home *** CD-ROM | disk | FTP | other *** search
Unknown | 2003-02-04 | 2.6 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 0c c9 00 00 00 00 00 00 | 00 00 00 00 ba d2 00 00 |........|........|
|00000010| 90 02 00 00 fc c8 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| 10 d3 00 00 80 02 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 fc d2 00 00 |........|........|
|00000040| e8 d2 00 00 d4 d2 00 00 | 00 00 00 00 b6 ca 00 00 |........|........|
|00000050| f0 ca 00 00 08 cb 00 00 | 2a cb 00 00 42 cb 00 00 |........|*...B...|
|00000060| 54 cb 00 00 6c cb 00 00 | 82 cb 00 00 96 cb 00 00 |T...l...|........|
|00000070| ae cb 00 00 c6 cb 00 00 | e8 cb 00 00 fe cb 00 00 |........|........|
|00000080| 20 cc 00 00 38 cc 00 00 | 54 cc 00 00 70 cc 00 00 | ...8...|T...p...|
|00000090| 88 cc 00 00 a2 cc 00 00 | b0 cc 00 00 c4 cc 00 00 |........|........|
|000000a0| d8 cc 00 00 e2 cc 00 00 | 02 cd 00 00 16 cd 00 00 |........|........|
|000000b0| 2e cd 00 00 46 cd 00 00 | 62 cd 00 00 7c cd 00 00 |....F...|b...|...|
|000000c0| 9a cd 00 00 ac cd 00 00 | c4 cd 00 00 e0 cd 00 00 |........|........|
|000000d0| fc cd 00 00 1c ce 00 00 | 30 ce 00 00 48 ce 00 00 |........|0...H...|
|000000e0| 5e ce 00 00 72 ce 00 00 | 82 ce 00 00 92 ce 00 00 |^...r...|........|
|000000f0| a0 ce 00 00 ae ce 00 00 | c0 ce 00 00 dc ce 00 00 |........|........|
|00000100| f0 ce 00 00 c8 ca 00 00 | e0 ca 00 00 28 cf 00 00 |........|....(...|
|00000110| 40 cf 00 00 54 cf 00 00 | 68 cf 00 00 82 cf 00 00 |@...T...|h.......|
|00000120| 9c cf 00 00 b6 cf 00 00 | ce cf 00 00 f0 cf 00 00 |........|........|
|00000130| 0c d0 00 00 24 d0 00 00 | 3c d0 00 00 58 d0 00 00 |....$...|<...X...|
|00000140| 68 d0 00 00 74 d0 00 00 | 88 d0 00 00 a4 d0 00 00 |h...t...|........|
|00000150| ba d0 00 00 cc d0 00 00 | de d0 00 00 f6 d0 00 00 |........|........|
|00000160| 04 d1 00 00 10 d1 00 00 | 30 d1 00 00 42 d1 00 00 |........|0...B...|
|00000170| 5c d1 00 00 66 d1 00 00 | 7a d1 00 00 8e d1 00 00 |\...f...|z.......|
|00000180| a4 d1 00 00 b4 d1 00 00 | be d1 00 00 c8 d1 00 00 |........|........|
|00000190| e0 d1 00 00 f8 d1 00 00 | 12 d2 00 00 30 d2 00 00 |........|....0...|
|000001a0| 3a d2 00 00 4c d2 00 00 | 5a d2 00 00 6a d2 00 00 |:...L...|Z...j...|
|000001b0| 76 d2 00 00 88 d2 00 00 | a0 d2 00 00 c8 d2 00 00 |v.......|........|
|000001c0| ac ca 00 00 94 ca 00 00 | 00 cf 00 00 16 cf 00 00 |........|........|
|000001d0| 00 00 00 00 3c 00 45 78 | 44 65 6c 65 74 65 52 65 |....<.Ex|DeleteRe|
|000001e0| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 5b 03 5a 77 |sourceLi|te..[.Zw|
|000001f0| 43 6c 6f 73 65 00 fb 00 | 49 6f 44 65 6c 65 74 65 |Close...|IoDelete|
|00000200| 44 65 76 69 63 65 00 00 | fc 00 49 6f 44 65 6c 65 |Device..|..IoDele|
