home *** CD-ROM | disk | FTP | other *** search
Unknown | 2003-08-06 | 2.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 56 57 68 84 00 00 00 bf | 01 00 00 c0 e8 4f 34 ff |VWh.....|.....O4.|
|00000010| ff 8b f0 85 f6 74 58 8b | 44 24 10 8b 4c 24 0c 50 |.....tX.|D$..L$.P|
|00000020| 51 8b ce e8 98 4e ff ff | 68 c8 00 00 00 e8 ee 30 |Q....N..|h......0|
|00000030| ff ff 85 c0 74 0a 56 8b | c8 e8 32 dd ff ff eb 02 |....t.V.|..2.....|
|00000040| 33 c0 85 c0 89 86 80 00 | 00 00 74 06 8b 50 14 89 |3.......|..t..P..|
|00000050| 56 7c 89 35 4c 09 02 00 | 8b 7e 7c 85 ff 7d 09 6a |V|.5L...|.~|..}.j|
|00000060| 01 8b ce e8 18 da ff ff | 8b c7 5f 5e c2 08 00 8b |........|.._^....|
|00000070| c7 5f c7 05 4c 09 02 00 | 00 00 00 00 5e c2 08 00 |._..L...|....^...|
|00000080| 70 0d 01 00 00 00 00 00 | 00 00 00 00 0a 14 01 00 |p.......|........|
|00000090| d4 02 00 00 5c 0d 01 00 | 00 00 00 00 00 00 00 00 |....\...|........|
|000000a0| 78 14 01 00 c0 02 00 00 | 00 00 00 00 00 00 00 00 |x.......|........|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 50 14 01 00 |........|....P...|
|000000c0| 3a 14 01 00 24 14 01 00 | 64 14 01 00 00 00 00 00 |:...$...|d.......|
|000000d0| da 0e 01 00 f2 0e 01 00 | 04 0f 01 00 1c 0f 01 00 |........|........|
|000000e0| 38 0f 01 00 42 0f 01 00 | 4c 0f 01 00 58 0f 01 00 |8...B...|L...X...|
|000000f0| 6a 0f 01 00 82 0f 01 00 | 9a 0f 01 00 ac 0f 01 00 |j.......|........|
|00000100| be 0f 01 00 c8 0f 01 00 | e4 0f 01 00 f2 0f 01 00 |........|........|
|00000110| 0a 10 01 00 1e 10 01 00 | 3a 10 01 00 56 10 01 00 |........|:...V...|
|00000120| 60 10 01 00 7a 10 01 00 | 8e 10 01 00 a8 10 01 00 |`...z...|........|
|00000130| ca 10 01 00 e2 10 01 00 | ee 10 01 00 06 11 01 00 |........|........|
|00000140| 16 11 01 00 26 11 01 00 | 3c 11 01 00 4c 11 01 00 |....&...|<...L...|
|00000150| 68 11 01 00 7c 11 01 00 | 86 11 01 00 ca 0e 01 00 |h...|...|........|
|00000160| c0 11 01 00 cc 11 01 00 | d8 11 01 00 e2 11 01 00 |........|........|
|00000170| fa 11 01 00 12 12 01 00 | 2e 12 01 00 3c 12 01 00 |........|....<...|
|00000180| 52 12 01 00 6c 12 01 00 | 8c 12 01 00 aa 12 01 00 |R...l...|........|
|00000190| cc 12 01 00 e0 12 01 00 | fc 12 01 00 12 13 01 00 |........|........|
|000001a0| 24 13 01 00 30 13 01 00 | 48 13 01 00 52 13 01 00 |$...0...|H...R...|
|000001b0| 70 13 01 00 92 13 01 00 | b6 13 01 00 c6 13 01 00 |p.......|........|
|000001c0| d4 13 01 00 e6 13 01 00 | f6 13 01 00 18 14 01 00 |........|........|
|000001d0| be 0e 01 00 ae 0e 01 00 | 96 0e 01 00 9e 11 01 00 |........|........|
|000001e0| 88 0e 01 00 00 00 00 00 | 42 00 45 78 46 72 65 65 |........|B.ExFree|
