============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 D8 32 00 00 00 00 00 00 00 00 00 00 EC 32 00 00 88 04 00 00 50 32 00 00 00 00 00 00 00 00 00 00 ╪2..........∞2..ê♦..P2.......... 00000020 CC 33 00 00 00 04 00 00 78 32 00 00 00 00 00 00 00 00 00 00 14 36 00 00 28 04 00 00 00 00 00 00 ╠3...♦..x2..........¶6..(♦...... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 33 00 00 FA 32 00 00 0E 33 00 00 22 33 00 00 ................43..·2..♫3.."3.. 00000060 B2 33 00 00 48 33 00 00 64 33 00 00 7E 33 00 00 98 33 00 00 00 00 00 00 7C 34 00 00 F4 34 00 00 ▓3..H3..d3..~3..ÿ3......|4..⌠4.. 00000080 D4 33 00 00 EC 33 00 00 04 34 00 00 2A 34 00 00 48 34 00 00 5C 34 00 00 50 35 00 00 96 34 00 00 ╘3..∞3..♦4..*4..H4..\4..P5..û4.. 000000A0 B0 34 00 00 C2 34 00 00 D8 34 00 00 76 35 00 00 0A 35 00 00 1C 35 00 00 38 35 00 00 B0 35 00 00 ░4..┬4..╪4..v5..◙5..∟5..85..░5.. 000000C0 62 35 00 00 94 35 00 00 FC 35 00 00 CA 35 00 00 E4 35 00 00 00 00 00 00 E0 32 00 00 00 00 00 00 b5..ö5..ⁿ5..╩5..Σ5......α2...... 000000E0 2A 00 44 62 67 50 72 69 6E 74 00 00 6E 74 6F 73 6B 72 6E 6C 2E 65 78 65 00 00 59 00 57 52 49 54 *.DbgPrint..ntoskrnl.exe..Y.WRIT 00000100 45 5F 50 4F 52 54 5F 55 53 48 4F 52 54 00 57 00 57 52 49 54 45 5F 50 4F 52 54 5F 55 43 48 41 52 E_PORT_USHORT.W.WRITE_PORT_UCHAR 00000120 00 00 51 00 52 45 41 44 5F 50 4F 52 54 5F 55 43 48 41 52 00 53 00 52 45 41 44 5F 50 4F 52 54 5F ..Q.READ_PORT_UCHAR.S.READ_PORT_ 00000140 55 53 48 4F 52 54 00 00 49 00 4B 65 53 74 61 6C 6C 45 78 65 63 75 74 69 6F 6E 50 72 6F 63 65 73 USHORT..I.KeStallExecutionProces 00000160 73 6F 72 00 4F 00 52 45 41 44 5F 50 4F 52 54 5F 42 55 46 46 45 52 5F 55 4C 4F 4E 47 00 00 50 00 sor.O.READ_PORT_BUFFER_ULONG..P. 00000180 52 45 41 44 5F 50 4F 52 54 5F 42 55 46 46 45 52 5F 55 53 48 4F 52 54 00 54 00 57 52 49 54 45 5F READ_PORT_BUFFER_USHORT.T.WRITE_ 000001A0 50 4F 52 54 5F 42 55 46 46 45 52 5F 55 43 48 41 52 00 55 00 57 52 49 54 45 5F 50 4F 52 54 5F 42 PORT_BUFFER_UCHAR.U.WRITE_PORT_B 000001C0 55 46 46 45 52 5F 55 4C 4F 4E 47 00 48 41 4C 2E 64 6C 6C 00 B0 00 4E 64 69 73 4D 52 65 67 69 73 UFFER_ULONG.HAL.dll.░.NdisMRegis 000001E0 74 65 72 4D 69 6E 69 70 6F 72 74 00 8D 00 4E 64 69 73 49 6E 69 74 69 61 6C 69 7A 65 57 72 61 70 terMiniport.ì.NdisInitializeWrap 00000200 70 65 72 00 08 00 45 74 68 46 69 6C 74 65 72 44 70 72 49 6E 64 69 63 61 74 65 52 65 63 65 69 76 per.◘.EthFilterDprIndicateReceiv 00000220 65 43 6F 6D 70 6C 65 74 65 00 07 00 45 74 68 46 69 6C 74 65 72 44 70 72 49 6E 64 69 63 61 74 65 eComplete.