home *** CD-ROM | disk | FTP | other *** search
Unknown | 2001-08-21 | 2.8 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| cc c4 00 00 00 00 00 00 | 00 00 00 00 a8 ce 00 00 |........|........|
|00000010| 90 a8 00 00 bc c4 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| 06 cf 00 00 80 a8 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 de ce 00 00 |........|........|
|00000040| ca ce 00 00 f2 ce 00 00 | 00 00 00 00 ac c6 00 00 |........|........|
|00000050| bc c6 00 00 d4 c6 00 00 | f6 c6 00 00 0e c7 00 00 |........|........|
|00000060| 20 c7 00 00 38 c7 00 00 | 4e c7 00 00 62 c7 00 00 | ...8...|N...b...|
|00000070| 7a c7 00 00 92 c7 00 00 | b4 c7 00 00 ca c7 00 00 |z.......|........|
|00000080| ec c7 00 00 04 c8 00 00 | 20 c8 00 00 3c c8 00 00 |........| ...<...|
|00000090| 54 c8 00 00 6e c8 00 00 | 7c c8 00 00 90 c8 00 00 |T...n...||.......|
|000000a0| a4 c8 00 00 ae c8 00 00 | ce c8 00 00 e2 c8 00 00 |........|........|
|000000b0| fa c8 00 00 16 c9 00 00 | 2a c9 00 00 38 c9 00 00 |........|*...8...|
|000000c0| 50 c9 00 00 6a c9 00 00 | 7c c9 00 00 94 c9 00 00 |P...j...||.......|
|000000d0| b0 c9 00 00 cc c9 00 00 | ec c9 00 00 00 ca 00 00 |........|........|
|000000e0| 18 ca 00 00 36 ca 00 00 | 44 ca 00 00 52 ca 00 00 |....6...|D...R...|
|000000f0| 68 ca 00 00 7a ca 00 00 | 8a ca 00 00 a0 ca 00 00 |h...z...|........|
|00000100| b2 ca 00 00 c6 ca 00 00 | d6 ca 00 00 94 c6 00 00 |........|........|
|00000110| fe ca 00 00 12 cb 00 00 | 26 cb 00 00 40 cb 00 00 |........|&...@...|
|00000120| 5a cb 00 00 74 cb 00 00 | 96 cb 00 00 b2 cb 00 00 |Z...t...|........|
|00000130| ca cb 00 00 e2 cb 00 00 | 00 cc 00 00 12 cc 00 00 |........|........|
|00000140| 1e cc 00 00 2e cc 00 00 | 4a cc 00 00 56 cc 00 00 |........|J...V...|
|00000150| 6e cc 00 00 7c cc 00 00 | 8e cc 00 00 a8 cc 00 00 |n...|...|........|
|00000160| c0 cc 00 00 ca cc 00 00 | de cc 00 00 f2 cc 00 00 |........|........|
|00000170| 0c cd 00 00 24 cd 00 00 | 30 cd 00 00 50 cd 00 00 |....$...|0...P...|
|00000180| 6c cd 00 00 82 cd 00 00 | 8c cd 00 00 96 cd 00 00 |l.......|........|
|00000190| ae cd 00 00 c4 cd 00 00 | d4 cd 00 00 ee cd 00 00 |........|........|
|000001a0| f8 cd 00 00 02 ce 00 00 | 14 ce 00 00 1e ce 00 00 |........|........|
|000001b0| 2c ce 00 00 3c ce 00 00 | 48 ce 00 00 5a ce 00 00 |,...<...|H...Z...|
|000001c0| 72 ce 00 00 8c ce 00 00 | b6 ce 00 00 82 c6 00 00 |r.......|........|
|000001d0| 78 c6 00 00 e6 ca 00 00 | 60 c6 00 00 00 00 00 00 |x.......|`.......|
|000001e0| 44 00 45 78 44 65 6c 65 | 74 65 52 65 73 6f 75 72 |D.ExDele|teResour|
|000001f0| 63 65 4c 69 74 65 00 00 | e7 04 5a 77 43 6c 6f 73 |ceLite..|..ZwClos|
|00000200| 65 00 47 01 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |e.G.IoDe|leteDevi|
