============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 AC 88 00 00 00 00 00 00 00 00 00 00 96 8B 00 00 9C 02 00 00 50 88 00 00 00 00 00 00 00 00 00 00 ¼ê..........ûï..£☻..Pê.......... 00000020 E8 8B 00 00 40 02 00 00 64 88 00 00 00 00 00 00 00 00 00 00 7C 8D 00 00 54 02 00 00 00 00 00 00 Φï..@☻..dê..........|ì..T☻...... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 DA 8B 00 00 CC 8B 00 00 B8 8B 00 00 A4 8B 00 00 ................┌ï..╠ï..╕ï..ñï.. 00000060 00 00 00 00 60 8D 00 00 30 8D 00 00 1C 8D 00 00 04 8D 00 00 EC 8C 00 00 D6 8C 00 00 BC 8C 00 00 ....`ì..0ì..∟ì..♦ì..∞î..╓î..╝î.. 00000080 A6 8C 00 00 8E 8C 00 00 7C 8C 00 00 62 8C 00 00 48 8C 00 00 32 8C 00 00 1A 8C 00 00 08 8C 00 00 ªî..Äî..|î..bî..Hî..2î..→î..◘î.. 000000A0 4A 8D 00 00 F0 8B 00 00 00 00 00 00 28 8B 00 00 1A 8B 00 00 00 8B 00 00 E6 8A 00 00 BC 8A 00 00 Jì..≡ï......(ï..→ï...ï..µè..╝è.. 000000C0 CE 8A 00 00 B2 89 00 00 9A 89 00 00 7A 89 00 00 5A 89 00 00 44 89 00 00 AE 8A 00 00 9C 8A 00 00 ╬è..▓ë..Üë..zë..Zë..Dë..«è..£è.. 000000E0 90 8A 00 00 84 8A 00 00 74 8A 00 00 60 8A 00 00 50 8A 00 00 34 8A 00 00 18 8A 00 00 08 8A 00 00 Éè..äè..tè..`è..Pè..4è..↑è..◘è.. 00000100 F8 89 00 00 DE 89 00 00 C6 89 00 00 7E 8B 00 00 2C 89 00 00 40 8B 00 00 62 8B 00 00 86 8D 00 00 °ë..▐ë..╞ë..~ï..,ë..@ï..bï..åì.. 00000120 9A 8D 00 00 AC 8D 00 00 00 00 00 00 45 01 4B 65 49 6E 69 74 69 61 6C 69 7A 65 53 70 69 6E 4C 6F Üì..¼ì......E☺KeInitializeSpinLo 00000140 63 6B 00 00 16 01 49 6F 66 43 6F 6D 70 6C 65 74 65 52 65 71 75 65 73 74 00 00 5F 00 45 78 66 49 ck..▬☺IofCompleteRequest.._.ExfI 00000160 6E 74 65 72 6C 6F 63 6B 65 64 49 6E 73 65 72 74 54 61 69 6C 4C 69 73 74 00 00 62 00 45 78 66 49 nterlockedInsertTailList..b.ExfI 00000180 6E 74 65 72 6C 6F 63 6B 65 64 52 65 6D 6F 76 65 48 65 61 64 4C 69 73 74 00 00 7A 01 4B 65 57 61 nterlockedRemoveHeadList..z☺KeWa 000001A0 69 74 46 6F 72 53 69 6E 67 6C 65 4F 62 6A 65 63 74 00 3F 01 4B 65 49 6E 69 74 69 61 6C 69 7A 65 itForSingleObject.?☺KeInitialize 000001C0 45 76 65 6E 74 00 F2 01 4F 62 66 44 65 72 65 66 65 72 65 6E 63 65 4F 62 6A 65 63 74 00 00 27 01 Event.≥☺ObfDereferenceObject..'☺ 000001E0 4B 65 44 65 6C 61 79 45 78 65 63 75 74 69 6F 6E 54 68 72 65 61 64 00 00 15 01 49 6F 66 43 61 6C KeDelayExecutionThread..§☺IofCal 00000200 6C 44 72 69 76 65 72 00 BC 00 49 6F 41 6C 6C 6F 63 61 74 65 49 72 70 00 E7 00 49 6F 47 65 74 52 lDriver.╝.IoAllocateIrp.τ.IoGetR 00000220 65 6C 61 74 65 64 44 65 76 69 63 65 4F 62 6A 65 63 74 00 00 F0 01 4F 62 52 65 66 65 72 65 6E 63 elatedDeviceObject..≡☺ObReferenc 00000240 65 4F 62 6A 65 63 74 42 79 48 61 6E 64 6C 65 00 67 01 4B 65 52 65 73 65 74 45 76 65 6E 74 00 00 eObjectByHandle.g☺KeResetEvent.. 00000260 A7 01 4D 6D 4D 61 70 4C 6F 63 6B 65 64 50 61 67 65 73 00 00 21 00 44 62 67 42 72 65 61 6B 50 6F º☺MmMapLockedPages..!.DbgBreakPo 00000280 69 6E 74 00 DE 00 49 6F 46 72 65 65 49 72 70 00 DF 00 49 6F 46 72 65 65 4D 64 6C 00 EA 00 49 6F int.▐.IoFreeIrp.▀.IoFreeMdl.Ω.Io 000002A0 49 6E 69 74 69 61 6C 69 7A 65 49 72 70 00 6B 01 4B 65 53 65 74 45 76 65 6E 74 00 00 4E 00 45 78 InitializeIrp.k☺KeSetEvent..N.Ex 000002C0 51 75 65 75 65 57 6F 72 6B 49 74 65 6D 00 2E 00 45 78 41 6C 6C 6F 63 61 74 65 50 6F 6F 6C 57 69 QueueWorkItem...ExAllocatePoolWi 000002E0 74 68 54 61 67 00 FB 00 49 6F 52 65 6C 65 61 73 65 43 61 6E 63 65 6C 53 70 69 6E 4C 6F 63 6B 00 thTag.