Cracking 2

home *** CD-ROM | disk | FTP | other *** search

/ Cracking 2 / Cracking II..iso / Tools / icedump 6.018 and nticedump 1.9 / wnt / src / ntice322.inc < prev next >

Wrap

Text File | 2000-02-26 | 39.8 KB | 851 lines

Control_0 EQU 0x00010316 pMainInit EQU 0x00010336 pHookFault_PM_VMM_0E EQU 0x000104F0 pNew_PM_VMM_INT_0E EQU 0x0001051E jSET_DEVICE_FOCUS EQU 0x0001052A jDESTROY_VM EQU 0x00010566 pSavePort_21_A1 EQU 0x00010585 pRestorePort_21_A1 EQU 0x000105A7 nullsub_8 EQU 0x000108AF nullsub_9 EQU 0x000108B0 pNew_VMM_F5 EQU 0x00010951 pPatch_VKD EQU 0x0001096F PM_0 EQU 0x00010A10 V86_0 EQU 0x00010A51 unkserv_0 EQU 0x00010AC3 unkserv_2 EQU 0x00010ACA unkserv_3 EQU 0x00010AD3 nullsub_10 EQU 0x00010ADF unkserv_1 EQU 0x00010AE0 pDefaultWiniceIntHandler EQU 0x00010AE2 pINT_06 EQU 0x00010C8E pINT_0B EQU 0x00010D73 pINT_0C EQU 0x00010EBD pINT_0D EQU 0x00010F1A pINT_01 EQU 0x0001199F pINT_03 EQU 0x00011D0A pKbdWaitMbOutputReady EQU 0x00012268 pPutBackScanCode EQU 0x0001227F pINT_02 EQU 0x00012600 pWiniceMain EQU 0x0001278A pRestoreLDTR EQU 0x00012BDD pInvalidateLDTR EQU 0x00012C00 pPrintMessage_HotKey EQU 0x00012E5C pSetTraceOn EQU 0x00012FC9 pVKD_PUT_BYTE EQU 0x00012FFB pHotKeyHandler EQU 0x00013056 pDefineHotKey EQU 0x00013098 pPrintBreakReason_ EQU 0x000130EA pGetDisplayDriverEntryPoint EQU 0x00013320 nullsub_12 EQU 0x0001336A pControl EQU 0x0001336B nullsub_11 EQU 0x00013390 pSwapIDT_INT_0E EQU 0x000135A5 pHookFaults_IDT EQU 0x0001363F pSetWiniceIRQs EQU 0x00013750 pHookKbdVector_IOAPIC_ EQU 0x000137D1 pHookKbdVector_IOAPIC EQU 0x0001380F pHookInt_IDT EQU 0x00013829 pUnHookInt_IDT EQU 0x00013865 pReHookInt_IDT EQU 0x00013894 pHookInt_IDT_ EQU 0x000138D9 pGetWiniceIntJumpTableOffset EQU 0x0001395A pInitWiniceIntHandlerJumpTable EQU 0x0001397C pSaveDRx EQU 0x00013A99 pINT_02_IOAPIC EQU 0x00013C09 pSaveRegisters_APIC EQU 0x00013CC1 pGetLinAddr_KPCR_ EQU 0x00013D8C pGetLinAddr_KPCR EQU 0x00013DA9 pSaveAllRegisters EQU 0x00013DB7 pSaveProcessorRegisters EQU 0x00013EF0 pSaveCPUID EQU 0x00013F67 pSendEOI EQU 0x0001413C pSendEOI_ EQU 0x0001418B pEnableIRQ EQU 0x000141C3 pDisableIRQ EQU 0x00014232 pEnableIRQ_IOAPIC EQU 0x00014289 pDisableIRQ_IOAPIC EQU 0x000142E5 pDisableAllIRQs EQU 0x00014304 pDisableAllIRQs_IOAPIC EQU 0x000143A6 pGetIRQStatus_IOAPIC EQU 0x00014484 pSetIRQStatus_IOAPIC EQU 0x000144A1 