Edit C:\Windows\System32\drivers\ndiscap.sys
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ ?s ? _? _? _? _? _?_? _?_? _?_? _?_? _?_? _?_? _Rich? _ PE d? ?R ? " X L ?S ? ? ` 4? < ? ?9 ? ? ? ( pa ? ? ` ` .text ? N h.rdata ? ` R @ H.data ? p \ @ ?.pdata ? ? ^ @ HINIT ? ? b ?.rsrc ?9 ? : l @ B.reloc ? ? ? @ B H; aa u H;`a u3?? ???$WH? ?H?H?u"?? uH?? ? ????? H?H?H?$0H? _H?% P H?H?H?H?L? AWH? H?" I? E3??M??iltA?D?H??? H?H?u? ?BE3??? H??? H?H?uC? ?3?3???? H?tE3?3???tO H?$8H?$@L?$H?H?$0H? A_? ?p L?H?H??f??@O ??u??7I?>??L?I?I?VWAVH?0H?^H E3??I???? H?M?I???u ? ?7 I?H?? L?$XA? 3??< ??? 3?SBE3??A?iltH?H??? H?H?? H?$X? L?f??< ??? =# ?= ?uGH?E3?3?ZN ?E3?U A?iltH??NN H?H?tMH?$XL??< ??t?H?$XH?t ?? L?$XH?E3?3?? L?fD?7H???} ????? ??$XH?t ?{N L?$X?t H?H?tE3?3?? L?fD?7?H?$PH?$`H?0A^_^?H?? H?$H?$H?$AVH? M?H?H?M?? ? ?? ? ? ? H?E3??iltA? ?DM H?H?? 3??D? ?E ? ???vK?t ?? ?? H?E3?U A?ilt?? H?H?? ?? L? ?8?$ H?E3?U A?ilt?? H?H?tn?$ L?& ??c???+ ?H?E3?U A?ilt?nL H?H?t,?L? ??c???+ ? I? ?? ??H?H?H?t E3?3?L H?H?t E3?3?? H? E3?3???? H?H?u??$0H?$8H?$@H? A^??? H?$H?$VWAUAVAWH? M?H?L?M?? H?? H?? E3???ilt?? H?H?? D?3???C ? 3? 9w v{???H??? H??H?$XL?H?t!? 9t L?H?H?u??$XH?u+L?$XH?I????H?$XM?tI?? ? H????;w r?? H?$PH?$`H? A_A^A]_^???H?H?H?H? ATAVAWH? L?? H?I?I?E?3??$K ?? I???? ?K H?E3? A?ilt?eJ H?H?? ? 3??D??B L?? I?? J H? ? H?(?$`??? ? D? H?FLTR?0H?H??? A? ?A;?3???? ? I??cJ ?? I???? ?DJ ?u?4H?$? ?;? ?)? ? ?H?$? ?8??A;?E3?3???iI H?$@H?$HH?$P?H?$XH? A_A^A\??$WH?? H?? H3??$? ?$P H?H?H?$a3?? ?$` ?A H?tBH?t=H?$P? L?$`H?$@?$ A? H??$`?????u?$t ? ?? ??$? H3??; H?$? H?? _???H?H?H? AVH?P? L?H?H?u ? ?? H?" H?$`E3??$@?$ A? ????= ?? ?$`H?E3???ilt?3H H?H?t^?$` D?3???@ H?$`L?H?$@A? H?f??f??$ ?%????uM?H?H????E3?3???? ?? ???$hH?$pH?$xH?PA^??H?H?H?H? AVH? H?? E?H?H?H?ukH9? uH?? D? ?5G ? H?? H??? ?? H???? ?? E?H?H??? E3?3??? G ? H? H?? H??? H? H???? ?nG H? E?t ?? ??? ??4?4??? u?@?@?D?D?<?<??8?8H?? H?H??QF H?E?H??9F H?$0H?$8H?$@H?$HH? A^???$UVWAVAWH?H? ? E3?H?H?? L?8?z t;?? D9? ? D8? ? L?(M?? ?z t;?? L9? u8H?E3? A?ilt?? H?? H??) 3?? H??= ?z ? ?? A? L?? I??H?0H?H?? A? 9t H?H?H?u??0H?? H?H;?I???H?H?H?t E3?3?E H?H?t E3?3?E E3?3??L??? ?A? H?? I?H??H?0H?t A? 9tAH?H?H?0H?u??0I?H?? ??H?0H?tH??A? H?? H??H?L?8A?TndH??4D ??ueH?8H?? H?H?8H?H?8H?H? H? ?#D ? ?;?A?t ?T ?? T H?8D?H?????????? u L?@D?<?L?4?H?$`H? A_A^_^]??$UVWATAUAVAWH?H?`3??A?? ?D????EHD??X?? M?H??P?t#?$0H?? A??$(? ?$ ?! ?P?? ?t'A?HE??$0?$(A?? H?XE ?$ ? H;=0T t ? ?? L???IT A? 3?????L0 ??u:H??????= A? ?0 ??uH??????= ?"2 D??????t ?]C H?????t?JC ?t ? E3?? E?u ? ? ?? L???? 3??H?????/ ??uCH????? = D??0 ??u&H???XH? = ?1 D?X??uA?DG????t ?? H?????t?? I? ??I?DE??I?(E?A?A?A?ilt@????( E3?????? H?H?u? ? ????3??( H??9 I?H?( ?H?(f?"f? D?I?H??6 I? ? ?HK(f?2f?0D?H?8I? H??>6 I?(?0?HK8f?Bf?@D?H?HI?(H??6 A?H?\A?9 ? ?PA?? ?TA??Xt?TA?H? ? ? I?PE3?H?? ??@? ?? E3??I??? H?? H?u?- ? ?? 3??H??H?? ??H?? ??D9vDH?H?? E?Ii? ?B??H?? B??u B?? A??;Gr?E3?3??H???? L???I???? ??t ? ?2 L?? H?? A? I?D?? D?? ?????? ?? E?u?? ? H?H?? ???H?HH??(????t ? ? D8}Ht(H?? H??????t ? ? D?? ?-?? ?!=? ?q@?D?? A?????? H? P ??? H?P ?P H?P H?H?H9PtI??)H??? H? ? H? ? ?L? D?P?? ?? D?P? tH?