home *** CD-ROM | disk | FTP | other *** search
Unknown | 2000-01-22 | 2.2 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 30 f4 00 00 00 00 00 00 | 00 00 00 00 d0 f5 00 00 |0.......|........|
|00000010| e0 02 00 00 48 f4 00 00 | 00 00 00 00 00 00 00 00 |....H...|........|
|00000020| 80 fc 00 00 f8 02 00 00 | 40 f4 00 00 00 00 00 00 |........|@.......|
|00000030| 00 00 00 00 ae fc 00 00 | f0 02 00 00 00 00 00 00 |........|........|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 94 f5 00 00 a8 f5 00 00 | bc f5 00 00 00 00 00 00 |........|........|
|00000060| 9a fc 00 00 00 00 00 00 | 98 f7 00 00 16 f6 00 00 |........|........|
|00000070| 2e f6 00 00 40 f6 00 00 | 58 f6 00 00 62 f6 00 00 |....@...|X...b...|
|00000080| 7a f6 00 00 98 f6 00 00 | b4 f6 00 00 d0 f6 00 00 |z.......|........|
|00000090| e0 f6 00 00 f2 f6 00 00 | 08 f7 00 00 20 f7 00 00 |........|.... ...|
|000000a0| 30 f7 00 00 3e f7 00 00 | 58 f7 00 00 6c f7 00 00 |0...>...|X...l...|
|000000b0| ec f5 00 00 04 f6 00 00 | a8 f7 00 00 b4 f7 00 00 |........|........|
|000000c0| d4 f7 00 00 e8 f7 00 00 | f6 f7 00 00 04 f8 00 00 |........|........|
|000000d0| 1c f8 00 00 38 f8 00 00 | 42 f8 00 00 4c f8 00 00 |....8...|B...L...|
|000000e0| 66 f8 00 00 7c f8 00 00 | 92 f8 00 00 a0 f8 00 00 |f...|...|........|
|000000f0| b8 f8 00 00 c4 f8 00 00 | e0 f8 00 00 ee f8 00 00 |........|........|
|00000100| 84 f7 00 00 20 f9 00 00 | d8 f5 00 00 4c f9 00 00 |.... ...|....L...|
|00000110| 60 f9 00 00 70 f9 00 00 | 88 f9 00 00 98 f9 00 00 |`...p...|........|
|00000120| aa f9 00 00 cc f9 00 00 | e4 f9 00 00 02 fa 00 00 |........|........|
|00000130| 20 fa 00 00 3e fa 00 00 | 52 fa 00 00 5e fa 00 00 | ...>...|R...^...|
|00000140| 7c fa 00 00 96 fa 00 00 | b6 fa 00 00 ce fa 00 00 ||.......|........|
|00000150| e4 fa 00 00 fc fa 00 00 | 0c fb 00 00 1a fb 00 00 |........|........|
|00000160| 34 fb 00 00 42 fb 00 00 | 4e fb 00 00 6e fb 00 00 |4...B...|N...n...|
|00000170| 80 fb 00 00 90 fb 00 00 | a2 fb 00 00 b8 fb 00 00 |........|........|
|00000180| d4 fb 00 00 ee fb 00 00 | fe fb 00 00 12 fc 00 00 |........|........|
|00000190| 24 fc 00 00 34 fc 00 00 | 44 fc 00 00 50 fc 00 00 |$...4...|D...P...|
|000001a0| 60 fc 00 00 8e fc 00 00 | 36 f9 00 00 06 f9 00 00 |`.......|6.......|
|000001b0| 00 00 00 00 42 00 4b 65 | 47 65 74 43 75 72 72 65 |....B.Ke|GetCurre|
|000001c0| 6e 74 49 72 71 6c 00 00 | 4d 00 4b 66 52 65 6c 65 |ntIrql..|M.KfRele|
|000001d0| 61 73 65 53 70 69 6e 4c | 6f 63 6b 00 4a 00 4b 66 |aseSpinL|ock.J.Kf|
|000001e0| 41 63 71 75 69 72 65 53 | 70 69 6e 4c 6f 63 6b 00 |AcquireS|pinLock.|
|000001f0| 48 41 4c 2e 64 6c 6c 00 | 70 01 4b 65 49 6e 69 74 |HAL.dll.|p.KeInit|
|00000200| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 76 01 4b 65 |ializeEv|ent.v.Ke|
|00000210| 49 6e 69 74 69 61 6c 69 | 7a 65 53 70 69 6e 4c 6f |Initiali|zeSpinLo|
|00000220| 63 6b 00 00 fb 00 49 6f | 44 65 6c 65 74 65 44 65 |ck....Io|DeleteDe|
