Segment 1: .bss @ 00002330

• 00000000 — _tanb_global
• 00000020 — _TimerQ
• 00000038 — _DomainNames
• 00000040 — _LmHostQueries
• 00000060 — _LanaTable
• 00000080 — _UsedIrps
• 00000088 — _DefaultDisconnectTimeout
• 0000008C — _NodeType
• 000000A0 — _NbtConfig
• 000001FA — _StreamsStack
• 00000200 — _NameStatsInfo
• 00000298 — _UsedTrackers
• 000002A0 — _CachePrimed
• 000002A4 — _NbtMemoryAllocated
• 000002C0 — _TimeoutTimer
• 000002D8 — _TdiDispatch
• 000002DC — _PMNotificationHandle
• 000002E0 — _LanaBase
• 000002F4 — _GlobalNdisHandle
• 000002F8 — _fGlobalsInitialized
• 000002FC — _iLanaOffset
• 0000033C — _fInInit
• 00000340 — _CurrentIP
• 00000344 — _OptionMapping
• 000003C8 — _pFileBuff
• 000003CC — _pFilePath
• 000006B4 — _pNbtGlobConfig
• 00000714 — _gSystemSuspended
• 00000738 — _Decoration
• 00000778 — _Directive
• 000007B8 — _Suffix
• 00000884 — _szXportName
• 000008CC — _htonl
• 000008EF — _WakeupTimerNotification
• 00000922 — _ReadNameServersFromRegistry
• 000009E4 — _GetProfileHex
• 000009FD — _InterlockedExchangeAdd
• 00000A0C — _ParseDomainNames
• 00000B50 — _CheckForTimedoutNCBs
• 00000C2A — _StartRefreshTimer
• 00000C87 — _StopTimeoutTimer
• 00000C94 — _DnsCompletion
• 00000E49 — _DoDnsResolve
• 00000F93 — _DnsStoreName
• 0000103C — _DnsExtractName
• 000010B5 — _domnamelen
• 000010CF — _ProcessDnsResponse
• 00001308 — _VxdInitLmHostsSupport
• 00001333 — _AddNotFoundToHashTable
• 00001373 — _AddRecordToHashTable
• 000013CF — _AddToHashTable
• 000015A6 — _DeleteFromHashTable
• 000015EA — _ChgStateOfScopedNameInHashTable
• 0000163D — _FindInHashTable
• 000016E7 — _RcvHandlrNotOs
• 00001865 — _Inbound
• 00001A40 — _ClearConnStructures
• 00001A86 — _CompleteSessionSetup
• 00001B26 — _Outbound
• 00001D77 — _GetIrpIfNotCancelled2
• 00001D89 — _GetIrpIfNotCancelled
• 00001D99 — _RejectAnyData
• 00001DA6 — _RejectSession
• 00001E0E — _FindSessionEndPoint
• 00001F30 — _MakeRemoteAddressStructure
• 00001FCC — _ConnectHndlrNotOs
• 0000208D — _DisconnectHndlrNotOs
• 000023E9 — _CleanupAfterDisconnect
• 00002445 — _AllocLowerConn
• 000024A1 — _DelayedAllocLowerConn
• 000024BB — _DelayedAllocLowerConnSpecial
• 000024F3 — _AddToRemoteHashTbl
• 000025B9 — _DgramHndlrNotOs
• 000029C8 — _ProxyDoDgramDist
• 00002A50 — _NameSrvHndlrNotOs
• 00002B06 — _DoNothingComplete
• 00002B07 — _QueryFromNet
• 00003177 — _RegResponseFromNet
• 00003356 — _CheckRegistrationFromNet
• 00003570 — _NameReleaseFromNet
• 000037FB — _WackFromNet
• 000038A7 — _SetupRefreshTtl
• 000039CB — _DecodeNodeStatusResponse
• 00003B1D — _GetDestType
• 00003B45 — _ExtractServerName
• 00003D7F — _SendNodeStatusResponse
• 00003FB3 — _UpdateNameState
• 000040FA — _MakeList
• 000041F3 — _ChooseBestIpAddress
• 0000439D — _IsNameServerForDevice
• 000043D4 — _SrcIsNameServer
• 00004410 — _SrcIsUs
• 00004431 — _SwitchToBackup
• 00004461 — _GetNbFlags
• 0000449E — _FindOnPendingList
• 000044FB — _ChkIfValidRsp
• 00004520 — _NbtOpenAddress