|00000210| 63 65 00 00 49 01 49 6f | 44 65 6c 65 74 65 53 79 |ce..I.Io|DeleteSy|
|00000220| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 ea 01 4b 65 |mbolicLi|nk....Ke|
|00000230| 42 75 67 43 68 65 63 6b | 45 78 00 00 3b 03 50 73 |BugCheck|Ex..;.Ps|
|00000240| 43 72 65 61 74 65 53 79 | 73 74 65 6d 54 68 72 65 |CreateSy|stemThre|
|00000250| 61 64 00 00 92 01 49 6f | 52 65 67 69 73 74 65 72 |ad....Io|Register|
|00000260| 46 73 52 65 67 69 73 74 | 72 61 74 69 6f 6e 43 68 |FsRegist|rationCh|
|00000270| 61 6e 67 65 00 00 3f 01 | 49 6f 43 72 65 61 74 65 |ange..?.|IoCreate|
|00000280| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 36 01 |Symbolic|Link..6.|
|00000290| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|000002a0| 06 04 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|000002b0| 53 74 72 69 6e 67 00 00 | 5f 01 49 6f 47 65 74 43 |String..|_.IoGetC|
|000002c0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 09 02 |urrentPr|ocess...|
|000002d0| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 45 76 65 6e |KeInitia|lizeEven|
|000002e0| 74 00 0f 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |t...KeIn|itialize|
|000002f0| 53 70 69 6e 4c 6f 63 6b | 00 00 1a 02 4b 65 4c 65 |SpinLock|....KeLe|
|00000300| 61 76 65 43 72 69 74 69 | 63 61 6c 52 65 67 69 6f |aveCriti|calRegio|
|00000310| 6e 00 77 00 45 78 52 65 | 6c 65 61 73 65 52 65 73 |n.w.ExRe|leaseRes|
|00000320| 6f 75 72 63 65 46 6f 72 | 54 68 72 65 61 64 4c 69 |ourceFor|ThreadLi|
|00000330| 74 65 00 00 f8 01 4b 65 | 47 65 74 43 75 72 72 65 |te....Ke|GetCurre|
|00000340| 6e 74 54 68 72 65 61 64 | 00 00 35 00 45 78 41 63 |ntThread|..5.ExAc|
|00000350| 71 75 69 72 65 52 65 73 | 6f 75 72 63 65 45 78 63 |quireRes|ourceExc|
|00000360| 6c 75 73 69 76 65 4c 69 | 74 65 00 00 f3 01 4b 65 |lusiveLi|te....Ke|
|00000370| 45 6e 74 65 72 43 72 69 | 74 69 63 61 6c 52 65 67 |EnterCri|ticalReg|
|00000380| 69 6f 6e 00 54 00 45 78 | 49 6e 69 74 69 61 6c 69 |ion.T.Ex|Initiali|
|00000390| 7a 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |zeResour|ceLite..|
|000003a0| 6c 01 49 6f 47 65 74 52 | 65 6c 61 74 65 64 44 65 |l.IoGetR|elatedDe|
|000003b0| 76 69 63 65 4f 62 6a 65 | 63 74 00 00 06 05 5a 77 |viceObje|ct....Zw|
|000003c0| 4d 61 6b 65 54 65 6d 70 | 6f 72 61 72 79 4f 62 6a |MakeTemp|oraryObj|
|000003d0| 65 63 74 00 ea 04 5a 77 | 43 72 65 61 74 65 44 69 |ect...Zw|CreateDi|
|000003e0| 72 65 63 74 6f 72 79 4f | 62 6a 65 63 74 00 4a 00 |rectoryO|bject.J.|
|000003f0| 45 78 46 72 65 65 50 6f | 6f 6c 00 00 eb 03 52 74 |ExFreePo|ol....Rt|
|00000400| 6c 46 72 65 65 41 6e 73 | 69 53 74 72 69 6e 67 00 |lFreeAns|iString.|
|00000410| a6 03 52 74 6c 43 6f 6d | 70 61 72 65 53 74 72 69 |..RtlCom|pareStri|
|00000420| 6e 67 00 00 88 05 73 70 | 72 69 6e 74 66 00 76 04 |ng....sp|rintf.v.|