|00000230| 76 69 63 65 00 00 f7 00 | 49 6f 43 72 65 61 74 65 |vice....|IoCreate|
|00000240| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 f3 00 |Symbolic|Link....|
|00000250| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|00000260| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00000270| 53 74 72 69 6e 67 00 00 | 5b 03 5a 77 43 6c 6f 73 |String..|[.ZwClos|
|00000280| 65 00 44 02 4f 62 66 44 | 65 72 65 66 65 72 65 6e |e.D.ObfD|ereferen|
|00000290| 63 65 4f 62 6a 65 63 74 | 00 00 e5 00 49 6f 41 74 |ceObject|....IoAt|
|000002a0| 74 61 63 68 44 65 76 69 | 63 65 54 6f 44 65 76 69 |tachDevi|ceToDevi|
|000002b0| 63 65 53 74 61 63 6b 00 | 11 01 49 6f 47 65 74 52 |ceStack.|..IoGetR|
|000002c0| 65 6c 61 74 65 64 44 65 | 76 69 63 65 4f 62 6a 65 |elatedDe|viceObje|
|000002d0| 63 74 00 00 3f 02 4f 62 | 52 65 66 65 72 65 6e 63 |ct..?.Ob|Referenc|
|000002e0| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 00 |eObjectB|yHandle.|
|000002f0| 60 03 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |`.ZwCrea|teFile..|
|00000300| fd 00 49 6f 44 65 74 61 | 63 68 44 65 76 69 63 65 |..IoDeta|chDevice|
|00000310| 00 00 45 01 49 6f 66 43 | 6f 6d 70 6c 65 74 65 52 |..E.IofC|ompleteR|
|00000320| 65 71 75 65 73 74 00 00 | b8 01 4b 65 57 61 69 74 |equest..|..KeWait|
|00000330| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|00000340| 44 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |D.IofCal|lDriver.|
|00000350| a2 01 4b 65 53 65 74 45 | 76 65 6e 74 00 00 57 01 |..KeSetE|vent..W.|
|00000360| 4b 65 44 65 6c 61 79 45 | 78 65 63 75 74 69 6f 6e |KeDelayE|xecution|
|00000370| 54 68 72 65 61 64 00 00 | e7 01 4d 6d 4d 61 70 4c |Thread..|..MmMapL|
|00000380| 6f 63 6b 65 64 50 61 67 | 65 73 00 00 fc 00 49 6f |ockedPag|es....Io|
|00000390| 44 65 6c 65 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |DeleteSy|mbolicLi|
|000003a0| 6e 6b 00 00 86 02 52 74 | 6c 43 6f 6d 70 61 72 65 |nk....Rt|lCompare|
|000003b0| 4d 65 6d 6f 72 79 00 00 | e0 00 49 6f 41 6c 6c 6f |Memory..|..IoAllo|
|000003c0| 63 61 74 65 49 72 70 00 | 07 01 49 6f 46 72 65 65 |cateIrp.|..IoFree|
|000003d0| 49 72 70 00 77 02 52 74 | 6c 41 6e 73 69 53 74 72 |Irp.w.Rt|lAnsiStr|
|000003e0| 69 6e 67 54 6f 55 6e 69 | 63 6f 64 65 53 74 72 69 |ingToUni|codeStri|
|000003f0| 6e 67 00 00 cd 02 52 74 | 6c 49 6e 69 74 41 6e 73 |ng....Rt|lInitAns|
|00000400| 69 53 74 72 69 6e 67 00 | a2 03 5a 77 57 72 69 74 |iString.|..ZwWrit|
|00000410| 65 46 69 6c 65 00 8e 03 | 5a 77 52 65 61 64 46 69 |eFile...|ZwReadFi|
|00000420| 6c 65 00 00 95 03 5a 77 | 53 65 74 49 6e 66 6f 72 |le....Zw|SetInfor|
|00000430| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 b6 01 4b 65 |mationFi|le....Ke|
|00000440| 57 61 69 74 46 6f 72 4d | 75 6c 74 69 70 6c 65 4f |WaitForM|ultipleO|
|00000450| 62 6a 65 63 74 73 00 00 | e1 03 74 6f 75 70 70 65 |bjects..|..touppe|
|00000460| 72 00 a6 03 5f 61 6c 6c | 6d 75 6c 00 70 00 45 78 |r..._all|mul.p.Ex|
|00000470| 53 79 73 74 65 6d 54 69 | 6d 65 54 6f 4c 6f 63 61 |SystemTi|meToLoca|
