home *** CD-ROM | disk | FTP | other *** search
Unknown | 2002-04-15 | 2.3 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 44 00 65 00 73 00 63 00 | 72 00 69 00 70 00 74 00 |D.e.s.c.|r.i.p.t.|
|00000010| 69 00 6f 00 6e 00 00 00 | 55 8b ec 83 ec 40 8b 45 |i.o.n...|U....@.E|
|00000020| 10 53 89 45 c0 8b 45 14 | 89 45 c4 8b 45 18 89 45 |.S.E..E.|.E..E..E|
|00000030| c8 8b 45 1c 89 45 cc 8b | 45 20 56 57 89 45 d0 8b |..E..E..|E VW.E..|
|00000040| 45 24 6a 18 89 45 d4 8b | 45 08 5f 6a 40 89 45 e0 |E$j..E..|E._j@.E.|
|00000050| 5b 8d 45 d8 50 8d 45 f8 | 33 f6 68 06 00 02 00 50 |[.E.P.E.|3.h....P|
|00000060| 89 75 f8 89 75 fc 89 7d | d8 89 75 dc 89 5d e4 89 |.u..u..}|..u..]..|
|00000070| 75 e8 89 75 ec ff 15 4c | 03 01 00 3b c6 89 45 10 |u..u...L|...;..E.|
|00000080| 7c 60 8d 45 f0 68 c0 30 | 02 00 50 ff 15 d0 02 01 ||`.E.h.0|..P.....|
|00000090| 00 8b 45 f8 89 7d d8 89 | 45 dc 8d 45 f0 89 45 e0 |..E..}..|E..E..E.|
|000000a0| 8d 45 14 50 6a 01 56 8d | 45 d8 56 50 8d 45 fc 68 |.E.Pj.V.|E.VP.E.h|
|000000b0| 3f 00 0f 00 50 89 5d e4 | 89 75 e8 89 75 ec ff 15 |?...P.].|.u..u...|
|000000c0| 54 03 01 00 3b c6 89 45 | 10 7c 17 8d 45 c0 57 50 |T...;..E|.|..E.WP|
|000000d0| 6a 03 56 ff 75 0c ff 75 | fc ff 15 78 03 01 00 89 |j.V.u..u|...x....|
|000000e0| 45 10 39 75 fc 8b 3d 48 | 03 01 00 74 05 ff 75 fc |E.9u..=H|...t..u.|
|000000f0| ff d7 39 75 f8 74 05 ff | 75 f8 ff d7 8b 45 10 5f |..9u.t..|u....E._|
|00000100| 5e 5b c9 c2 20 00 cc cc | 30 32 01 00 00 00 00 00 |^[.. ...|02......|
|00000110| 00 00 00 00 c2 38 01 00 | ac 02 00 00 04 32 01 00 |.....8..|.....2..|
|00000120| 00 00 00 00 00 00 00 00 | a8 39 01 00 80 02 00 00 |........|.9......|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 9a 39 01 00 | 8c 39 01 00 64 39 01 00 |.....9..|.9..d9..|
|00000150| 50 39 01 00 78 39 01 00 | 2a 39 01 00 0e 39 01 00 |P9..x9..|*9...9..|
|00000160| 3c 39 01 00 dc 38 01 00 | f4 38 01 00 00 00 00 00 |<9...8..|.8......|
|00000170| 38 34 01 00 52 34 01 00 | 6c 34 01 00 84 34 01 00 |84..R4..|l4...4..|
|00000180| 22 34 01 00 0a 34 01 00 | a6 34 01 00 de 34 01 00 |"4...4..|.4...4..|
|00000190| ec 34 01 00 06 35 01 00 | 1e 35 01 00 36 35 01 00 |.4...5..|.5..65..|
|000001a0| 48 35 01 00 c2 34 01 00 | 60 35 01 00 8a 35 01 00 |H5...4..|`5...5..|
|000001b0| a2 35 01 00 b8 35 01 00 | cc 35 01 00 de 35 01 00 |.5...5..|.5...5..|
