home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-01-19 | 2.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 8b ff | 55 8b ec b8 50 40 01 00 |........|U...P@..|
|00000010| a3 54 40 01 00 a3 50 40 | 01 00 b8 78 40 01 00 a3 |.T@...P@|...x@...|
|00000020| 7c 40 01 00 a3 78 40 01 | 00 b8 88 40 01 00 83 ec ||@...x@.|...@....|
|00000030| 60 56 a3 8c 40 01 00 a3 | 88 40 01 00 b8 70 40 01 |`V..@...|.@...p@.|
|00000040| 00 33 f6 89 35 84 40 01 | 00 a3 74 40 01 00 a3 70 |.3..5.@.|..t@...p|
|00000050| 40 01 00 89 35 20 40 01 | 00 e8 16 be ff ff 3b c6 |@...5 @.|......;.|
|00000060| 0f 8c 48 02 00 00 53 8b | 5d 08 57 68 06 64 01 00 |..H...S.|].Wh.d..|
|00000070| 8d 45 f8 50 89 1d 38 40 | 01 00 ff 15 58 30 01 00 |.E.P..8@|....X0..|
|00000080| 68 3c 40 01 00 56 56 68 | f1 00 00 00 8d 45 f8 50 |h<@..VVh|.....E.P|
|00000090| 56 53 ff 15 54 30 01 00 | 8b f8 3b fe 7d 19 57 68 |VS..T0..|..;.}.Wh|
|000000a0| d0 63 01 00 e8 4d c0 ff | ff 59 59 e8 cc bd ff ff |.c...M..|.YY.....|
|000000b0| 8b c7 e9 f5 01 00 00 6a | 1b 59 56 c7 43 34 2a 51 |.......j|.YV.C4*Q|
|000000c0| 01 00 b8 82 1e 01 00 8d | 7b 38 f3 ab 68 64 20 01 |........|{8..hd .|
|000000d0| 00 89 73 28 ff 35 3c 40 | 01 00 ff 15 4c 30 01 00 |..s(.5<@|....L0..|
|000000e0| 6a 38 8d 45 a0 56 50 89 | 75 08 e8 fb bf ff ff 83 |j8.E.VP.|u.......|
|000000f0| c4 0c 56 8d 45 08 56 89 | 45 ac 8d 45 a0 50 68 ac |..V.E.V.|E..E.Ph.|
|00000100| 63 01 00 6a 01 89 75 a0 | c7 45 a4 20 00 00 00 c7 |c..j..u.|.E. ....|
|00000110| 45 a8 7a 63 01 00 89 75 | b0 ff 15 48 30 01 00 85 |E.zc...u|...H0...|
|00000120| c0 75 0c 39 75 08 74 07 | c6 05 31 40 01 00 01 56 |.u.9u.t.|..1@...V|
|00000130| 56 68 60 40 01 00 ff 15 | 44 30 01 00 56 68 6c 1f |Vh`@....|D0..Vhl.|
|00000140| 01 00 56 56 56 68 ff ff | 1f 00 68 44 40 01 00 ff |..VVVh..|..hD@...|
|00000150| 15 40 30 01 00 8b f8 3b | fe 7d 27 57 68 3e 63 01 |.@0....;|.}'Wh>c.|
|00000160| 00 e8 90 bf ff ff 59 59 | 8b f7 ff 35 3c 40 01 00 |......YY|...5<@..|
|00000170| ff 15 2c 30 01 00 e8 01 | bd ff ff 8b c6 e9 2a 01 |..,0....|......*.|
|00000180| 00 00 8b 3d 14 30 01 00 | bb 41 63 64 4e 53 6a 10 |...=.0..|.AcdNSj.|
|00000190| 56 ff d7 3b c6 a3 24 40 | 01 00 75 07 be 9a 00 00 |V..;..$@|..u.....|
|000001a0| c0 eb c7 53 68 10 04 00 | 00 56 ff d7 8b d8 3b de |...Sh...|.V....;.|
|000001b0| 75 20 ff 35 3c 40 01 00 | ff 15 2c 30 01 00 56 ff |u .5<@..|..,0..V.|
|000001c0| 35 24 40 01 00 ff 15 18 | 30 01 00 be 9a 00 00 c0 |5$@.....|0.......|
