home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-07-13 | 2.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 a8 20 03 00 85 |.......U|.... ...|
|00000010| c0 b9 4e e6 40 bb 74 04 | 3b c1 75 1e 8b 15 74 1a |..N.@.t.|;.u...t.|
|00000020| 03 00 b8 a8 20 03 00 c1 | e8 08 33 02 a3 a8 20 03 |.... ...|..3... .|
|00000030| 00 75 07 8b c1 a3 a8 20 | 03 00 f7 d0 a3 ac 20 03 |.u..... |...... .|
|00000040| 00 5d e9 bd de fd ff cc | 54 3d 02 00 00 00 00 00 |.]......|T=......|
|00000050| 00 00 00 00 82 43 02 00 | a8 19 02 00 2c 3d 02 00 |.....C..|....,=..|
|00000060| 00 00 00 00 00 00 00 00 | cc 43 02 00 80 19 02 00 |........|.C......|
|00000070| 3c 3d 02 00 00 00 00 00 | 00 00 00 00 2a 44 02 00 |<=......|....*D..|
|00000080| 90 19 02 00 4c 3d 02 00 | 00 00 00 00 00 00 00 00 |....L=..|........|
|00000090| 48 44 02 00 a0 19 02 00 | 00 00 00 00 00 00 00 00 |HD......|........|
|000000a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 a4 43 02 00 |........|.....C..|
|000000b0| b8 43 02 00 90 43 02 00 | 00 00 00 00 d4 43 02 00 |.C...C..|.....C..|
|000000c0| f2 43 02 00 0e 44 02 00 | 00 00 00 00 34 44 02 00 |.C...D..|....4D..|
|000000d0| 00 00 00 00 2e 3f 02 00 | 3e 3f 02 00 4c 3f 02 00 |.....?..|>?..L?..|
|000000e0| 60 3f 02 00 6c 3f 02 00 | 86 3f 02 00 a8 3f 02 00 |`?..l?..|.?...?..|
|000000f0| b4 3f 02 00 c2 3f 02 00 | da 3f 02 00 f2 3f 02 00 |.?...?..|.?...?..|
|00000100| fc 3f 02 00 14 40 02 00 | 2c 40 02 00 44 40 02 00 |.?...@..|,@..D@..|
|00000110| 58 40 02 00 62 40 02 00 | 7a 40 02 00 8a 40 02 00 |X@..b@..|z@...@..|
|00000120| a4 40 02 00 b0 40 02 00 | ba 40 02 00 ce 40 02 00 |.@...@..|.@...@..|
|00000130| e0 40 02 00 f8 40 02 00 | 0a 41 02 00 2a 41 02 00 |.@...@..|.A..*A..|
|00000140| 3e 41 02 00 14 3f 02 00 | 64 41 02 00 70 41 02 00 |>A...?..|dA..pA..|
|00000150| 80 41 02 00 96 41 02 00 | a6 41 02 00 b4 41 02 00 |.A...A..|.A...A..|
|00000160| ce 41 02 00 e2 41 02 00 | ec 41 02 00 0a 42 02 00 |.A...A..|.A...B..|
|00000170| 2c 42 02 00 44 42 02 00 | 5c 42 02 00 74 42 02 00 |,B..DB..|\B..tB..|
|00000180| 96 42 02 00 ae 42 02 00 | ca 42 02 00 d4 42 02 00 |.B...B..|.B...B..|
|00000190| ee 42 02 00 0c 43 02 00 | 28 43 02 00 44 43 02 00 |.B...C..|(C..DC..|
|000001a0| 64 43 02 00 72 43 02 00 | fa 3e 02 00 e4 3e 02 00 |dC..rC..|.>...>..|
|000001b0| d4 3e 02 00 b8 3e 02 00 | a0 3e 02 00 96 3e 02 00 |.>...>..|.>...>..|
|000001c0| 82 3e 02 00 6a 3e 02 00 | 54 41 02 00 60 3e 02 00 |.>..j>..|TA..`>..|
|000001d0| 50 44 02 00 5c 44 02 00 | 6c 44 02 00 00 00 00 00 |PD..\D..|lD......|
|000001e0| a4 04 6d 65 6d 73 65 74 | 00 00 3a 00 45 78 41 6c |..memset|..:.ExAl|
|000001f0| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 54 61 |locatePo|olWithTa|
