home *** CD-ROM | disk | FTP | other *** search
Unknown | 2001-06-08 | 2.7 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 55 8b ec 51 51 57 83 65 | fc 00 68 ee 4e 0e 00 ff |U..QQW.e|..h.N...|
|00000010| 15 c0 85 09 00 89 45 f8 | 8b 45 08 c7 40 34 ee 4e |......E.|.E..@4.N|
|00000020| 0e 00 8b 45 08 c7 40 38 | 5e 23 0e 00 8b 45 08 c7 |...E..@8|^#...E..|
|00000030| 80 80 00 00 00 f2 21 0e | 00 8b 45 08 c7 40 40 66 |......!.|..E..@@f|
|00000040| 26 0e 00 8b 45 08 c7 40 | 4c 20 22 0e 00 8b 45 08 |&...E..@|L "...E.|
|00000050| c7 40 50 c4 22 0e 00 8b | 45 08 c7 40 44 9a 26 0e |.@P."...|E..@D.&.|
|00000060| 00 8b 45 08 c7 40 48 5c | 27 0e 00 8b 45 08 c7 40 |..E..@H\|'...E..@|
|00000070| 70 30 28 0e 00 8b 45 08 | c7 40 5c d8 27 0e 00 6a |p0(...E.|.@\.'..j|
|00000080| 00 68 08 b3 0d 00 ff 15 | 24 86 09 00 66 83 25 00 |.h......|$...f.%.|
|00000090| b3 0d 00 00 66 c7 05 02 | b3 0d 00 00 04 c7 05 04 |....f...|........|
|000000a0| b3 0d 00 00 af 0d 00 0f | b7 0d 0a b3 0d 00 33 c0 |........|......3.|
|000000b0| 8b 3d 0c b3 0d 00 8b d1 | c1 e9 02 f3 ab 8b ca 83 |.=......|........|
|000000c0| e1 03 f3 aa ff 75 0c 68 | 08 b3 0d 00 ff 15 08 85 |.....u.h|........|
|000000d0| 09 00 6a 00 68 00 b3 0d | 00 ff 15 24 86 09 00 66 |..j.h...|...$...f|
|000000e0| 83 25 00 b3 0d 00 00 66 | c7 05 02 b3 0d 00 80 00 |.%.....f|........|
|000000f0| c7 05 04 b3 0d 00 80 ae | 0d 00 0f b7 0d 02 b3 0d |........|........|
|00000100| 00 33 c0 8b 3d 04 b3 0d | 00 8b d1 c1 e9 02 f3 ab |.3..=...|........|
|00000110| 8b ca 83 e1 03 f3 aa 68 | 00 b3 0d 00 ff 75 0c e8 |.......h|.....u..|
|00000120| a0 bd ff ff 8b 45 08 8b | 40 18 c7 40 04 d4 1b 0e |.....E..|@..@....|
|00000130| 00 8b 45 08 c7 80 a4 00 | 00 00 5e 5d 0e 00 8b 45 |..E.....|..^]...E|
|00000140| 08 c7 80 90 00 00 00 54 | 6b 0e 00 8b 45 08 c7 40 |.......T|k...E..@|
|00000150| 74 8c 68 0e 00 83 25 10 | b3 0d 00 00 ff 75 f8 ff |t.h...%.|.....u..|
|00000160| 15 bc 85 09 00 8b 45 fc | 5f c9 c2 08 00 cc cc cc |......E.|_.......|
|00000170| 20 88 0d 00 00 00 00 00 | 00 00 00 00 c8 90 0d 00 | .......|........|
|00000180| d4 84 08 00 0c 88 0d 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 2e 91 0d 00 c0 84 08 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 06 91 0d 00 |........|........|
|000001b0| ea 90 0d 00 d6 90 0d 00 | 1a 91 0d 00 00 00 00 00 |........|........|
|000001c0| d2 89 0d 00 dc 89 0d 00 | f0 89 0d 00 0a 8a 0d 00 |........|........|
