/ MacWorld 1998 October / Macworld (1998-10).dmg / Updaters / EtherPeek35-352Patch.sea / Packet Decoders / NetBIOS Decoders.rsrc

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 05 16 07 00 02 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000010| 00 00 00 00 00 00 00 00 | 00 02 00 00 00 09 00 00 |........|........|
|00000020| 00 32 00 00 00 20 00 00 | 00 02 00 00 00 52 00 00 |.2... ..|.....R..|
|00000030| ea 71 44 43 6f 64 61 67 | 30 31 01 00 00 00 00 00 |.qDCodag|01......|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 00 00 00 00 01 00 00 00 | d0 6f 00 00 cf 6f 00 00 |........|.o...o..|
|00000060| 1a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000080| 00 00 10 4e 65 74 42 49 | 4f 53 20 44 65 63 6f 64 |...NetBI|OS Decod|
|00000090| 65 72 73 72 74 64 6d 74 | 73 61 61 74 65 72 61 6c |ersrtdmt|saateral|
|000000a0| 6c 61 02 00 44 43 6f 64 | 61 67 30 31 00 00 00 00 |la..DCod|ag01....|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|000000c0| 00 00 00 00 b1 c9 15 b3 | 00 00 00 00 00 00 ea 71 |........|.......q|
|000000d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 43 42 54 | 68 69 73 20 64 6f 63 75 |.....CBT|his docu|
|00000160| 6d 65 6e 74 20 69 73 20 | 75 73 65 64 20 62 79 20 |ment is |used by |
|00000170| 41 47 20 47 72 6f 75 70 | 20 50 65 65 6b 20 70 72 |AG Group| Peek pr|
|00000180| 6f 64 75 63 74 73 20 74 | 6f 20 64 65 63 6f 64 65 |oducts t|o decode|
|00000190| 20 70 61 63 6b 65 74 73 | 2e 00 00 00 48 00 03 44 | packets|....H..D|
|000001a0| 57 52 44 00 00 00 00 00 | 90 c2 11 44 65 73 74 69 |WRD.....|...Desti|
|000001b0| 6e 61 74 69 6f 6e 20 50 | 6f 72 74 3a 00 4d 4f 56 |nation P|ort:.MOV|
|000001c0| 45 00 00 00 02 81 00 00 | 00 54 4e 58 54 00 00 00 |E.......|.TNXT...|
|000001d0| 00 00 00 00 10 55 44 50 | 20 4e 65 74 42 49 4f 53 |.....UDP| NetBIOS|
|000001e0| 20 44 65 73 74 00 00 00 | c2 00 07 44 57 52 44 00 | Dest...|...DWRD.|
|000001f0| 00 00 00 00 90 c2 07 4c | 65 6e 67 74 68 3a 00 48 |.......L|ength:.H|
|00000200| 57 52 44 00 00 00 00 00 | 90 c2 09 43 68 65 63 6b |WRD.....|...Check|
|00000210| 73 75 6d 3a 00 43 4b 53 | 4d 00 00 00 03 00 24 14 |sum:.CKS|M.....$.|
|00000220| 1d 43 68 65 63 6b 73 75 | 6d 20 69 6e 76 61 6c 69 |.Checksu|m invali|
|00000230| 64 2e 20 53 68 6f 75 6c | 64 20 62 65 3a 20 00 53 |d. Shoul|d be: .S|
|00000240| 55 42 47 00 00 00 08 10 | 00 00 00 54 45 51 55 00 |UBG.....|...TEQU.|
|00000250| 00 00 89 01 00 00 14 55 | 44 50 20 4e 65 74 42 49 |.......U|DP NetBI|
|00000260| 4f 53 20 4e 61 6d 65 20 | 53 76 63 54 45 51 55 00 |OS Name |SvcTEQU.|
|00000270| 00 00 8a 01 00 00 14 49 | 50 20 4e 65 74 42 49 4f |.......I|P NetBIO|
|00000280| 53 20 44 67 72 61 6d 20 | 53 76 63 54 45 51 55 00 |S Dgram |SvcTEQU.|
|00000290| 00 00 8b 01 00 00 13 49 | 50 20 4e 65 74 42 49 4f |.......I|P NetBIO|
|000002a0| 53 20 53 65 73 73 20 53 | 76 63 00 00 00 00 68 00 |S Sess S|vc....h.|
|000002b0| 03 4c 41 42 4c 00 00 00 | 00 00 00 b1 37 4e 65 74 |.LABL...|....7Net|
|000002c0| 42 49 4f 53 20 4e 61 6d | 65 20 53 65 72 76 69 63 |BIOS Nam|e Servic|
|000002d0| 65 20 2d 20 4e 65 74 77 | 6f 72 6b 20 42 61 73 69 |e - Netw|ork Basi|
|000002e0| 63 20 49 6e 70 75 74 2f | 4f 75 70 75 74 20 53 79 |c Input/|Ouput Sy|
|000002f0| 73 74 65 6d 00 4d 4f 56 | 45 00 00 00 00 0d 00 00 |stem.MOV|E.......|
|00000300| 00 54 4e 58 54 00 00 00 | 00 00 00 00 0a 44 4e 53 |.TNXT...|.....DNS|
|00000310| 20 43 6f 6d 6d 6f 6e 00 | 00 02 d2 00 1b 54 45 51 | Common.|.....TEQ|
|00000320| 55 00 00 00 00 10 00 00 | 07 49 50 20 4e 75 6c 6c |U.......|.IP Null|
|00000330| 00 4c 41 42 4c 00 00 00 | 00 00 00 b1 3b 4e 65 74 |.LABL...|....;Net|
|00000340| 42 49 4f 53 20 44 61 74 | 61 67 72 61 6d 20 53 65 |BIOS Dat|agram Se|
|00000350| 72 76 69 63 65 20 2d 20 | 4e 65 74 77 6f 72 6b 20 |rvice - |Network |
|00000360| 42 61 73 69 63 20 49 6e | 70 75 74 2f 4f 75 70 75 |Basic In|put/Oupu|
|00000370| 74 20 53 79 73 74 65 6d | 00 54 53 55 42 00 00 00 |t System|.TSUB...|
|00000380| 00 00 00 00 07 4e 42 20 | 54 79 70 65 00 48 42 59 |.....NB |Type.HBY|
|00000390| 54 00 00 00 00 04 90 c2 | 06 46 6c 61 67 73 3a 43 |T.......|.Flags:C|
|000003a0| 42 49 54 00 00 00 01 04 | 00 14 0e 46 69 72 73 74 |BIT.....|...First|
|000003b0| 20 46 72 61 67 6d 65 6e | 74 43 4c 53 45 00 00 00 | Fragmen|tCLSE...|
|000003c0| 00 00 00 14 12 4e 6f 74 | 20 46 69 72 73 74 20 46 |.....Not| First F|
|000003d0| 72 61 67 6d 65 6e 74 43 | 42 49 54 00 00 00 00 04 |ragmentC|BIT.....|
|000003e0| 00 14 15 4d 6f 72 65 20 | 46 72 61 67 6d 65 6e 74 |...More |Fragment|
|000003f0| 73 20 46 6f 6c 6c 6f 77 | 00 43 4c 53 45 00 00 00 |s Follow|.CLSE...|
|00000400| 00 00 00 14 11 4e 6f 20 | 4d 6f 72 65 20 46 72 61 |.....No |More Fra|
|00000410| 67 6d 65 6e 74 73 00 44 | 49 56 47 00 00 00 04 04 |gments.D|IVG.....|
|00000420| 00 00 00 41 4e 44 47 00 | 00 00 03 04 00 00 00 43 |...ANDG.|.......C|
|00000430| 53 54 23 ff ff ff ff 04 | 00 14 0c 4e 42 20 4e 6f |ST#.....|...NB No|
|00000440| 64 65 20 54 79 70 65 48 | 57 52 44 00 00 00 00 04 |de TypeH|WRD.....|
|00000450| 90 c2 0c 44 61 74 61 67 | 72 61 6d 20 49 44 3a 49 |...Datag|ram ID:I|
|00000460| 50 4c 47 00 00 00 00 00 | 90 c2 12 53 6f 75 72 63 |PLG.....|...Sourc|
|00000470| 65 20 49 50 20 41 64 64 | 72 65 73 73 3a 44 57 52 |e IP Add|ress:DWR|
|00000480| 44 00 00 00 00 00 90 c2 | 13 53 6f 75 72 63 65 20 |D.......|.Source |
|00000490| 50 6f 72 74 20 4e 75 6d | 62 65 72 3a 00 44 57 52 |Port Num|ber:.DWR|
|000004a0| 44 00 00 00 00 10 90 c2 | 10 44 61 74 61 67 72 61 |D.......|.Datagra|
|000004b0| 6d 20 4c 65 6e 67 74 68 | 3a 44 57 52 44 00 00 00 |m Length|:DWRD...|
|000004c0| 00 00 90 c2 0e 50 61 63 | 6b 65 74 20 4f 66 66 73 |.....Pac|ket Offs|
|000004d0| 65 74 3a 54 45 51 55 00 | 00 00 00 10 00 00 10 4e |et:TEQU.|.......N|
|000004e0| 42 20 50 6f 73 20 53 65 | 73 73 20 52 65 73 70 54 |B Pos Se|ss RespT|
|000004f0| 45 51 55 00 00 00 10 02 | 00 00 10 4e 42 20 44 67 |EQU.....|...NB Dg|
|00000500| 72 61 6d 20 53 72 63 20 | 44 73 74 54 45 51 55 00 |ram Src |DstTEQU.|
|00000510| 00 00 11 02 00 00 10 4e | 42 20 44 67 72 61 6d 20 |.......N|B Dgram |
|00000520| 53 72 63 20 44 73 74 54 | 45 51 55 00 00 00 12 02 |Src DstT|EQU.....|
|00000530| 00 00 10 4e 42 20 44 67 | 72 61 6d 20 53 72 63 20 |...NB Dg|ram Src |
|00000540| 44 73 74 54 45 51 55 00 | 00 00 13 02 00 00 0c 4e |DstTEQU.|.......N|
|00000550| 42 20 44 67 72 61 6d 20 | 45 72 72 54 45 51 55 00 |B Dgram |ErrTEQU.|
|00000560| 00 00 14 02 00 00 0d 4e | 42 20 44 67 72 61 6d 20 |.......N|B Dgram |
|00000570| 44 65 73 74 00 54 45 51 | 55 00 00 00 15 02 00 00 |Dest.TEQ|U.......|
|00000580| 0d 4e 42 20 44 67 72 61 | 6d 20 44 65 73 74 00 54 |.NB Dgra|m Dest.T|
|00000590| 45 51 55 00 00 00 16 02 | 00 00 0d 4e 42 20 44 67 |EQU.....|...NB Dg|
|000005a0| 72 61 6d 20 44 65 73 74 | 00 54 45 51 55 00 00 00 |ram Dest|.TEQU...|
|000005b0| 00 10 00 00 07 49 50 20 | 4e 75 6c 6c 00 54 4c 54 |.....IP |Null.TLT|
|000005c0| 45 00 00 05 dc 10 00 00 | 07 49 50 20 4e 75 6c 6c |E.......|.IP Null|
|000005d0| 00 44 55 4d 50 00 00 00 | 00 10 90 c2 10 4e 61 6d |.DUMP...|.....Nam|
|000005e0| 65 73 2f 55 73 65 72 20 | 44 61 74 61 3a 00 00 01 |es/User |Data:...|
|000005f0| 48 00 0e 54 45 51 55 00 | 00 00 00 10 00 00 07 49 |H..TEQU.|.......I|
|00000600| 50 20 4e 75 6c 6c 00 4c | 41 42 4c 00 00 00 00 00 |P Null.L|ABL.....|
|00000610| 00 b1 3a 4e 65 74 42 49 | 4f 53 20 53 65 73 73 69 |..:NetBI|OS Sessi|
|00000620| 6f 6e 20 53 65 72 76 69 | 63 65 20 2d 20 4e 65 74 |on Servi|ce - Net|
|00000630| 77 6f 72 6b 20 42 61 73 | 69 63 20 49 6e 70 75 74 |work Bas|ic Input|
|00000640| 2f 4f 75 70 75 74 20 53 | 79 73 74 65 6d 54 53 55 |/Ouput S|ystemTSU|
|00000650| 42 00 00 00 00 00 00 00 | 07 4e 42 20 54 79 70 65 |B.......|.NB Type|
|00000660| 00 48 42 59 54 00 00 00 | 00 04 90 c2 06 46 6c 61 |.HBYT...|.....Fla|
|00000670| 67 73 3a 43 42 49 54 00 | 00 00 00 04 00 14 13 4c |gs:CBIT.|.......L|
|00000680| 65 6e 67 74 68 20 45 78 | 74 65 6e 73 69 6f 6e 20 |ength Ex|tension |
|00000690| 4f 6e 00 43 4c 53 45 00 | 00 00 00 00 00 14 14 4c |On.CLSE.|.......L|
|000006a0| 65 6e 67 74 68 20 45 78 | 74 65 6e 73 69 6f 6e 20 |ength Ex|tension |
|000006b0| 4f 66 66 44 45 43 52 00 | 00 00 02 00 00 00 00 47 |OffDECR.|.......G|
|000006c0| 4c 4e 47 00 00 00 00 04 | 00 00 00 49 4e 43 52 00 |LNG.....|...INCR.|
|000006d0| 00 00 04 00 00 00 00 41 | 4e 44 47 00 01 ff ff 04 |.......A|NDG.....|
|000006e0| 00 00 00 44 47 4c 42 00 | 00 00 00 04 90 c2 07 4c |...DGLB.|.......L|
|000006f0| 65 6e 67 74 68 3a 00 53 | 55 42 47 00 00 00 04 10 |ength:.S|UBG.....|
|00000700| 00 00 00 54 45 51 55 00 | 00 00 00 02 00 00 0b 4e |...TEQU.|.......N|
|00000710| 42 20 53 65 73 73 20 4d | 73 67 00 54 53 54 23 00 |B Sess M|sg.TST#.|
|00000720| 00 00 80 02 00 00 12 4e | 42 20 42 72 20 4d 73 67 |.......N|B Br Msg|
|00000730| 20 54 79 70 65 20 24 38 | 30 00 00 01 42 00 11 54 | Type $8|0...B..T|
|00000740| 45 51 55 00 00 00 00 10 | 00 00 07 49 50 20 4e 75 |EQU.....|...IP Nu|
|00000750| 6c 6c 00 47 42 59 54 00 | 00 00 00 02 00 00 00 54 |ll.GBYT.|.......T|
|00000760| 4c 54 45 00 00 00 86 02 | 00 00 0f 4e 42 20 43 6f |LTE.....|...NB Co|
|00000770| 6e 74 69 6e 75 61 74 69 | 6f 6e 00 53 45 51 55 00 |ntinuati|on.SEQU.|
|00000780| 00 00 00 02 00 00 00 53 | 4b 49 50 00 00 00 04 00 |.......S|KIP.....|
|00000790| 00 00 00 54 47 54 45 00 | 00 00 0f 02 00 00 0f 4e |...TGTE.|.......N|
|000007a0| 42 20 43 6f 6e 74 69 6e | 75 61 74 69 6f 6e 00 53 |B Contin|uation.S|
|000007b0| 47 54 45 00 00 00 16 02 | 00 00 00 53 4b 49 50 00 |GTE.....|...SKIP.|
|000007c0| 00 00 01 00 00 00 00 54 | 47 54 45 00 00 00 80 02 |.......T|GTE.....|
|000007d0| 00 00 0f 4e 42 20 43 6f | 6e 74 69 6e 75 61 74 69 |...NB Co|ntinuati|
|000007e0| 6f 6e 00 48 42 59 54 00 | 00 00 00 02 90 c2 0c 50 |on.HBYT.|.......P|
|000007f0| 61 63 6b 65 74 20 54 79 | 70 65 3a 53 47 54 45 00 |acket Ty|pe:SGTE.|
|00000800| 00 00 80 02 00 00 00 53 | 4b 49 50 00 00 00 02 00 |.......S|KIP.....|
|00000810| 00 00 00 43 53 54 23 00 | 00 00 80 02 00 14 0f 4e |...CST#.|.......N|
|00000820| 42 20 4d 73 67 20 54 79 | 70 65 20 24 38 30 00 54 |B Msg Ty|pe $80.T|
|00000830| 52 54 53 00 00 00 00 00 | 00 00 00 43 45 51 55 00 |RTS.....|...CEQU.|
|00000840| 00 00 00 02 00 14 0f 53 | 65 73 73 69 6f 6e 20 4d |.......S|ession M|
|00000850| 65 73 73 61 67 65 00 43 | 53 54 23 00 00 00 0f 02 |essage.C|ST#.....|
|00000860| 00 14 0f 4e 42 20 4d 73 | 67 20 54 79 70 65 20 24 |...NB Ms|g Type $|
|00000870| 31 30 00 54 52 54 53 00 | 00 00 00 00 00 00 00 00 |10.TRTS.|........|
|00000880| 00 00 66 00 05 54 45 51 | 55 00 00 00 00 10 00 00 |..f..TEQ|U.......|
|00000890| 07 49 50 20 4e 75 6c 6c | 00 54 4c 54 45 00 00 05 |.IP Null|.TLTE...|
|000008a0| dc 10 00 00 07 49 50 20 | 4e 75 6c 6c 00 47 4c 4e |.....IP |Null.GLN|
|000008b0| 47 00 00 00 00 03 00 00 | 00 54 45 51 55 ff 53 4d |G.......|.TEQU.SM|
|000008c0| 42 03 00 00 0e 53 4d 42 | 20 46 69 6c 65 20 53 68 |B....SMB| File Sh|
|000008d0| 61 72 65 44 55 4d 50 00 | 00 00 00 10 90 c2 0a 55 |areDUMP.|.......U|
|000008e0| 73 65 72 20 44 61 74 61 | 3a 00 00 00 4c 00 03 54 |ser Data|:...L..T|
|000008f0| 45 51 55 00 00 00 00 10 | 00 00 07 49 50 20 4e 75 |EQU.....|...IP Nu|
|00000900| 6c 6c 00 54 4c 54 45 00 | 00 05 dc 10 00 00 07 49 |ll.TLTE.|.......I|
|00000910| 50 20 4e 75 6c 6c 00 44 | 55 4d 50 00 00 00 00 10 |P Null.D|UMP.....|
|00000920| 90 c2 15 53 65 73 73 69 | 6f 6e 20 52 65 71 75 65 |...Sessi|on Reque|
|00000930| 73 74 20 44 61 74 61 3a | 00 00 00 00 02 00 00 00 |st Data:|........|
|00000940| 00 00 b6 00 07 48 42 59 | 54 00 00 00 00 03 90 c2 |.....HBY|T.......|
|00000950| 0b 45 72 72 6f 72 20 43 | 6f 64 65 3a 00 43 45 51 |.Error C|ode:.CEQ|
|00000960| 55 00 00 00 8f 03 00 14 | 11 55 6e 73 70 65 63 69 |U.......|.Unspeci|
|00000970| 66 69 65 64 20 45 72 72 | 6f 72 00 43 53 54 23 00 |fied Err|or.CST#.|
|00000980| 00 00 7f 03 00 14 10 4e | 42 20 45 72 72 20 43 6f |.......N|B Err Co|
|00000990| 64 65 73 20 24 38 30 53 | 55 42 47 00 00 00 01 10 |des $80S|UBG.....|
|000009a0| 00 00 00 54 45 51 55 00 | 00 00 00 10 00 00 07 49 |...TEQU.|.......I|
|000009b0| 50 20 4e 75 6c 6c 00 54 | 4c 54 45 00 00 05 dc 10 |P Null.T|LTE.....|
|000009c0| 00 00 07 49 50 20 4e 75 | 6c 6c 00 44 55 4d 50 00 |...IP Nu|ll.DUMP.|
|000009d0| 00 00 00 10 90 c2 21 52 | 65 6d 61 69 6e 69 6e 67 |......!R|emaining|
|000009e0| 20 4e 65 67 61 74 69 76 | 65 20 52 65 73 70 6f 6e | Negativ|e Respon|
|000009f0| 73 65 20 44 61 74 61 3a | 00 00 00 00 90 00 06 49 |se Data:|.......I|
|00000a00| 50 4c 47 00 00 00 00 00 | 90 c2 11 52 65 74 61 72 |PLG.....|...Retar|
|00000a10| 67 65 74 20 41 64 64 72 | 65 73 73 3a 00 44 57 52 |get Addr|ess:.DWR|
|00000a20| 44 00 00 00 00 00 90 c2 | 0c 50 6f 72 74 20 4e 75 |D.......|.Port Nu|
|00000a30| 6d 62 65 72 3a 53 55 42 | 47 00 00 00 06 10 00 00 |mber:SUB|G.......|
|00000a40| 00 54 45 51 55 00 00 00 | 00 10 00 00 07 49 50 20 |.TEQU...|.....IP |
|00000a50| 4e 75 6c 6c 00 54 4c 54 | 45 00 00 05 dc 10 00 00 |Null.TLT|E.......|
|00000a60| 07 49 50 20 4e 75 6c 6c | 00 44 55 4d 50 00 00 00 |.IP Null|.DUMP...|
|00000a70| 00 10 90 c2 18 52 65 6d | 61 69 6e 69 6e 67 20 52 |.....Rem|aining R|
|00000a80| 65 74 61 72 67 65 74 20 | 44 61 74 61 3a 00 00 00 |etarget |Data:...|
|00000a90| 02 00 00 00 00 00 02 00 | 00 00 00 00 02 00 00 00 |........|........|
|00000aa0| 00 00 02 00 00 00 00 00 | bc 00 0b 4c 41 42 4c 00 |........|...LABL.|
|00000ab0| 00 00 00 00 00 c2 0c 53 | 6f 75 72 63 65 20 4e 61 |.......S|ource Na|
|00000ac0| 6d 65 3a 47 42 59 54 00 | 00 00 00 05 00 00 00 53 |me:GBYT.|.......S|
|00000ad0| 4e 45 51 00 00 00 00 05 | 00 00 00 53 4b 49 50 00 |NEQ.....|...SKIP.|
|00000ae0| 00 00 02 00 00 00 00 4c | 41 42 4c 00 00 00 00 00 |.......L|ABL.....|
|00000af0| 00 00 07 20 28 6e 75 6c | 6c 29 00 54 4e 58 54 00 |... (nul|l).TNXT.|
|00000b00| 00 00 00 00 00 00 10 4e | 42 20 44 67 72 61 6d 20 |.......N|B Dgram |
|00000b10| 53 72 63 20 46 69 6e 4e | 42 4e 4d 00 00 00 00 05 |Src FinN|BNM.....|
|00000b20| 90 02 00 4d 4f 56 45 00 | 00 00 10 86 00 00 00 53 |...MOVE.|.......S|
|00000b30| 55 42 47 00 00 00 05 90 | 00 00 00 53 55 42 47 00 |UBG.....|...SUBG.|
|00000b40| 00 00 01 10 00 00 00 54 | 4e 58 54 00 00 00 00 00 |.......T|NXT.....|
|00000b50| 00 00 11 4e 42 20 44 67 | 72 61 6d 20 53 72 63 20 |...NB Dg|ram Src |
|00000b60| 4e 61 6d 65 00 00 00 00 | 7a 00 07 47 42 59 54 00 |Name....|z..GBYT.|
|00000b70| 00 00 00 05 00 00 00 54 | 45 51 55 00 00 00 00 05 |.......T|EQU.....|
|00000b80| 00 00 10 4e 42 20 44 67 | 72 61 6d 20 53 72 63 20 |...NB Dg|ram Src |
|00000b90| 46 69 6e 53 55 42 47 00 | 00 00 05 90 00 00 00 53 |FinSUBG.|.......S|
|00000ba0| 55 42 47 00 00 00 01 10 | 00 00 00 4c 41 42 4c 00 |UBG.....|...LABL.|
|00000bb0| 00 00 00 00 00 00 01 2e | 00 50 53 54 52 00 00 00 |........|.PSTR...|
|00000bc0| 00 00 00 00 00 54 4e 58 | 54 00 00 00 00 00 00 00 |.....TNX|T.......|
|00000bd0| 11 4e 42 20 44 67 72 61 | 6d 20 53 72 63 20 4e 61 |.NB Dgra|m Src Na|
|00000be0| 6d 65 00 00 00 01 16 00 | 12 50 53 54 52 00 00 00 |me......|.PSTR...|
|00000bf0| 00 00 00 00 00 53 55 42 | 47 00 00 00 01 10 00 00 |.....SUB|G.......|
|00000c00| 00 53 55 42 47 00 00 00 | 10 86 00 00 00 53 42 49 |.SUBG...|.....SBI|
|00000c10| 54 00 00 00 00 06 00 00 | 00 53 4b 49 50 80 00 00 |T.......|.SKIP...|
|00000c20| 02 00 00 00 00 49 4e 43 | 52 00 00 00 01 00 00 00 |.....INC|R.......|
|00000c30| 00 53 55 42 47 00 00 00 | 01 10 00 00 00 4c 41 42 |.SUBG...|.....LAB|
|00000c40| 4c 00 00 00 00 00 00 c2 | 11 44 65 73 74 69 6e 61 |L.......|.Destina|
|00000c50| 74 69 6f 6e 20 4e 61 6d | 65 3a 00 47 42 59 54 00 |tion Nam|e:.GBYT.|
|00000c60| 00 00 00 05 00 00 00 53 | 4e 45 51 00 00 00 00 05 |.......S|NEQ.....|
|00000c70| 00 00 00 53 4b 49 50 00 | 00 00 02 00 00 00 00 4c |...SKIP.|.......L|
|00000c80| 41 42 4c 00 00 00 00 00 | 00 00 07 20 28 6e 75 6c |ABL.....|... (nul|
|00000c90| 6c 29 00 54 4e 58 54 00 | 00 00 00 00 00 00 10 4e |l).TNXT.|.......N|
|00000ca0| 42 20 44 67 72 61 6d 20 | 44 73 74 20 46 69 6e 4e |B Dgram |Dst FinN|
|00000cb0| 42 4e 4d 00 00 00 00 05 | 90 02 00 4d 4f 56 45 00 |BNM.....|...MOVE.|
|00000cc0| 00 00 10 86 00 00 00 53 | 55 42 47 00 00 00 05 90 |.......S|UBG.....|
|00000cd0| 00 00 00 53 55 42 47 00 | 00 00 01 10 00 00 00 54 |...SUBG.|.......T|
|00000ce0| 4e 58 54 00 00 00 00 00 | 00 00 11 4e 42 20 44 67 |NXT.....|...NB Dg|