•.EthFilterDprIndicate 00000240 52 65 63 65 69 76 65 00 B2 00 4E 64 69 73 4D 53 65 6E 64 43 6F 6D 70 6C 65 74 65 00 BA 00 4E 64 Receive.▓.NdisMSendComplete.║.Nd 00000260 69 73 4D 53 79 6E 63 68 72 6F 6E 69 7A 65 57 69 74 68 49 6E 74 65 72 72 75 70 74 00 F1 00 4E 64 isMSynchronizeWithInterrupt.±.Nd 00000280 69 73 57 72 69 74 65 45 72 72 6F 72 4C 6F 67 45 6E 74 72 79 00 00 AE 00 4E 64 69 73 4D 52 65 67 isWriteErrorLogEntry..«.NdisMReg 000002A0 69 73 74 65 72 49 6E 74 65 72 72 75 70 74 00 00 A7 00 4E 64 69 73 4D 4D 61 70 49 6F 53 70 61 63 isterInterrupt..º.NdisMMapIoSpac 000002C0 65 00 2A 00 4E 64 69 73 41 6C 6C 6F 63 61 74 65 4D 65 6D 6F 72 79 00 00 AF 00 4E 64 69 73 4D 52 e.*.NdisAllocateMemory..».NdisMR 000002E0 65 67 69 73 74 65 72 49 6F 50 6F 72 74 52 61 6E 67 65 00 00 B4 00 4E 64 69 73 4D 53 65 74 41 74 egisterIoPortRange..┤.NdisMSetAt 00000300 74 72 69 62 75 74 65 73 00 00 C9 00 4E 64 69 73 51 75 65 72 79 42 75 66 66 65 72 00 24 00 4E 44 tributes..╔.NdisQueryBuffer.$.ND 00000320 49 53 5F 42 55 46 46 45 52 5F 54 4F 5F 53 50 41 4E 5F 50 41 47 45 53 00 CA 00 4E 64 69 73 51 75 IS_BUFFER_TO_SPAN_PAGES.╩.NdisQu 00000340 65 72 79 42 75 66 66 65 72 4F 66 66 73 65 74 00 6C 00 4E 64 69 73 46 72 65 65 4D 65 6D 6F 72 79 eryBufferOffset.l.NdisFreeMemory 00000360 00 00 BC 00 4E 64 69 73 4D 55 6E 6D 61 70 49 6F 53 70 61 63 65 00 A0 00 4E 64 69 73 4D 44 65 72 ..╝.NdisMUnmapIoSpace.á.NdisMDer 00000380 65 67 69 73 74 65 72 49 6F 50 6F 72 74 52 61 6E 67 65 00 00 9F 00 4E 64 69 73 4D 44 65 72 65 67 egisterIoPortRange..ƒ.NdisMDereg 000003A0 69 73 74 65 72 49 6E 74 65 72 72 75 70 74 00 00 3B 00 4E 64 69 73 43 6C 6F 73 65 43 6F 6E 66 69 isterInterrupt..;.NdisCloseConfi 000003C0 67 75 72 61 74 69 6F 6E 00 00 D2 00 4E 64 69 73 52 65 61 64 4E 65 74 77 6F 72 6B 41 64 64 72 65 guration..╥.NdisReadNetworkAddre 000003E0 73 73 00 00 CE 00 4E 64 69 73 52 65 61 64 43 6F 6E 66 69 67 75 72 61 74 69 6F 6E 00 C4 00 4E 64 ss..╬.NdisReadConfiguration.─.Nd 00000400 69 73 4F 70 65 6E 43 6F 6E 66 69 67 75 72 61 74 69 6F 6E 00 4E 44 49 53 2E 53 59 53 00 00 00 00 isOpenConfiguration.NDIS.SYS.... 00000420 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000440 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000460 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000004A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000004C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000004E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................