|000001d0| eb a4 68 f6 62 01 00 8d | 45 f0 50 ff 15 58 30 01 |..h.b...|E.P..X0.|
|000001e0| 00 6a 01 8d 45 f0 89 45 | e0 6a 01 8d 45 d8 50 68 |.j..E..E|.j..E.Ph|
|000001f0| 28 40 01 00 c7 45 d8 18 | 00 00 00 89 75 dc c7 45 |(@...E..|....u..E|
|00000200| e4 50 00 00 00 89 75 e8 | 89 75 ec ff 15 74 30 01 |.P....u.|.u...t0.|
|00000210| 00 3b c6 89 45 08 7d 27 | ff 35 3c 40 01 00 ff 15 |.;..E.}'|.5<@....|
|00000220| 2c 30 01 00 8b 3d 18 30 | 01 00 56 ff 35 24 40 01 |,0...=.0|..V.5$@.|
|00000230| 00 ff d7 56 53 ff d7 8b | 75 08 e9 37 ff ff ff 8b |...VS...|u..7....|
|00000240| 3d 24 40 01 00 89 35 34 | 40 01 00 33 c0 ab ab 68 |=$@...54|@..3...h|
|00000250| 10 04 00 00 ab 56 53 ab | e8 8d be ff ff a1 24 40 |.....VS.|......$@|
|00000260| 01 00 89 40 04 89 00 a1 | 24 40 01 00 83 c4 0c 8d |...@....|$@......|
|00000270| 48 04 8b 11 89 03 89 53 | 04 56 89 1a 89 19 a1 24 |H......S|.V.....$|
|00000280| 40 01 00 68 40 40 01 00 | 56 c7 40 08 01 00 00 00 |@..h@@..|V.@.....|
|00000290| a1 24 40 01 00 56 56 c7 | 40 0c 0a 00 00 00 ff 35 |.$@..VV.|@......5|
|000002a0| 44 40 01 00 ff 15 3c 30 | 01 00 33 c0 5f 5b 5e c9 |D@....<0|..3._[^.|
|000002b0| c2 08 00 cc cc cc cc cc | 8b ff 55 8b ec a1 00 40 |........|..U....@|
|000002c0| 01 00 85 c0 b9 4e e6 40 | bb 74 04 3b c1 75 1a a1 |.....N.@|.t.;.u..|
|000002d0| 6c 30 01 00 8b 00 35 00 | 40 01 00 a3 00 40 01 00 |l0....5.|@....@..|
|000002e0| 75 07 8b c1 a3 00 40 01 | 00 f7 d0 a3 04 40 01 00 |u.....@.|.....@..|
|000002f0| 5d e9 10 fd ff ff 5c 00 | 43 00 61 00 6c 00 6c 00 |].....\.|C.a.l.l.|
|00000300| 62 00 61 00 63 00 6b 00 | 5c 00 54 00 63 00 70 00 |b.a.c.k.|\.T.c.p.|
|00000310| 43 00 6f 00 6e 00 6e 00 | 65 00 63 00 74 00 69 00 |C.o.n.n.|e.c.t.i.|
|00000320| 6f 00 6e 00 43 00 61 00 | 6c 00 6c 00 62 00 61 00 |o.n.C.a.|l.l.b.a.|
|00000330| 63 00 6b 00 54 00 65 00 | 6d 00 70 00 00 00 41 63 |c.k.T.e.|m.p...Ac|
|00000340| 64 44 72 69 76 65 72 45 | 6e 74 72 79 3a 20 50 73 |dDriverE|ntry: Ps|
|00000350| 43 72 65 61 74 65 53 79 | 73 74 65 6d 54 68 72 65 |CreateSy|stemThre|
|00000360| 61 64 20 66 61 69 6c 65 | 64 20 28 73 74 61 74 75 |ad faile|d (statu|
|00000370| 73 3d 30 78 25 78 29 0a | 00 cc 45 00 6e 00 61 00 |s=0x%x).|..E.n.a.|
|00000380| 62 00 6c 00 65 00 52 00 | 65 00 64 00 69 00 72 00 |b.l.e.R.|e.d.i.r.|
|00000390| 4e 00 6f 00 74 00 69 00 | 66 00 69 00 63 00 61 00 |N.o.t.i.|f.i.c.a.|
|000003a0| 74 00 69 00 6f 00 6e 00 | 73 00 00 00 52 00 61 00 |t.i.o.n.|s...R.a.|