|@ D?D?$(?$ ? H?t,H?? H?tE3?3?g> L?? E3?3???R> ?? ?t!D?$0H?? A??$(? ?$ ? ?H?$? H?`A_A^A]A\_^]?H?$WH? H?? H?H???> H??? ??? ?l> H?$0?? 3?? _?L?I?UVWATAUAVAWH?0H?H?I?E3??E3?3????E??5= ?$p?? A?ilt?>> H?H?u ? ?? H?H?$xL?$pD?H?H?$ ??< ??u{? D?$ D?H??E?t^D? D??H??)0fA;? fA;?H?(H?)8D?M+??0 ?t f???A;???X?H?9D)u?$ A?3???9= ?H?$? H?0A_A^A]A\_^]??L?I?WH?@H?qM I? H?H??$ ? I??d$0 I?I???; ?u H?$P??; H?H?t?(? ?? tH?????? H?$`3??@_??$H?$H?$WAVAWH?@?*M H??t"?T?\D?P?$0?$(?$ H? > ? H?? E3?H?t E3?3??; H? ? ?:< ?? H?H?H9Z? H9? H?H??? H? vL ??; H?? H?tE3?3?I; L?? H?? H?tE3?3?+; L?? H?? H?tE3?3? ; L?? H? H?tE3?3??: L? fD?? L9? ? I?? H?? H?0H?tFH?L?H?t E3?3??: H?H?t E3?3??: E3?3??L??|: I?M?u??H????? E3?3?Y: L?? E3?3??H?$`H?$hH?$pH?@A_A^_H?%+: ? ?)@SH?@H? K ?1: ?KK ?t7H?P5 L? ?5 H?Z< H?$0H?V5 H?$(H?Z5 H?$ ? ? H? ? 3??t3?E: H? ? H? ? H?t3?*: H? ? ? ? H?@[??H?H?%9 ??$L?$ H?$UVWATAUAVAWH?0H?$? 3??I?)L?H?D?H?$ ?H?(H?? A???A? ??? L?D?I???H?H?H?t!M?D?f9(t H?I????tI?I+?E?M?E?HH??t"I?D?fA9(t I?H????tI?H+?E?M?E?HH??t"I?D?fA9(t I?H????tI?H+?E?E?HH?? H?H??E I? I???=???L?$ E3??iltA?H??E8 L?H?$(H?? M?3???0 I?M??? L?$xI?L?3?M?I?D?H?3?n8 M?$??I?E3??t+A???I?A?A?fD9 t H?H????tI?H+?? ???H?IH??? M?$H? ?H????H?<)3?+???t)A???I??A?f9)t H?H????tI?H+?? ???H?HH??? M?$H? 6H?H????H?H?+???t$A???I??A?f9)t H?H????uvH?? ???H?HH??? H? H?H+??I? H??? I?????L?$(L?$ H?$? L?(H?$? L?8H?$pH?0A_A^A]A\_^]??H+????$M??M?tdM?t_L?$(M?tUH?$0D?H?? J??H?t<9t H?H?u??u I!I!I!? H?H? 9 I?H?I??H???H?$??H?$WH? H?$0 2??H?t;H?t6L?? H?? L?$0H? A?Q0H?$0?? ? G??tH??H?$8H? _???$L?$ L?$UVWATAUAVAWH?H?`H?3???@???H???H???H??????? H?? H?? H?`I??8H?A?A?iltE3? ? 5 H?H?? D?83???0- I?( H?? ??H9? tK??L???H?????$(H?$ ?7??L???????u M?uM?t L?+L?L?H?A? ?? L???H???j???? L???E3?? A?ilt??<4 H?H?? E? 3??I??, A? ? M?L???? ???A?I?A?>H?? t3A?A? H???????$(H?$ ???L?????????u M?uM?tM?>M?>M?>?}@ tA? I??? L??E@H??H??????E?;C ????D? H?0L?(H?$ H?H????? H!{0H!{(!{ H?P???H?X?H?`?@??'H?0H?tE3?3??2 H?0 E3?3????2 H?tE3?3????2 H?$? H?`A_A^A]A\_^]?USVWATAUAVAWH?$??? H?(B H3??3?3??D??D???D???L?????????H????H????u?9? ? ?? ?\?H? ??M?3?#?? ?L??H?H? ? L ?? L ?w2 ?? ?PH??E?FD??? ??+ @8? u+?T9GPtD?H????= ?? @8? t%@8?$ u H??? ??? ?? I?M?? 8? tUA? tOA?uE3??H?????u7H??????2??H?H?$ L?????8]??? ????#???/ L?>3????L???) H?? H???????H#???? (E?E???tH?? ?? H???t5?t1H???????H?H?$ ????}? H?? ????#??? L????0 ? ? ???H???L????1 ? I? E?E?(H?t?H?6D+?F(D;???E?H? ?? 3?? ?y0 ?? ?=?? t?\M?E?H?? ?tsH?t@ H?t ?x t? f9Hu ??tA;?A??$X ????$P?\L?$HH?$@?$8?T?$0?PD?I??$(H???H?$ ? ?? ?yL????1 ? H??M????/ H????L?????E?t2H?t-H?0H?tE3?3?/ H?0 E3?3????. 3???????L???????u,H?t'H?0H?tE3?3??. H?0 E3?3????. H?E?E?I??*. H?H3??! H?? A_A^A]A\_^[]??USVWATAUAVAWH?$??? H??= H3???3??3????D???H???H???H?????????????u???D?$`9? ? ?? ?\?H? ??M?3?#?? ?L?FH?H? ?= L ?? L ?'. ?? ?PH??E?FD??? ?? @8? u+?T9CPtD?H????? ?? @8? t%@8?$ u H??? ???? ?? I?M??; ?@8? tI?sC?s=H?$`L??L??2?I?H?H?$ D??[??@8}?H?? ?$`?H?#?EH?? ????&3????L???$ H?? H???????H#???? (E?E???tH?? ?? H???t7?t3H?$`L??L???H?H?$ ????}? H?? ?$`?H?#??? ???, ? M= M?.?????L???|. ? M? A?E?