Edit C:\Windows\System32\drivers\ksthunk.sys
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ 9y#|}M/}M/}M/}L/KM/??/xM/??/xM/??/~M/??/zM/??/|M/??/|M/Rich}M/ PE d? s?R ? " : ? L ? ? ? S ? ? `! 4E < M ?1 d ?Q ? P& `- ? ?$ ? .text ? ? ! ? h.rdata 4 ?$ ? ?$ @ H.data ? 1 ? 1 @ ?.pdata d ?1 ? ?1 @ HPAGE ` 4 ? 4 `INIT ?D ? ?D ?.rsrc M ? M @ B.reloc ?Q ? ?Q @ B H?@E3???9 ?3?? ???$WH? ?H??4 ?tH?t H??U" H?H?$0H? _??I?A? ? ?H?$H?$WH? I?A?H?? H?tL?L?D?H?H?A?R?? H?$0H?$8H? _??$H?$WH? I?A?H?? H?tL?L?D?H?H?A?R?? H?$0H?$8H? _??$H?$WH? I?A?H?? H?tL?L?D?H?H?A?R ?? H?$0H?$8H? _??$H?$WH? I?A?H??/ H?tL?L?D?H?H?A?R(?? H?$0H?$8H? _??$H?$H?$WH? H?? H?H?H?0H?3??? H??H?H?t!H;?H??9otH? H?u??tH;?3?H??q H?$0H?$8H?$@H?H? _?H?(I?3?3?V ? ??(??$WH? ?H??/ ?tH?t H??= H?H?$0H? _??H?$H?$WH? H?H?H?H??? H?H?H?H?H? H9t? ?)H?9?H?H??? H?$0H?$83?? _??H?$WH? H?H?H??? H?H?L?I9Xu(H9u#L?I?H?# ?H??V H?$03?? _? ?)?H?(H??# ? H?(?H?$H?$H?$ UH?H?PH?H?E?tD?0?E3??? D? ??t}?ti??V??C? t/?t?t? ?H?L? H??P?H?L? H??P?H?L? H??P8?:H?L? H??P0?+H?L? H??P(? H?L? H??P ? H?L? H??PD? ??? ??? ??? ??? ??#??? ?>H?8H?? ?! ? E3????? H?? H?H?H???H???H???H??? H???(H???0H??A? H?? H? X????H??????>H?8t?? ??? A? ? A;?H?$ H??3?3?3?C A? H?H??*??? H?? H?H???H???H???H??? H???(H???0H??A? H?? H? ???H??@?H?????A? ?H?? H?H???H???H???H??? H???(H???0H??A? ????? D??3??D?0?k D? H?$`H?$hH?$xA?H?P]????@SH? H?? H?H??t?j H?H? [??% ??H?H?H?H?H? AVH? H?? I?E?H?H??#??H?tL?L?E?H?H?A?R(?H??L ?tF?{@ t@?? / t$?t?uDL?H??. ?<L?H?? ?/H?@L?H?? ? ? / uL?H?H??# ?? H?$0H?$8H?$@H?$HH? A^?H?H?H?L? D?WATAUAVAWH?pM?H?L?H?? ? L?8A?L?$? ???= ?z@ t?D?H? ?S L? M?$I?$I?$H?$HL;59 ufH;49 u]?uYH?H? ?tN8O@u=H?p3?? H?$P? L?$XH?0H?$`H?$hL?$P3? A?T$8A?? A? ?? L;V8 ? H;Q8 uz?uv?$Lto?9Vrg8O@t D?H?p?? H?$ E3?3?3??H?? H?I??+* A??xA?L8?$? t I?(??BL3??H?[ 3?\$0?H?$? ?3?\$0?L?$pI?0I?8I?A_A^A]A\_??@SH? H??) ?xH?(?yL}?LH? [???$H?$H?$WH? H?? H?H?? ? A?CNw?d H?3??t!D?x3??? H?0L?HL?H??5- H?$0H?$8H?$@H? _??H?H?H? H?UATAUAVAWH???? E3??L?E?t ?* ? L?? H??- ?uI??? ?? M?0M9f@? H??6 H??H??D9$ru??XD?,uB A?H?@H;??, I?`?D?H?$ ?? ?? H? I?`H?L?2L?BH??? L?? H??H?H?H?L?????"L?'H???*H?:H?$(I?H???H???H??? H???(H???0H???8H???$?=X: ? E?XC?,D;? ? ?P I?H? ?t,A?$??? *H?L;????r? ;?? D?(E?M?uJ )E?M????, D;?? A??? ? A?? A?sth?& H?H?u ?? ?? H?$ H??4 H?L? ? H?$ ? H? H?%E?f?1H???1H???1 H???1H???1H???1"H?$(H?1*H???12?+H?1:H?1BH? VH??? I?`?? H?gfE?ZfE?XI?