home *** CD-ROM | disk | FTP | other *** search
Unknown | 2002-04-15 | 2.6 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 56 8b 74 24 08 ff 74 24 | 0c 8b 4e 18 8d 46 38 68 |V.t$..t$|..N..F8h|
|00000010| f0 cb 01 00 c7 41 04 d4 | cf 01 00 c7 00 97 16 01 |.....A..|........|
|00000020| 00 c7 40 08 13 17 01 00 | c7 40 38 e9 05 01 00 c7 |..@.....|.@8.....|
|00000030| 40 3c 3b 03 01 00 c7 40 | 6c f9 d1 01 00 c7 40 58 |@<;....@|l.....@X|
|00000040| 47 d4 01 00 c7 40 5c 3d | 16 01 00 e8 9a 00 00 00 |G....@\=|........|
|00000050| ff 74 24 0c e8 d1 9e ff | ff 56 e8 33 68 ff ff 56 |.t$.....|.V.3h..V|
|00000060| e8 21 f9 ff ff 5e c2 08 | 00 cc 5c 00 50 00 61 00 |.!...^..|..\.P.a.|
|00000070| 72 00 61 00 6d 00 65 00 | 74 00 65 00 72 00 73 00 |r.a.m.e.|t.e.r.s.|
|00000080| 00 00 42 00 72 00 65 00 | 61 00 6b 00 4f 00 6e 00 |..B.r.e.|a.k.O.n.|
|00000090| 45 00 6e 00 74 00 72 00 | 79 00 00 00 00 00 44 00 |E.n.t.r.|y.....D.|
|000000a0| 65 00 62 00 75 00 67 00 | 4c 00 65 00 76 00 65 00 |e.b.u.g.|L.e.v.e.|
|000000b0| 6c 00 00 00 00 00 53 00 | 65 00 6e 00 64 00 57 00 |l.....S.|e.n.d.W.|
|000000c0| 69 00 6e 00 57 00 68 00 | 65 00 65 00 6c 00 4d 00 |i.n.W.h.|e.e.l.M.|
|000000d0| 73 00 67 00 73 00 00 00 | 00 00 44 00 65 00 61 00 |s.g.s...|..D.e.a.|
|000000e0| 64 00 50 00 53 00 32 00 | 00 00 55 8b ec 83 ec 1c |d.P.S.2.|..U.....|
|000000f0| 8b 4d 0c 53 56 57 8b 49 | 04 6a 01 58 33 db 68 44 |.M.SVW.I|.j.X3.hD|
|00000100| 64 6b 20 68 8c 00 00 00 | 50 89 45 f0 89 5d f4 89 |dk h....|P.E..]..|
|00000110| 5d f8 89 5d ec 89 5d e8 | 89 4d fc ff 15 74 87 01 |]..]..].|.M...t..|
|00000120| 00 8b f0 3b f3 0f 84 00 | 01 00 00 6a 23 33 c0 59 |...;....|...j#3.Y|
|00000130| 8b fe f3 ab 8d 45 e4 53 | 50 ff 15 fc 87 01 00 8b |.....E.S|P.......|
|00000140| 45 0c 68 44 64 6b 20 66 | 8b 00 66 05 18 00 66 89 |E.hDdk f|..f...f.|
|00000150| 45 e6 0f b7 c0 50 6a 01 | ff 15 74 87 01 00 8b f8 |E....Pj.|..t.....|
|00000160| 3b fb 89 7d e8 0f 84 c0 | 00 00 00 0f b7 4d e6 8b |;..}....|.....M..|
|00000170| d1 33 c0 c1 e9 02 ff 75 | fc f3 ab 8b ca 83 e1 03 |.3.....u|........|
|00000180| f3 aa 8b 3d 68 87 01 00 | 8d 45 e4 50 ff d7 8d 45 |...=h...|.E.P...E|
|00000190| e4 68 aa d5 01 00 50 ff | d7 8b 4d 08 8d 7d f8 89 |.h....P.|..M..}..|
|000001a0| 7e 14 6a 20 8d 79 04 5a | 89 7e 28 8d 7d f4 89 7e |~.j .y.Z|.~(.}..~|
|000001b0| 30 8d 79 08 89 7e 44 6a | 04 8d 7d f0 58 89 7e 4c |0.y..~Dj|..}.X.~L|
|000001c0| 8d 79 0c 89 4e 0c 53 89 | 56 04 c7 46 08 c2 d5 01 |.y..N.S.|V..F....|
|000001d0| 00 89 46 10 89 46 18 89 | 56 20 c7 46 24 de d5 01 |..F..F..|V .F$...|
|000001e0| 00 89 46 2c 89 46 34 89 | 56 3c c7 46 40 f6 d5 01 |..F,.F4.|V<.F@...|
|000001f0| 00 89 46 48 89 46 50 8d | 4d ec 53 89 1f 56 89 56 |..FH.FP.|M.S..V.V|
|00000200| 58 c7 46 5c 1a d6 01 00 | 89 7e 60 89 46 64 89 4e |X.F\....|.~`.Fd.N|