(???t?M??D+??(D;???E?H? ?; 3?? ?), ?? ?=?; tD??K\E?I?? ?? H? < H?t$?x t ? f9HuD????t D;?????L?? M??, ?\?" I???+ ?? H?E3??iltA?0?+ L?H?? I? $?? H?I?$H?I?$H?I?$H?I?$ H? I?$(H?? I?(E??Q+ H?? D??? H?t D;"sB?????? A??+ ??? A??\H? ?I?H? K: 3? ??* ?t2?\L?$@?$80 ?$0?TL??D$(?PH?, ?$ ? E3?3??? * ?????I??$X ?$PH???H?$H?\H?$@?$8?T?$0?P?$(H???$ ? L???: ?yL????* ?3 ????* M????D??????}? u H?? uH??I? H?& L?H???E?t2H?t-H?0H?tE3?3?;) H?0 E3?3???() 3?H??????L?????u,H?t'H?0H?tE3?3??( H?0 E3?3????( ?D???E?I??$ ??( H??H3? H?? A_A^A]A\_^[]?3???H?H?H?L? WATAUAVAWH?? L?$@ H?? H?3??H?D?0H??? @? ??(H;? H?H+??u???; H??2 ?(M?H+?;?G?C tH?? ?$( ?$ E3??3???S( H?H?u ? ?? H??$X H? H?#??;?u? ?L ?;?$ sI??$8 L ?? I?H? ~7 3? ??uaH? ?L ??' ?? ?$8 L?$ H?$@?$8?$0?$0 ?$(?$( H?\) M??$ ? ? H? ?L ??' ?? H?$H L?$ H?I( H?$? ?$P M??$? I?0H?$x?$pH?$hA?(?$`A? ?$XI?H?$PI?H?$HI? H?$@A??$8?$8 ?$0?$0 ?$(?$( ?$ ? H?$H ?$P L?$? E3?;?tSL+?H?H?tH?(H?t?;?IG?? tH?? D!t$(D!t$ E3??3???j& H?H??:?????3??$? I?0I?8I?@I?A_A^A]A\_???$UVWH?$?? H?I5 H3?? ?`H? ?5 3?? M?D$0fs?H?H??H?$H fH~? ??pH?$X H ??$h D? H?$8H?PH?$@H?XH?$PH?hH?$`M?tH?H??A9<@u?E ?A?M?L?! ?$xH?xI??$|IE??$pH?tH?H??9<Bu??E ?E?H?I?D??E?}???H?? H?tH??9<Hu?? M H?LE??? D?????? H?$0H??? A? ???? M?H???? H?H??? L??E??? ?????? H?? H??? ??E??$@H?? ???? ???$ ??$ H? H3?? H?$0 H? _^]?UH?$??? H?W3 H3?? ?oM?A? ? H?3???E?s?I ?MH? }3 fH~? ????H???_L?????gL?H???wH??H?H??w?H???$ ??# H? H3?? H?? ]?UH?$??? H??2 H3?? ?oH? ? M?A? H?E?s?H ?3???H~? ?MH? ?2 H???_H?????gL?????wL?H??H?H??w?H???$ ?:# H? H3?? H?? ]?H?8H? Q2 H?$ E3? # H?8?D?$ UH?H?? H??1 H3???? 2 A? H?(H???0E3????8L?????@L?????????$ L???" H??3?# H?? ]???$ UH?H?? H?A1 H3???? ?1 A? H?(H???0E3????8H?? H???@H?? H???????$ L?? " H??3?? H?? ]???$3???A???I;??A? ?G??x>D?H?t*L+?+??H?tA?f?t f?H?H????uH?A? ??H?tf?H?$A???H?(H? ?0 H?u3??Z! H?%?0 H?(?D?$ UH?H?pH?0 H3???? j0 H?(A? H???0E3????8H?? H?????? H?$ H?? ?? H??3?v H?p]??$H?$UH?H?? H??/ H3???? ?/ H??3?L?? M?tH?H??A9<Au??E ?D?M?L?? D???0I???E????tH?H??A9<@u?? E ?D?M?I?D??E??8?????tH?H??A9<@u?? E ?D?M?I?D??E?}????@H?tH??9<Hu?M H?LE???U?? E3??H?H?$ L??}?? H??3?9 L?$? I?I? I?]??$H?$WH?@L?$? 3???? ??? ??? H?$pM?D?E?$E?(?I?fA;r*? I?8A?(D?J???@A8 v?uH?t/I?tI?H?H#?;?M?0?A?? I???C!?M?0?A?? I??C ??*A?;??DA?*A?$A?(I?I?f?t*I?0?A? A+?? ?3??A?c??? H?$x?H?$(? H?$PH?$XH?@_???=?- t3?L? x- L?!- H????H? # H?%, H?$H?$H?$ WATAUAVAWH?0E3??I??H?f? fE?)E?(? ? E?H?E?A?? ?uA?? ??f?f?fA;??, ?f? f#?"? f?t?r ? ? D?/? ?r??M?M?D?$hf#? f?uL??"f?uf?t L?L??f?t f?uL?L? A? I??? ?????A? I??? ??8???L?$hA? I?? ? A? I?? D?? D8l$huE?u? E????????? ?v=???r5H? A? ??f?fA?$? ?????? f?u? H?$pH?$x?H?$`H?0A_A^A]A\_???$H?$H?$UATAUAVAWH?H?P?E3?A?L?D??D?H?. ?uA?? A? ?? ?A?E??? A? I??E?D?H? ?tqI?E??? ?t_L?HE?I?? ? I?A? ? D?? D8mHuE?u ?E?t(?t$I? A? ??2f?? ?tA? ?A??? A? ?-A;?? L?HL?????????? D???H? f;?? A?A+??I???H?? ?????? H? A? A?D?H? ????H? A? H??E?? ??? ?????H???? ??p ????L?HE?H?? ? ?E????? @?? D8mHu?? @??7??? ??*????? f;?? A?A+??I???H??, ?????(rlH?A? A?D?H? ????H?E?? H?? ????H?E??? ????L?HE?H???= E?H???3????L?$P?I?0I?8I?@I?A_A^A]A\]?H?H?H?H? ?WATAUAVAWH?@M?M?H?A? ?u?6? 