• 00004943 — _NbtRegisterCompletion
• 00004B4A — _LockedRemoveFromList
• 00004B59 — _NbtAssociateAddress
• 00004BAB — _NbtDisassociateAddress
• 00004C8E — _NbtCloseAddress
• 00004CCD — _NbtCleanUpAddress
• 00004E91 — _NbtCloseConnection
• 00004EC4 — _NbtCleanUpConnection
• 00004FFC — _FreeRcvBuffers
• 0000502E — _CheckListForTracker
• 0000506F — _CleanupConnectingState
• 000051E9 — _ReConnect
• 0000528C — _NbtConnect
• 000052EA — _NbtConnectCommon
• 00005813 — _CleanUpPartialConnection
• 000058A4 — _SessionSetupContinue
• 00005981 — _QueueCleanup
• 000059E0 — _StartSessionTimer
• 00005A33 — _SessionStartupContinue
• 00005BF1 — _SessionStartupCompletion
• 00005CE1 — _SessionTimedOut
• 00005D51 — _RelistConnection
• 00005D80 — _NbtSend
• 00005D83 — _NbtListen
• 00005DF9 — _NbtDisconnect
• 00006010 — _DisconnectLower
• 0000607B — _NbtAccept
• 000060CB — _NbtReceiveDatagram
• 0000612B — _FindNameOrQuery
• 00006388 — _FindNameRemoteThenLocal
• 000063DF — _SendToResolvingName
• 0000645C — _GetTransactId
• 00006461 — _GetTransactIdLocked
• 0000647C — _CTECountedAllocMem
• 000064A9 — _CTECountedFreeMem
• 000064CF — _SendDgramContinue
• 0000656A — _SendDgram
• 000065FD — _SendDgramDist
• 0000663C — _SendDgramCompletion
• 000066DE — _DgramDistTimeout
• 00006762 — _DatagramDistribution
• 00006828 — _DgramSendCleanupTracker
• 00006851 — _NbtSetEventHandler
• 0000693A — _NbtSendNodeStatus
• 00006B8B — _QueryNameCompletion
• 00006BE0 — _SendNodeStatusContinue
• 00006CCF — _NodeStatusDone
• 00006D12 — _CopyFindNameData
• 00006E68 — _FreeTracker
• 00006EEA — _DereferenceIfNotInRcvHandler
• 00006EF5 — _NbtQueryAdapterStatus
• 000071D2 — _NbtQueryConnectionList
• 000073D2 — _NbtQueryBcastVsWins
• 00007450 — _NbtNewDhcpAddress
• 00007504 — _NbtDereferenceClient
• 000075A4 — _GetNextDeviceContext
• 000075FF — _NbtDereferenceAddress
• 000076FC — _LockedDereferenceName
• 00007707 — _NbtDereferenceName
• 00007754 — _NbtDereferenceConnection
• 0000778B — _NbtDereferenceLowerConnection
• 000077B3 — _NbtDeleteLowerConn
• 000077E4 — _WipeOutLowerconn
• 00007816 — _FindName
• 00007867 — _AddToPendingList
• 000078CF — _QueryNameOnNet
• 00007BD0 — _ContinueQueryNameOnNet
• 00007D5C — _MSnodeCompletion
• 00008077 — _SetWinsDownFlag
• 000080C5 — _WinsDownTimeout
• 000080DE — _CompleteClientReq
• 0000818E — _NbtRegisterName
• 000084A7 — _MSnodeRegTimeout
• 000086B8 — _NodeStatusCompletion
• 000087A6 — _RefreshRegCompletion
• 000087FF — _ReleaseNameOnNet
• 00008925 — _ReleaseCompletion
• 000089EF — _NameReleaseDoneOnDynIf
• 00008A06 — _NameReleaseDone
• 00008A60 — _DereferenceTracker
• 00008A74 — _DereferenceTrackerNoLock
• 00008A88 — _DereferenceTrackerDelete
• 00008A9C — _StartRefresh
• 00008BF8 — _GetNextName
• 00008C91 — _NextRefresh
• 00008CAD — _NextRefreshNonDispatch
• 00008E1D — _RefreshTimeout
• 00008E7A — _RefreshBegin
• 000090A6 — _RemoteHashTimeout
• 00009126 — _NextKeepAlive
• 00009180 — _GetNextKeepAlive
