home *** CD-ROM | disk | FTP | other *** search
Unknown | 2000-06-07 | 2.6 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4c bc 00 00 00 00 00 00 | 00 00 00 00 e0 c5 00 00 |L.......|........|
|00000010| 50 02 00 00 3c bc 00 00 | 00 00 00 00 00 00 00 00 |P...<...|........|
|00000020| 36 c6 00 00 40 02 00 00 | 00 00 00 00 00 00 00 00 |6...@...|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 22 c6 00 00 |........|...."...|
|00000040| 0e c6 00 00 fa c5 00 00 | 00 00 00 00 f6 bd 00 00 |........|........|
|00000050| 30 be 00 00 48 be 00 00 | 6a be 00 00 82 be 00 00 |0...H...|j.......|
|00000060| 94 be 00 00 ac be 00 00 | c2 be 00 00 d6 be 00 00 |........|........|
|00000070| ee be 00 00 10 bf 00 00 | 26 bf 00 00 3e bf 00 00 |........|&...>...|
|00000080| 60 bf 00 00 78 bf 00 00 | 94 bf 00 00 b0 bf 00 00 |`...x...|........|
|00000090| c8 bf 00 00 e2 bf 00 00 | f0 bf 00 00 04 c0 00 00 |........|........|
|000000a0| 18 c0 00 00 22 c0 00 00 | 42 c0 00 00 56 c0 00 00 |...."...|B...V...|
|000000b0| 6e c0 00 00 86 c0 00 00 | a2 c0 00 00 bc c0 00 00 |n.......|........|
|000000c0| d6 c0 00 00 e8 c0 00 00 | 00 c1 00 00 1c c1 00 00 |........|........|
|000000d0| 38 c1 00 00 58 c1 00 00 | 6c c1 00 00 84 c1 00 00 |8...X...|l.......|
|000000e0| 9a c1 00 00 aa c1 00 00 | be c1 00 00 ce c1 00 00 |........|........|
|000000f0| dc c1 00 00 f4 c1 00 00 | 08 c2 00 00 1c c2 00 00 |........|........|
|00000100| 36 c2 00 00 08 be 00 00 | 20 be 00 00 8c c2 00 00 |6.......| .......|
|00000110| a8 c2 00 00 b6 c2 00 00 | ce c2 00 00 e6 c2 00 00 |........|........|
|00000120| 04 c3 00 00 14 c3 00 00 | 30 c3 00 00 42 c3 00 00 |........|0...B...|
|00000130| 4e c3 00 00 6a c3 00 00 | 80 c3 00 00 98 c3 00 00 |N...j...|........|
|00000140| a4 c3 00 00 b6 c3 00 00 | c8 c3 00 00 e0 c3 00 00 |........|........|
|00000150| ee c3 00 00 fa c3 00 00 | 0c c4 00 00 22 c4 00 00 |........|...."...|
|00000160| 42 c4 00 00 5e c4 00 00 | 72 c4 00 00 84 c4 00 00 |B...^...|r.......|
|00000170| 9e c4 00 00 ae c4 00 00 | b8 c4 00 00 cc c4 00 00 |........|........|
|00000180| e0 c4 00 00 f6 c4 00 00 | 06 c5 00 00 10 c5 00 00 |........|........|
|00000190| 1a c5 00 00 32 c5 00 00 | 4c c5 00 00 56 c5 00 00 |....2...|L...V...|
|000001a0| 60 c5 00 00 72 c5 00 00 | 80 c5 00 00 90 c5 00 00 |`...r...|........|
|000001b0| 9c c5 00 00 ae c5 00 00 | c6 c5 00 00 ee c5 00 00 |........|........|
|000001c0| ec bd 00 00 d4 bd 00 00 | 50 c2 00 00 6a c2 00 00 |........|P...j...|
|000001d0| 00 00 00 00 3c 00 45 78 | 44 65 6c 65 74 65 52 65 |....<.Ex|DeleteRe|
|000001e0| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 5b 03 5a 77 |sourceLi|te..[.Zw|
|000001f0| 43 6c 6f 73 65 00 fb 00 | 49 6f 44 65 6c 65 74 65 |Close...|IoDelete|