|00000200| 67 00 48 00 45 78 46 72 | 65 65 50 6f 6f 6c 57 69 |g.H.ExFr|eePoolWi|
|00000210| 74 68 54 61 67 00 a3 04 | 6d 65 6d 6d 6f 76 65 00 |thTag...|memmove.|
|00000220| bd 02 4f 62 66 44 65 72 | 65 66 65 72 65 6e 63 65 |..ObfDer|eference|
|00000230| 4f 62 6a 65 63 74 00 00 | b8 02 4f 62 52 65 66 65 |Object..|..ObRefe|
|00000240| 72 65 6e 63 65 4f 62 6a | 65 63 74 42 79 48 61 6e |renceObj|ectByHan|
|00000250| 64 6c 65 00 96 01 49 6f | 66 43 61 6c 6c 44 72 69 |dle...Io|fCallDri|
|00000260| 76 65 72 00 97 01 49 6f | 66 43 6f 6d 70 6c 65 74 |ver...Io|fComplet|
|00000270| 65 52 65 71 75 65 73 74 | 00 00 6a 01 49 6f 52 65 |eRequest|..j.IoRe|
|00000280| 6c 65 61 73 65 43 61 6e | 63 65 6c 53 70 69 6e 4c |leaseCan|celSpinL|
|00000290| 6f 63 6b 00 fb 00 49 6f | 41 63 71 75 69 72 65 43 |ock...Io|AcquireC|
|000002a0| 61 6e 63 65 6c 53 70 69 | 6e 4c 6f 63 6b 00 83 01 |ancelSpi|nLock...|
|000002b0| 49 6f 53 74 61 72 74 54 | 69 6d 65 72 00 00 85 01 |IoStartT|imer....|
|000002c0| 49 6f 53 74 6f 70 54 69 | 6d 65 72 00 4c 01 49 6f |IoStopTi|mer.L.Io|
|000002d0| 49 6e 69 74 69 61 6c 69 | 7a 65 54 69 6d 65 72 00 |Initiali|zeTimer.|
|000002e0| 2d 00 44 62 67 50 72 69 | 6e 74 00 00 99 03 52 74 |-.DbgPri|nt....Rt|
|000002f0| 6c 51 75 65 72 79 52 65 | 67 69 73 74 72 79 56 61 |lQueryRe|gistryVa|
|00000300| 6c 75 65 73 00 00 4d 00 | 45 78 49 6e 69 74 69 61 |lues..M.|ExInitia|
|00000310| 6c 69 7a 65 4e 50 61 67 | 65 64 4c 6f 6f 6b 61 73 |lizeNPag|edLookas|
|00000320| 69 64 65 4c 69 73 74 00 | 86 04 5f 70 75 72 65 63 |ideList.|.._purec|
|00000330| 61 6c 6c 00 fb 01 4b 65 | 53 65 74 45 76 65 6e 74 |all...Ke|SetEvent|
|00000340| 00 00 d7 02 50 73 47 65 | 74 43 75 72 72 65 6e 74 |....PsGe|tCurrent|
|00000350| 50 72 6f 63 65 73 73 49 | 64 00 d8 02 50 73 47 65 |ProcessI|d...PsGe|
|00000360| 74 43 75 72 72 65 6e 74 | 54 68 72 65 61 64 49 64 |tCurrent|ThreadId|
|00000370| 00 00 1f 04 5a 77 43 6c | 6f 73 65 00 d4 02 50 73 |....ZwCl|ose...Ps|
|00000380| 43 72 65 61 74 65 53 79 | 73 74 65 6d 54 68 72 65 |CreateSy|stemThre|
|00000390| 61 64 00 00 14 02 4b 65 | 57 61 69 74 46 6f 72 53 |ad....Ke|WaitForS|
|000003a0| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 68 03 52 74 |ingleObj|ect.h.Rt|
|000003b0| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|000003c0| 6e 67 00 00 47 02 4d 6d | 49 73 41 64 64 72 65 73 |ng..G.Mm|IsAddres|
|000003d0| 73 56 61 6c 69 64 00 00 | a2 04 6d 65 6d 63 70 79 |sValid..|..memcpy|
|000003e0| 00 00 54 03 52 74 6c 46 | 72 65 65 55 6e 69 63 6f |..T.RtlF|reeUnico|
|000003f0| 64 65 53 74 72 69 6e 67 | 00 00 a8 01 4b 65 43 6c |deString|....KeCl|