|00000430| 52 74 6c 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |RtlUnico|deString|
|00000440| 54 6f 41 6e 73 69 53 74 | 72 69 6e 67 00 00 16 03 |ToAnsiSt|ring....|
|00000450| 4f 62 51 75 65 72 79 4e | 61 6d 65 53 74 72 69 6e |ObQueryN|ameStrin|
|00000460| 67 00 3e 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |g.>.ExAl|locatePo|
|00000470| 6f 6c 57 69 74 68 54 61 | 67 00 18 03 4f 62 52 65 |olWithTa|g...ObRe|
|00000480| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|00000490| 61 6e 64 6c 65 00 53 01 | 49 6f 46 69 6c 65 4f 62 |andle.S.|IoFileOb|
|000004a0| 6a 65 63 74 54 79 70 65 | 00 00 0b 05 5a 77 4f 70 |jectType|....ZwOp|
|000004b0| 65 6e 46 69 6c 65 00 00 | 1f 03 4f 62 66 44 65 72 |enFile..|..ObfDer|
|000004c0| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|000004d0| ef 01 4b 65 44 65 6c 61 | 79 45 78 65 63 75 74 69 |..KeDela|yExecuti|
|000004e0| 6f 6e 54 68 72 65 61 64 | 00 00 4a 01 49 6f 44 65 |onThread|..J.IoDe|
|000004f0| 74 61 63 68 44 65 76 69 | 63 65 00 00 5d 02 4b 65 |tachDevi|ce..].Ke|
|00000500| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00000510| 65 63 74 00 2b 05 5a 77 | 51 75 65 72 79 53 79 6d |ect.+.Zw|QuerySym|
|00000520| 62 6f 6c 69 63 4c 69 6e | 6b 4f 62 6a 65 63 74 00 |bolicLin|kObject.|
|00000530| 12 05 5a 77 4f 70 65 6e | 53 79 6d 62 6f 6c 69 63 |..ZwOpen|Symbolic|
|00000540| 4c 69 6e 6b 4f 62 6a 65 | 63 74 00 00 93 03 52 74 |LinkObje|ct....Rt|
|00000550| 6c 41 6e 73 69 53 74 72 | 69 6e 67 54 6f 55 6e 69 |lAnsiStr|ingToUni|
|00000560| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 03 04 52 74 |codeStri|ng....Rt|
|00000570| 6c 49 6e 69 74 41 6e 73 | 69 53 74 72 69 6e 67 00 |lInitAns|iString.|
|00000580| ef 03 52 74 6c 46 72 65 | 65 55 6e 69 63 6f 64 65 |..RtlFre|eUnicode|
|00000590| 53 74 72 69 6e 67 00 00 | 23 01 49 6f 41 74 74 61 |String..|#.IoAtta|
|000005a0| 63 68 44 65 76 69 63 65 | 54 6f 44 65 76 69 63 65 |chDevice|ToDevice|
|000005b0| 53 74 61 63 6b 00 46 02 | 4b 65 53 65 74 45 76 65 |Stack.F.|KeSetEve|
|000005c0| 6e 74 00 00 c5 04 53 65 | 54 6f 6b 65 6e 54 79 70 |nt....Se|TokenTyp|
|000005d0| 65 00 d7 01 49 6f 66 43 | 6f 6d 70 6c 65 74 65 52 |e...IofC|ompleteR|
|000005e0| 65 71 75 65 73 74 00 00 | 76 03 50 73 52 65 76 65 |equest..|v.PsReve|
|000005f0| 72 74 54 6f 53 65 6c 66 | 00 00 39 01 49 6f 43 72 |rtToSelf|..9.IoCr|
|00000600| 65 61 74 65 46 69 6c 65 | 00 00 ac 04 53 65 49 6d |eateFile|....SeIm|
|00000610| 70 65 72 73 6f 6e 61 74 | 65 43 6c 69 65 6e 74 00 |personat|eClient.|
|00000620| 6d 00 45 78 51 75 65 75 | 65 57 6f 72 6b 49 74 65 |m.ExQueu|eWorkIte|
|00000630| 6d 00 95 02 4d 6d 49 73 | 41 64 64 72 65 73 73 56 |m...MmIs|AddressV|
|00000640| 61 6c 69 64 00 00 d6 01 | 49 6f 66 43 61 6c 6c 44 |alid....|IofCallD|
|00000650| 72 69 76 65 72 00 ec 01 | 4b 65 43 6c 65 61 72 45 |river...|KeClearE|
