home *** CD-ROM | disk | FTP | other *** search
Unknown | 2004-05-25 | 1.9 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| d4 6a 00 00 00 00 00 00 | 00 00 00 00 94 71 00 00 |.j......|.....q..|
|00000010| b8 02 00 00 bc 6a 00 00 | 00 00 00 00 00 00 00 00 |.....j..|........|
|00000020| 16 72 00 00 a0 02 00 00 | 00 00 00 00 00 00 00 00 |.r......|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 ec 71 00 00 |........|.....q..|
|00000040| d6 71 00 00 c2 71 00 00 | ae 71 00 00 02 72 00 00 |.q...q..|.q...r..|
|00000050| 00 00 00 00 70 6c 00 00 | 88 6c 00 00 a0 6c 00 00 |....pl..|.l...l..|
|00000060| b8 6c 00 00 d0 6c 00 00 | f2 6c 00 00 0a 6d 00 00 |.l...l..|.l...m..|
|00000070| 1c 6d 00 00 34 6d 00 00 | 4e 6d 00 00 6a 6d 00 00 |.m..4m..|Nm..jm..|
|00000080| 7a 6d 00 00 96 6d 00 00 | a2 6d 00 00 b8 6d 00 00 |zm...m..|.m...m..|
|00000090| d0 6d 00 00 e0 6d 00 00 | ee 6d 00 00 0c 6e 00 00 |.m...m..|.m...n..|
|000000a0| 24 6e 00 00 3a 6e 00 00 | 48 6e 00 00 52 6e 00 00 |$n..:n..|Hn..Rn..|
|000000b0| 62 6e 00 00 70 6e 00 00 | 84 6e 00 00 9c 6e 00 00 |bn..pn..|.n...n..|
|000000c0| aa 6e 00 00 bc 6e 00 00 | d4 6e 00 00 ec 6e 00 00 |.n...n..|.n...n..|
|000000d0| 04 6f 00 00 5c 6c 00 00 | 26 6f 00 00 40 6f 00 00 |.o..\l..|&o..@o..|
|000000e0| 5a 6f 00 00 64 6f 00 00 | 6e 6f 00 00 78 6f 00 00 |Zo..do..|no..xo..|
|000000f0| 82 6f 00 00 98 6f 00 00 | b4 6f 00 00 be 6f 00 00 |.o...o..|.o...o..|
|00000100| de 6f 00 00 f2 6f 00 00 | fc 6f 00 00 06 70 00 00 |.o...o..|.o...p..|
|00000110| 22 70 00 00 3e 70 00 00 | 56 70 00 00 6a 70 00 00 |"p..>p..|Vp..jp..|
|00000120| 86 70 00 00 96 70 00 00 | a0 70 00 00 c0 70 00 00 |.p...p..|.p...p..|
|00000130| e2 70 00 00 00 71 00 00 | 14 71 00 00 34 71 00 00 |.p...q..|.q..4q..|
|00000140| 52 71 00 00 70 71 00 00 | a2 71 00 00 46 6c 00 00 |Rq..pq..|.q..Fl..|
|00000150| 2a 6c 00 00 12 6c 00 00 | 00 6c 00 00 1c 6f 00 00 |*l...l..|.l...o..|
|00000160| e8 6b 00 00 00 00 00 00 | f7 00 49 6f 43 72 65 61 |.k......|..IoCrea|
|00000170| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000180| f3 00 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |..IoCrea|teDevice|
|00000190| 00 00 d0 02 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |....RtlI|nitUnico|
|000001a0| 64 65 53 74 72 69 6e 67 | 00 00 4a 00 45 78 49 6e |deString|..J.ExIn|
|000001b0| 69 74 69 61 6c 69 7a 65 | 52 65 73 6f 75 72 63 65 |itialize|Resource|
|000001c0| 4c 69 74 65 00 00 45 01 | 49 6f 66 43 6f 6d 70 6c |Lite..E.|IofCompl|
|000001d0| 65 74 65 52 65 71 75 65 | 73 74 00 00 e7 01 4d 6d |eteReque|st....Mm|