|00000480| 6c 54 69 6d 65 00 0a 03 | 52 74 6c 54 69 6d 65 46 |lTime...|RtlTimeF|
|00000490| 69 65 6c 64 73 54 6f 54 | 69 6d 65 00 0d 03 52 74 |ieldsToT|ime...Rt|
|000004a0| 6c 54 69 6d 65 54 6f 54 | 69 6d 65 46 69 65 6c 64 |lTimeToT|imeField|
|000004b0| 73 00 42 00 45 78 46 72 | 65 65 50 6f 6f 6c 00 00 |s.B.ExFr|eePool..|
|000004c0| d9 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 49 6e 63 |..Interl|ockedInc|
|000004d0| 72 65 6d 65 6e 74 00 00 | aa 03 5f 61 75 6c 6c 64 |rement..|.._aulld|
|000004e0| 69 76 00 00 d3 01 4d 6d | 42 75 69 6c 64 4d 64 6c |iv....Mm|BuildMdl|
|000004f0| 46 6f 72 4e 6f 6e 50 61 | 67 65 64 50 6f 6f 6c 00 |ForNonPa|gedPool.|
|00000500| d5 01 4d 6d 43 72 65 61 | 74 65 4d 64 6c 00 d6 00 |..MmCrea|teMdl...|
|00000510| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 44 65 63 72 65 |Interloc|kedDecre|
|00000520| 6d 65 6e 74 00 00 d8 00 | 49 6e 74 65 72 6c 6f 63 |ment....|Interloc|
|00000530| 6b 65 64 45 78 63 68 61 | 6e 67 65 41 64 64 00 00 |kedExcha|ngeAdd..|
|00000540| d7 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 45 78 63 |..Interl|ockedExc|
|00000550| 68 61 6e 67 65 00 0c 01 | 49 6f 47 65 74 43 75 72 |hange...|IoGetCur|
|00000560| 72 65 6e 74 50 72 6f 63 | 65 73 73 00 88 02 52 74 |rentProc|ess...Rt|
|00000570| 6c 43 6f 6d 70 61 72 65 | 53 74 72 69 6e 67 00 00 |lCompare|String..|
|00000580| cf 02 52 74 6c 49 6e 69 | 74 53 74 72 69 6e 67 00 |..RtlIni|tString.|
|00000590| c3 02 52 74 6c 46 72 65 | 65 55 6e 69 63 6f 64 65 |..RtlFre|eUnicode|
|000005a0| 53 74 72 69 6e 67 00 00 | 71 03 5a 77 4c 6f 61 64 |String..|q.ZwLoad|
|000005b0| 44 72 69 76 65 72 00 00 | 9d 03 5a 77 55 6e 6c 6f |Driver..|..ZwUnlo|
|000005c0| 61 64 44 72 69 76 65 72 | 00 00 47 00 45 78 49 6e |adDriver|..G.ExIn|
|000005d0| 69 74 69 61 6c 69 7a 65 | 4e 50 61 67 65 64 4c 6f |itialize|NPagedLo|
|000005e0| 6f 6b 61 73 69 64 65 4c | 69 73 74 00 36 00 45 78 |okasideL|ist.6.Ex|
|000005f0| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00000600| 54 61 67 00 39 00 45 78 | 44 65 6c 65 74 65 4e 50 |Tag.9.Ex|DeleteNP|
|00000610| 61 67 65 64 4c 6f 6f 6b | 61 73 69 64 65 4c 69 73 |agedLook|asideLis|
|00000620| 74 00 57 00 45 78 49 6e | 74 65 72 6c 6f 63 6b 65 |t.W.ExIn|terlocke|
|00000630| 64 50 6f 70 45 6e 74 72 | 79 53 4c 69 73 74 00 00 |dPopEntr|ySList..|
|00000640| 59 00 45 78 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |Y.ExInte|rlockedP|
|00000650| 75 73 68 45 6e 74 72 79 | 53 4c 69 73 74 00 86 01 |ushEntry|SList...|
|00000660| 4b 65 51 75 65 72 79 53 | 79 73 74 65 6d 54 69 6d |KeQueryS|ystemTim|
|00000670| 65 00 2a 00 44 62 67 50 | 72 69 6e 74 00 00 d1 01 |e.*.DbgP|rint....|
|00000680| 4d 6d 41 6c 6c 6f 63 61 | 74 65 43 6f 6e 74 69 67 |MmAlloca|teContig|
|00000690| 75 6f 75 73 4d 65 6d 6f | 72 79 00 00 db 01 4d 6d |uousMemo|ry....Mm|
|000006a0| 46 72 65 65 43 6f 6e 74 | 69 67 75 6f 75 73 4d 65 |FreeCont|iguousMe|