|000001d0| 1c 8a 0d 00 28 8a 0d 00 | 44 8a 0d 00 5c 8a 0d 00 |....(...|D...\...|
|000001e0| 6a 8a 0d 00 82 8a 0d 00 | 9a 8a 0d 00 a8 8a 0d 00 |j.......|........|
|000001f0| c2 8a 0d 00 d2 8a 0d 00 | f4 8a 0d 00 14 8b 0d 00 |........|........|
|00000200| 28 8b 0d 00 36 8b 0d 00 | 4c 8b 0d 00 66 8b 0d 00 |(...6...|L...f...|
|00000210| 70 8b 0d 00 88 8b 0d 00 | 96 8b 0d 00 a2 8b 0d 00 |p.......|........|
|00000220| b6 8b 0d 00 c0 8b 0d 00 | d6 8b 0d 00 f0 8b 0d 00 |........|........|
|00000230| 04 8c 0d 00 20 8c 0d 00 | 36 8c 0d 00 4e 8c 0d 00 |.... ...|6...N...|
|00000240| 66 8c 0d 00 76 8c 0d 00 | 96 8c 0d 00 aa 8c 0d 00 |f...v...|........|
|00000250| c2 8c 0d 00 d4 8c 0d 00 | e6 8c 0d 00 f8 8c 0d 00 |........|........|
|00000260| 10 8d 0d 00 c4 89 0d 00 | 36 8d 0d 00 46 8d 0d 00 |........|6...F...|
|00000270| 54 8d 0d 00 6e 8d 0d 00 | 88 8d 0d 00 9a 8d 0d 00 |T...n...|........|
|00000280| b6 8d 0d 00 d2 8d 0d 00 | f0 8d 0d 00 00 8e 0d 00 |........|........|
|00000290| 20 8e 0d 00 3c 8e 0d 00 | 54 8e 0d 00 64 8e 0d 00 | ...<...|T...d...|
|000002a0| 80 8e 0d 00 98 8e 0d 00 | ae 8e 0d 00 cc 8e 0d 00 |........|........|
|000002b0| e8 8e 0d 00 00 8f 0d 00 | 20 8f 0d 00 3a 8f 0d 00 |........| ...:...|
|000002c0| 54 8f 0d 00 62 8f 0d 00 | 7a 8f 0d 00 92 8f 0d 00 |T...b...|z.......|
|000002d0| ac 8f 0d 00 be 8f 0d 00 | d2 8f 0d 00 ea 8f 0d 00 |........|........|
|000002e0| fc 8f 0d 00 10 90 0d 00 | 20 90 0d 00 36 90 0d 00 |........| ...6...|
|000002f0| 4c 90 0d 00 62 90 0d 00 | 7c 90 0d 00 8e 90 0d 00 |L...b...||.......|
|00000300| a4 90 0d 00 b4 90 0d 00 | ba 89 0d 00 aa 89 0d 00 |........|........|
|00000310| 92 89 0d 00 1e 8d 0d 00 | 80 89 0d 00 00 00 00 00 |........|........|
|00000320| 13 05 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |..ZwQuer|yValueKe|
|00000330| 79 00 fa 03 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |y...RtlI|nitUnico|
|00000340| 64 65 53 74 72 69 6e 67 | 00 00 2b 05 5a 77 53 65 |deString|..+.ZwSe|
|00000350| 74 56 61 6c 75 65 4b 65 | 79 00 cd 04 5a 77 43 6c |tValueKe|y...ZwCl|
|00000360| 6f 73 65 00 4a 00 45 78 | 46 72 65 65 50 6f 6f 6c |ose.J.Ex|FreePool|
|00000370| 00 00 6a 05 6d 65 6d 6d | 6f 76 65 00 98 03 52 74 |..j.memm|ove...Rt|
|00000380| 6c 43 6f 6d 70 61 72 65 | 4d 65 6d 6f 72 79 00 00 |lCompare|Memory..|
|00000390| 34 04 52 74 6c 51 75 65 | 72 79 52 65 67 69 73 74 |4.RtlQue|ryRegist|
