home *** CD-ROM | disk | FTP | other *** search
Unknown | 2005-01-28 | 1.9 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 34 66 00 00 00 00 00 00 | 00 00 00 00 ba 6c 00 00 |4f......|.....l..|
|00000010| b8 02 00 00 1c 66 00 00 | 00 00 00 00 00 00 00 00 |.....f..|........|
|00000020| 3c 6d 00 00 a0 02 00 00 | 00 00 00 00 00 00 00 00 |<m......|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 10 6d 00 00 |........|.....m..|
|00000040| fc 6c 00 00 e8 6c 00 00 | d4 6c 00 00 26 6d 00 00 |.l...l..|.l..&m..|
|00000050| 00 00 00 00 d4 67 00 00 | ec 67 00 00 04 68 00 00 |.....g..|.g...h..|
|00000060| 20 68 00 00 38 68 00 00 | 4a 68 00 00 60 68 00 00 | h..8h..|Jh..`h..|
|00000070| 74 68 00 00 8c 68 00 00 | a6 68 00 00 b6 68 00 00 |th...h..|.h...h..|
|00000080| d2 68 00 00 de 68 00 00 | ee 68 00 00 04 69 00 00 |.h...h..|.h...i..|
|00000090| 1c 69 00 00 2c 69 00 00 | 3a 69 00 00 58 69 00 00 |.i..,i..|:i..Xi..|
|000000a0| 70 69 00 00 86 69 00 00 | 94 69 00 00 9e 69 00 00 |pi...i..|.i...i..|
|000000b0| ae 69 00 00 bc 69 00 00 | d0 69 00 00 e8 69 00 00 |.i...i..|.i...i..|
|000000c0| f6 69 00 00 08 6a 00 00 | c2 67 00 00 38 6a 00 00 |.i...j..|.g..8j..|
|000000d0| 50 6a 00 00 68 6a 00 00 | 72 6a 00 00 8c 6a 00 00 |Pj..hj..|rj...j..|
|000000e0| a6 6a 00 00 b0 6a 00 00 | c6 6a 00 00 d0 6a 00 00 |.j...j..|.j...j..|
|000000f0| da 6a 00 00 e4 6a 00 00 | 00 6b 00 00 1c 6b 00 00 |.j...j..|.k...k..|
|00000100| 3c 6b 00 00 50 6b 00 00 | 6e 6b 00 00 86 6b 00 00 |<k..Pk..|nk...k..|
|00000110| 9a 6b 00 00 b6 6b 00 00 | da 6b 00 00 e4 6b 00 00 |.k...k..|.k...k..|
|00000120| f4 6b 00 00 fe 6b 00 00 | 1e 6c 00 00 28 6c 00 00 |.k...k..|.l..(l..|
|00000130| 4a 6c 00 00 68 6c 00 00 | 7c 6c 00 00 9c 6c 00 00 |Jl..hl..||l...l..|
|00000140| c8 6c 00 00 aa 67 00 00 | 88 67 00 00 70 67 00 00 |.l...g..|.g..pg..|
|00000150| 58 67 00 00 20 6a 00 00 | 40 67 00 00 00 00 00 00 |Xg.. j..|@g......|
|00000160| 80 01 4b 65 4c 65 61 76 | 65 43 72 69 74 69 63 61 |..KeLeav|eCritica|
|00000170| 6c 52 65 67 69 6f 6e 00 | 3c 00 45 78 44 65 6c 65 |lRegion.|<.ExDele|
|00000180| 74 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |teResour|ceLite..|
|00000190| 6d 00 45 78 52 65 6c 65 | 61 73 65 52 65 73 6f 75 |m.ExRele|aseResou|
|000001a0| 72 63 65 4c 69 74 65 00 | 2e 00 45 78 41 63 71 75 |rceLite.|..ExAcqu|
|000001b0| 69 72 65 52 65 73 6f 75 | 72 63 65 45 78 63 6c 75 |ireResou|rceExclu|
|000001c0| 73 69 76 65 4c 69 74 65 | 00 00 5b 01 4b 65 45 6e |siveLite|..[.KeEn|