|00000cf0| 72 61 6d 20 44 73 74 20 | 4e 61 6d 65 00 00 00 00 |ram Dst |Name....|
|00000d00| 7a 00 07 47 42 59 54 00 | 00 00 00 05 00 00 00 54 |z..GBYT.|.......T|
|00000d10| 45 51 55 00 00 00 00 05 | 00 00 10 4e 42 20 44 67 |EQU.....|...NB Dg|
|00000d20| 72 61 6d 20 44 73 74 20 | 46 69 6e 53 55 42 47 00 |ram Dst |FinSUBG.|
|00000d30| 00 00 05 90 00 00 00 53 | 55 42 47 00 00 00 01 10 |.......S|UBG.....|
|00000d40| 00 00 00 4c 41 42 4c 00 | 00 00 00 00 00 00 01 2e |...LABL.|........|
|00000d50| 00 50 53 54 52 00 00 00 | 00 00 00 00 00 54 4e 58 |.PSTR...|.....TNX|
|00000d60| 54 00 00 00 00 00 00 00 | 11 4e 42 20 44 67 72 61 |T.......|.NB Dgra|
|00000d70| 6d 20 44 73 74 20 4e 61 | 6d 65 00 00 00 00 ba 00 |m Dst Na|me......|
|00000d80| 0c 50 53 54 52 00 00 00 | 00 00 00 00 00 53 55 42 |.PSTR...|.....SUB|
|00000d90| 47 00 00 00 01 10 00 00 | 00 53 55 42 47 00 00 00 |G.......|.SUBG...|
|00000da0| 10 86 00 00 00 53 42 49 | 54 00 00 00 00 06 00 00 |.....SBI|T.......|
|00000db0| 00 53 4b 49 50 80 00 00 | 02 00 00 00 00 49 4e 43 |.SKIP...|.....INC|
|00000dc0| 52 00 00 00 01 00 00 00 | 00 53 55 42 47 00 00 00 |R.......|.SUBG...|
|00000dd0| 01 10 00 00 00 54 45 51 | 55 00 00 00 00 10 00 00 |.....TEQ|U.......|
|00000de0| 07 49 50 20 4e 75 6c 6c | 00 54 4c 54 45 00 00 05 |.IP Null|.TLTE...|
|00000df0| dc 10 00 00 07 49 50 20 | 4e 75 6c 6c 00 47 4c 4e |.....IP |Null.GLN|
|00000e00| 47 00 00 00 00 04 00 00 | 00 54 45 51 55 ff 53 4d |G.......|.TEQU.SM|
|00000e10| 42 04 00 00 0e 53 4d 42 | 20 46 69 6c 65 20 53 68 |B....SMB| File Sh|
|00000e20| 61 72 65 44 55 4d 50 00 | 00 00 00 10 90 c2 0a 55 |areDUMP.|.......U|
|00000e30| 73 65 72 20 44 61 74 61 | 3a 00 00 00 82 00 06 48 |ser Data|:......H|
|00000e40| 42 59 54 00 00 00 00 05 | 90 c2 0b 45 72 72 6f 72 |BYT.....|...Error|
|00000e50| 20 43 6f 64 65 3a 00 43 | 53 54 23 00 00 00 81 05 | Code:.C|ST#.....|
|00000e60| 00 14 12 4e 42 20 44 67 | 72 61 6d 20 45 72 72 20 |...NB Dg|ram Err |
|00000e70| 43 6f 64 65 73 53 55 42 | 47 00 00 00 01 10 00 00 |CodesSUB|G.......|
|00000e80| 00 54 45 51 55 00 00 00 | 00 10 00 00 07 49 50 20 |.TEQU...|.....IP |
|00000e90| 4e 75 6c 6c 00 54 4c 54 | 45 00 00 05 dc 10 00 00 |Null.TLT|E.......|
|00000ea0| 07 49 50 20 4e 75 6c 6c | 00 44 55 4d 50 00 00 00 |.IP Null|.DUMP...|
|00000eb0| 00 10 90 c2 0a 55 73 65 | 72 20 44 61 74 61 3a 00 |.....Use|r Data:.|
|00000ec0| 00 00 a6 00 0a 50 53 54 | 52 00 00 00 00 05 90 c2 |.....PST|R.......|
|00000ed0| 11 44 65 73 74 69 6e 61 | 74 69 6f 6e 20 4e 61 6d |.Destina|tion Nam|
|00000ee0| 65 3a 00 53 42 49 54 00 | 00 00 00 05 00 00 00 53 |e:.SBIT.|.......S|
|00000ef0| 4b 49 50 00 00 00 02 00 | 00 00 00 49 4e 43 52 00 |KIP.....|...INCR.|
|00000f00| 00 00 01 00 00 00 00 53 | 55 42 47 00 00 00 01 10 |.......S|UBG.....|
|00000f10| 00 00 00 53 55 42 47 00 | 00 00 05 90 00 00 00 53 |...SUBG.|.......S|
|00000f20| 55 42 47 00 00 00 01 10 | 00 00 00 54 45 51 55 00 |UBG.....|...TEQU.|
|00000f30| 00 00 00 10 00 00 07 49 | 50 20 4e 75 6c 6c 00 54 |.......I|P Null.T|
|00000f40| 4c 54 45 00 00 05 dc 10 | 00 00 07 49 50 20 4e 75 |LTE.....|...IP Nu|
|00000f50| 6c 6c 00 44 55 4d 50 00 | 00 00 00 10 90 c2 0a 55 |ll.DUMP.|.......U|
|00000f60| 73 65 72 20 44 61 74 61 | 3a 00 00 00 84 00 04 4c |ser Data|:......L|
|00000f70| 41 42 4c 00 00 00 00 00 | 00 b1 37 4e 65 74 42 49 |ABL.....|..7NetBI|
|00000f80| 4f 53 20 4e 61 6d 65 20 | 53 65 72 76 69 63 65 20 |OS Name |Service |
|00000f90| 2d 20 4e 65 74 77 6f 72 | 6b 20 42 61 73 69 63 20 |- Networ|k Basic |
|00000fa0| 49 6e 70 75 74 2f 4f 75 | 70 75 74 20 53 79 73 74 |Input/Ou|put Syst|
|00000fb0| 65 6d 00 44 57 52 44 00 | 00 00 00 10 90 c2 07 4c |em.DWRD.|.......L|
|00000fc0| 65 6e 67 74 68 3a 00 54 | 45 51 55 00 00 00 00 10 |ength:.T|EQU.....|
|00000fd0| 00 00 08 44 4e 53 50 20 | 46 69 6e 54 4e 58 54 00 |...DNSP |FinTNXT.|
|00000fe0| 00 00 00 00 00 00 0a 44 | 4e 53 20 43 6f 6d 6d 6f |.......D|NS Commo|
|00000ff0| 6e 00 00 00 7c 00 03 44 | 47 4c 42 00 00 00 00 02 |n...|..D|GLB.....|
|00001000| 04 b4 15 49 6e 76 61 6c | 69 64 20 50 61 63 6b 65 |...Inval|id Packe|
|00001010| 74 20 54 79 70 65 3a 20 | 00 4c 41 42 4c 00 00 00 |t Type: |.LABL...|
|00001020| 00 00 00 14 31 28 50 72 | 6f 62 61 62 6c 79 20 61 |....1(Pr|obably a|
|00001030| 20 63 6f 6e 74 69 6e 75 | 61 74 69 6f 6e 20 6f 66 | continu|ation of|
|00001040| 20 70 72 65 76 69 6f 75 | 73 20 74 72 61 6e 73 61 | previou|s transa|
|00001050| 63 74 69 6f 6e 29 00 44 | 55 4d 50 00 00 00 00 10 |ction).D|UMP.....|
|00001060| 90 c2 0d 4e 65 74 42 49 | 4f 53 20 44 61 74 61 3a |...NetBI|OS Data:|
|00001070| 00 00 00 00 1c 00 04 06 | 42 2d 4e 6f 64 65 06 50 |........|B-Node.P|
|00001080| 2d 4e 6f 64 65 06 4d 2d | 4e 6f 64 65 04 4e 42 44 |-Node.M-|Node.NBD|
|00001090| 44 00 00 00 57 00 05 0b | 4e 42 20 53 65 73 73 20 |D...W...|NB Sess |
|000010a0| 52 65 71 10 4e 42 20 50 | 6f 73 20 53 65 73 73 20 |Req.NB P|os Sess |
|000010b0| 52 65 73 70 10 4e 42 20 | 4e 65 67 20 53 65 73 73 |Resp.NB |Neg Sess|
|000010c0| 20 52 65 73 70 13 4e 42 | 20 52 65 74 61 72 67 20 | Resp.NB| Retarg |
|000010d0| 53 65 73 73 20 52 65 73 | 70 12 4e 42 20 53 65 73 |Sess Res|p.NB Ses|
|000010e0| 73 20 4b 65 65 70 20 41 | 6c 69 76 65 00 00 00 73 |s Keep A|live...s|
|000010f0| 00 05 0f 53 65 73 73 69 | 6f 6e 20 52 65 71 75 65 |...Sessi|on Reque|
|00001100| 73 74 19 50 6f 73 69 74 | 69 76 65 20 53 65 73 73 |st.Posit|ive Sess|
|00001110| 69 6f 6e 20 52 65 73 70 | 6f 6e 73 65 19 4e 65 67 |ion Resp|onse.Neg|
|00001120| 61 74 69 76 65 20 53 65 | 73 73 69 6f 6e 20 52 65 |ative Se|ssion Re|
|00001130| 73 70 6f 6e 73 65 19 52 | 65 74 61 72 67 65 74 20 |sponse.R|etarget |
|00001140| 53 65 73 73 69 6f 6e 20 | 52 65 73 70 6f 6e 73 65 |Session |Response|
|00001150| 12 53 65 73 73 69 6f 6e | 20 4b 65 65 70 20 41 6c |.Session| Keep Al|
|00001160| 69 76 65 00 00 00 aa 00 | 07 16 44 69 72 65 63 74 |ive.....|..Direct|
|00001170| 20 55 6e 69 71 75 65 20 | 44 61 74 61 67 72 61 6d | Unique |Datagram|
|00001180| 15 44 69 72 65 63 74 20 | 47 72 6f 75 70 20 44 61 |.Direct |Group Da|
|00001190| 74 61 67 72 61 6d 12 42 | 72 6f 61 64 63 61 73 74 |tagram.B|roadcast|
|000011a0| 20 44 61 74 61 67 72 61 | 6d 0e 44 61 74 61 67 72 | Datagra|m.Datagr|
|000011b0| 61 6d 20 45 72 72 6f 72 | 16 44 61 74 61 67 72 61 |am Error|.Datagra|
|000011c0| 6d 20 51 75 65 72 79 20 | 52 65 71 75 65 73 74 20 |m Query |Request |
|000011d0| 44 61 74 61 67 72 61 6d | 20 50 6f 73 69 74 69 76 |Datagram| Positiv|
|000011e0| 65 20 51 75 65 72 79 20 | 52 65 73 70 6f 6e 73 65 |e Query |Response|
|000011f0| 20 44 61 74 61 67 72 61 | 6d 20 4e 65 67 61 74 69 | Datagra|m Negati|
|00001200| 76 65 20 51 75 65 72 79 | 20 52 65 73 70 6f 6e 73 |ve Query| Respons|
|00001210| 65 00 00 00 86 00 04 1c | 4e 6f 74 20 4c 69 73 74 |e.......|Not List|
|00001220| 65 6e 69 6e 67 20 4f 6e | 20 43 61 6c 6c 65 64 20 |ening On| Called |
|00001230| 4e 61 6d 65 1e 4e 6f 74 | 20 4c 69 73 74 65 6e 69 |Name.Not| Listeni|
|00001240| 6e 67 20 46 6f 72 20 43 | 61 6c 6c 69 6e 67 20 4e |ng For C|alling N|
|00001250| 61 6d 65 17 43 61 6c 6c | 65 64 20 4e 61 6d 65 20 |ame.Call|ed Name |
|00001260| 4e 6f 74 20 50 72 65 73 | 65 6e 74 2f 43 61 6c 6c |Not Pres|ent/Call|
|00001270| 65 64 20 4e 61 6d 65 20 | 50 72 65 73 65 6e 74 2c |ed Name |Present,|
|00001280| 20 42 75 74 20 49 6e 73 | 75 66 66 69 63 69 65 6e | But Ins|ufficien|
|00001290| 74 20 52 65 73 6f 75 72 | 63 65 73 00 00 00 5a 00 |t Resour|ces...Z.|
|000012a0| 03 1c 44 65 73 74 69 6e | 61 74 69 6f 6e 20 4e 61 |..Destin|ation Na|
|000012b0| 6d 65 20 4e 6f 74 20 50 | 72 65 73 65 6e 74 1a 49 |me Not P|resent.I|
|000012c0| 6e 76 61 6c 69 64 20 53 | 6f 75 72 63 65 20 4e 61 |nvalid S|ource Na|
|000012d0| 6d 65 20 46 6f 72 6d 61 | 74 1f 49 6e 76 61 6c 69 |me Forma|t.Invali|
|000012e0| 64 20 44 65 73 74 69 6e | 61 74 69 6f 6e 20 4e 61 |d Destin|ation Na|
|000012f0| 6d 65 20 46 6f 72 6d 61 | 74 00 00 00 e6 00 0a 4c |me Forma|t......L|
|00001300| 41 42 4c 00 00 00 00 00 | 00 b1 32 4e 65 74 42 45 |ABL.....|..2NetBE|
|00001310| 55 49 2f 4e 65 74 42 49 | 4f 53 20 2d 20 4e 65 74 |UI/NetBI|OS - Net|
|00001320| 77 6f 72 6b 20 42 61 73 | 69 63 20 49 6e 70 75 74 |work Bas|ic Input|
|00001330| 2f 4f 75 70 75 74 20 53 | 79 73 74 65 6d 44 57 52 |/Ouput S|ystemDWR|
|00001340| 44 40 00 00 00 0f 90 c2 | 07 4c 65 6e 67 74 68 3a |D@......|.Length:|
|00001350| 00 53 55 42 47 00 00 00 | 02 0f 00 00 00 53 55 42 |.SUBG...|.....SUB|
|00001360| 47 00 00 00 02 10 00 00 | 00 47 57 52 44 00 00 00 |G.......|.GWRD...|
|00001370| 00 01 00 00 00 54 4e 45 | 51 00 00 ff ef 01 00 00 |.....TNE|Q.......|
|00001380| 0f 4e 65 74 42 49 4f 53 | 20 43 6f 6d 6d 61 6e 64 |.NetBIOS| Command|
|00001390| 00 48 57 52 44 40 00 00 | 00 00 90 c2 11 4e 65 74 |.HWRD@..|.....Net|
|000013a0| 42 49 4f 53 20 45 6d 75 | 6c 61 74 6f 72 3a 00 53 |BIOS Emu|lator:.S|
|000013b0| 55 42 47 00 00 00 02 0f | 00 00 00 53 55 42 47 00 |UBG.....|...SUBG.|
|000013c0| 00 00 02 10 00 00 00 54 | 4e 58 54 00 00 00 00 00 |.......T|NXT.....|
|000013d0| 00 00 0f 4e 65 74 42 49 | 4f 53 20 43 6f 6d 6d 61 |...NetBI|OS Comma|
|000013e0| 6e 64 00 00 00 02 32 00 | 1e 48 42 59 54 00 00 00 |nd....2.|.HBYT...|
|000013f0| 00 04 90 c2 08 43 6f 6d | 6d 61 6e 64 3a 4d 4f 56 |.....Com|mand:MOV|
|00001400| 45 00 00 00 04 81 00 00 | 00 41 4e 44 47 00 00 00 |E.......|.ANDG...|
|00001410| 7f 04 00 00 00 43 53 54 | 23 ff ff ff ff 04 00 14 |.....CST|#.......|
|00001420| 0a 4e 42 20 43 6d 64 20 | 24 30 30 43 42 49 54 00 |.NB Cmd |$00CBIT.|
|00001430| 00 00 07 01 00 04 0a 20 | 28 4e 6f 20 57 61 69 74 |....... |(No Wait|
|00001440| 29 43 4c 53 45 00 00 00 | 00 00 00 04 07 20 28 57 |)CLSE...|..... (W|
|00001450| 61 69 74 29 00 54 53 55 | 42 00 00 00 00 00 00 00 |ait).TSU|B.......|
|00001460| 0e 4e 42 20 4f 70 74 69 | 6f 6e 20 44 61 74 61 48 |.NB Opti|on DataH|
|00001470| 4c 4e 47 40 00 00 00 00 | 90 c2 15 58 6d 69 74 2f |LNG@....|...Xmit/|
|00001480| 52 65 73 70 20 43 6f 72 | 72 65 6c 61 74 6f 72 3a |Resp Cor|relator:|
|00001490| 00 53 47 54 45 00 00 00 | 13 04 00 00 00 53 4b 49 |.SGTE...|.....SKI|
|000014a0| 50 00 00 00 06 00 00 00 | 00 44 42 59 54 00 00 00 |P.......|.DBYT...|
|000014b0| 00 0c 90 c2 13 44 65 73 | 74 69 6e 61 74 69 6f 6e |.....Des|tination|
|000014c0| 20 4e 75 6d 62 65 72 3a | 00 44 42 59 54 00 00 00 | Number:|.DBYT...|
|000014d0| 00 0d 90 c2 0e 53 6f 75 | 72 63 65 20 4e 75 6d 62 |.....Sou|rce Numb|
|000014e0| 65 72 3a 53 55 42 47 00 | 00 00 0a 0f 00 00 00 53 |er:SUBG.|.......S|
|000014f0| 55 42 47 00 00 00 0a 10 | 00 00 00 53 4c 54 45 00 |UBG.....|...SLTE.|
|00001500| 00 00 14 04 00 00 00 53 | 4b 49 50 00 00 00 03 00 |.......S|KIP.....|
|00001510| 00 00 00 54 53 55 42 00 | 00 00 00 00 00 00 12 4e |...TSUB.|.......N|
|00001520| 42 20 44 73 74 20 26 20 | 53 72 63 20 4e 61 6d 65 |B Dst & |Src Name|
|00001530| 73 53 55 42 47 00 00 00 | 28 0f 00 00 00 53 55 42 |sSUBG...|(....SUB|
|00001540| 47 00 00 00 28 10 00 00 | 00 53 45 51 55 00 00 00 |G...(...|.SEQU...|
|00001550| 00 0f 00 00 00 53 4b 49 | 50 00 00 00 04 00 00 00 |.....SKI|P.......|
|00001560| 00 53 4c 54 45 00 00 05 | dc 0f 00 00 00 53 4b 49 |.SLTE...|.....SKI|
|00001570| 50 00 00 00 02 00 00 00 | 00 44 55 4d 50 00 00 00 |P.......|.DUMP...|
|00001580| 00 0f 90 c2 0e 4f 70 74 | 69 6f 6e 61 6c 20 44 61 |.....Opt|ional Da|
|00001590| 74 61 3a 53 55 42 47 00 | 00 00 0f 90 00 00 00 54 |ta:SUBG.|.......T|
|000015a0| 45 51 55 00 00 00 00 10 | 00 00 0b 41 46 50 20 54 |EQU.....|...AFP T|
|000015b0| 68 65 20 45 6e 64 00 54 | 4c 54 45 00 00 05 dc 10 |he End.T|LTE.....|
|000015c0| 00 00 0b 41 46 50 20 54 | 68 65 20 45 6e 64 00 47 |...AFP T|he End.G|
|000015d0| 4c 4e 47 00 00 00 00 04 | 00 00 00 54 45 51 55 ff |LNG.....|...TEQU.|
|000015e0| 53 4d 42 04 00 00 0e 53 | 4d 42 20 46 69 6c 65 20 |SMB....S|MB File |
|000015f0| 53 68 61 72 65 44 55 4d | 50 00 00 00 00 10 90 c2 |ShareDUM|P.......|
|00001600| 17 52 65 6d 61 69 6e 69 | 6e 67 20 4e 65 74 42 49 |.Remaini|ng NetBI|
|00001610| 4f 53 20 44 61 74 61 3a | 00 00 00 00 e6 00 0e 53 |OS Data:|.......S|
|00001620| 45 51 55 00 00 00 0f 04 | 00 00 00 53 4b 49 50 00 |EQU.....|...SKIP.|
|00001630| 00 00 03 00 00 00 00 43 | 48 52 23 00 00 00 10 00 |.......C|HR#.....|
|00001640| 90 c2 11 44 65 73 74 69 | 6e 61 74 69 6f 6e 20 4e |...Desti|nation N|
|00001650| 61 6d 65 3a 00 53 4e 45 | 51 00 00 00 0f 04 00 00 |ame:.SNE|Q.......|
|00001660| 00 53 4b 49 50 00 00 00 | 01 00 00 00 00 48 45 58 |.SKIP...|.....HEX|
|00001670| 23 00 00 00 10 00 90 c2 | 11 44 65 73 74 69 6e 61 |#.......|.Destina|
|00001680| 74 69 6f 6e 20 4e 61 6d | 65 3a 00 53 45 51 55 00 |tion Nam|e:.SEQU.|
|00001690| 00 00 02 04 00 00 00 53 | 4b 49 50 00 00 00 04 00 |.......S|KIP.....|
|000016a0| 00 00 00 53 45 51 55 00 | 00 00 03 04 00 00 00 53 |...SEQU.|.......S|
|000016b0| 4b 49 50 00 00 00 02 00 | 00 00 00 43 48 52 23 00 |KIP.....|...CHR#.|
|000016c0| 00 00 10 00 90 c2 0c 53 | 6f 75 72 63 65 20 4e 61 |.......S|ource Na|
|000016d0| 6d 65 3a 54 52 54 53 00 | 00 00 00 00 00 00 00 48 |me:TRTS.|.......H|
|000016e0| 45 58 23 00 00 00 10 00 | 90 c2 0c 53 6f 75 72 63 |EX#.....|...Sourc|
|000016f0| 65 20 4e 61 6d 65 3a 54 | 52 54 53 00 00 00 00 00 |e Name:T|RTS.....|
|00001700| 00 00 00 00 00 01 72 00 | 11 54 45 51 55 00 00 00 |......r.|.TEQU...|
|00001710| 03 04 00 00 0a 4e 42 20 | 43 6d 64 20 24 30 33 54 |.....NB |Cmd $03T|
|00001720| 45 51 55 00 00 00 0a 04 | 00 00 0a 4e 42 20 43 6d |EQU.....|...NB Cm|
|00001730| 64 20 24 30 41 54 45 51 | 55 00 00 00 0d 04 00 00 |d $0ATEQ|U.......|
|00001740| 0a 4e 42 20 43 6d 64 20 | 24 30 44 54 45 51 55 00 |.NB Cmd |$0DTEQU.|
|00001750| 00 00 0e 04 00 00 0a 4e | 42 20 43 6d 64 20 24 30 |.......N|B Cmd $0|
|00001760| 45 54 45 51 55 00 00 00 | 0f 04 00 00 0a 4e 42 20 |ETEQU...|.....NB |
|00001770| 43 6d 64 20 24 30 46 54 | 45 51 55 00 00 00 15 04 |Cmd $0FT|EQU.....|
|00001780| 00 00 0a 4e 42 20 43 6d | 64 20 24 31 35 54 45 51 |...NB Cm|d $15TEQ|
|00001790| 55 00 00 00 16 04 00 00 | 0a 4e 42 20 43 6d 64 20 |U.......|.NB Cmd |
|000017a0| 24 31 36 54 45 51 55 00 | 00 00 17 04 00 00 0a 4e |$16TEQU.|.......N|
|000017b0| 42 20 43 6d 64 20 24 31 | 37 54 45 51 55 00 00 00 |B Cmd $1|7TEQU...|
|000017c0| 18 04 00 00 0a 4e 42 20 | 43 6d 64 20 24 31 38 54 |.....NB |Cmd $18T|
|000017d0| 45 51 55 00 00 00 19 04 | 00 00 0a 4e 42 20 43 6d |EQU.....|...NB Cm|
|000017e0| 64 20 24 31 39 54 45 51 | 55 00 00 00 1a 04 00 00 |d $19TEQ|U.......|
|000017f0| 0a 4e 42 20 43 6d 64 20 | 24 31 41 54 45 51 55 00 |.NB Cmd |$1ATEQU.|
|00001800| 00 00 1b 04 00 00 0a 4e | 42 20 43 6d 64 20 24 31 |.......N|B Cmd $1|
|00001810| 42 48 42 59 54 00 00 00 | 00 00 90 c2 0e 4f 70 74 |BHBYT...|.....Opt|
|00001820| 69 6f 6e 20 44 61 74 61 | 20 31 3a 4c 41 42 4c 00 |ion Data| 1:LABL.|
|00001830| 00 00 00 00 00 14 08 52 | 65 73 65 72 76 65 64 48 |.......R|eservedH|
|00001840| 57 52 44 40 00 00 00 00 | 90 c2 0e 4f 70 74 69 6f |WRD@....|...Optio|
|00001850| 6e 20 44 61 74 61 20 32 | 3a 4c 41 42 4c 00 00 00 |n Data 2|:LABL...|
|00001860| 00 00 00 14 08 52 65 73 | 65 72 76 65 64 54 52 54 |.....Res|ervedTRT|
|00001870| 53 00 00 00 00 00 00 00 | 00 00 00 00 f4 00 07 44 |S.......|.......D|
|00001880| 42 59 54 00 00 00 00 01 | 90 c2 0e 4f 70 74 69 6f |BYT.....|...Optio|
|00001890| 6e 20 44 61 74 61 20 31 | 3a 43 45 51 55 00 00 00 |n Data 1|:CEQU...|
|000018a0| 00 01 00 14 21 4e 65 74 | 42 49 4f 53 20 31 2e 78 |....!Net|BIOS 1.x|
|000018b0| 20 6f 72 20 32 2e 30 20 | 53 74 61 74 75 73 20 52 | or 2.0 |Status R|
|000018c0| 65 71 75 65 73 74 00 53 | 4b 49 50 00 00 00 02 00 |equest.S|KIP.....|
|000018d0| 00 00 00 43 45 51 55 00 | 00 00 01 01 00 14 26 49 |...CEQU.|......&I|
|000018e0| 6e 69 74 69 61 6c 20 53 | 74 61 74 75 73 20 52 65 |nitial S|tatus Re|
|000018f0| 71 75 65 73 74 20 66 6f | 72 20 4e 65 74 42 49 4f |quest fo|r NetBIO|
|00001900| 53 20 32 2e 31 43 4c 53 | 45 00 00 00 00 00 00 14 |S 2.1CLS|E.......|
|00001910| 34 4e 65 74 42 49 4f 53 | 20 32 2e 31 3a 20 4e 61 |4NetBIOS| 2.1: Na|
|00001920| 6d 65 73 20 52 65 63 65 | 69 76 65 64 20 53 6f 20 |mes Rece|ived So |
|00001930| 46 61 72 2e 20 20 4d 6f | 72 65 20 52 65 71 75 65 |Far.  Mo|re Reque|
|00001940| 73 74 65 64 2e 44 57 52 | 44 40 00 00 00 00 90 c2 |sted.DWR|D@......|
|00001950| 13 55 73 65 72 20 42 75 | 66 66 65 72 20 4c 65 6e |.User Bu|ffer Len|