|00000400| 65 61 72 45 76 65 6e 74 | 00 00 ee 02 50 73 54 65 |earEvent|....PsTe|
|00000410| 72 6d 69 6e 61 74 65 53 | 79 73 74 65 6d 54 68 72 |rminateS|ystemThr|
|00000420| 65 61 64 00 91 04 5f 77 | 63 73 69 63 6d 70 00 00 |ead..._w|csicmp..|
|00000430| c1 04 77 63 73 6e 63 6d | 70 00 c4 01 4b 65 49 6e |..wcsncm|p...KeIn|
|00000440| 69 74 69 61 6c 69 7a 65 | 45 76 65 6e 74 00 25 01 |itialize|Event.%.|
|00000450| 49 6f 44 65 6c 65 74 65 | 44 65 76 69 63 65 00 00 |IoDelete|Device..|
|00000460| 21 01 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |!.IoCrea|teSymbol|
|00000470| 69 63 4c 69 6e 6b 00 00 | 1b 01 49 6f 43 72 65 61 |icLink..|..IoCrea|
|00000480| 74 65 44 65 76 69 63 65 | 00 00 fe 02 52 74 6c 41 |teDevice|....RtlA|
|00000490| 6e 73 69 53 74 72 69 6e | 67 54 6f 55 6e 69 63 6f |nsiStrin|gToUnico|
|000004a0| 64 65 53 74 72 69 6e 67 | 00 00 65 03 52 74 6c 49 |deString|..e.RtlI|
|000004b0| 6e 69 74 41 6e 73 69 53 | 74 72 69 6e 67 00 59 02 |nitAnsiS|tring.Y.|
|000004c0| 4d 6d 50 72 6f 62 65 41 | 6e 64 4c 6f 63 6b 50 61 |MmProbeA|ndLockPa|
|000004d0| 67 65 73 00 04 01 49 6f | 41 6c 6c 6f 63 61 74 65 |ges...Io|Allocate|
|000004e0| 4d 64 6c 00 33 01 49 6f | 46 72 65 65 4d 64 6c 00 |Mdl.3.Io|FreeMdl.|
|000004f0| 67 02 4d 6d 55 6e 6c 6f | 63 6b 50 61 67 65 73 00 |g.MmUnlo|ckPages.|
|00000500| 3a 01 49 6f 47 65 74 43 | 75 72 72 65 6e 74 50 72 |:.IoGetC|urrentPr|
|00000510| 6f 63 65 73 73 00 24 04 | 5a 77 43 72 65 61 74 65 |ocess.$.|ZwCreate|
|00000520| 46 69 6c 65 00 00 5b 04 | 5a 77 52 65 61 64 46 69 |File..[.|ZwReadFi|
|00000530| 6c 65 00 00 4f 04 5a 77 | 51 75 65 72 79 49 6e 66 |le..O.Zw|QueryInf|
|00000540| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 dd 01 |ormation|File....|
|00000550| 4b 65 51 75 65 72 79 53 | 79 73 74 65 6d 54 69 6d |KeQueryS|ystemTim|
|00000560| 65 00 af 04 73 74 72 6e | 63 6d 70 00 eb 02 50 73 |e...strn|cmp...Ps|
|00000570| 53 65 74 4c 6f 61 64 49 | 6d 61 67 65 4e 6f 74 69 |SetLoadI|mageNoti|
|00000580| 66 79 52 6f 75 74 69 6e | 65 00 e8 02 50 73 53 65 |fyRoutin|e...PsSe|
|00000590| 74 43 72 65 61 74 65 50 | 72 6f 63 65 73 73 4e 6f |tCreateP|rocessNo|
|000005a0| 74 69 66 79 52 6f 75 74 | 69 6e 65 00 41 00 45 78 |tifyRout|ine.A.Ex|
|000005b0| 44 65 6c 65 74 65 52 65 | 73 6f 75 72 63 65 4c 69 |DeleteRe|sourceLi|
|000005c0| 74 65 00 00 d4 01 4b 65 | 4c 65 61 76 65 43 72 69 |te....Ke|LeaveCri|
|000005d0| 74 69 63 61 6c 52 65 67 | 69 6f 6e 00 73 00 45 78 |ticalReg|ion.s.Ex|
|000005e0| 52 65 6c 65 61 73 65 52 | 65 73 6f 75 72 63 65 4c |ReleaseR|esourceL|
|000005f0| 69 74 65 00 32 00 45 78 | 41 63 71 75 69 72 65 52 |ite.2.Ex|AcquireR|
|00000600| 65 73 6f 75 72 63 65 45 | 78 63 6c 75 73 69 76 65 |esourceE|xclusive|