|00000660| 76 65 6e 74 00 00 11 01 | 49 6e 74 65 72 6c 6f 63 |vent....|Interloc|
|00000670| 6b 65 64 49 6e 63 72 65 | 6d 65 6e 74 00 00 28 02 |kedIncre|ment..(.|
|00000680| 4b 65 52 65 61 64 53 74 | 61 74 65 45 76 65 6e 74 |KeReadSt|ateEvent|
|00000690| 00 00 24 02 4b 65 51 75 | 65 72 79 53 79 73 74 65 |..$.KeQu|erySyste|
|000006a0| 6d 54 69 6d 65 00 a4 04 | 53 65 43 72 65 61 74 65 |mTime...|SeCreate|
|000006b0| 43 6c 69 65 6e 74 53 65 | 63 75 72 69 74 79 00 00 |ClientSe|curity..|
|000006c0| 81 04 52 74 6c 55 70 63 | 61 73 65 55 6e 69 63 6f |..RtlUpc|aseUnico|
|000006d0| 64 65 53 74 72 69 6e 67 | 00 00 c4 00 46 73 52 74 |deString|....FsRt|
|000006e0| 6c 49 73 4e 61 6d 65 49 | 6e 45 78 70 72 65 73 73 |lIsNameI|nExpress|
|000006f0| 69 6f 6e 00 96 03 52 74 | 6c 41 70 70 65 6e 64 55 |ion...Rt|lAppendU|
|00000700| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 53 74 |nicodeSt|ringToSt|
|00000710| 72 69 6e 67 00 00 97 03 | 52 74 6c 41 70 70 65 6e |ring....|RtlAppen|
|00000720| 64 55 6e 69 63 6f 64 65 | 54 6f 53 74 72 69 6e 67 |dUnicode|ToString|
|00000730| 00 00 3f 03 50 73 47 65 | 74 43 75 72 72 65 6e 74 |..?.PsGe|tCurrent|
|00000740| 50 72 6f 63 65 73 73 49 | 64 00 42 03 50 73 47 65 |ProcessI|d.B.PsGe|
|00000750| 74 43 75 72 72 65 6e 74 | 54 68 72 65 61 64 49 64 |tCurrent|ThreadId|
|00000760| 00 00 36 00 45 78 41 63 | 71 75 69 72 65 52 65 73 |..6.ExAc|quireRes|
|00000770| 6f 75 72 63 65 53 68 61 | 72 65 64 4c 69 74 65 00 |ourceSha|redLite.|
|00000780| 65 05 5f 6c 6f 63 61 6c | 5f 75 6e 77 69 6e 64 32 |e._local|_unwind2|
|00000790| 00 00 95 05 73 77 70 72 | 69 6e 74 66 00 00 3c 02 |....swpr|intf..<.|
|000007a0| 4b 65 52 65 73 65 74 45 | 76 65 6e 74 00 00 5b 02 |KeResetE|vent..[.|
|000007b0| 4b 65 57 61 69 74 46 6f | 72 4d 75 6c 74 69 70 6c |KeWaitFo|rMultipl|
|000007c0| 65 4f 62 6a 65 63 74 73 | 00 00 2e 00 44 62 67 50 |eObjects|....DbgP|
|000007d0| 72 69 6e 74 00 00 4e 05 | 5a 77 57 61 69 74 46 6f |rint..N.|ZwWaitFo|
|000007e0| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 00 3b 05 |rSingleO|bject.;.|
|000007f0| 5a 77 53 65 74 45 76 65 | 6e 74 00 00 ef 04 5a 77 |ZwSetEve|nt....Zw|
|00000800| 43 72 65 61 74 65 53 65 | 63 74 69 6f 6e 00 21 05 |CreateSe|ction.!.|
|00000810| 5a 77 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |ZwQueryI|nformati|
|00000820| 6f 6e 46 69 6c 65 00 00 | b1 03 52 74 6c 43 6f 70 |onFile..|..RtlCop|
|00000830| 79 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |yUnicode|String..|
|00000840| 84 05 6d 65 6d 6d 6f 76 | 65 00 f9 04 5a 77 44 75 |..memmov|e...ZwDu|
|00000850| 70 6c 69 63 61 74 65 54 | 6f 6b 65 6e 00 00 14 05 |plicateT|oken....|
|00000860| 5a 77 4f 70 65 6e 54 68 | 72 65 61 64 54 6f 6b 65 |ZwOpenTh|readToke|
|00000870| 6e 00 57 02 4b 65 55 6e | 73 74 61 63 6b 44 65 74 |n.W.KeUn|stackDet|
