home *** CD-ROM | disk | FTP | other *** search
Unknown | 1999-11-16 | 2.7 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
| |
100%
| gt2
| Kopftext: 'DXB!DriverEntry'
| default (weak)
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 0a 44 58 42 21 44 72 69 | 76 65 72 45 6e 74 72 79 |.DXB!Dri|verEntry|
|00000010| 3a 0a 20 20 20 67 44 65 | 62 75 67 4d 61 73 6b 20 |:. gDe|bugMask |
|00000020| 20 20 20 20 20 20 20 20 | 3d 20 30 78 25 78 0a 20 | |= 0x%x. |
|00000030| 20 20 67 44 65 62 75 67 | 4d 6f 64 65 20 20 20 20 | gDebug|Mode |
|00000040| 20 20 20 20 20 3d 20 30 | 78 25 78 0a 20 20 20 44 | = 0|x%x. D|
|00000050| 69 67 69 44 6f 6e 74 4c | 6f 61 64 44 72 69 76 65 |igiDontL|oadDrive|
|00000060| 72 20 3d 20 30 78 25 78 | 0a 0a 00 00 44 00 65 00 |r = 0x%x|....D.e.|
|00000070| 62 00 75 00 67 00 42 00 | 72 00 65 00 61 00 6b 00 |b.u.g.B.|r.e.a.k.|
|00000080| 00 00 55 8b ec 51 53 56 | 57 68 88 cb 01 00 68 78 |..U..QSV|Wh....hx|
|00000090| cb 01 00 33 f6 68 7c cb | 01 00 68 e0 4b 02 00 89 |...3.h|.|..h.K...|
|000000a0| 75 fc e8 01 5f ff ff 8b | 7d 08 8b 5d 0c 83 c4 10 |u..._...|}..]....|
|000000b0| 89 3d ac 4b 02 00 56 56 | ff 73 04 68 80 cb 01 00 |.=.K..VV|.s.h....|
|000000c0| e8 2e 69 ff ff be 00 00 | 00 c0 89 45 08 23 c6 3b |..i.....|...E.#.;|
|000000d0| c6 0f 84 94 00 00 00 ff | 73 04 8d 45 fc 50 e8 2e |........|s..E.P..|
|000000e0| 6a ff ff 89 45 08 23 c6 | 3b c6 74 7f 33 db 8d 45 |j...E.#.|;.t.3..E|
|000000f0| 0c 53 53 50 68 4c 4c 02 | 00 ff 75 fc 89 5d 0c e8 |.SSPhLL.|..u..]..|
|00000100| 5b 6b ff ff 39 5d 0c 74 | 05 e8 94 5e ff ff 80 3d |[k..9].t|...^...=|
|00000110| 88 cb 01 00 00 74 09 c7 | 45 08 20 01 00 c0 eb 4b |.....t..|E. ....K|
|00000120| 8b 47 18 c7 47 34 80 04 | 01 00 c7 47 38 34 0f 01 |.G..G4..|...G84..|
|00000130| 00 c7 47 40 8c 0f 01 00 | c7 47 70 bc 0f 01 00 c7 |..G@....|.Gp.....|
|00000140| 87 80 00 00 00 b2 10 01 | 00 c7 47 78 4a 12 01 00 |........|..GxJ...|
|00000150| c7 87 a4 00 00 00 d8 15 | 01 00 c7 87 90 00 00 00 |........|........|
|00000160| 34 16 01 00 c7 40 04 fe | 12 01 00 83 7d fc 00 74 |4....@..|....}..t|
|00000170| 08 ff 75 fc e8 46 6a ff | ff 8b 45 08 23 c6 3b c6 |..u..Fj.|..E.#.;.|
|00000180| 75 0a 68 80 cb 01 00 e8 | 37 69 ff ff 8b 45 08 5f |u.h.....|7i...E._|
|00000190| 5e 5b c9 c2 08 00 cc cc | d8 4d 01 00 00 00 00 00 |^[......|.M......|
|000001a0| 00 00 00 00 52 54 01 00 | 04 c1 00 00 b4 4d 01 00 |....RT..|.....M..|