|000003a0| 72 79 56 61 6c 75 65 73 | 00 00 e1 04 5a 77 45 6e |ryValues|....ZwEn|
|000003b0| 75 6d 65 72 61 74 65 4b | 65 79 00 00 f3 04 5a 77 |umerateK|ey....Zw|
|000003c0| 4f 70 65 6e 4b 65 79 00 | 8b 03 52 74 6c 41 70 70 |OpenKey.|..RtlApp|
|000003d0| 65 6e 64 55 6e 69 63 6f | 64 65 54 6f 53 74 72 69 |endUnico|deToStri|
|000003e0| 6e 67 00 00 3e 00 45 78 | 41 6c 6c 6f 63 61 74 65 |ng..>.Ex|Allocate|
|000003f0| 50 6f 6f 6c 57 69 74 68 | 54 61 67 00 da 04 5a 77 |PoolWith|Tag...Zw|
|00000400| 44 65 6c 65 74 65 4b 65 | 79 00 a5 03 52 74 6c 43 |DeleteKe|y...RtlC|
|00000410| 6f 70 79 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |opyUnico|deString|
|00000420| 00 00 e3 03 52 74 6c 46 | 72 65 65 55 6e 69 63 6f |....RtlF|reeUnico|
|00000430| 64 65 53 74 72 69 6e 67 | 00 00 15 05 5a 77 52 65 |deString|....ZwRe|
|00000440| 61 64 46 69 6c 65 00 00 | 07 05 5a 77 51 75 65 72 |adFile..|..ZwQuer|
|00000450| 79 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 46 69 6c 65 |yInforma|tionFile|
|00000460| 00 00 d2 04 5a 77 43 72 | 65 61 74 65 46 69 6c 65 |....ZwCr|eateFile|
|00000470| 00 00 8a 03 52 74 6c 41 | 70 70 65 6e 64 55 6e 69 |....RtlA|ppendUni|
|00000480| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 53 74 72 69 |codeStri|ngToStri|
|00000490| 6e 67 00 00 87 03 52 74 | 6c 41 6e 73 69 53 74 72 |ng....Rt|lAnsiStr|
|000004a0| 69 6e 67 54 6f 55 6e 69 | 63 6f 64 65 53 74 72 69 |ingToUni|codeStri|
|000004b0| 6e 67 00 00 f7 03 52 74 | 6c 49 6e 69 74 41 6e 73 |ng....Rt|lInitAns|
|000004c0| 69 53 74 72 69 6e 67 00 | d4 04 5a 77 43 72 65 61 |iString.|..ZwCrea|
|000004d0| 74 65 4b 65 79 00 2d 01 | 49 6f 43 6f 6e 6e 65 63 |teKey.-.|IoConnec|
|000004e0| 74 49 6e 74 65 72 72 75 | 70 74 00 00 e5 01 4b 65 |tInterru|pt....Ke|
|000004f0| 44 65 6c 61 79 45 78 65 | 63 75 74 69 6f 6e 54 68 |DelayExe|cutionTh|
|00000500| 72 65 61 64 00 00 3d 05 | 5f 61 6c 6c 6d 75 6c 00 |read..=.|_allmul.|
|00000510| 1c 02 4b 65 51 75 65 72 | 79 54 69 6d 65 49 6e 63 |..KeQuer|yTimeInc|
|00000520| 72 65 6d 65 6e 74 00 00 | 4c 02 4b 65 54 69 63 6b |rement..|L.KeTick|
|00000530| 43 6f 75 6e 74 00 42 05 | 5f 61 75 6c 6c 64 69 76 |Count.B.|_aulldiv|
|00000540| 00 00 1a 02 4b 65 51 75 | 65 72 79 53 79 73 74 65 |....KeQu|erySyste|
|00000550| 6d 54 69 6d 65 00 3b 05 | 5f 61 6c 6c 64 69 76 00 |mTime.;.|_alldiv.|
|00000560| 55 04 52 74 6c 54 69 6d | 65 54 6f 54 69 6d 65 46 |U.RtlTim|eToTimeF|