pGetIRQStatus_IOAPIC_ EQU 0x000144BE pSetIRQStatus_IOAPIC_ EQU 0x000144D5 c_CPU_i EQU 0x00014548 c_CPU_i_ EQU 0x000145BA c_CPU EQU 0x0001467C jCPU_InvalidProcID EQU 0x0001470D c_CPU_ProcID EQU 0x00014809 pPrintCPUFeatures EQU 0x000148B8 pPrintSpecialRegisters EQU 0x000149A3 pPrintAPICInfo EQU 0x00014D4C c_LBRECORD EQU 0x00014EDE jLBRECORD_Disable EQU 0x00014F2F pRecordLastFaultInfo EQU 0x00014F3B pRecordLastBranchInfo EQU 0x00014FBB pPrintLastBranchInfo EQU 0x00015005 pInAxDx EQU 0x00015177 pInAlDx EQU 0x00015182 pOutDxEax EQU 0x0001518C pOutDxAx EQU 0x00015197 pOutDxAl EQU 0x000151A7 pByte2HexString EQU 0x000151B5 pWord2HexString EQU 0x000151D5 pDword2HexString EQU 0x000151F2 pDword2DecimalString EQU 0x0001522D pWord2DecimalString EQU 0x0001525A pExcludePhysicalMemoryRange EQU 0x00015287 pIsBlockPresent EQU 0x0001534B pMOV_AL_EDI_safe EQU 0x000153A6 pMOV_AX_EDI_safe EQU 0x000153DD pMOV_EAX_EDI_safe EQU 0x00015417 pMOV_AL_EDI EQU 0x00015451 pMOV_AX_EDI EQU 0x00015467 pMOV_EAX_EDI EQU 0x00015480 pPutFlatByte_safe EQU 0x00015499 pPutFlatByte EQU 0x000154E3 pMOV_EDI_AL EQU 0x0001550C pMOV_EDI_AL_safe EQU 0x00015520 pMOV_EDI_AX EQU 0x00015555 pMOV_EDI_AX_safe EQU 0x0001556A pMOV_EDI_EAX_safe EQU 0x000155A0 pMOV_EDI_EAX EQU 0x000155D5 pREP_CMPSB EQU 0x000155E9 pREP_MOVSB EQU 0x000155FB pREP_MOVSD EQU 0x00015619 pREP_STOSD EQU 0x00015637 pREP_STOSB EQU 0x00015648 pREP_LODSB EQU 0x00015655 pREP_LODSD EQU 0x00015662 pREPNE_SCASB EQU 0x0001566F pREPNE_SCASW EQU 0x0001567D pLAR_ECX_EAX EQU 0x0001568C pLSL_ECX_EAX EQU 0x00015691 pLSL_EDX_EBX EQU 0x00015696 pRDMSR EQU 0x0001569B pWRMSR EQU 0x0001569F pMOD_ARG1_ARG0 EQU 0x000156A6 pSkipWhiteSpace EQU 0x000156C1 pSkipDelimiters EQU 0x000156D2 pSkipNonWhiteSpace EQU 0x000156E3 pGetDecimalDigit EQU 0x000156F6 pGetHexDigit EQU 0x00015704 pGetDecimalNumber EQU 0x00015720 pGetHexNumber EQU 0x0001575A pExpression2Integer EQU 0x00015E91 pCheckAddres2 EQU 0x00016089 pCheckAddress EQU 0x000160BF pParseInitLine EQU 0x0001611A nullsub_1 EQU 0x00016236 c_VER_PrintUserInfo EQU 0x00016237 pSetupVideoRegisterInfo_ EQU 0x000162C6 pPrintString EQU 0x0001634D pPrintEmptyLine EQU 0x00016447 pStrcpy EQU 0x00016582 pStrlen EQU 0x00016590 pToUpper EQU 0x000165A8 pStrnicmp_ EQU 0x000165DD pMoveCursor EQU 0x00016603 pMoveCursor_ EQU 0x00016657 pUpdateSomeWindows EQU 0x000166F1 pPrintLine EQU 0x00016710 