home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-01-19 | 2.5 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 28 a0 0d 00 00 00 00 00 | 00 00 00 00 62 a5 0d 00 |(.......|....b...|
|00000010| 00 10 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| 00 00 00 00 00 00 00 00 | a4 a1 0d 00 c2 a1 0d 00 |........|........|
|00000030| da a1 0d 00 f2 a1 0d 00 | 0a a2 0d 00 22 a2 0d 00 |........|...."...|
|00000040| 36 a2 0d 00 40 a2 0d 00 | 5a a2 0d 00 68 a2 0d 00 |6...@...|Z...h...|
|00000050| 7a a2 0d 00 8c a2 0d 00 | 98 a2 0d 00 b0 a2 0d 00 |z.......|........|
|00000060| c2 a2 0d 00 d6 a2 0d 00 | e6 a2 0d 00 f4 a2 0d 00 |........|........|
|00000070| 02 a3 0d 00 14 a3 0d 00 | 28 a3 0d 00 38 a3 0d 00 |........|(...8...|
|00000080| 4c a3 0d 00 5a a3 0d 00 | 70 a3 0d 00 80 a3 0d 00 |L...Z...|p.......|
|00000090| 8c a3 0d 00 a4 a3 0d 00 | b8 a3 0d 00 cc a3 0d 00 |........|........|
|000000a0| d6 a3 0d 00 f0 a3 0d 00 | 08 a4 0d 00 20 a4 0d 00 |........|.... ...|
|000000b0| 2a a4 0d 00 42 a4 0d 00 | 56 a4 0d 00 6a a4 0d 00 |*...B...|V...j...|
|000000c0| 74 a4 0d 00 92 a4 0d 00 | b2 a4 0d 00 c0 a4 0d 00 |t.......|........|
|000000d0| cc a4 0d 00 f4 a4 0d 00 | 04 a5 0d 00 1c a5 0d 00 |........|........|
|000000e0| 2a a5 0d 00 3e a5 0d 00 | 54 a5 0d 00 70 a5 0d 00 |*...>...|T...p...|
|000000f0| 7c a5 0d 00 94 a5 0d 00 | aa a5 0d 00 bc a5 0d 00 ||.......|........|
|00000100| d2 a5 0d 00 e6 a5 0d 00 | ee a5 0d 00 08 a6 0d 00 |........|........|
|00000110| 24 a6 0d 00 3c a6 0d 00 | 50 a6 0d 00 72 a6 0d 00 |$...<...|P...r...|
|00000120| 80 a6 0d 00 90 a6 0d 00 | a8 a6 0d 00 c0 a6 0d 00 |........|........|
|00000130| e2 a6 0d 00 fa a6 0d 00 | 10 a7 0d 00 32 a7 0d 00 |........|....2...|
|00000140| 54 a7 0d 00 6e a7 0d 00 | 86 a7 0d 00 a0 a7 0d 00 |T...n...|........|
|00000150| aa a7 0d 00 c8 a7 0d 00 | d0 a7 0d 00 dc a7 0d 00 |........|........|
|00000160| f4 a7 0d 00 10 a8 0d 00 | 1a a8 0d 00 3a a8 0d 00 |........|....:...|
|00000170| 4e a8 0d 00 6a a8 0d 00 | 8c a8 0d 00 a2 a8 0d 00 |N...j...|........|
|00000180| b4 a8 0d 00 ce a8 0d 00 | e6 a8 0d 00 fc a8 0d 00 |........|........|
|00000190| 12 a9 0d 00 2c a9 0d 00 | 48 a9 0d 00 52 a9 0d 00 |....,...|H...R...|
|000001a0| 00 00 00 00 d5 00 45 78 | 66 41 63 71 75 69 72 65 |......Ex|fAcquire|
|000001b0| 50 75 73 68 4c 6f 63 6b | 45 78 63 6c 75 73 69 76 |PushLock|Exclusiv|
|000001c0| 65 00 e2 00 45 78 66 54 | 72 79 54 6f 57 61 6b 65 |e...ExfT|ryToWake|
|000001d0| 50 75 73 68 4c 6f 63 6b | 00 00 ff 04 52 74 6c 43 |PushLock|....RtlC|