|00000570| 69 65 6c 64 73 00 4a 02 | 4b 65 53 79 6e 63 68 72 |ields.J.|KeSynchr|
|00000580| 6f 6e 69 7a 65 45 78 65 | 63 75 74 69 6f 6e 00 00 |onizeExe|cution..|
|00000590| 0d 02 4b 65 49 6e 73 65 | 72 74 51 75 65 75 65 44 |..KeInse|rtQueueD|
|000005a0| 70 63 00 00 09 04 52 74 | 6c 49 6e 74 65 67 65 72 |pc....Rt|lInteger|
|000005b0| 54 6f 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |ToUnicod|eString.|
|000005c0| 5c 01 49 6f 47 65 74 44 | 65 76 69 63 65 50 72 6f |\.IoGetD|evicePro|
|000005d0| 70 65 72 74 79 00 7d 00 | 45 78 53 65 74 54 69 6d |perty.}.|ExSetTim|
|000005e0| 65 72 52 65 73 6f 6c 75 | 74 69 6f 6e 00 00 53 02 |erResolu|tion..S.|
|000005f0| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|00000600| 62 6a 65 63 74 00 cc 01 | 49 6f 66 43 61 6c 6c 44 |bject...|IofCallD|
|00000610| 72 69 76 65 72 00 21 01 | 49 6f 42 75 69 6c 64 53 |river.!.|IoBuildS|
|00000620| 79 6e 63 68 72 6f 6e 6f | 75 73 46 73 64 52 65 71 |ynchrono|usFsdReq|
|00000630| 75 65 73 74 00 00 ff 01 | 4b 65 49 6e 69 74 69 61 |uest....|KeInitia|
|00000640| 6c 69 7a 65 45 76 65 6e | 74 00 46 01 49 6f 44 69 |lizeEven|t.F.IoDi|
|00000650| 73 63 6f 6e 6e 65 63 74 | 49 6e 74 65 72 72 75 70 |sconnect|Interrup|
|00000660| 74 00 2f 01 49 6f 43 72 | 65 61 74 65 44 65 76 69 |t./.IoCr|eateDevi|
|00000670| 63 65 00 00 3f 01 49 6f | 44 65 6c 65 74 65 44 65 |ce..?.Io|DeleteDe|
|00000680| 76 69 63 65 00 00 42 01 | 49 6f 44 65 74 61 63 68 |vice..B.|IoDetach|
|00000690| 44 65 76 69 63 65 00 00 | 0b 01 49 6e 74 65 72 6c |Device..|..Interl|
|000006a0| 6f 63 6b 65 64 49 6e 63 | 72 65 6d 65 6e 74 00 00 |ockedInc|rement..|
|000006b0| 3c 02 4b 65 53 65 74 45 | 76 65 6e 74 00 00 08 01 |<.KeSetE|vent....|
|000006c0| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 44 65 63 72 65 |Interloc|kedDecre|
|000006d0| 6d 65 6e 74 00 00 1b 03 | 50 6f 43 61 6c 6c 44 72 |ment....|PoCallDr|
|000006e0| 69 76 65 72 00 00 24 01 | 49 6f 43 61 6e 63 65 6c |iver..$.|IoCancel|
|000006f0| 49 72 70 00 8d 01 49 6f | 52 65 6c 65 61 73 65 43 |Irp...Io|ReleaseC|
|00000700| 61 6e 63 65 6c 53 70 69 | 6e 4c 6f 63 6b 00 0e 01 |ancelSpi|nLock...|
|00000710| 49 6f 41 63 71 75 69 72 | 65 43 61 6e 63 65 6c 53 |IoAcquir|eCancelS|
|00000720| 70 69 6e 4c 6f 63 6b 00 | 5f 01 49 6f 47 65 74 44 |pinLock.|_.IoGetD|
|00000730| 6d 61 41 64 61 70 74 65 | 72 00 9b 01 49 6f 53 65 |maAdapte|r...IoSe|