|000001c0| f6 35 01 00 06 36 01 00 | 1e 36 01 00 30 36 01 00 |.5...6..|.6..06..|
|000001d0| 48 36 01 00 60 36 01 00 | 6a 36 01 00 82 36 01 00 |H6..`6..|j6...6..|
|000001e0| 9c 36 01 00 72 35 01 00 | da 33 01 00 d8 36 01 00 |.6..r5..|.3...6..|
|000001f0| ec 36 01 00 fa 36 01 00 | 16 37 01 00 28 37 01 00 |.6...6..|.7..(7..|
|00000200| 3c 37 01 00 46 37 01 00 | 66 37 01 00 80 37 01 00 |<7..F7..|f7...7..|
|00000210| 8a 37 01 00 96 37 01 00 | a8 37 01 00 b6 37 01 00 |.7...7..|.7...7..|
|00000220| ca 37 01 00 e2 37 01 00 | f2 37 01 00 12 38 01 00 |.7...7..|.7...8..|
|00000230| 26 38 01 00 46 38 01 00 | 56 38 01 00 70 38 01 00 |&8..F8..|V8..p8..|
|00000240| 80 38 01 00 9a 38 01 00 | ae 38 01 00 b8 38 01 00 |.8...8..|.8...8..|
|00000250| d0 38 01 00 f2 33 01 00 | e4 33 01 00 96 33 01 00 |.8...3..|.3...3..|
|00000260| c0 33 01 00 b0 33 01 00 | 5a 33 01 00 7e 33 01 00 |.3...3..|Z3..~3..|
|00000270| 6e 33 01 00 b0 36 01 00 | 44 33 01 00 c8 36 01 00 |n3...6..|D3...6..|
|00000280| 00 00 00 00 45 01 49 6f | 66 43 6f 6d 70 6c 65 74 |....E.Io|fComplet|
|00000290| 65 52 65 71 75 65 73 74 | 00 00 34 01 49 6f 53 74 |eRequest|..4.IoSt|
|000002a0| 61 72 74 4e 65 78 74 50 | 61 63 6b 65 74 00 53 01 |artNextP|acket.S.|
|000002b0| 4b 65 43 61 6e 63 65 6c | 54 69 6d 65 72 00 41 01 |KeCancel|Timer.A.|
|000002c0| 49 6f 57 72 69 74 65 45 | 72 72 6f 72 4c 6f 67 45 |IoWriteE|rrorLogE|
|000002d0| 6e 74 72 79 00 00 df 00 | 49 6f 41 6c 6c 6f 63 61 |ntry....|IoAlloca|
|000002e0| 74 65 45 72 72 6f 72 4c | 6f 67 45 6e 74 72 79 00 |teErrorL|ogEntry.|
|000002f0| 36 01 49 6f 53 74 61 72 | 74 50 61 63 6b 65 74 00 |6.IoStar|tPacket.|
|00000300| b0 01 4b 65 53 79 6e 63 | 68 72 6f 6e 69 7a 65 45 |..KeSync|hronizeE|
|00000310| 78 65 63 75 74 69 6f 6e | 00 00 ce 03 6d 65 6d 6d |xecution|....memm|
|00000320| 6f 76 65 00 ae 01 4b 65 | 53 65 74 54 69 6d 65 72 |ove...Ke|SetTimer|
|00000330| 00 00 d9 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 49 |....Inte|rlockedI|
|00000340| 6e 63 72 65 6d 65 6e 74 | 00 00 d6 00 49 6e 74 65 |ncrement|....Inte|
|00000350| 72 6c 6f 63 6b 65 64 44 | 65 63 72 65 6d 65 6e 74 |rlockedD|ecrement|
|00000360| 00 00 d7 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 45 |....Inte|rlockedE|
|00000370| 78 63 68 61 6e 67 65 00 | 29 01 49 6f 52 65 6c 65 |xchange.|).IoRele|
|00000380| 61 73 65 43 61 6e 63 65 | 6c 53 70 69 6e 4c 6f 63 |aseCance|lSpinLoc|
