home *** CD-ROM | disk | FTP | other *** search
Unknown | 2005-02-18 | 1.6 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| ec 09 01 00 00 00 00 00 | 00 00 00 00 b6 0f 01 00 |........|........|
|00000010| 1c c3 00 00 e4 09 01 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| e0 0f 01 00 14 c3 00 00 | d0 09 01 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 e8 0f 01 00 | 00 c3 00 00 00 00 00 00 |........|........|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 0a 00 00 80 03 00 00 80 | 05 00 00 80 06 00 00 80 |........|........|
|00000060| 00 00 00 00 c4 0f 01 00 | 00 00 00 00 7c 0b 01 00 |........|....|...|
|00000070| 9e 0b 01 00 b6 0b 01 00 | c8 0b 01 00 e0 0b 01 00 |........|........|
|00000080| fa 0b 01 00 12 0c 01 00 | 1c 0c 01 00 32 0c 01 00 |........|....2...|
|00000090| 42 0c 01 00 54 0c 01 00 | 6c 0c 01 00 84 0c 01 00 |B...T...|l.......|
|000000a0| 9c 0c 01 00 aa 0c 01 00 | c0 0c 01 00 e0 0c 01 00 |........|........|
|000000b0| ea 0c 01 00 0a 0d 01 00 | 24 0d 01 00 3a 0d 01 00 |........|$...:...|
|000000c0| 50 0d 01 00 68 0d 01 00 | 7c 0d 01 00 88 0d 01 00 |P...h...||.......|
|000000d0| 64 0b 01 00 bc 0d 01 00 | d4 0d 01 00 ec 0d 01 00 |d.......|........|
|000000e0| 0e 0e 01 00 26 0e 01 00 | 32 0e 01 00 4a 0e 01 00 |....&...|2...J...|
|000000f0| 5c 0e 01 00 72 0e 01 00 | 92 0e 01 00 a6 0e 01 00 |\...r...|........|
|00000100| b0 0e 01 00 ca 0e 01 00 | da 0e 01 00 e8 0e 01 00 |........|........|
|00000110| f2 0e 01 00 fe 0e 01 00 | 1e 0f 01 00 2c 0f 01 00 |........|....,...|
|00000120| 3c 0f 01 00 5c 0f 01 00 | 78 0f 01 00 84 0f 01 00 |<...\...|x.......|
|00000130| 9e 0f 01 00 ac 0f 01 00 | 50 0b 01 00 38 0b 01 00 |........|P...8...|
|00000140| 1c 0b 01 00 12 0b 01 00 | fe 0a 01 00 e6 0a 01 00 |........|........|
|00000150| a4 0d 01 00 dc 0a 01 00 | 00 00 00 00 92 05 6d 65 |........|......me|
|00000160| 6d 73 65 74 00 00 40 00 | 45 78 41 6c 6c 6f 63 61 |mset..@.|ExAlloca|
|00000170| 74 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 00 4d 00 |tePoolWi|thTag.M.|
|00000180| 45 78 46 72 65 65 50 6f | 6f 6c 57 69 74 68 54 61 |ExFreePo|olWithTa|
|00000190| 67 00 f4 04 5a 77 43 6c | 6f 73 65 00 1d 03 4f 62 |g...ZwCl|ose...Ob|
|000001a0| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|000001b0| 79 48 61 6e 64 6c 65 00 | 41 03 50 73 43 72 65 61 |yHandle.|A.PsCrea|
|000001c0| 74 65 53 79 73 74 65 6d | 54 68 72 65 61 64 00 00 |teSystem|Thread..|
|000001d0| 0f 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |..KeInit|ializeEv|
|000001e0| 65 6e 74 00 15 02 4b 65 | 49 6e 69 74 69 61 6c 69 |ent...Ke|Initiali|
|000001f0| 7a 65 53 70 69 6e 4c 6f | 63 6b 00 00 98 01 49 6f |zeSpinLo|ck....Io|
|00000200| 52 65 67 69 73 74 65 72 | 53 68 75 74 64 6f 77 6e |Register|Shutdown|
|00000210| 4e 6f 74 69 66 69 63 61 | 74 69 6f 6e 00 00 41 01 |Notifica|tion..A.|
|00000220| 49 6f 43 72 65 61 74 65 | 53 79 6d 62 6f 6c 69 63 |IoCreate|Symbolic|
