home *** CD-ROM | disk | FTP | other *** search
Unknown | 2009-05-13 | 1.3 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 80 22 01 00 85 |.......U|...."...|
|00000010| c0 b9 4e e6 40 bb 74 04 | 3b c1 75 1a a1 1c 21 01 |..N.@.t.|;.u...!.|
|00000020| 00 8b 00 35 80 22 01 00 | a3 80 22 01 00 75 07 8b |...5."..|.."..u..|
|00000030| c1 a3 80 22 01 00 f7 d0 | a3 84 22 01 00 5d e9 4d |..."....|.."..].M|
|00000040| e2 ff ff cc 90 23 00 00 | 00 00 00 00 00 00 00 00 |.....#..|........|
|00000050| 56 27 00 00 90 20 00 00 | 80 23 00 00 00 00 00 00 |V'... ..|.#......|
|00000060| 00 00 00 00 ac 27 00 00 | 80 20 00 00 00 00 00 00 |.....'..|. ......|
|00000070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000080| 80 27 00 00 64 27 00 00 | 96 27 00 00 00 00 00 00 |.'..d'..|.'......|
|00000090| 84 24 00 00 9c 24 00 00 | b2 24 00 00 c6 24 00 00 |.$...$..|.$...$..|
|000000a0| d6 24 00 00 e0 24 00 00 | fc 24 00 00 10 25 00 00 |.$...$..|.$...%..|
|000000b0| 26 25 00 00 3c 25 00 00 | 48 25 00 00 68 25 00 00 |&%..<%..|H%..h%..|
|000000c0| 80 25 00 00 98 25 00 00 | a6 25 00 00 ae 25 00 00 |.%...%..|.%...%..|
|000000d0| c6 25 00 00 d2 25 00 00 | 72 24 00 00 fe 25 00 00 |.%...%..|r$...%..|
|000000e0| 1a 26 00 00 2c 26 00 00 | 3a 26 00 00 52 26 00 00 |.&..,&..|:&..R&..|
|000000f0| 66 26 00 00 82 26 00 00 | 96 26 00 00 a8 26 00 00 |f&...&..|.&...&..|
|00000100| be 26 00 00 c8 26 00 00 | da 26 00 00 e6 26 00 00 |.&...&..|.&...&..|
|00000110| f6 26 00 00 02 27 00 00 | 1c 27 00 00 38 27 00 00 |.&...'..|.'..8'..|
|00000120| 46 27 00 00 66 24 00 00 | 4e 24 00 00 ee 25 00 00 |F'..f$..|N$...%..|
|00000130| 3c 24 00 00 b4 27 00 00 | 00 00 00 00 4e 01 49 6f |<$...'..|....N.Io|
|00000140| 44 65 6c 65 74 65 44 65 | 76 69 63 65 00 00 46 01 |DeleteDe|vice..F.|
|00000150| 49 6f 43 72 65 61 74 65 | 53 79 6d 62 6f 6c 69 63 |IoCreate|Symbolic|
|00000160| 4c 69 6e 6b 00 00 30 00 | 44 62 67 50 72 69 6e 74 |Link..0.|DbgPrint|
|00000170| 00 00 3d 01 49 6f 43 72 | 65 61 74 65 44 65 76 69 |..=.IoCr|eateDevi|
|00000180| 63 65 00 00 19 04 52 74 | 6c 49 6e 69 74 55 6e 69 |ce....Rt|lInitUni|
|00000190| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 04 02 4b 65 |codeStri|ng....Ke|
|000001a0| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|000001b0| 00 00 15 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |....KeIn|itialize|
|000001c0| 45 76 65 6e 74 00 f6 01 | 4b 65 43 6c 65 61 72 45 |Event...|KeClearE|
|000001d0| 76 65 6e 74 00 00 07 05 | 5a 77 43 6c 6f 73 65 00 |vent....|ZwClose.|
|000001e0| 42 01 49 6f 43 72 65 61 | 74 65 4e 6f 74 69 66 69 |B.IoCrea|teNotifi|
|000001f0| 63 61 74 69 6f 6e 45 76 | 65 6e 74 00 4e 00 45 78 |cationEv|ent.N.Ex|
|00000200| 46 72 65 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |FreePool|WithTag.|
|00000210| 9b 02 4d 6d 46 72 65 65 | 50 61 67 65 73 46 72 6f |..MmFree|PagesFro|
|00000220| 6d 4d 64 6c 00 00 ca 02 | 4d 6d 55 6e 6d 61 70 4c |mMdl....|MmUnmapL|
|00000230| 6f 63 6b 65 64 50 61 67 | 65 73 00 00 68 04 52 74 |ockedPag|es..h.Rt|
|00000240| 6c 52 61 6e 64 6f 6d 00 | ad 02 4d 6d 4d 61 70 4c |lRandom.|..MmMapL|
|00000250| 6f 63 6b 65 64 50 61 67 | 65 73 53 70 65 63 69 66 |ockedPag|esSpecif|
