home *** CD-ROM | disk | FTP | other *** search
Unknown | 2003-01-15 | 2.6 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 5c 00 46 00 69 00 6c 00 | 65 00 53 00 79 00 73 00 |\.F.i.l.|e.S.y.s.|
|00000010| 74 00 65 00 6d 00 5c 00 | 45 00 46 00 53 00 46 00 |t.e.m.\.|E.F.S.F.|
|00000020| 69 00 6c 00 74 00 65 00 | 72 00 46 00 73 00 00 00 |i.l.t.e.|r.F.s...|
|00000030| 5c 00 45 00 46 00 53 00 | 49 00 6e 00 69 00 74 00 |\.E.F.S.|I.n.i.t.|
|00000040| 45 00 76 00 65 00 6e 00 | 74 00 00 00 83 ec 54 8d |E.v.e.n.|t.....T.|
|00000050| 44 24 08 66 c7 05 00 52 | 01 00 04 0e 66 c7 05 02 |D$.f...R|....f...|
|00000060| 52 01 00 f0 02 53 55 56 | 57 33 db 68 80 56 01 00 |R....SUV|W3.h.V..|
|00000070| 50 88 1d dc 54 01 00 89 | 1d e0 54 01 00 ff 15 14 |P...T...|..T.....|
|00000080| 40 01 00 8d 44 24 10 8b | 74 24 68 50 53 53 8d 44 |@...D$..|t$hPSS.D|
|00000090| 24 24 6a 08 50 6a 10 56 | ff 15 6c 40 01 00 3b c3 |$$j.Pj.V|..l@..;.|
|000000a0| 0f 8c 98 02 00 00 b8 48 | 53 01 00 89 5e 28 a3 4c |.......H|S...^(.L|
|000000b0| 53 01 00 a3 48 53 01 00 | b8 70 53 01 00 68 08 52 |S...HS..|.pS..h.R|
|000000c0| 01 00 a3 74 53 01 00 a3 | 70 53 01 00 ff 15 30 40 |...tS...|pS....0@|
|000000d0| 01 00 8b 3d 34 40 01 00 | 6a 01 5d 89 1d 80 53 01 |...=4@..|j.]...S.|
|000000e0| 00 53 55 68 84 53 01 00 | 89 2d 78 53 01 00 ff d7 |.SUh.S..|.-xS....|
|000000f0| 53 55 68 5c 53 01 00 89 | 2d 50 53 01 00 89 1d 58 |SUh\S...|-PS....X|
|00000100| 53 01 00 ff d7 8b 3d 38 | 40 01 00 6a 03 8b 44 24 |S.....=8|@..j..D$|
|00000110| 14 68 45 76 65 6c 6a 10 | 89 35 04 52 01 00 8b 40 |.hEvelj.|.5.R...@|
|00000120| 28 53 53 be 40 52 01 00 | 53 56 66 89 18 66 c7 40 |(SS.@R..|SVf..f.@|
|00000130| 02 10 00 89 58 04 ff d7 | 56 e8 42 ab ff ff 3b c3 |....X...|V.B...;.|
|00000140| 75 26 56 ff 15 3c 40 01 | 00 ff 74 24 10 ff 15 40 |u&V..<@.|..t$...@|
|00000150| 40 01 00 68 08 52 01 00 | ff 15 44 40 01 00 b8 17 |@..h.R..|..D@....|
|00000160| 00 00 c0 e9 d6 01 00 00 | 50 56 e8 3b ab ff ff 6a |........|PV.;...j|
|00000170| 05 68 45 63 6f 6e 6a 18 | 53 53 53 68 90 52 01 00 |.hEconj.|SSSh.R..|
|00000180| ff d7 8b 3d 48 40 01 00 | 6a 05 68 45 6f 63 68 6a |...=H@..|j.hEochj|
|00000190| 28 53 53 53 68 e0 52 01 | 00 ff d7 6a 03 68 45 66 |(SSSh.R.|...j.hEf|
|000001a0| 73 6d 6a 10 53 53 bd 98 | 53 01 00 53 55 ff d7 6a |smj.SS..|S..SU..j|
|000001b0| 03 68 45 66 73 6d 6a 50 | 53 53 bf 00 54 01 00 53 |.hEfsmjP|SS..T..S|
|000001c0| 57 ff 15 38 40 01 00 68 | a0 41 01 00 68 e4 54 01 |W..8@..h|.A..h.T.|
|000001d0| 00 ff 15 14 40 01 00 68 | b0 41 01 00 6a 03 ff 15 |....@..h|.A..j...|
|000001e0| a8 3f 01 00 3b c3 89 44 | 24 68 0f 8c 12 01 00 00 |.?..;..D|$h......|
|000001f0| 8d 44 24 20 68 b0 56 01 | 00 50 ff 15 14 40 01 00 |.D$ h.V.|.P...@..|
|00000200| 8d 44 24 20 53 89 44 24 | 40 8d 44 24 38 53 50 6a |.D$ S.D$|@.D$8SPj|