|000001e0| 6f 70 79 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |opyUnico|deString|
|000001f0| 00 00 6d 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |..m.ExAl|locatePo|
|00000200| 6f 6c 57 69 74 68 54 61 | 67 00 99 02 4b 64 44 65 |olWithTa|g...KdDe|
|00000210| 62 75 67 67 65 72 4e 6f | 74 50 72 65 73 65 6e 74 |buggerNo|tPresent|
|00000220| 00 00 98 02 4b 64 44 65 | 62 75 67 67 65 72 45 6e |....KdDe|buggerEn|
|00000230| 61 62 6c 65 64 00 ad 06 | 5a 77 43 6c 6f 73 65 00 |abled...|ZwClose.|
|00000240| 03 07 5a 77 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |..ZwQuer|yInforma|
|00000250| 74 69 6f 6e 46 69 6c 65 | 00 00 e4 06 5a 77 4f 70 |tionFile|....ZwOp|
|00000260| 65 6e 46 69 6c 65 00 00 | 4e 00 45 74 77 45 76 65 |enFile..|N.EtwEve|
|00000270| 6e 74 45 6e 61 62 6c 65 | 64 00 13 07 5a 77 51 75 |ntEnable|d...ZwQu|
|00000280| 65 72 79 56 61 6c 75 65 | 4b 65 79 00 e6 06 5a 77 |eryValue|Key...Zw|
|00000290| 4f 70 65 6e 4b 65 79 00 | 5f 05 52 74 6c 49 6e 69 |OpenKey.|_.RtlIni|
|000002a0| 74 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |tUnicode|String..|
|000002b0| ab 00 45 78 51 75 65 75 | 65 57 6f 72 6b 49 74 65 |..ExQueu|eWorkIte|
|000002c0| 6d 00 85 00 45 78 46 72 | 65 65 50 6f 6f 6c 57 69 |m...ExFr|eePoolWi|
|000002d0| 74 68 54 61 67 00 b3 02 | 4b 65 42 75 67 43 68 65 |thTag...|KeBugChe|
|000002e0| 63 6b 45 78 00 00 3f 03 | 4b 65 54 69 63 6b 43 6f |ckEx..?.|KeTickCo|
|000002f0| 75 6e 74 00 35 03 4b 65 | 53 65 74 54 69 6d 65 72 |unt.5.Ke|SetTimer|
|00000300| 00 00 d8 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |....KeIn|itialize|
|00000310| 44 70 63 00 e2 02 4b 65 | 49 6e 69 74 69 61 6c 69 |Dpc...Ke|Initiali|
|00000320| 7a 65 54 69 6d 65 72 00 | 53 00 45 74 77 55 6e 72 |zeTimer.|S.EtwUnr|
|00000330| 65 67 69 73 74 65 72 00 | 9e 01 49 6e 69 74 53 61 |egister.|..InitSa|
|00000340| 66 65 42 6f 6f 74 4d 6f | 64 65 00 00 50 00 45 74 |feBootMo|de..P.Et|
|00000350| 77 52 65 67 69 73 74 65 | 72 00 70 04 50 73 47 65 |wRegiste|r.p.PsGe|
|00000360| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 00 |tCurrent|Process.|
|00000370| 38 00 44 62 67 42 72 65 | 61 6b 50 6f 69 6e 74 00 |8.DbgBre|akPoint.|
|00000380| 3c 00 44 62 67 50 72 69 | 6e 74 00 00 34 04 4f 62 |<.DbgPri|nt..4.Ob|
|00000390| 4f 70 65 6e 4f 62 6a 65 | 63 74 42 79 50 6f 69 6e |OpenObje|ctByPoin|
|000003a0| 74 65 72 00 f5 01 49 6f | 46 69 6c 65 4f 62 6a 65 |ter...Io|FileObje|
|000003b0| 63 74 54 79 70 65 00 00 | 35 04 4f 62 51 75 65 72 |ctType..|5.ObQuer|