|00000260| 79 43 61 63 68 65 00 00 | 8e 02 4d 6d 41 6c 6c 6f |yCache..|..MmAllo|
|00000270| 63 61 74 65 50 61 67 65 | 73 46 6f 72 4d 64 6c 00 |catePage|sForMdl.|
|00000280| 6a 02 4b 65 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |j.KeWait|ForSingl|
|00000290| 65 4f 62 6a 65 63 74 00 | 53 02 4b 65 53 65 74 45 |eObject.|S.KeSetE|
|000002a0| 76 65 6e 74 00 00 84 05 | 5f 69 74 6f 77 00 4f 03 |vent....|_itow.O.|
|000002b0| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|000002c0| 65 73 73 49 64 00 60 01 | 49 6f 46 72 65 65 4d 64 |essId.`.|IoFreeMd|
|000002d0| 6c 00 8f 02 4d 6d 42 75 | 69 6c 64 4d 64 6c 46 6f |l...MmBu|ildMdlFo|
|000002e0| 72 4e 6f 6e 50 61 67 65 | 64 50 6f 6f 6c 00 24 01 |rNonPage|dPool.$.|
|000002f0| 49 6f 41 6c 6c 6f 63 61 | 74 65 4d 64 6c 00 4f 02 |IoAlloca|teMdl.O.|
|00000300| 4b 65 53 65 72 76 69 63 | 65 44 65 73 63 72 69 70 |KeServic|eDescrip|
|00000310| 74 6f 72 54 61 62 6c 65 | 00 00 3e 00 45 78 41 6c |torTable|..>.ExAl|
|00000320| 6c 6f 63 61 74 65 50 6f | 6f 6c 00 00 2b 05 5a 77 |locatePo|ol..+.Zw|
|00000330| 4f 70 65 6e 46 69 6c 65 | 00 00 2c 03 4f 62 66 44 |OpenFile|..,.ObfD|
|00000340| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00000350| 00 00 22 03 4f 62 51 75 | 65 72 79 4e 61 6d 65 53 |..".ObQu|eryNameS|
|00000360| 74 72 69 6e 67 00 24 03 | 4f 62 52 65 66 65 72 65 |tring.$.|ObRefere|
|00000370| 6e 63 65 4f 62 6a 65 63 | 74 42 79 48 61 6e 64 6c |nceObjec|tByHandl|
|00000380| 65 00 5a 01 49 6f 46 69 | 6c 65 4f 62 6a 65 63 74 |e.Z.IoFi|leObject|
|00000390| 54 79 70 65 00 00 0f 05 | 5a 77 43 72 65 61 74 65 |Type....|ZwCreate|
|000003a0| 53 65 63 74 69 6f 6e 00 | e0 01 49 6f 66 43 6f 6d |Section.|..IofCom|
|000003b0| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 a3 05 |pleteReq|uest....|
|000003c0| 6d 65 6d 63 70 79 00 00 | 4d 05 5a 77 51 75 65 72 |memcpy..|M.ZwQuer|
|000003d0| 79 56 61 6c 75 65 4b 65 | 79 00 2d 05 5a 77 4f 70 |yValueKe|y.-.ZwOp|
|000003e0| 65 6e 4b 65 79 00 71 03 | 50 73 47 65 74 56 65 72 |enKey.q.|PsGetVer|
|000003f0| 73 69 6f 6e 00 00 92 05 | 5f 77 63 73 69 63 6d 70 |sion....|_wcsicmp|
|00000400| 00 00 63 04 52 74 6c 50 | 72 65 66 69 78 55 6e 69 |..c.RtlP|refixUni|
|00000410| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 43 05 5a 77 |codeStri|ng..C.Zw|
|00000420| 51 75 65 72 79 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |QueryInf|ormation|
|00000430| 50 72 6f 63 65 73 73 00 | 63 02 4b 65 54 69 63 6b |Process.|c.KeTick|
|00000440| 43 6f 75 6e 74 00 f3 01 | 4b 65 42 75 67 43 68 65 |Count...|KeBugChe|
|00000450| 63 6b 45 78 00 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |ckEx..nt|oskrnl.e|
|00000460| 78 65 00 00 42 00 4b 65 | 51 75 65 72 79 50 65 72 |xe..B.Ke|QueryPer|
|00000470| 66 6f 72 6d 61 6e 63 65 | 43 6f 75 6e 74 65 72 00 |formance|Counter.|
|00000480| 01 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|00000490| 75 74 65 78 00 00 00 00 | 45 78 41 63 71 75 69 72 |utex....|ExAcquir|
|000004a0| 65 46 61 73 74 4d 75 74 | 65 78 00 00 48 41 4c 2e |eFastMut|ex..HAL.|
|000004b0| 64 6c 6c 00 9c 04 52 74 | 6c 55 6e 77 69 6e 64 00 |dll...Rt|lUnwind.|
|000004c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+