home *** CD-ROM | disk | FTP | other *** search
Unknown | 2007-11-27 | 2.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 ec 90 01 00 85 |.......U|........|
|00000010| c0 b9 4e e6 40 bb 74 04 | 3b c1 75 1a a1 b8 80 01 |..N.@.t.|;.u.....|
|00000020| 00 8b 00 35 ec 90 01 00 | a3 ec 90 01 00 75 07 8b |...5....|.....u..|
|00000030| c1 a3 ec 90 01 00 f7 d0 | a3 f0 90 01 00 5d e9 77 |........|.....].w|
|00000040| cd ff ff cc c0 f0 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| e2 f5 00 00 2c 80 00 00 | 94 f0 00 00 00 00 00 00 |....,...|........|
|00000060| 00 00 00 00 80 f6 00 00 | 00 80 00 00 b4 f0 00 00 |........|........|
|00000070| 00 00 00 00 00 00 00 00 | c6 f6 00 00 20 80 00 00 |........|.... ...|
|00000080| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000090| 00 00 00 00 4e f6 00 00 | 10 f6 00 00 70 f6 00 00 |....N...|....p...|
|000000a0| 5c f6 00 00 fc f5 00 00 | 40 f6 00 00 24 f6 00 00 |\.......|@...$...|
|000000b0| 00 00 00 00 a0 f6 00 00 | b4 f6 00 00 00 00 00 00 |........|........|
|000000c0| 5a f2 00 00 6a f2 00 00 | 8a f2 00 00 aa f2 00 00 |Z...j...|........|
|000000d0| be f2 00 00 e2 f2 00 00 | 04 f3 00 00 1c f3 00 00 |........|........|
|000000e0| 34 f3 00 00 4c f3 00 00 | 60 f3 00 00 78 f3 00 00 |4...L...|`...x...|
|000000f0| 8e f3 00 00 a4 f3 00 00 | bc f3 00 00 d4 f3 00 00 |........|........|
|00000100| ec f3 00 00 02 f4 00 00 | 2c f4 00 00 42 f2 00 00 |........|,...B...|
|00000110| 72 f4 00 00 88 f4 00 00 | 96 f4 00 00 b4 f4 00 00 |r.......|........|
|00000120| ce f4 00 00 de f4 00 00 | f2 f4 00 00 0a f5 00 00 |........|........|
|00000130| 2c f5 00 00 4c f5 00 00 | 60 f5 00 00 76 f5 00 00 |,...L...|`...v...|
|00000140| 88 f5 00 00 9a f5 00 00 | aa f5 00 00 c4 f5 00 00 |........|........|
|00000150| d2 f5 00 00 f0 f5 00 00 | 34 f2 00 00 1c f2 00 00 |........|4.......|
|00000160| 0c f2 00 00 f4 f1 00 00 | da f1 00 00 d0 f1 00 00 |........|........|
|00000170| c2 f1 00 00 b8 f1 00 00 | 88 f6 00 00 a0 f1 00 00 |........|........|
|00000180| 52 f4 00 00 8c f1 00 00 | 00 00 00 00 85 00 45 78 |R.......|......Ex|
|00000190| 46 72 65 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |FreePool|WithTag.|
|000001a0| 6d 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |m.ExAllo|catePool|
|000001b0| 57 69 74 68 54 61 67 00 | 7f 07 6d 65 6d 73 65 74 |WithTag.|..memset|
|000001c0| 00 00 69 07 5f 76 73 6e | 77 70 72 69 6e 74 66 00 |..i._vsn|wprintf.|
|000001d0| 4a 07 5f 61 6c 6c 6d 75 | 6c 00 b6 02 4b 65 44 65 |J._allmu|l...KeDe|
|000001e0| 6c 61 79 45 78 65 63 75 | 74 69 6f 6e 54 68 72 65 |layExecu|tionThre|
|000001f0| 61 64 00 00 ff 02 4b 65 | 51 75 65 72 79 54 69 6d |ad....Ke|QueryTim|
|00000200| 65 49 6e 63 72 65 6d 65 | 6e 74 00 00 b5 02 4b 65 |eIncreme|nt....Ke|
|00000210| 43 6c 65 61 72 45 76 65 | 6e 74 00 00 47 03 4b 65 |ClearEve|nt..G.Ke|
|00000220| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00000230| 65 63 74 00 29 03 4b 65 | 53 65 74 45 76 65 6e 74 |ect.).Ke|SetEvent|
