home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-04-13 | 1.9 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 78 57 01 00 85 |.......U|...xW...|
|00000010| c0 b9 40 bb 00 00 74 04 | 3b c1 75 23 8b 15 ec 54 |..@...t.|;.u#...T|
|00000020| 01 00 b8 78 57 01 00 c1 | e8 08 33 02 25 ff ff 00 |...xW...|..3.%...|
|00000030| 00 a3 78 57 01 00 75 07 | 8b c1 a3 78 57 01 00 f7 |..xW..u.|...xW...|
|00000040| d0 a3 74 57 01 00 5d e9 | 66 ad ff ff 20 58 00 00 |..tW..].|f... X..|
|00000050| 00 00 00 00 00 00 00 00 | 10 5e 00 00 18 54 00 00 |........|.^...T..|
|00000060| 08 58 00 00 00 00 00 00 | 00 00 00 00 7a 5e 00 00 |.X......|....z^..|
|00000070| 00 54 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.T......|........|
|00000080| 00 00 00 00 00 00 00 00 | 4e 5e 00 00 3a 5e 00 00 |........|N^..:^..|
|00000090| 2c 5e 00 00 1e 5e 00 00 | 62 5e 00 00 00 00 00 00 |,^...^..|b^......|
|000000a0| 90 59 00 00 ae 59 00 00 | c0 59 00 00 ca 59 00 00 |.Y...Y..|.Y...Y..|
|000000b0| e2 59 00 00 fa 59 00 00 | 16 5a 00 00 24 5a 00 00 |.Y...Y..|.Z..$Z..|
|000000c0| 38 5a 00 00 52 5a 00 00 | 5c 5a 00 00 74 5a 00 00 |8Z..RZ..|\Z..tZ..|
|000000d0| 8c 5a 00 00 9c 5a 00 00 | ae 5a 00 00 c6 5a 00 00 |.Z...Z..|.Z...Z..|
|000000e0| dc 5a 00 00 f4 5a 00 00 | 0a 5b 00 00 1a 5b 00 00 |.Z...Z..|.[...[..|
|000000f0| 2c 5b 00 00 3a 5b 00 00 | 50 5b 00 00 70 5b 00 00 |,[..:[..|P[..p[..|
|00000100| 84 5b 00 00 9a 5b 00 00 | b4 5b 00 00 7e 59 00 00 |.[...[..|.[..~Y..|
|00000110| d8 5b 00 00 f8 5b 00 00 | 0c 5c 00 00 26 5c 00 00 |.[...[..|.\..&\..|
|00000120| 3c 5c 00 00 52 5c 00 00 | 6c 5c 00 00 88 5c 00 00 |<\..R\..|l\...\..|
|00000130| a2 5c 00 00 ae 5c 00 00 | ba 5c 00 00 ca 5c 00 00 |.\...\..|.\...\..|
|00000140| e0 5c 00 00 f0 5c 00 00 | 00 5d 00 00 14 5d 00 00 |.\...\..|.]...]..|
|00000150| 24 5d 00 00 34 5d 00 00 | 4c 5d 00 00 64 5d 00 00 |$]..4]..|L]..d]..|
|00000160| 78 5d 00 00 88 5d 00 00 | 9e 5d 00 00 b6 5d 00 00 |x]...]..|.]...]..|
|00000170| d4 5d 00 00 f2 5d 00 00 | 00 5e 00 00 6c 59 00 00 |.]...]..|.^..lY..|
|00000180| 56 59 00 00 42 59 00 00 | 2a 59 00 00 c8 5b 00 00 |VY..BY..|*Y...[..|
|00000190| 18 59 00 00 00 00 00 00 | 4f 01 49 6f 44 65 6c 65 |.Y......|O.IoDele|
|000001a0| 74 65 44 65 76 69 63 65 | 00 00 4c 03 50 73 43 72 |teDevice|..L.PsCr|
|000001b0| 65 61 74 65 53 79 73 74 | 65 6d 54 68 72 65 61 64 |eateSyst|emThread|
|000001c0| 00 00 18 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |....KeIn|itialize|
|000001d0| 45 76 65 6e 74 00 20 02 | 4b 65 49 6e 69 74 69 61 |Event. .|KeInitia|
|000001e0| 6c 69 7a 65 54 69 6d 65 | 72 45 78 00 17 02 4b 65 |lizeTime|rEx...Ke|
|000001f0| 49 6e 69 74 69 61 6c 69 | 7a 65 44 70 63 00 3f 03 |Initiali|zeDpc.?.|
|00000200| 50 6f 53 65 74 50 6f 77 | 65 72 53 74 61 74 65 00 |PoSetPow|erState.|
|00000210| 2b 01 49 6f 41 74 74 61 | 63 68 44 65 76 69 63 65 |+.IoAtta|chDevice|
|00000220| 54 6f 44 65 76 69 63 65 | 53 74 61 63 6b 00 3e 01 |ToDevice|Stack.>.|
|00000230| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|00000240| 0b 05 5a 77 43 6c 6f 73 | 65 00 30 03 4f 62 66 44 |..ZwClos|e.0.ObfD|