|000003b0| 73 00 41 00 63 00 64 00 | 5c 00 50 00 61 00 72 00 |s.A.c.d.|\.P.a.r.|
|000003c0| 61 00 6d 00 65 00 74 00 | 65 00 72 00 73 00 00 00 |a.m.e.t.|e.r.s...|
|000003d0| 41 63 64 44 72 69 76 65 | 72 45 6e 74 72 79 3a 20 |AcdDrive|rEntry: |
|000003e0| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 20 66 |IoCreate|Device f|
|000003f0| 61 69 6c 65 64 20 28 73 | 74 61 74 75 73 3d 30 78 |ailed (s|tatus=0x|
|00000400| 25 78 29 0a 00 cc 5c 00 | 44 00 65 00 76 00 69 00 |%x)...\.|D.e.v.i.|
|00000410| 63 00 65 00 5c 00 52 00 | 61 00 73 00 41 00 63 00 |c.e.\.R.|a.s.A.c.|
|00000420| 64 00 00 00 6c 64 00 00 | 00 00 00 00 00 00 00 00 |d...ld..|........|
|00000430| 30 67 00 00 0c 30 00 00 | 60 64 00 00 00 00 00 00 |0g...0..|`d......|
|00000440| 00 00 00 00 66 67 00 00 | 00 30 00 00 00 00 00 00 |....fg..|.0......|
|00000450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000460| 3e 67 00 00 52 67 00 00 | 00 00 00 00 10 65 00 00 |>g..Rg..|.....e..|
|00000470| 1e 65 00 00 38 65 00 00 | 50 65 00 00 64 65 00 00 |.e..8e..|Pe..de..|
|00000480| 7c 65 00 00 86 65 00 00 | 9e 65 00 00 b4 65 00 00 ||e...e..|.e...e..|
|00000490| c6 65 00 00 d0 65 00 00 | e8 65 00 00 00 66 00 00 |.e...e..|.e...f..|
|000004a0| 30 66 00 00 48 66 00 00 | 5c 66 00 00 76 66 00 00 |0f..Hf..|\f..vf..|
|000004b0| 8a 66 00 00 96 66 00 00 | a8 66 00 00 c0 66 00 00 |.f...f..|.f...f..|
|000004c0| d0 66 00 00 e0 66 00 00 | 02 67 00 00 22 67 00 00 |.f...f..|.g.."g..|
|000004d0| f6 64 00 00 1c 66 00 00 | e0 64 00 00 00 00 00 00 |.d...f..|.d......|
|000004e0| 96 02 49 6f 66 43 6f 6d | 70 6c 65 74 65 52 65 71 |..IofCom|pleteReq|
|000004f0| 75 65 73 74 00 00 45 02 | 49 6f 52 65 6c 65 61 73 |uest..E.|IoReleas|
|00000500| 65 43 61 6e 63 65 6c 53 | 70 69 6e 4c 6f 63 6b 00 |eCancelS|pinLock.|
|00000510| 2a 03 4b 65 53 65 74 45 | 76 65 6e 74 00 00 a6 01 |*.KeSetE|vent....|
|00000520| 49 6f 41 63 71 75 69 72 | 65 43 61 6e 63 65 6c 53 |IoAcquir|eCancelS|
|00000530| 70 69 6e 4c 6f 63 6b 00 | 6d 00 45 78 41 6c 6c 6f |pinLock.|m.ExAllo|
|00000540| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|00000550| 85 00 45 78 46 72 65 65 | 50 6f 6f 6c 57 69 74 68 |..ExFree|PoolWith|
|00000560| 54 61 67 00 71 04 50 73 | 47 65 74 43 75 72 72 65 |Tag.q.Ps|GetCurre|
|00000570| 6e 74 50 72 6f 63 65 73 | 73 49 64 00 80 07 6d 65 |ntProces|sId...me|
|00000580| 6d 73 65 74 00 00 ce 00 | 45 78 55 6e 72 65 67 69 |mset....|ExUnregi|
|00000590| 73 74 65 72 43 61 6c 6c | 62 61 63 6b 00 00 b3 00 |sterCall|back....|