|00000210| 68 89 46 6c ff 75 e8 53 | ff 15 64 87 01 00 33 c0 |h.Fl.u.S|..d...3.|
|00000220| 81 3f 10 dc 3a f9 0f 94 | c0 89 07 39 5d e8 8b 3d |.?..:...|...9]..=|
|00000230| 00 87 01 00 74 05 ff 75 | e8 ff d7 3b f3 74 03 56 |....t..u|...;.t.V|
|00000240| ff d7 5f 5e 5b c9 c2 08 | 00 cc cc cc dc d7 00 00 |.._^[...|........|
|00000250| 00 00 00 00 00 00 00 00 | 40 df 00 00 f4 86 00 00 |........|@.......|
|00000260| c8 d7 00 00 00 00 00 00 | 00 00 00 00 a6 df 00 00 |........|........|
|00000270| e0 86 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 76 df 00 00 62 df 00 00 |........|v...b...|
|00000290| 92 df 00 00 4e df 00 00 | 00 00 00 00 ac d9 00 00 |....N...|........|
|000002a0| c8 d9 00 00 e0 d9 00 00 | fa d9 00 00 08 da 00 00 |........|........|
|000002b0| 22 da 00 00 9a d9 00 00 | 40 da 00 00 58 da 00 00 |".......|@...X...|
|000002c0| 68 da 00 00 7e da 00 00 | 96 da 00 00 b6 da 00 00 |h...~...|........|
|000002d0| ce da 00 00 dc da 00 00 | f4 da 00 00 08 db 00 00 |........|........|
|000002e0| 28 db 00 00 44 db 00 00 | 50 db 00 00 5e db 00 00 |(...D...|P...^...|
|000002f0| 74 db 00 00 86 db 00 00 | 98 db 00 00 aa db 00 00 |t.......|........|
|00000300| c0 db 00 00 d0 db 00 00 | e2 db 00 00 f2 db 00 00 |........|........|
|00000310| 0c dc 00 00 28 dc 00 00 | 32 dc 00 00 5a d9 00 00 |....(...|2...Z...|
|00000320| 88 d9 00 00 8e dc 00 00 | a0 dc 00 00 b4 dc 00 00 |........|........|
|00000330| d6 dc 00 00 ee dc 00 00 | fe dc 00 00 18 dd 00 00 |........|........|
|00000340| 2e dd 00 00 46 dd 00 00 | 54 dd 00 00 6c dd 00 00 |....F...|T...l...|
|00000350| 8c dd 00 00 a8 dd 00 00 | c4 dd 00 00 dc dd 00 00 |........|........|
|00000360| f0 dd 00 00 02 de 00 00 | 10 de 00 00 1c de 00 00 |........|........|
|00000370| 26 de 00 00 46 de 00 00 | 64 de 00 00 84 de 00 00 |&...F...|d.......|
|00000380| 9c de 00 00 a6 de 00 00 | b4 de 00 00 d4 de 00 00 |........|........|
|00000390| e4 de 00 00 fe de 00 00 | 20 df 00 00 72 d9 00 00 |........| ...r...|
|000003a0| 14 d9 00 00 42 d9 00 00 | 30 d9 00 00 52 dc 00 00 |....B...|0...R...|
|000003b0| fc d8 00 00 70 dc 00 00 | 00 00 00 00 21 01 49 6f |....p...|....!.Io|
|000003c0| 43 72 65 61 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |CreateSy|mbolicLi|
|000003d0| 6e 6b 00 00 4b 01 49 6f | 49 6e 69 74 69 61 6c 69 |nk..K.Io|Initiali|
|000003e0| 7a 65 52 65 6d 6f 76 65 | 4c 6f 63 6b 45 78 00 00 |zeRemove|LockEx..|
|000003f0| 1b 01 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |..IoCrea|teDevice|
|00000400| 00 00 64 03 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |..d.RtlI|nitUnico|
|00000410| 64 65 53 74 72 69 6e 67 | 00 00 3a 00 45 78 41 6c |deString|..:.ExAl|
|00000420| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 54 61 |locatePo|olWithTa|