|00000210| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000220| 52 01 4b 65 42 75 67 43 | 68 65 63 6b 45 78 00 00 |R.KeBugC|heckEx..|
|00000230| 51 02 50 73 43 72 65 61 | 74 65 53 79 73 74 65 6d |Q.PsCrea|teSystem|
|00000240| 54 68 72 65 61 64 00 00 | 27 01 49 6f 52 65 67 69 |Thread..|'.IoRegi|
|00000250| 73 74 65 72 46 73 52 65 | 67 69 73 74 72 61 74 69 |sterFsRe|gistrati|
|00000260| 6f 6e 43 68 61 6e 67 65 | 00 00 f7 00 49 6f 43 72 |onChange|....IoCr|
|00000270| 65 61 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |eateSymb|olicLink|
|00000280| 00 00 f3 00 49 6f 43 72 | 65 61 74 65 44 65 76 69 |....IoCr|eateDevi|
|00000290| 63 65 00 00 d0 02 52 74 | 6c 49 6e 69 74 55 6e 69 |ce....Rt|lInitUni|
|000002a0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 0c 01 49 6f |codeStri|ng....Io|
|000002b0| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|000002c0| 73 00 70 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |s.p.KeIn|itialize|
|000002d0| 45 76 65 6e 74 00 76 01 | 4b 65 49 6e 69 74 69 61 |Event.v.|KeInitia|
|000002e0| 6c 69 7a 65 53 70 69 6e | 4c 6f 63 6b 00 00 80 01 |lizeSpin|Lock....|
|000002f0| 4b 65 4c 65 61 76 65 43 | 72 69 74 69 63 61 6c 52 |KeLeaveC|riticalR|
|00000300| 65 67 69 6f 6e 00 6c 00 | 45 78 52 65 6c 65 61 73 |egion.l.|ExReleas|
|00000310| 65 52 65 73 6f 75 72 63 | 65 46 6f 72 54 68 72 65 |eResourc|eForThre|
|00000320| 61 64 4c 69 74 65 00 00 | 60 01 4b 65 47 65 74 43 |adLite..|`.KeGetC|
|00000330| 75 72 72 65 6e 74 54 68 | 72 65 61 64 00 00 2e 00 |urrentTh|read....|
|00000340| 45 78 41 63 71 75 69 72 | 65 52 65 73 6f 75 72 63 |ExAcquir|eResourc|
|00000350| 65 45 78 63 6c 75 73 69 | 76 65 4c 69 74 65 00 00 |eExclusi|veLite..|
|00000360| 5b 01 4b 65 45 6e 74 65 | 72 43 72 69 74 69 63 61 |[.KeEnte|rCritica|
|00000370| 6c 52 65 67 69 6f 6e 00 | 4a 00 45 78 49 6e 69 74 |lRegion.|J.ExInit|
|00000380| 69 61 6c 69 7a 65 52 65 | 73 6f 75 72 63 65 4c 69 |ializeRe|sourceLi|
|00000390| 74 65 00 00 11 01 49 6f | 47 65 74 52 65 6c 61 74 |te....Io|GetRelat|
|000003a0| 65 64 44 65 76 69 63 65 | 4f 62 6a 65 63 74 00 00 |edDevice|Object..|
|000003b0| 73 03 5a 77 4d 61 6b 65 | 54 65 6d 70 6f 72 61 72 |s.ZwMake|Temporar|
|000003c0| 79 4f 62 6a 65 63 74 00 | 5e 03 5a 77 43 72 65 61 |yObject.|^.ZwCrea|
|000003d0| 74 65 44 69 72 65 63 74 | 6f 72 79 4f 62 6a 65 63 |teDirect|oryObjec|
|000003e0| 74 00 42 00 45 78 46 72 | 65 65 50 6f 6f 6c 00 00 |t.B.ExFr|eePool..|
|000003f0| c0 02 52 74 6c 46 72 65 | 65 41 6e 73 69 53 74 72 |..RtlFre|eAnsiStr|
|00000400| 69 6e 67 00 88 02 52 74 | 6c 43 6f 6d 70 61 72 65 |ing...Rt|lCompare|
|00000410| 53 74 72 69 6e 67 00 00 | d2 03 73 70 72 69 6e 74 |String..|..sprint|
|00000420| 66 00 0f 03 52 74 6c 55 | 6e 69 63 6f 64 65 53 74 |f...RtlU|nicodeSt|
