home *** CD-ROM | disk | FTP | other *** search
Unknown | 2006-09-14 | 1.9 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 20 6f 00 00 00 00 00 00 | 00 00 00 00 6e 75 00 00 | o......|....nu..|
|00000010| b0 02 00 00 10 6f 00 00 | 00 00 00 00 00 00 00 00 |.....o..|........|
|00000020| a4 75 00 00 a0 02 00 00 | 18 6f 00 00 00 00 00 00 |.u......|.o......|
|00000030| 00 00 00 00 c2 75 00 00 | a8 02 00 00 00 00 00 00 |.....u..|........|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 88 75 00 00 00 00 00 00 | ac 75 00 00 00 00 00 00 |.u......|.u......|
|00000060| 7c 70 00 00 94 70 00 00 | 9e 70 00 00 ac 70 00 00 ||p...p..|.p...p..|
|00000070| c4 70 00 00 d2 70 00 00 | ea 70 00 00 fc 70 00 00 |.p...p..|.p...p..|
|00000080| 0e 71 00 00 22 71 00 00 | 3a 71 00 00 46 71 00 00 |.q.."q..|:q..Fq..|
|00000090| 62 71 00 00 76 71 00 00 | 8e 71 00 00 a2 71 00 00 |bq..vq..|.q...q..|
|000000a0| c2 71 00 00 cc 71 00 00 | d6 71 00 00 e6 71 00 00 |.q...q..|.q...q..|
|000000b0| fc 71 00 00 14 72 00 00 | 2e 72 00 00 44 72 00 00 |.q...r..|.r..Dr..|
|000000c0| 64 72 00 00 7a 72 00 00 | 8e 72 00 00 a8 72 00 00 |dr..zr..|.r...r..|
|000000d0| c6 72 00 00 d0 72 00 00 | e4 72 00 00 72 70 00 00 |.r...r..|.r..rp..|
|000000e0| 20 73 00 00 2e 73 00 00 | 3a 73 00 00 4e 73 00 00 | s...s..|:s..Ns..|
|000000f0| 5c 73 00 00 6c 73 00 00 | 7a 73 00 00 88 73 00 00 |\s..ls..|zs...s..|
|00000100| 9a 73 00 00 b0 73 00 00 | c2 73 00 00 d0 73 00 00 |.s...s..|.s...s..|
|00000110| e6 73 00 00 f2 73 00 00 | 08 74 00 00 2c 74 00 00 |.s...s..|.t..,t..|
|00000120| 46 74 00 00 5a 74 00 00 | 74 74 00 00 8c 74 00 00 |Ft..Zt..|tt...t..|
|00000130| 9e 74 00 00 b6 74 00 00 | d8 74 00 00 ea 74 00 00 |.t...t..|.t...t..|
|00000140| 0c 75 00 00 20 75 00 00 | 38 75 00 00 4a 75 00 00 |.u.. u..|8u..Ju..|
|00000150| 64 75 00 00 7c 75 00 00 | 64 70 00 00 4c 70 00 00 |du..|u..|dp..Lp..|
|00000160| 08 73 00 00 3c 70 00 00 | ce 75 00 00 e2 75 00 00 |.s..<p..|.u...u..|
|00000170| fe 75 00 00 0c 76 00 00 | 00 00 00 00 60 03 5a 77 |.u...v..|....`.Zw|
|00000180| 43 72 65 61 74 65 46 69 | 6c 65 00 00 d0 02 52 74 |CreateFi|le....Rt|
|00000190| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|000001a0| 6e 67 00 00 a2 01 4b 65 | 53 65 74 45 76 65 6e 74 |ng....Ke|SetEvent|
|000001b0| 00 00 5b 03 5a 77 43 6c | 6f 73 65 00 95 03 5a 77 |..[.ZwCl|ose...Zw|
|000001c0| 53 65 74 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |SetInfor|mationFi|
|000001d0| 6c 65 00 00 d2 03 73 70 | 72 69 6e 74 66 00 a2 03 |le....sp|rintf...|