|00000390| 6b 00 da 00 49 6f 41 63 | 71 75 69 72 65 43 61 6e |k...IoAc|quireCan|
|000003a0| 63 65 6c 53 70 69 6e 4c | 6f 63 6b 00 f7 00 49 6f |celSpinL|ock...Io|
|000003b0| 43 72 65 61 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |CreateSy|mbolicLi|
|000003c0| 6e 6b 00 00 7a 02 52 74 | 6c 41 70 70 65 6e 64 55 |nk..z.Rt|lAppendU|
|000003d0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 53 74 |nicodeSt|ringToSt|
|000003e0| 72 69 6e 67 00 00 7b 02 | 52 74 6c 41 70 70 65 6e |ring..{.|RtlAppen|
|000003f0| 64 55 6e 69 63 6f 64 65 | 54 6f 53 74 72 69 6e 67 |dUnicode|ToString|
|00000400| 00 00 d8 02 52 74 6c 49 | 6e 74 65 67 65 72 54 6f |....RtlI|ntegerTo|
|00000410| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 42 00 |UnicodeS|tring.B.|
|00000420| 45 78 46 72 65 65 50 6f | 6f 6c 00 00 f8 02 52 74 |ExFreePo|ol....Rt|
|00000430| 6c 51 75 65 72 79 52 65 | 67 69 73 74 72 79 56 61 |lQueryRe|gistryVa|
|00000440| 6c 75 65 73 00 00 d0 02 | 52 74 6c 49 6e 69 74 55 |lues....|RtlInitU|
|00000450| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 36 00 |nicodeSt|ring..6.|
|00000460| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|00000470| 74 68 54 61 67 00 fb 00 | 49 6f 44 65 6c 65 74 65 |thTag...|IoDelete|
|00000480| 44 65 76 69 63 65 00 00 | fc 00 49 6f 44 65 6c 65 |Device..|..IoDele|
|00000490| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|000004a0| f7 01 4d 6d 55 6e 6d 61 | 70 49 6f 53 70 61 63 65 |..MmUnma|pIoSpace|
|000004b0| 00 00 01 01 49 6f 44 69 | 73 63 6f 6e 6e 65 63 74 |....IoDi|sconnect|
|000004c0| 49 6e 74 65 72 72 75 70 | 74 00 25 03 52 74 6c 57 |Interrup|t.%.RtlW|
|000004d0| 72 69 74 65 52 65 67 69 | 73 74 72 79 56 61 6c 75 |riteRegi|stryValu|
|000004e0| 65 00 f1 00 49 6f 43 6f | 6e 6e 65 63 74 49 6e 74 |e...IoCo|nnectInt|
|000004f0| 65 72 72 75 70 74 00 00 | 77 01 4b 65 49 6e 69 74 |errupt..|w.KeInit|
|00000500| 69 61 6c 69 7a 65 54 69 | 6d 65 72 00 6f 01 4b 65 |ializeTi|mer.o.Ke|
|00000510| 49 6e 69 74 69 61 6c 69 | 7a 65 44 70 63 00 76 01 |Initiali|zeDpc.v.|
|00000520| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 53 70 69 6e |KeInitia|lizeSpin|
|00000530| 4c 6f 63 6b 00 00 e6 01 | 4d 6d 4d 61 70 49 6f 53 |Lock....|MmMapIoS|
|00000540| 70 61 63 65 00 00 2d 01 | 49 6f 52 65 70 6f 72 74 |pace..-.|IoReport|