|00000430| 72 69 6e 67 54 6f 41 6e | 73 69 53 74 72 69 6e 67 |ringToAn|siString|
|00000440| 00 00 3d 02 4f 62 51 75 | 65 72 79 4e 61 6d 65 53 |..=.ObQu|eryNameS|
|00000450| 74 72 69 6e 67 00 36 00 | 45 78 41 6c 6c 6f 63 61 |tring.6.|ExAlloca|
|00000460| 74 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 00 44 02 |tePoolWi|thTag.D.|
|00000470| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|00000480| 6a 65 63 74 00 00 0d 01 | 49 6f 47 65 74 44 65 76 |ject....|IoGetDev|
|00000490| 69 63 65 4f 62 6a 65 63 | 74 50 6f 69 6e 74 65 72 |iceObjec|tPointer|
|000004a0| 00 00 57 01 4b 65 44 65 | 6c 61 79 45 78 65 63 75 |..W.KeDe|layExecu|
|000004b0| 74 69 6f 6e 54 68 72 65 | 61 64 00 00 e5 00 49 6f |tionThre|ad....Io|
|000004c0| 41 74 74 61 63 68 44 65 | 76 69 63 65 54 6f 44 65 |AttachDe|viceToDe|
|000004d0| 76 69 63 65 53 74 61 63 | 6b 00 fd 00 49 6f 44 65 |viceStac|k...IoDe|
|000004e0| 74 61 63 68 44 65 76 69 | 63 65 00 00 b8 01 4b 65 |tachDevi|ce....Ke|
|000004f0| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00000500| 65 63 74 00 8a 03 5a 77 | 51 75 65 72 79 53 79 6d |ect...Zw|QuerySym|
|00000510| 62 6f 6c 69 63 4c 69 6e | 6b 4f 62 6a 65 63 74 00 |bolicLin|kObject.|
|00000520| 7d 03 5a 77 4f 70 65 6e | 53 79 6d 62 6f 6c 69 63 |}.ZwOpen|Symbolic|
|00000530| 4c 69 6e 6b 4f 62 6a 65 | 63 74 00 00 77 02 52 74 |LinkObje|ct..w.Rt|
|00000540| 6c 41 6e 73 69 53 74 72 | 69 6e 67 54 6f 55 6e 69 |lAnsiStr|ingToUni|
|00000550| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 cd 02 52 74 |codeStri|ng....Rt|
|00000560| 6c 49 6e 69 74 41 6e 73 | 69 53 74 72 69 6e 67 00 |lInitAns|iString.|
|00000570| c3 02 52 74 6c 46 72 65 | 65 55 6e 69 63 6f 64 65 |..RtlFre|eUnicode|
|00000580| 53 74 72 69 6e 67 00 00 | 45 01 49 6f 66 43 6f 6d |String..|E.IofCom|
|00000590| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 df 01 |pleteReq|uest....|
|000005a0| 4d 6d 49 73 41 64 64 72 | 65 73 73 56 61 6c 69 64 |MmIsAddr|essValid|
|000005b0| 00 00 44 01 49 6f 66 43 | 61 6c 6c 44 72 69 76 65 |..D.IofC|allDrive|
|000005c0| 72 00 54 01 4b 65 43 6c | 65 61 72 45 76 65 6e 74 |r.T.KeCl|earEvent|
|000005d0| 00 00 a2 01 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |....KeSe|tEvent..|
|000005e0| 4d 03 53 65 54 6f 6b 65 | 6e 54 79 70 65 00 62 02 |M.SeToke|nType.b.|
|000005f0| 50 73 52 65 76 65 72 74 | 54 6f 53 65 6c 66 00 00 |PsRevert|ToSelf..|
|00000600| 3f 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |?.ObRefe|renceObj|
|00000610| 65 63 74 42 79 48 61 6e | 64 6c 65 00 05 01 49 6f |ectByHan|dle...Io|
|00000620| 46 69 6c 65 4f 62 6a 65 | 63 74 54 79 70 65 00 00 |FileObje|ctType..|
|00000630| f4 00 49 6f 43 72 65 61 | 74 65 46 69 6c 65 00 00 |..IoCrea|teFile..|
