/ PC World 2006 October / PCWorld_2006-10_cd.bin / v cisle / who / WhoLockMe104.exe / WhoLockMe.exe / BINARY / DRV / INIT

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 68 0b 00 00 00 00 00 00 | 00 00 00 00 46 0d 00 00 |h.......|....F...|
|00000010| 60 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |`.......|........|
|00000020| 00 00 00 00 00 00 00 00 | bc 0b 00 00 d0 0b 00 00 |........|........|
|00000030| da 0b 00 00 fa 0b 00 00 | 0e 0c 00 00 22 0c 00 00 |........|...."...|
|00000040| 2c 0c 00 00 40 0c 00 00 | 50 0c 00 00 62 0c 00 00 |,...@...|P...b...|
|00000050| 7a 0c 00 00 96 0c 00 00 | a8 0c 00 00 c6 0c 00 00 |z.......|........|
|00000060| dc 0c 00 00 f2 0c 00 00 | 04 0d 00 00 1c 0d 00 00 |........|........|
|00000070| 34 0d 00 00 54 0d 00 00 | 00 00 00 00 c0 02 52 74 |4...T...|......Rt|
|00000080| 6c 46 72 65 65 41 6e 73 | 69 53 74 72 69 6e 67 00 |lFreeAns|iString.|
|00000090| db 03 73 74 72 6e 63 70 | 79 00 0f 03 52 74 6c 55 |..strncp|y...RtlU|
|000000a0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 41 6e |nicodeSt|ringToAn|
|000000b0| 73 69 53 74 72 69 6e 67 | 00 00 3d 02 4f 62 51 75 |siString|..=.ObQu|
|000000c0| 65 72 79 4e 61 6d 65 53 | 74 72 69 6e 67 00 df 01 |eryNameS|tring...|
|000000d0| 4d 6d 49 73 41 64 64 72 | 65 73 73 56 61 6c 69 64 |MmIsAddr|essValid|
|000000e0| 00 00 5b 03 5a 77 43 6c | 6f 73 65 00 69 03 5a 77 |..[.ZwCl|ose.i.Zw|
|000000f0| 44 75 70 6c 69 63 61 74 | 65 4f 62 6a 65 63 74 00 |Duplicat|eObject.|
|00000100| 7a 03 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 00 |z.ZwOpen|Process.|
|00000110| 59 01 4b 65 44 65 74 61 | 63 68 50 72 6f 63 65 73 |Y.KeDeta|chProces|
|00000120| 73 00 44 02 4f 62 66 44 | 65 72 65 66 65 72 65 6e |s.D.ObfD|ereferen|
|00000130| 63 65 4f 62 6a 65 63 74 | 00 00 3f 02 4f 62 52 65 |ceObject|..?.ObRe|
|00000140| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|00000150| 61 6e 64 6c 65 00 4f 01 | 4b 65 41 74 74 61 63 68 |andle.O.|KeAttach|
|00000160| 50 72 6f 63 65 73 73 00 | 5b 02 50 73 4c 6f 6f 6b |Process.|[.PsLook|
|00000170| 75 70 50 72 6f 63 65 73 | 73 42 79 50 72 6f 63 65 |upProces|sByProce|
|00000180| 73 73 49 64 00 00 7b 03 | 5a 77 4f 70 65 6e 50 72 |ssId..{.|ZwOpenPr|
|00000190| 6f 63 65 73 73 54 6f 6b | 65 6e 00 00 45 01 49 6f |ocessTok|en..E.Io|
|000001a0| 66 43 6f 6d 70 6c 65 74 | 65 52 65 71 75 65 73 74 |fComplet|eRequest|
|000001b0| 00 00 fb 00 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |....IoDe|leteDevi|
|000001c0| 63 65 00 00 d0 02 52 74 | 6c 49 6e 69 74 55 6e 69 |ce....Rt|lInitUni|
|000001d0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 f7 00 49 6f |codeStri|ng....Io|
|000001e0| 43 72 65 61 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |CreateSy|mbolicLi|
|000001f0| 6e 6b 00 00 f3 00 49 6f | 43 72 65 61 74 65 44 65 |nk....Io|CreateDe|
|00000200| 76 69 63 65 00 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |vice..nt|oskrnl.e|
|00000210| 78 65 00 00 18 03 52 74 | 6c 55 6e 77 69 6e 64 00 |xe....Rt|lUnwind.|
+--------+-------------------------+-------------------------+--------+--------+