|000001e0| 4d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 00 00 |MapLocke|dPages..|
|000001f0| 54 02 50 73 47 65 74 43 | 75 72 72 65 6e 74 50 72 |T.PsGetC|urrentPr|
|00000200| 6f 63 65 73 73 49 64 00 | 80 01 4b 65 4c 65 61 76 |ocessId.|..KeLeav|
|00000210| 65 43 72 69 74 69 63 61 | 6c 52 65 67 69 6f 6e 00 |eCritica|lRegion.|
|00000220| 3c 00 45 78 44 65 6c 65 | 74 65 52 65 73 6f 75 72 |<.ExDele|teResour|
|00000230| 63 65 4c 69 74 65 00 00 | 6d 00 45 78 52 65 6c 65 |ceLite..|m.ExRele|
|00000240| 61 73 65 52 65 73 6f 75 | 72 63 65 4c 69 74 65 00 |aseResou|rceLite.|
|00000250| 2e 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |..ExAcqu|ireResou|
|00000260| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|00000270| 00 00 5b 01 4b 65 45 6e | 74 65 72 43 72 69 74 69 |..[.KeEn|terCriti|
|00000280| 63 61 6c 52 65 67 69 6f | 6e 00 fb 00 49 6f 44 65 |calRegio|n...IoDe|
|00000290| 6c 65 74 65 44 65 76 69 | 63 65 00 00 fc 00 49 6f |leteDevi|ce....Io|
|000002a0| 44 65 6c 65 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |DeleteSy|mbolicLi|
|000002b0| 6e 6b 00 00 f8 02 52 74 | 6c 51 75 65 72 79 52 65 |nk....Rt|lQueryRe|
|000002c0| 67 69 73 74 72 79 56 61 | 6c 75 65 73 00 00 d3 01 |gistryVa|lues....|
|000002d0| 4d 6d 42 75 69 6c 64 4d | 64 6c 46 6f 72 4e 6f 6e |MmBuildM|dlForNon|
|000002e0| 50 61 67 65 64 50 6f 6f | 6c 00 e1 00 49 6f 41 6c |PagedPoo|l...IoAl|
|000002f0| 6c 6f 63 61 74 65 4d 64 | 6c 00 9e 01 4b 65 53 65 |locateMd|l...KeSe|
|00000300| 72 76 69 63 65 44 65 73 | 63 72 69 70 74 6f 72 54 |rviceDes|criptorT|
|00000310| 61 62 6c 65 00 00 08 01 | 49 6f 46 72 65 65 4d 64 |able....|IoFreeMd|
|00000320| 6c 00 f8 01 4d 6d 55 6e | 6d 61 70 4c 6f 63 6b 65 |l...MmUn|mapLocke|
|00000330| 64 50 61 67 65 73 00 00 | 76 01 4b 65 49 6e 69 74 |dPages..|v.KeInit|
|00000340| 69 61 6c 69 7a 65 53 70 | 69 6e 4c 6f 63 6b 00 00 |ializeSp|inLock..|
|00000350| 07 02 4e 74 42 75 69 6c | 64 4e 75 6d 62 65 72 00 |..NtBuil|dNumber.|
|00000360| 42 00 45 78 46 72 65 65 | 50 6f 6f 6c 00 00 d5 00 |B.ExFree|Pool....|
|00000370| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 43 6f 6d 70 61 |Interloc|kedCompa|
|00000380| 72 65 45 78 63 68 61 6e | 67 65 00 00 36 00 45 78 |reExchan|ge..6.Ex|
|00000390| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|000003a0| 54 61 67 00 d7 00 49 6e | 74 65 72 6c 6f 63 6b 65 |Tag...In|terlocke|
|000003b0| 64 45 78 63 68 61 6e 67 | 65 00 a2 03 5a 77 57 72 |dExchang|e...ZwWr|
|000003c0| 69 74 65 46 69 6c 65 00 | 5b 03 5a 77 43 6c 6f 73 |iteFile.|[.ZwClos|
