home *** CD-ROM | disk | FTP | other *** search
Unknown | 2004-12-09 | 1.9 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| f4 64 00 00 00 00 00 00 | 00 00 00 00 9a 6b 00 00 |.d......|.....k..|
|00000010| b8 02 00 00 dc 64 00 00 | 00 00 00 00 00 00 00 00 |.....d..|........|
|00000020| 1c 6c 00 00 a0 02 00 00 | 00 00 00 00 00 00 00 00 |.l......|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 f2 6b 00 00 |........|.....k..|
|00000040| dc 6b 00 00 c8 6b 00 00 | b4 6b 00 00 08 6c 00 00 |.k...k..|.k...l..|
|00000050| 00 00 00 00 98 66 00 00 | b0 66 00 00 c8 66 00 00 |.....f..|.f...f..|
|00000060| e4 66 00 00 fc 66 00 00 | 0e 67 00 00 24 67 00 00 |.f...f..|.g..$g..|
|00000070| 38 67 00 00 50 67 00 00 | 6a 67 00 00 7a 67 00 00 |8g..Pg..|jg..zg..|
|00000080| 96 67 00 00 a2 67 00 00 | b2 67 00 00 c8 67 00 00 |.g...g..|.g...g..|
|00000090| e0 67 00 00 f0 67 00 00 | fe 67 00 00 1c 68 00 00 |.g...g..|.g...h..|
|000000a0| 34 68 00 00 4a 68 00 00 | 58 68 00 00 62 68 00 00 |4h..Jh..|Xh..bh..|
|000000b0| 72 68 00 00 80 68 00 00 | 94 68 00 00 ac 68 00 00 |rh...h..|.h...h..|
|000000c0| ba 68 00 00 cc 68 00 00 | e4 68 00 00 86 66 00 00 |.h...h..|.h...f..|
|000000d0| 14 69 00 00 2c 69 00 00 | 36 69 00 00 50 69 00 00 |.i..,i..|6i..Pi..|
|000000e0| 6a 69 00 00 74 69 00 00 | 8a 69 00 00 a6 69 00 00 |ji..ti..|.i...i..|
|000000f0| b0 69 00 00 d0 69 00 00 | e4 69 00 00 ee 69 00 00 |.i...i..|.i...i..|
|00000100| f8 69 00 00 14 6a 00 00 | 30 6a 00 00 4e 6a 00 00 |.i...j..|0j..Nj..|
|00000110| 66 6a 00 00 7a 6a 00 00 | 96 6a 00 00 ba 6a 00 00 |fj..zj..|.j...j..|
|00000120| c4 6a 00 00 d4 6a 00 00 | de 6a 00 00 fe 6a 00 00 |.j...j..|.j...j..|
|00000130| 08 6b 00 00 2a 6b 00 00 | 48 6b 00 00 5c 6b 00 00 |.k..*k..|Hk..\k..|
|00000140| 7c 6b 00 00 a8 6b 00 00 | 6e 66 00 00 4c 66 00 00 ||k...k..|nf..Lf..|
|00000150| 34 66 00 00 1c 66 00 00 | fc 68 00 00 04 66 00 00 |4f...f..|.h...f..|
|00000160| 00 00 00 00 80 01 4b 65 | 4c 65 61 76 65 43 72 69 |......Ke|LeaveCri|
|00000170| 74 69 63 61 6c 52 65 67 | 69 6f 6e 00 3c 00 45 78 |ticalReg|ion.<.Ex|
|00000180| 44 65 6c 65 74 65 52 65 | 73 6f 75 72 63 65 4c 69 |DeleteRe|sourceLi|
|00000190| 74 65 00 00 6d 00 45 78 | 52 65 6c 65 61 73 65 52 |te..m.Ex|ReleaseR|
|000001a0| 65 73 6f 75 72 63 65 4c | 69 74 65 00 2e 00 45 78 |esourceL|ite...Ex|
|000001b0| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 45 |AcquireR|esourceE|
|000001c0| 78 63 6c 75 73 69 76 65 | 4c 69 74 65 00 00 5b 01 |xclusive|Lite..[.|
