO|
|00000200| 62 6a 65 63 74 43 72 65 | 61 74 65 00 01 00 45 76 |bjectCre|ate...Ev|
|00000210| 65 6e 74 4f 62 6a 65 63 | 74 44 65 73 74 72 6f 79 |entObjec|tDestroy|
|00000220| 00 00 13 00 53 59 4d 45 | 76 65 6e 74 5f 4f 70 65 |....SYME|vent_Ope|
|00000230| 72 61 74 69 6f 6e 00 00 | 03 00 53 59 4d 45 76 65 |ration..|..SYMEve|
|00000240| 6e 74 5f 41 6c 6c 6f 63 | 4f 70 65 6e 46 69 6c 65 |nt_Alloc|OpenFile|
|00000250| 44 61 74 61 00 00 0f 00 | 53 59 4d 45 76 65 6e 74 |Data....|SYMEvent|
|00000260| 5f 47 65 74 5f 56 65 72 | 73 69 6f 6e 00 00 08 00 |_Get_Ver|sion....|
|00000270| 53 59 4d 45 76 65 6e 74 | 5f 47 65 74 4f 70 65 6e |SYMEvent|_GetOpen|
|00000280| 46 69 6c 65 44 61 74 61 | 50 74 72 00 53 59 4d 45 |FileData|Ptr.SYME|
|00000290| 56 45 4e 54 2e 53 59 53 | 00 00 70 01 4b 65 49 6e |VENT.SYS|..p.KeIn|
|000002a0| 69 74 69 61 6c 69 7a 65 | 45 76 65 6e 74 00 d0 02 |itialize|Event...|
|000002b0| 52 74 6c 49 6e 69 74 55 | 6e 69 63 6f 64 65 53 74 |RtlInitU|nicodeSt|
|000002c0| 72 69 6e 67 00 00 fb 00 | 49 6f 44 65 6c 65 74 65 |ring....|IoDelete|
|000002d0| 44 65 76 69 63 65 00 00 | fc 00 49 6f 44 65 6c 65 |Device..|..IoDele|
|000002e0| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|000002f0| f7 00 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |..IoCrea|teSymbol|
|00000300| 69 63 4c 69 6e 6b 00 00 | f3 00 49 6f 43 72 65 61 |icLink..|..IoCrea|
|00000310| 74 65 44 65 76 69 63 65 | 00 00 44 01 49 6f 66 43 |teDevice|..D.IofC|
|00000320| 61 6c 6c 44 72 69 76 65 | 72 00 ce 03 6d 65 6d 6d |allDrive|r...memm|
|00000330| 6f 76 65 00 d9 00 49 6e | 74 65 72 6c 6f 63 6b 65 |ove...In|terlocke|
|00000340| 64 49 6e 63 72 65 6d 65 | 6e 74 00 00 80 01 4b 65 |dIncreme|nt....Ke|
|00000350| 4c 65 61 76 65 43 72 69 | 74 69 63 61 6c 52 65 67 |LeaveCri|ticalReg|
|00000360| 69 6f 6e 00 32 01 49 6f | 53 65 74 54 68 72 65 61 |ion.2.Io|SetThrea|
|00000370| 64 48 61 72 64 45 72 72 | 6f 72 4d 6f 64 65 00 00 |dHardErr|orMode..|
|00000380| 5b 01 4b 65 45 6e 74 65 | 72 43 72 69 74 69 63 61 |[.KeEnte|rCritica|
|00000390| 6c 52 65 67 69 6f 6e 00 | 45 01 49 6f 66 43 6f 6d |lRegion.|E.IofCom|
|000003a0| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 d6 00 |pleteReq|uest....|
|000003b0| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 44 65 63 72 65 |Interloc|kedDecre|
|000003c0| 6d 65 6e 74 00 00 a2 01 | 4b 65 53 65 74 45 76 65 |ment....|KeSetEve|
|000003d0| 6e 74 00 00 b8 01 4b 65 | 57 61 69 74 46 6f 72 53 |nt....Ke|WaitForS|
|000003e0| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 e6 03 77 63 |ingleObj|ect...wc|
|000003f0| 73 63 68 72 00 00 e5 03 | 77 63 73 63 61 74 00 00 |schr....|wcscat..|
|00000400| e8 03 77 63 73 63 70 79 | 00 00 5b 03 5a 77 43 6c |..wcscpy|..[.ZwCl|
|00000410| 6f 73 65 00 df 03 73 77 | 70 72 69 6e 74 66 00 00 |ose...sw|printf..|
|00000420| bc 03 5f 77 63 73 69 63 | 6d 70 00 00 ea 03 77 63 |.._wcsic|mp....wc|
|00000430| 73 6c 65 6e 00 00 b1 03 | 5f 70 75 72 65 63 61 6c |slen....|_purecal|
|00000440| 6c 00 8d 03 5a 77 51 75 | 65 72 79 56 6f 6c 75 6d |l...ZwQu|eryVolum|
|00000450| 65 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 46 69 6c 65 |eInforma|tionFile|
|00000460| 00 00 60 03 5a 77 43 72 | 65 61 74 65 46 69 6c 65 |..`.ZwCr|eateFile|
|00000470| 00 00 f0 03 77 63 73 73 | 74 72 00 00 78 03 5a 77 |....wcss|tr..x.Zw|