3???RD??5?( D?? H?? ? tH??%E3??3???$( ?$ ?? ?$pH??(H?? H?? I+??I?;?? I;?? H?5 ( H?t%? ( A;?>3???z H?%?' ?%?' A?iltH?3?? H?H??' A???' H?? H??H?$0?(L;? H?L+??u?;?G??? H?? ?(I+?H;?G?C tH??'?$( ?$ E3??3???? H?5E' H?$0H?? I?L??3 L?H;?iH?$0H+??H?tR?(H?t?;?G?C tH???$( ?$ E3??3???5 H?t<I? 7L?H?? L?H;???5?& ?$pE;??EB???D????D?L?$@A?I?8I?@I?HI?A_A^A]A\_??H?(A???s!?H? z& H? ??t?y t? D?A?H?(??@SH? L?H?H& ?H???H?t9?z t3??E2??A;?!D+?;?H?I????? H;??A?H? [??H?$H?$H?$WAVAWH?@H? ? D??? H?$? ? H?5?% H?? ? ?0 ? H???? ? ??:?? ?;?? ?H? ??t3?? ?H?$? ?H?? ?t{?3??ilt??? ? H???H? ??t>?H??D?? ?,<w$?f?r???$ ?S;?G??$ ?;???+??7?????% ? t(D? H?H?c H?$0?f?$(??$ ?1 ??$ 3?H?L?H? H?tO??% ?t(D? H?H?? H?$0?f?$(??$ ? H????w ?8 ?r?1$ ???I???L% ?tD?? E?u*H?H?t 3?{ H?& H?H???!-?# @?-?# H?$`H?$hH?$pH?@A_A^_??E? H?XH?6# H3??$@H? ?# I? H?? I??d$< I??? E3???D$8 ? H?$@H3?? H?X???$ UH?H?? H??" H3???? # E3??(H???0D?????8A? H???@E3????8H?? ?????? H?$ H?? ?? H??3? H?? ]??H?H?H?WH?PH?3??H?D?(H???? H?$@ H?$H L?$ ?H??$ 0 H?$(?$8@ H?$0?? H?$`H?$hH?$pH?P_???I?I?WH?03??I???$ I????$*f?$.A??? H?$ L?D?H??:???H?$@H?$HH?0_???I?I?I? I?WAVAWH?@3?3?I?fE??????$:f?$>E?M?u ? ?? H?- H?$0?j ?A?ilt? E 3???> H?H?u ? ?? L?3??? H?$hH?$0H?$(L?A? I??$ ? ?= ?t?=# ?8H?H?t/?u4?t?> ?'D?H? M?? ?H?fD?<H? ?$h?f?3???V ?H?$`H?$pH?$xH?@A_A^_??L?I?I?VWAVH?@3??E3?E?????H??A?ilt3?D$:f?$>E? ?8 H?H?u? ?n3??D?? H?$0H?? H?$xH?$0H?$(L?A? H??$ ?? ??u?t ?t?> ?? ?3???s H?$`H?$h?H?@A^_^???$H?$H?$WATAUAVAWH? D?3??E?H?A?? A??? A??? A??'A?}? A??? A??rA?? ? ? f?? ?D?? D?D;?.??A??A?uA?? D;?A?;? E?A;?F???A???A?? ?A?H?H;?? D?3?A??D?A;??;L?D?fA;?-? E?u&L?I?I??? H;??fD??E;??????A?? ?A;?? ? D?D;?>f;?9??;??A?? A?u ?A?? D;??A?#??;?D???D:??A??/?A;?)D?H??Q ?H;???????D??$XH?$`?H?$PH? A_A^A]A\_???$WH? I?A?H?t? ??w1H? ? ?H? ??t ?{ tH????D?H?t???A?H?$0H? _???raD??H?L;?Q???sJ???v ?}<v3???uA?u+??f3??uA?rufA9Aw????wA?r??3????$WH? H?H??? H?H?H?$0H? _?< ??????ff ? H; 9 uH?f???u??? ?? ?)??(M?8H?I?? ? H?(??@SH? A? H?L?D?L?A??tA?McP?L?c?#?c??H??HK??t ?????3??H? [?????????ff ? H+??r"?tf?: u,H?????u??I?u M?t?: u H?????3????I?t7H?H; u[H?H;D uLH?H;D u=H?H;D u.H? I???? M?I?t??H; uH?I?????H?H?H?H? H??;????????? ????????????????????????H+?? I?OsXM?I?t D H? H?I??????tf ? ? H????A?u???fffff ? ?????H?rp??tL+?Bo?I??I?I? ? I? ?o ?oL H? fA?I????O???fffffff ? ffffff ? ?t? I??H???u?? ? ?????????H? r? D @H?? ???? ? ?o ?oL f?f?H?@?oD ?oL ???????? I? s?? $ M?I???????? ? ???????I??OsOM?I?tH? ??I???u??tf ? ? ?H????u???fffff ? ???H??tH??tL+???oD?@???I?I? ? I? ?oD ?oL ?? fAf I???T???fffffff ? ffffff ? ?t??? I???u?? ? ?????????H? ??w? H?? D @???? ? ?oD ?oL ??????@?oD ?o f?f? ???? I? s?? $ M?I?????????????I?r,?I?I?I?Gs`M?I??????u??t D A??I???fffffff ? fffffff ? fffffff ? ? ??tL+??H??I?M?I?I?t I?J? ??I??? O? ????H?H?H?H? H?(H?0H?8H?@I????t A??I??????? R e g i s t r y \ M a c h i n e \ S y s t e m \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ C o m p u t e r N a m e \ A c t i v e C o m p u t e r N a m e ?????