Turbo Dump Version 6.3.0.0 Copyright (c) 1988-2009 Embarcadero Technologies, Inc.
Display of File driver.obj
000000 THEADR driver.pas
00000F COMENT Purge: No , List: Yes, Class: 0 (000h)
Translator: Delphi Pascal V21.0
000029 COMENT Purge: Yes, List: Yes, Class: 251 (0FBh), SubClass: 12 (0Ch)
Package Module Record, Lead Byte: 01h, Flags: 00004000h
000034 COMENT Purge: No , List: Yes, Class: 251 (0FBh), SubClass: 10 (0Ah)
Implements: driver.obj
000046 COMENT Purge: No , List: Yes, Class: 251 (0FBh), SubClass: 8 (08h)
Link: ntoskrnl.obj
00005A COMENT Purge: No , List: Yes, Class: 251 (0FBh), SubClass: 8 (08h)
Link: nt_status.obj
00006F COMENT Purge: No , List: Yes, Class: 251 (0FBh), SubClass: 8 (08h)
Link: SysInit.obj
000082 COMENT Purge: No , List: Yes, Class: 251 (0FBh), SubClass: 8 (08h)
Link: System.obj
000094 LNAMES
Name 1:
''
Name 2:
'_TEXT'
Name 3:
'CODE'
Name 4:
'_DATA'
Name 5:
'DATA'
Name 6:
'_BSS'
Name 7:
'BSS'
Name 8:
'$$BSYMS'
Name 9:
'DEBSYM'
Name 10:
'$$BTYPES'
Name 11:
'DEBTYP'
Name 12:
'$$BNAMES'
Name 13:
'DEBNAM'
Name 14:
'$$BROWSE'
Name 15:
'DEBSYM'
Name 16:
'$$BROWFILE'
Name 17:
'DEBSYM'
Name 18:
'DGROUP'
Name 19:
'_TLS'
Name 20:
'TLS'
Name 21:
'_INIT_'
Name 22:
'INITDATA'
Name 23:
'_EXIT_'
Name 24:
'EXITDATA'
000139 SEGDEF 1 : _TEXT DWORD PUBLIC USE32 Class
'CODE'
Length: 0000
000143 SEGDEF 2 : _DATA DWORD PUBLIC USE32 Class
'DATA'
Length: 0000
00014D SEGDEF 3 : _BSS DWORD PUBLIC USE32 Class
'BSS'
Length: 0004
000157 SEGDEF 4 : _TLS DWORD PUBLIC USE32 Class
'TLS'
Length: 0000
000161 SEGDEF 5 : _INIT_ WORD PUBLIC USE32 Class
'INITDATA'
Length: 0006
00016B SEGDEF 6 : _EXIT_ WORD PUBLIC USE32 Class
'EXITDATA'
Length: 0006
000175 GRPDEF Group: DGROUP
Segment: _DATA
Segment: _BSS
00017E COMDEF
Name: 1:
'Driver::_16385'
virtual(_TEXT) Length: 0058 bytes
000194 COMDEF
Name: 2:
'__stdcall _DriverEntry(TDriverObject *, TUnicodeString *)'
virtual(_TEXT) Length: 0088 bytes
0001D0 COMDEF
Name: 3:
'__fastcall Finalization()'
virtual(_TEXT) Length: 0007 bytes
0001EA COMDEF
Name: 4:
'__fastcall initialization()'
virtual(_TEXT) Length: 0008 bytes
000206 EXTDEF 5 :
'_DbgPrint'
Type: 0
000215 LEDATA Segment: (16385)
'Driver::_16385'
Offset: 0000 Length: 0058
0000: 55 8B EC 8B 45 08 50 68 24 00 00 00 E8 00 00 00 U嬱.E.Ph$.......
0010: 00 83 C4 08 68 48 00 00 00 E8 00 00 00 00 59 5D .兡.hH........Y]
0020: C2 04 00 00 44 72 69 76 65 72 55 6E 6C 6F 61 64 ....DriverUnload
0030: 28 44 72 69 76 65 72 4F 62 6A 65 63 74 3A 30 78 (DriverObject:0x
0040: 25 2E 38 58 29 00 00 00 44 72 69 76 65 72 55 6E %.8X)...DriverUn
0050: 6C 6F 61 64 28 2D 29 00 load(-).