• 00009202 — _SessionKeepAliveTimeout
• 00009229 — _IncrementNameStats
• 00009248 — _SaveBcastNameResolved
• 0000927A — _IsBrowserName
• 00009294 — _AppropriateNodeType
• 000092B6 — _DoDnsResolveDirect
• 00009412 — _UdpSendDNSBcastDirect
• 000094D6 — _SendDNSBcastDoneDirect
• 000094E1 — _DoDnsCancelDirect
• 00009516 — _DnsCompletionDirect
• 00009633 — _DnsActualCompletionDirect
• 000096A1 — _DnsUnlinkAndCompleteDirect
• 000096C7 — _ProcessDnsResponseDirect
• 00009878 — _CreateSendContextDirect
• 0000998B — _FindContextDirect
• 000099AB — _IpToAscii
• 00009A2C — _AddrChngNotification
• 00009B23 — _CloseAddressesWithTransport
• 00009BB8 — _IsValidDevice
• 00009BD6 — _NbtFreeAddressObj
• 00009BF2 — _NbtNonDpcFreeAddrObj
• 00009C12 — _NbtFreeClientObj
• 00009C26 — _FreeConnectionObj
• 00009C4D — _NbtAllocateClientBlock
• 00009CF4 — _NbtAddPermanentName
• 00009E28 — _NbtRemovePermanentName
• 00009E50 — _NbtInitQ
• 00009E89 — _NbtInitTrackerQ
• 00009ED5 — _NbtAllocTracker
• 00009F5F — _NbtGetBuffer
• 00009FC5 — _GetNetBiosNameFromTransportAddress
• 00009FF8 — _ConvertToAscii
• 0000A08A — _ConvertToHalfAscii
• 0000A0DE — _Nbt_inet_addr
• 0000A18A — _GetTracker
• 0000A21E — _CountLocalNames
• 0000A24F — _CountUpperConnections
• 0000A2A5 — _DisableInboundConnections
• 0000A2ED — _EnableInboundConnections
• 0000A303 — _MarkForCloseLowerConnections
• 0000A417 — _NbtInitConnQ
• 0000A49E — _ReRegisterLocalNames
• 0000A571 — _LockedStopTimer
• 0000A590 — _WakeupRefreshTimeout
• 0000A5A9 — _NbtSetPowerHandler
• 0000A700 — _CheckSetWakeupPattern
• 0000A836 — _VNBT_NCB_X@20
• 0000AB47 — _GetDeviceContext
• 0000AB81 — _NbtWouldLoopback
• 0000ABA7 — _VNBT_LANA_MASK@0
• 0000ABEA — _MapTDIStatus2NCBErr
• 0000ACB3 — _FindInDomainList
• 0000ACE3 — _MakeNewListCurrent
• 0000AD36 — _StartIpAddrToSrvName
• 0000AE05 — _StartConnWithBestAddr
• 0000AEF5 — _ChangeStateInRemoteTable
• 0000AF2E — _PreloadEntry
• 0000B003 — _RemovePreloads
• 0000B057 — _GetContext
• 0000B06E — _ChangeStateOfName
• 0000B0F2 — _LmHostTimeout
• 0000B18E — _TimeoutQEntries
• 0000B1D9 — _StartLmHostTimer
• 0000B228 — _LmHostQueueRequest
• 0000B2A6 — _GetNameToFind
• 0000B2FF — _RemoveNameAndCompleteReq
• 0000B354 — _RemoveName
• 0000B370 — _strchr
• 0000B396 — _RegOrQueryFromNet
• 0000B3DB — _ProxyTimerComplFn
• 0000B4A5 — _ProxyClientCompletion
• 0000B4A6 — _NbtTdiOpenAddress
• 0000B59A — _NbtTdiOpenConnection
• 0000B5F2 — _NbtTdiAssociateConnection
• 0000B611 — _TdiOpenandAssocConnection
• 0000B707 — _NbtTdiCloseConnection
• 0000B730 — _NbtTdiCloseAddress
• 0000B73E — _CloseAddress
• 0000B764 — _DummyCompletion
• 0000B765 — _TdiReceiveHandler
• 0000BAC5 — _ReceiveAnyHandler
• 0000BB00 — _CompletionRcv
• 0000BC17 — _NewSessionCompletionRoutine
• 0000BCA0 — _Reindicate
• 0000BD2D — _TdiConnectHandler
• 0000BD7B — _AcceptCompletionRoutine
• 0000BDBD — _TdiDisconnectHandler
• 0000BDED — _VxdDisconnectHandler
• 0000BECF — _TdiRcvDatagramHandler
