/ PC World 2008 May (DVD) / PCWorld_2008-05_DVD.iso / system / sysinternals / SysinternalsSuite.exe / RootkitRevealer.exe / 26 / 177 / INIT

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| a8 09 00 00 00 00 00 00 | 00 00 00 00 8e 0b 00 00 |........|........|
|00000010| 80 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| 00 00 00 00 00 00 00 00 | 1e 0a 00 00 2a 0a 00 00 |........|....*...|
|00000030| 3c 0a 00 00 52 0a 00 00 | 6c 0a 00 00 78 0a 00 00 |<...R...|l...x...|
|00000040| 90 0a 00 00 a6 0a 00 00 | b0 0a 00 00 10 0a 00 00 |........|........|
|00000050| e0 0a 00 00 f4 0a 00 00 | 08 0b 00 00 22 0b 00 00 |........|...."...|
|00000060| 34 0b 00 00 4c 0b 00 00 | 64 0b 00 00 76 0b 00 00 |4...L...|d...v...|
|00000070| 9c 0b 00 00 c6 0a 00 00 | 00 0a 00 00 00 00 00 00 |........|........|
|00000080| 60 03 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |`.ZwCrea|teFile..|
|00000090| 8e 03 5a 77 52 65 61 64 | 46 69 6c 65 00 00 92 03 |..ZwRead|File....|
|000000a0| 5a 77 53 61 76 65 4b 65 | 79 00 62 03 5a 77 43 72 |ZwSaveKe|y.b.ZwCr|
|000000b0| 65 61 74 65 53 65 63 74 | 69 6f 6e 00 74 03 5a 77 |eateSect|ion.t.Zw|
|000000c0| 4d 61 70 56 69 65 77 4f | 66 53 65 63 74 69 6f 6e |MapViewO|fSection|
|000000d0| 00 00 83 03 5a 77 51 75 | 65 72 79 49 6e 66 6f 72 |....ZwQu|eryInfor|
|000000e0| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 79 03 5a 77 |mationFi|le..y.Zw|
|000000f0| 4f 70 65 6e 4b 65 79 00 | d0 02 52 74 6c 49 6e 69 |OpenKey.|..RtlIni|
|00000100| 74 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |tUnicode|String..|
|00000110| 0c 01 49 6f 47 65 74 43 | 75 72 72 65 6e 74 50 72 |..IoGetC|urrentPr|
|00000120| 6f 63 65 73 73 00 da 03 | 73 74 72 6e 63 6d 70 00 |ocess...|strncmp.|
|00000130| 45 01 49 6f 66 43 6f 6d | 70 6c 65 74 65 52 65 71 |E.IofCom|pleteReq|
|00000140| 75 65 73 74 00 00 47 03 | 53 65 52 65 6c 65 61 73 |uest..G.|SeReleas|
|00000150| 65 53 75 62 6a 65 63 74 | 43 6f 6e 74 65 78 74 00 |eSubject|Context.|
|00000160| 40 03 53 65 50 72 69 76 | 69 6c 65 67 65 43 68 65 |@.SePriv|ilegeChe|
|00000170| 63 6b 00 00 45 00 45 78 | 47 65 74 50 72 65 76 69 |ck..E.Ex|GetPrevi|
|00000180| 6f 75 73 4d 6f 64 65 00 | 32 03 53 65 43 61 70 74 |ousMode.|2.SeCapt|
|00000190| 75 72 65 53 75 62 6a 65 | 63 74 43 6f 6e 74 65 78 |ureSubje|ctContex|
|000001a0| 74 00 fb 00 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |t...IoDe|leteDevi|
|000001b0| 63 65 00 00 fc 00 49 6f | 44 65 6c 65 74 65 53 79 |ce....Io|DeleteSy|
|000001c0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 f7 00 49 6f |mbolicLi|nk....Io|
|000001d0| 43 72 65 61 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |CreateSy|mbolicLi|
|000001e0| 6e 6b 00 00 f3 00 49 6f | 43 72 65 61 74 65 44 65 |nk....Io|CreateDe|
|000001f0| 76 69 63 65 00 00 36 00 | 45 78 41 6c 6c 6f 63 61 |vice..6.|ExAlloca|
|00000200| 74 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 00 6e 74 |tePoolWi|thTag.nt|
|00000210| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 18 03 52 74 |oskrnl.e|xe....Rt|
|00000220| 6c 55 6e 77 69 6e 64 00 | 48 41 4c 2e 64 6c 6c 00 |lUnwind.|HAL.dll.|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+