|000001b0| 00 00 00 00 00 00 00 00 | 0a 55 01 00 e0 c0 00 00 |........|.U......|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 00 00 00 00 f6 54 01 00 | e4 54 01 00 c8 54 01 00 |.....T..|.T...T..|
|000001e0| ae 54 01 00 9e 54 01 00 | 88 54 01 00 74 54 01 00 |.T...T..|.T..tT..|
|000001f0| 60 54 01 00 00 00 00 00 | 00 50 01 00 36 50 01 00 |`T......|.P..6P..|
|00000200| 4c 50 01 00 56 50 01 00 | 60 50 01 00 82 50 01 00 |LP..VP..|`P...P..|
|00000210| 9a 50 01 00 b0 50 01 00 | c8 50 01 00 e0 50 01 00 |.P...P..|.P...P..|
|00000220| f0 50 01 00 00 51 01 00 | 14 51 01 00 20 51 01 00 |.P...Q..|.Q.. Q..|
|00000230| 2e 51 01 00 48 51 01 00 | 5a 51 01 00 72 51 01 00 |.Q..HQ..|ZQ..rQ..|
|00000240| 90 51 01 00 a2 51 01 00 | ba 51 01 00 d0 51 01 00 |.Q...Q..|.Q...Q..|
|00000250| f2 51 01 00 0a 52 01 00 | 12 50 01 00 1c 50 01 00 |.Q...R..|.P...P..|
|00000260| 4e 52 01 00 5c 52 01 00 | 7c 52 01 00 9a 52 01 00 |NR..\R..||R...R..|
|00000270| b0 52 01 00 ca 52 01 00 | da 52 01 00 f8 52 01 00 |.R...R..|.R...R..|
|00000280| 16 53 01 00 2e 53 01 00 | 30 4f 01 00 3c 4f 01 00 |.S...S..|0O..<O..|
|00000290| 82 53 01 00 9a 53 01 00 | b0 53 01 00 c6 53 01 00 |.S...S..|.S...S..|
|000002a0| d8 53 01 00 ec 53 01 00 | fa 53 01 00 0e 54 01 00 |.S...S..|.S...T..|
|000002b0| 1e 54 01 00 2e 54 01 00 | 42 54 01 00 ee 4f 01 00 |.T...T..|BT...O..|
|000002c0| d2 4f 01 00 c6 4f 01 00 | aa 4f 01 00 94 4f 01 00 |.O...O..|.O...O..|
|000002d0| 7c 4f 01 00 60 4f 01 00 | 36 52 01 00 22 52 01 00 ||O..`O..|6R.."R..|
|000002e0| 20 4f 01 00 12 55 01 00 | 1c 55 01 00 3e 55 01 00 | O...U..|.U..>U..|
|000002f0| 5e 55 01 00 6a 55 01 00 | 7a 55 01 00 8a 55 01 00 |^U..jU..|zU...U..|
|00000300| 9c 55 01 00 ae 55 01 00 | c0 55 01 00 cc 55 01 00 |.U...U..|.U...U..|
|00000310| dc 55 01 00 fc 55 01 00 | 12 56 01 00 22 56 01 00 |.U...U..|.V.."V..|
|00000320| 36 56 01 00 44 56 01 00 | 5e 56 01 00 6e 56 01 00 |6V..DV..|^V..nV..|
|00000330| 86 56 01 00 46 53 01 00 | 64 53 01 00 00 00 00 00 |.V..FS..|dS......|
|00000340| 2a 00 44 62 67 42 72 65 | 61 6b 50 6f 69 6e 74 00 |*.DbgBre|akPoint.|
|00000350| 2d 00 44 62 67 50 72 69 | 6e 74 00 00 84 01 49 6f |-.DbgPri|nt....Io|
|00000360| 55 6e 72 65 67 69 73 74 | 65 72 53 68 75 74 64 6f |Unregist|erShutdo|
|00000370| 77 6e 4e 6f 74 69 66 69 | 63 61 74 69 6f 6e 00 00 |wnNotifi|cation..|