|000001f0| 50 6f 6f 6c 00 00 d0 02 | 52 74 6c 49 6e 69 74 55 |Pool....|RtlInitU|
|00000200| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 07 02 |nicodeSt|ring....|
|00000210| 4e 74 42 75 69 6c 64 4e | 75 6d 62 65 72 00 b1 03 |NtBuildN|umber...|
|00000220| 5f 70 75 72 65 63 61 6c | 6c 00 e6 01 4d 6d 4d 61 |_purecal|l...MmMa|
|00000230| 70 49 6f 53 70 61 63 65 | 00 00 dd 01 4d 6d 47 65 |pIoSpace|....MmGe|
|00000240| 74 50 68 79 73 69 63 61 | 6c 41 64 64 72 65 73 73 |tPhysica|lAddress|
|00000250| 00 00 f7 01 4d 6d 55 6e | 6d 61 70 49 6f 53 70 61 |....MmUn|mapIoSpa|
|00000260| 63 65 00 00 36 00 45 78 | 41 6c 6c 6f 63 61 74 65 |ce..6.Ex|Allocate|
|00000270| 50 6f 6f 6c 57 69 74 68 | 54 61 67 00 7b 02 52 74 |PoolWith|Tag.{.Rt|
|00000280| 6c 41 70 70 65 6e 64 55 | 6e 69 63 6f 64 65 54 6f |lAppendU|nicodeTo|
|00000290| 53 74 72 69 6e 67 00 00 | ea 03 77 63 73 6c 65 6e |String..|..wcslen|
|000002a0| 00 00 e6 03 77 63 73 63 | 68 72 00 00 be 03 5f 77 |....wcsc|hr...._w|
|000002b0| 63 73 6e 69 63 6d 70 00 | fb 00 49 6f 44 65 6c 65 |csnicmp.|..IoDele|
|000002c0| 74 65 44 65 76 69 63 65 | 00 00 fc 00 49 6f 44 65 |teDevice|....IoDe|
|000002d0| 6c 65 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |leteSymb|olicLink|
|000002e0| 00 00 f7 00 49 6f 43 72 | 65 61 74 65 53 79 6d 62 |....IoCr|eateSymb|
|000002f0| 6f 6c 69 63 4c 69 6e 6b | 00 00 f3 00 49 6f 43 72 |olicLink|....IoCr|
|00000300| 65 61 74 65 44 65 76 69 | 63 65 00 00 fd 00 49 6f |eateDevi|ce....Io|
|00000310| 44 65 74 61 63 68 44 65 | 76 69 63 65 00 00 5b 03 |DetachDe|vice..[.|
|00000320| 5a 77 43 6c 6f 73 65 00 | 3f 02 4f 62 52 65 66 65 |ZwClose.|?.ObRefe|
|00000330| 72 65 6e 63 65 4f 62 6a | 65 63 74 42 79 48 61 6e |renceObj|ectByHan|
|00000340| 64 6c 65 00 78 03 5a 77 | 4f 70 65 6e 46 69 6c 65 |dle.x.Zw|OpenFile|
|00000350| 00 00 44 02 4f 62 66 44 | 65 72 65 66 65 72 65 6e |..D.ObfD|ereferen|
|00000360| 63 65 4f 62 6a 65 63 74 | 00 00 df 01 4d 6d 49 73 |ceObject|....MmIs|
|00000370| 41 64 64 72 65 73 73 56 | 61 6c 69 64 00 00 8a 03 |AddressV|alid....|
|00000380| 5a 77 51 75 65 72 79 53 | 79 6d 62 6f 6c 69 63 4c |ZwQueryS|ymbolicL|
|00000390| 69 6e 6b 4f 62 6a 65 63 | 74 00 7d 03 5a 77 4f 70 |inkObjec|t.}.ZwOp|
|000003a0| 65 6e 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 4f 62 |enSymbol|icLinkOb|
|000003b0| 6a 65 63 74 00 00 e8 03 | 77 63 73 63 70 79 00 00 |ject....|wcscpy..|
|000003c0| e4 00 49 6f 41 74 74 61 | 63 68 44 65 76 69 63 65 |..IoAtta|chDevice|
|000003d0| 42 79 50 6f 69 6e 74 65 | 72 00 3d 02 4f 62 51 75 |ByPointe|r.=.ObQu|
|000003e0| 65 72 79 4e 61 6d 65 53 | 74 72 69 6e 67 00 57 01 |eryNameS|tring.W.|