|00000550| 52 65 73 6f 75 72 63 65 | 55 73 61 67 65 00 f3 00 |Resource|Usage...|
|00000560| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|00000570| 88 01 4b 65 51 75 65 72 | 79 54 69 6d 65 49 6e 63 |..KeQuer|yTimeInc|
|00000580| 72 65 6d 65 6e 74 00 00 | c3 02 52 74 6c 46 72 65 |rement..|..RtlFre|
|00000590| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|000005a0| e8 03 77 63 73 63 70 79 | 00 00 92 02 52 74 6c 43 |..wcscpy|....RtlC|
|000005b0| 6f 70 79 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |opyUnico|deString|
|000005c0| 00 00 28 00 44 62 67 42 | 72 65 61 6b 50 6f 69 6e |..(.DbgB|reakPoin|
|000005d0| 74 57 69 74 68 53 74 61 | 74 75 73 00 46 01 4b 64 |tWithSta|tus.F.Kd|
|000005e0| 44 65 62 75 67 67 65 72 | 45 6e 61 62 6c 65 64 00 |Debugger|Enabled.|
|000005f0| 47 01 4b 64 44 65 62 75 | 67 67 65 72 4e 6f 74 50 |G.KdDebu|ggerNotP|
|00000600| 72 65 73 65 6e 74 00 00 | 52 01 4b 65 42 75 67 43 |resent..|R.KeBugC|
|00000610| 68 65 63 6b 45 78 00 00 | 7e 01 4b 65 49 6e 73 65 |heckEx..|~.KeInse|
|00000620| 72 74 51 75 65 75 65 44 | 70 63 00 00 b2 01 4b 65 |rtQueueD|pc....Ke|
|00000630| 54 69 63 6b 43 6f 75 6e | 74 00 1c 01 49 6f 51 75 |TickCoun|t...IoQu|
|00000640| 65 72 79 44 65 76 69 63 | 65 44 65 73 63 72 69 70 |eryDevic|eDescrip|
|00000650| 74 69 6f 6e 00 00 62 00 | 45 78 51 75 65 75 65 57 |tion..b.|ExQueueW|
|00000660| 6f 72 6b 49 74 65 6d 00 | c0 02 52 74 6c 46 72 65 |orkItem.|..RtlFre|
|00000670| 65 41 6e 73 69 53 74 72 | 69 6e 67 00 de 03 73 74 |eAnsiStr|ing...st|
|00000680| 72 73 74 72 00 00 0f 03 | 52 74 6c 55 6e 69 63 6f |rstr....|RtlUnico|
|00000690| 64 65 53 74 72 69 6e 67 | 54 6f 41 6e 73 69 53 74 |deString|ToAnsiSt|
|000006a0| 72 69 6e 67 00 00 57 01 | 4b 65 44 65 6c 61 79 45 |ring..W.|KeDelayE|
|000006b0| 78 65 63 75 74 69 6f 6e | 54 68 72 65 61 64 00 00 |xecution|Thread..|
|000006c0| 5b 03 5a 77 43 6c 6f 73 | 65 00 79 03 5a 77 4f 70 |[.ZwClos|e.y.ZwOp|
|000006d0| 65 6e 4b 65 79 00 8c 03 | 5a 77 51 75 65 72 79 56 |enKey...|ZwQueryV|
|000006e0| 61 6c 75 65 4b 65 79 00 | 61 03 5a 77 43 72 65 61 |alueKey.|a.ZwCrea|
|000006f0| 74 65 4b 65 79 00 99 01 | 4b 65 52 65 6d 6f 76 65 |teKey...|KeRemove|
|00000700| 51 75 65 75 65 44 70 63 | 00 00 b8 01 4b 65 57 61 |QueueDpc|....KeWa|
|00000710| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|00000720| 74 00 44 01 49 6f 66 43 | 61 6c 6c 44 72 69 76 65 |t.D.IofC|allDrive|