|00000210| 02 68 e0 54 01 00 c7 44 | 24 48 18 00 00 00 89 5c |.h.T...D|$H.....\|
|00000220| 24 4c 89 5c 24 54 89 5c | 24 58 89 5c 24 5c ff 15 |$L.\$T.\|$X.\$\..|
|00000230| 4c 40 01 00 3b c3 89 44 | 24 68 0f 8d 95 00 00 00 |L@..;..D|$h......|
|00000240| 3d 35 00 00 c0 0f 85 b7 | 00 00 00 8d 44 24 28 50 |=5......|....D$(P|
|00000250| e8 7b e6 ff ff 3b c3 89 | 44 24 68 0f 8c a1 00 00 |.{...;..|D$h.....|
|00000260| 00 8b 44 24 28 68 50 54 | 01 00 a3 50 54 01 00 8b |..D$(hPT|...PT...|
|00000270| 44 24 30 68 58 54 01 00 | a3 54 54 01 00 e8 fe c8 |D$0hXT..|.TT.....|
|00000280| ff ff 68 d8 54 01 00 ff | 74 24 34 ff 15 50 40 01 |..h.T...|t$4..P@.|
|00000290| 00 3b c3 89 44 24 68 7c | 69 c6 05 dc 54 01 00 01 |.;..D$h||i...T...|
|000002a0| ff 15 54 40 01 00 8b 0d | d8 54 01 00 3b c1 74 1e |..T@....|.T..;.t.|
|000002b0| 8d 44 24 4c 50 51 ff 15 | 58 40 01 00 e8 09 e6 ff |.D$LPQ..|X@......|
|000002c0| ff 8d 44 24 4c 50 ff 15 | 5c 40 01 00 eb 6c e8 f7 |..D$LP..|\@...l..|
|000002d0| e5 ff ff eb 65 53 68 58 | 03 01 00 53 53 53 8d 44 |....eShX|...SSS.D|
|000002e0| 24 28 68 00 00 00 10 50 | ff 15 60 40 01 00 3b c3 |$(h....P|..`@..;.|
|000002f0| 89 44 24 68 7c 0c ff 74 | 24 14 ff 15 64 40 01 00 |.D$h|..t|$...d@..|
|00000300| eb 38 56 8b 35 3c 40 01 | 00 ff d6 68 90 52 01 00 |.8V.5<@.|...h.R..|
|00000310| ff d6 8b 1d 78 40 01 00 | 68 e0 52 01 00 ff d3 55 |....x@..|h.R....U|
|00000320| ff d3 57 ff d6 ff 74 24 | 10 ff 15 40 40 01 00 68 |..W...t$|...@@..h|
|00000330| 08 52 01 00 ff 15 44 40 | 01 00 8b 44 24 68 5f 5e |.R....D@|...D$h_^|
|00000340| 5d 5b 83 c4 54 c2 08 00 | 7c 5a 00 00 00 00 00 00 |][..T...||Z......|
|00000350| 00 00 00 00 54 5f 00 00 | d0 3f 00 00 2c 5a 00 00 |....T_..|.?..,Z..|
|00000360| 00 00 00 00 00 00 00 00 | 8e 5f 00 00 80 3f 00 00 |........|._...?..|
|00000370| 38 5a 00 00 00 00 00 00 | 00 00 00 00 6a 60 00 00 |8Z......|....j`..|
|00000380| 8c 3f 00 00 64 5a 00 00 | 00 00 00 00 00 00 00 00 |.?..dZ..|........|
|00000390| d8 60 00 00 b8 3f 00 00 | 00 00 00 00 00 00 00 00 |.`...?..|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 78 5f 00 00 |........|....x_..|
|000003b0| 62 5f 00 00 00 00 00 00 | 58 60 00 00 32 60 00 00 |b_......|X`..2`..|
|000003c0| 1a 60 00 00 48 60 00 00 | d8 5f 00 00 c6 5f 00 00 |.`..H`..|._..._..|
|000003d0| b0 5f 00 00 96 5f 00 00 | 00 60 00 00 ec 5f 00 00 |._..._..|.`..._..|
|000003e0| 00 00 00 00 c8 60 00 00 | 8e 60 00 00 74 60 00 00 |.....`..|.`..t`..|
|000003f0| a4 60 00 00 b6 60 00 00 | 00 00 00 00 3e 5d 00 00 |.`...`..|....>]..|
|00000400| 62 5d 00 00 70 5d 00 00 | 20 5d 00 00 08 5d 00 00 |b]..p]..| ]...]..|
|00000410| 7e 5d 00 00 ae 5d 00 00 | c2 5d 00 00 da 5d 00 00 |~]...]..|.]...]..|
|00000420| f2 5d 00 00 0a 5e 00 00 | 98 5d 00 00 cc 5c 00 00 |.]...^..|.]...\..|
