/ Chip 2005 March / CMCD0305.ISO / Software / Antivir / KaH / kantihacker1.5.119_eng.exe / System32 / Drivers / klpf.sys / INIT

next >

view JSON data

view as text

open on a Mac

open on a PC

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 14 60 00 00 00 00 00 00 | 00 00 00 00 ce 65 00 00 |.`......|.....e..|
|00000010| c4 02 00 00 f0 5f 00 00 | 00 00 00 00 00 00 00 00 |....._..|........|
|00000020| 58 66 00 00 a0 02 00 00 | 0c 60 00 00 00 00 00 00 |Xf......|.`......|
|00000030| 00 00 00 00 74 66 00 00 | bc 02 00 00 00 00 00 00 |....tf..|........|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 44 66 00 00 36 66 00 00 | 22 66 00 00 0e 66 00 00 |Df..6f..|"f...f..|
|00000060| f6 65 00 00 e8 65 00 00 | 00 00 00 00 60 66 00 00 |.e...e..|....`f..|
|00000070| 00 00 00 00 aa 61 00 00 | c6 61 00 00 de 61 00 00 |.....a..|.a...a..|
|00000080| f4 61 00 00 08 62 00 00 | 20 62 00 00 2e 62 00 00 |.a...b..| b...b..|
|00000090| 46 62 00 00 66 62 00 00 | 74 62 00 00 94 62 00 00 |Fb..fb..|tb...b..|
|000000a0| a0 62 00 00 ac 62 00 00 | c8 62 00 00 d8 62 00 00 |.b...b..|.b...b..|
|000000b0| e8 62 00 00 00 63 00 00 | 12 63 00 00 2a 63 00 00 |.b...c..|.c..*c..|
|000000c0| 40 63 00 00 4a 63 00 00 | 64 63 00 00 78 63 00 00 |@c..Jc..|dc..xc..|
|000000d0| 90 63 00 00 9a 61 00 00 | b6 63 00 00 c6 63 00 00 |.c...a..|.c...c..|
|000000e0| de 63 00 00 fe 63 00 00 | 18 64 00 00 24 64 00 00 |.c...c..|.d..$d..|
|000000f0| 40 64 00 00 54 64 00 00 | 6c 64 00 00 7a 64 00 00 |@d..Td..|ld..zd..|
|00000100| 94 64 00 00 b4 64 00 00 | c8 64 00 00 d8 64 00 00 |.d...d..|.d...d..|
|00000110| e2 64 00 00 f8 64 00 00 | 1a 65 00 00 32 65 00 00 |.d...d..|.e..2e..|
|00000120| 4e 65 00 00 6a 65 00 00 | 7e 65 00 00 9a 65 00 00 |Ne..je..|~e...e..|
|00000130| ae 65 00 00 dc 65 00 00 | 82 61 00 00 6a 61 00 00 |.e...e..|.a..ja..|
|00000140| 58 61 00 00 40 61 00 00 | 2c 61 00 00 0e 61 00 00 |Xa..@a..|,a...a..|
|00000150| 9a 63 00 00 fc 60 00 00 | 00 00 00 00 fb 00 49 6f |.c...`..|......Io|
|00000160| 44 65 6c 65 74 65 44 65 | 76 69 63 65 00 00 e5 00 |DeleteDe|vice....|
|00000170| 49 6f 41 74 74 61 63 68 | 44 65 76 69 63 65 54 6f |IoAttach|DeviceTo|
|00000180| 44 65 76 69 63 65 53 74 | 61 63 6b 00 70 01 4b 65 |DeviceSt|ack.p.Ke|
|00000190| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|000001a0| 76 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 53 70 |v.KeInit|ializeSp|
|000001b0| 69 6e 4c 6f 63 6b 00 00 | f3 00 49 6f 43 72 65 61 |inLock..|..IoCrea|
|000001c0| 74 65 44 65 76 69 63 65 | 00 00 44 02 4f 62 66 44 |teDevice|..D.ObfD|
|000001d0| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|000001e0| 00 00 b8 01 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |....KeWa|itForSin|
|000001f0| 67 6c 65 4f 62 6a 65 63 | 74 00 44 01 49 6f 66 43 |gleObjec|t.D.IofC|
|00000200| 61 6c 6c 44 72 69 76 65 | 72 00 3f 02 4f 62 52 65 |allDrive|r.?.ObRe|
|00000210| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|00000220| 61 6e 64 6c 65 00 51 02 | 50 73 43 72 65 61 74 65 |andle.Q.|PsCreate|
|00000230| 53 79 73 74 65 6d 54 68 | 72 65 61 64 00 00 45 01 |SystemTh|read..E.|
