home *** CD-ROM | disk | FTP | other *** search
Unknown | 2003-05-11 | 672 b |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| a8 0c 00 00 00 00 00 00 | 00 00 00 00 ea 0e 00 00 |........|........|
|00000010| 60 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |`.......|........|
|00000020| 00 00 00 00 00 00 00 00 | 0c 0d 00 00 20 0d 00 00 |........|.... ...|
|00000030| 2a 0d 00 00 4a 0d 00 00 | 5e 0d 00 00 6a 0d 00 00 |*...J...|^...j...|
|00000040| 74 0d 00 00 88 0d 00 00 | 98 0d 00 00 aa 0d 00 00 |t.......|........|
|00000050| c2 0d 00 00 de 0d 00 00 | f0 0d 00 00 0e 0e 00 00 |........|........|
|00000060| 24 0e 00 00 3a 0e 00 00 | 54 0e 00 00 68 0e 00 00 |$...:...|T...h...|
|00000070| 7c 0e 00 00 96 0e 00 00 | a8 0e 00 00 c0 0e 00 00 ||.......|........|
|00000080| d8 0e 00 00 f8 0e 00 00 | 00 00 00 00 c0 02 52 74 |........|......Rt|
|00000090| 6c 46 72 65 65 41 6e 73 | 69 53 74 72 69 6e 67 00 |lFreeAns|iString.|
|000000a0| db 03 73 74 72 6e 63 70 | 79 00 0f 03 52 74 6c 55 |..strncp|y...RtlU|
|000000b0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 41 6e |nicodeSt|ringToAn|
|000000c0| 73 69 53 74 72 69 6e 67 | 00 00 3d 02 4f 62 51 75 |siString|..=.ObQu|
|000000d0| 65 72 79 4e 61 6d 65 53 | 74 72 69 6e 67 00 b4 03 |eryNameS|tring...|
|000000e0| 5f 73 74 72 69 63 6d 70 | 00 00 5b 03 5a 77 43 6c |_stricmp|..[.ZwCl|
|000000f0| 6f 73 65 00 69 03 5a 77 | 44 75 70 6c 69 63 61 74 |ose.i.Zw|Duplicat|
|00000100| 65 4f 62 6a 65 63 74 00 | 7a 03 5a 77 4f 70 65 6e |eObject.|z.ZwOpen|
|00000110| 50 72 6f 63 65 73 73 00 | 59 01 4b 65 44 65 74 61 |Process.|Y.KeDeta|
|00000120| 63 68 50 72 6f 63 65 73 | 73 00 44 02 4f 62 66 44 |chProces|s.D.ObfD|
|00000130| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00000140| 00 00 3f 02 4f 62 52 65 | 66 65 72 65 6e 63 65 4f |..?.ObRe|ferenceO|
|00000150| 62 6a 65 63 74 42 79 48 | 61 6e 64 6c 65 00 4f 01 |bjectByH|andle.O.|
|00000160| 4b 65 41 74 74 61 63 68 | 50 72 6f 63 65 73 73 00 |KeAttach|Process.|
|00000170| 5b 02 50 73 4c 6f 6f 6b | 75 70 50 72 6f 63 65 73 |[.PsLook|upProces|
|00000180| 73 42 79 50 72 6f 63 65 | 73 73 49 64 00 00 7b 03 |sByProce|ssId..{.|
|00000190| 5a 77 4f 70 65 6e 50 72 | 6f 63 65 73 73 54 6f 6b |ZwOpenPr|ocessTok|
|000001a0| 65 6e 00 00 45 01 49 6f | 66 43 6f 6d 70 6c 65 74 |en..E.Io|fComplet|
|000001b0| 65 52 65 71 75 65 73 74 | 00 00 47 03 53 65 52 65 |eRequest|..G.SeRe|
|000001c0| 6c 65 61 73 65 53 75 62 | 6a 65 63 74 43 6f 6e 74 |leaseSub|jectCont|
|000001d0| 65 78 74 00 40 03 53 65 | 50 72 69 76 69 6c 65 67 |ext.@.Se|Privileg|
|000001e0| 65 43 68 65 63 6b 00 00 | 45 00 45 78 47 65 74 50 |eCheck..|E.ExGetP|
|000001f0| 72 65 76 69 6f 75 73 4d | 6f 64 65 00 32 03 53 65 |reviousM|ode.2.Se|
|00000200| 43 61 70 74 75 72 65 53 | 75 62 6a 65 63 74 43 6f |CaptureS|ubjectCo|
|00000210| 6e 74 65 78 74 00 fb 00 | 49 6f 44 65 6c 65 74 65 |ntext...|IoDelete|
|00000220| 44 65 76 69 63 65 00 00 | d0 02 52 74 6c 49 6e 69 |Device..|..RtlIni|
|00000230| 74 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |tUnicode|String..|
|00000240| f7 00 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |..IoCrea|teSymbol|
|00000250| 69 63 4c 69 6e 6b 00 00 | f3 00 49 6f 43 72 65 61 |icLink..|..IoCrea|
|00000260| 74 65 44 65 76 69 63 65 | 00 00 6e 74 6f 73 6b 72 |teDevice|..ntoskr|
|00000270| 6e 6c 2e 65 78 65 00 00 | 18 03 52 74 6c 55 6e 77 |nl.exe..|..RtlUnw|
|00000280| 69 6e 64 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |ind.....|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+