|00000640| 3b 03 53 65 49 6d 70 65 | 72 73 6f 6e 61 74 65 43 |;.SeImpe|rsonateC|
|00000650| 6c 69 65 6e 74 00 62 00 | 45 78 51 75 65 75 65 57 |lient.b.|ExQueueW|
|00000660| 6f 72 6b 49 74 65 6d 00 | d9 00 49 6e 74 65 72 6c |orkItem.|..Interl|
|00000670| 6f 63 6b 65 64 49 6e 63 | 72 65 6d 65 6e 74 00 00 |ockedInc|rement..|
|00000680| 8a 01 4b 65 52 65 61 64 | 53 74 61 74 65 45 76 65 |..KeRead|StateEve|
|00000690| 6e 74 00 00 86 01 4b 65 | 51 75 65 72 79 53 79 73 |nt....Ke|QuerySys|
|000006a0| 74 65 6d 54 69 6d 65 00 | 35 03 53 65 43 72 65 61 |temTime.|5.SeCrea|
|000006b0| 74 65 43 6c 69 65 6e 74 | 53 65 63 75 72 69 74 79 |teClient|Security|
|000006c0| 00 00 1a 03 52 74 6c 55 | 70 63 61 73 65 55 6e 69 |....RtlU|pcaseUni|
|000006d0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 a8 00 46 73 |codeStri|ng....Fs|
|000006e0| 52 74 6c 49 73 4e 61 6d | 65 49 6e 45 78 70 72 65 |RtlIsNam|eInExpre|
|000006f0| 73 73 69 6f 6e 00 92 02 | 52 74 6c 43 6f 70 79 55 |ssion...|RtlCopyU|
|00000700| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 7a 02 |nicodeSt|ring..z.|
|00000710| 52 74 6c 41 70 70 65 6e | 64 55 6e 69 63 6f 64 65 |RtlAppen|dUnicode|
|00000720| 53 74 72 69 6e 67 54 6f | 53 74 72 69 6e 67 00 00 |StringTo|String..|
|00000730| 7b 02 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |{.RtlApp|endUnico|
|00000740| 64 65 54 6f 53 74 72 69 | 6e 67 00 00 54 02 50 73 |deToStri|ng..T.Ps|
|00000750| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000760| 73 49 64 00 55 02 50 73 | 47 65 74 43 75 72 72 65 |sId.U.Ps|GetCurre|
|00000770| 6e 74 54 68 72 65 61 64 | 49 64 00 00 b6 01 4b 65 |ntThread|Id....Ke|
|00000780| 57 61 69 74 46 6f 72 4d | 75 6c 74 69 70 6c 65 4f |WaitForM|ultipleO|
|00000790| 62 6a 65 63 74 73 00 00 | 9a 01 4b 65 52 65 73 65 |bjects..|..KeRese|
|000007a0| 74 45 76 65 6e 74 00 00 | df 03 73 77 70 72 69 6e |tEvent..|..swprin|
|000007b0| 74 66 00 00 14 01 49 6f | 47 65 74 54 6f 70 4c 65 |tf....Io|GetTopLe|
|000007c0| 76 65 6c 49 72 70 00 00 | 32 01 49 6f 53 65 74 54 |velIrp..|2.IoSetT|
|000007d0| 68 72 65 61 64 48 61 72 | 64 45 72 72 6f 72 4d 6f |hreadHar|dErrorMo|
|000007e0| 64 65 00 00 a7 01 4b 65 | 53 65 74 50 72 69 6f 72 |de....Ke|SetPrior|
|000007f0| 69 74 79 54 68 72 65 61 | 64 00 59 01 4b 65 44 65 |ityThrea|d.Y.KeDe|
|00000800| 74 61 63 68 50 72 6f 63 | 65 73 73 00 4f 01 4b 65 |tachProc|ess.O.Ke|
|00000810| 41 74 74 61 63 68 50 72 | 6f 63 65 73 73 00 a1 03 |AttachPr|ocess...|
|00000820| 5a 77 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |ZwWaitFo|rSingleO|
|00000830| 62 6a 65 63 74 00 94 03 | 5a 77 53 65 74 45 76 65 |bject...|ZwSetEve|
|00000840| 6e 74 00 00 07 01 49 6f | 46 72 65 65 49 72 70 00 |nt....Io|FreeIrp.|
|00000850| e6 00 49 6f 42 75 69 6c | 64 41 73 79 6e 63 68 72 |..IoBuil|dAsynchr|
