pci.sys - PCI Bus Driver

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	pci.sys
size	103936 (0x19600)
md5	7b0f8b1deaa8f9d96512c331579536e3

type	PE32 executable (DLL) (native) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x78
blocks_in_file	1
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0
ss	0
sp	0
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x78

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 24 00 00                           |mode.$..        |

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x667eb6ee
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	14.0
SizeOfCode	0xee00
SizeOfInitializedData	0xa400
SizeOfUninitializedData	0
AddressOfEntryPoint	0xa990
BaseOfCode	0x1000
BaseOfData	0
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x1c000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	1
DllCharacteristics	0x540
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xed80	0xee00	R-X CODE
.rdata	0x10000	0x3aba	0x3c00	R-- IDATA
.data	0x14000	0x48c	0x600	RW- IDATA
.rsrc	0x15000	0x5388	0x5400	R-- IDATA
.reloc	0x1b000	0xc8c	0xe00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x13577	0x3c
RESOURCE	0x15000	0x5388
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x1b000	0xc8c
DEBUG	0x13500	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x13674	0xc0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
MESSAGETABLE	#1	5896
MESSAGETABLE	#1	6228
MESSAGETABLE	#1	7860
VERSION	VS_VERSION_INFO	712
MANIFEST	#2	323

module_name	hint	ord	function_name
ntdll.dll			DbgBreakPoint
ntdll.dll			DbgPrint
ntdll.dll			NtClose
ntdll.dll			NtCreateKey
ntdll.dll			NtEnumerateKey
ntdll.dll			NtEnumerateValueKey
ntdll.dll			NtOpenKey
ntdll.dll			NtQueryKey
ntdll.dll			NtQueryValueKey
ntdll.dll			NtSetValueKey
ntdll.dll			NtTerminateProcess
ntdll.dll			RtlAddRange
ntdll.dll			RtlAllocateHeap
ntdll.dll			RtlAnsiStringToUnicodeSize
ntdll.dll			RtlAnsiStringToUnicodeString
ntdll.dll			RtlAssert
ntdll.dll			RtlCompareMemory
ntdll.dll			RtlEqualUnicodeString
ntdll.dll			RtlFindMessage
ntdll.dll			RtlFreeHeap
ntdll.dll			RtlFreeRangeList
ntdll.dll			RtlInitAnsiString
ntdll.dll			RtlInitUnicodeString
ntdll.dll			RtlInitializeRangeList
ntdll.dll			RtlVerifyVersionInfo
ntdll.dll			VerSetConditionMask
ntdll.dll			_snprintf
ntdll.dll			_snwprintf
ntdll.dll			_vsnprintf
ntdll.dll			memcpy
ntdll.dll			memset
ntdll.dll			swprintf
ntdll.dll			wcsncmp
wdm.dll			IoAttachDeviceToDeviceStack
wdm.dll			IoBuildDeviceIoControlRequest
wdm.dll			IoBuildSynchronousFsdRequest
wdm.dll			IoCallDriverEx
wdm.dll			IoCompleteRequest
wdm.dll			IoCreateDevice
wdm.dll			IoDeleteDevice
wdm.dll			IoDetachDevice
wdm.dll			IoGetAttachedDeviceReference
wdm.dll			IoOpenDeviceRegistryKey
wdm.dll			KeDelayExecutionThread
wdm.dll			ObDereferenceObject
wdm.dll			PoSetPowerState

StringTable 040904b0

CompanyName	Neptune OS Project
FileDescription	PCI Bus Driver
FileVersion	005b98a
InternalName	pci
LegalCopyright	(C) 2020-2024 Dr. Chang Liu, PhD.
OriginalFilename	pci.sys
ProductName	Neptune OS
ProductVersion

VS_FIXEDFILEINFO

FileVersion	0.2.2.0
ProductVersion	0.2.2.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	103936	DLL	06/28/2024 13:13:18	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

pci.sys-

MZ Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

pci.sys
-