|00000430| 50 5e 00 00 62 5e 00 00 | 78 5e 00 00 90 5e 00 00 |P^..b^..|x^...^..|
|00000440| b4 5c 00 00 ea 5c 00 00 | e0 5e 00 00 fe 5e 00 00 |.\...\..|.^...^..|
|00000450| 18 5f 00 00 2c 5f 00 00 | 40 5f 00 00 86 5c 00 00 |._..,_..|@_...\..|
|00000460| 72 5c 00 00 50 5c 00 00 | 32 5c 00 00 20 5c 00 00 |r\..P\..|2\.. \..|
|00000470| 08 5c 00 00 e6 5b 00 00 | d6 5b 00 00 b8 5b 00 00 |.\...[..|.[...[..|
|00000480| a2 5b 00 00 8a 5b 00 00 | 70 5b 00 00 58 5b 00 00 |.[...[..|p[..X[..|
|00000490| 4e 5b 00 00 b0 5e 00 00 | a2 5c 00 00 c6 5e 00 00 |N[...^..|.\...^..|
|000004a0| 1a 5e 00 00 30 5b 00 00 | 3a 5e 00 00 00 00 00 00 |.^..0[..|:^......|
|000004b0| 3f 00 45 78 44 65 6c 65 | 74 65 50 61 67 65 64 4c |?.ExDele|tePagedL|
|000004c0| 6f 6f 6b 61 73 69 64 65 | 4c 69 73 74 00 00 1f 04 |ookaside|List....|
|000004d0| 5a 77 43 6c 6f 73 65 00 | d4 02 50 73 43 72 65 61 |ZwClose.|..PsCrea|
|000004e0| 74 65 53 79 73 74 65 6d | 54 68 72 65 61 64 00 00 |teSystem|Thread..|
|000004f0| 0e 02 4b 65 55 6e 73 74 | 61 63 6b 44 65 74 61 63 |..KeUnst|ackDetac|
|00000500| 68 50 72 6f 63 65 73 73 | 00 00 0a 02 4b 65 53 74 |hProcess|....KeSt|
|00000510| 61 63 6b 41 74 74 61 63 | 68 50 72 6f 63 65 73 73 |ackAttac|hProcess|
|00000520| 00 00 3a 01 49 6f 47 65 | 74 43 75 72 72 65 6e 74 |..:.IoGe|tCurrent|
|00000530| 50 72 6f 63 65 73 73 00 | df 02 50 73 4c 6f 6f 6b |Process.|..PsLook|
|00000540| 75 70 50 72 6f 63 65 73 | 73 42 79 50 72 6f 63 65 |upProces|sByProce|
|00000550| 73 73 49 64 00 00 23 04 | 5a 77 43 72 65 61 74 65 |ssId..#.|ZwCreate|
|00000560| 45 76 65 6e 74 00 4e 00 | 45 78 49 6e 69 74 69 61 |Event.N.|ExInitia|
|00000570| 6c 69 7a 65 50 61 67 65 | 64 4c 6f 6f 6b 61 73 69 |lizePage|dLookasi|
|00000580| 64 65 4c 69 73 74 00 00 | 41 00 45 78 44 65 6c 65 |deList..|A.ExDele|
|00000590| 74 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |teResour|ceLite..|
|000005a0| 25 01 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |%.IoDele|teDevice|
|000005b0| 00 00 3e 00 45 78 44 65 | 6c 65 74 65 4e 50 61 67 |..>.ExDe|leteNPag|
|000005c0| 65 64 4c 6f 6f 6b 61 73 | 69 64 65 4c 69 73 74 00 |edLookas|ideList.|
|000005d0| 4d 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 4e 50 |M.ExInit|ializeNP|
|000005e0| 61 67 65 64 4c 6f 6f 6b | 61 73 69 64 65 4c 69 73 |agedLook|asideLis|
|000005f0| 74 00 c4 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |t...KeIn|itialize|
|00000600| 45 76 65 6e 74 00 50 00 | 45 78 49 6e 69 74 69 61 |Event.P.|ExInitia|
|00000610| 6c 69 7a 65 52 65 73 6f | 75 72 63 65 4c 69 74 65 |lizeReso|urceLite|
|00000620| 00 00 1b 01 49 6f 43 72 | 65 61 74 65 44 65 76 69 |....IoCr|eateDevi|
|00000630| 63 65 00 00 68 03 52 74 | 6c 49 6e 69 74 55 6e 69 |ce..h.Rt|lInitUni|
