home *** CD-ROM | disk | FTP | other *** search
Unknown | 2001-11-30 | 1.8 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 55 8b ec 83 ec 18 c7 45 | fc 01 00 00 c0 6a 14 e8 |U......E|.....j..|
|00000010| bc 96 ff ff 89 45 f8 83 | 7d f8 00 74 15 8b 45 0c |.....E..|}..t..E.|
|00000020| 50 8b 4d 08 51 8b 4d f8 | e8 73 cd ff ff 89 45 ec |P.M.Q.M.|.s....E.|
|00000030| eb 07 c7 45 ec 00 00 00 | 00 8b 55 ec 89 15 7c 75 |...E....|..U...|u|
|00000040| 01 00 83 3d 7c 75 01 00 | 00 74 3e 8b 0d 7c 75 01 |...=|u..|.t>..|u.|
|00000050| 00 e8 2a 9a ff ff 89 45 | fc 83 7d fc 00 7d 2a a1 |..*....E|..}..}*.|
|00000060| 7c 75 01 00 89 45 f0 8b | 4d f0 89 4d f4 83 7d f4 ||u...E..|M..M..}.|
|00000070| 00 74 0f 6a 01 8b 4d f4 | e8 13 9a ff ff 89 45 e8 |.t.j..M.|......E.|
|00000080| eb 07 c7 45 e8 00 00 00 | 00 8b 45 fc 8b e5 5d c2 |...E....|..E...].|
|00000090| 08 00 cc cc d8 76 00 00 | 00 00 00 00 00 00 00 00 |.....v..|........|
|000000a0| 74 78 00 00 b4 02 00 00 | f4 76 00 00 00 00 00 00 |tx......|.v......|
|000000b0| 00 00 00 00 b6 7c 00 00 | d0 02 00 00 c4 76 00 00 |.....|..|.....v..|
|000000c0| 00 00 00 00 00 00 00 00 | 24 7d 00 00 a0 02 00 00 |........|$}......|
|000000d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000e0| 00 00 00 00 d0 7c 00 00 | fc 7c 00 00 10 7d 00 00 |.....|..|.|...}..|
|000000f0| e6 7c 00 00 00 00 00 00 | f4 77 00 00 3e 78 00 00 |.|......|.w..>x..|
|00000100| 20 78 00 00 0a 78 00 00 | 56 78 00 00 e0 77 00 00 | x...x..|Vx...w..|
|00000110| 00 00 00 00 36 7b 00 00 | 02 79 00 00 12 79 00 00 |....6{..|.y...y..|
|00000120| 1c 79 00 00 34 79 00 00 | 4c 79 00 00 68 79 00 00 |.y..4y..|Ly..hy..|
|00000130| 80 79 00 00 96 79 00 00 | ae 79 00 00 bc 79 00 00 |.y...y..|.y...y..|
|00000140| d4 79 00 00 de 79 00 00 | e8 79 00 00 f2 79 00 00 |.y...y..|.y...y..|
|00000150| fc 79 00 00 06 7a 00 00 | 12 7a 00 00 1e 7a 00 00 |.y...z..|.z...z..|
|00000160| 3e 7a 00 00 4e 7a 00 00 | 58 7a 00 00 66 7a 00 00 |>z..Nz..|Xz..fz..|
|00000170| 72 7a 00 00 7c 7a 00 00 | 92 7a 00 00 a2 7a 00 00 |rz..|z..|.z...z..|
|00000180| d8 78 00 00 c4 7a 00 00 | ce 7a 00 00 ee 7a 00 00 |.x...z..|.z...z..|
|00000190| 0c 7b 00 00 22 7b 00 00 | f0 78 00 00 46 7b 00 00 |.{.."{..|.x..F{..|
|000001a0| 60 7b 00 00 76 7b 00 00 | 8a 7b 00 00 94 7b 00 00 |`{..v{..|.{...{..|
|000001b0| 9e 7b 00 00 b8 7b 00 00 | d0 7b 00 00 e6 7b 00 00 |.{...{..|.{...{..|
|000001c0| 00 7c 00 00 18 7c 00 00 | 30 7c 00 00 3e 7c 00 00 |.|...|..|0|..>|..|