\ R e g i s t r y \ M a c h i n e \ S y s t e m \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ C o m p u t e r N a m e \ C o m p u t e r N a m e ???C o m p u t e r N a m e ???P a r a m e t e r s ?????C a p t u r e M o d e ????R e f C o u n t ???????P e r s i s t e n t R e f C o u n t ?????6 . 1 . 0 0 0 0 ???????N D I S C A P { E A 2 4 C D 6 C - D 1 7 A - 4 3 4 8 - 9 1 9 0 - 0 9 F 0 D 5 B E 8 3 D D } ?M i c r o s o f t N D I S C a p t u r e ?N U L L ???*** EtwEnableCallback called (IsEnabled=%d) PU 6? ? ? ? ? ? ? ?? f? V? F? 4? ? ? ? ? ? ? x? P? <? 0? Z? ? ? ? ? ? ? ? ? ? d? Z? J? >? 0? ? ? ? H? ? ?R $ Dd DV ? ?? ?? ? ? ? ? ? ? ? ? ? ? ? ? ?n ?.)G F?#>???? ? ?? ? ?? ? ?? ?? ? ?? ? ?? ?? ? ?? ?? ? ?? ? ?? ? ?? ?? ? ?? ? ?E x t e r n a l S y n t h e t i c E m u l a t e d I n t e r n a l (c @c Xc pc ? p ` RSDS?P??%K? ???+ ndiscap.pdb 45 , ? ?p`P 4 2p 0? t d 4 2? T 4 R? p ` t d 4 2? T 4 2???p` t d T 4 2??? 4? ? p ? ? t d 4 ?? t d T 4 2? 4 2 ? ?p`P 4 ??? ? ?p`P 4 2p 4 R??? ? p `P 4 rp d T 4 r??p r0 4 R????p`P 4 4 2p! !4 !?????p`P' ? ? ??p`0P? ? ' ? ? ??p`0P? ? # #d" #T! #4 # ????p " 4& " p`P ? P ? ? b ?P? p B ?P? ` # t 4 ? P? p d 4 r p d T 4 R????p t d 4 ?????P d T 4 r????p 20 d T 4 r??p ? ? @ d T 4 ?p d 4 R p d T 4 r??p T 4 r? p ` d T 4 2????p 4 2p 20 2?-?+ ? ??? ? ? 0b l ? l F ? H ? ? ? ? ? ? ? ? ? ( e ( ? 4e ? ? Pe ? " he $ ? ? ? c" ? d" ?" ? ?" ?# ? ?# h$ ? h$ L& ? L& ?& f ?& * f * ?* 8f ?* ?* Df ?* ?- Tf ?- ?1 pf 2 ?7 ? ?7 ?: ? ?: ?< ? ?< H= ? H= > ? > #> g $> ?> g ?> 2? g 4? ?? 8f ?? ?? 4g ?? P@ @g P@ ? Tg ? ? pg C ? ? ? ? ? ? ? ? J 5J 4g 8J ? ? ? ? ? ? M h M ? g ? 2N h 4N ? 8h ? ? Lh ? ? hh ? ? ?h ? S ? ?S ? ? ? T 4g T lT ? ?T GU ? ?U ? ? ? ? ? ? S? ?d H?$ UVWAVAWH?$??` H?H?L?5k H?$`I??%??H?f H?$p???L?=? H?$PI?????3??iltf?57????f?,???H?=???H?????H???H?u ?k? ?p H? ???H?????L?? H????A? 3??? H?? ?? ????? H?? L?? H?1??A? ?*???? H?? L?? H?i??????ub?? H?? H?,???? 3??$@H?$B?$Jf?$Nf?$@????H?? A? H?$@E3??$(H?H?$ ?.??H?? H?t ?t??H?? H?? H?t?[??? H??3?????H?)~??H? ???D$pL$PH?????????? ?E?M?D$`H???T??H??( ?E???????H???-??H??????H?H????H? H????H?8H?i??H???J??H??????H?H?h??H?@H????H?hH?5???????H????H????H????????????t)H?U L? ? H???H?$0L?$(L?$ ???H?|??L? m??L??H???????t,? ? ???? tH?#??D??$(?$ ???????H?$? H?` A_A^_^]?H????H?tH?2?-?+ H;? H?H????? ?)???????? D I S C A P M i c r o s o f t N D I S C a p t u r e ?{ E A 2 4 C D 6 C - D 1 7 A - 4 3 4 8 - 9 1 9 0 - 0 9 F 0 D 5 B E 8 3 D D } ?6 . 1 . 0 0 0 0 ?? j? ? p? v? ` 6? ? ? ? ? ? ? ?? f? V? F? 4? ? ? ? ? ? ? x? P? <? 0? Z? ? ? ? ? ? ? ? ? ? d? Z? J? >? 0? ? ? ? H? ? ?RtlInitUnicodeString ? ExAllocatePoolWithTag KRtlCopyUnicodeString ?KeInitializeSpinLock k EtwRegister o EtwWrite n EtwUnregister HZwClose SKeAcquireSpinLockRaiseToDpc ?KeReleaseSpinLock ? ExFreePoolWithTag L memcpy_s j EtwProviderEnabled 3KfRaiseIrql ?KeLowerIrql |MmIsAddressValid ?MmMapLockedPagesSpecifyCache 8RtlCompareMemory T DbgPrint ?ZwOpenKey ?ZwQueryValueKey ?ZwSetValueKey ntoskrnl.exe ? NdisFRegisterFilterDriver ? NdisFDeregisterFilterDriver ? NdisFNetPnPEvent NdisAllocateMemoryWithTagPriority ? NdisFGetOptionalSwitchHandlers ? NdisFreeMemory ? NdisInitializeEvent ? NdisFOidRequest ?NdisWaitEvent ?NdisSetEvent ? NdisFreeCloneOidRequest ? NdisFOidRequestComplete NdisAllocateCloneOidRequest ? NdisFSetAttributes ? NdisEnumerateFilterModules ?NdisOpenConfigurationEx ? NdisCloseConfiguration ? NdisFIndicateStatus ? NdisFSendNetBufferLists ? NdisFIndicateReceiveNetBufferLists NDIS.SYS ? ?8 ?x ?P ? h ? ? ? ? ? ? ? ? ? 