home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-01-19 | 2.5 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 fc 20 02 00 85 |.......U|.... ...|
|00000010| c0 b9 4e e6 40 bb 74 04 | 3b c1 75 1a a1 4c 10 02 |..N.@.t.|;.u..L..|
|00000020| 00 8b 00 35 fc 20 02 00 | a3 fc 20 02 00 75 07 8b |...5. ..|.. ..u..|
|00000030| c1 a3 fc 20 02 00 f7 d0 | a3 00 21 02 00 5d e9 37 |... ....|..!..].7|
|00000040| c5 fe ff cc b8 50 01 00 | 00 00 00 00 00 00 00 00 |.....P..|........|
|00000050| ca 58 01 00 24 10 01 00 | 94 50 01 00 00 00 00 00 |.X..$...|.P......|
|00000060| 00 00 00 00 30 59 01 00 | 00 10 01 00 a8 50 01 00 |....0Y..|.....P..|
|00000070| 00 00 00 00 00 00 00 00 | 72 59 01 00 14 10 01 00 |........|rY......|
|00000080| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000090| 00 00 00 00 ec 58 01 00 | 00 59 01 00 1c 59 01 00 |.....X..|.Y...Y..|
|000000a0| d8 58 01 00 00 00 00 00 | 38 59 01 00 4e 59 01 00 |.X......|8Y..NY..|
|000000b0| 62 59 01 00 00 00 00 00 | ae 52 01 00 be 52 01 00 |bY......|.R...R..|
|000000c0| d4 52 01 00 e6 52 01 00 | fe 52 01 00 1c 53 01 00 |.R...R..|.R...S..|
|000000d0| 38 53 01 00 50 53 01 00 | 62 53 01 00 7a 53 01 00 |8S..PS..|bS..zS..|
|000000e0| 98 53 01 00 a6 53 01 00 | be 53 01 00 e0 53 01 00 |.S...S..|.S...S..|
|000000f0| ee 53 01 00 06 54 01 00 | 1a 54 01 00 38 54 01 00 |.S...T..|.T..8T..|
|00000100| 48 54 01 00 5e 54 01 00 | 7e 54 01 00 9e 54 01 00 |HT..^T..|~T...T..|
|00000110| bc 54 01 00 d4 54 01 00 | ea 54 01 00 08 55 01 00 |.T...T..|.T...U..|
|00000120| 16 55 01 00 26 55 01 00 | 36 55 01 00 4a 55 01 00 |.U..&U..|6U..JU..|
|00000130| 6c 55 01 00 7a 55 01 00 | 8e 55 01 00 a0 55 01 00 |lU..zU..|.U...U..|
|00000140| 92 52 01 00 c2 55 01 00 | d0 55 01 00 de 55 01 00 |.R...U..|.U...U..|
|00000150| ea 55 01 00 fa 55 01 00 | 1a 56 01 00 34 56 01 00 |.U...U..|.V..4V..|
|00000160| 54 56 01 00 74 56 01 00 | 94 56 01 00 a8 56 01 00 |TV..tV..|.V...V..|
|00000170| c4 56 01 00 e0 56 01 00 | 02 57 01 00 22 57 01 00 |.V...V..|.W.."W..|
|00000180| 36 57 01 00 4c 57 01 00 | 64 57 01 00 7e 57 01 00 |6W..LW..|dW..~W..|
|00000190| 96 57 01 00 b8 57 01 00 | d2 57 01 00 ea 57 01 00 |.W...W..|.W...W..|
|000001a0| 02 58 01 00 18 58 01 00 | 24 58 01 00 2e 58 01 00 |.X...X..|$X...X..|
|000001b0| 48 58 01 00 56 58 01 00 | 76 58 01 00 88 58 01 00 |HX..VX..|vX...X..|
|000001c0| 92 58 01 00 a4 58 01 00 | ba 58 01 00 7e 52 01 00 |.X...X..|.X..~R..|
|000001d0| 66 52 01 00 4a 52 01 00 | 40 52 01 00 36 52 01 00 |fR..JR..|@R..6R..|