|00001960| 67 74 68 3a 00 54 52 54 | 53 00 00 00 00 00 00 00 |gth:.TRT|S.......|
|00001970| 00 00 00 00 ba 00 08 48 | 42 59 54 00 00 00 00 00 |.......H|BYT.....|
|00001980| 90 c2 0e 4f 70 74 69 6f | 6e 20 44 61 74 61 20 31 |...Optio|n Data 1|
|00001990| 3a 4c 41 42 4c 00 00 00 | 00 00 00 14 08 52 65 73 |:LABL...|.....Res|
|000019a0| 65 72 76 65 64 44 42 59 | 54 00 00 00 00 01 90 c2 |ervedDBY|T.......|
|000019b0| 0f 53 65 73 73 69 6f 6e | 20 4e 75 6d 62 65 72 3a |.Session| Number:|
|000019c0| 00 43 45 51 55 00 00 00 | 00 01 00 14 11 46 49 4e |.CEQU...|.....FIN|
|000019d0| 44 2e 4e 41 4d 45 20 52 | 65 71 75 65 73 74 00 44 |D.NAME R|equest.D|
|000019e0| 42 59 54 00 00 00 00 01 | 90 c2 0a 4e 61 6d 65 20 |BYT.....|...Name |
|000019f0| 54 79 70 65 3a 43 45 51 | 55 00 00 00 00 01 00 14 |Type:CEQ|U.......|
|00001a00| 0b 55 6e 69 71 75 65 20 | 4e 61 6d 65 00 43 45 51 |.Unique |Name.CEQ|
|00001a10| 55 00 00 00 01 01 00 14 | 0a 47 72 6f 75 70 20 4e |U.......|.Group N|
|00001a20| 61 6d 65 54 52 54 53 00 | 00 00 00 00 00 00 00 00 |ameTRTS.|........|
|00001a30| 00 00 b4 00 07 44 42 59 | 54 00 00 00 00 01 90 c2 |.....DBY|T.......|
|00001a40| 0e 4f 70 74 69 6f 6e 20 | 44 61 74 61 20 31 3a 43 |.Option |Data 1:C|
|00001a50| 45 51 55 00 00 00 00 01 | 00 14 17 41 64 64 20 4e |EQU.....|...Add N|
|00001a60| 61 6d 65 20 4e 6f 74 20 | 49 6e 20 50 72 6f 63 65 |ame Not |In Proce|
|00001a70| 73 73 00 43 45 51 55 00 | 00 00 01 01 00 14 14 41 |ss.CEQU.|.......A|
|00001a80| 64 64 20 4e 61 6d 65 20 | 49 6e 20 50 72 6f 67 72 |dd Name |In Progr|
|00001a90| 65 73 73 44 57 52 44 40 | 00 00 00 01 90 c2 0e 4f |essDWRD@|.......O|
|00001aa0| 70 74 69 6f 6e 20 44 61 | 74 61 20 32 3a 43 45 51 |ption Da|ta 2:CEQ|
|00001ab0| 55 00 00 00 00 01 00 14 | 0b 55 6e 69 71 75 65 20 |U.......|.Unique |
|00001ac0| 4e 61 6d 65 00 43 45 51 | 55 00 00 00 01 01 00 14 |Name.CEQ|U.......|
|00001ad0| 0a 47 72 6f 75 70 20 4e | 61 6d 65 54 52 54 53 00 |.Group N|ameTRTS.|
|00001ae0| 00 00 00 00 00 00 00 00 | 00 01 04 00 09 48 42 59 |........|.....HBY|
|00001af0| 54 00 00 00 00 00 90 c2 | 0e 4f 70 74 69 6f 6e 20 |T.......|.Option |
|00001b00| 44 61 74 61 20 31 3a 4c | 41 42 4c 00 00 00 00 00 |Data 1:L|ABL.....|
|00001b10| 00 14 08 52 65 73 65 72 | 76 65 64 44 42 59 54 00 |...Reser|vedDBYT.|
|00001b20| 00 00 00 01 90 c2 0f 53 | 65 73 73 69 6f 6e 20 4e |.......S|ession N|
|00001b30| 75 6d 62 65 72 3a 00 43 | 45 51 55 00 00 00 00 01 |umber:.C|EQU.....|
|00001b40| 00 14 26 46 49 4e 44 2e | 4e 41 4d 45 20 52 65 71 |..&FIND.|NAME Req|
|00001b50| 75 65 73 74 20 4f 72 20 | 4e 6f 20 4c 49 53 54 45 |uest Or |No LISTE|
|00001b60| 4e 20 50 65 6e 64 69 6e | 67 43 45 51 55 00 00 00 |N Pendin|gCEQU...|
|00001b70| ff 01 00 14 29 4c 49 53 | 54 45 4e 20 50 65 6e 64 |....)LIS|TEN Pend|
|00001b80| 69 6e 67 20 42 75 74 20 | 49 6e 73 75 66 66 69 63 |ing But |Insuffic|
|00001b90| 69 65 6e 74 20 52 65 73 | 6f 75 72 63 65 73 00 44 |ient Res|ources.D|
|00001ba0| 42 59 54 00 00 00 00 01 | 90 c2 0a 4e 61 6d 65 20 |BYT.....|...Name |
|00001bb0| 54 79 70 65 3a 43 45 51 | 55 00 00 00 00 01 00 14 |Type:CEQ|U.......|
|00001bc0| 0b 55 6e 69 71 75 65 20 | 4e 61 6d 65 00 43 45 51 |.Unique |Name.CEQ|
|00001bd0| 55 00 00 00 01 01 00 14 | 0a 47 72 6f 75 70 20 4e |U.......|.Group N|
|00001be0| 61 6d 65 54 52 54 53 00 | 00 00 00 00 00 00 00 00 |ameTRTS.|........|
|00001bf0| 00 01 36 00 0b 44 42 59 | 54 00 00 00 00 01 90 c2 |..6..DBY|T.......|
|00001c00| 0e 4f 70 74 69 6f 6e 20 | 44 61 74 61 20 31 3a 43 |.Option |Data 1:C|
|00001c10| 45 51 55 00 00 00 00 01 | 00 14 22 4e 65 74 42 49 |EQU.....|.."NetBI|
|00001c20| 4f 53 20 31 2e 78 20 6f | 72 20 32 2e 30 20 53 74 |OS 1.x o|r 2.0 St|
|00001c30| 61 74 75 73 20 52 65 73 | 70 6f 6e 73 65 43 4c 53 |atus Res|ponseCLS|
|00001c40| 45 00 00 00 00 00 00 14 | 23 4e 65 74 42 49 4f 53 |E.......|#NetBIOS|
|00001c50| 20 32 2e 31 3a 20 4e 61 | 6d 65 73 20 52 65 63 65 | 2.1: Na|mes Rece|
|00001c60| 69 76 65 64 20 53 6f 20 | 46 61 72 2e 00 48 57 52 |ived So |Far..HWR|
|00001c70| 44 40 00 00 00 01 90 c2 | 14 4c 65 6e 67 74 68 20 |D@......|.Length |
|00001c80| 4f 66 20 44 61 74 61 20 | 53 65 6e 74 3a 4d 4f 56 |Of Data |Sent:MOV|
|00001c90| 45 00 00 00 01 82 00 00 | 00 41 4e 44 47 00 00 3f |E.......|.ANDG..?|
|00001ca0| ff 02 00 00 00 44 47 4c | 42 00 00 00 00 02 04 14 |.....DGL|B.......|
|00001cb0| 01 28 00 4c 41 42 4c 00 | 00 00 00 00 00 04 01 29 |.(.LABL.|.......)|
|00001cc0| 00 43 42 49 54 00 00 00 | 0f 01 00 f4 22 44 61 74 |.CBIT...|...."Dat|
|00001cd0| 61 20 45 78 63 65 65 64 | 73 20 4d 61 78 69 6d 75 |a Exceed|s Maximu|
|00001ce0| 6d 20 55 49 20 46 72 61 | 6d 65 20 53 69 7a 65 43 |m UI Fra|me SizeC|
|00001cf0| 42 49 54 00 00 00 0e 01 | 00 f4 22 44 61 74 61 20 |BIT.....|.."Data |
|00001d00| 45 78 63 65 65 64 73 20 | 53 69 7a 65 20 4f 66 20 |Exceeds |Size Of |
|00001d10| 55 73 65 72 27 73 20 42 | 75 66 66 65 72 54 52 54 |User's B|ufferTRT|
|00001d20| 53 00 00 00 00 00 00 00 | 00 00 00 01 5e 00 0b 48 |S.......|....^..H|
|00001d30| 42 59 54 00 00 00 00 01 | 90 c2 0e 4f 70 74 69 6f |BYT.....|...Optio|
|00001d40| 6e 20 44 61 74 61 20 31 | 3a 43 42 49 54 00 00 00 |n Data 1|:CBIT...|
|00001d50| 03 01 00 f4 14 41 63 6b | 6e 6f 77 6c 65 64 67 65 |.....Ack|nowledge|
|00001d60| 20 49 6e 63 6c 75 64 65 | 64 43 4c 53 45 00 00 00 | Include|dCLSE...|
|00001d70| 00 00 00 f4 18 41 63 6b | 6e 6f 77 6c 65 64 67 65 |.....Ack|nowledge|
|00001d80| 20 4e 6f 74 20 49 6e 63 | 6c 75 64 65 64 43 42 49 | Not Inc|ludedCBI|
|00001d90| 54 00 00 00 01 01 00 f4 | 0f 4e 4f 2e 41 43 4b 20 |T.......|.NO.ACK |
|00001da0| 49 6e 63 6c 75 64 65 64 | 00 43 4c 53 45 00 00 00 |Included|.CLSE...|
|00001db0| 00 00 00 f4 13 4e 4f 2e | 41 43 4b 20 4e 6f 74 20 |.....NO.|ACK Not |
|00001dc0| 49 6e 63 6c 75 64 65 64 | 00 43 42 49 54 00 00 00 |Included|.CBIT...|
|00001dd0| 00 01 00 f4 1a 52 45 43 | 45 49 56 45 5f 43 4f 4e |.....REC|EIVE_CON|
|00001de0| 54 49 4e 55 45 20 52 65 | 71 75 65 73 74 65 64 43 |TINUE Re|questedC|
|00001df0| 4c 53 45 00 00 00 00 00 | 00 f4 1e 52 45 43 45 49 |LSE.....|...RECEI|
|00001e00| 56 45 5f 43 4f 4e 54 49 | 4e 55 45 20 4e 6f 74 20 |VE_CONTI|NUE Not |
|00001e10| 52 65 71 75 65 73 74 65 | 64 48 57 52 44 40 00 00 |Requeste|dHWRD@..|
|00001e20| 00 01 90 c2 0e 4f 70 74 | 69 6f 6e 20 44 61 74 61 |.....Opt|ion Data|
|00001e30| 20 32 3a 43 45 51 55 00 | 00 00 01 01 00 14 17 46 | 2:CEQU.|.......F|
|00001e40| 69 72 73 74 20 44 41 54 | 41 5f 46 49 52 53 54 5f |irst DAT|A_FIRST_|
|00001e50| 4d 49 44 44 4c 45 00 43 | 4c 53 45 00 00 00 00 00 |MIDDLE.C|LSE.....|
|00001e60| 00 14 1b 4e 6f 74 20 46 | 69 72 73 74 20 44 41 54 |...Not F|irst DAT|
|00001e70| 41 5f 46 49 52 53 54 5f | 4d 49 44 44 4c 45 00 54 |A_FIRST_|MIDDLE.T|
|00001e80| 52 54 53 00 00 00 00 00 | 00 00 00 00 00 01 84 00 |RTS.....|........|
|00001e90| 0b 48 42 59 54 00 00 00 | 00 01 90 c2 0e 4f 70 74 |.HBYT...|.....Opt|
|00001ea0| 69 6f 6e 20 44 61 74 61 | 20 31 3a 43 42 49 54 00 |ion Data| 1:CBIT.|
|00001eb0| 00 00 03 01 00 f4 1e 41 | 43 4b 4e 4f 57 4c 45 44 |.......A|CKNOWLED|
|00001ec0| 47 45 5f 49 4e 43 4c 55 | 44 45 44 20 49 6e 64 69 |GE_INCLU|DED Indi|
|00001ed0| 63 61 74 65 64 43 4c 53 | 45 00 00 00 00 00 00 f4 |catedCLS|E.......|
|00001ee0| 21 4e 6f 20 41 43 4b 4e | 4f 57 4c 45 44 47 45 5f |!No ACKN|OWLEDGE_|
|00001ef0| 49 4e 43 4c 55 44 45 44 | 20 49 6e 64 69 63 61 74 |INCLUDED| Indicat|
|00001f00| 65 64 00 43 42 49 54 00 | 00 00 02 01 00 f4 27 41 |ed.CBIT.|......'A|
|00001f10| 43 4b 4e 4f 57 4c 45 44 | 47 45 5f 57 49 54 48 5f |CKNOWLED|GE_WITH_|
|00001f20| 44 41 54 41 5f 41 4c 4c | 4f 57 45 44 20 49 6e 64 |DATA_ALL|OWED Ind|
|00001f30| 69 63 61 74 65 64 00 43 | 4c 53 45 00 00 00 00 00 |icated.C|LSE.....|
|00001f40| 00 f4 2a 4e 6f 20 41 43 | 4b 4e 4f 57 4c 45 44 47 |..*No AC|KNOWLEDG|
|00001f50| 45 5f 57 49 54 48 5f 44 | 41 54 41 5f 41 4c 4c 4f |E_WITH_D|ATA_ALLO|
|00001f60| 57 45 44 20 49 6e 64 69 | 63 61 74 65 64 43 42 49 |WED Indi|catedCBI|
|00001f70| 54 00 00 00 01 01 00 f4 | 10 4e 4f 2e 41 43 4b 20 |T.......|.NO.ACK |
|00001f80| 49 6e 64 69 63 61 74 65 | 64 43 4c 53 45 00 00 00 |Indicate|dCLSE...|
|00001f90| 00 00 00 f4 13 4e 6f 20 | 4e 4f 2e 41 43 4b 20 49 |.....No |NO.ACK I|
|00001fa0| 6e 64 69 63 61 74 65 64 | 00 48 57 52 44 40 00 00 |ndicated|.HWRD@..|
|00001fb0| 00 01 90 c2 0e 4f 70 74 | 69 6f 6e 20 44 61 74 61 |.....Opt|ion Data|
|00001fc0| 20 32 3a 43 45 51 55 00 | 00 00 01 01 00 14 14 46 | 2:CEQU.|.......F|
|00001fd0| 69 72 73 74 20 44 41 54 | 41 5f 4f 4e 4c 59 5f 4c |irst DAT|A_ONLY_L|
|00001fe0| 41 53 54 43 4c 53 45 00 | 00 00 00 00 00 14 18 4e |ASTCLSE.|.......N|
|00001ff0| 6f 74 20 46 69 72 73 74 | 20 44 41 54 41 5f 4f 4e |ot First| DATA_ON|
|00002000| 4c 59 5f 4c 41 53 54 54 | 52 54 53 00 00 00 00 00 |LY_LASTT|RTS.....|
|00002010| 00 00 00 00 00 00 fa 00 | 07 48 42 59 54 00 00 00 |........|.HBYT...|
|00002020| 00 01 90 c2 0e 4f 70 74 | 69 6f 6e 20 44 61 74 61 |.....Opt|ion Data|
|00002030| 20 31 3a 43 42 49 54 00 | 00 00 00 01 00 f4 1e 4e | 1:CBIT.|.......N|
|00002040| 65 74 42 49 4f 53 20 56 | 65 72 73 69 6f 6e 20 32 |etBIOS V|ersion 2|
|00002050| 2e 30 30 20 4f 72 20 48 | 69 67 68 65 72 43 4c 53 |.00 Or H|igherCLS|
|00002060| 45 00 00 00 00 00 00 f4 | 14 4e 65 74 42 49 4f 53 |E.......|.NetBIOS|
|00002070| 20 56 65 72 73 69 6f 6e | 20 31 2e 78 78 43 42 49 | Version| 1.xxCBI|
|00002080| 54 00 00 00 07 01 00 f4 | 2b 43 61 6e 20 48 61 6e |T.......|+Can Han|
|00002090| 64 6c 65 20 53 45 4e 44 | 2e 4e 4f 2e 41 43 4b 20 |dle SEND|.NO.ACK |
|000020a0| 4f 72 20 43 48 41 49 4e | 2e 53 45 4e 44 2e 4e 4f |Or CHAIN|.SEND.NO|
|000020b0| 2e 41 43 4b 00 43 4c 53 | 45 00 00 00 00 00 00 f4 |.ACK.CLS|E.......|
|000020c0| 21 4e 65 74 42 49 4f 53 | 20 56 65 72 73 69 6f 6e |!NetBIOS| Version|
|000020d0| 20 45 61 72 6c 69 65 72 | 20 54 68 61 6e 20 32 2e | Earlier| Than 2.|
|000020e0| 32 30 00 44 57 52 44 40 | 00 00 00 00 90 c2 16 4d |20.DWRD@|.......M|
|000020f0| 61 78 20 44 61 74 61 20 | 52 65 63 65 69 76 65 20 |ax Data |Receive |
|00002100| 53 69 7a 65 3a 54 52 54 | 53 00 00 00 00 00 00 00 |Size:TRT|S.......|
|00002110| 00 00 00 00 aa 00 06 48 | 42 59 54 00 00 00 00 00 |.......H|BYT.....|
|00002120| 90 c2 0e 4f 70 74 69 6f | 6e 20 44 61 74 61 20 31 |...Optio|n Data 1|
|00002130| 3a 4c 41 42 4c 00 00 00 | 00 00 00 14 08 52 65 73 |:LABL...|.....Res|
|00002140| 65 72 76 65 64 48 57 52 | 44 40 00 00 00 01 90 c2 |ervedHWR|D@......|
|00002150| 0e 4f 70 74 69 6f 6e 20 | 44 61 74 61 20 32 3a 43 |.Option |Data 2:C|
|00002160| 45 51 55 00 00 00 00 01 | 00 14 1c 4e 6f 72 6d 61 |EQU.....|...Norma|
|00002170| 6c 20 53 65 73 73 69 6f | 6e 20 45 6e 64 20 28 48 |l Sessio|n End (H|
|00002180| 41 4e 47 2e 55 50 29 43 | 45 51 55 00 00 00 01 01 |ANG.UP)C|EQU.....|
|00002190| 00 14 1f 41 62 6e 6f 72 | 6d 61 6c 20 53 65 73 73 |...Abnor|mal Sess|
|000021a0| 69 6f 6e 20 45 6e 64 20 | 28 54 69 6d 65 6f 75 74 |ion End |(Timeout|
|000021b0| 3f 29 00 54 52 54 53 00 | 00 00 00 00 00 00 00 00 |?).TRTS.|........|
|000021c0| 00 01 40 00 0a 48 42 59 | 54 00 00 00 00 01 90 c2 |..@..HBY|T.......|
|000021d0| 0e 4f 70 74 69 6f 6e 20 | 44 61 74 61 20 31 3a 43 |.Option |Data 1:C|
|000021e0| 42 49 54 00 00 00 00 01 | 00 f4 1e 4e 65 74 42 49 |BIT.....|...NetBI|
|000021f0| 4f 53 20 56 65 72 73 69 | 6f 6e 20 32 2e 30 30 20 |OS Versi|on 2.00 |
|00002200| 4f 72 20 48 69 67 68 65 | 72 43 4c 53 45 00 00 00 |Or Highe|rCLSE...|
|00002210| 00 00 00 f4 14 4e 65 74 | 42 49 4f 53 20 56 65 72 |.....Net|BIOS Ver|
|00002220| 73 69 6f 6e 20 31 2e 78 | 78 43 42 49 54 00 00 00 |sion 1.x|xCBIT...|
|00002230| 07 01 00 f4 2b 43 61 6e | 20 48 61 6e 64 6c 65 20 |....+Can| Handle |
|00002240| 53 45 4e 44 2e 4e 4f 2e | 41 43 4b 20 4f 72 20 43 |SEND.NO.|ACK Or C|
|00002250| 48 41 49 4e 2e 53 45 4e | 44 2e 4e 4f 2e 41 43 4b |HAIN.SEN|D.NO.ACK|
|00002260| 00 43 4c 53 45 00 00 00 | 00 00 00 f4 21 4e 65 74 |.CLSE...|....!Net|
|00002270| 42 49 4f 53 20 56 65 72 | 73 69 6f 6e 20 45 61 72 |BIOS Ver|sion Ear|
|00002280| 6c 69 65 72 20 54 68 61 | 6e 20 32 2e 32 30 00 41 |lier Tha|n 2.20.A|
|00002290| 4e 44 47 00 00 00 0f 01 | 00 00 00 44 49 56 47 00 |NDG.....|...DIVG.|
|000022a0| 00 00 02 01 00 00 00 44 | 47 4c 42 00 00 00 00 01 |.......D|GLB.....|
|000022b0| 04 f4 21 4c 61 72 67 65 | 73 74 20 46 72 61 6d 65 |..!Large|st Frame|
|000022c0| 20 53 65 65 6e 20 42 79 | 20 4d 41 43 20 4c 61 79 | Seen By| MAC Lay|
|000022d0| 65 72 3a 20 00 44 57 52 | 44 40 00 00 00 00 90 c2 |er: .DWR|D@......|
|000022e0| 16 4d 61 78 20 44 61 74 | 61 20 52 65 63 65 69 76 |.Max Dat|a Receiv|
|000022f0| 65 20 53 69 7a 65 3a 54 | 52 54 53 00 00 00 00 00 |e Size:T|RTS.....|
|00002300| 00 00 00 00 00 00 a8 00 | 05 48 42 59 54 00 00 00 |........|.HBYT...|
|00002310| 00 01 90 c2 0e 4f 70 74 | 69 6f 6e 20 44 61 74 61 |.....Opt|ion Data|
|00002320| 20 31 3a 43 42 49 54 00 | 00 00 01 01 00 f4 29 52 | 1:CBIT.|......)R|
|00002330| 65 63 65 69 76 65 64 20 | 53 45 4e 44 2e 4e 4f 2e |eceived |SEND.NO.|
|00002340| 41 43 4b 20 4f 72 20 43 | 48 41 49 4e 2e 53 45 4e |ACK Or C|HAIN.SEN|
|00002350| 44 2e 4e 4f 2e 41 43 4b | 00 43 4c 53 45 00 00 00 |D.NO.ACK|.CLSE...|
|00002360| 00 00 00 f4 21 4e 65 74 | 42 49 4f 53 20 56 65 72 |....!Net|BIOS Ver|
|00002370| 73 69 6f 6e 20 45 61 72 | 6c 69 65 72 20 54 68 61 |sion Ear|lier Tha|
|00002380| 6e 20 32 2e 32 30 00 44 | 57 52 44 40 00 00 00 00 |n 2.20.D|WRD@....|
|00002390| 90 c2 0f 42 79 74 65 73 | 20 41 63 63 65 70 74 65 |...Bytes| Accepte|
|000023a0| 64 3a 00 54 52 54 53 00 | 00 00 00 00 00 00 00 00 |d:.TRTS.|........|
|000023b0| 00 00 5e 00 04 48 42 59 | 54 00 00 00 00 00 90 c2 |..^..HBY|T.......|
|000023c0| 0e 4f 70 74 69 6f 6e 20 | 44 61 74 61 20 31 3a 4c |.Option |Data 1:L|
|000023d0| 41 42 4c 00 00 00 00 00 | 00 14 08 52 65 73 65 72 |ABL.....|...Reser|
|000023e0| 76 65 64 44 57 52 44 40 | 00 00 00 00 90 c2 16 4d |vedDWRD@|.......M|
|000023f0| 61 78 20 44 61 74 61 20 | 52 65 63 65 69 76 65 20 |ax Data |Receive |
|00002400| 53 69 7a 65 3a 54 52 54 | 53 00 00 00 00 00 00 00 |Size:TRT|S.......|
|00002410| 00 00 00 01 7f 00 20 14 | 41 64 64 20 47 72 6f 75 |...... .|Add Grou|
|00002420| 70 20 4e 61 6d 65 20 51 | 75 65 72 79 0e 41 64 64 |p Name Q|uery.Add|
|00002430| 20 4e 61 6d 65 20 51 75 | 65 72 79 10 4e 61 6d 65 | Name Qu|ery.Name|
|00002440| 20 49 6e 20 43 6f 6e 66 | 6c 69 63 74 0c 53 74 61 | In Conf|lict.Sta|
|00002450| 74 75 73 20 51 75 65 72 | 79 00 00 00 1d 54 65 72 |tus Quer|y....Ter|
|00002460| 6d 69 6e 61 74 65 20 54 | 72 61 63 65 20 28 52 65 |minate T|race (Re|
|00002470| 6d 6f 74 65 20 4f 6e 6c | 79 29 08 44 61 74 61 67 |mote Onl|y).Datag|
|00002480| 72 61 6d 12 44 61 74 61 | 67 72 61 6d 20 42 72 6f |ram.Data|gram Bro|
|00002490| 61 64 63 61 73 74 0a 4e | 61 6d 65 20 51 75 65 72 |adcast.N|ame Quer|
|000024a0| 79 00 00 11 41 64 64 20 | 4e 61 6d 65 20 52 65 73 |y...Add |Name Res|
|000024b0| 70 6f 6e 73 65 0f 4e 61 | 6d 65 20 52 65 63 6f 67 |ponse.Na|me Recog|
|000024c0| 6e 69 7a 65 64 0f 53 74 | 61 74 75 73 20 52 65 73 |nized.St|atus Res|
|000024d0| 70 6f 6e 73 65 00 00 00 | 22 54 65 72 6d 69 6e 61 |ponse...|"Termina|
|000024e0| 74 65 20 54 72 61 63 65 | 20 28 4c 6f 63 61 6c 20 |te Trace| (Local |
|000024f0| 41 6e 64 20 52 65 6d 6f | 74 65 29 08 44 61 74 61 |And Remo|te).Data|
|00002500| 20 41 63 6b 11 44 61 74 | 61 20 46 69 72 73 74 20 | Ack.Dat|a First |
|00002510| 4d 69 64 64 6c 65 0e 44 | 61 74 61 20 4f 6e 6c 79 |Middle.D|ata Only|
|00002520| 20 4c 61 73 74 0f 53 65 | 73 73 69 6f 6e 20 43 6f | Last.Se|ssion Co|
|00002530| 6e 66 69 72 6d 0b 53 65 | 73 73 69 6f 6e 20 45 6e |nfirm.Se|ssion En|
|00002540| 64 12 53 65 73 73 69 6f | 6e 20 49 6e 69 74 69 61 |d.Sessio|n Initia|
|00002550| 6c 69 7a 65 0a 4e 6f 20 | 52 65 63 65 69 76 65 13 |lize.No |Receive.|
|00002560| 52 65 63 65 69 76 65 20 | 4f 75 74 73 74 61 6e 64 |Receive |Outstand|
|00002570| 69 6e 67 10 52 65 63 65 | 69 76 65 20 43 6f 6e 74 |ing.Rece|ive Cont|
|00002580| 69 6e 75 65 00 00 0d 53 | 65 73 73 69 6f 6e 20 41 |inue...S|ession A|
|00002590| 6c 69 76 65 00 00 05 c4 | 00 3c 4c 41 42 4c 00 00 |live....|.<LABL..|
|000025a0| 00 00 00 00 b1 1a 53 4d | 42 20 2d 20 53 65 72 76 |......SM|B - Serv|
|000025b0| 65 72 20 4d 65 73 73 61 | 67 65 20 42 6c 6f 63 6b |er Messa|ge Block|
|000025c0| 49 4e 43 52 00 00 00 01 | 00 00 00 00 43 48 52 23 |INCR....|....CHR#|