|00000380| f4 02 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |..RtlApp|endUnico|
|00000390| 64 65 54 6f 53 74 72 69 | 6e 67 00 00 5a 03 52 74 |deToStri|ng..Z.Rt|
|000003a0| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|000003b0| 6e 67 00 00 38 01 49 6f | 47 65 74 44 65 76 69 63 |ng..8.Io|GetDevic|
|000003c0| 65 50 72 6f 70 65 72 74 | 79 00 64 03 52 74 6c 49 |ePropert|y.d.RtlI|
|000003d0| 6e 74 65 67 65 72 54 6f | 55 6e 69 63 6f 64 65 53 |ntegerTo|UnicodeS|
|000003e0| 74 72 69 6e 67 00 9a 04 | 73 77 70 72 69 6e 74 66 |tring...|swprintf|
|000003f0| 00 00 ac 03 52 74 6c 55 | 6e 69 63 6f 64 65 53 74 |....RtlU|nicodeSt|
|00000400| 72 69 6e 67 54 6f 49 6e | 74 65 67 65 72 00 15 01 |ringToIn|teger...|
|00000410| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|00000420| 1f 01 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |..IoDele|teDevice|
|00000430| 00 00 05 04 5a 77 43 6c | 6f 73 65 00 4f 01 49 6f |....ZwCl|ose.O.Io|
|00000440| 4f 70 65 6e 44 65 76 69 | 63 65 52 65 67 69 73 74 |OpenDevi|ceRegist|
|00000450| 72 79 4b 65 79 00 8f 01 | 49 6f 66 43 6f 6d 70 6c |ryKey...|IofCompl|
|00000460| 65 74 65 52 65 71 75 65 | 73 74 00 00 a3 04 77 63 |eteReque|st....wc|
|00000470| 73 63 70 79 00 00 a5 04 | 77 63 73 6c 65 6e 00 00 |scpy....|wcslen..|
|00000480| f3 02 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |..RtlApp|endUnico|
|00000490| 64 65 53 74 72 69 6e 67 | 54 6f 53 74 72 69 6e 67 |deString|ToString|
|000004a0| 00 00 0d 03 52 74 6c 43 | 6f 70 79 55 6e 69 63 6f |....RtlC|opyUnico|
|000004b0| 64 65 53 74 72 69 6e 67 | 00 00 b2 02 4f 62 66 52 |deString|....ObfR|
|000004c0| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|000004d0| 3a 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |:.ExAllo|catePool|
|000004e0| 57 69 74 68 54 61 67 00 | 0c 02 4b 65 57 61 69 74 |WithTag.|..KeWait|
|000004f0| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|00000500| 8e 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |..IofCal|lDriver.|
|00000510| fd 00 49 6f 41 6c 6c 6f | 63 61 74 65 49 72 70 00 |..IoAllo|cateIrp.|
|00000520| bc 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |..KeInit|ializeEv|
|00000530| 65 6e 74 00 2c 01 49 6f | 46 72 65 65 49 72 70 00 |ent.,.Io|FreeIrp.|
|00000540| f3 01 4b 65 53 65 74 45 | 76 65 6e 74 00 00 a3 01 |..KeSetE|vent....|
|00000550| 4b 65 44 65 6c 61 79 45 | 78 65 63 75 74 69 6f 6e |KeDelayE|xecution|