|000001d0| 74 65 72 43 72 69 74 69 | 63 61 6c 52 65 67 69 6f |terCriti|calRegio|
|000001e0| 6e 00 fb 00 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |n...IoDe|leteDevi|
|000001f0| 63 65 00 00 fc 00 49 6f | 44 65 6c 65 74 65 53 79 |ce....Io|DeleteSy|
|00000200| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 d0 02 52 74 |mbolicLi|nk....Rt|
|00000210| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00000220| 6e 67 00 00 4a 00 45 78 | 49 6e 69 74 69 61 6c 69 |ng..J.Ex|Initiali|
|00000230| 7a 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |zeResour|ceLite..|
|00000240| f7 00 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |..IoCrea|teSymbol|
|00000250| 69 63 4c 69 6e 6b 00 00 | f3 00 49 6f 43 72 65 61 |icLink..|..IoCrea|
|00000260| 74 65 44 65 76 69 63 65 | 00 00 45 01 49 6f 66 43 |teDevice|..E.IofC|
|00000270| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 00 00 |ompleteR|equest..|
|00000280| e7 01 4d 6d 4d 61 70 4c | 6f 63 6b 65 64 50 61 67 |..MmMapL|ockedPag|
|00000290| 65 73 00 00 54 02 50 73 | 47 65 74 43 75 72 72 65 |es..T.Ps|GetCurre|
|000002a0| 6e 74 50 72 6f 63 65 73 | 73 49 64 00 f8 02 52 74 |ntProces|sId...Rt|
|000002b0| 6c 51 75 65 72 79 52 65 | 67 69 73 74 72 79 56 61 |lQueryRe|gistryVa|
|000002c0| 6c 75 65 73 00 00 e1 00 | 49 6f 41 6c 6c 6f 63 61 |lues....|IoAlloca|
|000002d0| 74 65 4d 64 6c 00 9e 01 | 4b 65 53 65 72 76 69 63 |teMdl...|KeServic|
|000002e0| 65 44 65 73 63 72 69 70 | 74 6f 72 54 61 62 6c 65 |eDescrip|torTable|
|000002f0| 00 00 08 01 49 6f 46 72 | 65 65 4d 64 6c 00 f6 01 |....IoFr|eeMdl...|
|00000300| 4d 6d 55 6e 6c 6f 63 6b | 50 61 67 65 73 00 ed 01 |MmUnlock|Pages...|
|00000310| 4d 6d 50 72 6f 62 65 41 | 6e 64 4c 6f 63 6b 50 61 |MmProbeA|ndLockPa|
|00000320| 67 65 73 00 76 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ges.v.Ke|Initiali|
|00000330| 7a 65 53 70 69 6e 4c 6f | 63 6b 00 00 07 02 4e 74 |zeSpinLo|ck....Nt|
|00000340| 42 75 69 6c 64 4e 75 6d | 62 65 72 00 42 00 45 78 |BuildNum|ber.B.Ex|
|00000350| 46 72 65 65 50 6f 6f 6c | 00 00 d5 00 49 6e 74 65 |FreePool|....Inte|
|00000360| 72 6c 6f 63 6b 65 64 43 | 6f 6d 70 61 72 65 45 78 |rlockedC|ompareEx|
|00000370| 63 68 61 6e 67 65 00 00 | 36 00 45 78 41 6c 6c 6f |change..|6.ExAllo|
|00000380| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|00000390| d7 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 45 78 63 |..Interl|ockedExc|
|000003a0| 68 61 6e 67 65 00 a2 03 | 5a 77 57 72 69 74 65 46 |hange...|ZwWriteF|