|000001e0| 1e 52 01 00 0c 52 01 00 | aa 55 01 00 f8 51 01 00 |.R...R..|.U...Q..|
|000001f0| 7e 59 01 00 00 00 00 00 | 85 00 45 78 46 72 65 65 |~Y......|..ExFree|
|00000200| 50 6f 6f 6c 57 69 74 68 | 54 61 67 00 8e 02 49 6f |PoolWith|Tag...Io|
|00000210| 57 4d 49 57 72 69 74 65 | 45 76 65 6e 74 00 6d 00 |WMIWrite|Event.m.|
|00000220| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|00000230| 74 68 54 61 67 00 7e 07 | 6d 65 6d 63 70 79 00 00 |thTag.~.|memcpy..|
|00000240| 80 07 6d 65 6d 73 65 74 | 00 00 8a 03 4d 6d 47 65 |..memset|....MmGe|
|00000250| 74 53 79 73 74 65 6d 52 | 6f 75 74 69 6e 65 41 64 |tSystemR|outineAd|
|00000260| 64 72 65 73 73 00 5f 05 | 52 74 6c 49 6e 69 74 55 |dress._.|RtlInitU|
|00000270| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 ef 04 |nicodeSt|ring....|
|00000280| 52 74 6c 43 6f 6d 70 61 | 72 65 4d 65 6d 6f 72 79 |RtlCompa|reMemory|
|00000290| 00 00 89 02 49 6f 57 4d | 49 52 65 67 69 73 74 72 |....IoWM|IRegistr|
|000002a0| 61 74 69 6f 6e 43 6f 6e | 74 72 6f 6c 00 00 95 02 |ationCon|trol....|
|000002b0| 49 6f 66 43 61 6c 6c 44 | 72 69 76 65 72 00 96 02 |IofCallD|river...|
|000002c0| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|000002d0| 73 74 00 00 e6 01 49 6f | 44 65 6c 65 74 65 44 65 |st....Io|DeleteDe|
|000002e0| 76 69 63 65 00 00 e8 01 | 49 6f 44 65 6c 65 74 65 |vice....|IoDelete|
|000002f0| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 b8 01 |Symbolic|Link....|
|00000300| 49 6f 41 74 74 61 63 68 | 44 65 76 69 63 65 54 6f |IoAttach|DeviceTo|
|00000310| 44 65 76 69 63 65 53 74 | 61 63 6b 00 1f 02 49 6f |DeviceSt|ack...Io|
|00000320| 49 6e 69 74 69 61 6c 69 | 7a 65 52 65 6d 6f 76 65 |Initiali|zeRemove|
|00000330| 4c 6f 63 6b 45 78 00 00 | db 01 49 6f 43 72 65 61 |LockEx..|..IoCrea|
|00000340| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000350| d1 01 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |..IoCrea|teDevice|
|00000360| 00 00 41 04 4f 62 66 44 | 65 72 65 66 65 72 65 6e |..A.ObfD|ereferen|
|00000370| 63 65 4f 62 6a 65 63 74 | 00 00 0f 02 49 6f 47 65 |ceObject|....IoGe|
|00000380| 74 44 72 69 76 65 72 4f | 62 6a 65 63 74 45 78 74 |tDriverO|bjectExt|
|00000390| 65 6e 73 69 6f 6e 00 00 | 3f 03 4b 65 54 69 63 6b |ension..|?.KeTick|
|000003a0| 43 6f 75 6e 74 00 ff 04 | 52 74 6c 43 6f 70 79 55 |Count...|RtlCopyU|
|000003b0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 ac 01 |nicodeSt|ring....|
|000003c0| 49 6f 41 6c 6c 6f 63 61 | 74 65 44 72 69 76 65 72 |IoAlloca|teDriver|
|000003d0| 4f 62 6a 65 63 74 45 78 | 74 65 6e 73 69 6f 6e 00 |ObjectEx|tension.|