|000025d0| 00 00 00 03 00 90 c2 0c | 50 72 6f 74 6f 63 6f 6c |........|Protocol|
|000025e0| 20 49 44 3a 48 42 59 54 | 00 00 00 00 02 90 c2 0d | ID:HBYT|........|
|000025f0| 43 6f 6d 6d 61 6e 64 20 | 43 6f 64 65 3a 00 54 53 |Command |Code:.TS|
|00002600| 55 42 00 00 00 00 00 00 | 00 11 53 4d 42 20 43 6f |UB......|..SMB Co|
|00002610| 6d 6d 61 6e 64 20 43 6f | 64 65 73 00 4d 4f 56 45 |mmand Co|des.MOVE|
|00002620| 00 00 00 20 0f 00 00 00 | 48 42 59 54 00 00 00 00 |... ....|HBYT....|
|00002630| 08 90 c2 11 45 72 72 6f | 72 20 43 6f 64 65 20 43 |....Erro|r Code C|
|00002640| 6c 61 73 73 3a 00 43 53 | 54 23 ff ff ff ff 08 00 |lass:.CS|T#......|
|00002650| 14 13 53 4d 42 20 45 72 | 72 6f 72 20 43 6c 61 73 |..SMB Er|ror Clas|
|00002660| 73 20 24 30 30 00 53 47 | 54 45 00 00 00 e0 01 00 |s $00.SG|TE......|
|00002670| 00 00 53 4b 49 50 00 00 | 00 02 00 00 00 00 43 53 |..SKIP..|......CS|
|00002680| 54 23 00 00 00 e0 01 00 | 14 13 53 4d 42 20 45 72 |T#......|..SMB Er|
|00002690| 72 6f 72 20 43 6c 61 73 | 73 20 24 45 30 00 43 45 |ror Clas|s $E0.CE|
|000026a0| 51 55 00 00 00 ff 01 00 | 14 19 43 6f 6d 6d 61 6e |QU......|..Comman|
|000026b0| 64 20 4e 6f 74 20 49 6e | 20 53 4d 42 20 46 6f 72 |d Not In| SMB For|
|000026c0| 6d 61 74 00 48 42 59 54 | 00 00 00 00 00 90 c2 09 |mat.HBYT|........|
|000026d0| 52 65 73 65 72 76 65 64 | 3a 00 44 57 52 44 40 00 |Reserved|:.DWRD@.|
|000026e0| 00 00 03 90 c2 0b 45 72 | 72 6f 72 20 43 6f 64 65 |......Er|ror Code|
|000026f0| 3a 00 53 45 51 55 00 00 | 00 01 01 00 00 00 53 4b |:.SEQU..|......SK|
|00002700| 49 50 00 00 00 03 00 00 | 00 00 43 53 54 23 ff ff |IP......|..CST#..|
|00002710| ff ff 03 00 14 15 53 4d | 42 20 53 65 72 76 65 72 |......SM|B Server|
|00002720| 20 45 72 72 6f 72 73 20 | 24 30 30 00 53 4e 45 51 | Errors |$00.SNEQ|
|00002730| 00 00 00 01 01 00 00 00 | 53 4b 49 50 00 00 00 01 |........|SKIP....|
|00002740| 00 00 00 00 43 53 54 23 | ff ff ff ff 03 00 14 12 |....CST#|........|
|00002750| 53 4d 42 20 44 4f 53 20 | 45 72 72 6f 72 73 20 24 |SMB DOS |Errors $|
|00002760| 30 30 53 47 54 45 00 00 | 00 07 03 00 00 00 53 4b |00SGTE..|......SK|
|00002770| 49 50 00 00 00 11 00 00 | 00 00 43 53 54 23 00 00 |IP......|..CST#..|
|00002780| 00 07 03 00 14 0c 53 4d | 42 20 45 72 72 6f 72 73 |......SM|B Errors|
|00002790| 20 38 53 47 54 45 00 00 | 00 30 03 00 00 00 53 4b | 8SGTE..|.0....SK|
|000027a0| 49 50 00 00 00 0e 00 00 | 00 00 43 53 54 23 00 00 |IP......|..CST#..|
|000027b0| 00 30 03 00 14 0d 53 4d | 42 20 45 72 72 6f 72 73 |.0....SM|B Errors|
|000027c0| 20 34 39 00 53 47 54 45 | 00 00 00 3f 03 00 00 00 | 49.SGTE|...?....|
|000027d0| 53 4b 49 50 00 00 00 0b | 00 00 00 00 43 53 54 23 |SKIP....|....CST#|
|000027e0| 00 00 00 3f 03 00 14 0d | 53 4d 42 20 45 72 72 6f |...?....|SMB Erro|
|000027f0| 72 73 20 36 34 00 53 47 | 54 45 00 00 00 4f 03 00 |rs 64.SG|TE...O..|
|00002800| 00 00 53 4b 49 50 00 00 | 00 08 00 00 00 00 43 53 |..SKIP..|......CS|
|00002810| 54 23 00 00 00 4f 03 00 | 14 0d 53 4d 42 20 45 72 |T#...O..|..SMB Er|
|00002820| 72 6f 72 73 20 38 30 00 | 53 47 54 45 00 00 00 e5 |rors 80.|SGTE....|
|00002830| 03 00 00 00 53 4b 49 50 | 00 00 00 05 00 00 00 00 |....SKIP|........|
|00002840| 43 53 54 23 00 00 00 e5 | 03 00 14 0e 53 4d 42 20 |CST#....|....SMB |
|00002850| 45 72 72 6f 72 73 20 32 | 33 30 53 47 54 45 00 00 |Errors 2|30SGTE..|
|00002860| 00 f9 03 00 00 00 53 4b | 49 50 00 00 00 02 00 00 |......SK|IP......|
|00002870| 00 00 43 53 54 23 00 00 | 00 f9 03 00 14 0e 53 4d |..CST#..|......SM|
|00002880| 42 20 45 72 72 6f 72 73 | 20 32 35 30 43 45 51 55 |B Errors| 250CEQU|
|00002890| 00 00 ff ff 03 00 14 16 | 46 75 6e 63 74 69 6f 6e |........|Function|
|000028a0| 20 4e 6f 74 20 53 75 70 | 70 6f 72 74 65 64 48 42 | Not Sup|portedHB|
|000028b0| 59 54 00 00 00 00 09 90 | c2 0a 46 6c 61 67 20 42 |YT......|..Flag B|
|000028c0| 79 74 65 3a 43 42 49 54 | 00 00 00 07 09 00 f4 08 |yte:CBIT|........|
|000028d0| 52 65 73 70 6f 6e 73 65 | 43 4c 53 45 00 00 00 00 |Response|CLSE....|
|000028e0| 00 00 f4 07 52 65 71 75 | 65 73 74 00 43 42 49 54 |....Requ|est.CBIT|
|000028f0| 00 00 00 00 09 00 f4 27 | 53 75 70 70 6f 72 74 73 |.......'|Supports|
|00002900| 20 4c 6f 63 6b 20 61 6e | 64 20 52 65 61 64 2f 57 | Lock an|d Read/W|
|00002910| 72 69 74 65 20 61 6e 64 | 20 55 6e 6c 6f 63 6b 00 |rite and| Unlock.|
|00002920| 43 42 49 54 00 00 00 01 | 09 00 f4 17 53 65 6e 64 |CBIT....|....Send|
|00002930| 20 4e 6f 20 41 63 6b 20 | 4d 61 79 20 42 65 20 55 | No Ack |May Be U|
|00002940| 73 65 64 00 43 42 49 54 | 00 00 00 03 09 00 f4 1a |sed.CBIT|........|
|00002950| 50 61 74 68 6e 61 6d 65 | 73 20 41 72 65 20 57 69 |Pathname|s Are Wi|
|00002960| 74 68 6f 75 74 20 43 61 | 73 65 43 4c 53 45 00 00 |thout Ca|seCLSE..|
|00002970| 00 00 00 00 f4 1c 50 61 | 74 68 6e 61 6d 65 73 20 |......Pa|thnames |
|00002980| 41 72 65 20 43 61 73 65 | 20 53 65 6e 73 69 74 69 |Are Case| Sensiti|
|00002990| 76 65 43 42 49 54 00 00 | 00 04 09 00 f4 24 50 61 |veCBIT..|.....$Pa|
|000029a0| 74 68 6e 61 6d 65 73 20 | 41 72 65 20 41 6c 72 65 |thnames |Are Alre|
|000029b0| 61 64 79 20 49 6e 20 4f | 53 2f 32 20 46 6f 72 6d |ady In O|S/2 Form|
|000029c0| 61 74 43 42 49 54 00 00 | 00 05 09 00 f4 1a 52 65 |atCBIT..|......Re|
|000029d0| 71 75 65 73 74 20 4f 70 | 70 6f 72 74 75 6e 69 73 |quest Op|portunis|
|000029e0| 74 69 63 20 4c 6f 63 6b | 43 42 49 54 00 00 00 06 |tic Lock|CBIT....|
|000029f0| 09 00 f4 24 4e 6f 74 69 | 66 79 20 43 6f 6e 73 75 |...$Noti|fy Consu|
|00002a00| 6d 65 72 20 4f 6e 20 41 | 6e 79 20 4d 6f 64 69 66 |mer On A|ny Modif|
|00002a10| 79 20 41 63 74 69 6f 6e | 48 57 52 44 40 00 00 00 |y Action|HWRD@...|
|00002a20| 04 90 c2 0a 46 6c 61 67 | 20 57 6f 72 64 3a 43 42 |....Flag| Word:CB|
|00002a30| 49 54 00 00 00 00 04 00 | f4 2c 41 70 70 6c 69 63 |IT......|.,Applic|
|00002a40| 61 74 69 6f 6e 20 55 6e | 64 65 72 73 74 61 6e 64 |ation Un|derstand|
|00002a50| 73 20 4f 53 2f 32 20 31 | 2e 32 20 53 74 79 6c 65 |s OS/2 1|.2 Style|
|00002a60| 20 4e 61 6d 65 73 43 42 | 49 54 00 00 00 01 04 00 | NamesCB|IT......|
|00002a70| f4 2b 41 70 70 6c 69 63 | 61 74 69 6f 6e 20 55 6e |.+Applic|ation Un|
|00002a80| 64 65 72 73 74 61 6e 64 | 73 20 45 78 74 65 6e 64 |derstand|s Extend|
|00002a90| 65 64 20 41 74 74 72 69 | 62 75 74 65 73 00 4d 4f |ed Attri|butes.MO|
|00002aa0| 56 45 00 00 00 0c 01 00 | 00 00 44 55 4d 50 00 00 |VE......|..DUMP..|
|00002ab0| 00 0c 01 90 c2 09 52 65 | 73 65 72 76 65 64 3a 00 |......Re|served:.|
|00002ac0| 48 57 52 44 40 00 00 00 | 00 90 c2 12 41 75 74 68 |HWRD@...|....Auth|
|00002ad0| 2e 20 52 65 73 6f 75 72 | 63 65 20 49 44 3a 48 57 |. Resour|ce ID:HW|
|00002ae0| 52 44 40 00 00 00 00 90 | c2 12 43 61 6c 6c 65 72 |RD@.....|..Caller|
|00002af0| 20 50 72 6f 63 65 73 73 | 20 49 44 3a 48 57 52 44 | Process| ID:HWRD|
|00002b00| 40 00 00 00 00 90 c2 0e | 41 75 74 68 2e 20 55 73 |@.......|Auth. Us|
|00002b10| 65 72 20 49 44 3a 48 57 | 52 44 40 00 00 00 00 90 |er ID:HW|RD@.....|
|00002b20| c2 0d 4d 75 6c 74 69 70 | 6c 65 78 20 49 44 3a 00 |..Multip|lex ID:.|
|00002b30| 53 55 42 47 00 00 00 20 | 10 00 00 00 54 4e 58 54 |SUBG... |....TNXT|
|00002b40| 00 00 00 00 00 00 00 14 | 53 4d 42 20 52 65 71 75 |........|SMB Requ|
|00002b50| 65 73 74 2f 52 65 73 70 | 6f 6e 73 65 00 00 00 a2 |est/Resp|onse....|
|00002b60| 00 08 4c 41 42 4c 00 00 | 00 00 00 00 b1 13 53 4d |..LABL..|......SM|
|00002b70| 42 20 55 6e 6b 6e 6f 77 | 6e 20 43 6f 6d 6d 61 6e |B Unknow|n Comman|
|00002b80| 64 00 54 53 55 42 00 00 | 00 00 00 00 00 08 53 4d |d.TSUB..|......SM|
|00002b90| 42 20 42 61 73 65 4d 55 | 4c 47 00 00 00 02 01 00 |B BaseMU|LG......|
|00002ba0| 00 00 4d 4f 56 45 00 00 | 00 01 8b 00 00 00 44 55 |..MOVE..|......DU|
|00002bb0| 4d 50 00 00 00 00 01 90 | c2 0c 57 6f 72 64 20 42 |MP......|..Word B|
|00002bc0| 75 66 66 65 72 3a 44 57 | 52 44 40 00 00 00 01 90 |uffer:DW|RD@.....|
|00002bd0| c2 0b 42 79 74 65 20 43 | 6f 75 6e 74 3a 00 4d 4f |..Byte C|ount:.MO|
|00002be0| 56 45 00 00 00 01 8c 00 | 00 00 44 55 4d 50 00 00 |VE......|..DUMP..|
|00002bf0| 00 00 01 90 c2 0c 42 79 | 74 65 20 42 75 66 66 65 |......By|te Buffe|
|00002c00| 72 3a 00 00 00 b4 00 07 | 4c 41 42 4c 00 00 00 00 |r:......|LABL....|
|00002c10| 00 00 b1 14 53 4d 42 20 | 43 72 65 61 74 65 20 44 |....SMB |Create D|
|00002c20| 69 72 65 63 74 6f 72 79 | 54 53 55 42 00 00 00 00 |irectory|TSUB....|
|00002c30| 00 00 00 08 53 4d 42 20 | 42 61 73 65 54 42 49 54 |....SMB |BaseTBIT|
|00002c40| 00 00 00 07 09 00 00 11 | 53 4d 42 20 43 72 65 61 |........|SMB Crea|
|00002c50| 74 65 44 69 72 20 52 73 | 70 00 44 57 52 44 40 00 |teDir Rs|p.DWRD@.|
|00002c60| 00 00 01 90 c2 0b 42 79 | 74 65 20 43 6f 75 6e 74 |......By|te Count|
|00002c70| 3a 00 4d 4f 56 45 00 00 | 00 01 8c 00 00 00 4c 41 |:.MOVE..|......LA|
|00002c80| 42 4c 00 00 00 00 00 90 | c2 13 44 69 72 65 63 74 |BL......|..Direct|
|00002c90| 6f 72 79 20 50 61 74 68 | 6e 61 6d 65 3a 00 54 53 |ory Path|name:.TS|
|00002ca0| 55 42 00 00 00 00 00 00 | 00 0f 53 4d 42 20 53 74 |UB......|..SMB St|
|00002cb0| 72 69 6e 67 20 4e 61 6d | 65 00 00 00 00 b0 00 07 |ring Nam|e.......|
|00002cc0| 4c 41 42 4c 00 00 00 00 | 00 00 b1 14 53 4d 42 20 |LABL....|....SMB |
|00002cd0| 44 65 6c 65 74 65 20 44 | 69 72 65 63 74 6f 72 79 |Delete D|irectory|
|00002ce0| 54 53 55 42 00 00 00 00 | 00 00 00 08 53 4d 42 20 |TSUB....|....SMB |
|00002cf0| 42 61 73 65 54 42 49 54 | 00 00 00 07 09 00 00 0e |BaseTBIT|........|
|00002d00| 53 4d 42 20 44 65 6c 44 | 69 72 20 52 73 70 44 57 |SMB DelD|ir RspDW|
|00002d10| 52 44 40 00 00 00 01 90 | c2 0b 42 79 74 65 20 43 |RD@.....|..Byte C|
|00002d20| 6f 75 6e 74 3a 00 4d 4f | 56 45 00 00 00 01 8c 00 |ount:.MO|VE......|
|00002d30| 00 00 4c 41 42 4c 00 00 | 00 00 00 90 c2 13 44 69 |..LABL..|......Di|
|00002d40| 72 65 63 74 6f 72 79 20 | 50 61 74 68 6e 61 6d 65 |rectory |Pathname|
|00002d50| 3a 00 54 53 55 42 00 00 | 00 00 00 00 00 0f 53 4d |:.TSUB..|......SM|
|00002d60| 42 20 53 74 72 69 6e 67 | 20 4e 61 6d 65 00 00 00 |B String| Name...|
|00002d70| 01 56 00 10 4c 41 42 4c | 00 00 00 00 00 00 b1 0d |.V..LABL|........|
|00002d80| 53 4d 42 20 4f 70 65 6e | 20 46 69 6c 65 00 54 53 |SMB Open| File.TS|
|00002d90| 55 42 00 00 00 00 00 00 | 00 08 53 4d 42 20 42 61 |UB......|..SMB Ba|
|00002da0| 73 65 54 42 49 54 00 00 | 00 07 09 00 00 0d 53 4d |seTBIT..|......SM|
|00002db0| 42 20 4f 70 65 6e 46 20 | 52 73 70 00 44 42 49 54 |B OpenF |Rsp.DBIT|
|00002dc0| 00 00 00 04 04 90 c2 0b | 53 68 61 72 65 20 4d 6f |........|Share Mo|
|00002dd0| 64 65 3a 00 41 4e 44 47 | 00 00 00 07 04 00 00 00 |de:.ANDG|........|
|00002de0| 43 53 54 23 ff ff ff ff | 04 00 14 0f 53 4d 42 20 |CST#....|....SMB |
|00002df0| 53 68 61 72 65 20 4d 6f | 64 65 73 00 44 42 49 54 |Share Mo|des.DBIT|
|00002e00| 00 00 00 04 04 90 c2 0a | 4f 70 65 6e 20 4d 6f 64 |........|Open Mod|
|00002e10| 65 3a 43 53 54 23 ff ff | ff ff 04 00 14 0e 53 4d |e:CST#..|......SM|
|00002e20| 42 20 4f 70 65 6e 20 4d | 6f 64 65 73 4c 41 42 4c |B Open M|odesLABL|
|00002e30| 00 00 00 00 00 00 c0 00 | 49 4e 43 52 00 00 00 01 |........|INCR....|
|00002e40| 00 00 00 00 54 53 55 42 | 00 00 00 00 00 00 00 12 |....TSUB|........|
|00002e50| 53 4d 42 20 41 74 74 72 | 69 62 75 74 65 20 42 69 |SMB Attr|ibute Bi|
|00002e60| 74 73 53 55 42 47 00 00 | 00 02 01 00 00 00 44 57 |tsSUBG..|......DW|
|00002e70| 52 44 40 00 00 00 01 90 | c2 0b 42 79 74 65 20 43 |RD@.....|..Byte C|
|00002e80| 6f 75 6e 74 3a 00 4d 4f | 56 45 00 00 00 01 8c 00 |ount:.MO|VE......|
|00002e90| 00 00 4c 41 42 4c 00 00 | 00 00 00 90 c2 0e 46 69 |..LABL..|......Fi|
|00002ea0| 6c 65 20 50 61 74 68 6e | 61 6d 65 3a 54 53 55 42 |le Pathn|ame:TSUB|
|00002eb0| 00 00 00 00 00 00 00 0f | 53 4d 42 20 53 74 72 69 |........|SMB Stri|
|00002ec0| 6e 67 20 4e 61 6d 65 00 | 00 00 00 ec 00 0a 4c 41 |ng Name.|......LA|
|00002ed0| 42 4c 00 00 00 00 00 00 | b1 0f 53 4d 42 20 43 72 |BL......|..SMB Cr|
|00002ee0| 65 61 74 65 20 46 69 6c | 65 00 54 53 55 42 00 00 |eate Fil|e.TSUB..|
|00002ef0| 00 00 00 00 00 08 53 4d | 42 20 42 61 73 65 54 42 |......SM|B BaseTB|
|00002f00| 49 54 00 00 00 07 09 00 | 00 0f 53 4d 42 20 43 72 |IT......|..SMB Cr|
|00002f10| 65 61 74 65 46 20 52 73 | 70 00 4c 41 42 4c 00 00 |eateF Rs|p.LABL..|
|00002f20| 00 00 00 00 c0 00 54 53 | 55 42 00 00 00 00 00 00 |......TS|UB......|
|00002f30| 00 12 53 4d 42 20 41 74 | 74 72 69 62 75 74 65 20 |..SMB At|tribute |
|00002f40| 42 69 74 73 48 4c 4e 47 | 40 00 00 00 04 90 c2 0e |BitsHLNG|@.......|
|00002f50| 43 72 65 61 74 69 6f 6e | 20 54 69 6d 65 3a 44 57 |Creation| Time:DW|
|00002f60| 52 44 40 00 00 00 01 90 | c2 0b 42 79 74 65 20 43 |RD@.....|..Byte C|
|00002f70| 6f 75 6e 74 3a 00 4d 4f | 56 45 00 00 00 01 8c 00 |ount:.MO|VE......|
|00002f80| 00 00 4c 41 42 4c 00 00 | 00 00 00 90 c2 0e 46 69 |..LABL..|......Fi|
|00002f90| 6c 65 20 50 61 74 68 6e | 61 6d 65 3a 54 53 55 42 |le Pathn|ame:TSUB|
|00002fa0| 00 00 00 00 00 00 00 0f | 53 4d 42 20 53 74 72 69 |........|SMB Stri|
|00002fb0| 6e 67 20 4e 61 6d 65 00 | 00 00 01 28 00 10 4c 41 |ng Name.|...(..LA|
|00002fc0| 42 4c 00 00 00 00 00 00 | b1 0e 53 4d 42 20 43 6c |BL......|..SMB Cl|
|00002fd0| 6f 73 65 20 46 69 6c 65 | 54 53 55 42 00 00 00 00 |ose File|TSUB....|
|00002fe0| 00 00 00 08 53 4d 42 20 | 42 61 73 65 54 42 49 54 |....SMB |BaseTBIT|
|00002ff0| 00 00 00 07 09 00 00 0e | 53 4d 42 20 43 6c 6f 73 |........|SMB Clos|
|00003000| 65 46 20 52 73 70 48 57 | 52 44 40 00 00 00 04 90 |eF RspHW|RD@.....|
|00003010| c2 0c 46 69 6c 65 20 48 | 61 6e 64 6c 65 3a 48 4c |..File H|andle:HL|
|00003020| 4e 47 40 00 00 00 04 90 | c2 05 54 69 6d 65 3a 00 |NG@.....|..Time:.|
|00003030| 53 55 42 47 00 00 00 03 | 01 00 00 00 53 45 51 55 |SUBG....|....SEQU|
|00003040| 00 00 00 00 01 00 00 00 | 53 4b 49 50 00 00 00 02 |........|SKIP....|
|00003050| 00 00 00 00 4d 55 4c 47 | 00 00 00 02 01 00 00 00 |....MULG|........|
|00003060| 44 55 4d 50 00 00 00 00 | 01 90 c2 11 41 64 64 69 |DUMP....|....Addi|
|00003070| 74 69 6f 6e 61 6c 20 42 | 79 74 65 73 3a 00 44 57 |tional B|ytes:.DW|
|00003080| 52 44 40 00 00 00 01 90 | c2 0b 42 79 74 65 20 43 |RD@.....|..Byte C|
|00003090| 6f 75 6e 74 3a 00 4d 4f | 56 45 00 00 00 01 8c 00 |ount:.MO|VE......|
|000030a0| 00 00 53 45 51 55 00 00 | 00 00 01 00 00 00 53 4b |..SEQU..|......SK|
|000030b0| 49 50 00 00 00 01 00 00 | 00 00 44 55 4d 50 00 00 |IP......|..DUMP..|
|000030c0| 00 00 01 90 c2 11 41 64 | 64 69 74 69 6f 6e 61 6c |......Ad|ditional|
|000030d0| 20 42 79 74 65 73 3a 00 | 4c 41 42 4c 00 00 00 00 | Bytes:.|LABL....|
|000030e0| 00 00 00 00 00 00 01 16 | 00 0f 4c 41 42 4c 00 00 |........|..LABL..|
|000030f0| 00 00 00 00 b1 0e 53 4d | 42 20 46 6c 75 73 68 20 |......SM|B Flush |
|00003100| 46 69 6c 65 54 53 55 42 | 00 00 00 00 00 00 00 08 |FileTSUB|........|
|00003110| 53 4d 42 20 42 61 73 65 | 54 42 49 54 00 00 00 07 |SMB Base|TBIT....|
|00003120| 09 00 00 0e 53 4d 42 20 | 46 6c 75 73 68 46 20 52 |....SMB |FlushF R|
|00003130| 73 70 48 57 52 44 40 00 | 00 00 04 90 c2 0c 46 69 |spHWRD@.|......Fi|
|00003140| 6c 65 20 48 61 6e 64 6c | 65 3a 53 55 42 47 00 00 |le Handl|e:SUBG..|
|00003150| 00 01 01 00 00 00 53 45 | 51 55 00 00 00 00 01 00 |......SE|QU......|
|00003160| 00 00 53 4b 49 50 00 00 | 00 02 00 00 00 00 4d 55 |..SKIP..|......MU|
|00003170| 4c 47 00 00 00 02 01 00 | 00 00 44 55 4d 50 00 00 |LG......|..DUMP..|
|00003180| 00 00 01 90 c2 11 41 64 | 64 69 74 69 6f 6e 61 6c |......Ad|ditional|
|00003190| 20 42 79 74 65 73 3a 00 | 44 57 52 44 40 00 00 00 | Bytes:.|DWRD@...|
|000031a0| 01 90 c2 0b 42 79 74 65 | 20 43 6f 75 6e 74 3a 00 |....Byte| Count:.|
|000031b0| 4d 4f 56 45 00 00 00 01 | 8c 00 00 00 53 45 51 55 |MOVE....|....SEQU|
|000031c0| 00 00 00 00 01 00 00 00 | 53 4b 49 50 00 00 00 01 |........|SKIP....|
|000031d0| 00 00 00 00 44 55 4d 50 | 00 00 00 00 01 90 c2 11 |....DUMP|........|
|000031e0| 41 64 64 69 74 69 6f 6e | 61 6c 20 42 79 74 65 73 |Addition|al Bytes|
|000031f0| 3a 00 4c 41 42 4c 00 00 | 00 00 00 00 00 00 00 00 |:.LABL..|........|
|00003200| 01 1c 00 0e 4c 41 42 4c | 00 00 00 00 00 00 b1 0f |....LABL|........|
|00003210| 53 4d 42 20 44 65 6c 65 | 74 65 20 46 69 6c 65 00 |SMB Dele|te File.|
|00003220| 54 53 55 42 00 00 00 00 | 00 00 00 08 53 4d 42 20 |TSUB....|....SMB |
|00003230| 42 61 73 65 54 42 49 54 | 00 00 00 07 09 00 00 0c |BaseTBIT|........|