|00000430| 67 00 3e 01 49 6f 47 65 | 74 44 65 76 69 63 65 50 |g.>.IoGe|tDeviceP|
|00000440| 72 6f 70 65 72 74 79 00 | 25 01 49 6f 44 65 6c 65 |roperty.|%.IoDele|
|00000450| 74 65 44 65 76 69 63 65 | 00 00 28 01 49 6f 44 65 |teDevice|..(.IoDe|
|00000460| 74 61 63 68 44 65 76 69 | 63 65 00 00 62 01 49 6f |tachDevi|ce..b.Io|
|00000470| 52 65 67 69 73 74 65 72 | 44 65 76 69 63 65 49 6e |Register|DeviceIn|
|00000480| 74 65 72 66 61 63 65 00 | ba 02 4f 62 66 44 65 72 |terface.|..ObfDer|
|00000490| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|000004a0| 92 03 52 74 6c 50 72 65 | 66 69 78 55 6e 69 63 6f |..RtlPre|fixUnico|
|000004b0| 64 65 53 74 72 69 6e 67 | 00 00 47 00 45 78 46 72 |deString|..G.ExFr|
|000004c0| 65 65 50 6f 6f 6c 00 00 | 0d 03 52 74 6c 43 6f 6d |eePool..|..RtlCom|
|000004d0| 70 61 72 65 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |pareUnic|odeStrin|
|000004e0| 67 00 09 01 49 6f 41 74 | 74 61 63 68 44 65 76 69 |g...IoAt|tachDevi|
|000004f0| 63 65 54 6f 44 65 76 69 | 63 65 53 74 61 63 6b 00 |ceToDevi|ceStack.|
|00000500| 6b 01 49 6f 52 65 6c 65 | 61 73 65 52 65 6d 6f 76 |k.IoRele|aseRemov|
|00000510| 65 4c 6f 63 6b 45 78 00 | 94 01 49 6f 66 43 61 6c |eLockEx.|..IofCal|
|00000520| 6c 44 72 69 76 65 72 00 | 95 01 49 6f 66 43 6f 6d |lDriver.|..IofCom|
|00000530| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 fc 00 |pleteReq|uest....|
|00000540| 49 6f 41 63 71 75 69 72 | 65 52 65 6d 6f 76 65 4c |IoAcquir|eRemoveL|
|00000550| 6f 63 6b 45 78 00 7d 00 | 45 78 66 49 6e 74 65 72 |ockEx.}.|ExfInter|
|00000560| 6c 6f 63 6b 65 64 49 6e | 73 65 72 74 48 65 61 64 |lockedIn|sertHead|
|00000570| 4c 69 73 74 00 00 f7 00 | 49 6e 74 65 72 6c 6f 63 |List....|Interloc|
|00000580| 6b 65 64 44 65 63 72 65 | 6d 65 6e 74 00 00 f9 01 |kedDecre|ment....|
|00000590| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 12 02 4b 65 |KeSetEve|nt....Ke|
|000005a0| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|000005b0| 65 63 74 00 c2 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ect...Ke|Initiali|
|000005c0| 7a 65 45 76 65 6e 74 00 | 6a 01 49 6f 52 65 6c 65 |zeEvent.|j.IoRele|
|000005d0| 61 73 65 52 65 6d 6f 76 | 65 4c 6f 63 6b 41 6e 64 |aseRemov|eLockAnd|
|000005e0| 57 61 69 74 45 78 00 00 | 76 01 49 6f 53 65 74 44 |WaitEx..|v.IoSetD|
|000005f0| 65 76 69 63 65 49 6e 74 | 65 72 66 61 63 65 53 74 |eviceInt|erfaceSt|
|00000600| 61 74 65 00 32 01 49 6f | 46 72 65 65 49 72 70 00 |ate.2.Io|FreeIrp.|
|00000610| 10 01 49 6f 43 61 6e 63 | 65 6c 49 72 70 00 ca 02 |..IoCanc|elIrp...|
|00000620| 50 6f 53 74 61 72 74 4e | 65 78 74 50 6f 77 65 72 |PoStartN|extPower|
|00000630| 49 72 70 00 c7 02 50 6f | 53 65 74 50 6f 77 65 72 |Irp...Po|SetPower|