|000003f0| 4b 65 44 65 6c 61 79 45 | 78 65 63 75 74 69 6f 6e |KeDelayE|xecution|
|00000400| 54 68 72 65 61 64 00 00 | 2e 00 45 78 41 63 71 75 |Thread..|..ExAcqu|
|00000410| 69 72 65 52 65 73 6f 75 | 72 63 65 45 78 63 6c 75 |ireResou|rceExclu|
|00000420| 73 69 76 65 4c 69 74 65 | 00 00 6d 00 45 78 52 65 |siveLite|..m.ExRe|
|00000430| 6c 65 61 73 65 52 65 73 | 6f 75 72 63 65 4c 69 74 |leaseRes|ourceLit|
|00000440| 65 00 07 01 49 6f 46 72 | 65 65 49 72 70 00 b8 01 |e...IoFr|eeIrp...|
|00000450| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|00000460| 62 6a 65 63 74 00 44 01 | 49 6f 66 43 61 6c 6c 44 |bject.D.|IofCallD|
|00000470| 72 69 76 65 72 00 f4 00 | 49 6f 43 72 65 61 74 65 |river...|IoCreate|
|00000480| 46 69 6c 65 00 00 60 01 | 4b 65 47 65 74 43 75 72 |File..`.|KeGetCur|
|00000490| 72 65 6e 74 54 68 72 65 | 61 64 00 00 e0 00 49 6f |rentThre|ad....Io|
|000004a0| 41 6c 6c 6f 63 61 74 65 | 49 72 70 00 11 01 49 6f |Allocate|Irp...Io|
|000004b0| 47 65 74 52 65 6c 61 74 | 65 64 44 65 76 69 63 65 |GetRelat|edDevice|
|000004c0| 4f 62 6a 65 63 74 00 00 | 70 01 4b 65 49 6e 69 74 |Object..|p.KeInit|
|000004d0| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 e5 03 77 63 |ializeEv|ent...wc|
|000004e0| 73 63 61 74 00 00 95 03 | 5a 77 53 65 74 49 6e 66 |scat....|ZwSetInf|
|000004f0| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 7a 02 |ormation|File..z.|
|00000500| 52 74 6c 41 70 70 65 6e | 64 55 6e 69 63 6f 64 65 |RtlAppen|dUnicode|
|00000510| 53 74 72 69 6e 67 54 6f | 53 74 72 69 6e 67 00 00 |StringTo|String..|
|00000520| bc 03 5f 77 63 73 69 63 | 6d 70 00 00 df 03 73 77 |.._wcsic|mp....sw|
|00000530| 70 72 69 6e 74 66 00 00 | ce 03 6d 65 6d 6d 6f 76 |printf..|..memmov|
|00000540| 65 00 5b 01 4b 65 45 6e | 74 65 72 43 72 69 74 69 |e.[.KeEn|terCriti|
|00000550| 63 61 6c 52 65 67 69 6f | 6e 00 80 01 4b 65 4c 65 |calRegio|n...KeLe|
|00000560| 61 76 65 43 72 69 74 69 | 63 61 6c 52 65 67 69 6f |aveCriti|calRegio|
|00000570| 6e 00 32 01 49 6f 53 65 | 74 54 68 72 65 61 64 48 |n.2.IoSe|tThreadH|
|00000580| 61 72 64 45 72 72 6f 72 | 4d 6f 64 65 00 00 a2 01 |ardError|Mode....|
|00000590| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 45 01 49 6f |KeSetEve|nt..E.Io|
|000005a0| 66 43 6f 6d 70 6c 65 74 | 65 52 65 71 75 65 73 74 |fComplet|eRequest|
|000005b0| 00 00 89 02 52 74 6c 43 | 6f 6d 70 61 72 65 55 6e |....RtlC|ompareUn|
|000005c0| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 77 02 52 74 |icodeStr|ing.w.Rt|
|000005d0| 6c 41 6e 73 69 53 74 72 | 69 6e 67 54 6f 55 6e 69 |lAnsiStr|ingToUni|
|000005e0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 f2 02 52 74 |codeStri|ng....Rt|