|000001d0| 5c 7c 00 00 72 7c 00 00 | 7e 7c 00 00 90 7c 00 00 |\|..r|..|~|...|..|
|000001e0| a0 7c 00 00 c4 7c 00 00 | c0 78 00 00 ae 78 00 00 |.|...|..|.x...x..|
|000001f0| 96 78 00 00 82 78 00 00 | ba 7a 00 00 00 00 00 00 |.x...x..|.z......|
|00000200| 00 00 45 76 65 6e 74 4f | 62 6a 65 63 74 43 72 65 |..EventO|bjectCre|
|00000210| 61 74 65 00 01 00 45 76 | 65 6e 74 4f 62 6a 65 63 |ate...Ev|entObjec|
|00000220| 74 44 65 73 74 72 6f 79 | 00 00 13 00 53 59 4d 45 |tDestroy|....SYME|
|00000230| 76 65 6e 74 5f 4f 70 65 | 72 61 74 69 6f 6e 00 00 |vent_Ope|ration..|
|00000240| 03 00 53 59 4d 45 76 65 | 6e 74 5f 41 6c 6c 6f 63 |..SYMEve|nt_Alloc|
|00000250| 4f 70 65 6e 46 69 6c 65 | 44 61 74 61 00 00 0f 00 |OpenFile|Data....|
|00000260| 53 59 4d 45 76 65 6e 74 | 5f 47 65 74 5f 56 65 72 |SYMEvent|_Get_Ver|
|00000270| 73 69 6f 6e 00 00 08 00 | 53 59 4d 45 76 65 6e 74 |sion....|SYMEvent|
|00000280| 5f 47 65 74 4f 70 65 6e | 46 69 6c 65 44 61 74 61 |_GetOpen|FileData|
|00000290| 50 74 72 00 53 59 4d 45 | 56 45 4e 54 2e 53 59 53 |Ptr.SYME|VENT.SYS|
|000002a0| 00 00 70 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |..p.KeIn|itialize|
|000002b0| 45 76 65 6e 74 00 d0 02 | 52 74 6c 49 6e 69 74 55 |Event...|RtlInitU|
|000002c0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 fb 00 |nicodeSt|ring....|
|000002d0| 49 6f 44 65 6c 65 74 65 | 44 65 76 69 63 65 00 00 |IoDelete|Device..|
|000002e0| fc 00 49 6f 44 65 6c 65 | 74 65 53 79 6d 62 6f 6c |..IoDele|teSymbol|
|000002f0| 69 63 4c 69 6e 6b 00 00 | f7 00 49 6f 43 72 65 61 |icLink..|..IoCrea|
|00000300| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000310| f3 00 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |..IoCrea|teDevice|
|00000320| 00 00 44 01 49 6f 66 43 | 61 6c 6c 44 72 69 76 65 |..D.IofC|allDrive|
|00000330| 72 00 ce 03 6d 65 6d 6d | 6f 76 65 00 d9 00 49 6e |r...memm|ove...In|
|00000340| 74 65 72 6c 6f 63 6b 65 | 64 49 6e 63 72 65 6d 65 |terlocke|dIncreme|
|00000350| 6e 74 00 00 80 01 4b 65 | 4c 65 61 76 65 43 72 69 |nt....Ke|LeaveCri|
|00000360| 74 69 63 61 6c 52 65 67 | 69 6f 6e 00 32 01 49 6f |ticalReg|ion.2.Io|
|00000370| 53 65 74 54 68 72 65 61 | 64 48 61 72 64 45 72 72 |SetThrea|dHardErr|
|00000380| 6f 72 4d 6f 64 65 00 00 | 5b 01 4b 65 45 6e 74 65 |orMode..|[.KeEnte|
|00000390| 72 43 72 69 74 69 63 61 | 6c 52 65 67 69 6f 6e 00 |rCritica|lRegion.|
|000003a0| 45 01 49 6f 66 43 6f 6d | 70 6c 65 74 65 52 65 71 |E.IofCom|pleteReq|