|00000730| 72 00 e7 00 49 6f 42 75 | 69 6c 64 44 65 76 69 63 |r...IoBu|ildDevic|
|00000740| 65 49 6f 43 6f 6e 74 72 | 6f 6c 52 65 71 75 65 73 |eIoContr|olReques|
|00000750| 74 00 70 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |t.p.KeIn|itialize|
|00000760| 45 76 65 6e 74 00 77 02 | 52 74 6c 41 6e 73 69 53 |Event.w.|RtlAnsiS|
|00000770| 74 72 69 6e 67 54 6f 55 | 6e 69 63 6f 64 65 53 74 |tringToU|nicodeSt|
|00000780| 72 69 6e 67 00 00 cf 02 | 52 74 6c 49 6e 69 74 53 |ring....|RtlInitS|
|00000790| 74 72 69 6e 67 00 a1 02 | 52 74 6c 44 65 6c 65 74 |tring...|RtlDelet|
|000007a0| 65 52 65 67 69 73 74 72 | 79 56 61 6c 75 65 00 00 |eRegistr|yValue..|
|000007b0| 9b 03 5a 77 53 65 74 56 | 61 6c 75 65 4b 65 79 00 |..ZwSetV|alueKey.|
|000007c0| 89 02 52 74 6c 43 6f 6d | 70 61 72 65 55 6e 69 63 |..RtlCom|pareUnic|
|000007d0| 6f 64 65 53 74 72 69 6e | 67 00 cd 02 52 74 6c 49 |odeStrin|g...RtlI|
|000007e0| 6e 69 74 41 6e 73 69 53 | 74 72 69 6e 67 00 d2 03 |nitAnsiS|tring...|
|000007f0| 73 70 72 69 6e 74 66 00 | ea 03 77 63 73 6c 65 6e |sprintf.|..wcslen|
|00000800| 00 00 6e 74 6f 73 6b 72 | 6e 6c 2e 65 78 65 00 00 |..ntoskr|nl.exe..|
|00000810| 18 03 52 74 6c 55 6e 77 | 69 6e 64 00 17 00 48 61 |..RtlUnw|ind...Ha|
|00000820| 6c 47 65 74 49 6e 74 65 | 72 72 75 70 74 56 65 63 |lGetInte|rruptVec|
|00000830| 74 6f 72 00 2f 00 48 61 | 6c 54 72 61 6e 73 6c 61 |tor./.Ha|lTransla|
|00000840| 74 65 42 75 73 41 64 64 | 72 65 73 73 00 00 49 00 |teBusAdd|ress..I.|
|00000850| 4b 65 53 74 61 6c 6c 45 | 78 65 63 75 74 69 6f 6e |KeStallE|xecution|
|00000860| 50 72 6f 63 65 73 73 6f | 72 00 51 00 52 45 41 44 |Processo|r.Q.READ|
|00000870| 5f 50 4f 52 54 5f 55 43 | 48 41 52 00 57 00 57 52 |_PORT_UC|HAR.W.WR|
|00000880| 49 54 45 5f 50 4f 52 54 | 5f 55 43 48 41 52 00 00 |ITE_PORT|_UCHAR..|
|00000890| 4d 00 4b 66 52 65 6c 65 | 61 73 65 53 70 69 6e 4c |M.KfRele|aseSpinL|
|000008a0| 6f 63 6b 00 4a 00 4b 66 | 41 63 71 75 69 72 65 53 |ock.J.Kf|AcquireS|
|000008b0| 70 69 6e 4c 6f 63 6b 00 | 42 00 4b 65 47 65 74 43 |pinLock.|B.KeGetC|
|000008c0| 75 72 72 65 6e 74 49 72 | 71 6c 00 00 4b 00 4b 66 |urrentIr|ql..K.Kf|
|000008d0| 4c 6f 77 65 72 49 72 71 | 6c 00 4c 00 4b 66 52 61 |LowerIrq|l.L.KfRa|
|000008e0| 69 73 65 49 72 71 6c 00 | 48 41 4c 2e 64 6c 6c 00 |iseIrql.|HAL.dll.|
|000008f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+