|00000240| 00 00 40 04 4f 62 66 44 | 65 72 65 66 65 72 65 6e |..@.ObfD|ereferen|
|00000250| 63 65 4f 62 6a 65 63 74 | 00 00 94 02 49 6f 66 43 |ceObject|....IofC|
|00000260| 61 6c 6c 44 72 69 76 65 | 72 00 bc 01 49 6f 42 75 |allDrive|r...IoBu|
|00000270| 69 6c 64 53 79 6e 63 68 | 72 6f 6e 6f 75 73 46 73 |ildSynch|ronousFs|
|00000280| 64 52 65 71 75 65 73 74 | 00 00 ff 01 49 6f 47 65 |dRequest|....IoGe|
|00000290| 74 41 74 74 61 63 68 65 | 64 44 65 76 69 63 65 52 |tAttache|dDeviceR|
|000002a0| 65 66 65 72 65 6e 63 65 | 00 00 d8 02 4b 65 49 6e |eference|....KeIn|
|000002b0| 69 74 69 61 6c 69 7a 65 | 45 76 65 6e 74 00 78 02 |itialize|Event.x.|
|000002c0| 49 6f 55 6e 72 65 67 69 | 73 74 65 72 50 6c 75 67 |IoUnregi|sterPlug|
|000002d0| 50 6c 61 79 4e 6f 74 69 | 66 69 63 61 74 69 6f 6e |PlayNoti|fication|
|000002e0| 00 00 42 02 49 6f 52 65 | 67 69 73 74 65 72 50 6c |..B.IoRe|gisterPl|
|000002f0| 75 67 50 6c 61 79 4e 6f | 74 69 66 69 63 61 74 69 |ugPlayNo|tificati|
|00000300| 6f 6e 00 00 df 02 4b 65 | 49 6e 69 74 69 61 6c 69 |on....Ke|Initiali|
|00000310| 7a 65 53 70 69 6e 4c 6f | 63 6b 00 00 87 06 57 52 |zeSpinLo|ck....WR|
|00000320| 49 54 45 5f 52 45 47 49 | 53 54 45 52 5f 55 53 48 |ITE_REGI|STER_USH|
|00000330| 4f 52 54 00 d0 04 52 45 | 41 44 5f 52 45 47 49 53 |ORT...RE|AD_REGIS|
|00000340| 54 45 52 5f 55 53 48 4f | 52 54 00 00 e8 02 4b 65 |TER_USHO|RT....Ke|
|00000350| 49 6e 73 65 72 74 51 75 | 65 75 65 44 70 63 00 00 |InsertQu|eueDpc..|
|00000360| 85 06 57 52 49 54 45 5f | 52 45 47 49 53 54 45 52 |..WRITE_|REGISTER|
|00000370| 5f 55 43 48 41 52 00 00 | ce 04 52 45 41 44 5f 52 |_UCHAR..|..READ_R|
|00000380| 45 47 49 53 54 45 52 5f | 55 43 48 41 52 00 cf 04 |EGISTER_|UCHAR...|
|00000390| 52 45 41 44 5f 52 45 47 | 49 53 54 45 52 5f 55 4c |READ_REG|ISTER_UL|
|000003a0| 4f 4e 47 00 87 03 4d 6d | 47 65 74 50 68 79 73 69 |ONG...Mm|GetPhysi|
|000003b0| 63 61 6c 41 64 64 72 65 | 73 73 00 00 86 06 57 52 |calAddre|ss....WR|
|000003c0| 49 54 45 5f 52 45 47 49 | 53 54 45 52 5f 55 4c 4f |ITE_REGI|STER_ULO|
|000003d0| 4e 47 00 00 74 03 4d 6d | 41 6c 6c 6f 63 61 74 65 |NG..t.Mm|Allocate|
|000003e0| 50 61 67 65 73 46 6f 72 | 4d 64 6c 00 86 03 4d 6d |PagesFor|Mdl...Mm|
|000003f0| 46 72 65 65 50 61 67 65 | 73 46 72 6f 6d 4d 64 6c |FreePage|sFromMdl|
|00000400| 00 00 70 03 4d 6d 41 6c | 6c 6f 63 61 74 65 43 6f |..p.MmAl|locateCo|
|00000410| 6e 74 69 67 75 6f 75 73 | 4d 65 6d 6f 72 79 53 70 |ntiguous|MemorySp|
|00000420| 65 63 69 66 79 43 61 63 | 68 65 00 00 83 03 4d 6d |ecifyCac|he....Mm|
|00000430| 46 72 65 65 43 6f 6e 74 | 69 67 75 6f 75 73 4d 65 |FreeCont|iguousMe|
|00000440| 6d 6f 72 79 53 70 65 63 | 69 66 79 43 61 63 68 65 |morySpec|ifyCache|
|00000450| 00 00 9a 03 4d 6d 4d 61 | 70 4c 6f 63 6b 65 64 50 |....MmMa|pLockedP|
|00000460| 61 67 65 73 53 70 65 63 | 69 66 79 43 61 63 68 65 |agesSpec|ifyCache|
|00000470| 00 00 b9 03 4d 6d 55 6e | 6d 61 70 4c 6f 63 6b 65 |....MmUn|mapLocke|
|00000480| 64 50 61 67 65 73 00 00 | 34 03 4b 65 53 65 74 54 |dPages..|4.KeSetT|