`L?E3?????? ?3?? L?$? I?8I?@I?HI?A_A^A]A\]???$WH? H?H?? ?H?H? H?H?H?f H??? ?t H??? H?H?$0H? _??hH?u????H?` ???$WH? ?EH?xH??V H?? 3?H?? tH?? 3???L H?$0H? _?H?$H?$H?$WATAUAVAWH? E3??H?M?hH?pD?0L??? @/ ? E?? A?M??? ?E?H?8A?H?A?0I??A??A?H?I??$A?$?0A?,?I??8t-E?t(H?hH?uD;??0AB??? ? H?M?0?P0A?L?H?+?????I??? ? ? t H?? H?H?H??? H?H?u??0E?xH?? ?H?8M?u 3?H?? tH??? 3???? H?$PH?$XH?$`? ?? A_A^A]A\_?H?$H?$WH? H?H?I?H??/ ?tn?{@ thL?? A?? / tD?t2?t ? @ t??? u;L?H?H??* ?0L?H?? ?#L?H?? ?H?(L?H?? ?? H?$0H?$8H? _????????H?? M?H?L?I?H?`?L?H?? M?H?L?I?H? ???$WH?@?H?? I?H??tA? H?$XH?$PL?A? / H?$8H?$X?$0 H?$(?H?03?D$ ?6 ?x??t?$X?H?$`H?@_?H?$H?$H?$ WATAUAVAWH?@?H?? L?L?M?M??? A? ?;?? ?????H?H;?? H?H;?? ??? ;?? ?? A?sth?? 3?H?H?u ? ?e H?A??H?A9?vA????H?H?A;r??0H?$pM?H?$8??$03?? / H?$(?$ ? ?? ? ?? ? ?? H?0H?$p3?H?$8?L??$03?? / H?$(?$ ?? ??? 9}u?$pH?I?8? ?$p? A?sth? H??? ??D???lH?0H?$pM?H?$8?$p3?D$0?A? / H?$(?$ ?U ??x3??A?H9;vH?????A??M?H;r?????I?8H?t H??? L?$@?I?8I?@I?HI?A_A^A]A\_???H?H?H?L? AVH? I?H?L?H?? ?H? H? t? ??s A? ?3?c?{@ tA? H??I ??u? ?L?? L? ? H??W =% ? =0 ??3?? ? H?$H?3??$0H?$8H?$@H? A^?H?? A? D?A???w A? ?3?E?tLH?A? H???H???H???H??? H???(H???0H??A? H?? ??A???H?L? D?H?SVWATAUAVAWH?? H?? ?$D3???$@H???H?$HH?? H?$? D?D?A????$? H9Zt?? A?s ? ? I?D?H? ?? H?$? H? ??????? ?? ?? ? ?8 A? s ? ?? E?A?(s ? ?? E?t[D?I?H?p?_ D?I?H?p?w A?SppI?? ?? L?H?$HH?u ? ?C M?H?pH?? H?$? H? H?H?$? H?H?$pH?H?$xH?H?$XH?$? A?? A?sth?~ L?H?$hH?u ? ?? H?$? I?$H?$pI?$H?$xI?$?$XI?$?$? I?$ A? v M???$? H? H? I?$(? H?$? H?$8D?$0L?$(A??$ M?3?? / H?$? H?0?Y L?$? A? ?$? H?8I??? H?$hM?t M?I?H?p? I??? H?$HD?@?$@? A?s ? ?? D?$? A?D;??2 C?/A;??% ?? A?Spp?? H??0I?D?H?p?g H?p D$XL?f~????)?? ? ?] ?$\I??$`A??$dA??&?$\I???$P?s???I???T$P?A?vM???pH?I? ? M?I?HNH?$? H? ? H?? H?H???H???H???H??? H???(H???0H??Y??? A??? ?$D? ? ?? L?$? ?9?H?$hH?t? H?$HH?t?? L?$? A? 3?|$DD?$@E?u A9] ???3??? A_A^A]A\_^[??L?I?WH?? ?H?? ?$`?I??D$P?$d?H?I??B M??D$pH?0I?I????D$0 I??3?? / ?$ ( ?? ?x ??t?$@? ?$H??$L?H?$? H?? _??I?I?UH?H?? ?H?? ??BI??E?E?BH?H??B L??E?B 3?E??0H?I????D$0 I??? / ?$ ( ? ?x??t?? ??K??KL?$? I?I? I?]???I?I?UI???? ?H?? ??I??E??H?H? H?0H?gI???'?$0( I???3?? / ?$ ?g ??x)??t!?'?G? ?/??H?7H?H??H?L?$? ?I?I? I?]?L?H?h?H?? ?$P?M??D$@?$T?3????0I?I??d$0 I?? A? / ?$ ?? H?h??H?0H?H? ?H?0H?H?`??0H?H?`??(H?= H9u!H?9 H9BuH???H??P3??(??(H?%? H?(L?H?0L??% ?tCI? I?8I?I?@I?I?HI?I?PI? I?XI?(I?