|000006b0| 6d 6f 72 79 00 00 74 00 | 45 78 66 49 6e 74 65 72 |mory..t.|ExfInter|
|000006c0| 6c 6f 63 6b 65 64 49 6e | 73 65 72 74 48 65 61 64 |lockedIn|sertHead|
|000006d0| 4c 69 73 74 00 00 9f 03 | 5a 77 55 6e 6d 61 70 56 |List....|ZwUnmapV|
|000006e0| 69 65 77 4f 66 53 65 63 | 74 69 6f 6e 00 00 74 03 |iewOfSec|tion..t.|
|000006f0| 5a 77 4d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |ZwMapVie|wOfSecti|
|00000700| 6f 6e 00 00 dd 01 4d 6d | 47 65 74 50 68 79 73 69 |on....Mm|GetPhysi|
|00000710| 63 61 6c 41 64 64 72 65 | 73 73 00 00 7c 03 5a 77 |calAddre|ss..|.Zw|
|00000720| 4f 70 65 6e 53 65 63 74 | 69 6f 6e 00 65 03 5a 77 |OpenSect|ion.e.Zw|
|00000730| 44 65 6c 65 74 65 4b 65 | 79 00 a1 02 52 74 6c 44 |DeleteKe|y...RtlD|
|00000740| 65 6c 65 74 65 52 65 67 | 69 73 74 72 79 56 61 6c |eleteReg|istryVal|
|00000750| 75 65 00 00 61 03 5a 77 | 43 72 65 61 74 65 4b 65 |ue..a.Zw|CreateKe|
|00000760| 79 00 79 03 5a 77 4f 70 | 65 6e 4b 65 79 00 0f 03 |y.y.ZwOp|enKey...|
|00000770| 52 74 6c 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |RtlUnico|deString|
|00000780| 54 6f 41 6e 73 69 53 74 | 72 69 6e 67 00 00 8c 03 |ToAnsiSt|ring....|
|00000790| 5a 77 51 75 65 72 79 56 | 61 6c 75 65 4b 65 79 00 |ZwQueryV|alueKey.|
|000007a0| 9b 03 5a 77 53 65 74 56 | 61 6c 75 65 4b 65 79 00 |..ZwSetV|alueKey.|
|000007b0| 6b 03 5a 77 45 6e 75 6d | 65 72 61 74 65 4b 65 79 |k.ZwEnum|erateKey|
|000007c0| 00 00 6c 03 5a 77 45 6e | 75 6d 65 72 61 74 65 56 |..l.ZwEn|umerateV|
|000007d0| 61 6c 75 65 4b 65 79 00 | 7b 02 52 74 6c 41 70 70 |alueKey.|{.RtlApp|
|000007e0| 65 6e 64 55 6e 69 63 6f | 64 65 54 6f 53 74 72 69 |endUnico|deToStri|
|000007f0| 6e 67 00 00 89 02 52 74 | 6c 43 6f 6d 70 61 72 65 |ng....Rt|lCompare|
|00000800| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 af 01 |UnicodeS|tring...|
|00000810| 4b 65 53 65 74 54 69 6d | 65 72 45 78 00 00 77 01 |KeSetTim|erEx..w.|
|00000820| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 54 69 6d 65 |KeInitia|lizeTime|
|00000830| 72 00 6f 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |r.o.KeIn|itialize|
|00000840| 44 70 63 00 53 01 4b 65 | 43 61 6e 63 65 6c 54 69 |Dpc.S.Ke|CancelTi|
|00000850| 6d 65 72 00 54 01 4b 65 | 43 6c 65 61 72 45 76 65 |mer.T.Ke|ClearEve|
|00000860| 6e 74 00 00 08 01 49 6f | 46 72 65 65 4d 64 6c 00 |nt....Io|FreeMdl.|
|00000870| e1 00 49 6f 41 6c 6c 6f | 63 61 74 65 4d 64 6c 00 |..IoAllo|cateMdl.|
|00000880| e7 00 49 6f 42 75 69 6c | 64 44 65 76 69 63 65 49 |..IoBuil|dDeviceI|
|00000890| 6f 43 6f 6e 74 72 6f 6c | 52 65 71 75 65 73 74 00 |oControl|Request.|
|000008a0| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 18 03 |ntoskrnl|.exe....|
|000008b0| 52 74 6c 55 6e 77 69 6e | 64 00 1f 00 54 64 69 4d |RtlUnwin|d...TdiM|
|000008c0| 61 70 55 73 65 72 52 65 | 71 75 65 73 74 00 54 44 |apUserRe|quest.TD|
|000008d0| 49 2e 53 59 53 00 00 00 | 00 00 00 00 00 00 00 00 |I.SYS...|........|
+--------+-------------------------+-------------------------+--------+--------+