|00000880| 61 63 68 50 72 6f 63 65 | 73 73 00 00 53 02 4b 65 |achProce|ss..S.Ke|
|00000890| 53 74 61 63 6b 41 74 74 | 61 63 68 50 72 6f 63 65 |StackAtt|achProce|
|000008a0| 73 73 00 00 57 01 49 6f | 46 72 65 65 49 72 70 00 |ss..W.Io|FreeIrp.|
|000008b0| 25 01 49 6f 42 75 69 6c | 64 41 73 79 6e 63 68 72 |%.IoBuil|dAsynchr|
|000008c0| 6f 6e 6f 75 73 46 73 64 | 52 65 71 75 65 73 74 00 |onousFsd|Request.|
|000008d0| af 01 49 6f 53 65 74 54 | 68 72 65 61 64 48 61 72 |..IoSetT|hreadHar|
|000008e0| 64 45 72 72 6f 72 4d 6f | 64 65 00 00 4b 02 4b 65 |dErrorMo|de..K.Ke|
|000008f0| 53 65 74 50 72 69 6f 72 | 69 74 79 54 68 72 65 61 |SetPrior|ityThrea|
|00000900| 64 00 9d 05 77 63 73 63 | 61 74 00 00 a0 05 77 63 |d...wcsc|at....wc|
|00000910| 73 63 70 79 00 00 4c 05 | 5a 77 55 6e 6d 61 70 56 |scpy..L.|ZwUnmapV|
|00000920| 69 65 77 4f 66 53 65 63 | 74 69 6f 6e 00 00 07 05 |iewOfSec|tion....|
|00000930| 5a 77 4d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |ZwMapVie|wOfSecti|
|00000940| 6f 6e 00 00 eb 04 5a 77 | 43 72 65 61 74 65 45 76 |on....Zw|CreateEv|
|00000950| 65 6e 74 00 a7 03 52 74 | 6c 43 6f 6d 70 61 72 65 |ent...Rt|lCompare|
|00000960| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 91 05 |UnicodeS|tring...|
|00000970| 73 74 72 6e 63 70 79 00 | 94 05 73 74 72 73 74 72 |strncpy.|..strstr|
|00000980| 00 00 89 04 52 74 6c 55 | 70 70 65 72 53 74 72 69 |....RtlU|pperStri|
|00000990| 6e 67 00 00 92 05 73 74 | 72 72 63 68 72 00 fe 04 |ng....st|rrchr...|
|000009a0| 5a 77 46 6c 75 73 68 4b | 65 79 00 00 45 05 5a 77 |ZwFlushK|ey..E.Zw|
|000009b0| 53 65 74 56 61 6c 75 65 | 4b 65 79 00 0d 05 5a 77 |SetValue|Key...Zw|
|000009c0| 4f 70 65 6e 4b 65 79 00 | 2d 05 5a 77 51 75 65 72 |OpenKey.|-.ZwQuer|
|000009d0| 79 56 61 6c 75 65 4b 65 | 79 00 d1 01 49 6f 57 72 |yValueKe|y...IoWr|
|000009e0| 69 74 65 45 72 72 6f 72 | 4c 6f 67 45 6e 74 72 79 |iteError|LogEntry|
|000009f0| 00 00 1b 01 49 6f 41 6c | 6c 6f 63 61 74 65 45 72 |....IoAl|locateEr|
|00000a00| 72 6f 72 4c 6f 67 45 6e | 74 72 79 00 91 02 4d 6d |rorLogEn|try...Mm|
|00000a10| 47 65 74 53 79 73 74 65 | 6d 52 6f 75 74 69 6e 65 |GetSyste|mRoutine|
|00000a20| 41 64 64 72 65 73 73 00 | 6e 74 6f 73 6b 72 6e 6c |Address.|ntoskrnl|
|00000a30| 2e 65 78 65 00 00 61 05 | 5f 65 78 63 65 70 74 5f |.exe..a.|_except_|
|00000a40| 68 61 6e 64 6c 65 72 33 | 00 00 4f 00 4b 66 52 65 |handler3|..O.KfRe|
|00000a50| 6c 65 61 73 65 53 70 69 | 6e 4c 6f 63 6b 00 4c 00 |leaseSpi|nLock.L.|
|00000a60| 4b 66 41 63 71 75 69 72 | 65 53 70 69 6e 4c 6f 63 |KfAcquir|eSpinLoc|
|00000a70| 6b 00 40 00 4b 65 47 65 | 74 43 75 72 72 65 6e 74 |k.@.KeGe|tCurrent|
|00000a80| 49 72 71 6c 00 00 48 41 | 4c 2e 64 6c 6c 00 00 00 |Irql..HA|L.dll...|
|00000a90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+