|00000200| 44 65 76 69 63 65 00 00 | fc 00 49 6f 44 65 6c 65 |Device..|..IoDele|
|00000210| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000220| 52 01 4b 65 42 75 67 43 | 68 65 63 6b 45 78 00 00 |R.KeBugC|heckEx..|
|00000230| 51 02 50 73 43 72 65 61 | 74 65 53 79 73 74 65 6d |Q.PsCrea|teSystem|
|00000240| 54 68 72 65 61 64 00 00 | 27 01 49 6f 52 65 67 69 |Thread..|'.IoRegi|
|00000250| 73 74 65 72 46 73 52 65 | 67 69 73 74 72 61 74 69 |sterFsRe|gistrati|
|00000260| 6f 6e 43 68 61 6e 67 65 | 00 00 f7 00 49 6f 43 72 |onChange|....IoCr|
|00000270| 65 61 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |eateSymb|olicLink|
|00000280| 00 00 f3 00 49 6f 43 72 | 65 61 74 65 44 65 76 69 |....IoCr|eateDevi|
|00000290| 63 65 00 00 d0 02 52 74 | 6c 49 6e 69 74 55 6e 69 |ce....Rt|lInitUni|
|000002a0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 0c 01 49 6f |codeStri|ng....Io|
|000002b0| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|000002c0| 73 00 70 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |s.p.KeIn|itialize|
|000002d0| 45 76 65 6e 74 00 76 01 | 4b 65 49 6e 69 74 69 61 |Event.v.|KeInitia|
|000002e0| 6c 69 7a 65 53 70 69 6e | 4c 6f 63 6b 00 00 6c 00 |lizeSpin|Lock..l.|
|000002f0| 45 78 52 65 6c 65 61 73 | 65 52 65 73 6f 75 72 63 |ExReleas|eResourc|
|00000300| 65 46 6f 72 54 68 72 65 | 61 64 4c 69 74 65 00 00 |eForThre|adLite..|
|00000310| 60 01 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |`.KeGetC|urrentTh|
|00000320| 72 65 61 64 00 00 80 01 | 4b 65 4c 65 61 76 65 43 |read....|KeLeaveC|
|00000330| 72 69 74 69 63 61 6c 52 | 65 67 69 6f 6e 00 2e 00 |riticalR|egion...|
|00000340| 45 78 41 63 71 75 69 72 | 65 52 65 73 6f 75 72 63 |ExAcquir|eResourc|
|00000350| 65 45 78 63 6c 75 73 69 | 76 65 4c 69 74 65 00 00 |eExclusi|veLite..|
|00000360| 5b 01 4b 65 45 6e 74 65 | 72 43 72 69 74 69 63 61 |[.KeEnte|rCritica|
|00000370| 6c 52 65 67 69 6f 6e 00 | 4a 00 45 78 49 6e 69 74 |lRegion.|J.ExInit|
|00000380| 69 61 6c 69 7a 65 52 65 | 73 6f 75 72 63 65 4c 69 |ializeRe|sourceLi|
|00000390| 74 65 00 00 11 01 49 6f | 47 65 74 52 65 6c 61 74 |te....Io|GetRelat|
|000003a0| 65 64 44 65 76 69 63 65 | 4f 62 6a 65 63 74 00 00 |edDevice|Object..|
|000003b0| 73 03 5a 77 4d 61 6b 65 | 54 65 6d 70 6f 72 61 72 |s.ZwMake|Temporar|
|000003c0| 79 4f 62 6a 65 63 74 00 | 5e 03 5a 77 43 72 65 61 |yObject.|^.ZwCrea|
|000003d0| 74 65 44 69 72 65 63 74 | 6f 72 79 4f 62 6a 65 63 |teDirect|oryObjec|
|000003e0| 74 00 42 00 45 78 46 72 | 65 65 50 6f 6f 6c 00 00 |t.B.ExFr|eePool..|
|000003f0| c0 02 52 74 6c 46 72 65 | 65 41 6e 73 69 53 74 72 |..RtlFre|eAnsiStr|
|00000400| 69 6e 67 00 88 02 52 74 | 6c 43 6f 6d 70 61 72 65 |ing...Rt|lCompare|