|00000490| 69 6d 65 72 00 00 a3 00 | 45 78 49 6e 74 65 72 6c |imer....|ExInterl|
|000004a0| 6f 63 6b 65 64 50 75 73 | 68 45 6e 74 72 79 53 4c |ockedPus|hEntrySL|
|000004b0| 69 73 74 00 9c 00 45 78 | 49 6e 74 65 72 6c 6f 63 |ist...Ex|Interloc|
|000004c0| 6b 65 64 46 6c 75 73 68 | 53 4c 69 73 74 00 b3 02 |kedFlush|SList...|
|000004d0| 4b 65 43 61 6e 63 65 6c | 54 69 6d 65 72 00 e1 02 |KeCancel|Timer...|
|000004e0| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 54 69 6d 65 |KeInitia|lizeTime|
|000004f0| 72 00 ec 01 49 6f 44 69 | 73 63 6f 6e 6e 65 63 74 |r...IoDi|sconnect|
|00000500| 49 6e 74 65 72 72 75 70 | 74 00 49 03 4b 65 66 52 |Interrup|t.I.KefR|
|00000510| 65 6c 65 61 73 65 53 70 | 69 6e 4c 6f 63 6b 46 72 |eleaseSp|inLockFr|
|00000520| 6f 6d 44 70 63 4c 65 76 | 65 6c 00 00 48 03 4b 65 |omDpcLev|el..H.Ke|
|00000530| 66 41 63 71 75 69 72 65 | 53 70 69 6e 4c 6f 63 6b |fAcquire|SpinLock|
|00000540| 41 74 44 70 63 4c 65 76 | 65 6c 00 00 1a 03 4b 65 |AtDpcLev|el....Ke|
|00000550| 52 65 6d 6f 76 65 51 75 | 65 75 65 44 70 63 00 00 |RemoveQu|eueDpc..|
|00000560| cc 01 49 6f 43 6f 6e 6e | 65 63 74 49 6e 74 65 72 |..IoConn|ectInter|
|00000570| 72 75 70 74 00 00 b8 03 | 4d 6d 55 6e 6d 61 70 49 |rupt....|MmUnmapI|
|00000580| 6f 53 70 61 63 65 00 00 | d7 02 4b 65 49 6e 69 74 |oSpace..|..KeInit|
|00000590| 69 61 6c 69 7a 65 44 70 | 63 00 98 03 4d 6d 4d 61 |ializeDp|c...MmMa|
|000005a0| 70 49 6f 53 70 61 63 65 | 00 00 28 02 49 6f 49 73 |pIoSpace|..(.IoIs|
|000005b0| 57 64 6d 56 65 72 73 69 | 6f 6e 41 76 61 69 6c 61 |WdmVersi|onAvaila|
|000005c0| 62 6c 65 00 3e 03 4b 65 | 54 69 63 6b 43 6f 75 6e |ble.>.Ke|TickCoun|
|000005d0| 74 00 b2 02 4b 65 42 75 | 67 43 68 65 63 6b 45 78 |t...KeBu|gCheckEx|
|000005e0| 00 00 6e 74 6f 73 6b 72 | 6e 6c 2e 65 78 65 00 00 |..ntoskr|nl.exe..|
|000005f0| f7 05 52 74 6c 55 6e 77 | 69 6e 64 00 5f 00 4b 66 |..RtlUnw|ind._.Kf|
|00000600| 52 65 6c 65 61 73 65 53 | 70 69 6e 4c 6f 63 6b 00 |ReleaseS|pinLock.|
|00000610| 5c 00 4b 66 41 63 71 75 | 69 72 65 53 70 69 6e 4c |\.KfAcqu|ireSpinL|
|00000620| 6f 63 6b 00 59 00 4b 65 | 53 74 61 6c 6c 45 78 65 |ock.Y.Ke|StallExe|
|00000630| 63 75 74 69 6f 6e 50 72 | 6f 63 65 73 73 6f 72 00 |cutionPr|ocessor.|
|00000640| 5d 00 4b 66 4c 6f 77 65 | 72 49 72 71 6c 00 5e 00 |].KfLowe|rIrql.^.|
|00000650| 4b 66 52 61 69 73 65 49 | 72 71 6c 00 50 00 4b 65 |KfRaiseI|rql.P.Ke|
|00000660| 47 65 74 43 75 72 72 65 | 6e 74 49 72 71 6c 00 00 |GetCurre|ntIrql..|
|00000670| 17 00 48 61 6c 47 65 74 | 42 75 73 44 61 74 61 00 |..HalGet|BusData.|
|00000680| 48 41 4c 2e 64 6c 6c 00 | fe 04 52 74 6c 43 6f 70 |HAL.dll.|..RtlCop|
|00000690| 79 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |yUnicode|String..|
|000006a0| 07 00 57 64 66 56 65 72 | 73 69 6f 6e 55 6e 62 69 |..WdfVer|sionUnbi|
|000006b0| 6e 64 00 00 06 00 57 64 | 66 56 65 72 73 69 6f 6e |nd....Wd|fVersion|
|000006c0| 42 69 6e 64 00 00 57 44 | 46 4c 44 52 2e 53 59 53 |Bind..WD|FLDR.SYS|
|000006d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+