|00000640| 53 74 61 74 65 00 34 01 | 49 6f 46 72 65 65 57 6f |State.4.|IoFreeWo|
|00000650| 72 6b 49 74 65 6d 00 00 | 5c 01 49 6f 51 75 65 75 |rkItem..|\.IoQueu|
|00000660| 65 57 6f 72 6b 49 74 65 | 6d 00 05 01 49 6f 41 6c |eWorkIte|m...IoAl|
|00000670| 6c 6f 63 61 74 65 57 6f | 72 6b 49 74 65 6d 00 00 |locateWo|rkItem..|
|00000680| c0 02 50 6f 43 61 6c 6c | 44 72 69 76 65 72 00 00 |..PoCall|Driver..|
|00000690| 4a 01 49 6f 49 6e 69 74 | 69 61 6c 69 7a 65 49 72 |J.IoInit|ializeIr|
|000006a0| 70 00 03 01 49 6f 41 6c | 6c 6f 63 61 74 65 49 72 |p...IoAl|locateIr|
|000006b0| 70 00 94 03 52 74 6c 51 | 75 65 72 79 52 65 67 69 |p...RtlQ|ueryRegi|
|000006c0| 73 74 72 79 56 61 6c 75 | 65 73 00 00 fe 02 52 74 |stryValu|es....Rt|
|000006d0| 6c 41 70 70 65 6e 64 55 | 6e 69 63 6f 64 65 54 6f |lAppendU|nicodeTo|
|000006e0| 53 74 72 69 6e 67 00 00 | 8d 04 69 73 73 70 61 63 |String..|..isspac|
|000006f0| 65 00 81 00 45 78 66 49 | 6e 74 65 72 6c 6f 63 6b |e...ExfI|nterlock|
|00000700| 65 64 52 65 6d 6f 76 65 | 48 65 61 64 4c 69 73 74 |edRemove|HeadList|
|00000710| 00 00 60 00 45 78 49 6e | 74 65 72 6c 6f 63 6b 65 |..`.ExIn|terlocke|
|00000720| 64 50 75 73 68 45 6e 74 | 72 79 53 4c 69 73 74 00 |dPushEnt|rySList.|
|00000730| 3e 00 45 78 44 65 6c 65 | 74 65 4e 50 61 67 65 64 |>.ExDele|teNPaged|
|00000740| 4c 6f 6f 6b 61 73 69 64 | 65 4c 69 73 74 00 c1 01 |Lookasid|eList...|
|00000750| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 44 70 63 00 |KeInitia|lizeDpc.|
|00000760| c9 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |..KeInit|ializeTi|
|00000770| 6d 65 72 00 4d 00 45 78 | 49 6e 69 74 69 61 6c 69 |mer.M.Ex|Initiali|
|00000780| 7a 65 4e 50 61 67 65 64 | 4c 6f 6f 6b 61 73 69 64 |zeNPaged|Lookasid|
|00000790| 65 4c 69 73 74 00 c8 01 | 4b 65 49 6e 69 74 69 61 |eList...|KeInitia|
|000007a0| 6c 69 7a 65 53 70 69 6e | 4c 6f 63 6b 00 00 a5 01 |lizeSpin|Lock....|
|000007b0| 4b 65 43 61 6e 63 65 6c | 54 69 6d 65 72 00 f9 00 |KeCancel|Timer...|
|000007c0| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 45 78 63 68 61 |Interloc|kedExcha|
|000007d0| 6e 67 65 41 64 64 00 00 | f8 00 49 6e 74 65 72 6c |ngeAdd..|..Interl|
|000007e0| 6f 63 6b 65 64 45 78 63 | 68 61 6e 67 65 00 cf 03 |ockedExc|hange...|
|000007f0| 52 74 6c 57 72 69 74 65 | 52 65 67 69 73 74 72 79 |RtlWrite|Registry|
|00000800| 56 61 6c 75 65 00 06 02 | 4b 65 53 65 74 54 69 6d |Value...|KeSetTim|
|00000810| 65 72 00 00 fa 00 49 6e | 74 65 72 6c 6f 63 6b 65 |er....In|terlocke|
|00000820| 64 49 6e 63 72 65 6d 65 | 6e 74 00 00 0b 01 49 6f |dIncreme|nt....Io|
|00000830| 42 75 69 6c 64 44 65 76 | 69 63 65 49 6f 43 6f 6e |BuildDev|iceIoCon|
|00000840| 74 72 6f 6c 52 65 71 75 | 65 73 74 00 3d 01 49 6f |trolRequ|est.=.Io|
|00000850| 47 65 74 44 65 76 69 63 | 65 4f 62 6a 65 63 74 50 |GetDevic|eObjectP|