|000003e0| 6a 07 5f 76 73 6e 77 70 | 72 69 6e 74 66 00 48 03 |j._vsnwp|rintf.H.|
|000003f0| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|00000400| 62 6a 65 63 74 00 d9 02 | 4b 65 49 6e 69 74 69 61 |bject...|KeInitia|
|00000410| 6c 69 7a 65 45 76 65 6e | 74 00 39 04 4f 62 52 65 |lizeEven|t.9.ObRe|
|00000420| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 50 |ferenceO|bjectByP|
|00000430| 6f 69 6e 74 65 72 00 00 | 49 04 50 6f 43 61 6c 6c |ointer..|I.PoCall|
|00000440| 44 72 69 76 65 72 00 00 | 5c 04 50 6f 53 74 61 72 |Driver..|\.PoStar|
|00000450| 74 4e 65 78 74 50 6f 77 | 65 72 49 72 70 00 d9 00 |tNextPow|erIrp...|
|00000460| 45 78 66 49 6e 74 65 72 | 6c 6f 63 6b 65 64 49 6e |ExfInter|lockedIn|
|00000470| 73 65 72 74 48 65 61 64 | 4c 69 73 74 00 00 da 00 |sertHead|List....|
|00000480| 45 78 66 49 6e 74 65 72 | 6c 6f 63 6b 65 64 49 6e |ExfInter|lockedIn|
|00000490| 73 65 72 74 54 61 69 6c | 4c 69 73 74 00 00 22 02 |sertTail|List..".|
|000004a0| 49 6f 49 6e 76 61 6c 69 | 64 61 74 65 44 65 76 69 |IoInvali|dateDevi|
|000004b0| 63 65 52 65 6c 61 74 69 | 6f 6e 73 00 47 02 49 6f |ceRelati|ons.G.Io|
|000004c0| 52 65 6c 65 61 73 65 52 | 65 6d 6f 76 65 4c 6f 63 |ReleaseR|emoveLoc|
|000004d0| 6b 45 78 00 42 04 4f 62 | 66 52 65 66 65 72 65 6e |kEx.B.Ob|fReferen|
|000004e0| 63 65 4f 62 6a 65 63 74 | 00 00 72 00 45 78 44 65 |ceObject|..r.ExDe|
|000004f0| 6c 65 74 65 4e 50 61 67 | 65 64 4c 6f 6f 6b 61 73 |leteNPag|edLookas|
|00000500| 69 64 65 4c 69 73 74 00 | 71 02 49 6f 53 74 6f 70 |ideList.|q.IoStop|
|00000510| 54 69 6d 65 72 00 6f 02 | 49 6f 53 74 61 72 74 54 |Timer.o.|IoStartT|
|00000520| 69 6d 65 72 00 00 9a 04 | 50 73 47 65 74 56 65 72 |imer....|PsGetVer|
|00000530| 73 69 6f 6e 00 00 20 02 | 49 6f 49 6e 69 74 69 61 |sion.. .|IoInitia|
|00000540| 6c 69 7a 65 54 69 6d 65 | 72 00 8e 00 45 78 49 6e |lizeTime|r...ExIn|
|00000550| 69 74 69 61 6c 69 7a 65 | 4e 50 61 67 65 64 4c 6f |itialize|NPagedLo|
|00000560| 6f 6b 61 73 69 64 65 4c | 69 73 74 00 35 03 4b 65 |okasideL|ist.5.Ke|
|00000570| 53 65 74 54 69 6d 65 72 | 00 00 e2 02 4b 65 49 6e |SetTimer|....KeIn|
|00000580| 69 74 69 61 6c 69 7a 65 | 54 69 6d 65 72 00 d8 02 |itialize|Timer...|
|00000590| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 44 70 63 00 |KeInitia|lizeDpc.|
|000005a0| 4b 07 5f 61 6c 6c 6d 75 | 6c 00 a7 01 49 6f 41 63 |K._allmu|l...IoAc|
|000005b0| 71 75 69 72 65 52 65 6d | 6f 76 65 4c 6f 63 6b 45 |quireRem|oveLockE|
|000005c0| 78 00 69 07 5f 76 73 6e | 70 72 69 6e 74 66 00 00 |x.i._vsn|printf..|