|00000410| 53 74 72 69 6e 67 00 00 | d2 03 73 70 72 69 6e 74 |String..|..sprint|
|00000420| 66 00 0f 03 52 74 6c 55 | 6e 69 63 6f 64 65 53 74 |f...RtlU|nicodeSt|
|00000430| 72 69 6e 67 54 6f 41 6e | 73 69 53 74 72 69 6e 67 |ringToAn|siString|
|00000440| 00 00 3d 02 4f 62 51 75 | 65 72 79 4e 61 6d 65 53 |..=.ObQu|eryNameS|
|00000450| 74 72 69 6e 67 00 36 00 | 45 78 41 6c 6c 6f 63 61 |tring.6.|ExAlloca|
|00000460| 74 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 00 44 02 |tePoolWi|thTag.D.|
|00000470| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|00000480| 6a 65 63 74 00 00 0d 01 | 49 6f 47 65 74 44 65 76 |ject....|IoGetDev|
|00000490| 69 63 65 4f 62 6a 65 63 | 74 50 6f 69 6e 74 65 72 |iceObjec|tPointer|
|000004a0| 00 00 57 01 4b 65 44 65 | 6c 61 79 45 78 65 63 75 |..W.KeDe|layExecu|
|000004b0| 74 69 6f 6e 54 68 72 65 | 61 64 00 00 e4 00 49 6f |tionThre|ad....Io|
|000004c0| 41 74 74 61 63 68 44 65 | 76 69 63 65 42 79 50 6f |AttachDe|viceByPo|
|000004d0| 69 6e 74 65 72 00 fd 00 | 49 6f 44 65 74 61 63 68 |inter...|IoDetach|
|000004e0| 44 65 76 69 63 65 00 00 | b8 01 4b 65 57 61 69 74 |Device..|..KeWait|
|000004f0| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|00000500| 8a 03 5a 77 51 75 65 72 | 79 53 79 6d 62 6f 6c 69 |..ZwQuer|ySymboli|
|00000510| 63 4c 69 6e 6b 4f 62 6a | 65 63 74 00 7d 03 5a 77 |cLinkObj|ect.}.Zw|
|00000520| 4f 70 65 6e 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |OpenSymb|olicLink|
|00000530| 4f 62 6a 65 63 74 00 00 | 77 02 52 74 6c 41 6e 73 |Object..|w.RtlAns|
|00000540| 69 53 74 72 69 6e 67 54 | 6f 55 6e 69 63 6f 64 65 |iStringT|oUnicode|
|00000550| 53 74 72 69 6e 67 00 00 | cd 02 52 74 6c 49 6e 69 |String..|..RtlIni|
|00000560| 74 41 6e 73 69 53 74 72 | 69 6e 67 00 c3 02 52 74 |tAnsiStr|ing...Rt|
|00000570| 6c 46 72 65 65 55 6e 69 | 63 6f 64 65 53 74 72 69 |lFreeUni|codeStri|
|00000580| 6e 67 00 00 45 01 49 6f | 66 43 6f 6d 70 6c 65 74 |ng..E.Io|fComplet|
|00000590| 65 52 65 71 75 65 73 74 | 00 00 44 01 49 6f 66 43 |eRequest|..D.IofC|
|000005a0| 61 6c 6c 44 72 69 76 65 | 72 00 df 01 4d 6d 49 73 |allDrive|r...MmIs|
|000005b0| 41 64 64 72 65 73 73 56 | 61 6c 69 64 00 00 54 01 |AddressV|alid..T.|
|000005c0| 4b 65 43 6c 65 61 72 45 | 76 65 6e 74 00 00 a2 01 |KeClearE|vent....|
|000005d0| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 d9 00 49 6e |KeSetEve|nt....In|
|000005e0| 74 65 72 6c 6f 63 6b 65 | 64 49 6e 63 72 65 6d 65 |terlocke|dIncreme|
|000005f0| 6e 74 00 00 8a 01 4b 65 | 52 65 61 64 53 74 61 74 |nt....Ke|ReadStat|
|00000600| 65 45 76 65 6e 74 00 00 | 86 01 4b 65 51 75 65 72 |eEvent..|..KeQuer|
|00000610| 79 53 79 73 74 65 6d 54 | 69 6d 65 00 35 03 53 65 |ySystemT|ime.5.Se|