|00000560| 54 68 72 65 61 64 00 00 | 22 01 49 6f 44 65 74 61 |Thread..|".IoDeta|
|00000570| 63 68 44 65 76 69 63 65 | 00 00 21 01 49 6f 44 65 |chDevice|..!.IoDe|
|00000580| 6c 65 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |leteSymb|olicLink|
|00000590| 00 00 03 01 49 6f 41 74 | 74 61 63 68 44 65 76 69 |....IoAt|tachDevi|
|000005a0| 63 65 54 6f 44 65 76 69 | 63 65 53 74 61 63 6b 00 |ceToDevi|ceStack.|
|000005b0| be 02 50 6f 53 65 74 50 | 6f 77 65 72 53 74 61 74 |..PoSetP|owerStat|
|000005c0| 65 00 c2 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |e...KeIn|itialize|
|000005d0| 53 70 69 6e 4c 6f 63 6b | 00 00 c0 02 50 6f 53 74 |SpinLock|....PoSt|
|000005e0| 61 72 74 4e 65 78 74 50 | 6f 77 65 72 49 72 70 00 |artNextP|owerIrp.|
|000005f0| 62 01 49 6f 52 65 67 69 | 73 74 65 72 53 68 75 74 |b.IoRegi|sterShut|
|00000600| 64 6f 77 6e 4e 6f 74 69 | 66 69 63 61 74 69 6f 6e |downNoti|fication|
|00000610| 00 00 1b 01 49 6f 43 72 | 65 61 74 65 53 79 6d 62 |....IoCr|eateSymb|
|00000620| 6f 6c 69 63 4c 69 6e 6b | 00 00 2d 03 52 74 6c 45 |olicLink|..-.RtlE|
|00000630| 71 75 61 6c 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |qualUnic|odeStrin|
|00000640| 67 00 57 03 52 74 6c 49 | 6e 69 74 41 6e 73 69 53 |g.W.RtlI|nitAnsiS|
|00000650| 74 72 69 6e 67 00 fc 03 | 57 52 49 54 45 5f 52 45 |tring...|WRITE_RE|
|00000660| 47 49 53 54 45 52 5f 55 | 4c 4f 4e 47 00 00 47 00 |GISTER_U|LONG..G.|
|00000670| 45 78 46 72 65 65 50 6f | 6f 6c 00 00 aa 03 52 74 |ExFreePo|ol....Rt|
|00000680| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00000690| 41 6e 73 69 53 74 72 69 | 6e 67 00 00 47 01 49 6f |AnsiStri|ng..G.Io|
|000006a0| 49 6e 76 61 6c 69 64 61 | 74 65 44 65 76 69 63 65 |Invalida|teDevice|
|000006b0| 52 65 6c 61 74 69 6f 6e | 73 00 f2 00 49 6e 74 65 |Relation|s...Inte|
|000006c0| 72 6c 6f 63 6b 65 64 45 | 78 63 68 61 6e 67 65 00 |rlockedE|xchange.|
|000006d0| 63 01 49 6f 52 65 6c 65 | 61 73 65 43 61 6e 63 65 |c.IoRele|aseCance|
|000006e0| 6c 53 70 69 6e 4c 6f 63 | 6b 00 45 02 4d 6d 4d 61 |lSpinLoc|k.E.MmMa|
|000006f0| 70 49 6f 53 70 61 63 65 | 00 00 f8 03 57 52 49 54 |pIoSpace|....WRIT|
|00000700| 45 5f 52 45 47 49 53 54 | 45 52 5f 42 55 46 46 45 |E_REGIST|ER_BUFFE|
|00000710| 52 5f 55 43 48 41 52 00 | f9 03 57 52 49 54 45 5f |R_UCHAR.|..WRITE_|
|00000720| 52 45 47 49 53 54 45 52 | 5f 42 55 46 46 45 52 5f |REGISTER|_BUFFER_|