|00000480| 4f 70 65 6e 46 69 6c 65 | 00 00 be 03 5f 77 63 73 |OpenFile|...._wcs|
|00000490| 6e 69 63 6d 70 00 d5 03 | 73 74 72 63 68 72 00 00 |nicmp...|strchr..|
|000004a0| 57 02 50 73 47 65 74 56 | 65 72 73 69 6f 6e 00 00 |W.PsGetV|ersion..|
|000004b0| 82 03 5a 77 51 75 65 72 | 79 44 69 72 65 63 74 6f |..ZwQuer|yDirecto|
|000004c0| 72 79 46 69 6c 65 00 00 | ed 03 77 63 73 6e 63 70 |ryFile..|..wcsncp|
|000004d0| 79 00 0f 03 52 74 6c 55 | 6e 69 63 6f 64 65 53 74 |y...RtlU|nicodeSt|
|000004e0| 72 69 6e 67 54 6f 41 6e | 73 69 53 74 72 69 6e 67 |ringToAn|siString|
|000004f0| 00 00 82 02 52 74 6c 43 | 68 61 72 54 6f 49 6e 74 |....RtlC|harToInt|
|00000500| 65 67 65 72 00 00 e3 02 | 52 74 6c 4c 65 6e 67 74 |eger....|RtlLengt|
|00000510| 68 53 69 64 00 00 85 03 | 5a 77 51 75 65 72 79 49 |hSid....|ZwQueryI|
|00000520| 6e 66 6f 72 6d 61 74 69 | 6f 6e 54 6f 6b 65 6e 00 |nformati|onToken.|
|00000530| 7b 03 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 54 |{.ZwOpen|ProcessT|
|00000540| 6f 6b 65 6e 00 00 7f 03 | 5a 77 4f 70 65 6e 54 68 |oken....|ZwOpenTh|
|00000550| 72 65 61 64 54 6f 6b 65 | 6e 00 dc 03 73 74 72 72 |readToke|n...strr|
|00000560| 63 68 72 00 ec 03 77 63 | 73 6e 63 6d 70 00 89 02 |chr...wc|sncmp...|
|00000570| 52 74 6c 43 6f 6d 70 61 | 72 65 55 6e 69 63 6f 64 |RtlCompa|reUnicod|
|00000580| 65 53 74 72 69 6e 67 00 | 75 01 4b 65 49 6e 69 74 |eString.|u.KeInit|
|00000590| 69 61 6c 69 7a 65 53 65 | 6d 61 70 68 6f 72 65 00 |ializeSe|maphore.|
|000005a0| 93 01 4b 65 52 65 6c 65 | 61 73 65 53 65 6d 61 70 |..KeRele|aseSemap|
|000005b0| 68 6f 72 65 00 00 73 00 | 45 78 66 49 6e 74 65 72 |hore..s.|ExfInter|
|000005c0| 6c 6f 63 6b 65 64 41 64 | 64 55 6c 6f 6e 67 00 00 |lockedAd|dUlong..|
|000005d0| 36 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |6.ExAllo|catePool|
|000005e0| 57 69 74 68 54 61 67 00 | 76 01 4b 65 49 6e 69 74 |WithTag.|v.KeInit|
|000005f0| 69 61 6c 69 7a 65 53 70 | 69 6e 4c 6f 63 6b 00 00 |ializeSp|inLock..|
|00000600| 42 00 45 78 46 72 65 65 | 50 6f 6f 6c 00 00 d5 00 |B.ExFree|Pool....|
|00000610| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 43 6f 6d 70 61 |Interloc|kedCompa|
|00000620| 72 65 45 78 63 68 61 6e | 67 65 00 00 79 03 5a 77 |reExchan|ge..y.Zw|
|00000630| 4f 70 65 6e 4b 65 79 00 | 33 00 45 78 41 6c 6c 6f |OpenKey.|3.ExAllo|
|00000640| 63 61 74 65 50 6f 6f 6c | 00 00 8c 03 5a 77 51 75 |catePool|....ZwQu|
|00000650| 65 72 79 56 61 6c 75 65 | 4b 65 79 00 54 01 4b 65 |eryValue|Key.T.Ke|
|00000660| 43 6c 65 61 72 45 76 65 | 6e 74 00 00 6e 74 6f 73 |ClearEve|nt..ntos|
|00000670| 6b 72 6e 6c 2e 65 78 65 | 00 00 18 03 52 74 6c 55 |krnl.exe|....RtlU|
|00000680| 6e 77 69 6e 64 00 01 00 | 45 78 52 65 6c 65 61 73 |nwind...|ExReleas|
|00000690| 65 46 61 73 74 4d 75 74 | 65 78 00 00 00 00 45 78 |eFastMut|ex....Ex|
|000006a0| 41 63 71 75 69 72 65 46 | 61 73 74 4d 75 74 65 78 |AcquireF|astMutex|
|000006b0| 00 00 49 00 4b 66 52 65 | 6c 65 61 73 65 53 70 69 |..I.KfRe|leaseSpi|
|000006c0| 6e 4c 6f 63 6b 00 46 00 | 4b 66 41 63 71 75 69 72 |nLock.F.|KfAcquir|
|000006d0| 65 53 70 69 6e 4c 6f 63 | 6b 00 48 41 4c 2e 64 6c |eSpinLoc|k.HAL.dl|
|000006e0| 6c 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |l.......|........|
|000006f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+