|00000230| 4c 69 6e 6b 00 00 38 01 | 49 6f 43 72 65 61 74 65 |Link..8.|IoCreate|
|00000240| 44 65 76 69 63 65 00 00 | 13 05 5a 77 4d 61 6b 65 |Device..|..ZwMake|
|00000250| 54 65 6d 70 6f 72 61 72 | 79 4f 62 6a 65 63 74 00 |Temporar|yObject.|
|00000260| f7 04 5a 77 43 72 65 61 | 74 65 44 69 72 65 63 74 |..ZwCrea|teDirect|
|00000270| 6f 72 79 4f 62 6a 65 63 | 74 00 11 04 52 74 6c 49 |oryObjec|t...RtlI|
|00000280| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|00000290| 00 00 9a 05 73 74 72 63 | 70 79 00 00 62 01 49 6f |....strc|py..b.Io|
|000002a0| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|000002b0| 73 00 6a 03 50 73 47 65 | 74 56 65 72 73 69 6f 6e |s.j.PsGe|tVersion|
|000002c0| 00 00 49 01 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |..I.IoDe|leteDevi|
|000002d0| 63 65 00 00 4b 01 49 6f | 44 65 6c 65 74 65 53 79 |ce..K.Io|DeleteSy|
|000002e0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 25 03 4f 62 |mbolicLi|nk..%.Ob|
|000002f0| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|00000300| 63 74 00 00 64 02 4b 65 | 57 61 69 74 46 6f 72 53 |ct..d.Ke|WaitForS|
|00000310| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 4d 02 4b 65 |ingleObj|ect.M.Ke|
|00000320| 53 65 74 45 76 65 6e 74 | 00 00 db 01 49 6f 66 43 |SetEvent|....IofC|
|00000330| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 00 00 |ompleteR|equest..|
|00000340| 8a 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |..ExfInt|erlocked|
|00000350| 49 6e 73 65 72 74 54 61 | 69 6c 4c 69 73 74 00 00 |InsertTa|ilList..|
|00000360| 90 05 6d 65 6d 63 70 79 | 00 00 8d 00 45 78 66 49 |..memcpy|....ExfI|
|00000370| 6e 74 65 72 6c 6f 63 6b | 65 64 52 65 6d 6f 76 65 |nterlock|edRemove|
|00000380| 48 65 61 64 4c 69 73 74 | 00 00 8d 03 50 73 54 65 |HeadList|....PsTe|
|00000390| 72 6d 69 6e 61 74 65 53 | 79 73 74 65 6d 54 68 72 |rminateS|ystemThr|
|000003a0| 65 61 64 00 52 02 4b 65 | 53 65 74 50 72 69 6f 72 |ead.R.Ke|SetPrior|
|000003b0| 69 74 79 54 68 72 65 61 | 64 00 fe 01 4b 65 47 65 |ityThrea|d...KeGe|
|000003c0| 74 43 75 72 72 65 6e 74 | 54 68 72 65 61 64 00 00 |tCurrent|Thread..|
|000003d0| 48 03 50 73 47 65 74 43 | 75 72 72 65 6e 74 50 72 |H.PsGetC|urrentPr|
|000003e0| 6f 63 65 73 73 49 64 00 | 6e 05 5f 65 78 63 65 70 |ocessId.|n._excep|
|000003f0| 74 5f 68 61 6e 64 6c 65 | 72 33 00 00 73 05 5f 70 |t_handle|r3..s._p|
|00000400| 75 72 65 63 61 6c 6c 00 | 56 00 45 78 49 6e 69 74 |urecall.|V.ExInit|
|00000410| 69 61 6c 69 7a 65 52 65 | 73 6f 75 72 63 65 4c 69 |ializeRe|sourceLi|
|00000420| 74 65 00 00 46 00 45 78 | 44 65 6c 65 74 65 52 65 |te..F.Ex|DeleteRe|
|00000430| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 20 02 4b 65 |sourceLi|te.. .Ke|
|00000440| 4c 65 61 76 65 43 72 69 | 74 69 63 61 6c 52 65 67 |LeaveCri|ticalReg|
|00000450| 69 6f 6e 00 7a 00 45 78 | 52 65 6c 65 61 73 65 52 |ion.z.Ex|ReleaseR|