|00000730| 55 4c 4f 4e 47 00 fd 03 | 57 52 49 54 45 5f 52 45 |ULONG...|WRITE_RE|
|00000740| 47 49 53 54 45 52 5f 55 | 53 48 4f 52 54 00 fb 03 |GISTER_U|SHORT...|
|00000750| 57 52 49 54 45 5f 52 45 | 47 49 53 54 45 52 5f 55 |WRITE_RE|GISTER_U|
|00000760| 43 48 41 52 00 00 e2 02 | 52 45 41 44 5f 52 45 47 |CHAR....|READ_REG|
|00000770| 49 53 54 45 52 5f 42 55 | 46 46 45 52 5f 55 43 48 |ISTER_BU|FFER_UCH|
|00000780| 41 52 00 00 e3 02 52 45 | 41 44 5f 52 45 47 49 53 |AR....RE|AD_REGIS|
|00000790| 54 45 52 5f 42 55 46 46 | 45 52 5f 55 4c 4f 4e 47 |TER_BUFF|ER_ULONG|
|000007a0| 00 00 e7 02 52 45 41 44 | 5f 52 45 47 49 53 54 45 |....READ|_REGISTE|
|000007b0| 52 5f 55 53 48 4f 52 54 | 00 00 e5 02 52 45 41 44 |R_USHORT|....READ|
|000007c0| 5f 52 45 47 49 53 54 45 | 52 5f 55 43 48 41 52 00 |_REGISTE|R_UCHAR.|
|000007d0| e6 02 52 45 41 44 5f 52 | 45 47 49 53 54 45 52 5f |..READ_R|EGISTER_|
|000007e0| 55 4c 4f 4e 47 00 bb 01 | 4b 65 49 6e 69 74 69 61 |ULONG...|KeInitia|
|000007f0| 6c 69 7a 65 44 70 63 00 | c3 01 4b 65 49 6e 69 74 |lizeDpc.|..KeInit|
|00000800| 69 61 6c 69 7a 65 54 69 | 6d 65 72 00 00 02 4b 65 |ializeTi|mer...Ke|
|00000810| 53 65 74 54 69 6d 65 72 | 00 00 e8 01 4b 65 52 65 |SetTimer|....KeRe|
|00000820| 6d 6f 76 65 51 75 65 75 | 65 44 70 63 00 00 9f 01 |moveQueu|eDpc....|
|00000830| 4b 65 43 61 6e 63 65 6c | 54 69 6d 65 72 00 59 03 |KeCancel|Timer.Y.|
|00000840| 52 74 6c 49 6e 69 74 53 | 74 72 69 6e 67 00 bc 02 |RtlInitS|tring...|
|00000850| 50 6f 52 65 71 75 65 73 | 74 50 6f 77 65 72 49 72 |PoReques|tPowerIr|
|00000860| 70 00 b7 02 50 6f 43 61 | 6c 6c 44 72 69 76 65 72 |p...PoCa|llDriver|
|00000870| 00 00 6e 74 6f 73 6b 72 | 6e 6c 2e 65 78 65 00 00 |..ntoskr|nl.exe..|
|00000880| 52 00 4b 66 52 65 6c 65 | 61 73 65 53 70 69 6e 4c |R.KfRele|aseSpinL|
|00000890| 6f 63 6b 00 4f 00 4b 66 | 41 63 71 75 69 72 65 53 |ock.O.Kf|AcquireS|
|000008a0| 70 69 6e 4c 6f 63 6b 00 | 12 00 48 61 6c 46 72 65 |pinLock.|..HalFre|
|000008b0| 65 43 6f 6d 6d 6f 6e 42 | 75 66 66 65 72 00 13 00 |eCommonB|uffer...|
|000008c0| 48 61 6c 47 65 74 41 64 | 61 70 74 65 72 00 07 00 |HalGetAd|apter...|
|000008d0| 48 61 6c 41 6c 6c 6f 63 | 61 74 65 43 6f 6d 6d 6f |HalAlloc|ateCommo|
|000008e0| 6e 42 75 66 66 65 72 00 | 46 00 4b 65 51 75 65 72 |nBuffer.|F.KeQuer|
|000008f0| 79 50 65 72 66 6f 72 6d | 61 6e 63 65 43 6f 75 6e |yPerform|anceCoun|