|00000240| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|00000250| 73 74 00 00 e7 01 4d 6d | 4d 61 70 4c 6f 63 6b 65 |st....Mm|MapLocke|
|00000260| 64 50 61 67 65 73 00 00 | d6 00 49 6e 74 65 72 6c |dPages..|..Interl|
|00000270| 6f 63 6b 65 64 44 65 63 | 72 65 6d 65 6e 74 00 00 |ockedDec|rement..|
|00000280| 42 00 45 78 46 72 65 65 | 50 6f 6f 6c 00 00 36 00 |B.ExFree|Pool..6.|
|00000290| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|000002a0| 74 68 54 61 67 00 78 00 | 45 78 66 49 6e 74 65 72 |thTag.x.|ExfInter|
|000002b0| 6c 6f 63 6b 65 64 52 65 | 6d 6f 76 65 48 65 61 64 |lockedRe|moveHead|
|000002c0| 4c 69 73 74 00 00 a2 01 | 4b 65 53 65 74 45 76 65 |List....|KeSetEve|
|000002d0| 6e 74 00 00 75 00 45 78 | 66 49 6e 74 65 72 6c 6f |nt..u.Ex|fInterlo|
|000002e0| 63 6b 65 64 49 6e 73 65 | 72 74 54 61 69 6c 4c 69 |ckedInse|rtTailLi|
|000002f0| 73 74 00 00 07 01 49 6f | 46 72 65 65 49 72 70 00 |st....Io|FreeIrp.|
|00000300| 08 01 49 6f 46 72 65 65 | 4d 64 6c 00 d3 01 4d 6d |..IoFree|Mdl...Mm|
|00000310| 42 75 69 6c 64 4d 64 6c | 46 6f 72 4e 6f 6e 50 61 |BuildMdl|ForNonPa|
|00000320| 67 65 64 50 6f 6f 6c 00 | e1 00 49 6f 41 6c 6c 6f |gedPool.|..IoAllo|
|00000330| 63 61 74 65 4d 64 6c 00 | e0 00 49 6f 41 6c 6c 6f |cateMdl.|..IoAllo|
|00000340| 63 61 74 65 49 72 70 00 | d9 00 49 6e 74 65 72 6c |cateIrp.|..Interl|
|00000350| 6f 63 6b 65 64 49 6e 63 | 72 65 6d 65 6e 74 00 00 |ockedInc|rement..|
|00000360| 62 00 45 78 51 75 65 75 | 65 57 6f 72 6b 49 74 65 |b.ExQueu|eWorkIte|
|00000370| 6d 00 54 02 50 73 47 65 | 74 43 75 72 72 65 6e 74 |m.T.PsGe|tCurrent|
|00000380| 50 72 6f 63 65 73 73 49 | 64 00 d7 00 49 6e 74 65 |ProcessI|d...Inte|
|00000390| 72 6c 6f 63 6b 65 64 45 | 78 63 68 61 6e 67 65 00 |rlockedE|xchange.|
|000003a0| ce 03 6d 65 6d 6d 6f 76 | 65 00 29 01 49 6f 52 65 |..memmov|e.).IoRe|
|000003b0| 6c 65 61 73 65 43 61 6e | 63 65 6c 53 70 69 6e 4c |leaseCan|celSpinL|
|000003c0| 6f 63 6b 00 86 01 4b 65 | 51 75 65 72 79 53 79 73 |ock...Ke|QuerySys|
|000003d0| 74 65 6d 54 69 6d 65 00 | fc 00 49 6f 44 65 6c 65 |temTime.|..IoDele|
|000003e0| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|000003f0| 5b 03 5a 77 43 6c 6f 73 | 65 00 11 01 49 6f 47 65 |[.ZwClos|e...IoGe|
|00000400| 74 52 65 6c 61 74 65 64 | 44 65 76 69 63 65 4f 62 |tRelated|DeviceOb|
|00000410| 6a 65 63 74 00 00 60 03 | 5a 77 43 72 65 61 74 65 |ject..`.|ZwCreate|
|00000420| 46 69 6c 65 00 00 d0 02 | 52 74 6c 49 6e 69 74 55 |File....|RtlInitU|
|00000430| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 e7 00 |nicodeSt|ring....|
|00000440| 49 6f 42 75 69 6c 64 44 | 65 76 69 63 65 49 6f 43 |IoBuildD|eviceIoC|
|00000450| 6f 6e 74 72 6f 6c 52 65 | 71 75 65 73 74 00 89 02 |ontrolRe|quest...|
|00000460| 52 74 6c 43 6f 6d 70 61 | 72 65 55 6e 69 63 6f 64 |RtlCompa|reUnicod|
|00000470| 65 53 74 72 69 6e 67 00 | b6 03 5f 73 74 72 6e 69 |eString.|.._strni|
|00000480| 63 6d 70 00 8b 03 5a 77 | 51 75 65 72 79 53 79 73 |cmp...Zw|QuerySys|
|00000490| 74 65 6d 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 00 00 |temInfor|mation..|
