home *** CD-ROM | disk | FTP | other *** search
Unknown | 2004-06-30 | 1.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| c4 1d 00 00 00 00 00 00 | 00 00 00 00 c4 20 00 00 |........|..... ..|
|00000010| 08 1b 00 00 bc 1d 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| fa 20 00 00 00 1b 00 00 | 00 00 00 00 00 00 00 00 |. ......|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 e6 20 00 00 |........|..... ..|
|00000040| 00 00 00 00 70 1e 00 00 | 82 1e 00 00 8e 1e 00 00 |....p...|........|
|00000050| a6 1e 00 00 bc 1e 00 00 | d2 1e 00 00 ea 1e 00 00 |........|........|
|00000060| 06 1f 00 00 18 1f 00 00 | 30 1f 00 00 48 1f 00 00 |........|0...H...|
|00000070| 5a 1f 00 00 70 1f 00 00 | 80 1f 00 00 90 1f 00 00 |Z...p...|........|
|00000080| 66 1e 00 00 bc 1f 00 00 | ca 1f 00 00 e2 1f 00 00 |f.......|........|
|00000090| f4 1f 00 00 fe 1f 00 00 | 16 20 00 00 28 20 00 00 |........|. ..( ..|
|000000a0| 3c 20 00 00 50 20 00 00 | 5e 20 00 00 6c 20 00 00 |< ..P ..|^ ..l ..|
|000000b0| 84 20 00 00 92 20 00 00 | ac 20 00 00 d2 20 00 00 |. ... ..|. ... ..|
|000000c0| a0 1f 00 00 4c 1e 00 00 | 00 00 00 00 f2 01 4b 65 |....L...|......Ke|
|000000d0| 44 65 6c 61 79 45 78 65 | 63 75 74 69 6f 6e 54 68 |DelayExe|cutionTh|
|000000e0| 72 65 61 64 00 00 ee 04 | 5a 77 43 6c 6f 73 65 00 |read....|ZwClose.|
|000000f0| 34 05 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |4.ZwQuer|yValueKe|
|00000100| 79 00 14 05 5a 77 4f 70 | 65 6e 4b 65 79 00 0b 04 |y...ZwOp|enKey...|
|00000110| 52 74 6c 49 6e 69 74 55 | 6e 69 63 6f 64 65 53 74 |RtlInitU|nicodeSt|
|00000120| 72 69 6e 67 00 00 da 01 | 49 6f 66 43 6f 6d 70 6c |ring....|IofCompl|
|00000130| 65 74 65 52 65 71 75 65 | 73 74 00 00 62 01 49 6f |eteReque|st..b.Io|
|00000140| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000150| 73 00 43 03 50 73 47 65 | 74 43 75 72 72 65 6e 74 |s.C.PsGe|tCurrent|
|00000160| 50 72 6f 63 65 73 73 49 | 64 00 19 03 4f 62 52 65 |ProcessI|d...ObRe|
|00000170| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|00000180| 61 6e 64 6c 65 00 49 01 | 49 6f 44 65 6c 65 74 65 |andle.I.|IoDelete|
|00000190| 44 65 76 69 63 65 00 00 | 3d 03 50 73 43 72 65 61 |Device..|=.PsCrea|
|000001a0| 74 65 53 79 73 74 65 6d | 54 68 72 65 61 64 00 00 |teSystem|Thread..|
|000001b0| 41 01 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |A.IoCrea|teSymbol|
|000001c0| 69 63 4c 69 6e 6b 00 00 | 38 01 49 6f 43 72 65 61 |icLink..|8.IoCrea|
|000001d0| 74 65 44 65 76 69 63 65 | 00 00 4f 05 5a 77 54 65 |teDevice|..O.ZwTe|
|000001e0| 72 6d 69 6e 61 74 65 50 | 72 6f 63 65 73 73 00 00 |rminateP|rocess..|
|000001f0| 15 05 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 00 |..ZwOpen|Process.|
|00000200| 4c 05 5a 77 53 65 74 56 | 61 6c 75 65 4b 65 79 00 |L.ZwSetV|alueKey.|
|00000210| f3 04 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |..ZwCrea|teFile..|
|00000220| 45 02 4b 65 53 65 72 76 | 69 63 65 44 65 73 63 72 |E.KeServ|iceDescr|
|00000230| 69 70 74 6f 72 54 61 62 | 6c 65 00 00 12 05 5a 77 |iptorTab|le....Zw|
|00000240| 4f 70 65 6e 46 69 6c 65 | 00 00 21 03 4f 62 66 44 |OpenFile|..!.ObfD|
|00000250| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00000260| 00 00 f4 01 4b 65 44 65 | 74 61 63 68 50 72 6f 63 |....KeDe|tachProc|
|00000270| 65 73 73 00 d3 02 4e 74 | 43 6c 6f 73 65 00 16 03 |ess...Nt|Close...|
|00000280| 4f 62 4f 70 65 6e 4f 62 | 6a 65 63 74 42 79 50 6f |ObOpenOb|jectByPo|
|00000290| 69 6e 74 65 72 00 eb 01 | 4b 65 41 74 74 61 63 68 |inter...|KeAttach|
|000002a0| 50 72 6f 63 65 73 73 00 | 17 03 4f 62 51 75 65 72 |Process.|..ObQuer|
|000002b0| 79 4e 61 6d 65 53 74 72 | 69 6e 67 00 fc 01 4b 65 |yNameStr|ing...Ke|
|000002c0| 47 65 74 50 72 65 76 69 | 6f 75 73 4d 6f 64 65 00 |GetPrevi|ousMode.|
|000002d0| 36 05 5a 77 52 65 61 64 | 46 69 6c 65 00 00 56 05 |6.ZwRead|File..V.|
|000002e0| 5a 77 57 72 69 74 65 46 | 69 6c 65 00 60 02 4b 65 |ZwWriteF|ile.`.Ke|
|000002f0| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00000300| 65 63 74 00 11 05 5a 77 | 4f 70 65 6e 45 76 65 6e |ect...Zw|OpenEven|
|00000310| 74 00 28 05 5a 77 51 75 | 65 72 79 49 6e 66 6f 72 |t.(.ZwQu|eryInfor|
|00000320| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 87 04 52 74 |mationFi|le....Rt|
|00000330| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 43 68 |lUpcaseU|nicodeCh|
|00000340| 61 72 00 00 6e 74 6f 73 | 6b 72 6e 6c 2e 65 78 65 |ar..ntos|krnl.exe|
|00000350| 00 00 68 05 5f 65 78 63 | 65 70 74 5f 68 61 6e 64 |..h._exc|ept_hand|
|00000360| 6c 65 72 33 00 00 40 00 | 4b 65 47 65 74 43 75 72 |ler3..@.|KeGetCur|
|00000370| 72 65 6e 74 49 72 71 6c | 00 00 48 41 4c 2e 64 6c |rentIrql|..HAL.dl|
|00000380| 6c 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |l.......|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+