|00000620| 43 72 65 61 74 65 43 6c | 69 65 6e 74 53 65 63 75 |CreateCl|ientSecu|
|00000630| 72 69 74 79 00 00 1a 03 | 52 74 6c 55 70 63 61 73 |rity....|RtlUpcas|
|00000640| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|00000650| a8 00 46 73 52 74 6c 49 | 73 4e 61 6d 65 49 6e 45 |..FsRtlI|sNameInE|
|00000660| 78 70 72 65 73 73 69 6f | 6e 00 7a 02 52 74 6c 41 |xpressio|n.z.RtlA|
|00000670| 70 70 65 6e 64 55 6e 69 | 63 6f 64 65 53 74 72 69 |ppendUni|codeStri|
|00000680| 6e 67 54 6f 53 74 72 69 | 6e 67 00 00 7b 02 52 74 |ngToStri|ng..{.Rt|
|00000690| 6c 41 70 70 65 6e 64 55 | 6e 69 63 6f 64 65 54 6f |lAppendU|nicodeTo|
|000006a0| 53 74 72 69 6e 67 00 00 | 4d 03 53 65 54 6f 6b 65 |String..|M.SeToke|
|000006b0| 6e 54 79 70 65 00 54 02 | 50 73 47 65 74 43 75 72 |nType.T.|PsGetCur|
|000006c0| 72 65 6e 74 50 72 6f 63 | 65 73 73 49 64 00 55 02 |rentProc|essId.U.|
|000006d0| 50 73 47 65 74 43 75 72 | 72 65 6e 74 54 68 72 65 |PsGetCur|rentThre|
|000006e0| 61 64 49 64 00 00 2f 00 | 45 78 41 63 71 75 69 72 |adId../.|ExAcquir|
|000006f0| 65 52 65 73 6f 75 72 63 | 65 53 68 61 72 65 64 4c |eResourc|eSharedL|
|00000700| 69 74 65 00 9a 01 4b 65 | 52 65 73 65 74 45 76 65 |ite...Ke|ResetEve|
|00000710| 6e 74 00 00 b6 01 4b 65 | 57 61 69 74 46 6f 72 4d |nt....Ke|WaitForM|
|00000720| 75 6c 74 69 70 6c 65 4f | 62 6a 65 63 74 73 00 00 |ultipleO|bjects..|
|00000730| 62 00 45 78 51 75 65 75 | 65 57 6f 72 6b 49 74 65 |b.ExQueu|eWorkIte|
|00000740| 6d 00 2a 00 44 62 67 50 | 72 69 6e 74 00 00 32 01 |m.*.DbgP|rint..2.|
|00000750| 49 6f 53 65 74 54 68 72 | 65 61 64 48 61 72 64 45 |IoSetThr|eadHardE|
|00000760| 72 72 6f 72 4d 6f 64 65 | 00 00 a7 01 4b 65 53 65 |rrorMode|....KeSe|
|00000770| 74 50 72 69 6f 72 69 74 | 79 54 68 72 65 61 64 00 |tPriorit|yThread.|
|00000780| 92 02 52 74 6c 43 6f 70 | 79 55 6e 69 63 6f 64 65 |..RtlCop|yUnicode|
|00000790| 53 74 72 69 6e 67 00 00 | df 03 73 77 70 72 69 6e |String..|..swprin|
|000007a0| 74 66 00 00 59 01 4b 65 | 44 65 74 61 63 68 50 72 |tf..Y.Ke|DetachPr|
|000007b0| 6f 63 65 73 73 00 4f 01 | 4b 65 41 74 74 61 63 68 |ocess.O.|KeAttach|
|000007c0| 50 72 6f 63 65 73 73 00 | a1 03 5a 77 57 61 69 74 |Process.|..ZwWait|
|000007d0| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|000007e0| 94 03 5a 77 53 65 74 45 | 76 65 6e 74 00 00 07 01 |..ZwSetE|vent....|
|000007f0| 49 6f 46 72 65 65 49 72 | 70 00 62 02 50 73 52 65 |IoFreeIr|p.b.PsRe|
|00000800| 76 65 72 74 54 6f 53 65 | 6c 66 00 00 3b 03 53 65 |vertToSe|lf..;.Se|
|00000810| 49 6d 70 65 72 73 6f 6e | 61 74 65 43 6c 69 65 6e |Imperson|ateClien|
|00000820| 74 00 e6 00 49 6f 42 75 | 69 6c 64 41 73 79 6e 63 |t...IoBu|ildAsync|
|00000830| 68 72 6f 6e 6f 75 73 46 | 73 64 52 65 71 75 65 73 |hronousF|sdReques|