|000005d0| 2a 03 4b 65 53 65 74 45 | 76 65 6e 74 00 00 fa 01 |*.KeSetE|vent....|
|000005e0| 49 6f 46 72 65 65 49 72 | 70 00 ae 01 49 6f 41 6c |IoFreeIr|p...IoAl|
|000005f0| 6c 6f 63 61 74 65 49 72 | 70 00 00 02 49 6f 47 65 |locateIr|p...IoGe|
|00000600| 74 41 74 74 61 63 68 65 | 64 44 65 76 69 63 65 52 |tAttache|dDeviceR|
|00000610| 65 66 65 72 65 6e 63 65 | 00 00 23 02 49 6f 49 6e |eference|..#.IoIn|
|00000620| 76 61 6c 69 64 61 74 65 | 44 65 76 69 63 65 53 74 |validate|DeviceSt|
|00000630| 61 74 65 00 46 02 49 6f | 52 65 6c 65 61 73 65 52 |ate.F.Io|ReleaseR|
|00000640| 65 6d 6f 76 65 4c 6f 63 | 6b 41 6e 64 57 61 69 74 |emoveLoc|kAndWait|
|00000650| 45 78 00 00 bd 01 49 6f | 42 75 69 6c 64 53 79 6e |Ex....Io|BuildSyn|
|00000660| 63 68 72 6f 6e 6f 75 73 | 46 73 64 52 65 71 75 65 |chronous|FsdReque|
|00000670| 73 74 00 00 db 04 52 74 | 6c 41 6e 73 69 53 74 72 |st....Rt|lAnsiStr|
|00000680| 69 6e 67 54 6f 55 6e 69 | 63 6f 64 65 53 74 72 69 |ingToUni|codeStri|
|00000690| 6e 67 00 00 5b 05 52 74 | 6c 49 6e 69 74 41 6e 73 |ng..[.Rt|lInitAns|
|000006a0| 69 53 74 72 69 6e 67 00 | a4 01 49 6e 74 65 72 6c |iString.|..Interl|
|000006b0| 6f 63 6b 65 64 50 6f 70 | 45 6e 74 72 79 53 4c 69 |ockedPop|EntrySLi|
|000006c0| 73 74 00 00 a5 01 49 6e | 74 65 72 6c 6f 63 6b 65 |st....In|terlocke|
|000006d0| 64 50 75 73 68 45 6e 74 | 72 79 53 4c 69 73 74 00 |dPushEnt|rySList.|
|000006e0| 4a 03 4b 65 66 52 65 6c | 65 61 73 65 53 70 69 6e |J.KefRel|easeSpin|
|000006f0| 4c 6f 63 6b 46 72 6f 6d | 44 70 63 4c 65 76 65 6c |LockFrom|DpcLevel|
|00000700| 00 00 49 03 4b 65 66 41 | 63 71 75 69 72 65 53 70 |..I.KefA|cquireSp|
|00000710| 69 6e 4c 6f 63 6b 41 74 | 44 70 63 4c 65 76 65 6c |inLockAt|DpcLevel|
|00000720| 00 00 fe 02 4b 65 51 75 | 65 72 79 53 79 73 74 65 |....KeQu|erySyste|
|00000730| 6d 54 69 6d 65 00 0a 02 | 49 6f 47 65 74 44 65 76 |mTime...|IoGetDev|
|00000740| 69 63 65 50 72 6f 70 65 | 72 74 79 00 90 02 49 6f |icePrope|rty...Io|
|00000750| 57 72 69 74 65 45 72 72 | 6f 72 4c 6f 67 45 6e 74 |WriteErr|orLogEnt|
|00000760| 72 79 00 00 ad 01 49 6f | 41 6c 6c 6f 63 61 74 65 |ry....Io|Allocate|
|00000770| 45 72 72 6f 72 4c 6f 67 | 45 6e 74 72 79 00 40 05 |ErrorLog|Entry.@.|
|00000780| 52 74 6c 46 72 65 65 55 | 6e 69 63 6f 64 65 53 74 |RtlFreeU|nicodeSt|
|00000790| 72 69 6e 67 00 00 de 04 | 52 74 6c 41 70 70 65 6e |ring....|RtlAppen|
|000007a0| 64 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |dUnicode|StringTo|
|000007b0| 53 74 72 69 6e 67 00 00 | b9 05 52 74 6c 51 75 65 |String..|..RtlQue|