• 0000BF9A — _TdiRcvNameSrvHandler
• 0000BFC2 — _CompletionRcvDgram
• 0000C134 — _TdiErrorHandler
• 0000C13A — _TdiSendDatagram
• 0000C222 — _SendComplete
• 0000C25A — _TdiConnect
• 0000C293 — _TdiDisconnect
• 0000C2B1 — _TdiSend
• 0000C407 — _VxdScheduleDelayedCall
• 0000C4C6 — _VxdDelayedCallHandler
• 0000C4DF — _CancelAllDelayedEvents
• 0000C539 — _WakeupTimerExpiry@16
• 0000C565 — _NbtStartWakeupTimer
• 0000C609 — _NbtStopWakeupTimer
• 0000C674 — _NbtStopTimer
• 0000C683 — _InitTimerQ
• 0000C69A — _InitQ
• 0000C6EB — _StopTimerAndCallCompletion
• 0000C720 — _InterlockedCallCompletion
• 0000C74A — _GetEntry
• 0000C78C — _LockedStartTimer
• 0000C7DF — _StartTimer
• 0000C8AB — _DereferenceTimer
• 0000C8FE — _StopTimer
• 0000C97D — _TimerExpiry
• 0000CA09 — _ExpireTimer
• 0000CAB2 — _UdpSendNSBcast
• 0000CCE9 — _CreatePdu
• 0000CEF3 — _NsDgramSendCompleted
• 0000CF05 — _NameDgramSendCompleted
• 0000CF10 — _NDgramSendCompleted
• 0000CF1E — _UdpSendResponse
• 0000D30B — _QueryRespDone
• 0000D319 — _UdpSendDatagram
• 0000D3E0 — _TcpSessionStart
• 0000D482 — _TcpSendSessionResponse
• 0000D528 — _TcpSendSession
• 0000D563 — _SessionRespDone
• 0000D571 — _SendTcpDisconnect
• 0000D5A6 — _TcpDisconnect
• 0000D5E4 — _DisconnectDone
• 0000D6AC — _VxdDgramSend
• 0000D76F — _VxdDgramReceive
• 0000D849 — _VxdCall
• 0000D8C1 — _VxdSend
• 0000DA22 — _VxdReceiveAny
• 0000DBAC — _VxdReceive
• 0000DD4E — _VxdHangup
• 0000DE64 — _VxdListen
• 0000DED7 — _VxdOpenName
• 0000DFB7 — _VxdCloseName
• 0000E036 — _ActiveSessions
• 0000E055 — _VxdCleanupAddress
• 0000E1AA — _VxdAccept
• 0000E1D8 — _VxdAdapterStatus
• 0000E28C — _VxdFindName
• 0000E308 — _VxdSessionStatus
• 0000E525 — _VxdCopySessionStatus
• 0000E642 — _VxdReset
• 0000E756 — _VxdResetContinue
• 0000E8BA — _VxdCancel
• 0000EBC4 — _VxdIoComplete
• 0000EFB0 — _VxdInitSessionSetup
• 0000F12E — _VxdFindClientElement
• 0000F1D4 — _VxdFindConnectElement
• 0000F241 — _VxdFindLSN
• 0000F277 — _VxdFindNameNum
• 0000F2B4 — _VxdNameToClient
• 0000F334 — _NBRegister
• 0000F3C8 — _NBUnregister
• 0000F40C — _VxdCompleteSessionNcbs
• 0000F4CB — _VxdTearDownSession
• 0000F512 — _AllocSessSetupContext
• 0000F5C0 — _FreeSessSetupContext
• 0000F5F4 — _DelayedSessEstablish
• 0000F61A — _VxdApiWorker
• 0000F8B0 — _CTEAllocInitMem
• 0000F8D8 — __vxdhandle__
• 0000F8DC — _VNBT_Get_Version
• 0000F8E0 — VNBT_DDB
• 0000F938 — _RegisterLana2
• 0000F96D — _DeregisterLana
• 0000F97C — _IPRegisterAddrChangeHandler
• 0000F990 — _IPRegisterWakeupTimerHandler
• 0000F9A4 — _IPQueryPnPCapability
• 0000F9B8 — _NbtRegisterWakeupPattern
• 0000F9D1 — _VWIN32_KeInitializeDpc
• 0000F9E9 — _VWIN32_KeInitializeTimer
• 0000F9FB — _VWIN32_R0SetWaitableTimer
• 0000FA15 — _VWIN32_RtlExtendedIntegerMultiply
• 0000FA2D — _VWIN32_KeCancelTimer
• 0000FA40 — __VxdMapSegmentOffsetToFlat
• 0000FA88 — __VxdLockBuffer
• 0000FACF — __VxdUnlockBuffer
• 0000FB17 — __VxdValidateBuffer