|000003b0| 69 6c 65 00 5b 03 5a 77 | 43 6c 6f 73 65 00 60 03 |ile.[.Zw|Close.`.|
|000003c0| 5a 77 43 72 65 61 74 65 | 46 69 6c 65 00 00 78 03 |ZwCreate|File..x.|
|000003d0| 5a 77 4f 70 65 6e 46 69 | 6c 65 00 00 73 01 4b 65 |ZwOpenFi|le..s.Ke|
|000003e0| 49 6e 69 74 69 61 6c 69 | 7a 65 4d 75 74 65 78 00 |Initiali|zeMutex.|
|000003f0| d6 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 44 65 63 |..Interl|ockedDec|
|00000400| 72 65 6d 65 6e 74 00 00 | a2 01 4b 65 53 65 74 45 |rement..|..KeSetE|
|00000410| 76 65 6e 74 00 00 92 01 | 4b 65 52 65 6c 65 61 73 |vent....|KeReleas|
|00000420| 65 4d 75 74 65 78 00 00 | b8 01 4b 65 57 61 69 74 |eMutex..|..KeWait|
|00000430| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|00000440| d9 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 49 6e 63 |..Interl|ockedInc|
|00000450| 72 65 6d 65 6e 74 00 00 | 55 02 50 73 47 65 74 43 |rement..|U.PsGetC|
|00000460| 75 72 72 65 6e 74 54 68 | 72 65 61 64 49 64 00 00 |urrentTh|readId..|
|00000470| 41 01 49 6f 57 72 69 74 | 65 45 72 72 6f 72 4c 6f |A.IoWrit|eErrorLo|
|00000480| 67 45 6e 74 72 79 00 00 | ce 03 6d 65 6d 6d 6f 76 |gEntry..|..memmov|
|00000490| 65 00 df 00 49 6f 41 6c | 6c 6f 63 61 74 65 45 72 |e...IoAl|locateEr|
|000004a0| 72 6f 72 4c 6f 67 45 6e | 74 72 79 00 57 01 4b 65 |rorLogEn|try.W.Ke|
|000004b0| 44 65 6c 61 79 45 78 65 | 63 75 74 69 6f 6e 54 68 |DelayExe|cutionTh|
|000004c0| 72 65 61 64 00 00 c1 03 | 5f 77 63 73 75 70 72 00 |read....|_wcsupr.|
|000004d0| 0c 01 49 6f 47 65 74 43 | 75 72 72 65 6e 74 50 72 |..IoGetC|urrentPr|
|000004e0| 6f 63 65 73 73 00 da 03 | 73 74 72 6e 63 6d 70 00 |ocess...|strncmp.|
|000004f0| ea 03 77 63 73 6c 65 6e | 00 00 e6 03 77 63 73 63 |..wcslen|....wcsc|
|00000500| 68 72 00 00 8a 03 5a 77 | 51 75 65 72 79 53 79 6d |hr....Zw|QuerySym|
|00000510| 62 6f 6c 69 63 4c 69 6e | 6b 4f 62 6a 65 63 74 00 |bolicLin|kObject.|
|00000520| 7d 03 5a 77 4f 70 65 6e | 53 79 6d 62 6f 6c 69 63 |}.ZwOpen|Symbolic|
|00000530| 4c 69 6e 6b 4f 62 6a 65 | 63 74 00 00 77 02 52 74 |LinkObje|ct..w.Rt|
|00000540| 6c 41 6e 73 69 53 74 72 | 69 6e 67 54 6f 55 6e 69 |lAnsiStr|ingToUni|
|00000550| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 cd 02 52 74 |codeStri|ng....Rt|
|00000560| 6c 49 6e 69 74 41 6e 73 | 69 53 74 72 69 6e 67 00 |lInitAns|iString.|
|00000570| 43 00 45 78 46 72 65 65 | 54 6f 50 61 67 65 64 4c |C.ExFree|ToPagedL|
|00000580| 6f 6f 6b 61 73 69 64 65 | 4c 69 73 74 00 00 44 02 |ookaside|List..D.|