|000004a0| 86 02 52 74 6c 43 6f 6d | 70 61 72 65 4d 65 6d 6f |..RtlCom|pareMemo|
|000004b0| 72 79 00 00 f7 00 49 6f | 43 72 65 61 74 65 53 79 |ry....Io|CreateSy|
|000004c0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 8e 03 5a 77 |mbolicLi|nk....Zw|
|000004d0| 52 65 61 64 46 69 6c 65 | 00 00 83 03 5a 77 51 75 |ReadFile|....ZwQu|
|000004e0| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |eryInfor|mationFi|
|000004f0| 6c 65 00 00 77 02 52 74 | 6c 41 6e 73 69 53 74 72 |le..w.Rt|lAnsiStr|
|00000500| 69 6e 67 54 6f 55 6e 69 | 63 6f 64 65 53 74 72 69 |ingToUni|codeStri|
|00000510| 6e 67 00 00 cd 02 52 74 | 6c 49 6e 69 74 41 6e 73 |ng....Rt|lInitAns|
|00000520| 69 53 74 72 69 6e 67 00 | 57 02 50 73 47 65 74 56 |iString.|W.PsGetV|
|00000530| 65 72 73 69 6f 6e 00 00 | da 03 73 74 72 6e 63 6d |ersion..|..strncm|
|00000540| 70 00 0c 01 49 6f 47 65 | 74 43 75 72 72 65 6e 74 |p...IoGe|tCurrent|
|00000550| 50 72 6f 63 65 73 73 00 | 7a 02 52 74 6c 41 70 70 |Process.|z.RtlApp|
|00000560| 65 6e 64 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |endUnico|deString|
|00000570| 54 6f 53 74 72 69 6e 67 | 00 00 92 02 52 74 6c 43 |ToString|....RtlC|
|00000580| 6f 70 79 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |opyUnico|deString|
|00000590| 00 00 8a 03 5a 77 51 75 | 65 72 79 53 79 6d 62 6f |....ZwQu|erySymbo|
|000005a0| 6c 69 63 4c 69 6e 6b 4f | 62 6a 65 63 74 00 7d 03 |licLinkO|bject.}.|
|000005b0| 5a 77 4f 70 65 6e 53 79 | 6d 62 6f 6c 69 63 4c 69 |ZwOpenSy|mbolicLi|
|000005c0| 6e 6b 4f 62 6a 65 63 74 | 00 00 c0 02 52 74 6c 46 |nkObject|....RtlF|
|000005d0| 72 65 65 41 6e 73 69 53 | 74 72 69 6e 67 00 84 03 |reeAnsiS|tring...|
|000005e0| 5a 77 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |ZwQueryI|nformati|
|000005f0| 6f 6e 50 72 6f 63 65 73 | 73 00 3d 02 4f 62 51 75 |onProces|s.=.ObQu|
|00000600| 65 72 79 4e 61 6d 65 53 | 74 72 69 6e 67 00 0f 03 |eryNameS|tring...|
|00000610| 52 74 6c 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |RtlUnico|deString|
|00000620| 54 6f 41 6e 73 69 53 74 | 72 69 6e 67 00 00 6e 74 |ToAnsiSt|ring..nt|
|00000630| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 18 03 52 74 |oskrnl.e|xe....Rt|
|00000640| 6c 55 6e 77 69 6e 64 00 | 4b 00 4b 66 4c 6f 77 65 |lUnwind.|K.KfLowe|
|00000650| 72 49 72 71 6c 00 46 00 | 4b 65 52 61 69 73 65 49 |rIrql.F.|KeRaiseI|
|00000660| 72 71 6c 54 6f 44 70 63 | 4c 65 76 65 6c 00 4d 00 |rqlToDpc|Level.M.|
|00000670| 4b 66 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KfReleas|eSpinLoc|
|00000680| 6b 00 4a 00 4b 66 41 63 | 71 75 69 72 65 53 70 69 |k.J.KfAc|quireSpi|
|00000690| 6e 4c 6f 63 6b 00 4c 00 | 4b 66 52 61 69 73 65 49 |nLock.L.|KfRaiseI|
|000006a0| 72 71 6c 00 42 00 4b 65 | 47 65 74 43 75 72 72 65 |rql.B.Ke|GetCurre|
|000006b0| 6e 74 49 72 71 6c 00 00 | 48 41 4c 2e 64 6c 6c 00 |ntIrql..|HAL.dll.|
|000006c0| 1f 00 54 64 69 4d 61 70 | 55 73 65 72 52 65 71 75 |..TdiMap|UserRequ|
|000006d0| 65 73 74 00 54 44 49 2e | 53 59 53 00 00 00 00 00 |est.TDI.|SYS.....|
+--------+-------------------------+-------------------------+--------+--------+