|00000740| 74 44 65 76 69 63 65 49 | 6e 74 65 72 66 61 63 65 |tDeviceI|nterface|
|00000750| 53 74 61 74 65 00 86 01 | 49 6f 52 65 67 69 73 74 |State...|IoRegist|
|00000760| 65 72 44 65 76 69 63 65 | 49 6e 74 65 72 66 61 63 |erDevice|Interfac|
|00000770| 65 00 1d 01 49 6f 41 74 | 74 61 63 68 44 65 76 69 |e...IoAt|tachDevi|
|00000780| 63 65 54 6f 44 65 76 69 | 63 65 53 74 61 63 6b 00 |ceToDevi|ceStack.|
|00000790| 96 02 4d 6d 4d 61 70 49 | 6f 53 70 61 63 65 00 00 |..MmMapI|oSpace..|
|000007a0| 1f 01 49 6f 42 75 69 6c | 64 44 65 76 69 63 65 49 |..IoBuil|dDeviceI|
|000007b0| 6f 43 6f 6e 74 72 6f 6c | 52 65 71 75 65 73 74 00 |oControl|Request.|
|000007c0| 5b 01 49 6f 47 65 74 44 | 65 76 69 63 65 4f 62 6a |[.IoGetD|eviceObj|
|000007d0| 65 63 74 50 6f 69 6e 74 | 65 72 00 00 15 03 4f 62 |ectPoint|er....Ob|
|000007e0| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|000007f0| 63 74 00 00 16 01 49 6f | 41 6c 6c 6f 63 61 74 65 |ct....Io|Allocate|
|00000800| 49 72 70 00 0e 03 4f 62 | 52 65 66 65 72 65 6e 63 |Irp...Ob|Referenc|
|00000810| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 00 |eObjectB|yHandle.|
|00000820| 31 03 50 73 43 72 65 61 | 74 65 53 79 73 74 65 6d |1.PsCrea|teSystem|
|00000830| 54 68 72 65 61 64 00 00 | cd 01 49 6f 66 43 6f 6d |Thread..|..IofCom|
|00000840| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 b4 02 |pleteReq|uest....|
|00000850| 4d 6d 55 6e 6c 6f 63 6b | 50 61 67 61 62 6c 65 49 |MmUnlock|PagableI|
|00000860| 6d 61 67 65 53 65 63 74 | 69 6f 6e 00 92 02 4d 6d |mageSect|ion...Mm|
|00000870| 4c 6f 63 6b 50 61 67 61 | 62 6c 65 44 61 74 61 53 |LockPaga|bleDataS|
|00000880| 65 63 74 69 6f 6e 00 00 | 7c 04 52 74 6c 57 72 69 |ection..||.RtlWri|
|00000890| 74 65 52 65 67 69 73 74 | 72 79 56 61 6c 75 65 00 |teRegist|ryValue.|
|000008a0| 61 04 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |a.RtlUni|codeStri|
|000008b0| 6e 67 54 6f 41 6e 73 69 | 53 74 72 69 6e 67 00 00 |ngToAnsi|String..|
|000008c0| 72 01 49 6f 49 73 57 64 | 6d 56 65 72 73 69 6f 6e |r.IoIsWd|mVersion|
|000008d0| 41 76 61 69 6c 61 62 6c | 65 00 75 01 49 6f 4f 70 |Availabl|e.u.IoOp|
|000008e0| 65 6e 44 65 76 69 63 65 | 52 65 67 69 73 74 72 79 |enDevice|Registry|
|000008f0| 4b 65 79 00 47 02 4b 65 | 53 65 74 54 69 6d 65 72 |Key.G.Ke|SetTimer|
|00000900| 00 00 37 01 49 6f 43 72 | 65 61 74 65 53 79 6d 62 |..7.IoCr|eateSymb|
|00000910| 6f 6c 69 63 4c 69 6e 6b | 00 00 41 01 49 6f 44 65 |olicLink|..A.IoDe|
