home *** CD-ROM | disk | FTP | other *** search
Unknown | 2007-12-04 | 960 b |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 68 16 00 00 00 00 00 00 | 00 00 00 00 8e 19 00 00 |h.......|........|
|00000010| ac 02 00 00 5c 16 00 00 | 00 00 00 00 00 00 00 00 |....\...|........|
|00000020| c4 19 00 00 a0 02 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 a8 19 00 00 |........|........|
|00000040| b6 19 00 00 00 00 00 00 | 2e 17 00 00 42 17 00 00 |........|....B...|
|00000050| 50 17 00 00 68 17 00 00 | 78 17 00 00 8a 17 00 00 |P...h...|x.......|
|00000060| a6 17 00 00 b8 17 00 00 | d0 17 00 00 ee 17 00 00 |........|........|
|00000070| f8 17 00 00 0c 18 00 00 | 1c 18 00 00 38 18 00 00 |........|....8...|
|00000080| 4c 18 00 00 0e 17 00 00 | 80 18 00 00 8a 18 00 00 |L.......|........|
|00000090| a0 18 00 00 b6 18 00 00 | d0 18 00 00 e4 18 00 00 |........|........|
|000000a0| f8 18 00 00 12 19 00 00 | 24 19 00 00 3c 19 00 00 |........|$...<...|
|000000b0| 54 19 00 00 6c 19 00 00 | 7e 19 00 00 9c 19 00 00 |T...l...|~.......|
|000000c0| 04 17 00 00 64 18 00 00 | f0 16 00 00 00 00 00 00 |....d...|........|
|000000d0| c0 02 52 74 6c 46 72 65 | 65 41 6e 73 69 53 74 72 |..RtlFre|eAnsiStr|
|000000e0| 69 6e 67 00 db 03 73 74 | 72 6e 63 70 79 00 0f 03 |ing...st|rncpy...|
|000000f0| 52 74 6c 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |RtlUnico|deString|
|00000100| 54 6f 41 6e 73 69 53 74 | 72 69 6e 67 00 00 3d 02 |ToAnsiSt|ring..=.|
|00000110| 4f 62 51 75 65 72 79 4e | 61 6d 65 53 74 72 69 6e |ObQueryN|ameStrin|
|00000120| 67 00 42 00 45 78 46 72 | 65 65 50 6f 6f 6c 00 00 |g.B.ExFr|eePool..|
|00000130| 36 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |6.ExAllo|catePool|
|00000140| 57 69 74 68 54 61 67 00 | 87 03 5a 77 51 75 65 72 |WithTag.|..ZwQuer|
|00000150| 79 4f 62 6a 65 63 74 00 | 59 01 4b 65 44 65 74 61 |yObject.|Y.KeDeta|
|00000160| 63 68 50 72 6f 63 65 73 | 73 00 3f 02 4f 62 52 65 |chProces|s.?.ObRe|
|00000170| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|00000180| 61 6e 64 6c 65 00 4f 01 | 4b 65 41 74 74 61 63 68 |andle.O.|KeAttach|
|00000190| 50 72 6f 63 65 73 73 00 | 44 02 4f 62 66 44 65 72 |Process.|D.ObfDer|
|000001a0| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|000001b0| 5b 02 50 73 4c 6f 6f 6b | 75 70 50 72 6f 63 65 73 |[.PsLook|upProces|
|000001c0| 73 42 79 50 72 6f 63 65 | 73 73 49 64 00 00 5b 03 |sByProce|ssId..[.|
|000001d0| 5a 77 43 6c 6f 73 65 00 | 69 03 5a 77 44 75 70 6c |ZwClose.|i.ZwDupl|
|000001e0| 69 63 61 74 65 4f 62 6a | 65 63 74 00 7a 03 5a 77 |icateObj|ect.z.Zw|
|000001f0| 4f 70 65 6e 50 72 6f 63 | 65 73 73 00 8b 03 5a 77 |OpenProc|ess...Zw|
|00000200| 51 75 65 72 79 53 79 73 | 74 65 6d 49 6e 66 6f 72 |QuerySys|temInfor|
|00000210| 6d 61 74 69 6f 6e 00 00 | df 01 4d 6d 49 73 41 64 |mation..|..MmIsAd|
|00000220| 64 72 65 73 73 56 61 6c | 69 64 00 00 3c 02 4f 62 |dressVal|id..<.Ob|
|00000230| 4f 70 65 6e 4f 62 6a 65 | 63 74 42 79 50 6f 69 6e |OpenObje|ctByPoin|
|00000240| 74 65 72 00 84 03 5a 77 | 51 75 65 72 79 49 6e 66 |ter...Zw|QueryInf|
|00000250| 6f 72 6d 61 74 69 6f 6e | 50 72 6f 63 65 73 73 00 |ormation|Process.|
|00000260| 08 02 4e 74 43 6c 6f 73 | 65 00 7b 03 5a 77 4f 70 |..NtClos|e.{.ZwOp|
|00000270| 65 6e 50 72 6f 63 65 73 | 73 54 6f 6b 65 6e 00 00 |enProces|sToken..|
|00000280| 45 01 49 6f 66 43 6f 6d | 70 6c 65 74 65 52 65 71 |E.IofCom|pleteReq|
|00000290| 75 65 73 74 00 00 47 03 | 53 65 52 65 6c 65 61 73 |uest..G.|SeReleas|
|000002a0| 65 53 75 62 6a 65 63 74 | 43 6f 6e 74 65 78 74 00 |eSubject|Context.|
|000002b0| 40 03 53 65 50 72 69 76 | 69 6c 65 67 65 43 68 65 |@.SePriv|ilegeChe|
|000002c0| 63 6b 00 00 45 00 45 78 | 47 65 74 50 72 65 76 69 |ck..E.Ex|GetPrevi|
|000002d0| 6f 75 73 4d 6f 64 65 00 | 32 03 53 65 43 61 70 74 |ousMode.|2.SeCapt|
|000002e0| 75 72 65 53 75 62 6a 65 | 63 74 43 6f 6e 74 65 78 |ureSubje|ctContex|
|000002f0| 74 00 fb 00 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |t...IoDe|leteDevi|
|00000300| 63 65 00 00 fc 00 49 6f | 44 65 6c 65 74 65 53 79 |ce....Io|DeleteSy|
|00000310| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 d0 02 52 74 |mbolicLi|nk....Rt|
|00000320| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00000330| 6e 67 00 00 f7 00 49 6f | 43 72 65 61 74 65 53 79 |ng....Io|CreateSy|
|00000340| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 f3 00 49 6f |mbolicLi|nk....Io|
|00000350| 43 72 65 61 74 65 44 65 | 76 69 63 65 00 00 07 02 |CreateDe|vice....|
|00000360| 4e 74 42 75 69 6c 64 4e | 75 6d 62 65 72 00 6e 74 |NtBuildN|umber.nt|
|00000370| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 18 03 52 74 |oskrnl.e|xe....Rt|
|00000380| 6c 55 6e 77 69 6e 64 00 | 4b 00 4b 66 4c 6f 77 65 |lUnwind.|K.KfLowe|
|00000390| 72 49 72 71 6c 00 4c 00 | 4b 66 52 61 69 73 65 49 |rIrql.L.|KfRaiseI|
|000003a0| 72 71 6c 00 48 41 4c 2e | 64 6c 6c 00 00 00 00 00 |rql.HAL.|dll.....|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+