|000001e0| 5a 77 57 72 69 74 65 46 | 69 6c 65 00 36 00 45 78 |ZwWriteF|ile.6.Ex|
|000001f0| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00000200| 54 61 67 00 42 00 45 78 | 46 72 65 65 50 6f 6f 6c |Tag.B.Ex|FreePool|
|00000210| 00 00 b8 01 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |....KeWa|itForSin|
|00000220| 67 6c 65 4f 62 6a 65 63 | 74 00 62 00 45 78 51 75 |gleObjec|t.b.ExQu|
|00000230| 65 75 65 57 6f 72 6b 49 | 74 65 6d 00 92 01 4b 65 |eueWorkI|tem...Ke|
|00000240| 52 65 6c 65 61 73 65 4d | 75 74 65 78 00 00 86 01 |ReleaseM|utex....|
|00000250| 4b 65 51 75 65 72 79 53 | 79 73 74 65 6d 54 69 6d |KeQueryS|ystemTim|
|00000260| 65 00 d9 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 49 |e...Inte|rlockedI|
|00000270| 6e 63 72 65 6d 65 6e 74 | 00 00 e4 03 76 73 70 72 |ncrement|....vspr|
|00000280| 69 6e 74 66 00 00 3f 02 | 4f 62 52 65 66 65 72 65 |intf..?.|ObRefere|
|00000290| 6e 63 65 4f 62 6a 65 63 | 74 42 79 48 61 6e 64 6c |nceObjec|tByHandl|
|000002a0| 65 00 45 00 45 78 47 65 | 74 50 72 65 76 69 6f 75 |e.E.ExGe|tPreviou|
|000002b0| 73 4d 6f 64 65 00 44 02 | 4f 62 66 44 65 72 65 66 |sMode.D.|ObfDeref|
|000002c0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 c0 02 |erenceOb|ject....|
|000002d0| 52 74 6c 46 72 65 65 41 | 6e 73 69 53 74 72 69 6e |RtlFreeA|nsiStrin|
|000002e0| 67 00 0f 03 52 74 6c 55 | 6e 69 63 6f 64 65 53 74 |g...RtlU|nicodeSt|
|000002f0| 72 69 6e 67 54 6f 41 6e | 73 69 53 74 72 69 6e 67 |ringToAn|siString|
|00000300| 00 00 d9 03 73 74 72 6e | 63 61 74 00 db 03 73 74 |....strn|cat...st|
|00000310| 72 6e 63 70 79 00 4d 02 | 50 72 6f 62 65 46 6f 72 |rncpy.M.|ProbeFor|
|00000320| 57 72 69 74 65 00 cc 01 | 4c 73 61 46 72 65 65 52 |Write...|LsaFreeR|
|00000330| 65 74 75 72 6e 42 75 66 | 66 65 72 00 3c 02 4f 62 |eturnBuf|fer.<.Ob|
|00000340| 4f 70 65 6e 4f 62 6a 65 | 63 74 42 79 50 6f 69 6e |OpenObje|ctByPoin|
|00000350| 74 65 72 00 60 02 50 73 | 52 65 66 65 72 65 6e 63 |ter.`.Ps|Referenc|
|00000360| 65 50 72 69 6d 61 72 79 | 54 6f 6b 65 6e 00 0c 01 |ePrimary|Token...|
|00000370| 49 6f 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |IoGetCur|rentProc|
|00000380| 65 73 73 00 5f 02 50 73 | 52 65 66 65 72 65 6e 63 |ess._.Ps|Referenc|
|00000390| 65 49 6d 70 65 72 73 6f | 6e 61 74 69 6f 6e 54 6f |eImperso|nationTo|
|000003a0| 6b 65 6e 00 60 01 4b 65 | 47 65 74 43 75 72 72 65 |ken.`.Ke|GetCurre|
|000003b0| 6e 74 54 68 72 65 61 64 | 00 00 70 01 4b 65 49 6e |ntThread|..p.KeIn|