|00003240| 53 4d 42 20 44 65 6c 46 | 20 52 73 70 4c 41 42 4c |SMB DelF| RspLABL|
|00003250| 00 00 00 00 00 00 c0 00 | 54 53 55 42 00 00 00 00 |........|TSUB....|
|00003260| 00 00 00 12 53 4d 42 20 | 41 74 74 72 69 62 75 74 |....SMB |Attribut|
|00003270| 65 20 42 69 74 73 53 55 | 42 47 00 00 00 01 01 00 |e BitsSU|BG......|
|00003280| 00 00 53 45 51 55 00 00 | 00 00 01 00 00 00 53 4b |..SEQU..|......SK|
|00003290| 49 50 00 00 00 02 00 00 | 00 00 4d 55 4c 47 00 00 |IP......|..MULG..|
|000032a0| 00 02 01 00 00 00 44 55 | 4d 50 00 00 00 00 01 90 |......DU|MP......|
|000032b0| c2 11 41 64 64 69 74 69 | 6f 6e 61 6c 20 42 79 74 |..Additi|onal Byt|
|000032c0| 65 73 3a 00 44 57 52 44 | 40 00 00 00 01 90 c2 0b |es:.DWRD|@.......|
|000032d0| 42 79 74 65 20 43 6f 75 | 6e 74 3a 00 4d 4f 56 45 |Byte Cou|nt:.MOVE|
|000032e0| 00 00 00 01 8c 00 00 00 | 4c 41 42 4c 00 00 00 00 |........|LABL....|
|000032f0| 00 90 c2 0e 46 69 6c 65 | 20 50 61 74 68 6e 61 6d |....File| Pathnam|
|00003300| 65 3a 54 53 55 42 00 00 | 00 00 00 00 00 0f 53 4d |e:TSUB..|......SM|
|00003310| 42 20 53 74 72 69 6e 67 | 20 4e 61 6d 65 00 00 00 |B String| Name...|
|00003320| 01 a0 00 14 4c 41 42 4c | 00 00 00 00 00 00 b1 0f |....LABL|........|
|00003330| 53 4d 42 20 52 65 6e 61 | 6d 65 20 46 69 6c 65 00 |SMB Rena|me File.|
|00003340| 54 53 55 42 00 00 00 00 | 00 00 00 08 53 4d 42 20 |TSUB....|....SMB |
|00003350| 42 61 73 65 54 42 49 54 | 00 00 00 07 09 00 00 0f |BaseTBIT|........|
|00003360| 53 4d 42 20 52 65 6e 61 | 6d 65 46 20 52 73 70 00 |SMB Rena|meF Rsp.|
|00003370| 4c 41 42 4c 00 00 00 00 | 00 00 c0 00 54 53 55 42 |LABL....|....TSUB|
|00003380| 00 00 00 00 00 00 00 12 | 53 4d 42 20 41 74 74 72 |........|SMB Attr|
|00003390| 69 62 75 74 65 20 42 69 | 74 73 53 55 42 47 00 00 |ibute Bi|tsSUBG..|
|000033a0| 00 01 01 00 00 00 53 45 | 51 55 00 00 00 00 01 00 |......SE|QU......|
|000033b0| 00 00 53 4b 49 50 00 00 | 00 02 00 00 00 00 4d 55 |..SKIP..|......MU|
|000033c0| 4c 47 00 00 00 02 01 00 | 00 00 44 55 4d 50 00 00 |LG......|..DUMP..|
|000033d0| 00 00 01 90 c2 11 41 64 | 64 69 74 69 6f 6e 61 6c |......Ad|ditional|
|000033e0| 20 42 79 74 65 73 3a 00 | 44 57 52 44 40 00 00 00 | Bytes:.|DWRD@...|
|000033f0| 01 90 c2 0b 42 79 74 65 | 20 43 6f 75 6e 74 3a 00 |....Byte| Count:.|
|00003400| 4d 4f 56 45 00 00 00 01 | 8c 00 00 00 4c 41 42 4c |MOVE....|....LABL|
|00003410| 00 00 00 00 00 90 c2 12 | 4f 6c 64 20 46 69 6c 65 |........|Old File|
|00003420| 20 50 61 74 68 6e 61 6d | 65 3a 54 53 55 42 00 00 | Pathnam|e:TSUB..|
|00003430| 00 00 00 00 00 0f 53 4d | 42 20 53 74 72 69 6e 67 |......SM|B String|
|00003440| 20 4e 61 6d 65 00 4c 41 | 42 4c 00 00 00 00 00 90 | Name.LA|BL......|
|00003450| c2 12 4e 65 77 20 46 69 | 6c 65 20 50 61 74 68 6e |..New Fi|le Pathn|
|00003460| 61 6d 65 3a 54 53 55 42 | 00 00 00 00 00 00 00 0f |ame:TSUB|........|
|00003470| 53 4d 42 20 53 74 72 69 | 6e 67 20 4e 61 6d 65 00 |SMB Stri|ng Name.|
|00003480| 53 45 51 55 00 00 00 00 | 01 00 00 00 53 4b 49 50 |SEQU....|....SKIP|
|00003490| 00 00 00 01 00 00 00 00 | 44 55 4d 50 00 00 00 00 |........|DUMP....|
|000034a0| 01 90 c2 11 41 64 64 69 | 74 69 6f 6e 61 6c 20 42 |....Addi|tional B|
|000034b0| 79 74 65 73 3a 00 4c 41 | 42 4c 00 00 00 00 00 00 |ytes:.LA|BL......|
|000034c0| 00 00 00 00 00 f0 00 0b | 4c 41 42 4c 00 00 00 00 |........|LABL....|
|000034d0| 00 00 b1 17 53 4d 42 20 | 47 65 74 20 46 69 6c 65 |....SMB |Get File|
|000034e0| 20 41 74 74 72 69 62 75 | 74 65 73 00 54 53 55 42 | Attribu|tes.TSUB|
|000034f0| 00 00 00 00 00 00 00 08 | 53 4d 42 20 42 61 73 65 |........|SMB Base|
|00003500| 54 42 49 54 00 00 00 07 | 09 00 00 0d 53 4d 42 20 |TBIT....|....SMB |
|00003510| 47 65 74 46 41 20 52 73 | 70 00 44 57 52 44 40 00 |GetFA Rs|p.DWRD@.|
|00003520| 00 00 01 90 c2 0b 42 79 | 74 65 20 43 6f 75 6e 74 |......By|te Count|
|00003530| 3a 00 4d 4f 56 45 00 00 | 00 01 8c 00 00 00 4c 41 |:.MOVE..|......LA|
|00003540| 42 4c 00 00 00 00 00 90 | c2 0e 46 69 6c 65 20 50 |BL......|..File P|
|00003550| 61 74 68 6e 61 6d 65 3a | 54 53 55 42 00 00 00 00 |athname:|TSUB....|
|00003560| 00 00 00 0f 53 4d 42 20 | 53 74 72 69 6e 67 20 4e |....SMB |String N|
|00003570| 61 6d 65 00 53 45 51 55 | 00 00 00 00 01 00 00 00 |ame.SEQU|........|
|00003580| 53 4b 49 50 00 00 00 01 | 00 00 00 00 44 55 4d 50 |SKIP....|....DUMP|
|00003590| 00 00 00 00 01 90 c2 11 | 41 64 64 69 74 69 6f 6e |........|Addition|
|000035a0| 61 6c 20 42 79 74 65 73 | 3a 00 4c 41 42 4c 00 00 |al Bytes|:.LABL..|
|000035b0| 00 00 00 00 00 00 00 00 | 01 94 00 13 4c 41 42 4c |........|....LABL|
|000035c0| 00 00 00 00 00 00 b1 17 | 53 4d 42 20 53 65 74 20 |........|SMB Set |
|000035d0| 46 69 6c 65 20 41 74 74 | 72 69 62 75 74 65 73 00 |File Att|ributes.|
|000035e0| 54 53 55 42 00 00 00 00 | 00 00 00 08 53 4d 42 20 |TSUB....|....SMB |
|000035f0| 42 61 73 65 54 42 49 54 | 00 00 00 07 09 00 00 0d |BaseTBIT|........|
|00003600| 53 4d 42 20 53 65 74 46 | 41 20 52 73 70 00 4c 41 |SMB SetF|A Rsp.LA|
|00003610| 42 4c 00 00 00 00 00 00 | c0 00 54 53 55 42 00 00 |BL......|..TSUB..|
|00003620| 00 00 00 00 00 12 53 4d | 42 20 41 74 74 72 69 62 |......SM|B Attrib|
|00003630| 75 74 65 20 42 69 74 73 | 48 4c 4e 47 40 00 00 00 |ute Bits|HLNG@...|
|00003640| 04 90 c2 05 54 69 6d 65 | 3a 00 4d 4f 56 45 00 00 |....Time|:.MOVE..|
|00003650| 00 0a 04 00 00 00 44 55 | 4d 50 00 00 00 00 04 90 |......DU|MP......|
|00003660| c2 0f 52 65 73 65 72 76 | 65 64 20 28 4d 42 5a 29 |..Reserv|ed (MBZ)|
|00003670| 3a 00 53 55 42 47 00 00 | 00 08 01 00 00 00 53 45 |:.SUBG..|......SE|
|00003680| 51 55 00 00 00 00 01 00 | 00 00 53 4b 49 50 00 00 |QU......|..SKIP..|
|00003690| 00 02 00 00 00 00 4d 55 | 4c 47 00 00 00 02 01 00 |......MU|LG......|
|000036a0| 00 00 44 55 4d 50 00 00 | 00 00 01 90 c2 11 41 64 |..DUMP..|......Ad|
|000036b0| 64 69 74 69 6f 6e 61 6c | 20 42 79 74 65 73 3a 00 |ditional| Bytes:.|
|000036c0| 44 57 52 44 40 00 00 00 | 01 90 c2 0b 42 79 74 65 |DWRD@...|....Byte|
|000036d0| 20 43 6f 75 6e 74 3a 00 | 4d 4f 56 45 00 00 00 01 | Count:.|MOVE....|
|000036e0| 8c 00 00 00 4c 41 42 4c | 00 00 00 00 00 90 c2 0e |....LABL|........|
|000036f0| 46 69 6c 65 20 50 61 74 | 68 6e 61 6d 65 3a 54 53 |File Pat|hname:TS|
|00003700| 55 42 00 00 00 00 00 00 | 00 0f 53 4d 42 20 53 74 |UB......|..SMB St|
|00003710| 72 69 6e 67 20 4e 61 6d | 65 00 4c 41 42 4c 00 00 |ring Nam|e.LABL..|
|00003720| 00 00 00 90 c2 0c 4e 75 | 6c 6c 20 53 74 72 69 6e |......Nu|ll Strin|
|00003730| 67 3a 54 53 55 42 00 00 | 00 00 00 00 00 0f 53 4d |g:TSUB..|......SM|
|00003740| 42 20 53 74 72 69 6e 67 | 20 4e 61 6d 65 00 00 00 |B String| Name...|
|00003750| 00 3c 00 02 4c 41 42 4c | 00 00 00 00 00 00 b1 12 |.<..LABL|........|
|00003760| 53 4d 42 20 52 65 61 64 | 20 46 72 6f 6d 20 46 69 |SMB Read| From Fi|
|00003770| 6c 65 54 4e 58 54 00 00 | 00 00 00 00 00 10 53 4d |leTNXT..|......SM|
|00003780| 42 20 52 65 61 64 20 53 | 75 70 70 6f 72 74 00 00 |B Read S|upport..|
|00003790| 00 ec 00 0a 4c 41 42 4c | 00 00 00 00 00 00 b1 11 |....LABL|........|
|000037a0| 53 4d 42 20 57 72 69 74 | 65 20 54 6f 20 46 69 6c |SMB Writ|e To Fil|
|000037b0| 65 00 54 53 55 42 00 00 | 00 00 00 00 00 08 53 4d |e.TSUB..|......SM|
|000037c0| 42 20 42 61 73 65 54 42 | 49 54 00 00 00 07 09 00 |B BaseTB|IT......|
|000037d0| 00 0e 53 4d 42 20 57 72 | 69 74 65 46 20 52 73 70 |..SMB Wr|iteF Rsp|
|000037e0| 48 57 52 44 40 00 00 00 | 04 90 c2 0c 46 69 6c 65 |HWRD@...|....File|
|000037f0| 20 48 61 6e 64 6c 65 3a | 44 57 52 44 40 00 00 00 | Handle:|DWRD@...|
|00003800| 04 90 c2 0f 43 6f 75 6e | 74 20 6f 66 20 42 79 74 |....Coun|t of Byt|
|00003810| 65 73 3a 00 44 4c 4e 47 | 40 00 00 00 04 90 c2 07 |es:.DLNG|@.......|
|00003820| 4f 66 66 73 65 74 3a 00 | 44 57 52 44 40 00 00 00 |Offset:.|DWRD@...|
|00003830| 04 90 c2 0b 43 6f 75 6e | 74 20 4c 65 66 74 3a 00 |....Coun|t Left:.|
|00003840| 44 57 52 44 40 00 00 00 | 01 90 c2 0b 42 79 74 65 |DWRD@...|....Byte|
|00003850| 20 43 6f 75 6e 74 3a 00 | 4d 4f 56 45 00 00 00 01 | Count:.|MOVE....|
|00003860| 8c 00 00 00 44 55 4d 50 | 00 00 00 00 01 90 c2 0d |....DUMP|........|
|00003870| 57 72 69 74 65 20 42 75 | 66 66 65 72 3a 00 00 00 |Write Bu|ffer:...|
|00003880| 01 42 00 11 4c 41 42 4c | 00 00 00 00 00 00 b1 13 |.B..LABL|........|
|00003890| 53 4d 42 20 4c 6f 63 6b | 20 42 79 74 65 20 52 61 |SMB Lock| Byte Ra|
|000038a0| 6e 67 65 00 54 53 55 42 | 00 00 00 00 00 00 00 08 |nge.TSUB|........|
|000038b0| 53 4d 42 20 42 61 73 65 | 54 42 49 54 00 00 00 07 |SMB Base|TBIT....|
|000038c0| 09 00 00 0d 53 4d 42 20 | 4c 6f 63 6b 52 20 52 73 |....SMB |LockR Rs|
|000038d0| 70 00 48 57 52 44 40 00 | 00 00 04 90 c2 0c 46 69 |p.HWRD@.|......Fi|
|000038e0| 6c 65 20 48 61 6e 64 6c | 65 3a 44 4c 4e 47 40 00 |le Handl|e:DLNG@.|
|000038f0| 00 00 04 90 c2 06 43 6f | 75 6e 74 3a 44 4c 4e 47 |......Co|unt:DLNG|
|00003900| 40 00 00 00 04 90 c2 07 | 4f 66 66 73 65 74 3a 00 |@.......|Offset:.|
|00003910| 53 55 42 47 00 00 00 05 | 01 00 00 00 53 45 51 55 |SUBG....|....SEQU|
|00003920| 00 00 00 00 01 00 00 00 | 53 4b 49 50 00 00 00 02 |........|SKIP....|
|00003930| 00 00 00 00 4d 55 4c 47 | 00 00 00 02 01 00 00 00 |....MULG|........|
|00003940| 44 55 4d 50 00 00 00 00 | 01 90 c2 11 41 64 64 69 |DUMP....|....Addi|
|00003950| 74 69 6f 6e 61 6c 20 42 | 79 74 65 73 3a 00 44 57 |tional B|ytes:.DW|
|00003960| 52 44 40 00 00 00 01 90 | c2 0b 42 79 74 65 20 43 |RD@.....|..Byte C|
|00003970| 6f 75 6e 74 3a 00 4d 4f | 56 45 00 00 00 01 8c 00 |ount:.MO|VE......|
|00003980| 00 00 53 45 51 55 00 00 | 00 00 01 00 00 00 53 4b |..SEQU..|......SK|
|00003990| 49 50 00 00 00 01 00 00 | 00 00 44 55 4d 50 00 00 |IP......|..DUMP..|
|000039a0| 00 00 01 90 c2 11 41 64 | 64 69 74 69 6f 6e 61 6c |......Ad|ditional|
|000039b0| 20 42 79 74 65 73 3a 00 | 4c 41 42 4c 00 00 00 00 | Bytes:.|LABL....|
|000039c0| 00 00 00 00 00 00 01 44 | 00 11 4c 41 42 4c 00 00 |.......D|..LABL..|
|000039d0| 00 00 00 00 b1 13 53 4d | 42 20 4c 6f 63 6b 20 42 |......SM|B Lock B|
|000039e0| 79 74 65 20 52 61 6e 67 | 65 00 54 53 55 42 00 00 |yte Rang|e.TSUB..|
|000039f0| 00 00 00 00 00 08 53 4d | 42 20 42 61 73 65 54 42 |......SM|B BaseTB|
|00003a00| 49 54 00 00 00 07 09 00 | 00 0f 53 4d 42 20 55 6e |IT......|..SMB Un|
|00003a10| 6c 6f 63 6b 52 20 52 73 | 70 00 48 57 52 44 40 00 |lockR Rs|p.HWRD@.|
|00003a20| 00 00 04 90 c2 0c 46 69 | 6c 65 20 48 61 6e 64 6c |......Fi|le Handl|
|00003a30| 65 3a 44 4c 4e 47 40 00 | 00 00 04 90 c2 06 43 6f |e:DLNG@.|......Co|
|00003a40| 75 6e 74 3a 44 4c 4e 47 | 40 00 00 00 04 90 c2 07 |unt:DLNG|@.......|
|00003a50| 4f 66 66 73 65 74 3a 00 | 53 55 42 47 00 00 00 05 |Offset:.|SUBG....|
|00003a60| 01 00 00 00 53 45 51 55 | 00 00 00 00 01 00 00 00 |....SEQU|........|
|00003a70| 53 4b 49 50 00 00 00 02 | 00 00 00 00 4d 55 4c 47 |SKIP....|....MULG|
|00003a80| 00 00 00 02 01 00 00 00 | 44 55 4d 50 00 00 00 00 |........|DUMP....|
|00003a90| 01 90 c2 11 41 64 64 69 | 74 69 6f 6e 61 6c 20 42 |....Addi|tional B|
|00003aa0| 79 74 65 73 3a 00 44 57 | 52 44 40 00 00 00 01 90 |ytes:.DW|RD@.....|
|00003ab0| c2 0b 42 79 74 65 20 43 | 6f 75 6e 74 3a 00 4d 4f |..Byte C|ount:.MO|
|00003ac0| 56 45 00 00 00 01 8c 00 | 00 00 53 45 51 55 00 00 |VE......|..SEQU..|
|00003ad0| 00 00 01 00 00 00 53 4b | 49 50 00 00 00 01 00 00 |......SK|IP......|
|00003ae0| 00 00 44 55 4d 50 00 00 | 00 00 01 90 c2 11 41 64 |..DUMP..|......Ad|
|00003af0| 64 69 74 69 6f 6e 61 6c | 20 42 79 74 65 73 3a 00 |ditional| Bytes:.|
|00003b00| 4c 41 42 4c 00 00 00 00 | 00 00 00 00 00 00 00 fc |LABL....|........|
|00003b10| 00 0a 4c 41 42 4c 00 00 | 00 00 00 00 b1 19 53 4d |..LABL..|......SM|
|00003b20| 42 20 43 72 65 61 74 65 | 20 54 65 6d 70 6f 72 61 |B Create| Tempora|
|00003b30| 72 79 20 46 69 6c 65 00 | 54 53 55 42 00 00 00 00 |ry File.|TSUB....|
|00003b40| 00 00 00 08 53 4d 42 20 | 42 61 73 65 54 42 49 54 |....SMB |BaseTBIT|
|00003b50| 00 00 00 07 09 00 00 10 | 53 4d 42 20 43 72 65 61 |........|SMB Crea|
|00003b60| 74 65 54 46 20 52 73 70 | 4c 41 42 4c 00 00 00 00 |teTF Rsp|LABL....|
|00003b70| 00 00 c0 00 54 53 55 42 | 00 00 00 00 00 00 00 12 |....TSUB|........|
|00003b80| 53 4d 42 20 41 74 74 72 | 69 62 75 74 65 20 42 69 |SMB Attr|ibute Bi|
|00003b90| 74 73 48 4c 4e 47 40 00 | 00 00 04 90 c2 0e 43 72 |tsHLNG@.|......Cr|
|00003ba0| 65 61 74 69 6f 6e 20 54 | 69 6d 65 3a 44 57 52 44 |eation T|ime:DWRD|
|00003bb0| 40 00 00 00 01 90 c2 0b | 42 79 74 65 20 43 6f 75 |@.......|Byte Cou|
|00003bc0| 6e 74 3a 00 4d 4f 56 45 | 00 00 00 01 8c 00 00 00 |nt:.MOVE|........|
|00003bd0| 4c 41 42 4c 00 00 00 00 | 00 90 c2 13 44 69 72 65 |LABL....|....Dire|
|00003be0| 63 74 6f 72 79 20 50 61 | 74 68 6e 61 6d 65 3a 00 |ctory Pa|thname:.|
|00003bf0| 54 53 55 42 00 00 00 00 | 00 00 00 0f 53 4d 42 20 |TSUB....|....SMB |
|00003c00| 53 74 72 69 6e 67 20 4e | 61 6d 65 00 00 00 00 ee |String N|ame.....|
|00003c10| 00 0a 4c 41 42 4c 00 00 | 00 00 00 00 b1 11 53 4d |..LABL..|......SM|
|00003c20| 42 20 4d 61 6b 65 20 4e | 65 77 20 46 69 6c 65 00 |B Make N|ew File.|
|00003c30| 54 53 55 42 00 00 00 00 | 00 00 00 08 53 4d 42 20 |TSUB....|....SMB |
|00003c40| 42 61 73 65 54 42 49 54 | 00 00 00 07 09 00 00 10 |BaseTBIT|........|
|00003c50| 53 4d 42 20 4d 61 6b 65 | 4e 65 77 46 20 52 73 70 |SMB Make|NewF Rsp|
|00003c60| 4c 41 42 4c 00 00 00 00 | 00 00 c0 00 54 53 55 42 |LABL....|....TSUB|
|00003c70| 00 00 00 00 00 00 00 12 | 53 4d 42 20 41 74 74 72 |........|SMB Attr|
|00003c80| 69 62 75 74 65 20 42 69 | 74 73 48 4c 4e 47 40 00 |ibute Bi|tsHLNG@.|
|00003c90| 00 00 04 90 c2 0e 43 72 | 65 61 74 69 6f 6e 20 54 |......Cr|eation T|
|00003ca0| 69 6d 65 3a 44 57 52 44 | 40 00 00 00 01 90 c2 0b |ime:DWRD|@.......|
|00003cb0| 42 79 74 65 20 43 6f 75 | 6e 74 3a 00 4d 4f 56 45 |Byte Cou|nt:.MOVE|
|00003cc0| 00 00 00 01 8c 00 00 00 | 4c 41 42 4c 00 00 00 00 |........|LABL....|
|00003cd0| 00 90 c2 0e 46 69 6c 65 | 20 50 61 74 68 6e 61 6d |....File| Pathnam|
|00003ce0| 65 3a 54 53 55 42 00 00 | 00 00 00 00 00 0f 53 4d |e:TSUB..|......SM|
|00003cf0| 42 20 53 74 72 69 6e 67 | 20 4e 61 6d 65 00 00 00 |B String| Name...|
|00003d00| 00 f4 00 0b 4c 41 42 4c | 00 00 00 00 00 00 b1 18 |....LABL|........|
|00003d10| 53 4d 42 20 43 68 65 63 | 6b 20 44 69 72 65 63 74 |SMB Chec|k Direct|
|00003d20| 6f 72 79 20 50 61 74 68 | 54 53 55 42 00 00 00 00 |ory Path|TSUB....|
|00003d30| 00 00 00 08 53 4d 42 20 | 42 61 73 65 54 42 49 54 |....SMB |BaseTBIT|
|00003d40| 00 00 00 07 09 00 00 11 | 53 4d 42 20 43 68 65 63 |........|SMB Chec|
|00003d50| 6b 44 69 72 50 20 52 73 | 70 00 53 45 51 55 00 00 |kDirP Rs|p.SEQU..|
|00003d60| 00 00 01 00 00 00 53 4b | 49 50 00 00 00 02 00 00 |......SK|IP......|
|00003d70| 00 00 4d 55 4c 47 00 00 | 00 02 01 00 00 00 44 55 |..MULG..|......DU|
|00003d80| 4d 50 00 00 00 00 01 90 | c2 11 41 64 64 69 74 69 |MP......|..Additi|
|00003d90| 6f 6e 61 6c 20 42 79 74 | 65 73 3a 00 44 57 52 44 |onal Byt|es:.DWRD|
|00003da0| 40 00 00 00 01 90 c2 0b | 42 79 74 65 20 43 6f 75 |@.......|Byte Cou|
|00003db0| 6e 74 3a 00 4d 4f 56 45 | 00 00 00 01 8c 00 00 00 |nt:.MOVE|........|
|00003dc0| 4c 41 42 4c 00 00 00 00 | 00 90 c2 0e 46 69 6c 65 |LABL....|....File|
|00003dd0| 20 50 61 74 68 6e 61 6d | 65 3a 54 53 55 42 00 00 | Pathnam|e:TSUB..|
|00003de0| 00 00 00 00 00 0f 53 4d | 42 20 53 74 72 69 6e 67 |......SM|B String|
|00003df0| 20 4e 61 6d 65 00 00 00 | 00 3a 00 02 4c 41 42 4c | Name...|.:..LABL|
|00003e00| 00 00 00 00 00 00 b1 10 | 53 4d 42 20 50 72 6f 63 |........|SMB Proc|
|00003e10| 65 73 73 20 45 78 69 74 | 54 4e 58 54 00 00 00 00 |ess Exit|TNXT....|
|00003e20| 00 00 00 10 53 4d 42 20 | 54 72 65 65 44 69 73 63 |....SMB |TreeDisc|
|00003e30| 20 52 73 70 00 00 00 fa | 00 0d 4c 41 42 4c 00 00 | Rsp....|..LABL..|
|00003e40| 00 00 00 00 b1 08 53 4d | 42 20 53 65 65 6b 54 53 |......SM|B SeekTS|
|00003e50| 55 42 00 00 00 00 00 00 | 00 08 53 4d 42 20 42 61 |UB......|..SMB Ba|
|00003e60| 73 65 54 42 49 54 00 00 | 00 07 09 00 00 0c 53 4d |seTBIT..|......SM|
|00003e70| 42 20 53 65 65 6b 20 52 | 73 70 48 57 52 44 40 00 |B Seek R|spHWRD@.|
|00003e80| 00 00 04 90 c2 0c 46 69 | 6c 65 20 48 61 6e 64 6c |......Fi|le Handl|
|00003e90| 65 3a 44 57 52 44 40 00 | 00 00 04 90 c2 05 4d 6f |e:DWRD@.|......Mo|
|00003ea0| 64 65 3a 00 43 53 54 23 | ff ff ff ff 04 00 14 0e |de:.CST#|........|