|000003c0| 79 4e 61 6d 65 53 74 72 | 69 6e 67 00 7e 07 6d 65 |yNameStr|ing.~.me|
|000003d0| 6d 63 70 79 00 00 42 03 | 4b 65 55 6e 73 74 61 63 |mcpy..B.|KeUnstac|
|000003e0| 6b 44 65 74 61 63 68 50 | 72 6f 63 65 73 73 00 00 |kDetachP|rocess..|
|000003f0| 40 05 52 74 6c 46 72 65 | 65 55 6e 69 63 6f 64 65 |@.RtlFre|eUnicode|
|00000400| 53 74 72 69 6e 67 00 00 | 39 03 4b 65 53 74 61 63 |String..|9.KeStac|
|00000410| 6b 41 74 74 61 63 68 50 | 72 6f 63 65 73 73 00 00 |kAttachP|rocess..|
|00000420| 80 07 6d 65 6d 73 65 74 | 00 00 9f 04 50 73 49 73 |..memset|....PsIs|
|00000430| 50 72 6f 74 65 63 74 65 | 64 50 72 6f 63 65 73 73 |Protecte|dProcess|
|00000440| 00 00 5a 05 52 74 6c 49 | 6d 61 67 65 4e 74 48 65 |..Z.RtlI|mageNtHe|
|00000450| 61 64 65 72 00 00 20 01 | 46 73 52 74 6c 47 65 74 |ader.. .|FsRtlGet|
|00000460| 46 69 6c 65 53 69 7a 65 | 00 00 7f 07 6d 65 6d 6d |FileSize|....memm|
|00000470| 6f 76 65 00 6c 00 45 78 | 41 6c 6c 6f 63 61 74 65 |ove.l.Ex|Allocate|
|00000480| 50 6f 6f 6c 57 69 74 68 | 51 75 6f 74 61 54 61 67 |PoolWith|QuotaTag|
|00000490| 00 00 9d 04 50 73 49 73 | 43 75 72 72 65 6e 74 54 |....PsIs|CurrentT|
|000004a0| 68 72 65 61 64 50 72 65 | 66 65 74 63 68 69 6e 67 |hreadPre|fetching|
|000004b0| 00 00 16 07 5a 77 52 65 | 61 64 46 69 6c 65 00 00 |....ZwRe|adFile..|
|000004c0| 54 00 45 74 77 57 72 69 | 74 65 00 00 47 06 53 65 |T.EtwWri|te..G.Se|
|000004d0| 52 65 70 6f 72 74 53 65 | 63 75 72 69 74 79 45 76 |ReportSe|curityEv|
|000004e0| 65 6e 74 57 69 74 68 53 | 75 62 43 61 74 65 67 6f |entWithS|ubCatego|
|000004f0| 72 79 00 00 b8 03 4d 6d | 55 6e 6c 6f 63 6b 50 61 |ry....Mm|UnlockPa|
|00000500| 67 65 73 00 48 03 4b 65 | 57 61 69 74 46 6f 72 53 |ges.H.Ke|WaitForS|
|00000510| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 2d 02 49 6f |ingleObj|ect.-.Io|
|00000520| 50 61 67 65 52 65 61 64 | 00 00 d9 02 4b 65 49 6e |PageRead|....KeIn|
|00000530| 69 74 69 61 6c 69 7a 65 | 45 76 65 6e 74 00 a7 03 |itialize|Event...|
|00000540| 4d 6d 50 72 6f 62 65 41 | 6e 64 4c 6f 63 6b 50 61 |MmProbeA|ndLockPa|
|00000550| 67 65 73 00 b4 03 4d 6d | 53 69 7a 65 4f 66 4d 64 |ges...Mm|SizeOfMd|
|00000560| 6c 00 6e 74 6f 73 6b 72 | 6e 6c 2e 65 78 65 00 00 |l.ntoskr|nl.exe..|
|00000570| f8 05 52 74 6c 55 6e 77 | 69 6e 64 00 40 07 5a 77 |..RtlUnw|ind.@.Zw|
|00000580| 55 6e 6d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |UnmapVie|wOfSecti|
|00000590| 6f 6e 00 00 dd 06 5a 77 | 4d 61 70 56 69 65 77 4f |on....Zw|MapViewO|