|000001d0| 4b 65 45 6e 74 65 72 43 | 72 69 74 69 63 61 6c 52 |KeEnterC|riticalR|
|000001e0| 65 67 69 6f 6e 00 fb 00 | 49 6f 44 65 6c 65 74 65 |egion...|IoDelete|
|000001f0| 44 65 76 69 63 65 00 00 | fc 00 49 6f 44 65 6c 65 |Device..|..IoDele|
|00000200| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000210| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00000220| 53 74 72 69 6e 67 00 00 | 4a 00 45 78 49 6e 69 74 |String..|J.ExInit|
|00000230| 69 61 6c 69 7a 65 52 65 | 73 6f 75 72 63 65 4c 69 |ializeRe|sourceLi|
|00000240| 74 65 00 00 f7 00 49 6f | 43 72 65 61 74 65 53 79 |te....Io|CreateSy|
|00000250| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 f3 00 49 6f |mbolicLi|nk....Io|
|00000260| 43 72 65 61 74 65 44 65 | 76 69 63 65 00 00 45 01 |CreateDe|vice..E.|
|00000270| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|00000280| 73 74 00 00 e7 01 4d 6d | 4d 61 70 4c 6f 63 6b 65 |st....Mm|MapLocke|
|00000290| 64 50 61 67 65 73 00 00 | 54 02 50 73 47 65 74 43 |dPages..|T.PsGetC|
|000002a0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 49 64 00 |urrentPr|ocessId.|
|000002b0| f8 02 52 74 6c 51 75 65 | 72 79 52 65 67 69 73 74 |..RtlQue|ryRegist|
|000002c0| 72 79 56 61 6c 75 65 73 | 00 00 e1 00 49 6f 41 6c |ryValues|....IoAl|
|000002d0| 6c 6f 63 61 74 65 4d 64 | 6c 00 9e 01 4b 65 53 65 |locateMd|l...KeSe|
|000002e0| 72 76 69 63 65 44 65 73 | 63 72 69 70 74 6f 72 54 |rviceDes|criptorT|
|000002f0| 61 62 6c 65 00 00 08 01 | 49 6f 46 72 65 65 4d 64 |able....|IoFreeMd|
|00000300| 6c 00 f6 01 4d 6d 55 6e | 6c 6f 63 6b 50 61 67 65 |l...MmUn|lockPage|
|00000310| 73 00 ed 01 4d 6d 50 72 | 6f 62 65 41 6e 64 4c 6f |s...MmPr|obeAndLo|
|00000320| 63 6b 50 61 67 65 73 00 | 76 01 4b 65 49 6e 69 74 |ckPages.|v.KeInit|
|00000330| 69 61 6c 69 7a 65 53 70 | 69 6e 4c 6f 63 6b 00 00 |ializeSp|inLock..|
|00000340| 07 02 4e 74 42 75 69 6c | 64 4e 75 6d 62 65 72 00 |..NtBuil|dNumber.|
|00000350| 42 00 45 78 46 72 65 65 | 50 6f 6f 6c 00 00 d5 00 |B.ExFree|Pool....|
|00000360| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 43 6f 6d 70 61 |Interloc|kedCompa|
|00000370| 72 65 45 78 63 68 61 6e | 67 65 00 00 36 00 45 78 |reExchan|ge..6.Ex|
|00000380| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00000390| 54 61 67 00 d7 00 49 6e | 74 65 72 6c 6f 63 6b 65 |Tag...In|terlocke|
|000003a0| 64 45 78 63 68 61 6e 67 | 65 00 a2 03 5a 77 57 72 |dExchang|e...ZwWr|
|000003b0| 69 74 65 46 69 6c 65 00 | 5b 03 5a 77 43 6c 6f 73 |iteFile.|[.ZwClos|