|00003eb0| 53 4d 42 20 53 65 65 6b | 20 4d 6f 64 65 73 44 4c |SMB Seek| ModesDL|
|00003ec0| 4e 47 40 00 00 00 04 90 | c2 07 4f 66 66 73 65 74 |NG@.....|..Offset|
|00003ed0| 3a 00 44 57 52 44 40 00 | 00 00 01 90 c2 0b 42 79 |:.DWRD@.|......By|
|00003ee0| 74 65 20 43 6f 75 6e 74 | 3a 00 4d 4f 56 45 00 00 |te Count|:.MOVE..|
|00003ef0| 00 01 8c 00 00 00 53 45 | 51 55 00 00 00 00 01 00 |......SE|QU......|
|00003f00| 00 00 53 4b 49 50 00 00 | 00 01 00 00 00 00 44 55 |..SKIP..|......DU|
|00003f10| 4d 50 00 00 00 00 01 90 | c2 0c 42 79 74 65 20 42 |MP......|..Byte B|
|00003f20| 75 66 66 65 72 3a 4c 41 | 42 4c 00 00 00 00 00 00 |uffer:LA|BL......|
|00003f30| 00 00 00 00 00 42 00 02 | 4c 41 42 4c 00 00 00 00 |.....B..|LABL....|
|00003f40| 00 00 b1 17 53 4d 42 20 | 4c 6f 63 6b 20 54 68 65 |....SMB |Lock The|
|00003f50| 6e 20 52 65 61 64 20 44 | 61 74 61 00 54 4e 58 54 |n Read D|ata.TNXT|
|00003f60| 00 00 00 00 00 00 00 10 | 53 4d 42 20 52 65 61 64 |........|SMB Read|
|00003f70| 20 53 75 70 70 6f 72 74 | 00 00 01 76 00 12 4c 41 | Support|...v..LA|
|00003f80| 42 4c 00 00 00 00 00 00 | b1 1a 53 4d 42 20 57 72 |BL......|..SMB Wr|
|00003f90| 69 74 65 20 54 68 65 6e | 20 55 6e 6c 6f 63 6b 20 |ite Then| Unlock |
|00003fa0| 44 61 74 61 54 53 55 42 | 00 00 00 00 00 00 00 08 |DataTSUB|........|
|00003fb0| 53 4d 42 20 42 61 73 65 | 54 42 49 54 00 00 00 07 |SMB Base|TBIT....|
|00003fc0| 09 00 00 11 53 4d 42 20 | 57 72 69 74 65 4c 6f 63 |....SMB |WriteLoc|
|00003fd0| 6b 20 52 73 70 00 48 57 | 52 44 40 00 00 00 04 90 |k Rsp.HW|RD@.....|
|00003fe0| c2 0c 46 69 6c 65 20 48 | 61 6e 64 6c 65 3a 44 57 |..File H|andle:DW|
|00003ff0| 52 44 40 00 00 00 04 90 | c2 10 41 6d 6f 75 6e 74 |RD@.....|..Amount|
|00004000| 20 54 6f 20 57 72 69 74 | 65 3a 44 4c 4e 47 40 00 | To Writ|e:DLNG@.|
|00004010| 00 00 04 90 c2 10 53 74 | 61 72 74 69 6e 67 20 4f |......St|arting O|
|00004020| 66 66 73 65 74 3a 44 57 | 52 44 40 00 00 00 04 90 |ffset:DW|RD@.....|
|00004030| c2 10 52 65 6d 61 69 6e | 69 6e 67 20 42 79 74 65 |..Remain|ing Byte|
|00004040| 73 3a 53 55 42 47 00 00 | 00 05 01 00 00 00 53 45 |s:SUBG..|......SE|
|00004050| 51 55 00 00 00 00 01 00 | 00 00 53 4b 49 50 00 00 |QU......|..SKIP..|
|00004060| 00 02 00 00 00 00 4d 55 | 4c 47 00 00 00 02 01 00 |......MU|LG......|
|00004070| 00 00 44 55 4d 50 00 00 | 00 00 01 90 c2 11 41 64 |..DUMP..|......Ad|
|00004080| 64 69 74 69 6f 6e 61 6c | 20 42 79 74 65 73 3a 00 |ditional| Bytes:.|
|00004090| 44 57 52 44 40 00 00 00 | 01 90 c2 0b 42 79 74 65 |DWRD@...|....Byte|
|000040a0| 20 43 6f 75 6e 74 3a 00 | 4d 4f 56 45 00 00 00 01 | Count:.|MOVE....|
|000040b0| 8c 00 00 00 53 45 51 55 | 00 00 00 00 01 00 00 00 |....SEQU|........|
|000040c0| 53 4b 49 50 00 00 00 01 | 00 00 00 00 44 55 4d 50 |SKIP....|....DUMP|
|000040d0| 00 00 00 00 01 90 c2 0e | 44 61 74 61 20 54 6f 20 |........|Data To |
|000040e0| 57 72 69 74 65 3a 4c 41 | 42 4c 00 00 00 00 00 00 |Write:LA|BL......|
|000040f0| 30 00 00 00 00 68 00 04 | 4c 41 42 4c 00 00 00 00 |0....h..|LABL....|
|00004100| 00 00 b1 12 53 4d 42 20 | 52 65 61 64 20 42 6c 6f |....SMB |Read Blo|
|00004110| 63 6b 20 52 61 77 54 53 | 55 42 00 00 00 00 00 00 |ck RawTS|UB......|
|00004120| 00 08 53 4d 42 20 42 61 | 73 65 54 42 49 54 00 00 |..SMB Ba|seTBIT..|
|00004130| 00 07 09 00 00 10 53 4d | 42 20 52 65 61 64 42 52 |......SM|B ReadBR|
|00004140| 61 77 20 52 73 70 54 4e | 58 54 00 00 00 00 00 00 |aw RspTN|XT......|
|00004150| 00 0c 53 4d 42 20 52 65 | 61 64 20 43 6d 64 00 00 |..SMB Re|ad Cmd..|
|00004160| 00 70 00 04 4c 41 42 4c | 00 00 00 00 00 00 b1 1a |.p..LABL|........|
|00004170| 53 4d 42 20 52 65 61 64 | 20 42 6c 6f 63 6b 20 4d |SMB Read| Block M|
|00004180| 75 6c 74 69 70 6c 65 78 | 65 64 54 53 55 42 00 00 |ultiplex|edTSUB..|
|00004190| 00 00 00 00 00 08 53 4d | 42 20 42 61 73 65 54 42 |......SM|B BaseTB|
|000041a0| 49 54 00 00 00 07 09 00 | 00 10 53 4d 42 20 52 65 |IT......|..SMB Re|
|000041b0| 61 64 42 4d 75 6c 20 52 | 73 70 54 4e 58 54 00 00 |adBMul R|spTNXT..|
|000041c0| 00 00 00 00 00 0c 53 4d | 42 20 52 65 61 64 20 43 |......SM|B Read C|
|000041d0| 6d 64 00 00 00 78 00 04 | 4c 41 42 4c 00 00 00 00 |md...x..|LABL....|
|000041e0| 00 00 b1 21 53 4d 42 20 | 52 65 61 64 20 42 6c 6f |...!SMB |Read Blo|
|000041f0| 63 6b 20 53 65 63 6f 6e | 64 61 72 79 20 52 65 73 |ck Secon|dary Res|
|00004200| 70 6f 6e 73 65 00 54 53 | 55 42 00 00 00 00 00 00 |ponse.TS|UB......|
|00004210| 00 08 53 4d 42 20 42 61 | 73 65 54 42 49 54 00 00 |..SMB Ba|seTBIT..|
|00004220| 00 07 09 00 00 10 53 4d | 42 20 52 65 61 64 42 53 |......SM|B ReadBS|
|00004230| 65 63 20 52 73 70 54 4e | 58 54 00 00 00 00 00 00 |ec RspTN|XT......|
|00004240| 00 0c 53 4d 42 20 52 65 | 61 64 20 43 6d 64 00 00 |..SMB Re|ad Cmd..|
|00004250| 00 6e 00 04 4c 41 42 4c | 00 00 00 00 00 00 b1 13 |.n..LABL|........|
|00004260| 53 4d 42 20 57 72 69 74 | 65 20 42 6c 6f 63 6b 20 |SMB Writ|e Block |
|00004270| 52 61 77 00 54 53 55 42 | 00 00 00 00 00 00 00 08 |Raw.TSUB|........|
|00004280| 53 4d 42 20 42 61 73 65 | 54 42 49 54 00 00 00 07 |SMB Base|TBIT....|
|00004290| 09 00 00 11 53 4d 42 20 | 57 72 69 74 65 42 52 61 |....SMB |WriteBRa|
|000042a0| 77 20 52 73 70 00 54 4e | 58 54 00 00 00 00 00 00 |w Rsp.TN|XT......|
|000042b0| 00 0d 53 4d 42 20 57 72 | 69 74 65 20 43 6d 64 00 |..SMB Wr|ite Cmd.|
|000042c0| 00 00 00 76 00 04 4c 41 | 42 4c 00 00 00 00 00 00 |...v..LA|BL......|
|000042d0| b1 1b 53 4d 42 20 57 72 | 69 74 65 20 42 6c 6f 63 |..SMB Wr|ite Bloc|
|000042e0| 6b 20 4d 75 6c 74 69 70 | 6c 65 78 65 64 00 54 53 |k Multip|lexed.TS|
|000042f0| 55 42 00 00 00 00 00 00 | 00 08 53 4d 42 20 42 61 |UB......|..SMB Ba|
|00004300| 73 65 54 42 49 54 00 00 | 00 07 09 00 00 11 53 4d |seTBIT..|......SM|
|00004310| 42 20 57 72 69 74 65 42 | 4d 75 6c 20 52 73 70 00 |B WriteB|Mul Rsp.|
|00004320| 54 4e 58 54 00 00 00 00 | 00 00 00 0d 53 4d 42 20 |TNXT....|....SMB |
|00004330| 57 72 69 74 65 20 43 6d | 64 00 00 00 01 6a 00 0f |Write Cm|d....j..|
|00004340| 4c 41 42 4c 00 00 00 00 | 00 00 b1 21 53 4d 42 20 |LABL....|...!SMB |
|00004350| 57 72 69 74 65 20 42 6c | 6f 63 6b 20 53 65 63 6f |Write Bl|ock Seco|
|00004360| 6e 64 61 72 79 20 52 65 | 71 75 65 73 74 00 54 53 |ndary Re|quest.TS|
|00004370| 55 42 00 00 00 00 00 00 | 00 08 53 4d 42 20 42 61 |UB......|..SMB Ba|
|00004380| 73 65 54 42 49 54 00 00 | 00 07 09 00 00 11 53 4d |seTBIT..|......SM|
|00004390| 42 20 57 72 69 74 65 42 | 53 65 63 20 52 73 70 00 |B WriteB|Sec Rsp.|
|000043a0| 48 57 52 44 40 00 00 00 | 04 90 c2 0c 46 69 6c 65 |HWRD@...|....File|
|000043b0| 20 48 61 6e 64 6c 65 3a | 44 57 52 44 40 00 00 00 | Handle:|DWRD@...|
|000043c0| 04 90 c2 0c 54 6f 74 61 | 6c 20 42 79 74 65 73 3a |....Tota|l Bytes:|
|000043d0| 44 4c 4e 47 40 00 00 00 | 04 90 c2 16 4f 66 66 73 |DLNG@...|....Offs|
|000043e0| 65 74 20 54 6f 20 42 65 | 67 69 6e 20 57 72 69 74 |et To Be|gin Writ|
|000043f0| 65 3a 48 4c 4e 47 40 00 | 00 00 04 90 c2 09 52 65 |e:HLNG@.|......Re|
|00004400| 73 65 72 76 65 64 3a 00 | 44 57 52 44 40 00 00 00 |served:.|DWRD@...|
|00004410| 04 90 c2 11 44 61 74 61 | 20 54 68 69 73 20 42 75 |....Data| This Bu|
|00004420| 66 66 65 72 3a 00 44 57 | 52 44 40 00 00 00 04 90 |ffer:.DW|RD@.....|
|00004430| c2 12 44 61 74 61 20 42 | 79 74 65 73 20 4f 66 66 |..Data B|ytes Off|
|00004440| 73 65 74 3a 44 57 52 44 | 40 00 00 00 01 90 c2 0b |set:DWRD|@.......|
|00004450| 42 79 74 65 20 43 6f 75 | 6e 74 3a 00 4d 4f 56 45 |Byte Cou|nt:.MOVE|
|00004460| 00 00 00 01 8c 00 00 00 | 53 45 51 55 00 00 00 00 |........|SEQU....|
|00004470| 01 00 00 00 53 4b 49 50 | 00 00 00 01 00 00 00 00 |....SKIP|........|
|00004480| 44 55 4d 50 00 00 00 00 | 01 90 c2 0f 42 79 74 65 |DUMP....|....Byte|
|00004490| 73 20 54 6f 20 57 72 69 | 74 65 3a 00 4c 41 42 4c |s To Wri|te:.LABL|
|000044a0| 00 00 00 00 00 00 30 00 | 00 00 00 20 00 01 54 4e |......0.|... ..TN|
|000044b0| 58 54 00 00 00 00 00 00 | 00 11 53 4d 42 20 57 72 |XT......|..SMB Wr|
|000044c0| 69 74 65 43 6f 6d 70 20 | 52 73 70 00 00 00 01 d6 |iteComp |Rsp.....|
|000044d0| 00 15 4c 41 42 4c 00 00 | 00 00 00 00 b1 20 53 4d |..LABL..|..... SM|
|000044e0| 42 20 53 65 74 20 46 69 | 6c 65 20 41 74 74 72 69 |B Set Fi|le Attri|
|000044f0| 62 75 74 65 73 20 45 78 | 70 61 6e 64 65 64 54 53 |butes Ex|pandedTS|
|00004500| 55 42 00 00 00 00 00 00 | 00 08 53 4d 42 20 42 61 |UB......|..SMB Ba|
|00004510| 73 65 54 42 49 54 00 00 | 00 07 09 00 00 10 53 4d |seTBIT..|......SM|
|00004520| 42 20 53 65 74 46 41 45 | 78 70 20 52 73 70 48 57 |B SetFAE|xp RspHW|
|00004530| 52 44 40 00 00 00 04 90 | c2 0c 46 69 6c 65 20 48 |RD@.....|..File H|
|00004540| 61 6e 64 6c 65 3a 48 57 | 52 44 40 00 00 00 04 90 |andle:HW|RD@.....|
|00004550| c2 0e 43 72 65 61 74 69 | 6f 6e 20 44 61 74 65 3a |..Creati|on Date:|
|00004560| 48 57 52 44 40 00 00 00 | 04 90 c2 0e 43 72 65 61 |HWRD@...|....Crea|
|00004570| 74 69 6f 6e 20 54 69 6d | 65 3a 48 57 52 44 40 00 |tion Tim|e:HWRD@.|
|00004580| 00 00 04 90 c2 11 4c 61 | 73 74 20 41 63 63 65 73 |......La|st Acces|
|00004590| 73 20 44 61 74 65 3a 00 | 48 57 52 44 40 00 00 00 |s Date:.|HWRD@...|
|000045a0| 04 90 c2 11 4c 61 73 74 | 20 41 63 63 65 73 73 20 |....Last| Access |
|000045b0| 54 69 6d 65 3a 00 48 57 | 52 44 40 00 00 00 04 90 |Time:.HW|RD@.....|
|000045c0| c2 11 4c 61 73 74 20 4d | 6f 64 69 66 79 20 44 61 |..Last M|odify Da|
|000045d0| 74 65 3a 00 48 57 52 44 | 40 00 00 00 04 90 c2 11 |te:.HWRD|@.......|
|000045e0| 4c 61 73 74 20 4d 6f 64 | 69 66 79 20 54 69 6d 65 |Last Mod|ify Time|
|000045f0| 3a 00 53 55 42 47 00 00 | 00 07 01 00 00 00 53 45 |:.SUBG..|......SE|
|00004600| 51 55 00 00 00 00 01 00 | 00 00 53 4b 49 50 00 00 |QU......|..SKIP..|
|00004610| 00 02 00 00 00 00 4d 55 | 4c 47 00 00 00 02 01 00 |......MU|LG......|
|00004620| 00 00 44 55 4d 50 00 00 | 00 00 01 90 c2 11 41 64 |..DUMP..|......Ad|
|00004630| 64 69 74 69 6f 6e 61 6c | 20 42 79 74 65 73 3a 00 |ditional| Bytes:.|
|00004640| 44 57 52 44 40 00 00 00 | 01 90 c2 0b 42 79 74 65 |DWRD@...|....Byte|
|00004650| 20 43 6f 75 6e 74 3a 00 | 4d 4f 56 45 00 00 00 01 | Count:.|MOVE....|
|00004660| 8c 00 00 00 53 45 51 55 | 00 00 00 00 01 00 00 00 |....SEQU|........|
|00004670| 53 4b 49 50 00 00 00 01 | 00 00 00 00 44 55 4d 50 |SKIP....|....DUMP|
|00004680| 00 00 00 00 01 90 c2 11 | 41 64 64 69 74 69 6f 6e |........|Addition|
|00004690| 61 6c 20 42 79 74 65 73 | 3a 00 4c 41 42 4c 00 00 |al Bytes|:.LABL..|
|000046a0| 00 00 00 00 30 00 00 00 | 00 dc 00 0a 4c 41 42 4c |....0...|....LABL|
|000046b0| 00 00 00 00 00 00 b1 20 | 53 4d 42 20 47 65 74 20 |....... |SMB Get |
|000046c0| 46 69 6c 65 20 41 74 74 | 72 69 62 75 74 65 73 20 |File Att|ributes |
|000046d0| 45 78 70 61 6e 64 65 64 | 54 53 55 42 00 00 00 00 |Expanded|TSUB....|
|000046e0| 00 00 00 08 53 4d 42 20 | 42 61 73 65 54 42 49 54 |....SMB |BaseTBIT|
|000046f0| 00 00 00 07 09 00 00 10 | 53 4d 42 20 47 65 74 46 |........|SMB GetF|
|00004700| 41 45 78 70 20 52 73 70 | 48 57 52 44 40 00 00 00 |AExp Rsp|HWRD@...|
|00004710| 04 90 c2 0c 46 69 6c 65 | 20 48 61 6e 64 6c 65 3a |....File| Handle:|
|00004720| 44 57 52 44 40 00 00 00 | 01 90 c2 0b 42 79 74 65 |DWRD@...|....Byte|
|00004730| 20 43 6f 75 6e 74 3a 00 | 4d 4f 56 45 00 00 00 01 | Count:.|MOVE....|
|00004740| 8c 00 00 00 53 45 51 55 | 00 00 00 00 01 00 00 00 |....SEQU|........|
|00004750| 53 4b 49 50 00 00 00 01 | 00 00 00 00 44 55 4d 50 |SKIP....|....DUMP|
|00004760| 00 00 00 00 01 90 c2 11 | 41 64 64 69 74 69 6f 6e |........|Addition|
|00004770| 61 6c 20 42 79 74 65 73 | 3a 00 4c 41 42 4c 00 00 |al Bytes|:.LABL..|
|00004780| 00 00 00 00 30 00 00 00 | 03 44 00 24 4c 41 42 4c |....0...|.D.$LABL|
|00004790| 00 00 00 00 00 00 b1 21 | 53 4d 42 20 4c 6f 63 6b |.......!|SMB Lock|
|000047a0| 2f 55 6e 6c 6f 63 6b 20 | 42 79 74 65 20 52 61 6e |/Unlock |Byte Ran|
|000047b0| 67 65 73 20 61 6e 64 20 | 58 00 54 53 55 42 00 00 |ges and |X.TSUB..|
|000047c0| 00 00 00 00 00 08 53 4d | 42 20 42 61 73 65 54 42 |......SM|B BaseTB|
|000047d0| 49 54 00 00 00 07 09 00 | 00 13 53 4d 42 20 4c 6f |IT......|..SMB Lo|
|000047e0| 63 6b 2f 55 6e 6c 6f 63 | 6b 20 52 73 70 00 48 42 |ck/Unloc|k Rsp.HB|
|000047f0| 59 54 40 00 00 00 02 90 | c2 12 53 65 63 6f 6e 64 |YT@.....|..Second|
|00004800| 61 72 79 20 43 6f 6d 6d | 61 6e 64 3a 54 53 55 42 |ary Comm|and:TSUB|
|00004810| 00 00 00 00 00 00 00 11 | 53 4d 42 20 43 6f 6d 6d |........|SMB Comm|
|00004820| 61 6e 64 20 43 6f 64 65 | 73 00 48 42 59 54 40 00 |and Code|s.HBYT@.|
|00004830| 00 00 04 90 c2 0f 52 65 | 73 65 72 76 65 64 20 28 |......Re|served (|
|00004840| 4d 42 5a 29 3a 00 44 57 | 52 44 40 00 00 00 0d 90 |MBZ):.DW|RD@.....|
|00004850| c2 12 4f 66 66 73 65 74 | 20 54 6f 20 43 6f 6d 6d |..Offset| To Comm|
|00004860| 61 6e 64 3a 48 57 52 44 | 40 00 00 00 04 90 c2 0c |and:HWRD|@.......|
|00004870| 46 69 6c 65 20 48 61 6e | 64 6c 65 3a 48 57 52 44 |File Han|dle:HWRD|
|00004880| 40 00 00 00 04 90 c2 0a | 4c 6f 63 6b 20 54 79 70 |@.......|Lock Typ|
|00004890| 65 3a 43 42 49 54 00 00 | 00 00 04 00 f4 14 52 65 |e:CBIT..|......Re|
|000048a0| 61 64 20 4f 4b 20 57 68 | 69 6c 65 20 4c 6f 63 6b |ad OK Wh|ile Lock|
|000048b0| 65 64 43 4c 53 45 00 00 | 00 00 00 00 f4 13 4c 6f |edCLSE..|......Lo|
|000048c0| 63 6b 20 4f 75 74 20 41 | 6c 6c 20 41 63 63 65 73 |ck Out A|ll Acces|
|000048d0| 73 00 43 42 49 54 00 00 | 00 01 04 00 f4 1d 53 69 |s.CBIT..|......Si|
|000048e0| 6e 67 6c 65 20 55 73 65 | 72 20 54 6f 74 61 6c 20 |ngle Use|r Total |
|000048f0| 46 69 6c 65 20 55 6e 6c | 6f 63 6b 00 44 4c 4e 47 |File Unl|ock.DLNG|
|00004900| 40 00 00 00 04 90 c2 14 | 54 69 6d 65 6f 75 74 20 |@.......|Timeout |
|00004910| 28 6d 69 6c 6c 69 73 65 | 63 2e 29 3a 44 57 52 44 |(millise|c.):DWRD|
|00004920| 40 00 00 00 05 90 c2 0f | 55 6e 6c 6f 63 6b 20 53 |@.......|Unlock S|
|00004930| 74 72 75 63 74 73 3a 00 | 44 57 52 44 40 00 00 00 |tructs:.|DWRD@...|
|00004940| 06 90 c2 0d 4c 6f 63 6b | 20 53 74 72 75 63 74 73 |....Lock| Structs|
|00004950| 3a 00 44 57 52 44 40 00 | 00 00 01 90 c2 0b 42 79 |:.DWRD@.|......By|
|00004960| 74 65 20 43 6f 75 6e 74 | 3a 00 4d 4f 56 45 00 00 |te Count|:.MOVE..|
|00004970| 00 01 8c 00 00 00 4d 4f | 56 45 00 00 00 05 87 00 |......MO|VE......|
|00004980| 00 00 41 44 44 47 00 00 | 00 06 87 00 00 00 4d 55 |..ADDG..|......MU|
|00004990| 4c 47 00 00 00 0a 07 00 | 00 00 53 55 42 47 00 00 |LG......|..SUBG..|
|000049a0| 00 07 81 00 00 00 53 45 | 51 55 00 00 00 00 05 00 |......SE|QU......|
|000049b0| 00 00 53 4b 49 50 00 00 | 00 03 00 00 00 00 4d 4f |..SKIP..|......MO|
|000049c0| 56 45 00 00 00 01 07 00 | 00 00 4c 41 42 4c 00 00 |VE......|..LABL..|
|000049d0| 00 00 00 00 b1 17 55 6e | 6c 6f 63 6b 20 52 61 6e |......Un|lock Ran|
|000049e0| 67 65 20 53 74 72 75 63 | 74 75 72 65 73 00 54 53 |ge Struc|tures.TS|
|000049f0| 55 42 00 00 00 00 00 00 | 00 0f 53 4d 42 20 4c 6f |UB......|..SMB Lo|
|00004a00| 63 6b 20 52 61 6e 67 65 | 73 00 53 45 51 55 00 00 |ck Range|s.SEQU..|
|00004a10| 00 00 06 00 00 00 53 4b | 49 50 00 00 00 04 00 00 |......SK|IP......|
|00004a20| 00 00 4d 4f 56 45 00 00 | 00 01 07 00 00 00 4c 41 |..MOVE..|......LA|
|00004a30| 42 4c 00 00 00 00 00 00 | b1 15 4c 6f 63 6b 20 52 |BL......|..Lock R|
|00004a40| 61 6e 67 65 20 53 74 72 | 75 63 74 75 72 65 73 00 |ange Str|uctures.|
|00004a50| 4d 4f 56 45 00 00 00 06 | 85 00 00 00 54 53 55 42 |MOVE....|....TSUB|
|00004a60| 00 00 00 00 00 00 00 0f | 53 4d 42 20 4c 6f 63 6b |........|SMB Lock|
|00004a70| 20 52 61 6e 67 65 73 00 | 53 45 51 55 00 00 00 00 | Ranges.|SEQU....|
|00004a80| 01 00 00 00 53 4b 49 50 | 00 00 00 01 00 00 00 00 |....SKIP|........|
|00004a90| 44 55 4d 50 00 00 00 00 | 01 90 c2 11 41 64 64 69 |DUMP....|....Addi|
|00004aa0| 74 69 6f 6e 61 6c 20 42 | 79 74 65 73 3a 00 54 4e |tional B|ytes:.TN|
|00004ab0| 58 54 00 00 00 00 00 00 | 00 14 53 4d 42 20 43 61 |XT......|..SMB Ca|
|00004ac0| 6c 63 75 6c 61 74 65 20 | 4f 66 66 73 65 74 00 00 |lculate |Offset..|
|00004ad0| 00 7e 00 04 4c 41 42 4c | 00 00 00 00 00 00 b1 24 |.~..LABL|.......$|
|00004ae0| 53 4d 42 20 54 72 61 6e | 73 61 63 74 69 6f 6e 20 |SMB Tran|saction |
|00004af0| 2d 20 4e 61 6d 65 2c 20 | 42 79 74 65 73 20 49 6e |- Name, |Bytes In|
|00004b00| 2f 4f 75 74 54 53 55 42 | 00 00 00 00 00 00 00 08 |/OutTSUB|........|
|00004b10| 53 4d 42 20 42 61 73 65 | 54 42 49 54 00 00 00 07 |SMB Base|TBIT....|
|00004b20| 09 00 00 10 53 4d 42 20 | 58 61 63 74 20 49 2f 4f |....SMB |Xact I/O|