|000003c0| 69 74 69 61 6c 69 7a 65 | 45 76 65 6e 74 00 85 03 |itialize|Event...|
|000003d0| 5a 77 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |ZwQueryI|nformati|
|000003e0| 6f 6e 54 6f 6b 65 6e 00 | 43 00 45 78 46 72 65 65 |onToken.|C.ExFree|
|000003f0| 54 6f 50 61 67 65 64 4c | 6f 6f 6b 61 73 69 64 65 |ToPagedL|ookaside|
|00000400| 4c 69 73 74 00 00 da 03 | 73 74 72 6e 63 6d 70 00 |List....|strncmp.|
|00000410| 3d 02 4f 62 51 75 65 72 | 79 4e 61 6d 65 53 74 72 |=.ObQuer|yNameStr|
|00000420| 69 6e 67 00 32 00 45 78 | 41 6c 6c 6f 63 61 74 65 |ing.2.Ex|Allocate|
|00000430| 46 72 6f 6d 50 61 67 65 | 64 4c 6f 6f 6b 61 73 69 |FromPage|dLookasi|
|00000440| 64 65 4c 69 73 74 00 00 | 54 02 50 73 47 65 74 43 |deList..|T.PsGetC|
|00000450| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 49 64 00 |urrentPr|ocessId.|
|00000460| 9e 03 5a 77 55 6e 6c 6f | 61 64 4b 65 79 00 72 03 |..ZwUnlo|adKey.r.|
|00000470| 5a 77 4c 6f 61 64 4b 65 | 79 00 66 03 5a 77 44 65 |ZwLoadKe|y.f.ZwDe|
|00000480| 6c 65 74 65 56 61 6c 75 | 65 4b 65 79 00 00 61 03 |leteValu|eKey..a.|
|00000490| 5a 77 43 72 65 61 74 65 | 4b 65 79 00 9b 03 5a 77 |ZwCreate|Key...Zw|
|000004a0| 53 65 74 56 61 6c 75 65 | 4b 65 79 00 65 03 5a 77 |SetValue|Key.e.Zw|
|000004b0| 44 65 6c 65 74 65 4b 65 | 79 00 6e 03 5a 77 46 6c |DeleteKe|y.n.ZwFl|
|000004c0| 75 73 68 4b 65 79 00 00 | 6b 03 5a 77 45 6e 75 6d |ushKey..|k.ZwEnum|
|000004d0| 65 72 61 74 65 4b 65 79 | 00 00 6c 03 5a 77 45 6e |erateKey|..l.ZwEn|
|000004e0| 75 6d 65 72 61 74 65 56 | 61 6c 75 65 4b 65 79 00 |umerateV|alueKey.|
|000004f0| 8c 03 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |..ZwQuer|yValueKe|
|00000500| 79 00 86 03 5a 77 51 75 | 65 72 79 4b 65 79 00 00 |y...ZwQu|eryKey..|
|00000510| d7 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 45 78 63 |..Interl|ockedExc|
|00000520| 68 61 6e 67 65 00 79 03 | 5a 77 4f 70 65 6e 4b 65 |hange.y.|ZwOpenKe|
|00000530| 79 00 45 01 49 6f 66 43 | 6f 6d 70 6c 65 74 65 52 |y.E.IofC|ompleteR|
|00000540| 65 71 75 65 73 74 00 00 | 3e 01 49 6f 55 6e 72 65 |equest..|>.IoUnre|
|00000550| 67 69 73 74 65 72 53 68 | 75 74 64 6f 77 6e 4e 6f |gisterSh|utdownNo|
|00000560| 74 69 66 69 63 61 74 69 | 6f 6e 00 00 47 03 53 65 |tificati|on..G.Se|
|00000570| 52 65 6c 65 61 73 65 53 | 75 62 6a 65 63 74 43 6f |ReleaseS|ubjectCo|
|00000580| 6e 74 65 78 74 00 40 03 | 53 65 50 72 69 76 69 6c |ntext.@.|SePrivil|