|000005a0| 66 53 65 63 74 69 6f 6e | 00 00 bb 06 5a 77 43 72 |fSection|....ZwCr|
|000005b0| 65 61 74 65 53 65 63 74 | 69 6f 6e 00 d2 06 5a 77 |eateSect|ion...Zw|
|000005c0| 46 72 65 65 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |FreeVirt|ualMemor|
|000005d0| 79 00 ef 04 52 74 6c 43 | 6f 6d 70 61 72 65 4d 65 |y...RtlC|ompareMe|
|000005e0| 6d 6f 72 79 00 00 82 07 | 71 73 6f 72 74 00 98 06 |mory....|qsort...|
|000005f0| 5a 77 41 6c 6c 6f 63 61 | 74 65 56 69 72 74 75 61 |ZwAlloca|teVirtua|
|00000600| 6c 4d 65 6d 6f 72 79 00 | 91 00 45 78 49 6e 69 74 |lMemory.|..ExInit|
|00000610| 69 61 6c 69 7a 65 52 65 | 73 6f 75 72 63 65 4c 69 |ializeRe|sourceLi|
|00000620| 74 65 00 00 74 00 45 78 | 44 65 6c 65 74 65 52 65 |te..t.Ex|DeleteRe|
|00000630| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 f3 04 52 74 |sourceLi|te....Rt|
|00000640| 6c 43 6f 6d 70 72 65 73 | 73 42 75 66 66 65 72 00 |lCompres|sBuffer.|
|00000650| 45 05 52 74 6c 47 65 74 | 43 6f 6d 70 72 65 73 73 |E.RtlGet|Compress|
|00000660| 69 6f 6e 57 6f 72 6b 53 | 70 61 63 65 53 69 7a 65 |ionWorkS|paceSize|
|00000670| 00 00 43 07 5a 77 57 72 | 69 74 65 46 69 6c 65 00 |..C.ZwWr|iteFile.|
|00000680| b5 06 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |..ZwCrea|teFile..|
|00000690| f0 02 4b 65 4c 65 61 76 | 65 43 72 69 74 69 63 61 |..KeLeav|eCritica|
|000006a0| 6c 52 65 67 69 6f 6e 00 | bb 00 45 78 52 65 6c 65 |lRegion.|..ExRele|
|000006b0| 61 73 65 52 65 73 6f 75 | 72 63 65 4c 69 74 65 00 |aseResou|rceLite.|
|000006c0| 5b 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |[.ExAcqu|ireResou|
|000006d0| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|000006e0| 00 00 bd 02 4b 65 45 6e | 74 65 72 43 72 69 74 69 |....KeEn|terCriti|
|000006f0| 63 61 6c 52 65 67 69 6f | 6e 00 08 05 52 74 6c 44 |calRegio|n...RtlD|
|00000700| 65 63 6f 6d 70 72 65 73 | 73 42 75 66 66 65 72 00 |ecompres|sBuffer.|
|00000710| de 04 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |..RtlApp|endUnico|
|00000720| 64 65 53 74 72 69 6e 67 | 54 6f 53 74 72 69 6e 67 |deString|ToString|
|00000730| 00 00 6f 00 45 78 43 6f | 6e 76 65 72 74 45 78 63 |..o.ExCo|nvertExc|
|00000740| 6c 75 73 69 76 65 54 6f | 53 68 61 72 65 64 4c 69 |lusiveTo|SharedLi|
|00000750| 74 65 00 00 f2 04 52 74 | 6c 43 6f 6d 70 61 72 65 |te....Rt|lCompare|
|00000760| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 fd 06 |UnicodeS|tring...|
|00000770| 5a 77 51 75 65 72 79 44 | 69 72 65 63 74 6f 72 79 |ZwQueryD|irectory|
|00000780| 46 69 6c 65 00 00 06 05 | 52 74 6c 43 72 65 61 74 |File....|RtlCreat|