|00000860| 6f 6e 6f 75 73 46 73 64 | 52 65 71 75 65 73 74 00 |onousFsd|Request.|
|00000870| 62 03 5a 77 43 72 65 61 | 74 65 53 65 63 74 69 6f |b.ZwCrea|teSectio|
|00000880| 6e 00 83 03 5a 77 51 75 | 65 72 79 49 6e 66 6f 72 |n...ZwQu|eryInfor|
|00000890| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 ce 03 6d 65 |mationFi|le....me|
|000008a0| 6d 6d 6f 76 65 00 6a 03 | 5a 77 44 75 70 6c 69 63 |mmove.j.|ZwDuplic|
|000008b0| 61 74 65 54 6f 6b 65 6e | 00 00 7f 03 5a 77 4f 70 |ateToken|....ZwOp|
|000008c0| 65 6e 54 68 72 65 61 64 | 54 6f 6b 65 6e 00 74 03 |enThread|Token.t.|
|000008d0| 5a 77 4d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |ZwMapVie|wOfSecti|
|000008e0| 6f 6e 00 00 5f 03 5a 77 | 43 72 65 61 74 65 45 76 |on.._.Zw|CreateEv|
|000008f0| 65 6e 74 00 e5 03 77 63 | 73 63 61 74 00 00 e8 03 |ent...wc|scat....|
|00000900| 77 63 73 63 70 79 00 00 | 9f 03 5a 77 55 6e 6d 61 |wcscpy..|..ZwUnma|
|00000910| 70 56 69 65 77 4f 66 53 | 65 63 74 69 6f 6e 00 00 |pViewOfS|ection..|
|00000920| 6d 00 45 78 52 65 6c 65 | 61 73 65 52 65 73 6f 75 |m.ExRele|aseResou|
|00000930| 72 63 65 4c 69 74 65 00 | 89 02 52 74 6c 43 6f 6d |rceLite.|..RtlCom|
|00000940| 70 61 72 65 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |pareUnic|odeStrin|
|00000950| 67 00 2f 00 45 78 41 63 | 71 75 69 72 65 52 65 73 |g./.ExAc|quireRes|
|00000960| 6f 75 72 63 65 53 68 61 | 72 65 64 4c 69 74 65 00 |ourceSha|redLite.|
|00000970| de 03 73 74 72 73 74 72 | 00 00 22 03 52 74 6c 55 |..strstr|..".RtlU|
|00000980| 70 70 65 72 53 74 72 69 | 6e 67 00 00 6e 03 5a 77 |pperStri|ng..n.Zw|
|00000990| 46 6c 75 73 68 4b 65 79 | 00 00 9b 03 5a 77 53 65 |FlushKey|....ZwSe|
|000009a0| 74 56 61 6c 75 65 4b 65 | 79 00 79 03 5a 77 4f 70 |tValueKe|y.y.ZwOp|
|000009b0| 65 6e 4b 65 79 00 8c 03 | 5a 77 51 75 65 72 79 56 |enKey...|ZwQueryV|
|000009c0| 61 6c 75 65 4b 65 79 00 | 41 01 49 6f 57 72 69 74 |alueKey.|A.IoWrit|
|000009d0| 65 45 72 72 6f 72 4c 6f | 67 45 6e 74 72 79 00 00 |eErrorLo|gEntry..|
|000009e0| df 00 49 6f 41 6c 6c 6f | 63 61 74 65 45 72 72 6f |..IoAllo|cateErro|
|000009f0| 72 4c 6f 67 45 6e 74 72 | 79 00 6e 74 6f 73 6b 72 |rLogEntr|y.ntoskr|
|00000a00| 6e 6c 2e 65 78 65 00 00 | 18 03 52 74 6c 55 6e 77 |nl.exe..|..RtlUnw|
|00000a10| 69 6e 64 00 4d 00 4b 66 | 52 65 6c 65 61 73 65 53 |ind.M.Kf|ReleaseS|
|00000a20| 70 69 6e 4c 6f 63 6b 00 | 4a 00 4b 66 41 63 71 75 |pinLock.|J.KfAcqu|
|00000a30| 69 72 65 53 70 69 6e 4c | 6f 63 6b 00 42 00 4b 65 |ireSpinL|ock.B.Ke|
|00000a40| 47 65 74 43 75 72 72 65 | 6e 74 49 72 71 6c 00 00 |GetCurre|ntIrql..|
|00000a50| 48 41 4c 2e 64 6c 6c 00 | 00 00 00 00 00 00 00 00 |HAL.dll.|........|
+--------+-------------------------+-------------------------+--------+--------+