|00000920| 6c 65 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |leteSymb|olicLink|
|00000930| 00 00 b9 03 52 74 6c 44 | 65 6c 65 74 65 52 65 67 |....RtlD|eleteReg|
|00000940| 69 73 74 72 79 56 61 6c | 75 65 00 00 fe 01 4b 65 |istryVal|ue....Ke|
|00000950| 49 6e 69 74 69 61 6c 69 | 7a 65 44 70 63 00 06 02 |Initiali|zeDpc...|
|00000960| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 54 69 6d 65 |KeInitia|lizeTime|
|00000970| 72 00 05 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |r...KeIn|itialize|
|00000980| 53 70 69 6e 4c 6f 63 6b | 00 00 b6 02 4d 6d 55 6e |SpinLock|....MmUn|
|00000990| 6d 61 70 49 6f 53 70 61 | 63 65 00 00 30 02 4b 65 |mapIoSpa|ce..0.Ke|
|000009a0| 52 65 6d 6f 76 65 51 75 | 65 75 65 44 70 63 00 00 |RemoveQu|eueDpc..|
|000009b0| e1 01 4b 65 43 61 6e 63 | 65 6c 54 69 6d 65 72 00 |..KeCanc|elTimer.|
|000009c0| 09 01 49 6e 74 65 72 6c | 6f 63 6b 65 64 45 78 63 |..Interl|ockedExc|
|000009d0| 68 61 6e 67 65 00 41 02 | 4b 65 53 65 74 50 72 69 |hange.A.|KeSetPri|
|000009e0| 6f 72 69 74 79 54 68 72 | 65 61 64 00 ee 01 4b 65 |orityThr|ead...Ke|
|000009f0| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|00000a00| 00 00 77 03 50 73 54 65 | 72 6d 69 6e 61 74 65 53 |..w.PsTe|rminateS|
|00000a10| 79 73 74 65 6d 54 68 72 | 65 61 64 00 24 03 50 6f |ystemThr|ead.$.Po|
|00000a20| 53 65 74 50 6f 77 65 72 | 53 74 61 74 65 00 27 03 |SetPower|State.'.|
|00000a30| 50 6f 53 74 61 72 74 4e | 65 78 74 50 6f 77 65 72 |PoStartN|extPower|
|00000a40| 49 72 70 00 e2 01 4b 65 | 43 6c 65 61 72 45 76 65 |Irp...Ke|ClearEve|
|00000a50| 6e 74 00 00 21 03 50 6f | 52 65 71 75 65 73 74 50 |nt..!.Po|RequestP|
|00000a60| 6f 77 65 72 49 72 70 00 | 6e 74 6f 73 6b 72 6e 6c |owerIrp.|ntoskrnl|
|00000a70| 2e 65 78 65 00 00 40 00 | 4b 65 47 65 74 43 75 72 |.exe..@.|KeGetCur|
|00000a80| 72 65 6e 74 49 72 71 6c | 00 00 42 00 4b 65 51 75 |rentIrql|..B.KeQu|
|00000a90| 65 72 79 50 65 72 66 6f | 72 6d 61 6e 63 65 43 6f |eryPerfo|rmanceCo|
|00000aa0| 75 6e 74 65 72 00 4c 00 | 4b 66 41 63 71 75 69 72 |unter.L.|KfAcquir|
|00000ab0| 65 53 70 69 6e 4c 6f 63 | 6b 00 4f 00 4b 66 52 65 |eSpinLoc|k.O.KfRe|
|00000ac0| 6c 65 61 73 65 53 70 69 | 6e 4c 6f 63 6b 00 48 41 |leaseSpi|nLock.HA|
|00000ad0| 4c 2e 64 6c 6c 00 00 00 | 00 00 00 00 00 00 00 00 |L.dll...|........|
+--------+-------------------------+-------------------------+--------+--------+