|00000860| 6f 69 6e 74 65 72 00 00 | b5 02 4f 62 52 65 66 65 |ointer..|..ObRefe|
|00000870| 72 65 6e 63 65 4f 62 6a | 65 63 74 42 79 48 61 6e |renceObj|ectByHan|
|00000880| 64 6c 65 00 dd 01 4b 65 | 51 75 65 72 79 54 69 6d |dle...Ke|QueryTim|
|00000890| 65 49 6e 63 72 65 6d 65 | 6e 74 00 00 d0 01 4b 65 |eIncreme|nt....Ke|
|000008a0| 49 6e 73 65 72 74 51 75 | 65 75 65 44 70 63 00 00 |InsertQu|eueDpc..|
|000008b0| 68 00 45 78 51 75 65 75 | 65 57 6f 72 6b 49 74 65 |h.ExQueu|eWorkIte|
|000008c0| 6d 00 0b 02 4b 65 54 69 | 63 6b 43 6f 75 6e 74 00 |m...KeTi|ckCount.|
|000008d0| 6e 04 5f 61 75 6c 6c 64 | 69 76 00 00 6a 04 5f 61 |n._aulld|iv..j._a|
|000008e0| 6c 6c 6d 75 6c 00 7e 00 | 45 78 66 49 6e 74 65 72 |llmul.~.|ExfInter|
|000008f0| 6c 6f 63 6b 65 64 49 6e | 73 65 72 74 54 61 69 6c |lockedIn|sertTail|
|00000900| 4c 69 73 74 00 00 5e 00 | 45 78 49 6e 74 65 72 6c |List..^.|ExInterl|
|00000910| 6f 63 6b 65 64 50 6f 70 | 45 6e 74 72 79 53 4c 69 |ockedPop|EntrySLi|
|00000920| 73 74 00 00 b5 03 52 74 | 6c 55 6e 69 63 6f 64 65 |st....Rt|lUnicode|
|00000930| 53 74 72 69 6e 67 54 6f | 41 6e 73 69 53 74 72 69 |StringTo|AnsiStri|
|00000940| 6e 67 00 00 50 03 52 74 | 6c 46 72 65 65 55 6e 69 |ng..P.Rt|lFreeUni|
|00000950| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 10 04 5a 77 |codeStri|ng....Zw|
|00000960| 43 6c 6f 73 65 00 16 04 | 5a 77 43 72 65 61 74 65 |Close...|ZwCreate|
|00000970| 4b 65 79 00 fa 02 52 74 | 6c 41 6e 73 69 53 74 72 |Key...Rt|lAnsiStr|
|00000980| 69 6e 67 54 6f 55 6e 69 | 63 6f 64 65 53 74 72 69 |ingToUni|codeStri|
|00000990| 6e 67 00 00 63 03 52 74 | 6c 49 6e 69 74 53 74 72 |ng..c.Rt|lInitStr|
|000009a0| 69 6e 67 00 29 03 52 74 | 6c 44 65 6c 65 74 65 52 |ing.).Rt|lDeleteR|
|000009b0| 65 67 69 73 74 72 79 56 | 61 6c 75 65 00 00 14 02 |egistryV|alue....|
|000009c0| 4b 65 66 52 65 6c 65 61 | 73 65 53 70 69 6e 4c 6f |KefRelea|seSpinLo|
|000009d0| 63 6b 46 72 6f 6d 44 70 | 63 4c 65 76 65 6c 00 00 |ckFromDp|cLevel..|
|000009e0| 13 02 4b 65 66 41 63 71 | 75 69 72 65 53 70 69 6e |..KefAcq|uireSpin|
|000009f0| 4c 6f 63 6b 41 74 44 70 | 63 4c 65 76 65 6c 00 00 |LockAtDp|cLevel..|
|00000a00| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 52 00 |ntoskrnl|.exe..R.|
|00000a10| 4b 66 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KfReleas|eSpinLoc|
|00000a20| 6b 00 4f 00 4b 66 41 63 | 71 75 69 72 65 53 70 69 |k.O.KfAc|quireSpi|
|00000a30| 6e 4c 6f 63 6b 00 46 00 | 4b 65 51 75 65 72 79 50 |nLock.F.|KeQueryP|
|00000a40| 65 72 66 6f 72 6d 61 6e | 63 65 43 6f 75 6e 74 65 |erforman|ceCounte|
|00000a50| 72 00 44 00 4b 65 47 65 | 74 43 75 72 72 65 6e 74 |r.D.KeGe|tCurrent|
|00000a60| 49 72 71 6c 00 00 48 41 | 4c 2e 64 6c 6c 00 00 00 |Irql..HA|L.dll...|
|00000a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+