9 ? ? ? ? ? ( 8 H X h ? ? ? :% ? ? h? T ? ? W E V T _ T E M P L A T E M U I ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? " S t r i n g F i l e I n f o ? 0 0 0 0 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n ? , F i l e D e s c r i p t i o n M i c r o s o f t N D I S P a c k e t C a p t u r e F i l t e r D r i v e r r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) 8 I n t e r n a l N a m e N D I S C A P . S Y S ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . @ O r i g i n a l F i l e n a m e N D I S C A P . S Y S j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ? 1 1 ? 0 0? 0 0? P P@ P PT p p? ? ? ?( ? ? ? ? ? ?< ? ? ? ? ? ? ? ? $ R e s p o n s e T i m e I n f o S t a r t S t o p $ L o a d i n g S t a t e ( U n l o a d i n g S t a t e E r r o r I n f o r m a t i o n V e r b o s e D r i v e r L o a d $ D r i v e r U n o a d L a y e r L o a d $ L a y e r U n l o a d R u l e s @ P a c k e t F r a g m e n t ( % 3 b y t e s ) @ P a c k e t M e t a d a t a ( % 3 b y t e s ) P V M S w i t c h P a c k e t F r a g m e n t ( % 9 b y t e s ) 8 C a p t u r e R u l e s C o u n t = % 1 ? D r i v e r L o a d e d ( F r i e n d l y N a m e = % 1 U n i q u e N a m e = % 2 S e r v i c e N a m e = % 3 ) ? D r i v e r U n l o a d e d ( F r i e n d l y N a m e = % 1 U n i q u e N a m e = % 2 S e r v i c e N a m e = % 3 ) ? A t t a c h e d t o m i n i p o r t i n t e r f a c e % 1 a b o v e l a y e r i n t e r f a c e % 2 w i t h m e d i a t y p e % 3 ( c o n t e x t = % 4 ) ? D e t a c h e d f r o m m i n i p o r t i n t e r f a c e % 1 a b o v e l a y e r i n t e r f a c e % 2 w i t h m e d i a t y p e % 3 ( c o n t e x t = % 4 ) | C a p t u r e R u l e : I d = % 1 D i r e c t i v e = % 2 V a l u e L e n g t h = % 3 V a l u e = % 4 l D r i v e r l o a d f a i l e d w i t h s t a t u s = % 1 a t l o c a t i o n % 2 ? F i l t e r A t t a c h f a i l e d w i t h s t a t u s = % 1 a t l o c a t i o n % 2 ( c o n t e x t = % 3 ) ? R e c e i v e d I n v a l i d C a p t u r e R u l e : I d = % 1 D i r e c t i v e = % 2 V a l u e L e n g t h = % 3 V a l u e = % 4 ? E n t e r i n g s t a t e ' % 2 ' f r o m s t a t e ' % 1 ' ( l o c a t i o n = % 3 , c o n t e x t = % 4 ) ? E n t e r i n g s t a t e ' % 2 ' f r o m s t a t e ' % 1 ' ( l o c a t i o n = % 3 , c o n t e x t = % 4 ) @ R x P a c k e t P r o c e s s i n g S t a r t D R x P a c k e t P r o c e s s i n g C o m p l e t e S t a r t S t a t e E n d S t a t e $ F r a m e C o n t r o l M u l t i L a y e r ( I n t e r f a c e I n d e x E t h e r T y p e 0 S o u r c e M A C A d d r e s s 8 D e s t i n a t i o n M A C A d d r e s s ( A n y M A C A d d r e s s 0 S o u r c e I P v 4 A d d r e s s < D e s t i n a t i o n I P v 4 A d d r e s s , A n y I P v 4 A d d r e s s 0 S o u r c e I P v 6 A d d r e s s < D e s t i n a t i o n I P v 6 A d d r e s s , A n y I P v 6 A d d r e s s I P P r o t o c o l 4 P a c k e t T r u n c a t e B y t e s , C u s t o m M A C O f f s e t , C u s t o m I P O f f s e t O F F L T E G T E E Q U M A S K L I S T R A N G E N E Q N M A S K N L I S T N R A N G E CRIM8% n ?.)G F?