|000003d0| 65 00 60 03 5a 77 43 72 | 65 61 74 65 46 69 6c 65 |e.`.ZwCr|eateFile|
|000003e0| 00 00 78 03 5a 77 4f 70 | 65 6e 46 69 6c 65 00 00 |..x.ZwOp|enFile..|
|000003f0| 73 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 4d 75 |s.KeInit|ializeMu|
|00000400| 74 65 78 00 d6 00 49 6e | 74 65 72 6c 6f 63 6b 65 |tex...In|terlocke|
|00000410| 64 44 65 63 72 65 6d 65 | 6e 74 00 00 a2 01 4b 65 |dDecreme|nt....Ke|
|00000420| 53 65 74 45 76 65 6e 74 | 00 00 92 01 4b 65 52 65 |SetEvent|....KeRe|
|00000430| 6c 65 61 73 65 4d 75 74 | 65 78 00 00 b8 01 4b 65 |leaseMut|ex....Ke|
|00000440| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00000450| 65 63 74 00 d9 00 49 6e | 74 65 72 6c 6f 63 6b 65 |ect...In|terlocke|
|00000460| 64 49 6e 63 72 65 6d 65 | 6e 74 00 00 55 02 50 73 |dIncreme|nt..U.Ps|
|00000470| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|00000480| 49 64 00 00 41 01 49 6f | 57 72 69 74 65 45 72 72 |Id..A.Io|WriteErr|
|00000490| 6f 72 4c 6f 67 45 6e 74 | 72 79 00 00 ce 03 6d 65 |orLogEnt|ry....me|
|000004a0| 6d 6d 6f 76 65 00 df 00 | 49 6f 41 6c 6c 6f 63 61 |mmove...|IoAlloca|
|000004b0| 74 65 45 72 72 6f 72 4c | 6f 67 45 6e 74 72 79 00 |teErrorL|ogEntry.|
|000004c0| 57 01 4b 65 44 65 6c 61 | 79 45 78 65 63 75 74 69 |W.KeDela|yExecuti|
|000004d0| 6f 6e 54 68 72 65 61 64 | 00 00 e8 03 77 63 73 63 |onThread|....wcsc|
|000004e0| 70 79 00 00 c1 03 5f 77 | 63 73 75 70 72 00 ed 03 |py...._w|csupr...|
|000004f0| 77 63 73 6e 63 70 79 00 | ee 03 77 63 73 72 63 68 |wcsncpy.|..wcsrch|
|00000500| 72 00 0c 01 49 6f 47 65 | 74 43 75 72 72 65 6e 74 |r...IoGe|tCurrent|
|00000510| 50 72 6f 63 65 73 73 00 | 11 01 49 6f 47 65 74 52 |Process.|..IoGetR|
|00000520| 65 6c 61 74 65 64 44 65 | 76 69 63 65 4f 62 6a 65 |elatedDe|viceObje|
|00000530| 63 74 00 00 da 03 73 74 | 72 6e 63 6d 70 00 77 02 |ct....st|rncmp.w.|
|00000540| 52 74 6c 41 6e 73 69 53 | 74 72 69 6e 67 54 6f 55 |RtlAnsiS|tringToU|
|00000550| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 cd 02 |nicodeSt|ring....|
|00000560| 52 74 6c 49 6e 69 74 41 | 6e 73 69 53 74 72 69 6e |RtlInitA|nsiStrin|
|00000570| 67 00 ea 03 77 63 73 6c | 65 6e 00 00 e6 03 77 63 |g...wcsl|en....wc|
|00000580| 73 63 68 72 00 00 8a 03 | 5a 77 51 75 65 72 79 53 |schr....|ZwQueryS|
|00000590| 79 6d 62 6f 6c 69 63 4c | 69 6e 6b 4f 62 6a 65 63 |ymbolicL|inkObjec|
|000005a0| 74 00 7d 03 5a 77 4f 70 | 65 6e 53 79 6d 62 6f 6c |t.}.ZwOp|enSymbol|
|000005b0| 69 63 4c 69 6e 6b 4f 62 | 6a 65 63 74 00 00 44 02 |icLinkOb|ject..D.|