`I?0I?hI?8I?p3?? ??(?????@?A? H ?A?H?I?H?I??I?? I? B ?@(?0A?8?4A?<?8A?@?<A?D?A? @ ?A?H?I?H?I??A?? A? B(?@ ?8A?0?<A?4?@A?8?DA?<?H?$WH? H?H??% H?H?H?$0H? _? % ????????ff ? H; i uH?f???u??? ?? ?)?%z ?% ?%? ?%? ?%? ?%? ?%V ???????? ????????H+?? I?OsXM?I?t D H? H?I??????tf ? ? H????A?u???fffff ? ?????H?rp??tL+?Bo?I??I?I? ? I? ?o ?oL H? fA?I????O???fffffff ? ffffff ? ?t? I??H???u?? ? ?????????H? r? D @H?? ???? ? ?o ?oL f?f?H?@?oD ?oL ???????? I? s?? $ M?I???????? ? ???????I??OsOM?I?tH? ??I???u??tf ? ? ?H????u???fffff ? ???H??tH??tL+???oD?@???I?I? ? I? ?oD ?oL ?? fAf I???T???fffffff ? ffffff ? ?t??? I???u?? ? ?????????H? ??w? H?? D @???? ? ?oD ?oL ??????@?oD ?o f?f? ???? I? s?? $ M?I?????????????I?r,?I?I?I?Gs`M?I??????u??t D A??I???fffffff ? fffffff ? fffffff ? ? ??tL+??H??I?M?I?I?t I?J? ??I??? O? ????H?H?H?H? H?(H?0H?8H?@I????t A??I??????? t l Q u e r y R e g i s t r y V a l u e s E x ? ? ? ? ? \K .K K ? ? ?J L :H JH \H lH ? ? ? ? ? I I I 4I LI H hI |I ? ? ? ? ? ? ? J J *J DJ TJ H ? ? ? ? ? ? ~G `G RG \I 0G PL lL s?R $ ?- ?- ? ?6 ? $7 ? 0 | ? ? ?5 ? ? h8 ? ? ? d9 ?8 ? l ?6 ? ? ? 0 | ? ? D ? ? ? ? ? ? ? ? 4 ? ? ? ? ? h8 ? ? ? ? ? ? ?; ?< ? )fHB?~G?????A?h` W ??V?? ? UYZy?/i?QF? ??? ? ? ?*? ?? ?? X X ? ? ? ? p p p p ? ? ? ? ? ? `?)?0?? ??[ @- P* ? ?, (+ , , , P- ?( ?? ?? `? ? ? x x ? ? ? ? `?e??? ?V???/)G?htk?? 1 ?$ RSDS?>??J?? N? M ksthunk.pdb 4 2p d 4 r p B 4 2p d 4 2 p d T 4 2p t d 4 ?P 20 4 ?p d T 4 ?p d T 4 rp t d T 4 2? d 4 ? ????p? ? ' 't% 'd$ '4# ' ????P d T 4 2????p d T 4 Rp t d T 4 R? t d T 4 R??? $ $ ????p`? ?= .> .> ?> &@ &@ 4 rp d T 4 r????p t d 4 2? ? L L ! ! ????p`0 ? \ ? ? 4 ?p t 4 ? P t 4 P ? 4 2p 2?-?+ ? ??? ? ? ? T. ? 0 `. 0 | `. | ? `. ? `. ? p. ? ? L. ? ? T. ? Q `. T ? T. ? ? L. ? ? ?. ? ? ?. ? ? ?. ? A ?. D j ?. l ? p. ? ? / ? 0 T. H ? T. ? </ ? `. ? w ?/ x ? ?/ ? k 0 ? U 00 X `0 ? l0 ? o |0 p ? ?0 ? 4 L. 4 ? L. L v ?0 9# ?0 @# 9$ ?0 4 ?4 0. ?4 _5 <. `5 ?5 L. ?5 6 ?. 6 ?6 ?. ?6 #7 ?. $7 f8 ?. h8 ?8 L. ?8 c9 ?. d9 : T. : `: T. `: ?; X/ ?; ?< l/ ?< 9= ?/ <= ^C ?/ ?D E `. H?$WH? H?H?H?=p L?$0A? H?????D??xDH?$0H?? D???H?1??H? H?I????H?0H?H?H? ? H?hA?H?$8H? _??H?$H?$WH?@?$` H?H?????d??H?H?u ? ?? H?L?$`H?H??P?txH? H?H??H?H?t?? A?" H?(H?$0A??3?D$( ?$ ? ?????x H?H?@H??$`?xH?H?H??PH?$`?yH?? H??P@?$`H?$PH?$XH?@_?H?(H? ???????H?tH?H?t H?? ?PH?(??????H?H?(H?%c????SH? H?8 H?t? ?DH?(????H?(H?8?0%` A0H?8H?(?H?HH?8H?