The following is common to the PVA dump and the Sp0raw dump. The pVA dumper also thinks there is an Algo at 0x1C but there is no data for it. It could be an Inactive algo. With 5 minutes searching you could have done this for yourslef and learned something.
Git
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\MultiK ey\Dumps\B99A0000]
"DongleType"=dword:00000003
"Copyright"="None"
"Created"="Sat Aug 01 19:00:02.411 2009"
"Name"="B99A Sentinel SuperPro Dump"
"Type"=dword:00000000
"CellType"=hex:\
01,01,03,03,03,03,03,03,\
01,01,01,01,01,01,01,01,\
01,01,01,01,00,00,00,00,\
03,03,03,03,03,03,03,03,\
02,02,02,02,01,01,01,01,\
01,01,01,01,01,01,01,01,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"sntMemory"=hex:\
DA,18,9A,B9,14,68,00,00,14,68,00,00,34,2D,00,00,\
86,00,8A,21,58,00,8E,52,01,00,0A,00,85,CA,B7,10,\
19,00,02,00,10,9C,8B,FD,63,01,00,00,00,00,00,00,\
EE,FC,2A,C6,E1,09,62,D3,00,00,00,00,B8,23,1C,FC,\
0A,00,1E,00,32,00,64,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
jabrix
08-01-2009, 11:33 PM
Thanks friends,
I already made reg files before same as you sent me, but it not working.
Somehow if I compare three of the files (spb99a_0.dmp, spb99a_1.dmp and spro_RNBO_SPN_DRIVER_b99a_02.dmp) with Hex Workshop, it show the diffrent like this
spb99a_0.dmp
D7 18 9A B9 00 00 ..........................
spb99a_1.dmp
C4 20 9A B9 00 00 ...........................
spro_RNBO_SPN_DRIVER_b99a_02.dmp
DA 18 9A B9 14 68 ..........................
I dump with many dumper, spapi, pva, dumper.exe.
Is it possible cause something wrong with the PC, so then dump result different inside?
Tks,
===============================================
yap I still learning.....learning...... and learning...... from this great forum, thanks you all for the knowledges:) .
vBulletin® v3.6.4, Copyright ©2000-2020, Jelsoft Enterprises Ltd.