|00000590| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|000005a0| 6a 65 63 74 00 00 3d 02 | 4f 62 51 75 65 72 79 4e |ject..=.|ObQueryN|
|000005b0| 61 6d 65 53 74 72 69 6e | 67 00 3f 02 4f 62 52 65 |ameStrin|g.?.ObRe|
|000005c0| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|000005d0| 61 6e 64 6c 65 00 32 00 | 45 78 41 6c 6c 6f 63 61 |andle.2.|ExAlloca|
|000005e0| 74 65 46 72 6f 6d 50 61 | 67 65 64 4c 6f 6f 6b 61 |teFromPa|gedLooka|
|000005f0| 73 69 64 65 4c 69 73 74 | 00 00 e8 03 77 63 73 63 |sideList|....wcsc|
|00000600| 70 79 00 00 54 01 4b 65 | 43 6c 65 61 72 45 76 65 |py..T.Ke|ClearEve|
|00000610| 6e 74 00 00 ba 03 5f 73 | 74 72 75 70 72 00 0f 03 |nt...._s|trupr...|
|00000620| 52 74 6c 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |RtlUnico|deString|
|00000630| 54 6f 41 6e 73 69 53 74 | 72 69 6e 67 00 00 ed 03 |ToAnsiSt|ring....|
|00000640| 77 63 73 6e 63 70 79 00 | 48 00 45 78 49 6e 69 74 |wcsncpy.|H.ExInit|
|00000650| 69 61 6c 69 7a 65 50 61 | 67 65 64 4c 6f 6f 6b 61 |ializePa|gedLooka|
|00000660| 73 69 64 65 4c 69 73 74 | 00 00 3a 00 45 78 44 65 |sideList|..:.ExDe|
|00000670| 6c 65 74 65 50 61 67 65 | 64 4c 6f 6f 6b 61 73 69 |letePage|dLookasi|
|00000680| 64 65 4c 69 73 74 00 00 | 70 01 4b 65 49 6e 69 74 |deList..|p.KeInit|
|00000690| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 f8 00 49 6f |ializeEv|ent...Io|
|000006a0| 43 72 65 61 74 65 53 79 | 6e 63 68 72 6f 6e 69 7a |CreateSy|nchroniz|
|000006b0| 61 74 69 6f 6e 45 76 65 | 6e 74 00 00 2f 00 45 78 |ationEve|nt../.Ex|
|000006c0| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 53 |AcquireR|esourceS|
|000006d0| 68 61 72 65 64 4c 69 74 | 65 00 6e 74 6f 73 6b 72 |haredLit|e.ntoskr|
|000006e0| 6e 6c 2e 65 78 65 00 00 | 18 03 52 74 6c 55 6e 77 |nl.exe..|..RtlUnw|
|000006f0| 69 6e 64 00 4d 00 4b 66 | 52 65 6c 65 61 73 65 53 |ind.M.Kf|ReleaseS|
|00000700| 70 69 6e 4c 6f 63 6b 00 | 4a 00 4b 66 41 63 71 75 |pinLock.|J.KfAcqu|
|00000710| 69 72 65 53 70 69 6e 4c | 6f 63 6b 00 42 00 4b 65 |ireSpinL|ock.B.Ke|
|00000720| 47 65 74 43 75 72 72 65 | 6e 74 49 72 71 6c 00 00 |GetCurre|ntIrql..|
|00000730| 01 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|00000740| 75 74 65 78 00 00 00 00 | 45 78 41 63 71 75 69 72 |utex....|ExAcquir|
|00000750| 65 46 61 73 74 4d 75 74 | 65 78 00 00 48 41 4c 2e |eFastMut|ex..HAL.|
|00000760| 64 6c 6c 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |dll.....|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+