|00000790| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|000007a0| 74 07 62 73 65 61 72 63 | 68 00 5c 00 45 78 41 63 |t.bsearc|h.\.ExAc|
|000007b0| 71 75 69 72 65 52 65 73 | 6f 75 72 63 65 53 68 61 |quireRes|ourceSha|
|000007c0| 72 65 64 4c 69 74 65 00 | 73 07 61 74 6f 6c 00 00 |redLite.|s.atol..|
|000007d0| 52 07 5f 61 75 6c 6c 64 | 69 76 00 00 69 04 50 73 |R._aulld|iv..i.Ps|
|000007e0| 43 72 65 61 74 65 53 79 | 73 74 65 6d 54 68 72 65 |CreateSy|stemThre|
|000007f0| 61 64 00 00 df 04 52 74 | 6c 41 70 70 65 6e 64 55 |ad....Rt|lAppendU|
|00000800| 6e 69 63 6f 64 65 54 6f | 53 74 72 69 6e 67 00 00 |nicodeTo|String..|
|00000810| 9a 07 77 63 73 63 68 72 | 00 00 db 04 52 74 6c 41 |..wcschr|....RtlA|
|00000820| 6e 73 69 53 74 72 69 6e | 67 54 6f 55 6e 69 63 6f |nsiStrin|gToUnico|
|00000830| 64 65 53 74 72 69 6e 67 | 00 00 5b 05 52 74 6c 49 |deString|..[.RtlI|
|00000840| 6e 69 74 41 6e 73 69 53 | 74 72 69 6e 67 00 12 07 |nitAnsiS|tring...|
|00000850| 5a 77 51 75 65 72 79 53 | 79 73 74 65 6d 49 6e 66 |ZwQueryS|ystemInf|
|00000860| 6f 72 6d 61 74 69 6f 6e | 00 00 b9 04 50 73 53 65 |ormation|....PsSe|
|00000870| 74 43 72 65 61 74 65 50 | 72 6f 63 65 73 73 4e 6f |tCreateP|rocessNo|
|00000880| 74 69 66 79 52 6f 75 74 | 69 6e 65 00 05 02 49 6f |tifyRout|ine...Io|
|00000890| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|000008a0| 73 00 86 04 50 73 47 65 | 74 50 72 6f 63 65 73 73 |s...PsGe|tProcess|
|000008b0| 49 64 00 00 c8 04 50 73 | 54 65 72 6d 69 6e 61 74 |Id....Ps|Terminat|
|000008c0| 65 53 79 73 74 65 6d 54 | 68 72 65 61 64 00 c4 05 |eSystemT|hread...|
|000008d0| 52 74 6c 52 75 6e 4f 6e | 63 65 45 78 65 63 75 74 |RtlRunOn|ceExecut|
|000008e0| 65 4f 6e 63 65 00 2f 03 | 4b 65 53 65 74 50 72 69 |eOnce./.|KeSetPri|
|000008f0| 6f 72 69 74 79 54 68 72 | 65 61 64 00 c8 02 4b 65 |orityThr|ead...Ke|
|00000900| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|00000910| 00 00 14 04 4e 74 53 65 | 74 49 6e 66 6f 72 6d 61 |....NtSe|tInforma|
|00000920| 74 69 6f 6e 54 68 72 65 | 61 64 00 00 01 04 4e 74 |tionThre|ad....Nt|
|00000930| 51 75 65 72 79 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |QueryInf|ormation|
|00000940| 54 68 72 65 61 64 00 00 | a0 07 77 63 73 6e 63 6d |Thread..|..wcsncm|
|00000950| 70 00 6a 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |p.j.ExAl|locatePo|
|00000960| 6f 6c 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |ol......|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+