|000005c0| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|000005d0| 6a 65 63 74 00 00 3d 02 | 4f 62 51 75 65 72 79 4e |ject..=.|ObQueryN|
|000005e0| 61 6d 65 53 74 72 69 6e | 67 00 3f 02 4f 62 52 65 |ameStrin|g.?.ObRe|
|000005f0| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|00000600| 61 6e 64 6c 65 00 54 01 | 4b 65 43 6c 65 61 72 45 |andle.T.|KeClearE|
|00000610| 76 65 6e 74 00 00 ba 03 | 5f 73 74 72 75 70 72 00 |vent....|_strupr.|
|00000620| 0f 03 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |..RtlUni|codeStri|
|00000630| 6e 67 54 6f 41 6e 73 69 | 53 74 72 69 6e 67 00 00 |ngToAnsi|String..|
|00000640| 48 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 50 61 |H.ExInit|ializePa|
|00000650| 67 65 64 4c 6f 6f 6b 61 | 73 69 64 65 4c 69 73 74 |gedLooka|sideList|
|00000660| 00 00 3a 00 45 78 44 65 | 6c 65 74 65 50 61 67 65 |..:.ExDe|letePage|
|00000670| 64 4c 6f 6f 6b 61 73 69 | 64 65 4c 69 73 74 00 00 |dLookasi|deList..|
|00000680| 70 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |p.KeInit|ializeEv|
|00000690| 65 6e 74 00 f8 00 49 6f | 43 72 65 61 74 65 53 79 |ent...Io|CreateSy|
|000006a0| 6e 63 68 72 6f 6e 69 7a | 61 74 69 6f 6e 45 76 65 |nchroniz|ationEve|
|000006b0| 6e 74 00 00 43 00 45 78 | 46 72 65 65 54 6f 50 61 |nt..C.Ex|FreeToPa|
|000006c0| 67 65 64 4c 6f 6f 6b 61 | 73 69 64 65 4c 69 73 74 |gedLooka|sideList|
|000006d0| 00 00 2f 00 45 78 41 63 | 71 75 69 72 65 52 65 73 |../.ExAc|quireRes|
|000006e0| 6f 75 72 63 65 53 68 61 | 72 65 64 4c 69 74 65 00 |ourceSha|redLite.|
|000006f0| 32 00 45 78 41 6c 6c 6f | 63 61 74 65 46 72 6f 6d |2.ExAllo|cateFrom|
|00000700| 50 61 67 65 64 4c 6f 6f | 6b 61 73 69 64 65 4c 69 |PagedLoo|kasideLi|
|00000710| 73 74 00 00 6e 74 6f 73 | 6b 72 6e 6c 2e 65 78 65 |st..ntos|krnl.exe|
|00000720| 00 00 18 03 52 74 6c 55 | 6e 77 69 6e 64 00 4d 00 |....RtlU|nwind.M.|
|00000730| 4b 66 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KfReleas|eSpinLoc|
|00000740| 6b 00 4a 00 4b 66 41 63 | 71 75 69 72 65 53 70 69 |k.J.KfAc|quireSpi|
|00000750| 6e 4c 6f 63 6b 00 01 00 | 45 78 52 65 6c 65 61 73 |nLock...|ExReleas|
|00000760| 65 46 61 73 74 4d 75 74 | 65 78 00 00 00 00 45 78 |eFastMut|ex....Ex|
|00000770| 41 63 71 75 69 72 65 46 | 61 73 74 4d 75 74 65 78 |AcquireF|astMutex|
|00000780| 00 00 42 00 4b 65 47 65 | 74 43 75 72 72 65 6e 74 |..B.KeGe|tCurrent|
|00000790| 49 72 71 6c 00 00 48 41 | 4c 2e 64 6c 6c 00 00 00 |Irql..HA|L.dll...|
+--------+-------------------------+-------------------------+--------+--------+