|000007c0| 72 79 52 65 67 69 73 74 | 72 79 56 61 6c 75 65 73 |ryRegist|ryValues|
|000007d0| 00 00 0b 06 52 74 6c 57 | 72 69 74 65 52 65 67 69 |....RtlW|riteRegi|
|000007e0| 73 74 72 79 56 61 6c 75 | 65 00 03 05 52 74 6c 43 |stryValu|e...RtlC|
|000007f0| 72 65 61 74 65 52 65 67 | 69 73 74 72 79 4b 65 79 |reateReg|istryKey|
|00000800| 00 00 e8 04 52 74 6c 43 | 68 65 63 6b 52 65 67 69 |....RtlC|heckRegi|
|00000810| 73 74 72 79 4b 65 79 00 | e6 06 5a 77 4f 70 65 6e |stryKey.|..ZwOpen|
|00000820| 4b 65 79 00 ad 06 5a 77 | 43 6c 6f 73 65 00 2c 02 |Key...Zw|Close.,.|
|00000830| 49 6f 4f 70 65 6e 44 65 | 76 69 63 65 52 65 67 69 |IoOpenDe|viceRegi|
|00000840| 73 74 72 79 4b 65 79 00 | b8 06 5a 77 43 72 65 61 |stryKey.|..ZwCrea|
|00000850| 74 65 4b 65 79 00 dd 00 | 45 78 66 49 6e 74 65 72 |teKey...|ExfInter|
|00000860| 6c 6f 63 6b 65 64 52 65 | 6d 6f 76 65 48 65 61 64 |lockedRe|moveHead|
|00000870| 4c 69 73 74 00 00 fe 01 | 49 6f 46 72 65 65 57 6f |List....|IoFreeWo|
|00000880| 72 6b 49 74 65 6d 00 00 | 7f 07 6d 65 6d 6d 6f 76 |rkItem..|..memmov|
|00000890| 65 00 34 02 49 6f 51 75 | 65 75 65 57 6f 72 6b 49 |e.4.IoQu|eueWorkI|
|000008a0| 74 65 6d 00 b2 01 49 6f | 41 6c 6c 6f 63 61 74 65 |tem...Io|Allocate|
|000008b0| 57 6f 72 6b 49 74 65 6d | 00 00 b3 02 4b 65 42 75 |WorkItem|....KeBu|
|000008c0| 67 43 68 65 63 6b 45 78 | 00 00 6e 74 6f 73 6b 72 |gCheckEx|..ntoskr|
|000008d0| 6e 6c 2e 65 78 65 00 00 | 5f 00 4b 66 52 65 6c 65 |nl.exe..|_.KfRele|
|000008e0| 61 73 65 53 70 69 6e 4c | 6f 63 6b 00 5c 00 4b 66 |aseSpinL|ock.\.Kf|
|000008f0| 41 63 71 75 69 72 65 53 | 70 69 6e 4c 6f 63 6b 00 |AcquireS|pinLock.|
|00000900| 59 00 4b 65 53 74 61 6c | 6c 45 78 65 63 75 74 69 |Y.KeStal|lExecuti|
|00000910| 6f 6e 50 72 6f 63 65 73 | 73 6f 72 00 50 00 4b 65 |onProces|sor.P.Ke|
|00000920| 47 65 74 43 75 72 72 65 | 6e 74 49 72 71 6c 00 00 |GetCurre|ntIrql..|
|00000930| 48 41 4c 2e 64 6c 6c 00 | 00 00 57 6d 69 43 6f 6d |HAL.dll.|..WmiCom|
|00000940| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 02 00 |pleteReq|uest....|
|00000950| 57 6d 69 53 79 73 74 65 | 6d 43 6f 6e 74 72 6f 6c |WmiSyste|mControl|
|00000960| 00 00 01 00 57 6d 69 46 | 69 72 65 45 76 65 6e 74 |....WmiF|ireEvent|
|00000970| 00 00 57 4d 49 4c 49 42 | 2e 53 59 53 00 00 c8 02 |..WMILIB|.SYS....|
|00000980| 4b 65 47 65 74 43 75 72 | 72 65 6e 74 54 68 72 65 |KeGetCur|rentThre|
|00000990| 61 64 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |ad......|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+