#>???$ WEVT% ???? ? ? ? P ? ? X! CHAN? ? ????d M i c r o s o f t - W i n d o w s - N D I S - P a c k e t C a p t u r e / D i a g n o s t i c MAPS? ? X $ VMAP4 ? ? ? 0 0VMAP? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?MAPl ` ? ? ? ? ? ? ? ? ? ? ? D i r e c t i v e M a p R u l e I d M a p u t : O p c o d e M a p TTBL? TEMP@ 8 ?7?/??qC??9O ??@ D? E v e n t D a t a A??I ? D a t a 1 K? N a m e M i n i p o r t I f I n d e x A??C ? D a t a + K? N a m e L o w e r I f I n d e x A??C ? D a t a + K? N a m e F r a g m e n t S i z e A??; ? D a t a # K? N a m e F r a g m e n t ? ? ? ? $ M i n i p o r t I f I n d e x L o w e r I f I n d e x F r a g m e n t S i z e F r a g m e n t TEMP4 ? ?:?!??!?/D9? ??? D? E v e n t D a t a A??I ? D a t a 1 K? N a m e M i n i p o r t I f I n d e x A??C ? D a t a + K? N a m e L o w e r I f I n d e x A??C ? D a t a + K? N a m e S o u r c e P o r t I d A??G ? D a t a / K? N a m e S o u r c e P o r t N a m e A??E ? D a t a - K? N a m e S o u r c e N i c N a m e A??E ? D a t a - K? N a m e S o u r c e N i c T y p e A??K ? D a t a 3 K? N a m e D e s t i n a t i o n C o u n t A??O Z? C o m p l e x D a t a ) K? N a m e D e s t i n a t i o n ?A??C ? D a t a + K? N a m e F r a g m e n t S i z e A??; ? D a t a # K? N a m e F r a g m e n t A??A ? D a t a ) K? N a m e O O B D a t a S i z e A??9 ? D a t a ! K? N a m e O O B D a t a < \ | ? ? ? $ D \ x ? ? ? $ M i n i p o r t I f I n d e x L o w e r I f I n d e x S o u r c e P o r t I d $ S o u r c e P o r t N a m e S o u r c e N i c N a m e S o u r c e N i c T y p e ( D e s t i n a t i o n C o u n t D e s t i n a t i o n F r a g m e n t S i z e F r a g m e n t O O B D a t a S i z e O O B D a t a ( D e s t i n a t i o n P o r t I d , D e s t i n a t i o n P o r t N a m e , D e s t i n a t i o n N i c N a m e , D e s t i n a t i o n N i c T y p e TEMP@ ? MT2V??*?' ? ??@ D? E v e n t D a t a A??I ? D a t a 1 K? N a m e M i n i p o r t I f I n d e x A??C ? D a t a + K? N a m e L o w e r I f I n d e x A??C ? D a t a + K? N a m e M e t a d a t a S i z e A??; ? D a t a # K? N a m e M e t a d a t a ? @ ` $ M i n i p o r t I f I n d e x L o w e r I f I n d e x M e t a d a t a S i z e M e t a d a t a TEMPT ` Y#?o% ?@?- ??? D? E v e n t D a t a A??I ? D a t a 1 K? N a m e M i n i p o r t I f I n d e x A??C ? D a t a + K? N a m e L o w e r I f I n d e x ? ? $ M i n i p o r t I f I n d e x L o w e r I f I n d e x TEMP? B{??????? ?? D? E v e n t D a t a A??7 ? D a t a K? N a m e R u l e I d A??= ? D a t a % K? N a m e D i r e c t i v e A??7 ? D a t a K? N a m e L e n g t h A??5 ? D a t a K? N a m e V a l u e X h ? | ? ? R u l e I d D i r e c t i v e L e n g t h V a l u e TEMP? L ??50? & 6?!