|00000900| 74 65 72 00 56 00 52 45 | 41 44 5f 50 4f 52 54 5f |ter.V.RE|AD_PORT_|
|00000910| 55 43 48 41 52 00 5c 00 | 57 52 49 54 45 5f 50 4f |UCHAR.\.|WRITE_PO|
|00000920| 52 54 5f 55 43 48 41 52 | 00 00 48 41 4c 2e 64 6c |RT_UCHAR|..HAL.dl|
|00000930| 6c 00 89 04 6d 65 6d 6d | 6f 76 65 00 0e 02 4b 65 |l...memm|ove...Ke|
|00000940| 66 52 65 6c 65 61 73 65 | 53 70 69 6e 4c 6f 63 6b |fRelease|SpinLock|
|00000950| 46 72 6f 6d 44 70 63 4c | 65 76 65 6c 00 00 0d 02 |FromDpcL|evel....|
|00000960| 4b 65 66 41 63 71 75 69 | 72 65 53 70 69 6e 4c 6f |KefAcqui|reSpinLo|
|00000970| 63 6b 41 74 44 70 63 4c | 65 76 65 6c 00 00 26 04 |ckAtDpcL|evel..&.|
|00000980| 5a 77 4f 70 65 6e 4b 65 | 79 00 53 04 5a 77 53 65 |ZwOpenKe|y.S.ZwSe|
|00000990| 74 56 61 6c 75 65 4b 65 | 79 00 6d 00 45 78 52 61 |tValueKe|y.m.ExRa|
|000009a0| 69 73 65 53 74 61 74 75 | 73 00 3f 04 5a 77 51 75 |iseStatu|s.?.ZwQu|
|000009b0| 65 72 79 56 61 6c 75 65 | 4b 65 79 00 16 04 5a 77 |eryValue|Key...Zw|
|000009c0| 45 6e 75 6d 65 72 61 74 | 65 4b 65 79 00 00 5d 02 |Enumerat|eKey..].|
|000009d0| 4d 6d 55 6e 6d 61 70 49 | 6f 53 70 61 63 65 00 00 |MmUnmapI|oSpace..|
|000009e0| 2d 01 49 6f 46 72 65 65 | 4d 64 6c 00 5c 02 4d 6d |-.IoFree|Mdl.\.Mm|
|000009f0| 55 6e 6c 6f 63 6b 50 61 | 67 65 73 00 47 02 4d 6d |UnlockPa|ges.G.Mm|
|00000a00| 4d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 53 70 |MapLocke|dPagesSp|
|00000a10| 65 63 69 66 79 43 61 63 | 68 65 00 00 4f 02 4d 6d |ecifyCac|he..O.Mm|
|00000a20| 50 72 6f 62 65 41 6e 64 | 4c 6f 63 6b 50 61 67 65 |ProbeAnd|LockPage|
|00000a30| 73 00 fe 00 49 6f 41 6c | 6c 6f 63 61 74 65 4d 64 |s...IoAl|locateMd|
|00000a40| 6c 00 67 04 5f 65 78 63 | 65 70 74 5f 68 61 6e 64 |l.g._exc|ept_hand|
|00000a50| 6c 65 72 33 00 00 41 04 | 5a 77 52 65 61 64 46 69 |ler3..A.|ZwReadFi|
|00000a60| 6c 65 00 00 35 04 5a 77 | 51 75 65 72 79 49 6e 66 |le..5.Zw|QueryInf|
|00000a70| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 0a 04 |ormation|File....|
|00000a80| 5a 77 43 72 65 61 74 65 | 46 69 6c 65 00 00 8b 01 |ZwCreate|File....|
|00000a90| 49 6f 57 72 69 74 65 45 | 72 72 6f 72 4c 6f 67 45 |IoWriteE|rrorLogE|
|00000aa0| 6e 74 72 79 00 00 fc 00 | 49 6f 41 6c 6c 6f 63 61 |ntry....|IoAlloca|
|00000ab0| 74 65 45 72 72 6f 72 4c | 6f 67 45 6e 74 72 79 00 |teErrorL|ogEntry.|
+--------+-------------------------+-------------------------+--------+--------+