|00000610| 4c 69 74 65 00 00 af 01 | 4b 65 45 6e 74 65 72 43 |Lite....|KeEnterC|
|00000620| 72 69 74 69 63 61 6c 52 | 65 67 69 6f 6e 00 50 00 |riticalR|egion.P.|
|00000630| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 52 65 73 6f |ExInitia|lizeReso|
|00000640| 75 72 63 65 4c 69 74 65 | 00 00 96 04 5f 77 63 73 |urceLite|...._wcs|
|00000650| 75 70 72 00 cd 03 52 74 | 6c 55 70 63 61 73 65 55 |upr...Rt|lUpcaseU|
|00000660| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 09 01 |nicodeSt|ring....|
|00000670| 49 6f 41 74 74 61 63 68 | 44 65 76 69 63 65 54 6f |IoAttach|DeviceTo|
|00000680| 44 65 76 69 63 65 53 74 | 61 63 6b 00 3d 01 49 6f |DeviceSt|ack.=.Io|
|00000690| 47 65 74 44 65 76 69 63 | 65 4f 62 6a 65 63 74 50 |GetDevic|eObjectP|
|000006a0| 6f 69 6e 74 65 72 00 00 | 36 02 4d 6d 42 75 69 6c |ointer..|6.MmBuil|
|000006b0| 64 4d 64 6c 46 6f 72 4e | 6f 6e 50 61 67 65 64 50 |dMdlForN|onPagedP|
|000006c0| 6f 6f 6c 00 0b 01 49 6f | 42 75 69 6c 64 44 65 76 |ool...Io|BuildDev|
|000006d0| 69 63 65 49 6f 43 6f 6e | 74 72 6f 6c 52 65 71 75 |iceIoCon|trolRequ|
|000006e0| 65 73 74 00 0d 02 4b 65 | 54 69 63 6b 43 6f 75 6e |est...Ke|TickCoun|
|000006f0| 74 00 a6 01 4b 65 42 75 | 67 43 68 65 63 6b 45 78 |t...KeBu|gCheckEx|
|00000700| 00 00 6e 74 6f 73 6b 72 | 6e 6c 2e 65 78 65 00 00 |..ntoskr|nl.exe..|
|00000710| 44 00 4b 65 47 65 74 43 | 75 72 72 65 6e 74 49 72 |D.KeGetC|urrentIr|
|00000720| 71 6c 00 00 52 00 4b 66 | 52 65 6c 65 61 73 65 53 |ql..R.Kf|ReleaseS|
|00000730| 70 69 6e 4c 6f 63 6b 00 | 4f 00 4b 66 41 63 71 75 |pinLock.|O.KfAcqu|
|00000740| 69 72 65 53 70 69 6e 4c | 6f 63 6b 00 48 41 4c 2e |ireSpinL|ock.HAL.|
|00000750| 64 6c 6c 00 9f 00 4e 64 | 69 73 49 6e 69 74 69 61 |dll...Nd|isInitia|
|00000760| 6c 69 7a 65 52 65 61 64 | 57 72 69 74 65 4c 6f 63 |lizeRead|WriteLoc|
|00000770| 6b 00 0e 01 4e 64 69 73 | 52 65 6c 65 61 73 65 52 |k...Ndis|ReleaseR|
|00000780| 65 61 64 57 72 69 74 65 | 4c 6f 63 6b 00 00 23 00 |eadWrite|Lock..#.|
|00000790| 4e 64 69 73 41 63 71 75 | 69 72 65 52 65 61 64 57 |NdisAcqu|ireReadW|
|000007a0| 72 69 74 65 4c 6f 63 6b | 00 00 4e 44 49 53 2e 53 |riteLock|..NDIS.S|
|000007b0| 59 53 00 00 23 00 54 64 | 69 4d 61 70 55 73 65 72 |YS..#.Td|iMapUser|
|000007c0| 52 65 71 75 65 73 74 00 | 54 44 49 2e 53 59 53 00 |Request.|TDI.SYS.|
|000007d0| df 05 52 74 6c 55 6e 77 | 69 6e 64 00 f1 01 4b 65 |..RtlUnw|ind...Ke|
|000007e0| 52 65 73 65 74 45 76 65 | 6e 74 00 00 c2 04 77 63 |ResetEve|nt....wc|
|000007f0| 73 6e 63 70 79 00 00 00 | 00 00 00 00 00 00 00 00 |sncpy...|........|
+--------+-------------------------+-------------------------+--------+--------+