|00000460| 65 73 6f 75 72 63 65 4c | 69 74 65 00 37 00 45 78 |esourceL|ite.7.Ex|
|00000470| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 45 |AcquireR|esourceE|
|00000480| 78 63 6c 75 73 69 76 65 | 4c 69 74 65 00 00 f9 01 |xclusive|Lite....|
|00000490| 4b 65 45 6e 74 65 72 43 | 72 69 74 69 63 61 6c 52 |KeEnterC|riticalR|
|000004a0| 65 67 69 6f 6e 00 30 00 | 44 62 67 50 72 69 6e 74 |egion.0.|DbgPrint|
|000004b0| 00 00 f9 03 52 74 6c 46 | 72 65 65 55 6e 69 63 6f |....RtlF|reeUnico|
|000004c0| 64 65 53 74 72 69 6e 67 | 00 00 7f 03 50 73 52 65 |deString|....PsRe|
|000004d0| 76 65 72 74 54 6f 53 65 | 6c 66 00 00 b9 04 53 65 |vertToSe|lf....Se|
|000004e0| 49 6d 70 65 72 73 6f 6e | 61 74 65 43 6c 69 65 6e |Imperson|ateClien|
|000004f0| 74 00 9d 03 52 74 6c 41 | 6e 73 69 53 74 72 69 6e |t...RtlA|nsiStrin|
|00000500| 67 54 6f 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |gToUnico|deString|
|00000510| 00 00 0e 04 52 74 6c 49 | 6e 69 74 41 6e 73 69 53 |....RtlI|nitAnsiS|
|00000520| 74 72 69 6e 67 00 9b 05 | 73 74 72 6c 65 6e 00 00 |tring...|strlen..|
|00000530| 2e 05 5a 77 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |..ZwQuer|yInforma|
|00000540| 74 69 6f 6e 46 69 6c 65 | 00 00 f9 04 5a 77 43 72 |tionFile|....ZwCr|
|00000550| 65 61 74 65 46 69 6c 65 | 00 00 3c 05 5a 77 52 65 |eateFile|..<.ZwRe|
|00000560| 61 64 46 69 6c 65 00 00 | af 05 77 63 73 6c 65 6e |adFile..|..wcslen|
|00000570| 00 00 a2 05 73 77 70 72 | 69 6e 74 66 00 00 a6 02 |....swpr|intf....|
|00000580| 4d 6d 4d 61 70 4c 6f 63 | 6b 65 64 50 61 67 65 73 |MmMapLoc|kedPages|
|00000590| 53 70 65 63 69 66 79 43 | 61 63 68 65 00 00 5c 05 |SpecifyC|ache..\.|
|000005a0| 5a 77 57 72 69 74 65 46 | 69 6c 65 00 da 01 49 6f |ZwWriteF|ile...Io|
|000005b0| 66 43 61 6c 6c 44 72 69 | 76 65 72 00 28 01 49 6f |fCallDri|ver.(.Io|
|000005c0| 42 75 69 6c 64 44 65 76 | 69 63 65 49 6f 43 6f 6e |BuildDev|iceIoCon|
|000005d0| 74 72 6f 6c 52 65 71 75 | 65 73 74 00 66 01 49 6f |trolRequ|est.f.Io|
|000005e0| 47 65 74 44 65 76 69 63 | 65 4f 62 6a 65 63 74 50 |GetDevic|eObjectP|
|000005f0| 6f 69 6e 74 65 72 00 00 | 69 05 5f 61 75 6c 6c 64 |ointer..|i._aulld|
|00000600| 69 76 00 00 b1 04 53 65 | 43 72 65 61 74 65 43 6c |iv....Se|CreateCl|
|00000610| 69 65 6e 74 53 65 63 75 | 72 69 74 79 00 00 d2 04 |ientSecu|rity....|
|00000620| 53 65 54 6f 6b 65 6e 54 | 79 70 65 00 95 05 73 70 |SeTokenT|ype...sp|
|00000630| 72 69 6e 74 66 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |rintf.nt|oskrnl.e|
|00000640| 78 65 00 00 42 00 4b 65 | 51 75 65 72 79 50 65 72 |xe..B.Ke|QueryPer|
|00000650| 66 6f 72 6d 61 6e 63 65 | 43 6f 75 6e 74 65 72 00 |formance|Counter.|
|00000660| 48 41 4c 2e 64 6c 6c 00 | 44 4c 4b 43 52 59 50 54 |HAL.dll.|DLKCRYPT|
|00000670| 2e 53 59 53 00 00 00 00 | 00 00 00 00 00 00 00 00 |.SYS....|........|
+--------+-------------------------+-------------------------+--------+--------+