\ ??` D? E v e n t D a t a A??? ? D a t a ' K? N a m e R u l e s C o u n t ` R u l e s C o u n t TEMP$ ? z?5?4????p ??2 D? E v e n t D a t a A??C ? D a t a + K? N a m e F r i e n d l y N a m e A??? ? D a t a ' K? N a m e U n i q u e N a m e A??A ? D a t a ) K? N a m e S e r v i c e N a m e A??9 ? D a t a ! K? N a m e V e r s i o n 4 T p ? F r i e n d l y N a m e U n i q u e N a m e S e r v i c e N a m e V e r s i o n TEMPT ?S????r& ??J D? E v e n t D a t a A??I ? D a t a 1 K? N a m e M i n i p o r t I f I n d e x A??C ? D a t a + K? N a m e L o w e r I f I n d e x A??= ? D a t a % K? N a m e M e d i a T y p e A??K ? D a t a 3 K? N a m e R e f e r e n c e C o n t e x t p ? ? ? $ M i n i p o r t I f I n d e x L o w e r I f I n d e x M e d i a T y p e ( R e f e r e n c e C o n t e x t TEMP? I?\? ??t? ? ??? D? E v e n t D a t a A??= ? D a t a % K? N a m e E r r o r C o d e A??; ? D a t a # K? N a m e L o c a t i o n A??9 ? D a t a ! K? N a m e C o n t e x t D \ t E r r o r C o d e L o c a t i o n C o n t e x t TEMP ? ?lr?? ? ?? ??, D? E v e n t D a t a A??E ? D a t a - K? N a m e P r e v i o u s S t a t e A??= ? D a t a % K? N a m e N e x t S t a t e A??; ? D a t a # K? N a m e L o c a t i o n A??9 ? D a t a ! K? N a m e C o n t e x t $ 8 $ X p ? P r e v i o u s S t a t e N e x t S t a t e L o c a t i o n C o n t e x t OPCO? 0? 0? 0 0, 0< w i n : I n f o w i n : S t a r t w i n : S t o p L o a d U n l o a d LEVL? P? P? P? w i n : E r r o r ( w i n : I n f o r m a t i o n a l w i n : V e r b o s e TASK p t p ? p ? p ? p ? D r i v e r L o a d D r i v e r U n l o a d L a y e r L o a d L a y e r U n l o a d R u l e s KEYWd ????p ????? ? ????? ????? ????? ????? @ ???? ? ????8 ????P ????l ????? ????? ????? ???? @ ????( ? ????P ????h ????? ????? ????? ????? ????! 1 0! E t h e r n e t 8 0 2 . 3 W i r e l e s s W A N T u n n e l N a t i v e 8 0 2 . 1 1 V M S w i t c h $ P a c k e t T r u n c a t e d P a c k e t S t a r t P a c k e t E n d u t : S e n d P a t h $ u t : R e c e i v e P a t h ( u t : L 3 C o n n e c t P a t h ( u t : L 2 C o n n e c t P a t h u t : C l o s e P a t h ( u t : A u t h e n t i c a t i o n ( u t : C o n f i g u r a t i o n u t : G l o b a l u t : D r o p p e d u t : P i i P r e s e n t u t : P a c k e t u t : A d d r e s s , u t : S t d T e m p l a t e H i n t , u t : S t a t e T r a n s i t i o n ( w i n : R e s p o n s e T i m e EVNT? ? ?? ? ? h ?$ ? ? ?? ?8 ? h ?$ ? ? ?? ? ? h ?$ ? ? ? ?? ? ? h X ?$ ? ? ? ?? ? ? t ?$ ? ? ? ?? ? ? t ?$ ? ? ? ?? ? ? t ?$ ? ? ? ?? ? ? t ?$ ? ? ? ?? ? ? h X ?$ ? ? ? ?? ? ? \ ? ?$ ? ? ? ?? ? ? \ % ? ? ? ?? ? ? \ X % ? ? ? ?? ? ? t % ? ? ? ?? ? ? t % ? ? ?? ? ? t % ? ? ?? ? ? t % ? ? ?? ? ? t (% ? ? ?? ? ? t 0% ? @ ? ? ? ? ? ? ? ? ? ? ? ? P ? P P ` P ` P ` P ` M i c r o s o f t N D I S C a p t u r e + M i c r o s o f t N D I S P a c k e t C a p t u r e F i l t e r D r i v e r ??? ????+?? N?wh&????z? ? * ? ? ? ? W E V T _ T E M P L A T E M U I M U I e n - U S ` ?????? ? p @???
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de