|00000640| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 5e 00 45 78 |codeStri|ng..^.Ex|
|00000650| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 50 6f 70 45 6e |Interloc|kedPopEn|
|00000660| 74 72 79 53 4c 69 73 74 | 00 00 60 00 45 78 49 6e |trySList|..`.ExIn|
|00000670| 74 65 72 6c 6f 63 6b 65 | 64 50 75 73 68 45 6e 74 |terlocke|dPushEnt|
|00000680| 72 79 53 4c 69 73 74 00 | 74 04 5a 77 57 61 69 74 |rySList.|t.ZwWait|
|00000690| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|000006a0| 49 00 45 78 46 72 65 65 | 54 6f 50 61 67 65 64 4c |I.ExFree|ToPagedL|
|000006b0| 6f 6f 6b 61 73 69 64 65 | 4c 69 73 74 00 00 36 00 |ookaside|List..6.|
|000006c0| 45 78 41 6c 6c 6f 63 61 | 74 65 46 72 6f 6d 50 61 |ExAlloca|teFromPa|
|000006d0| 67 65 64 4c 6f 6f 6b 61 | 73 69 64 65 4c 69 73 74 |gedLooka|sideList|
|000006e0| 00 00 47 00 45 78 46 72 | 65 65 50 6f 6f 6c 00 00 |..G.ExFr|eePool..|
|000006f0| 39 03 52 74 6c 45 71 75 | 61 6c 53 69 64 00 00 04 |9.RtlEqu|alSid...|
|00000700| 53 65 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |SeQueryI|nformati|
|00000710| 6f 6e 54 6f 6b 65 6e 00 | b0 03 52 74 6c 53 75 62 |onToken.|..RtlSub|
|00000720| 41 75 74 68 6f 72 69 74 | 79 53 69 64 00 00 6c 03 |Authorit|ySid..l.|
|00000730| 52 74 6c 49 6e 69 74 69 | 61 6c 69 7a 65 53 69 64 |RtlIniti|alizeSid|
|00000740| 00 00 3a 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |..:.ExAl|locatePo|
|00000750| 6f 6c 57 69 74 68 54 61 | 67 00 7f 03 52 74 6c 4c |olWithTa|g...RtlL|
|00000760| 65 6e 67 74 68 52 65 71 | 75 69 72 65 64 53 69 64 |engthReq|uiredSid|
|00000770| 00 00 14 02 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |....KeWa|itForSin|
|00000780| 67 6c 65 4f 62 6a 65 63 | 74 00 96 01 49 6f 66 43 |gleObjec|t...IofC|
|00000790| 61 6c 6c 44 72 69 76 65 | 72 00 0b 01 49 6f 42 75 |allDrive|r...IoBu|
|000007a0| 69 6c 64 44 65 76 69 63 | 65 49 6f 43 6f 6e 74 72 |ildDevic|eIoContr|
|000007b0| 6f 6c 52 65 71 75 65 73 | 74 00 35 04 5a 77 46 72 |olReques|t.5.ZwFr|
|000007c0| 65 65 56 69 72 74 75 61 | 6c 4d 65 6d 6f 72 79 00 |eeVirtua|lMemory.|
|000007d0| e7 02 50 73 52 65 76 65 | 72 74 54 6f 53 65 6c 66 |..PsReve|rtToSelf|
|000007e0| 00 00 db 02 50 73 49 6d | 70 65 72 73 6f 6e 61 74 |....PsIm|personat|
|000007f0| 65 43 6c 69 65 6e 74 00 | bd 02 4f 62 66 44 65 72 |eClient.|..ObfDer|
|00000800| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|00000810| e3 02 50 73 52 65 66 65 | 72 65 6e 63 65 49 6d 70 |..PsRefe|renceImp|
|00000820| 65 72 73 6f 6e 61 74 69 | 6f 6e 54 6f 6b 65 6e 00 |ersonati|onToken.|
|00000830| b4 01 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |..KeGetC|urrentTh|
|00000840| 72 65 61 64 00 00 1b 04 | 5a 77 41 6c 6c 6f 63 61 |read....|ZwAlloca|
|00000850| 74 65 56 69 72 74 75 61 | 6c 4d 65 6d 6f 72 79 00 |teVirtua|lMemory.|