|00000840| 74 00 3f 02 4f 62 52 65 | 66 65 72 65 6e 63 65 4f |t.?.ObRe|ferenceO|
|00000850| 62 6a 65 63 74 42 79 48 | 61 6e 64 6c 65 00 05 01 |bjectByH|andle...|
|00000860| 49 6f 46 69 6c 65 4f 62 | 6a 65 63 74 54 79 70 65 |IoFileOb|jectType|
|00000870| 00 00 62 03 5a 77 43 72 | 65 61 74 65 53 65 63 74 |..b.ZwCr|eateSect|
|00000880| 69 6f 6e 00 83 03 5a 77 | 51 75 65 72 79 49 6e 66 |ion...Zw|QueryInf|
|00000890| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 f4 00 |ormation|File....|
|000008a0| 49 6f 43 72 65 61 74 65 | 46 69 6c 65 00 00 ce 03 |IoCreate|File....|
|000008b0| 6d 65 6d 6d 6f 76 65 00 | 6a 03 5a 77 44 75 70 6c |memmove.|j.ZwDupl|
|000008c0| 69 63 61 74 65 54 6f 6b | 65 6e 00 00 7f 03 5a 77 |icateTok|en....Zw|
|000008d0| 4f 70 65 6e 54 68 72 65 | 61 64 54 6f 6b 65 6e 00 |OpenThre|adToken.|
|000008e0| 74 03 5a 77 4d 61 70 56 | 69 65 77 4f 66 53 65 63 |t.ZwMapV|iewOfSec|
|000008f0| 74 69 6f 6e 00 00 5f 03 | 5a 77 43 72 65 61 74 65 |tion.._.|ZwCreate|
|00000900| 45 76 65 6e 74 00 e5 03 | 77 63 73 63 61 74 00 00 |Event...|wcscat..|
|00000910| e8 03 77 63 73 63 70 79 | 00 00 9f 03 5a 77 55 6e |..wcscpy|....ZwUn|
|00000920| 6d 61 70 56 69 65 77 4f | 66 53 65 63 74 69 6f 6e |mapViewO|fSection|
|00000930| 00 00 89 02 52 74 6c 43 | 6f 6d 70 61 72 65 55 6e |....RtlC|ompareUn|
|00000940| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 db 03 73 74 |icodeStr|ing...st|
|00000950| 72 6e 63 70 79 00 de 03 | 73 74 72 73 74 72 00 00 |rncpy...|strstr..|
|00000960| 22 03 52 74 6c 55 70 70 | 65 72 53 74 72 69 6e 67 |".RtlUpp|erString|
|00000970| 00 00 6e 03 5a 77 46 6c | 75 73 68 4b 65 79 00 00 |..n.ZwFl|ushKey..|
|00000980| 9b 03 5a 77 53 65 74 56 | 61 6c 75 65 4b 65 79 00 |..ZwSetV|alueKey.|
|00000990| 79 03 5a 77 4f 70 65 6e | 4b 65 79 00 8c 03 5a 77 |y.ZwOpen|Key...Zw|
|000009a0| 51 75 65 72 79 56 61 6c | 75 65 4b 65 79 00 41 01 |QueryVal|ueKey.A.|
|000009b0| 49 6f 57 72 69 74 65 45 | 72 72 6f 72 4c 6f 67 45 |IoWriteE|rrorLogE|
|000009c0| 6e 74 72 79 00 00 df 00 | 49 6f 41 6c 6c 6f 63 61 |ntry....|IoAlloca|
|000009d0| 74 65 45 72 72 6f 72 4c | 6f 67 45 6e 74 72 79 00 |teErrorL|ogEntry.|
|000009e0| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 18 03 |ntoskrnl|.exe....|
|000009f0| 52 74 6c 55 6e 77 69 6e | 64 00 4d 00 4b 66 52 65 |RtlUnwin|d.M.KfRe|
|00000a00| 6c 65 61 73 65 53 70 69 | 6e 4c 6f 63 6b 00 4a 00 |leaseSpi|nLock.J.|
|00000a10| 4b 66 41 63 71 75 69 72 | 65 53 70 69 6e 4c 6f 63 |KfAcquir|eSpinLoc|
|00000a20| 6b 00 42 00 4b 65 47 65 | 74 43 75 72 72 65 6e 74 |k.B.KeGe|tCurrent|
|00000a30| 49 72 71 6c 00 00 48 41 | 4c 2e 64 6c 6c 00 00 00 |Irql..HA|L.dll...|
+--------+-------------------------+-------------------------+--------+--------+