|000005f0| 6c 4f 65 6d 53 74 72 69 | 6e 67 54 6f 55 6e 69 63 |lOemStri|ngToUnic|
|00000600| 6f 64 65 53 74 72 69 6e | 67 00 63 02 50 73 53 65 |odeStrin|g.c.PsSe|
|00000610| 74 43 72 65 61 74 65 50 | 72 6f 63 65 73 73 4e 6f |tCreateP|rocessNo|
|00000620| 74 69 66 79 52 6f 75 74 | 69 6e 65 00 cc 02 52 74 |tifyRout|ine...Rt|
|00000630| 6c 49 6d 61 67 65 4e 74 | 48 65 61 64 65 72 00 00 |lImageNt|Header..|
|00000640| 8b 03 5a 77 51 75 65 72 | 79 53 79 73 74 65 6d 49 |..ZwQuer|ySystemI|
|00000650| 6e 66 6f 72 6d 61 74 69 | 6f 6e 00 00 0c 01 49 6f |nformati|on....Io|
|00000660| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000670| 73 00 8c 03 5a 77 51 75 | 65 72 79 56 61 6c 75 65 |s...ZwQu|eryValue|
|00000680| 4b 65 79 00 79 03 5a 77 | 4f 70 65 6e 4b 65 79 00 |Key.y.Zw|OpenKey.|
|00000690| 76 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 53 70 |v.KeInit|ializeSp|
|000006a0| 69 6e 4c 6f 63 6b 00 00 | ec 03 77 63 73 6e 63 6d |inLock..|..wcsncm|
|000006b0| 70 00 41 02 4f 62 52 65 | 66 65 72 65 6e 63 65 4f |p.A.ObRe|ferenceO|
|000006c0| 62 6a 65 63 74 42 79 50 | 6f 69 6e 74 65 72 00 00 |bjectByP|ointer..|
|000006d0| 27 01 49 6f 52 65 67 69 | 73 74 65 72 46 73 52 65 |'.IoRegi|sterFsRe|
|000006e0| 67 69 73 74 72 61 74 69 | 6f 6e 43 68 61 6e 67 65 |gistrati|onChange|
|000006f0| 00 00 3d 01 49 6f 55 6e | 72 65 67 69 73 74 65 72 |..=.IoUn|register|
|00000700| 46 73 52 65 67 69 73 74 | 72 61 74 69 6f 6e 43 68 |FsRegist|rationCh|
|00000710| 61 6e 67 65 00 00 54 01 | 4b 65 43 6c 65 61 72 45 |ange..T.|KeClearE|
|00000720| 76 65 6e 74 00 00 39 01 | 49 6f 53 74 6f 70 54 69 |vent..9.|IoStopTi|
|00000730| 6d 65 72 00 62 00 45 78 | 51 75 65 75 65 57 6f 72 |mer.b.Ex|QueueWor|
|00000740| 6b 49 74 65 6d 00 37 01 | 49 6f 53 74 61 72 74 54 |kItem.7.|IoStartT|
|00000750| 69 6d 65 72 00 00 16 01 | 49 6f 49 6e 69 74 69 61 |imer....|IoInitia|
|00000760| 6c 69 7a 65 54 69 6d 65 | 72 00 6e 74 6f 73 6b 72 |lizeTime|r.ntoskr|
|00000770| 6e 6c 2e 65 78 65 00 00 | 18 03 52 74 6c 55 6e 77 |nl.exe..|..RtlUnw|
|00000780| 69 6e 64 00 01 00 45 78 | 52 65 6c 65 61 73 65 46 |ind...Ex|ReleaseF|
|00000790| 61 73 74 4d 75 74 65 78 | 00 00 00 00 45 78 41 63 |astMutex|....ExAc|
|000007a0| 71 75 69 72 65 46 61 73 | 74 4d 75 74 65 78 00 00 |quireFas|tMutex..|
|000007b0| 4d 00 4b 66 52 65 6c 65 | 61 73 65 53 70 69 6e 4c |M.KfRele|aseSpinL|
|000007c0| 6f 63 6b 00 4a 00 4b 66 | 41 63 71 75 69 72 65 53 |ock.J.Kf|AcquireS|
|000007d0| 70 69 6e 4c 6f 63 6b 00 | 48 41 4c 2e 64 6c 6c 00 |pinLock.|HAL.dll.|
+--------+-------------------------+-------------------------+--------+--------+