|00000590| 65 67 65 43 68 65 63 6b | 00 00 32 03 53 65 43 61 |egeCheck|..2.SeCa|
|000005a0| 70 74 75 72 65 53 75 62 | 6a 65 63 74 43 6f 6e 74 |ptureSub|jectCont|
|000005b0| 65 78 74 00 d6 00 49 6e | 74 65 72 6c 6f 63 6b 65 |ext...In|terlocke|
|000005c0| 64 44 65 63 72 65 6d 65 | 6e 74 00 00 fb 00 49 6f |dDecreme|nt....Io|
|000005d0| 44 65 6c 65 74 65 44 65 | 76 69 63 65 00 00 fc 00 |DeleteDe|vice....|
|000005e0| 49 6f 44 65 6c 65 74 65 | 53 79 6d 62 6f 6c 69 63 |IoDelete|Symbolic|
|000005f0| 4c 69 6e 6b 00 00 28 01 | 49 6f 52 65 67 69 73 74 |Link..(.|IoRegist|
|00000600| 65 72 53 68 75 74 64 6f | 77 6e 4e 6f 74 69 66 69 |erShutdo|wnNotifi|
|00000610| 63 61 74 69 6f 6e 00 00 | 68 03 5a 77 44 69 73 70 |cation..|h.ZwDisp|
|00000620| 6c 61 79 53 74 72 69 6e | 67 00 48 00 45 78 49 6e |layStrin|g.H.ExIn|
|00000630| 69 74 69 61 6c 69 7a 65 | 50 61 67 65 64 4c 6f 6f |itialize|PagedLoo|
|00000640| 6b 61 73 69 64 65 4c 69 | 73 74 00 00 73 01 4b 65 |kasideLi|st..s.Ke|
|00000650| 49 6e 69 74 69 61 6c 69 | 7a 65 4d 75 74 65 78 00 |Initiali|zeMutex.|
|00000660| f7 00 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |..IoCrea|teSymbol|
|00000670| 69 63 4c 69 6e 6b 00 00 | f3 00 49 6f 43 72 65 61 |icLink..|..IoCrea|
|00000680| 74 65 44 65 76 69 63 65 | 00 00 f8 02 52 74 6c 51 |teDevice|....RtlQ|
|00000690| 75 65 72 79 52 65 67 69 | 73 74 72 79 56 61 6c 75 |ueryRegi|stryValu|
|000006a0| 65 73 00 00 ce 03 6d 65 | 6d 6d 6f 76 65 00 6e 74 |es....me|mmove.nt|
|000006b0| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 18 03 52 74 |oskrnl.e|xe....Rt|
|000006c0| 6c 55 6e 77 69 6e 64 00 | 44 00 4b 65 51 75 65 72 |lUnwind.|D.KeQuer|
|000006d0| 79 50 65 72 66 6f 72 6d | 61 6e 63 65 43 6f 75 6e |yPerform|anceCoun|
|000006e0| 74 65 72 00 48 41 4c 2e | 64 6c 6c 00 0d 00 47 65 |ter.HAL.|dll...Ge|
|000006f0| 74 53 65 63 75 72 69 74 | 79 55 73 65 72 49 6e 66 |tSecurit|yUserInf|
|00000700| 6f 00 6b 73 65 63 64 64 | 2e 73 79 73 00 00 e7 01 |o.ksecdd|.sys....|
|00000710| 4d 6d 4d 61 70 4c 6f 63 | 6b 65 64 50 61 67 65 73 |MmMapLoc|kedPages|
|00000720| 00 00 d3 01 4d 6d 42 75 | 69 6c 64 4d 64 6c 46 6f |....MmBu|ildMdlFo|
|00000730| 72 4e 6f 6e 50 61 67 65 | 64 50 6f 6f 6c 00 d5 01 |rNonPage|dPool...|
|00000740| 4d 6d 43 72 65 61 74 65 | 4d 64 6c 00 9e 01 4b 65 |MmCreate|Mdl...Ke|
|00000750| 53 65 72 76 69 63 65 44 | 65 73 63 72 69 70 74 6f |ServiceD|escripto|
|00000760| 72 54 61 62 6c 65 00 00 | 00 00 00 00 00 00 00 00 |rTable..|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+