|000003c0| 65 00 60 03 5a 77 43 72 | 65 61 74 65 46 69 6c 65 |e.`.ZwCr|eateFile|
|000003d0| 00 00 78 03 5a 77 4f 70 | 65 6e 46 69 6c 65 00 00 |..x.ZwOp|enFile..|
|000003e0| 73 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 4d 75 |s.KeInit|ializeMu|
|000003f0| 74 65 78 00 d6 00 49 6e | 74 65 72 6c 6f 63 6b 65 |tex...In|terlocke|
|00000400| 64 44 65 63 72 65 6d 65 | 6e 74 00 00 a2 01 4b 65 |dDecreme|nt....Ke|
|00000410| 53 65 74 45 76 65 6e 74 | 00 00 92 01 4b 65 52 65 |SetEvent|....KeRe|
|00000420| 6c 65 61 73 65 4d 75 74 | 65 78 00 00 b8 01 4b 65 |leaseMut|ex....Ke|
|00000430| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00000440| 65 63 74 00 d9 00 49 6e | 74 65 72 6c 6f 63 6b 65 |ect...In|terlocke|
|00000450| 64 49 6e 63 72 65 6d 65 | 6e 74 00 00 55 02 50 73 |dIncreme|nt..U.Ps|
|00000460| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|00000470| 49 64 00 00 41 01 49 6f | 57 72 69 74 65 45 72 72 |Id..A.Io|WriteErr|
|00000480| 6f 72 4c 6f 67 45 6e 74 | 72 79 00 00 ce 03 6d 65 |orLogEnt|ry....me|
|00000490| 6d 6d 6f 76 65 00 df 00 | 49 6f 41 6c 6c 6f 63 61 |mmove...|IoAlloca|
|000004a0| 74 65 45 72 72 6f 72 4c | 6f 67 45 6e 74 72 79 00 |teErrorL|ogEntry.|
|000004b0| 57 01 4b 65 44 65 6c 61 | 79 45 78 65 63 75 74 69 |W.KeDela|yExecuti|
|000004c0| 6f 6e 54 68 72 65 61 64 | 00 00 c1 03 5f 77 63 73 |onThread|...._wcs|
|000004d0| 75 70 72 00 0c 01 49 6f | 47 65 74 43 75 72 72 65 |upr...Io|GetCurre|
|000004e0| 6e 74 50 72 6f 63 65 73 | 73 00 11 01 49 6f 47 65 |ntProces|s...IoGe|
|000004f0| 74 52 65 6c 61 74 65 64 | 44 65 76 69 63 65 4f 62 |tRelated|DeviceOb|
|00000500| 6a 65 63 74 00 00 da 03 | 73 74 72 6e 63 6d 70 00 |ject....|strncmp.|
|00000510| 77 02 52 74 6c 41 6e 73 | 69 53 74 72 69 6e 67 54 |w.RtlAns|iStringT|
|00000520| 6f 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |oUnicode|String..|
|00000530| cd 02 52 74 6c 49 6e 69 | 74 41 6e 73 69 53 74 72 |..RtlIni|tAnsiStr|
|00000540| 69 6e 67 00 ea 03 77 63 | 73 6c 65 6e 00 00 e6 03 |ing...wc|slen....|
|00000550| 77 63 73 63 68 72 00 00 | 8a 03 5a 77 51 75 65 72 |wcschr..|..ZwQuer|
|00000560| 79 53 79 6d 62 6f 6c 69 | 63 4c 69 6e 6b 4f 62 6a |ySymboli|cLinkObj|
|00000570| 65 63 74 00 7d 03 5a 77 | 4f 70 65 6e 53 79 6d 62 |ect.}.Zw|OpenSymb|
|00000580| 6f 6c 69 63 4c 69 6e 6b | 4f 62 6a 65 63 74 00 00 |olicLink|Object..|
|00000590| 43 00 45 78 46 72 65 65 | 54 6f 50 61 67 65 64 4c |C.ExFree|ToPagedL|
|000005a0| 6f 6f 6b 61 73 69 64 65 | 4c 69 73 74 00 00 44 02 |ookaside|List..D.|