|000005a0| 45 78 52 65 67 69 73 74 | 65 72 43 61 6c 6c 62 61 |ExRegist|erCallba|
|000005b0| 63 6b 00 00 e6 01 49 6f | 44 65 6c 65 74 65 44 65 |ck....Io|DeleteDe|
|000005c0| 76 69 63 65 00 00 ad 06 | 5a 77 43 6c 6f 73 65 00 |vice....|ZwClose.|
|000005d0| 41 04 4f 62 66 44 65 72 | 65 66 65 72 65 6e 63 65 |A.ObfDer|eference|
|000005e0| 4f 62 6a 65 63 74 00 00 | 48 03 4b 65 57 61 69 74 |Object..|H.KeWait|
|000005f0| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|00000600| 37 04 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |7.ObRefe|renceObj|
|00000610| 65 63 74 42 79 48 61 6e | 64 6c 65 00 70 00 45 78 |ectByHan|dle.p.Ex|
|00000620| 43 72 65 61 74 65 43 61 | 6c 6c 62 61 63 6b 00 00 |CreateCa|llback..|
|00000630| 69 04 50 73 43 72 65 61 | 74 65 53 79 73 74 65 6d |i.PsCrea|teSystem|
|00000640| 54 68 72 65 61 64 00 00 | d9 02 4b 65 49 6e 69 74 |Thread..|..KeInit|
|00000650| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 b9 05 52 74 |ializeEv|ent...Rt|
|00000660| 6c 51 75 65 72 79 52 65 | 67 69 73 74 72 79 56 61 |lQueryRe|gistryVa|
|00000670| 6c 75 65 73 00 00 20 02 | 49 6f 49 6e 69 74 69 61 |lues.. .|IoInitia|
|00000680| 6c 69 7a 65 54 69 6d 65 | 72 00 3c 00 44 62 67 50 |lizeTime|r.<.DbgP|
|00000690| 72 69 6e 74 00 00 d1 01 | 49 6f 43 72 65 61 74 65 |rint....|IoCreate|
|000006a0| 44 65 76 69 63 65 00 00 | 5f 05 52 74 6c 49 6e 69 |Device..|_.RtlIni|
|000006b0| 74 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |tUnicode|String..|
|000006c0| b6 02 4b 65 43 6c 65 61 | 72 45 76 65 6e 74 00 00 |..KeClea|rEvent..|
|000006d0| 6f 02 49 6f 53 74 61 72 | 74 54 69 6d 65 72 00 00 |o.IoStar|tTimer..|
|000006e0| 4a 03 4b 65 66 52 65 6c | 65 61 73 65 53 70 69 6e |J.KefRel|easeSpin|
|000006f0| 4c 6f 63 6b 46 72 6f 6d | 44 70 63 4c 65 76 65 6c |LockFrom|DpcLevel|
|00000700| 00 00 49 03 4b 65 66 41 | 63 71 75 69 72 65 53 70 |..I.KefA|cquireSp|
|00000710| 69 6e 4c 6f 63 6b 41 74 | 44 70 63 4c 65 76 65 6c |inLockAt|DpcLevel|
|00000720| 00 00 3f 03 4b 65 54 69 | 63 6b 43 6f 75 6e 74 00 |..?.KeTi|ckCount.|
|00000730| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 5f 00 |ntoskrnl|.exe.._.|
|00000740| 4b 66 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KfReleas|eSpinLoc|
|00000750| 6b 00 5c 00 4b 66 41 63 | 71 75 69 72 65 53 70 69 |k.\.KfAc|quireSpi|
|00000760| 6e 4c 6f 63 6b 00 48 41 | 4c 2e 64 6c 6c 00 00 00 |nLock.HA|L.dll...|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+