|00000250| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00000260| 00 00 6d 02 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |..m.KeWa|itForSin|
|00000270| 67 6c 65 4f 62 6a 65 63 | 74 00 28 03 4f 62 52 65 |gleObjec|t.(.ObRe|
|00000280| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|00000290| 61 6e 64 6c 65 00 56 02 | 4b 65 53 65 74 45 76 65 |andle.V.|KeSetEve|
|000002a0| 6e 74 00 00 4e 00 45 78 | 46 72 65 65 50 6f 6f 6c |nt..N.Ex|FreePool|
|000002b0| 57 69 74 68 54 61 67 00 | 69 04 52 74 6c 51 75 65 |WithTag.|i.RtlQue|
|000002c0| 72 79 52 65 67 69 73 74 | 72 79 56 61 6c 75 65 73 |ryRegist|ryValues|
|000002d0| 00 00 a8 05 6d 65 6d 6d | 6f 76 65 00 41 00 45 78 |....memm|ove.A.Ex|
|000002e0| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|000002f0| 54 61 67 00 1d 04 52 74 | 6c 49 6e 69 74 55 6e 69 |Tag...Rt|lInitUni|
|00000300| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 e2 01 49 6f |codeStri|ng....Io|
|00000310| 66 43 61 6c 6c 44 72 69 | 76 65 72 00 cc 02 4d 6d |fCallDri|ver...Mm|
|00000320| 55 6e 6d 61 70 49 6f 53 | 70 61 63 65 00 00 f5 04 |UnmapIoS|pace....|
|00000330| 57 52 49 54 45 5f 52 45 | 47 49 53 54 45 52 5f 55 |WRITE_RE|GISTER_U|
|00000340| 43 48 41 52 00 00 9d 03 | 52 45 41 44 5f 52 45 47 |CHAR....|READ_REG|
|00000350| 49 53 54 45 52 5f 55 43 | 48 41 52 00 1e 02 4b 65 |ISTER_UC|HAR...Ke|
|00000360| 49 6e 69 74 69 61 6c 69 | 7a 65 53 70 69 6e 4c 6f |Initiali|zeSpinLo|
|00000370| 63 6b 00 00 e3 01 49 6f | 66 43 6f 6d 70 6c 65 74 |ck....Io|fComplet|
|00000380| 65 52 65 71 75 65 73 74 | 00 00 ae 02 4d 6d 4d 61 |eRequest|....MmMa|
|00000390| 70 49 6f 53 70 61 63 65 | 00 00 52 01 49 6f 44 65 |pIoSpace|..R.IoDe|
|000003a0| 74 61 63 68 44 65 76 69 | 63 65 00 00 4d 00 45 78 |tachDevi|ce..M.Ex|
|000003b0| 46 72 65 65 50 6f 6f 6c | 00 00 31 03 4f 62 66 52 |FreePool|..1.ObfR|
|000003c0| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|000003d0| a9 03 52 74 6c 41 6e 73 | 69 53 74 72 69 6e 67 54 |..RtlAns|iStringT|
|000003e0| 6f 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |oUnicode|String..|
|000003f0| 1a 04 52 74 6c 49 6e 69 | 74 41 6e 73 69 53 74 72 |..RtlIni|tAnsiStr|
|00000400| 69 6e 67 00 42 03 50 6f | 53 74 61 72 74 4e 65 78 |ing.B.Po|StartNex|
|00000410| 74 50 6f 77 65 72 49 72 | 70 00 64 02 4b 65 53 79 |tPowerIr|p.d.KeSy|
|00000420| 6e 63 68 72 6f 6e 69 7a | 65 45 78 65 63 75 74 69 |nchroniz|eExecuti|
|00000430| 6f 6e 00 00 3c 03 50 6f | 52 65 71 75 65 73 74 50 |on..<.Po|RequestP|
|00000440| 6f 77 65 72 49 72 70 00 | 36 03 50 6f 43 61 6c 6c |owerIrp.|6.PoCall|
|00000450| 44 72 69 76 65 72 00 00 | b0 02 4d 6d 4d 61 70 4c |Driver..|..MmMapL|
|00000460| 6f 63 6b 65 64 50 61 67 | 65 73 53 70 65 63 69 66 |ockedPag|esSpecif|
|00000470| 79 43 61 63 68 65 00 00 | bc 01 49 6f 53 74 61 72 |yCache..|..IoStar|
|00000480| 74 4e 65 78 74 50 61 63 | 6b 65 74 00 98 03 50 73 |tNextPac|ket...Ps|
|00000490| 54 65 72 6d 69 6e 61 74 | 65 53 79 73 74 65 6d 54 |Terminat|eSystemT|
|000004a0| 68 72 65 61 64 00 5b 02 | 4b 65 53 65 74 50 72 69 |hread.[.|KeSetPri|
|000004b0| 6f 72 69 74 79 54 68 72 | 65 61 64 00 07 02 4b 65 |orityThr|ead...Ke|