|000003b0| 75 65 73 74 00 00 d6 00 | 49 6e 74 65 72 6c 6f 63 |uest....|Interloc|
|000003c0| 6b 65 64 44 65 63 72 65 | 6d 65 6e 74 00 00 a2 01 |kedDecre|ment....|
|000003d0| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 b8 01 4b 65 |KeSetEve|nt....Ke|
|000003e0| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|000003f0| 65 63 74 00 e6 03 77 63 | 73 63 68 72 00 00 e5 03 |ect...wc|schr....|
|00000400| 77 63 73 63 61 74 00 00 | e8 03 77 63 73 63 70 79 |wcscat..|..wcscpy|
|00000410| 00 00 ea 03 77 63 73 6c | 65 6e 00 00 5b 03 5a 77 |....wcsl|en..[.Zw|
|00000420| 43 6c 6f 73 65 00 df 03 | 73 77 70 72 69 6e 74 66 |Close...|swprintf|
|00000430| 00 00 bc 03 5f 77 63 73 | 69 63 6d 70 00 00 8d 03 |...._wcs|icmp....|
|00000440| 5a 77 51 75 65 72 79 56 | 6f 6c 75 6d 65 49 6e 66 |ZwQueryV|olumeInf|
|00000450| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 60 03 |ormation|File..`.|
|00000460| 5a 77 43 72 65 61 74 65 | 46 69 6c 65 00 00 f0 03 |ZwCreate|File....|
|00000470| 77 63 73 73 74 72 00 00 | 78 03 5a 77 4f 70 65 6e |wcsstr..|x.ZwOpen|
|00000480| 46 69 6c 65 00 00 be 03 | 5f 77 63 73 6e 69 63 6d |File....|_wcsnicm|
|00000490| 70 00 d5 03 73 74 72 63 | 68 72 00 00 0c 01 49 6f |p...strc|hr....Io|
|000004a0| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|000004b0| 73 00 57 02 50 73 47 65 | 74 56 65 72 73 69 6f 6e |s.W.PsGe|tVersion|
|000004c0| 00 00 82 03 5a 77 51 75 | 65 72 79 44 69 72 65 63 |....ZwQu|eryDirec|
|000004d0| 74 6f 72 79 46 69 6c 65 | 00 00 ed 03 77 63 73 6e |toryFile|....wcsn|
|000004e0| 63 70 79 00 eb 03 77 63 | 73 6e 63 61 74 00 0f 03 |cpy...wc|sncat...|
|000004f0| 52 74 6c 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |RtlUnico|deString|
|00000500| 54 6f 41 6e 73 69 53 74 | 72 69 6e 67 00 00 2a 03 |ToAnsiSt|ring..*.|
|00000510| 52 74 6c 78 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |RtlxUnic|odeStrin|
|00000520| 67 54 6f 41 6e 73 69 53 | 69 7a 65 00 00 02 4e 6c |gToAnsiS|ize...Nl|
|00000530| 73 4d 62 4f 65 6d 43 6f | 64 65 50 61 67 65 54 61 |sMbOemCo|dePageTa|
|00000540| 67 00 82 02 52 74 6c 43 | 68 61 72 54 6f 49 6e 74 |g...RtlC|harToInt|
|00000550| 65 67 65 72 00 00 e3 02 | 52 74 6c 4c 65 6e 67 74 |eger....|RtlLengt|
|00000560| 68 53 69 64 00 00 85 03 | 5a 77 51 75 65 72 79 49 |hSid....|ZwQueryI|
|00000570| 6e 66 6f 72 6d 61 74 69 | 6f 6e 54 6f 6b 65 6e 00 |nformati|onToken.|