000275 FIXU32
FixUp: 008 Mode: Seg Loc: Offset32 Frame: TARGET Target: VEI[1]: Driver::_16385
FixUp: 00d Mode: Self Loc: Offset32 Frame: TARGET Target: EI[5]: _DbgPrint
FixUp: 015 Mode: Seg Loc: Offset32 Frame: TARGET Target: VEI[1]: Driver::_16385
FixUp: 01a Mode: Self Loc: Offset32 Frame: TARGET Target: EI[5]: _DbgPrint
00028B LEDATA Segment: (16386)
'__stdcall _DriverEntry(TDriverObject *, TUnicodeString *)'
Offset: 0000 Length: 0088
0000: 55 8B EC 53 8B 5D 08 8B 45 0C 50 53 68 38 00 00 U嬱S.]..E.PSh8..
0010: 00 E8 00 00 00 00 83 C4 0C C7 43 34 00 00 00 00 ......兡..C4....
0020: 33 DB 53 68 70 00 00 00 E8 00 00 00 00 83 C4 08 3.Shp........兡.
0030: 8B C3 5B 5D C2 08 00 00 44 72 69 76 65 72 45 6E 嬅[]....DriverEn
0040: 74 72 79 28 44 72 69 76 65 72 4F 62 6A 65 63 74 try(DriverObject
0050: 3A 30 78 25 2E 38 58 3B 52 65 67 69 73 74 72 79 :0x%.8X;Registry
0060: 50 61 74 68 3A 30 78 25 2E 38 58 29 00 00 00 00 Path:0x%.8X)....
0070: 44 72 69 76 65 72 45 6E 74 72 79 28 2D 29 3A 30 DriverEntry(-):0
0080: 78 25 2E 38 58 00 00 00 x%.8X...
00031B FIXU32
FixUp: 00d Mode: Seg Loc: Offset32 Frame: TARGET Target: VEI[2]: __stdcall _DriverEntry(TDriverObject *, TUnicodeString *)
FixUp: 012 Mode: Self Loc: Offset32 Frame: TARGET Target: EI[5]: _DbgPrint
FixUp: 01c Mode: Seg Loc: Offset32 Frame: TARGET Target: VEI[1]: Driver::_16385
FixUp: 024 Mode: Seg Loc: Offset32 Frame: TARGET Target: VEI[2]: __stdcall _DriverEntry(TDriverObject *, TUnicodeString *)
FixUp: 029 Mode: Self Loc: Offset32 Frame: TARGET Target: EI[5]: _DbgPrint
000336 LEDATA Segment: (16387)
'__fastcall Finalization()'
Offset: 0000 Length: 0007
0000: FF 05 00 00 00 00 C3 .......
000345 FIXU32
FixUp: 002 Mode: Seg Loc: Offset32 Frame: TARGET Target: SI[3]: _BSS
00034D LEDATA Segment: (16388)
'__fastcall initialization()'
Offset: 0000 Length: 0008
0000: 83 2D 00 00 00 00 01 C3 .-......
00035D FIXU32
FixUp: 002 Mode: Seg Loc: Offset32 Frame: TARGET Target: SI[3]: _BSS
000365 LEDATA Segment: (5) _INIT_ Offset: 0000 Length: 0006
0000: 00 1E 00 00 00 00 ......
000372 FIXU32
FixUp: 002 Mode: Seg Loc: Offset32 Frame: TARGET Target: VEI[4]: __fastcall initialization()
00037B LEDATA Segment: (6) _EXIT_ Offset: 0000 Length: 0006
0000: 00 1E 00 00 00 00 ......
000388 FIXU32
FixUp: 002 Mode: Seg Loc: Offset32 Frame: TARGET Target: VEI[3]: __fastcall Finalization()
000391 LIDATA
Segment: _BSS Offset: 0000
Repeat 4.
times
, 1. Blocks
Repeat 1.
times
, 1. Bytes
0000: 00 .
0003A2 MODE32