|000004c0| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|000004d0| 00 00 a1 01 49 6f 52 65 | 6c 65 61 73 65 43 61 6e |....IoRe|leaseCan|
|000004e0| 63 65 6c 53 70 69 6e 4c | 6f 63 6b 00 48 02 4b 65 |celSpinL|ock.H.Ke|
|000004f0| 52 65 6d 6f 76 65 45 6e | 74 72 79 44 65 76 69 63 |RemoveEn|tryDevic|
|00000500| 65 51 75 65 75 65 00 00 | 1c 01 49 6f 41 63 71 75 |eQueue..|..IoAcqu|
|00000510| 69 72 65 43 61 6e 63 65 | 6c 53 70 69 6e 4c 6f 63 |ireCance|lSpinLoc|
|00000520| 6b 00 61 01 49 6f 46 72 | 65 65 49 72 70 00 62 01 |k.a.IoFr|eeIrp.b.|
|00000530| 49 6f 46 72 65 65 4d 64 | 6c 00 cb 02 4d 6d 55 6e |IoFreeMd|l...MmUn|
|00000540| 6c 6f 63 6b 50 61 67 65 | 73 00 bc 02 4d 6d 50 72 |lockPage|s...MmPr|
|00000550| 6f 62 65 41 6e 64 4c 6f | 63 6b 50 61 67 65 73 00 |obeAndLo|ckPages.|
|00000560| 25 01 49 6f 41 6c 6c 6f | 63 61 74 65 4d 64 6c 00 |%.IoAllo|cateMdl.|
|00000570| 24 01 49 6f 41 6c 6c 6f | 63 61 74 65 49 72 70 00 |$.IoAllo|cateIrp.|
|00000580| 85 05 5f 65 78 63 65 70 | 74 5f 68 61 6e 64 6c 65 |.._excep|t_handle|
|00000590| 72 33 00 00 be 01 49 6f | 53 74 61 72 74 50 61 63 |r3....Io|StartPac|
|000005a0| 6b 65 74 00 f9 01 4b 65 | 43 6c 65 61 72 45 76 65 |ket...Ke|ClearEve|
|000005b0| 6e 74 00 00 19 01 49 6e | 74 65 72 6c 6f 63 6b 65 |nt....In|terlocke|
|000005c0| 64 49 6e 63 72 65 6d 65 | 6e 74 00 00 16 01 49 6e |dIncreme|nt....In|
|000005d0| 74 65 72 6c 6f 63 6b 65 | 64 44 65 63 72 65 6d 65 |terlocke|dDecreme|
|000005e0| 6e 74 00 00 26 02 4b 65 | 49 6e 73 65 72 74 51 75 |nt..&.Ke|InsertQu|
|000005f0| 65 75 65 44 70 63 00 00 | 62 02 4b 65 53 65 74 54 |eueDpc..|b.KeSetT|
|00000600| 69 6d 65 72 45 78 00 00 | 3c 01 49 6f 43 6f 6e 6e |imerEx..|<.IoConn|
|00000610| 65 63 74 49 6e 74 65 72 | 72 75 70 74 00 00 56 01 |ectInter|rupt..V.|
|00000620| 49 6f 44 69 73 63 6f 6e | 6e 65 63 74 49 6e 74 65 |IoDiscon|nectInte|
|00000630| 72 72 75 70 74 00 9b 03 | 52 45 41 44 5f 52 45 47 |rrupt...|READ_REG|
|00000640| 49 53 54 45 52 5f 42 55 | 46 46 45 52 5f 55 4c 4f |ISTER_BU|FFER_ULO|
|00000650| 4e 47 00 00 f3 04 57 52 | 49 54 45 5f 52 45 47 49 |NG....WR|ITE_REGI|
|00000660| 53 54 45 52 5f 42 55 46 | 46 45 52 5f 55 4c 4f 4e |STER_BUF|FER_ULON|
|00000670| 47 00 66 02 4b 65 54 69 | 63 6b 43 6f 75 6e 74 00 |G.f.KeTi|ckCount.|
|00000680| f6 01 4b 65 42 75 67 43 | 68 65 63 6b 45 78 00 00 |..KeBugC|heckEx..|
|00000690| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 4d 00 |ntoskrnl|.exe..M.|
|000006a0| 4b 66 4c 6f 77 65 72 49 | 72 71 6c 00 4e 00 4b 66 |KfLowerI|rql.N.Kf|
|000006b0| 52 61 69 73 65 49 72 71 | 6c 00 4f 00 4b 66 52 65 |RaiseIrq|l.O.KfRe|
|000006c0| 6c 65 61 73 65 53 70 69 | 6e 4c 6f 63 6b 00 4c 00 |leaseSpi|nLock.L.|
|000006d0| 4b 66 41 63 71 75 69 72 | 65 53 70 69 6e 4c 6f 63 |KfAcquir|eSpinLoc|
|000006e0| 6b 00 44 00 4b 65 52 61 | 69 73 65 49 72 71 6c 54 |k.D.KeRa|iseIrqlT|
|000006f0| 6f 44 70 63 4c 65 76 65 | 6c 00 48 41 4c 2e 64 6c |oDpcLeve|l.HAL.dl|
|00000700| 6c 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |l.......|........|
|00000710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+