|00004b30| 20 52 73 70 54 4e 58 54 | 00 00 00 00 00 00 00 10 | RspTNXT|........|
|00004b40| 53 4d 42 20 54 72 61 6e | 73 61 63 74 20 43 6d 64 |SMB Tran|sact Cmd|
|00004b50| 00 00 00 86 00 04 4c 41 | 42 4c 00 00 00 00 00 00 |......LA|BL......|
|00004b60| b1 2c 53 4d 42 20 54 72 | 61 6e 73 61 63 74 69 6f |.,SMB Tr|ansactio|
|00004b70| 6e 20 28 53 65 63 6f 6e | 64 61 72 79 20 52 65 71 |n (Secon|dary Req|
|00004b80| 75 65 73 74 2f 52 65 73 | 70 6f 6e 73 65 29 54 53 |uest/Res|ponse)TS|
|00004b90| 55 42 00 00 00 00 00 00 | 00 08 53 4d 42 20 42 61 |UB......|..SMB Ba|
|00004ba0| 73 65 54 42 49 54 00 00 | 00 07 09 00 00 0f 53 4d |seTBIT..|......SM|
|00004bb0| 42 20 58 61 63 74 53 65 | 63 20 52 73 70 00 54 4e |B XactSe|c Rsp.TN|
|00004bc0| 58 54 00 00 00 00 00 00 | 00 10 53 4d 42 20 50 61 |XT......|..SMB Pa|
|00004bd0| 72 61 6d 20 26 20 44 61 | 74 61 00 00 02 80 00 1b |ram & Da|ta......|
|00004be0| 4c 41 42 4c 00 00 00 00 | 00 00 b1 09 53 4d 42 20 |LABL....|....SMB |
|00004bf0| 49 4f 43 54 4c 00 54 53 | 55 42 00 00 00 00 00 00 |IOCTL.TS|UB......|
|00004c00| 00 08 53 4d 42 20 42 61 | 73 65 54 42 49 54 00 00 |..SMB Ba|seTBIT..|
|00004c10| 00 07 09 00 00 0d 53 4d | 42 20 49 4f 43 54 4c 20 |......SM|B IOCTL |
|00004c20| 52 73 70 00 48 57 52 44 | 40 00 00 00 04 90 c2 0c |Rsp.HWRD|@.......|
|00004c30| 46 69 6c 65 20 48 61 6e | 64 6c 65 3a 44 57 52 44 |File Han|dle:DWRD|
|00004c40| 40 00 00 00 04 90 c2 10 | 44 65 76 69 63 65 20 43 |@.......|Device C|
|00004c50| 61 74 65 67 6f 72 79 3a | 44 57 52 44 40 00 00 00 |ategory:|DWRD@...|
|00004c60| 04 90 c2 10 44 65 76 69 | 63 65 20 46 75 6e 63 74 |....Devi|ce Funct|
|00004c70| 69 6f 6e 3a 44 57 52 44 | 40 00 00 00 04 90 c2 12 |ion:DWRD|@.......|
|00004c80| 54 6f 74 61 6c 20 50 61 | 72 61 6d 20 42 79 74 65 |Total Pa|ram Byte|
|00004c90| 73 3a 44 57 52 44 40 00 | 00 00 04 90 c2 11 54 6f |s:DWRD@.|......To|
|00004ca0| 74 61 6c 20 44 61 74 61 | 20 42 79 74 65 73 3a 00 |tal Data| Bytes:.|
|00004cb0| 44 57 52 44 40 00 00 00 | 04 90 c2 14 50 61 72 61 |DWRD@...|....Para|
|00004cc0| 6d 20 42 79 74 65 73 20 | 54 6f 20 52 65 63 76 3a |m Bytes |To Recv:|
|00004cd0| 44 57 52 44 40 00 00 00 | 04 90 c2 13 44 61 74 61 |DWRD@...|....Data|
|00004ce0| 20 42 79 74 65 73 20 54 | 6f 20 52 65 63 76 3a 00 | Bytes T|o Recv:.|
|00004cf0| 44 4c 4e 47 40 00 00 00 | 04 90 c2 14 54 69 6d 65 |DLNG@...|....Time|
|00004d00| 6f 75 74 20 28 6d 69 6c | 6c 69 73 65 63 2e 29 3a |out (mil|lisec.):|
|00004d10| 48 57 52 44 40 00 00 00 | 04 90 c2 09 52 65 73 65 |HWRD@...|....Rese|
|00004d20| 72 76 65 64 3a 00 44 57 | 52 44 40 00 00 00 04 90 |rved:.DW|RD@.....|
|00004d30| c2 13 50 61 72 61 6d 73 | 20 54 68 69 73 20 42 75 |..Params| This Bu|
|00004d40| 66 66 65 72 3a 00 44 57 | 52 44 40 00 00 00 04 90 |ffer:.DW|RD@.....|
|00004d50| c2 14 50 61 72 61 6d 73 | 20 42 79 74 65 73 20 4f |..Params| Bytes O|
|00004d60| 66 66 73 65 74 3a 44 57 | 52 44 40 00 00 00 04 90 |ffset:DW|RD@.....|
|00004d70| c2 11 44 61 74 61 20 54 | 68 69 73 20 42 75 66 66 |..Data T|his Buff|
|00004d80| 65 72 3a 00 44 57 52 44 | 40 00 00 00 04 90 c2 12 |er:.DWRD|@.......|
|00004d90| 44 61 74 61 20 42 79 74 | 65 73 20 4f 66 66 73 65 |Data Byt|es Offse|
|00004da0| 74 3a 53 55 42 47 00 00 | 00 0e 01 00 00 00 53 45 |t:SUBG..|......SE|
|00004db0| 51 55 00 00 00 00 01 00 | 00 00 53 4b 49 50 00 00 |QU......|..SKIP..|
|00004dc0| 00 02 00 00 00 00 4d 55 | 4c 47 00 00 00 02 01 00 |......MU|LG......|
|00004dd0| 00 00 44 55 4d 50 00 00 | 00 00 01 90 c2 11 41 64 |..DUMP..|......Ad|
|00004de0| 64 69 74 69 6f 6e 61 6c | 20 42 79 74 65 73 3a 00 |ditional| Bytes:.|
|00004df0| 44 57 52 44 40 00 00 00 | 01 90 c2 0b 42 79 74 65 |DWRD@...|....Byte|
|00004e00| 20 43 6f 75 6e 74 3a 00 | 4d 4f 56 45 00 00 00 01 | Count:.|MOVE....|
|00004e10| 8c 00 00 00 53 45 51 55 | 00 00 00 00 01 00 00 00 |....SEQU|........|
|00004e20| 53 4b 49 50 00 00 00 01 | 00 00 00 00 44 55 4d 50 |SKIP....|....DUMP|
|00004e30| 00 00 00 00 01 90 c2 19 | 50 61 72 61 6d 65 74 65 |........|Paramete|
|00004e40| 72 20 41 6e 64 20 44 61 | 74 61 20 42 79 74 65 73 |r And Da|ta Bytes|
|00004e50| 3a 00 4c 41 42 4c 00 00 | 00 00 00 00 30 00 00 00 |:.LABL..|....0...|
|00004e60| 00 80 00 04 4c 41 42 4c | 00 00 00 00 00 00 b1 26 |....LABL|.......&|
|00004e70| 53 4d 42 20 49 4f 43 54 | 4c 20 28 53 65 63 6f 6e |SMB IOCT|L (Secon|
|00004e80| 64 61 72 79 20 52 65 71 | 75 65 73 74 2f 52 65 73 |dary Req|uest/Res|
|00004e90| 70 6f 6e 73 65 29 54 53 | 55 42 00 00 00 00 00 00 |ponse)TS|UB......|
|00004ea0| 00 08 53 4d 42 20 42 61 | 73 65 54 42 49 54 00 00 |..SMB Ba|seTBIT..|
|00004eb0| 00 07 09 00 00 10 53 4d | 42 20 49 4f 43 54 4c 53 |......SM|B IOCTLS|
|00004ec0| 65 63 20 52 73 70 54 4e | 58 54 00 00 00 00 00 00 |ec RspTN|XT......|
|00004ed0| 00 10 53 4d 42 20 50 61 | 72 61 6d 20 26 20 44 61 |..SMB Pa|ram & Da|
|00004ee0| 74 61 00 00 00 60 00 04 | 4c 41 42 4c 00 00 00 00 |ta...`..|LABL....|
|00004ef0| 00 00 b1 08 53 4d 42 20 | 43 6f 70 79 54 53 55 42 |....SMB |CopyTSUB|
|00004f00| 00 00 00 00 00 00 00 08 | 53 4d 42 20 42 61 73 65 |........|SMB Base|
|00004f10| 54 42 49 54 00 00 00 07 | 09 00 00 0c 53 4d 42 20 |TBIT....|....SMB |
|00004f20| 43 6f 70 79 20 52 73 70 | 54 4e 58 54 00 00 00 00 |Copy Rsp|TNXT....|
|00004f30| 00 00 00 11 53 4d 42 20 | 54 77 6f 20 46 69 6c 65 |....SMB |Two File|
|00004f40| 73 20 43 6d 64 00 00 00 | 00 60 00 04 4c 41 42 4c |s Cmd...|.`..LABL|
|00004f50| 00 00 00 00 00 00 b1 08 | 53 4d 42 20 4d 6f 76 65 |........|SMB Move|
|00004f60| 54 53 55 42 00 00 00 00 | 00 00 00 08 53 4d 42 20 |TSUB....|....SMB |
|00004f70| 42 61 73 65 54 42 49 54 | 00 00 00 07 09 00 00 0c |BaseTBIT|........|
|00004f80| 53 4d 42 20 4d 6f 76 65 | 20 52 73 70 54 4e 58 54 |SMB Move| RspTNXT|
|00004f90| 00 00 00 00 00 00 00 11 | 53 4d 42 20 54 77 6f 20 |........|SMB Two |
|00004fa0| 46 69 6c 65 73 20 43 6d | 64 00 00 00 00 2e 00 02 |Files Cm|d.......|
|00004fb0| 4c 41 42 4c 00 00 00 00 | 00 00 b1 08 53 4d 42 20 |LABL....|....SMB |
|00004fc0| 45 63 68 6f 54 4e 58 54 | 00 00 00 00 00 00 00 0c |EchoTNXT|........|
|00004fd0| 53 4d 42 20 45 63 68 6f | 20 52 73 70 00 00 01 d8 |SMB Echo| Rsp....|
|00004fe0| 00 18 4c 41 42 4c 00 00 | 00 00 00 00 b1 13 53 4d |..LABL..|......SM|
|00004ff0| 42 20 57 72 69 74 65 20 | 41 6e 64 20 43 6c 6f 73 |B Write |And Clos|
|00005000| 65 00 54 53 55 42 00 00 | 00 00 00 00 00 08 53 4d |e.TSUB..|......SM|
|00005010| 42 20 42 61 73 65 54 42 | 49 54 00 00 00 07 09 00 |B BaseTB|IT......|
|00005020| 00 12 53 4d 42 20 57 72 | 69 74 65 43 6c 6f 73 65 |..SMB Wr|iteClose|
|00005030| 20 52 73 70 48 57 52 44 | 40 00 00 00 04 90 c2 0c | RspHWRD|@.......|
|00005040| 46 69 6c 65 20 48 61 6e | 64 6c 65 3a 44 57 52 44 |File Han|dle:DWRD|
|00005050| 40 00 00 00 04 90 c2 10 | 41 6d 6f 75 6e 74 20 54 |@.......|Amount T|
|00005060| 6f 20 57 72 69 74 65 3a | 44 4c 4e 47 40 00 00 00 |o Write:|DLNG@...|
|00005070| 04 90 c2 10 53 74 61 72 | 74 69 6e 67 20 4f 66 66 |....Star|ting Off|
|00005080| 73 65 74 3a 44 4c 4e 47 | 40 00 00 00 04 90 c2 12 |set:DLNG|@.......|
|00005090| 4d 6f 64 69 66 69 63 61 | 74 69 6f 6e 20 54 69 6d |Modifica|tion Tim|
|000050a0| 65 3a 53 55 42 47 00 00 | 00 06 01 00 00 00 53 45 |e:SUBG..|......SE|
|000050b0| 51 55 00 00 00 00 01 00 | 00 00 53 4b 49 50 00 00 |QU......|..SKIP..|
|000050c0| 00 08 00 00 00 00 48 4c | 4e 47 40 00 00 00 04 90 |......HL|NG@.....|
|000050d0| c2 09 52 65 73 65 72 76 | 65 64 3a 00 48 4c 4e 47 |..Reserv|ed:.HLNG|
|000050e0| 40 00 00 00 04 90 c2 09 | 52 65 73 65 72 76 65 64 |@.......|Reserved|
|000050f0| 3a 00 48 4c 4e 47 40 00 | 00 00 04 90 c2 09 52 65 |:.HLNG@.|......Re|
|00005100| 73 65 72 76 65 64 3a 00 | 53 55 42 47 00 00 00 06 |served:.|SUBG....|
|00005110| 01 00 00 00 53 45 51 55 | 00 00 00 00 01 00 00 00 |....SEQU|........|
|00005120| 53 4b 49 50 00 00 00 02 | 00 00 00 00 4d 55 4c 47 |SKIP....|....MULG|
|00005130| 00 00 00 02 01 00 00 00 | 44 55 4d 50 00 00 00 00 |........|DUMP....|
|00005140| 01 90 c2 11 41 64 64 69 | 74 69 6f 6e 61 6c 20 42 |....Addi|tional B|
|00005150| 79 74 65 73 3a 00 44 57 | 52 44 40 00 00 00 01 90 |ytes:.DW|RD@.....|
|00005160| c2 0b 42 79 74 65 20 43 | 6f 75 6e 74 3a 00 4d 4f |..Byte C|ount:.MO|
|00005170| 56 45 00 00 00 01 8c 00 | 00 00 53 45 51 55 00 00 |VE......|..SEQU..|
|00005180| 00 00 01 00 00 00 53 4b | 49 50 00 00 00 01 00 00 |......SK|IP......|
|00005190| 00 00 44 55 4d 50 00 00 | 00 00 01 90 c2 0e 44 61 |..DUMP..|......Da|
|000051a0| 74 61 20 54 6f 20 57 72 | 69 74 65 3a 4c 41 42 4c |ta To Wr|ite:LABL|
|000051b0| 00 00 00 00 00 00 30 00 | 00 00 05 04 00 2f 4c 41 |......0.|...../LA|
|000051c0| 42 4c 00 00 00 00 00 00 | b1 0e 53 4d 42 20 4f 70 |BL......|..SMB Op|
|000051d0| 65 6e 20 41 6e 64 20 58 | 54 53 55 42 00 00 00 00 |en And X|TSUB....|
|000051e0| 00 00 00 08 53 4d 42 20 | 42 61 73 65 54 42 49 54 |....SMB |BaseTBIT|
|000051f0| 00 00 00 07 09 00 00 0d | 53 4d 42 20 4f 70 65 6e |........|SMB Open|
|00005200| 58 20 52 73 70 00 48 42 | 59 54 40 00 00 00 02 90 |X Rsp.HB|YT@.....|
|00005210| c2 12 53 65 63 6f 6e 64 | 61 72 79 20 43 6f 6d 6d |..Second|ary Comm|
|00005220| 61 6e 64 3a 54 53 55 42 | 00 00 00 00 00 00 00 11 |and:TSUB|........|
|00005230| 53 4d 42 20 43 6f 6d 6d | 61 6e 64 20 43 6f 64 65 |SMB Comm|and Code|
|00005240| 73 00 48 42 59 54 40 00 | 00 00 04 90 c2 0f 52 65 |s.HBYT@.|......Re|
|00005250| 73 65 72 76 65 64 20 28 | 4d 42 5a 29 3a 00 44 57 |served (|MBZ):.DW|
|00005260| 52 44 40 00 00 00 0d 90 | c2 12 4f 66 66 73 65 74 |RD@.....|..Offset|
|00005270| 20 54 6f 20 43 6f 6d 6d | 61 6e 64 3a 48 57 52 44 | To Comm|and:HWRD|
|00005280| 40 00 00 00 04 90 c2 06 | 46 6c 61 67 73 3a 43 42 |@.......|Flags:CB|
|00005290| 49 54 00 00 00 00 04 00 | f4 1d 52 65 74 75 72 6e |IT......|..Return|
|000052a0| 20 41 64 64 69 74 69 6f | 6e 61 6c 20 49 6e 66 6f | Additio|nal Info|
|000052b0| 72 6d 61 74 69 6f 6e 00 | 43 42 49 54 00 00 00 01 |rmation.|CBIT....|
|000052c0| 04 00 f4 1f 53 65 74 20 | 53 69 6e 67 6c 65 20 55 |....Set |Single U|
|000052d0| 73 65 72 20 54 6f 74 61 | 6c 20 46 69 6c 65 20 4c |ser Tota|l File L|
|000052e0| 6f 63 6b 00 43 42 49 54 | 00 00 00 02 04 00 f4 24 |ock.CBIT|.......$|
|000052f0| 4e 6f 74 69 66 79 20 43 | 6f 6e 73 75 6d 65 72 20 |Notify C|onsumer |
|00005300| 4f 6e 20 41 6e 79 20 4d | 6f 64 69 66 79 20 41 63 |On Any M|odify Ac|
|00005310| 74 69 6f 6e 43 4c 53 45 | 00 00 00 00 00 00 f4 1c |tionCLSE|........|
|00005320| 4e 6f 74 69 66 79 20 43 | 6f 6e 73 75 6d 65 72 20 |Notify C|onsumer |
|00005330| 4f 6e 6c 79 20 4f 6e 20 | 4f 70 65 6e 48 42 59 54 |Only On |OpenHBYT|
|00005340| 40 00 00 00 04 90 c2 13 | 57 72 69 74 65 20 54 68 |@.......|Write Th|
|00005350| 72 6f 75 67 68 20 4d 6f | 64 65 3a 00 43 42 49 54 |rough Mo|de:.CBIT|
|00005360| 00 00 00 06 04 00 14 26 | 4e 6f 20 52 65 61 64 20 |.......&|No Read |
|00005370| 41 68 65 61 64 20 4e 6f | 72 20 57 72 69 74 65 20 |Ahead No|r Write |
|00005380| 42 65 68 69 6e 64 20 41 | 6c 6c 6f 77 65 64 44 42 |Behind A|llowedDB|
|00005390| 49 54 00 00 00 04 04 90 | c2 0b 53 68 61 72 65 20 |IT......|..Share |
|000053a0| 4d 6f 64 65 3a 00 41 4e | 44 47 00 00 00 07 04 00 |Mode:.AN|DG......|
|000053b0| 00 00 43 53 54 23 ff ff | ff ff 04 00 14 0f 53 4d |..CST#..|......SM|
|000053c0| 42 20 53 68 61 72 65 20 | 4d 6f 64 65 73 00 44 42 |B Share |Modes.DB|
|000053d0| 49 54 00 00 00 04 04 90 | c2 0a 4f 70 65 6e 20 4d |IT......|..Open M|
|000053e0| 6f 64 65 3a 43 53 54 23 | ff ff ff ff 04 00 14 0e |ode:CST#|........|
|000053f0| 53 4d 42 20 4f 70 65 6e | 20 4d 6f 64 65 73 4c 41 |SMB Open| ModesLA|
|00005400| 42 4c 00 00 00 00 00 00 | c2 07 53 65 61 72 63 68 |BL......|..Search|
|00005410| 20 00 54 53 55 42 00 00 | 00 00 00 00 00 12 53 4d | .TSUB..|......SM|
|00005420| 42 20 41 74 74 72 69 62 | 75 74 65 20 42 69 74 73 |B Attrib|ute Bits|
|00005430| 4c 41 42 4c 00 00 00 00 | 00 00 c2 05 46 69 6c 65 |LABL....|....File|
|00005440| 20 00 54 53 55 42 00 00 | 00 00 00 00 00 12 53 4d | .TSUB..|......SM|
|00005450| 42 20 41 74 74 72 69 62 | 75 74 65 20 42 69 74 73 |B Attrib|ute Bits|
|00005460| 44 4c 4e 47 40 00 00 00 | 04 90 c2 0e 43 72 65 61 |DLNG@...|....Crea|
|00005470| 74 69 6f 6e 20 54 69 6d | 65 3a 48 57 52 44 40 00 |tion Tim|e:HWRD@.|
|00005480| 00 00 04 90 c2 0e 4f 70 | 65 6e 20 46 75 6e 63 74 |......Op|en Funct|
|00005490| 69 6f 6e 3a 43 42 49 54 | 00 00 00 04 04 00 f4 29 |ion:CBIT|.......)|
|000054a0| 43 72 65 61 74 65 20 46 | 69 6c 65 20 49 66 20 44 |Create F|ile If D|
|000054b0| 65 73 74 69 6e 61 74 69 | 6f 6e 20 44 6f 65 73 20 |estinati|on Does |
|000054c0| 4e 6f 74 20 45 78 69 73 | 74 00 43 4c 53 45 00 00 |Not Exis|t.CLSE..|
|000054d0| 00 00 00 00 f4 22 46 61 | 69 6c 20 49 66 20 44 65 |....."Fa|il If De|
|000054e0| 73 74 69 6e 61 74 69 6f | 6e 20 44 6f 65 73 20 4e |stinatio|n Does N|
|000054f0| 6f 74 20 45 78 69 73 74 | 41 4e 44 47 00 00 00 03 |ot Exist|ANDG....|
|00005500| 04 00 00 00 43 45 51 55 | 00 00 00 00 04 00 f4 1a |....CEQU|........|
|00005510| 46 61 69 6c 20 49 66 20 | 44 65 73 74 69 6e 61 74 |Fail If |Destinat|
|00005520| 69 6f 6e 20 45 78 69 73 | 74 73 43 45 51 55 00 00 |ion Exis|tsCEQU..|
|00005530| 00 01 04 00 f4 1c 41 70 | 70 65 6e 64 20 49 66 20 |......Ap|pend If |
|00005540| 44 65 73 74 69 6e 61 74 | 69 6f 6e 20 45 78 69 73 |Destinat|ion Exis|
|00005550| 74 73 43 45 51 55 00 00 | 00 02 04 00 f4 1f 4f 76 |tsCEQU..|......Ov|
|00005560| 65 72 77 72 69 74 65 20 | 49 66 20 44 65 73 74 69 |erwrite |If Desti|
|00005570| 6e 61 74 69 6f 6e 20 45 | 78 69 73 74 73 00 44 4c |nation E|xists.DL|
|00005580| 4e 47 40 00 00 00 04 90 | c2 11 42 79 74 65 73 20 |NG@.....|..Bytes |
|00005590| 54 6f 20 52 65 73 65 72 | 76 65 3a 00 44 4c 4e 47 |To Reser|ve:.DLNG|
|000055a0| 40 00 00 00 04 90 c2 14 | 54 69 6d 65 6f 75 74 20 |@.......|Timeout |
|000055b0| 28 6d 69 6c 6c 69 73 65 | 63 2e 29 3a 48 4c 4e 47 |(millise|c.):HLNG|
|000055c0| 40 00 00 00 04 90 c2 09 | 52 65 73 65 72 76 65 64 |@.......|Reserved|
|000055d0| 3a 00 53 55 42 47 00 00 | 00 0f 01 00 00 00 53 45 |:.SUBG..|......SE|
|000055e0| 51 55 00 00 00 00 01 00 | 00 00 53 4b 49 50 00 00 |QU......|..SKIP..|
|000055f0| 00 02 00 00 00 00 4d 55 | 4c 47 00 00 00 02 01 00 |......MU|LG......|
|00005600| 00 00 44 55 4d 50 00 00 | 00 00 01 90 c2 11 41 64 |..DUMP..|......Ad|
|00005610| 64 69 74 69 6f 6e 61 6c | 20 42 79 74 65 73 3a 00 |ditional| Bytes:.|
|00005620| 44 57 52 44 40 00 00 00 | 01 90 c2 0b 42 79 74 65 |DWRD@...|....Byte|
|00005630| 20 43 6f 75 6e 74 3a 00 | 4d 4f 56 45 00 00 00 01 | Count:.|MOVE....|
|00005640| 8c 00 00 00 43 53 54 52 | 00 00 00 00 04 90 c2 0e |....CSTR|........|
|00005650| 46 69 6c 65 20 50 61 74 | 68 6e 61 6d 65 3a 53 55 |File Pat|hname:SU|
|00005660| 42 47 00 00 00 04 81 00 | 00 00 53 45 51 55 00 00 |BG......|..SEQU..|
|00005670| 00 00 01 00 00 00 53 4b | 49 50 00 00 00 01 00 00 |......SK|IP......|
|00005680| 00 00 44 55 4d 50 00 00 | 00 00 01 90 c2 11 41 64 |..DUMP..|......Ad|
|00005690| 64 69 74 69 6f 6e 61 6c | 20 42 79 74 65 73 3a 00 |ditional| Bytes:.|
|000056a0| 54 4e 58 54 00 00 00 00 | 00 00 00 14 53 4d 42 20 |TNXT....|....SMB |
|000056b0| 43 61 6c 63 75 6c 61 74 | 65 20 4f 66 66 73 65 74 |Calculat|e Offset|
|000056c0| 00 00 01 f2 00 13 4c 41 | 42 4c 00 00 00 00 00 00 |......LA|BL......|
|000056d0| b1 0e 53 4d 42 20 52 65 | 61 64 20 41 6e 64 20 58 |..SMB Re|ad And X|
|000056e0| 54 53 55 42 00 00 00 00 | 00 00 00 08 53 4d 42 20 |TSUB....|....SMB |
|000056f0| 42 61 73 65 54 42 49 54 | 00 00 00 07 09 00 00 0d |BaseTBIT|........|
|00005700| 53 4d 42 20 52 65 61 64 | 58 20 52 73 70 00 48 42 |SMB Read|X Rsp.HB|
|00005710| 59 54 40 00 00 00 02 90 | c2 12 53 65 63 6f 6e 64 |YT@.....|..Second|
|00005720| 61 72 79 20 43 6f 6d 6d | 61 6e 64 3a 54 53 55 42 |ary Comm|and:TSUB|
|00005730| 00 00 00 00 00 00 00 11 | 53 4d 42 20 43 6f 6d 6d |........|SMB Comm|
|00005740| 61 6e 64 20 43 6f 64 65 | 73 00 48 42 59 54 40 00 |and Code|s.HBYT@.|
|00005750| 00 00 04 90 c2 0f 52 65 | 73 65 72 76 65 64 20 28 |......Re|served (|
|00005760| 4d 42 5a 29 3a 00 44 57 | 52 44 40 00 00 00 0d 90 |MBZ):.DW|RD@.....|
|00005770| c2 12 4f 66 66 73 65 74 | 20 54 6f 20 43 6f 6d 6d |..Offset| To Comm|
|00005780| 61 6e 64 3a 48 57 52 44 | 40 00 00 00 04 90 c2 0c |and:HWRD|@.......|
|00005790| 46 69 6c 65 20 48 61 6e | 64 6c 65 3a 44 4c 4e 47 |File Han|dle:DLNG|