(?4?4H?(?03?? [??H?$WH?PE3??H?A?H?$0????L?? H? \??I? H?I???I???I???I??? I???(I???0I???? H?? H???$0??H???8?[??= u H?$ H?$0E3?3?3????0H?$`H?P_?@SH? H?? H??xt? ?4E?uA??)H?8H?t????H?0 H?8 H?? H??P@3?? [?H?$H?$H?$WH?PI?H?H?E?u A?? A?9 ? H??H?H?t H?H??R???? ?? |H?H??????? E3??$0A???Q??H?? H?H?H???H???H???H??? H???(H???0H??A? H?? ??H?? H? ???H???$0??H???8????= uH?$ H?$0E3?3?3????H?t H??H??3??$`H?$hH?$pH?P_???(E?uA??H?t H?? ?3??(??H?A??H?H?H? ????L?I?I?I? WH?@H?3?I?H?M??A? H?I??_????xSH?$`H?M??H?$0???H?$0???L? ??L?H?H?? @HD??H?$ ???$`??????=4 ?????>2??$PH?$XH?$hH?@_?H?$WH? H?? A?CNw? ????H?H?td3?? H????H?H?0 H?8 H? H????H?H?????H?H?HH?H? H?E??H?H????3??@? ???3??H?$0H? _?H?$WH? H?h ?p H?H????H?L? H?H????3??(H?0I?????H?? H?$0H?hH?H? _??H?H?H? H?WH?0H? H?0H?H?? ?? ? A?CNw? ??\??H?H?t;D?3?????H?3????H????H?H?"??H?H????H??3?H?t&H?H??PH?L?$@H?2??H??H?H??PH?$@H?t+H?H??P?yH?$@H??P3??$@?H?$@H?u`? H?$@L? ???3?? H????$ ?V???x&H?$@H?H??P?yH?$@H??P3??$@?H?$@H??u??$HH?$PH?$XH?0_???I?I?I?I? AVH?0H?? I?M??@H?H?rdI?? E3?3?3??????A??t2H?????H?H?t"H????????xH?@H?@H??R??% ??3? ????% ??$HH?$PH?$X?H?$@H?0A^??I?I?I?I? ATAVAWH?0A?I?L?H??% ?teI?? E3?3?3?????H???L?8E?L?.????x(?H u ?? tE?LE:?H???H?(D?L??HH?3?P??H?$PH?$XH?$h?H?$`H?0A_A^A\??H?L? D?H?H?VWATAUAVAWH?? I?L?H?H?? H?$8H?$pD?D?$? A?0s A? ?? H? H?(3?IL????H?H?$hH?u ?? ?? A?sthI?? ?1??L?H?$xH?u H??+???H?$8A? I?I?p??/ u?@????`??M?I?pI????H?$8?.H?$? ?L?$? H?$pH?$8D?$? H?$hL?$xM?A?0?@/ uA?@3??$HH?$? 3??$PM?L?$`D?$\?$03??$@?$X9? E?? E;&? ??D$0A?(?tRA? ?A? ????A? A9V$v ? ?|??H? A?A?(H?$ A?????H?u ? ?Q??3???0vVH?$? H?hH?t3?$? H?3?P ??$? H?0H;? ? ? ???$? ???$? ?????$@H?8H??$@?$XA?D+??$\L??$`?$0???L?M?tgA? A?@I?????A? ? fA? ?tI?? ?$( @?$ E3?3??I?????H?$? H?u ? ?V??M?6?H?$@?H?$? ?L?$? H?$pH?$8H?$hL?$xH?$? H?$HH?H?$PD?$\?$XH?$@?? ? E?t? ?? ? ?H?? A?sth?e??L?H?$HL?L?$PL?$? L?$8L?$@H?u ?? ?? A?A?E?M?L?$`M?L??$0?? ??D$0E3??$? A??0v??????D??$? A?8A?A?A?I?I?A?A?A?A?I?I?A? A? A?$A?$M?tEA?$ tI?$?'?$( @?$ E3?3??I?????D?$? I?(H?? ?I?( A?,A?0E?A?0I?0? ?$? t9H?$? H?hH?uE;? I?8????? ?H?M?8?P(?$? ??x5A?L??L??$`M?tM?$$?$0L?$? ?t????? ??$? L?$PL?$@L?$8L?$H?? ? H?? I? H?8H???0H??B?A???b? D???p?@ I?? ?HI?xM?? I?? H?? H? ???H????@?H?`??I?hI? H?H?8????? ?H?t3? ? t H?????H?H?H??V??H?H?u???\??M?t I?????3??? A_A^A]A\_^???H;???u H????H9AtBH;??u H???H9At,H;???u H????H9AtH;???uH????H9Au? ?3???????K S ????? ? ???