|000005b0| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|000005c0| 6a 65 63 74 00 00 3d 02 | 4f 62 51 75 65 72 79 4e |ject..=.|ObQueryN|
|000005d0| 61 6d 65 53 74 72 69 6e | 67 00 3f 02 4f 62 52 65 |ameStrin|g.?.ObRe|
|000005e0| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|000005f0| 61 6e 64 6c 65 00 32 00 | 45 78 41 6c 6c 6f 63 61 |andle.2.|ExAlloca|
|00000600| 74 65 46 72 6f 6d 50 61 | 67 65 64 4c 6f 6f 6b 61 |teFromPa|gedLooka|
|00000610| 73 69 64 65 4c 69 73 74 | 00 00 e8 03 77 63 73 63 |sideList|....wcsc|
|00000620| 70 79 00 00 54 01 4b 65 | 43 6c 65 61 72 45 76 65 |py..T.Ke|ClearEve|
|00000630| 6e 74 00 00 ba 03 5f 73 | 74 72 75 70 72 00 0f 03 |nt...._s|trupr...|
|00000640| 52 74 6c 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |RtlUnico|deString|
|00000650| 54 6f 41 6e 73 69 53 74 | 72 69 6e 67 00 00 ed 03 |ToAnsiSt|ring....|
|00000660| 77 63 73 6e 63 70 79 00 | 48 00 45 78 49 6e 69 74 |wcsncpy.|H.ExInit|
|00000670| 69 61 6c 69 7a 65 50 61 | 67 65 64 4c 6f 6f 6b 61 |ializePa|gedLooka|
|00000680| 73 69 64 65 4c 69 73 74 | 00 00 3a 00 45 78 44 65 |sideList|..:.ExDe|
|00000690| 6c 65 74 65 50 61 67 65 | 64 4c 6f 6f 6b 61 73 69 |letePage|dLookasi|
|000006a0| 64 65 4c 69 73 74 00 00 | 70 01 4b 65 49 6e 69 74 |deList..|p.KeInit|
|000006b0| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 f8 00 49 6f |ializeEv|ent...Io|
|000006c0| 43 72 65 61 74 65 53 79 | 6e 63 68 72 6f 6e 69 7a |CreateSy|nchroniz|
|000006d0| 61 74 69 6f 6e 45 76 65 | 6e 74 00 00 2f 00 45 78 |ationEve|nt../.Ex|
|000006e0| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 53 |AcquireR|esourceS|
|000006f0| 68 61 72 65 64 4c 69 74 | 65 00 6e 74 6f 73 6b 72 |haredLit|e.ntoskr|
|00000700| 6e 6c 2e 65 78 65 00 00 | 18 03 52 74 6c 55 6e 77 |nl.exe..|..RtlUnw|
|00000710| 69 6e 64 00 4d 00 4b 66 | 52 65 6c 65 61 73 65 53 |ind.M.Kf|ReleaseS|
|00000720| 70 69 6e 4c 6f 63 6b 00 | 4a 00 4b 66 41 63 71 75 |pinLock.|J.KfAcqu|
|00000730| 69 72 65 53 70 69 6e 4c | 6f 63 6b 00 01 00 45 78 |ireSpinL|ock...Ex|
|00000740| 52 65 6c 65 61 73 65 46 | 61 73 74 4d 75 74 65 78 |ReleaseF|astMutex|
|00000750| 00 00 00 00 45 78 41 63 | 71 75 69 72 65 46 61 73 |....ExAc|quireFas|
|00000760| 74 4d 75 74 65 78 00 00 | 42 00 4b 65 47 65 74 43 |tMutex..|B.KeGetC|
|00000770| 75 72 72 65 6e 74 49 72 | 71 6c 00 00 48 41 4c 2e |urrentIr|ql..HAL.|
|00000780| 64 6c 6c 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |dll.....|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+