|000057a0| 40 00 00 00 04 90 c2 15 | 4f 66 66 73 65 74 20 54 |@.......|Offset T|
|000057b0| 6f 20 42 65 67 69 6e 20 | 52 65 61 64 3a 00 44 57 |o Begin |Read:.DW|
|000057c0| 52 44 40 00 00 00 04 90 | c2 12 4d 61 78 20 42 79 |RD@.....|..Max By|
|000057d0| 74 65 73 20 54 6f 20 52 | 65 61 64 3a 44 57 52 44 |tes To R|ead:DWRD|
|000057e0| 40 00 00 00 04 90 c2 12 | 4d 69 6e 20 42 79 74 65 |@.......|Min Byte|
|000057f0| 73 20 54 6f 20 52 65 61 | 64 3a 44 4c 4e 47 40 00 |s To Rea|d:DLNG@.|
|00005800| 00 00 04 90 c2 14 54 69 | 6d 65 6f 75 74 20 28 6d |......Ti|meout (m|
|00005810| 69 6c 6c 69 73 65 63 2e | 29 3a 44 57 52 44 40 00 |illisec.|):DWRD@.|
|00005820| 00 00 04 90 c2 16 52 65 | 6d 61 69 6e 2e 20 52 65 |......Re|main. Re|
|00005830| 71 75 65 73 74 20 42 79 | 74 65 73 3a 44 57 52 44 |quest By|tes:DWRD|
|00005840| 40 00 00 00 01 90 c2 0b | 42 79 74 65 20 43 6f 75 |@.......|Byte Cou|
|00005850| 6e 74 3a 00 4d 4f 56 45 | 00 00 00 01 8c 00 00 00 |nt:.MOVE|........|
|00005860| 53 45 51 55 00 00 00 00 | 01 00 00 00 53 4b 49 50 |SEQU....|....SKIP|
|00005870| 00 00 00 01 00 00 00 00 | 44 55 4d 50 00 00 00 00 |........|DUMP....|
|00005880| 01 90 c2 11 41 64 64 69 | 74 69 6f 6e 61 6c 20 42 |....Addi|tional B|
|00005890| 79 74 65 73 3a 00 54 4e | 58 54 00 00 00 00 00 00 |ytes:.TN|XT......|
|000058a0| 00 14 53 4d 42 20 43 61 | 6c 63 75 6c 61 74 65 20 |..SMB Ca|lculate |
|000058b0| 4f 66 66 73 65 74 00 00 | 02 aa 00 19 4c 41 42 4c |Offset..|....LABL|
|000058c0| 00 00 00 00 00 00 b1 0f | 53 4d 42 20 57 72 69 74 |........|SMB Writ|
|000058d0| 65 20 41 6e 64 20 58 00 | 54 53 55 42 00 00 00 00 |e And X.|TSUB....|
|000058e0| 00 00 00 08 53 4d 42 20 | 42 61 73 65 54 42 49 54 |....SMB |BaseTBIT|
|000058f0| 00 00 00 07 09 00 00 0e | 53 4d 42 20 57 72 69 74 |........|SMB Writ|
|00005900| 65 58 20 52 73 70 48 42 | 59 54 40 00 00 00 02 90 |eX RspHB|YT@.....|
|00005910| c2 12 53 65 63 6f 6e 64 | 61 72 79 20 43 6f 6d 6d |..Second|ary Comm|
|00005920| 61 6e 64 3a 54 53 55 42 | 00 00 00 00 00 00 00 11 |and:TSUB|........|
|00005930| 53 4d 42 20 43 6f 6d 6d | 61 6e 64 20 43 6f 64 65 |SMB Comm|and Code|
|00005940| 73 00 48 42 59 54 40 00 | 00 00 04 90 c2 0f 52 65 |s.HBYT@.|......Re|
|00005950| 73 65 72 76 65 64 20 28 | 4d 42 5a 29 3a 00 44 57 |served (|MBZ):.DW|
|00005960| 52 44 40 00 00 00 0d 90 | c2 12 4f 66 66 73 65 74 |RD@.....|..Offset|
|00005970| 20 54 6f 20 43 6f 6d 6d | 61 6e 64 3a 48 57 52 44 | To Comm|and:HWRD|
|00005980| 40 00 00 00 04 90 c2 0c | 46 69 6c 65 20 48 61 6e |@.......|File Han|
|00005990| 64 6c 65 3a 44 4c 4e 47 | 40 00 00 00 04 90 c2 16 |dle:DLNG|@.......|
|000059a0| 4f 66 66 73 65 74 20 54 | 6f 20 42 65 67 69 6e 20 |Offset T|o Begin |
|000059b0| 57 72 69 74 65 3a 44 4c | 4e 47 40 00 00 00 04 90 |Write:DL|NG@.....|
|000059c0| c2 14 54 69 6d 65 6f 75 | 74 20 28 6d 69 6c 6c 69 |..Timeou|t (milli|
|000059d0| 73 65 63 2e 29 3a 48 57 | 52 44 40 00 00 00 04 90 |sec.):HW|RD@.....|
|000059e0| c2 0b 57 72 69 74 65 20 | 4d 6f 64 65 3a 00 43 42 |..Write |Mode:.CB|
|000059f0| 49 54 00 00 00 00 04 00 | f4 1c 43 6f 6d 70 6c 65 |IT......|..Comple|
|00005a00| 74 65 20 57 72 69 74 65 | 20 42 65 66 6f 72 65 20 |te Write| Before |
|00005a10| 52 65 74 75 72 6e 43 42 | 49 54 00 00 00 01 04 00 |ReturnCB|IT......|
|00005a20| f4 16 52 65 74 75 72 6e | 20 52 65 6d 61 69 6e 69 |..Return| Remaini|
|00005a30| 6e 67 20 42 79 74 65 73 | 43 42 49 54 00 00 00 02 |ng Bytes|CBIT....|
|00005a40| 04 00 f4 15 55 73 65 20 | 57 72 69 74 65 52 61 77 |....Use |WriteRaw|
|00005a50| 4e 61 6d 65 64 50 69 70 | 65 00 43 42 49 54 00 00 |NamedPip|e.CBIT..|
|00005a60| 00 03 04 00 f4 18 54 68 | 69 73 20 49 73 20 53 74 |......Th|is Is St|
|00005a70| 61 72 74 20 4f 66 20 4d | 65 73 73 61 67 65 44 57 |art Of M|essageDW|
|00005a80| 52 44 40 00 00 00 04 90 | c2 14 52 65 6d 61 69 6e |RD@.....|..Remain|
|00005a90| 2e 20 57 72 69 74 65 20 | 42 79 74 65 73 3a 48 57 |. Write |Bytes:HW|
|00005aa0| 52 44 40 00 00 00 04 90 | c2 09 52 65 73 65 72 76 |RD@.....|..Reserv|
|00005ab0| 65 64 3a 00 44 57 52 44 | 40 00 00 00 04 90 c2 11 |ed:.DWRD|@.......|
|00005ac0| 44 61 74 61 20 54 68 69 | 73 20 42 75 66 66 65 72 |Data Thi|s Buffer|
|00005ad0| 3a 00 44 57 52 44 40 00 | 00 00 04 90 c2 12 44 61 |:.DWRD@.|......Da|
|00005ae0| 74 61 20 42 79 74 65 73 | 20 4f 66 66 73 65 74 3a |ta Bytes| Offset:|
|00005af0| 44 57 52 44 40 00 00 00 | 01 90 c2 0b 42 79 74 65 |DWRD@...|....Byte|
|00005b00| 20 43 6f 75 6e 74 3a 00 | 4d 4f 56 45 00 00 00 01 | Count:.|MOVE....|
|00005b10| 8c 00 00 00 53 45 51 55 | 00 00 00 00 01 00 00 00 |....SEQU|........|
|00005b20| 53 4b 49 50 00 00 00 01 | 00 00 00 00 44 55 4d 50 |SKIP....|....DUMP|
|00005b30| 00 00 00 00 01 90 c2 0b | 44 61 74 61 20 42 79 74 |........|Data Byt|
|00005b40| 65 73 3a 00 54 4e 58 54 | 00 00 00 00 00 00 00 14 |es:.TNXT|........|
|00005b50| 53 4d 42 20 43 61 6c 63 | 75 6c 61 74 65 20 4f 66 |SMB Calc|ulate Of|
|00005b60| 66 73 65 74 00 00 00 80 | 00 04 4c 41 42 4c 00 00 |fset....|..LABL..|
|00005b70| 00 00 00 00 b1 28 53 4d | 42 20 54 72 61 6e 73 61 |.....(SM|B Transa|
|00005b80| 63 74 69 6f 6e 32 20 2d | 20 46 75 6e 63 74 69 6f |ction2 -| Functio|
|00005b90| 6e 2c 20 42 79 74 65 20 | 49 6e 2f 4f 75 74 54 53 |n, Byte |In/OutTS|
|00005ba0| 55 42 00 00 00 00 00 00 | 00 08 53 4d 42 20 42 61 |UB......|..SMB Ba|
|00005bb0| 73 65 54 42 49 54 00 00 | 00 07 09 00 00 0e 53 4d |seTBIT..|......SM|
|00005bc0| 42 20 58 61 63 74 32 46 | 20 52 73 70 54 4e 58 54 |B Xact2F| RspTNXT|
|00005bd0| 00 00 00 00 00 00 00 10 | 53 4d 42 20 54 72 61 6e |........|SMB Tran|
|00005be0| 73 61 63 74 20 43 6d 64 | 00 00 00 88 00 04 4c 41 |sact Cmd|......LA|
|00005bf0| 42 4c 00 00 00 00 00 00 | b1 2d 53 4d 42 20 54 72 |BL......|.-SMB Tr|
|00005c00| 61 6e 73 61 63 74 69 6f | 6e 32 20 28 53 65 63 6f |ansactio|n2 (Seco|
|00005c10| 6e 64 61 72 79 20 52 65 | 71 75 65 73 74 2f 52 65 |ndary Re|quest/Re|
|00005c20| 73 70 6f 6e 73 65 29 00 | 54 53 55 42 00 00 00 00 |sponse).|TSUB....|
|00005c30| 00 00 00 08 53 4d 42 20 | 42 61 73 65 54 42 49 54 |....SMB |BaseTBIT|
|00005c40| 00 00 00 07 09 00 00 10 | 53 4d 42 20 58 61 63 74 |........|SMB Xact|
|00005c50| 32 53 65 63 20 52 73 70 | 54 4e 58 54 00 00 00 00 |2Sec Rsp|TNXT....|
|00005c60| 00 00 00 10 53 4d 42 20 | 50 61 72 61 6d 20 26 20 |....SMB |Param & |
|00005c70| 44 61 74 61 00 00 01 1a | 00 0f 4c 41 42 4c 00 00 |Data....|..LABL..|
|00005c80| 00 00 00 00 b1 0e 53 4d | 42 20 46 69 6e 64 20 43 |......SM|B Find C|
|00005c90| 6c 6f 73 65 54 53 55 42 | 00 00 00 00 00 00 00 08 |loseTSUB|........|
|00005ca0| 53 4d 42 20 42 61 73 65 | 54 42 49 54 00 00 00 07 |SMB Base|TBIT....|
|00005cb0| 09 00 00 11 53 4d 42 20 | 46 69 6e 64 43 6c 6f 73 |....SMB |FindClos|
|00005cc0| 32 20 52 73 70 00 48 57 | 52 44 40 00 00 00 04 90 |2 Rsp.HW|RD@.....|
|00005cd0| c2 0c 46 69 6c 65 20 48 | 61 6e 64 6c 65 3a 53 55 |..File H|andle:SU|
|00005ce0| 42 47 00 00 00 01 01 00 | 00 00 53 45 51 55 00 00 |BG......|..SEQU..|
|00005cf0| 00 00 01 00 00 00 53 4b | 49 50 00 00 00 02 00 00 |......SK|IP......|
|00005d00| 00 00 4d 55 4c 47 00 00 | 00 02 01 00 00 00 44 55 |..MULG..|......DU|
|00005d10| 4d 50 00 00 00 00 01 90 | c2 11 41 64 64 69 74 69 |MP......|..Additi|
|00005d20| 6f 6e 61 6c 20 42 79 74 | 65 73 3a 00 44 57 52 44 |onal Byt|es:.DWRD|
|00005d30| 40 00 00 00 01 90 c2 0b | 42 79 74 65 20 43 6f 75 |@.......|Byte Cou|
|00005d40| 6e 74 3a 00 4d 4f 56 45 | 00 00 00 01 8c 00 00 00 |nt:.MOVE|........|
|00005d50| 53 45 51 55 00 00 00 00 | 01 00 00 00 53 4b 49 50 |SEQU....|....SKIP|
|00005d60| 00 00 00 01 00 00 00 00 | 44 55 4d 50 00 00 00 00 |........|DUMP....|
|00005d70| 01 90 c2 11 41 64 64 69 | 74 69 6f 6e 61 6c 20 42 |....Addi|tional B|
|00005d80| 79 74 65 73 3a 00 4c 41 | 42 4c 00 00 00 00 00 00 |ytes:.LA|BL......|
|00005d90| 30 00 00 00 01 2a 00 0f | 4c 41 42 4c 00 00 00 00 |0....*..|LABL....|
|00005da0| 00 00 b1 15 53 4d 42 20 | 46 69 6e 64 20 4e 6f 74 |....SMB |Find Not|
|00005db0| 69 66 79 20 43 6c 6f 73 | 65 00 54 53 55 42 00 00 |ify Clos|e.TSUB..|
|00005dc0| 00 00 00 00 00 08 53 4d | 42 20 42 61 73 65 54 42 |......SM|B BaseTB|
|00005dd0| 49 54 00 00 00 07 09 00 | 00 12 53 4d 42 20 46 69 |IT......|..SMB Fi|
|00005de0| 6e 64 4e 6f 74 69 66 79 | 20 52 73 70 48 57 52 44 |ndNotify| RspHWRD|
|00005df0| 40 00 00 00 04 90 c2 13 | 46 69 6e 64 20 4e 6f 74 |@.......|Find Not|
|00005e00| 69 66 79 20 48 61 6e 64 | 6c 65 3a 00 53 55 42 47 |ify Hand|le:.SUBG|
|00005e10| 00 00 00 01 01 00 00 00 | 53 45 51 55 00 00 00 00 |........|SEQU....|
|00005e20| 01 00 00 00 53 4b 49 50 | 00 00 00 02 00 00 00 00 |....SKIP|........|
|00005e30| 4d 55 4c 47 00 00 00 02 | 01 00 00 00 44 55 4d 50 |MULG....|....DUMP|
|00005e40| 00 00 00 00 01 90 c2 11 | 41 64 64 69 74 69 6f 6e |........|Addition|
|00005e50| 61 6c 20 42 79 74 65 73 | 3a 00 44 57 52 44 40 00 |al Bytes|:.DWRD@.|
|00005e60| 00 00 01 90 c2 0b 42 79 | 74 65 20 43 6f 75 6e 74 |......By|te Count|
|00005e70| 3a 00 4d 4f 56 45 00 00 | 00 01 8c 00 00 00 53 45 |:.MOVE..|......SE|
|00005e80| 51 55 00 00 00 00 01 00 | 00 00 53 4b 49 50 00 00 |QU......|..SKIP..|
|00005e90| 00 01 00 00 00 00 44 55 | 4d 50 00 00 00 00 01 90 |......DU|MP......|
|00005ea0| c2 11 41 64 64 69 74 69 | 6f 6e 61 6c 20 42 79 74 |..Additi|onal Byt|
|00005eb0| 65 73 3a 00 4c 41 42 4c | 00 00 00 00 00 00 30 00 |es:.LABL|......0.|
|00005ec0| 00 00 01 0e 00 0b 4c 41 | 42 4c 00 00 00 00 00 00 |......LA|BL......|
|00005ed0| b1 10 53 4d 42 20 54 72 | 65 65 20 43 6f 6e 6e 65 |..SMB Tr|ee Conne|
|00005ee0| 63 74 54 53 55 42 00 00 | 00 00 00 00 00 08 53 4d |ctTSUB..|......SM|
|00005ef0| 42 20 42 61 73 65 54 42 | 49 54 00 00 00 07 09 00 |B BaseTB|IT......|
|00005f00| 00 10 53 4d 42 20 54 72 | 65 65 43 6f 6e 6e 20 52 |..SMB Tr|eeConn R|
|00005f10| 73 70 44 57 52 44 40 00 | 00 00 01 90 c2 0b 42 79 |spDWRD@.|......By|
|00005f20| 74 65 20 43 6f 75 6e 74 | 3a 00 4d 4f 56 45 00 00 |te Count|:.MOVE..|
|00005f30| 00 01 8c 00 00 00 4c 41 | 42 4c 00 00 00 00 00 90 |......LA|BL......|
|00005f40| c2 0e 50 61 74 68 2f 55 | 73 65 72 6e 61 6d 65 3a |..Path/U|sername:|
|00005f50| 54 53 55 42 00 00 00 00 | 00 00 00 0f 53 4d 42 20 |TSUB....|....SMB |
|00005f60| 53 74 72 69 6e 67 20 4e | 61 6d 65 00 4c 41 42 4c |String N|ame.LABL|
|00005f70| 00 00 00 00 00 90 c2 09 | 50 61 73 73 77 6f 72 64 |........|Password|
|00005f80| 3a 00 54 53 55 42 00 00 | 00 00 00 00 00 0f 53 4d |:.TSUB..|......SM|
|00005f90| 42 20 53 74 72 69 6e 67 | 20 4e 61 6d 65 00 4c 41 |B String| Name.LA|
|00005fa0| 42 4c 00 00 00 00 00 90 | c2 0c 44 65 76 69 63 65 |BL......|..Device|
|00005fb0| 20 4e 61 6d 65 3a 54 53 | 55 42 00 00 00 00 00 00 | Name:TS|UB......|
|00005fc0| 00 0f 53 4d 42 20 53 74 | 72 69 6e 67 20 4e 61 6d |..SMB St|ring Nam|
|00005fd0| 65 00 00 00 00 3e 00 02 | 4c 41 42 4c 00 00 00 00 |e....>..|LABL....|
|00005fe0| 00 00 b1 13 53 4d 42 20 | 54 72 65 65 20 44 69 73 |....SMB |Tree Dis|
|00005ff0| 63 6f 6e 6e 65 63 74 00 | 54 4e 58 54 00 00 00 00 |connect.|TNXT....|
|00006000| 00 00 00 10 53 4d 42 20 | 54 72 65 65 44 69 73 63 |....SMB |TreeDisc|
|00006010| 20 52 73 70 00 00 00 9c | 00 07 4c 41 42 4c 00 00 | Rsp....|..LABL..|
|00006020| 00 00 00 00 b1 16 53 4d | 42 20 4e 65 67 6f 74 69 |......SM|B Negoti|
|00006030| 61 74 65 20 50 72 6f 74 | 6f 63 6f 6c 54 53 55 42 |ate Prot|ocolTSUB|
|00006040| 00 00 00 00 00 00 00 08 | 53 4d 42 20 42 61 73 65 |........|SMB Base|
|00006050| 54 42 49 54 00 00 00 07 | 09 00 00 10 53 4d 42 20 |TBIT....|....SMB |
|00006060| 4e 65 67 50 72 6f 74 6f | 20 52 73 70 44 57 52 44 |NegProto| RspDWRD|
|00006070| 40 00 00 00 01 90 c2 0b | 42 79 74 65 20 43 6f 75 |@.......|Byte Cou|
|00006080| 6e 74 3a 00 4d 4f 56 45 | 00 00 00 01 8c 00 00 00 |nt:.MOVE|........|
|00006090| 4d 4f 56 45 00 00 00 01 | 05 00 00 00 54 53 55 42 |MOVE....|....TSUB|
|000060a0| 00 00 00 00 00 00 00 0c | 53 4d 42 20 44 69 61 6c |........|SMB Dial|
|000060b0| 65 63 74 73 00 00 02 ae | 00 1d 4c 41 42 4c 00 00 |ects....|..LABL..|
|000060c0| 00 00 00 00 b1 2d 53 4d | 42 20 53 65 73 73 69 6f |.....-SM|B Sessio|
|000060d0| 6e 20 53 65 74 20 55 70 | 20 26 20 58 20 28 49 6e |n Set Up| & X (In|
|000060e0| 63 6c 75 64 69 6e 67 20 | 55 73 65 72 20 4c 6f 67 |cluding |User Log|
|000060f0| 6f 6e 29 00 54 53 55 42 | 00 00 00 00 00 00 00 08 |on).TSUB|........|
|00006100| 53 4d 42 20 42 61 73 65 | 54 42 49 54 00 00 00 07 |SMB Base|TBIT....|
|00006110| 09 00 00 11 53 4d 42 20 | 53 65 73 73 53 65 74 75 |....SMB |SessSetu|
|00006120| 70 20 52 73 70 00 48 42 | 59 54 40 00 00 00 02 90 |p Rsp.HB|YT@.....|
|00006130| c2 12 53 65 63 6f 6e 64 | 61 72 79 20 43 6f 6d 6d |..Second|ary Comm|
|00006140| 61 6e 64 3a 54 53 55 42 | 00 00 00 00 00 00 00 11 |and:TSUB|........|
|00006150| 53 4d 42 20 43 6f 6d 6d | 61 6e 64 20 43 6f 64 65 |SMB Comm|and Code|
|00006160| 73 00 48 42 59 54 40 00 | 00 00 04 90 c2 0f 52 65 |s.HBYT@.|......Re|
|00006170| 73 65 72 76 65 64 20 28 | 4d 42 5a 29 3a 00 44 57 |served (|MBZ):.DW|
|00006180| 52 44 40 00 00 00 0d 90 | c2 12 4f 66 66 73 65 74 |RD@.....|..Offset|
|00006190| 20 54 6f 20 43 6f 6d 6d | 61 6e 64 3a 44 57 52 44 | To Comm|and:DWRD|
|000061a0| 40 00 00 00 04 90 c2 10 | 4d 61 78 20 42 75 66 66 |@.......|Max Buff|
|000061b0| 65 72 20 53 69 7a 65 3a | 44 57 52 44 40 00 00 00 |er Size:|DWRD@...|
|000061c0| 04 90 c2 13 4d 61 78 20 | 4d 75 6c 74 69 70 6c 65 |....Max |Multiple|
|000061d0| 78 20 52 65 71 73 3a 00 | 44 57 52 44 40 00 00 00 |x Reqs:.|DWRD@...|
|000061e0| 04 90 c2 0a 56 43 20 4e | 75 6d 62 65 72 3a 48 4c |....VC N|umber:HL|
|000061f0| 4e 47 40 00 00 00 04 90 | c2 0c 53 65 73 73 69 6f |NG@.....|..Sessio|
|00006200| 6e 20 4b 65 79 3a 44 57 | 52 44 40 00 00 00 05 90 |n Key:DW|RD@.....|
|00006210| c2 10 50 61 73 73 77 6f | 72 64 20 4c 65 6e 67 74 |..Passwo|rd Lengt|
|00006220| 68 3a 44 57 52 44 40 00 | 00 00 05 90 c2 13 45 6e |h:DWRD@.|......En|
|00006230| 63 72 79 70 74 20 4b 65 | 79 20 4c 65 6e 67 74 68 |crypt Ke|y Length|
|00006240| 3a 00 44 57 52 44 40 00 | 00 00 05 90 c2 13 45 6e |:.DWRD@.|......En|
|00006250| 63 72 79 70 74 20 4b 65 | 79 20 4f 66 66 73 65 74 |crypt Ke|y Offset|
|00006260| 3a 00 4d 4f 56 45 00 00 | 00 0a 0b 00 00 00 44 57 |:.MOVE..|......DW|
|00006270| 52 44 40 00 00 00 01 90 | c2 0b 42 79 74 65 20 43 |RD@.....|..Byte C|
|00006280| 6f 75 6e 74 3a 00 4d 4f | 56 45 00 00 00 01 8c 00 |ount:.MO|VE......|
|00006290| 00 00 53 45 51 55 00 00 | 00 00 01 00 00 00 53 4b |..SEQU..|......SK|
|000062a0| 49 50 00 00 00 09 00 00 | 00 00 48 45 58 23 00 00 |IP......|..HEX#..|
|000062b0| 00 00 05 90 c2 11 41 63 | 63 6f 75 6e 74 20 50 61 |......Ac|count Pa|
|000062c0| 73 73 77 6f 72 64 3a 00 | 53 55 42 47 00 00 00 05 |ssword:.|SUBG....|
|000062d0| 81 00 00 00 53 45 51 55 | 00 00 00 00 01 00 00 00 |....SEQU|........|
|000062e0| 53 4b 49 50 00 00 00 05 | 00 00 00 00 43 53 54 52 |SKIP....|....CSTR|
|000062f0| 00 00 00 00 05 90 c2 0d | 41 63 63 6f 75 6e 74 20 |........|Account |
|00006300| 4e 61 6d 65 3a 00 53 55 | 42 47 00 00 00 05 81 00 |Name:.SU|BG......|
|00006310| 00 00 53 45 51 55 00 00 | 00 00 01 00 00 00 53 4b |..SEQU..|......SK|
|00006320| 49 50 00 00 00 01 00 00 | 00 00 48 45 58 23 00 00 |IP......|..HEX#..|
|00006330| 00 00 01 90 c2 0f 45 6e | 63 72 79 70 74 69 6f 6e |......En|cryption|
|00006340| 20 4b 65 79 3a 00 54 4e | 58 54 00 00 00 00 00 00 | Key:.TN|XT......|
|00006350| 00 14 53 4d 42 20 43 61 | 6c 63 75 6c 61 74 65 20 |..SMB Ca|lculate |
|00006360| 4f 66 66 73 65 74 00 00 | 01 8c 00 12 4c 41 42 4c |Offset..|....LABL|
|00006370| 00 00 00 00 00 00 b1 15 | 53 4d 42 20 55 73 65 72 |........|SMB User|
|00006380| 20 4c 6f 67 6f 66 66 20 | 61 6e 64 20 58 00 54 53 | Logoff |and X.TS|
|00006390| 55 42 00 00 00 00 00 00 | 00 08 53 4d 42 20 42 61 |UB......|..SMB Ba|
|000063a0| 73 65 54 42 49 54 00 00 | 00 07 09 00 00 0f 53 4d |seTBIT..|......SM|
|000063b0| 42 20 4c 6f 67 6f 66 66 | 58 20 52 73 70 00 48 42 |B Logoff|X Rsp.HB|
|000063c0| 59 54 40 00 00 00 02 90 | c2 12 53 65 63 6f 6e 64 |YT@.....|..Second|
|000063d0| 61 72 79 20 43 6f 6d 6d | 61 6e 64 3a 54 53 55 42 |ary Comm|and:TSUB|
|000063e0| 00 00 00 00 00 00 00 11 | 53 4d 42 20 43 6f 6d 6d |........|SMB Comm|
|000063f0| 61 6e 64 20 43 6f 64 65 | 73 00 48 42 59 54 40 00 |and Code|s.HBYT@.|
+--------+-------------------------+-------------------------+--------+--------+