|00000580| 7b 03 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 54 |{.ZwOpen|ProcessT|
|00000590| 6f 6b 65 6e 00 00 7f 03 | 5a 77 4f 70 65 6e 54 68 |oken....|ZwOpenTh|
|000005a0| 72 65 61 64 54 6f 6b 65 | 6e 00 dc 03 73 74 72 72 |readToke|n...strr|
|000005b0| 63 68 72 00 ec 03 77 63 | 73 6e 63 6d 70 00 89 02 |chr...wc|sncmp...|
|000005c0| 52 74 6c 43 6f 6d 70 61 | 72 65 55 6e 69 63 6f 64 |RtlCompa|reUnicod|
|000005d0| 65 53 74 72 69 6e 67 00 | 75 01 4b 65 49 6e 69 74 |eString.|u.KeInit|
|000005e0| 69 61 6c 69 7a 65 53 65 | 6d 61 70 68 6f 72 65 00 |ializeSe|maphore.|
|000005f0| 93 01 4b 65 52 65 6c 65 | 61 73 65 53 65 6d 61 70 |..KeRele|aseSemap|
|00000600| 68 6f 72 65 00 00 73 00 | 45 78 66 49 6e 74 65 72 |hore..s.|ExfInter|
|00000610| 6c 6f 63 6b 65 64 41 64 | 64 55 6c 6f 6e 67 00 00 |lockedAd|dUlong..|
|00000620| 36 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |6.ExAllo|catePool|
|00000630| 57 69 74 68 54 61 67 00 | 76 01 4b 65 49 6e 69 74 |WithTag.|v.KeInit|
|00000640| 69 61 6c 69 7a 65 53 70 | 69 6e 4c 6f 63 6b 00 00 |ializeSp|inLock..|
|00000650| 42 00 45 78 46 72 65 65 | 50 6f 6f 6c 00 00 d5 00 |B.ExFree|Pool....|
|00000660| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 43 6f 6d 70 61 |Interloc|kedCompa|
|00000670| 72 65 45 78 63 68 61 6e | 67 65 00 00 d7 00 49 6e |reExchan|ge....In|
|00000680| 74 65 72 6c 6f 63 6b 65 | 64 45 78 63 68 61 6e 67 |terlocke|dExchang|
|00000690| 65 00 79 03 5a 77 4f 70 | 65 6e 4b 65 79 00 8c 03 |e.y.ZwOp|enKey...|
|000006a0| 5a 77 51 75 65 72 79 56 | 61 6c 75 65 4b 65 79 00 |ZwQueryV|alueKey.|
|000006b0| 54 01 4b 65 43 6c 65 61 | 72 45 76 65 6e 74 00 00 |T.KeClea|rEvent..|
|000006c0| 60 01 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |`.KeGetC|urrentTh|
|000006d0| 72 65 61 64 00 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |read..nt|oskrnl.e|
|000006e0| 78 65 00 00 18 03 52 74 | 6c 55 6e 77 69 6e 64 00 |xe....Rt|lUnwind.|
|000006f0| 01 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|00000700| 75 74 65 78 00 00 00 00 | 45 78 41 63 71 75 69 72 |utex....|ExAcquir|
|00000710| 65 46 61 73 74 4d 75 74 | 65 78 00 00 49 00 4b 66 |eFastMut|ex..I.Kf|
|00000720| 52 65 6c 65 61 73 65 53 | 70 69 6e 4c 6f 63 6b 00 |ReleaseS|pinLock.|
|00000730| 46 00 4b 66 41 63 71 75 | 69 72 65 53 70 69 6e 4c |F.KfAcqu|ireSpinL|
|00000740| 6f 63 6b 00 48 41 4c 2e | 64 6c 6c 00 00 00 00 00 |ock.HAL.|dll.....|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+