(?? \ { 1 4 6 F 1 A 8 0 - 4 7 9 1 - 1 1 D 0 - A 5 D 6 - 2 8 D B 0 4 C 1 0 0 0 0 } ?,/???)a?? H?$H?$WH? H?H?A?CNw? ? ?]??H?H?tH?H?H?F??H??3??u? ? H??#????yL?? H?A?PH?$0H?$8?H? _?????H?tH?2?-?+ H;? H?H????? ?)??E rJ ?$ pE HL ?$ ? ? ? ? \K .K K ? ? ?J L :H JH \H lH ? ? ? ? ? I I I 4I LI H hI |I ? ? ? ? ? ? ? J J *J DJ TJ H ? ? ? ? ? ? ~G `G RG \I 0G PL lL D IoAllocateDriverObjectExtension ExFreePool m IoGetDriverObjectExtension \ IoDeleteDevice ? KeSetEvent ? KeInitializeEvent ? KeReleaseSpinLock ^ IoDetachDevice PoStartNextPowerIrp ? IofCompleteRequest ? KeWaitForSingleObject J IoAttachDeviceToDeviceStack PoCallDriver R IoCreateDevice ? IofCallDriver ? KeAcquireSpinLockRaiseToDpc ExAllocatePoolWithTag ? KeInitializeMutex FRtlInitUnicodeString ? MmGetSystemRoutineAddress SRtlQueryRegistryValues jZwClose ?_purecall y IoOpenDeviceRegistryKey ? KeInitializeSpinLock ProbeForRead ?_wcsnicmp v IoIs32bitProcess ? KeReleaseMutex 2 ExRaiseStatus ProbeForWrite d IoFreeMdl O IoCancelIrp ? MmMapLockedPagesSpecifyCache c IoFreeIrp ? MmProbeAndLockPages F IoAllocateIrp ? MmUnlockPages ~ IoReleaseCancelSpinLock G IoAllocateMdl ExAllocatePoolWithQuotaTag ntoskrnl.exe KoCreateInstance ?IndirectedQueryInterface@CBaseUnknown@@UEAAJAEBU_GUID@@PEAPEAX@Z ?IndirectedRelease@CBaseUnknown@@UEAAKXZ ?IndirectedAddRef@CBaseUnknown@@UEAAKXZ ?NonDelegatedRelease@CBaseUnknown@@UEAAKXZ ?NonDelegatedAddRef@CBaseUnknown@@UEAAKXZ ??1CBaseUnknown@@UEAA@XZ ??0CBaseUnknown@@QEAA@PEAUIUnknown@@@Z ? KsSynchronousIoControlDevice ? KsPropertyHandler ?NonDelegatedQueryInterface@CBaseUnknown@@UEAAJAEBU_GUID@@PEAPEAX@Z ks.sys ?IoIsInitiator32bitProcess ?__C_specific_handler ? 0 ? H `M ? ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? S t r i n g F i l e I n f o ? 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n n # F i l e D e s c r i p t i o n K e r n e l S t r e a m i n g W O W T h u n k S e r v i c e r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) 8 I n t e r n a l N a m e k s t h u n k . s y s ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . @ O r i g i n a l F i l e n a m e k s t h u n k . s y s j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ? ? ????????????????? ???? ?(?0?8????????????????????????? ???? ?(???è??? ?8??????? ?????????????????(?8????? ???? 0 ?
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de