• 0000FB60 — _CTEStartTimer
• 0000FB66 — _CTEStopTimer
• 0000FB6C — _CTESystemUpTime
• 0000FB72 — _CTEScheduleEvent
• 0000FB78 — _CTEScheduleEvent_N
• 0000FB7E — _CTECancelEvent
• 0000FB84 — _CTEAllocMem
• 0000FB8A — _CTEFreeMem
• 0000FB90 — _CTERefillMem
• 0000FB96 — _CTEBlock
• 0000FB9C — _CTEBlock1
• 0000FBA2 — _CTESignal
• 0000FBA8 — _CTEUnload
• 0000FBB3 — _CTESetLoadNotifyProc
• 0000FBBE — _CTESetUnloadNotifyProc
• 0000FBCC — NCB_Handler
• 0000FBD9 — _DhcpQueryOption
• 0000FC05 — VNBT_Get_Version
• 0000FC15 — VNBT_Control
• 0000FC37 — VNBT_DeviceIoControl
• 0000FCCC — _ReconfigureDevnode
• 0000FCF6 — _GetInDosFlag
• 0000FD13 — _VxdRtlCompareMemory
• 0000FD57 — VNBT_Api_Handler
• 0000FE22 — _VNBT_GetTdiDispatchTbl
• 0000FE4F — _NbtCTEPrint
• 0000FE64 — __RegCloseKey
• 0000FE6C — __RegQueryValueEx
• 0000FE74 — __RegOpenKey

Segment 2: _PTEXT @ 00002870

• 00000000 — _IPNotification
• 000001AB — _DestroyDeviceObject
• 00000413 — _SaveNameDnsServerAddrs
• 000004CF — _GetDnsServerAddress
• 0000055C — _GetNameServerAddress
• 000005E9 — _GetMacAddr
• 000009D3 — _VxdReadIniString
• 00000A14 — _GetProfileInt
• 00000A54 — _VxdOpenNdis
• 00000A9F — _GetNdisParam
• 00000B38 — _VxdCloseNdis
• 00000B4F — _StopAllNameQueries
• 00000C6F — _VxdUnload
• 00000D0F — _ReleaseNbtConfigMem
• 00001028 — _NbtReadRegistry
• 000010E4 — _GetDNSInfo
• 000011DC — _CreateDeviceObject
• 000014DD — _GetDhcpOption
• 000015A4 — _VxdFileOpen
• 000015D6 — _VxdFileRead
• 00001610 — _VxdFileClose
• 00001642 — _VxdWindowsPath
• 00001664 — _LmCloseFile
• 00001685 — _LmFgets
• 0000170C — _GetNextChar
• 00001763 — _LmOpenFile
• 00001813 — _BackupCurrentData
• 0000183C — _RestoreOldData
• 00001859 — _CopyNodeStatusResponse
• 00001A2C — _InitTimersNotOs
• 00001B73 — _StopInitTimers
• 00001BC4 — _ReadParameters
• 0000206E — _ReadParameters2
• 00002116 — _ReadScope
• 00002242 — _ReadLmHostFile
• 000022A5 — _NbtOpenConnection
• 0000236B — _NbtOpenAndAssocConnection
• 000023CE — _NbtSendDatagram
• 0000255E — _BuildSendDgramHdr
• 000026D3 — _NbtQueryFindName
• 000027D0 — _NbtResyncRemoteCache
• 00002832 — _SessionKeepAliveNonDispatch
• 000028D9 — _ConvertDottedDecimalToUlong
• 0000295B — _CloseLowerConnections
• 00002995 — _LmGetIpAddr
• 00002B3B — _HandleSpecial
• 00002BB9 — _LmpGetTokens
• 00002DE3 — _LmpIsKeyWord
• 00002E27 — _LmpBreakRecursion
• 00002F08 — _AddToDomainList
• 00003025 — _LmExpandName
• 000030CD — _LmInclude
• 000030FE — _PrimeCache
• 000032F8 — _ScanLmHostFile
• 00003458 — _NbtCreateAddressObjects
• 000035A8 — _NdisOpenProtocolConfiguration@12
• 000035AE — _NdisCloseConfiguration@4
• 000035B4 — _NdisReadConfiguration@20
• 000035BA — VNBT_Device_PostProc
• 000035C5 — VNBT_ConfigCalls
• 00003687 — _PostInit_Proc

Segment 3: _ITEXT @ 00000000

• 00000000 — _Init
• 00000140 — _CTEInitialize
• 00000160 — _CreateHashTable
• 000001B7 — _InitRemoteHashTable
• 000001D2 — _InitNotOs
• 0000045A — _strrchr
• 0000047E — VNBT_Device_Init