|00000860| ba 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |..ObRefe|renceObj|
|00000870| 65 63 74 42 79 50 6f 69 | 6e 74 65 72 00 00 b6 00 |ectByPoi|nter....|
|00000880| 46 73 52 74 6c 49 73 4e | 74 73 74 61 74 75 73 45 |FsRtlIsN|tstatusE|
|00000890| 78 70 65 63 74 65 64 00 | 81 04 5f 65 78 63 65 70 |xpected.|.._excep|
|000008a0| 74 5f 68 61 6e 64 6c 65 | 72 33 00 00 0e 03 52 74 |t_handle|r3....Rt|
|000008b0| 6c 43 6f 6d 70 61 72 65 | 4d 65 6d 6f 72 79 00 00 |lCompare|Memory..|
|000008c0| dd 01 4b 65 51 75 65 72 | 79 53 79 73 74 65 6d 54 |..KeQuer|ySystemT|
|000008d0| 69 6d 65 00 6e 74 6f 73 | 6b 72 6e 6c 2e 65 78 65 |ime.ntos|krnl.exe|
|000008e0| 00 00 01 00 45 78 52 65 | 6c 65 61 73 65 46 61 73 |....ExRe|leaseFas|
|000008f0| 74 4d 75 74 65 78 00 00 | 00 00 45 78 41 63 71 75 |tMutex..|..ExAcqu|
|00000900| 69 72 65 46 61 73 74 4d | 75 74 65 78 00 00 48 41 |ireFastM|utex..HA|
|00000910| 4c 2e 64 6c 6c 00 08 00 | 4e 74 4f 66 73 52 65 67 |L.dll...|NtOfsReg|
|00000920| 69 73 74 65 72 43 61 6c | 6c 42 61 63 6b 73 00 00 |isterCal|lBacks..|
|00000930| 00 00 4e 74 4f 66 73 43 | 6c 6f 73 65 41 74 74 72 |..NtOfsC|loseAttr|
|00000940| 69 62 75 74 65 00 09 00 | 4e 74 4f 66 73 52 65 6c |ibute...|NtOfsRel|
|00000950| 65 61 73 65 4d 61 70 00 | 05 00 4e 74 4f 66 73 4d |easeMap.|..NtOfsM|
|00000960| 61 70 41 74 74 72 69 62 | 75 74 65 00 07 00 4e 74 |apAttrib|ute...Nt|
|00000970| 4f 66 73 51 75 65 72 79 | 4c 65 6e 67 74 68 00 00 |OfsQuery|Length..|
|00000980| 02 00 4e 74 4f 66 73 43 | 72 65 61 74 65 41 74 74 |..NtOfsC|reateAtt|
|00000990| 72 69 62 75 74 65 45 78 | 00 00 03 00 4e 74 4f 66 |ributeEx|....NtOf|
|000009a0| 73 44 65 6c 65 74 65 41 | 74 74 72 69 62 75 74 65 |sDeleteA|ttribute|
|000009b0| 00 00 04 00 4e 74 4f 66 | 73 46 6c 75 73 68 41 74 |....NtOf|sFlushAt|
|000009c0| 74 72 69 62 75 74 65 00 | 06 00 4e 74 4f 66 73 50 |tribute.|..NtOfsP|
|000009d0| 75 74 44 61 74 61 00 00 | 0a 00 4e 74 4f 66 73 53 |utData..|..NtOfsS|
|000009e0| 65 74 4c 65 6e 67 74 68 | 00 00 4e 54 46 53 2e 53 |etLength|..NTFS.S|
|000009f0| 59 53 00 00 10 00 49 6e | 69 74 53 65 63 75 72 69 |YS....In|itSecuri|
|00000a00| 74 79 49 6e 74 65 72 66 | 61 63 65 57 00 00 0c 00 |tyInterf|aceW....|
|00000a10| 47 65 6e 65 72 61 74 65 | 53 65 73 73 69 6f 6e 4b |Generate|SessionK|
|00000a20| 65 79 00 00 06 00 45 66 | 73 47 65 6e 65 72 61 74 |ey....Ef|sGenerat|
|00000a30| 65 4b 65 79 00 00 0b 00 | 47 65 6e 65 72 61 74 65 |eKey....|Generate|
|00000a40| 44 69 72 45 66 73 00 00 | 05 00 45 66 73 44 65 63 |DirEfs..|..EfsDec|
|00000a50| 72 79 70 74 46 65 6b 00 | 6b 73 65 63 64 64 2e 73 |ryptFek.|ksecdd.s|
|00000a60| 79 73 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |ys......|........|
|00000a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+