√.IoReleaseCancelSpinLock. 00000300 B6 00 49 6F 41 63 71 75 69 72 65 43 61 6E 63 65 6C 53 70 69 6E 4C 6F 63 6B 00 36 00 45 78 46 72 ╢.IoAcquireCancelSpinLock.6.ExFr 00000320 65 65 50 6F 6F 6C 00 00 D1 00 49 6F 43 72 65 61 74 65 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B 00 00 eePool..╤.IoCreateSymbolicLink.. 00000340 1C 02 52 74 6C 41 70 70 65 6E 64 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 54 6F 53 74 72 69 6E 67 ∟☻RtlAppendUnicodeStringToString 00000360 00 00 1D 02 52 74 6C 41 70 70 65 6E 64 55 6E 69 63 6F 64 65 54 6F 53 74 72 69 6E 67 00 00 68 02 ..↔☻RtlAppendUnicodeToString..h☻ 00000380 52 74 6C 49 6E 69 74 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 6E 74 6F 73 6B 72 6E 6C 2E 65 RtlInitUnicodeString..ntoskrnl.e 000003A0 78 65 00 00 49 00 4B 66 52 65 6C 65 61 73 65 53 70 69 6E 4C 6F 63 6B 00 46 00 4B 66 41 63 71 75 xe..I.KfReleaseSpinLock.F.KfAcqu 000003C0 69 72 65 53 70 69 6E 4C 6F 63 6B 00 47 00 4B 66 4C 6F 77 65 72 49 72 71 6C 00 48 00 4B 66 52 61 ireSpinLock.G.KfLowerIrql.H.KfRa 000003E0 69 73 65 49 72 71 6C 00 48 41 4C 2E 64 6C 6C 00 93 00 4E 64 69 73 54 65 72 6D 69 6E 61 74 65 57 iseIrql.HAL.dll.ô.NdisTerminateW 00000400 72 61 70 70 65 72 00 00 8B 00 4E 64 69 73 52 65 67 69 73 74 65 72 4D 61 63 00 54 00 4E 64 69 73 rapper..ï.NdisRegisterMac.T.Ndis 00000420 49 6E 69 74 69 61 6C 69 7A 65 57 72 61 70 70 65 72 00 28 00 4E 64 69 73 41 6C 6C 6F 63 61 74 65 InitializeWrapper.(.NdisAllocate 00000440 50 61 63 6B 65 74 00 00 25 00 4E 64 69 73 41 6C 6C 6F 63 61 74 65 42 75 66 66 65 72 50 6F 6F 6C Packet..%.NdisAllocateBufferPool 00000460 00 00 29 00 4E 64 69 73 41 6C 6C 6F 63 61 74 65 50 61 63 6B 65 74 50 6F 6F 6C 00 00 42 00 4E 64 ..).NdisAllocatePacketPool..B.Nd 00000480 69 73 46 72 65 65 4D 65 6D 6F 72 79 00 00 37 00 4E 64 69 73 44 65 72 65 67 69 73 74 65 72 41 64 isFreeMemory..7.NdisDeregisterAd 000004A0 61 70 74 65 72 00 89 00 4E 64 69 73 52 65 67 69 73 74 65 72 41 64 61 70 74 65 72 00 2D 00 4E 64 apter.ë.NdisRegisterAdapter.-.Nd 000004C0 69 73 43 6C 6F 73 65 43 6F 6E 66 69 67 75 72 61 74 69 6F 6E 00 00 27 00 4E 64 69 73 41 6C 6C 6F isCloseConfiguration..'.NdisAllo 000004E0 63 61 74 65 4D 65 6D 6F 72 79 00 00 82 00 4E 64 69 73 52 65 61 64 43 6F 6E 66 69 67 75 72 61 74 cateMemory..é.NdisReadConfigurat 00000500 69 6F 6E 00 7B 00 4E 64 69 73 4F 70 65 6E 43 6F 6E 66 69 67 75 72 61 74 69 6F 6E 00 39 00 4E 64 ion.{.NdisOpenConfiguration.9.Nd 00000520 69 73 44 65 72 65 67 69 73 74 65 72 4D 61 63 00 99 00 4E 64 69 73 57 72 69 74 65 45 72 72 6F 72 isDeregisterMac.Ö.NdisWriteError 00000540 4C 6F 67 45 6E 74 72 79 00 00 24 00 4E 64 69 73 41 6C 6C 6F 63 61 74 65 42 75 66 66 65 72 00 00 LogEntry..$.NdisAllocateBuffer.. 00000560 95 00 4E 64 69 73 55 6E 63 68 61 69 6E 42 75 66 66 65 72 41 74 46 72 6F 6E 74 00 00 4E 44 49 53 ò.NdisUnchainBufferAtFront..NDIS 00000580 2E 53 59 53 00 00 42 01 4B 65 49 6E 69 74 69 61 6C 69 7A 65 4D 75 74 65 78 00 5F 01 4B 65 52 65 .SYS..B☺KeInitializeMutex._☺KeRe 000005A0 6C 65 61 73 65 4D 75 74 65 78 00 00 23 00 44 62 67 50 72 69 6E 74 00 00 00 00 00 00 00 00 00 00 leaseMutex..#.DbgPrint..........