pPrintQuestion_ EQU 0x00016764 pUpdateAllWindows EQU 0x000167BF pUpdateHistoryWindow EQU 0x0001680A pUpdateHistoryWindow_ EQU 0x0001688C pUpdateCodeWindow EQU 0x00016903 pShowCodeWindow EQU 0x00016EEF pUpdateWatchesWindow EQU 0x00016F8A pUpdateLocalsWindow EQU 0x0001700A pUpdateDataWindow EQU 0x0001701C pPrintGenericRegisters EQU 0x000175D0 pUpdateRegistersWindow EQU 0x0001768F pGetRegisterColor EQU 0x00017AA0 pPrintFlags EQU 0x00017AD7 pSaveClientRegistersForDisplay EQU 0x00017B1D pGeneralProtectionFault EQU 0x00017B3D pSaveClientRegisters EQU 0x00017BD0 pSaveAllClientRegisters EQU 0x00017CDE pRestoreAllClientRegisters EQU 0x00017DED pMouse_SelectionOff EQU 0x00018BD0 pParseOneKey EQU 0x00018D35 pMouse_CopyPaste EQU 0x00018F5D pMouse_Display EQU 0x00018F6C pMouse_Display_1 EQU 0x00018F99 pMouse_UnAssemble_1 EQU 0x0001900F pMouse_UnAssemble EQU 0x000190B8 pMouse_What EQU 0x000190E5 pMouse_Previous EQU 0x00019108 pMouse_Previous_1 EQU 0x0001921C pMouse_Previous_2 EQU 0x00019251 pMouse_Copy_ EQU 0x00019483 pMouse_Paste_ EQU 0x000194E7 nullsub_3 EQU 0x00019539 pEnableWin95Commands EQU 0x00019C50 pExecUserCommand EQU 0x00019C9C pFindCommand EQU 0x00019EE2 pPrintErrorMessage_ EQU 0x00019F48 pPrintLine_ EQU 0x00019F63 pPrintToCommandWindow_ EQU 0x0001A028 pV86_1 EQU 0x0001A0F0 pV86_0 EQU 0x0001A100 pInsertStringIntoBuffer EQU 0x0001A669 pEmptyKeyboardBuffer EQU 0x0001B233 pReadOneKey EQU 0x0001B24B pProgramLEDs EQU 0x0001B3A4 pKbdWaitMbInputReady EQU 0x0001B40D pProcessScanCode EQU 0x0001B44C jProcessScanCode_Translate EQU 0x0001B5B4 pInsertCharIntoBuffer EQU 0x0001B5D4 pSkipWord EQU 0x0001B615 c_InvalidCommand EQU 0x0001B635 pIsItOnOrOff EQU 0x0001B640 c_WR EQU 0x0001B700 c_WHAT_ EQU 0x0001B7CC c_WL EQU 0x0001B928 pUpdateSomeWindows_ EQU 0x0001B96B c_WATCH EQU 0x0001BB88 c_WW EQU 0x0001BCB5 c_WC EQU 0x0001BE00 c_F EQU 0x0001BF34 c_S EQU 0x0001C030 jS_NoSearchInProgress EQU 0x0001C1E7 jS_PatternNotFound EQU 0x0001C1EE jS_SyntaxError EQU 0x0001C1F5 jS_PrintMessage EQU 0x0001C1FA c_S_ EQU 0x0001C209 c_M EQU 0x0001C43B unknown_libname_1 EQU 0x0001C53A unknown_libname_2 EQU 0x0001C54A unknown_libname_3 EQU 0x0001C55A c_ES EQU 0x0001C56A c_EL EQU 0x0001C57A c_ET EQU 0x0001C58A c_E EQU 0x0001C59A pCopyDelimitedString EQU 0x0001C7BA pGetPattern EQU 0x0001C7CE c_C EQU 0x0001C815 c_R EQU 0x0001C9F4 pUpdateWindows EQU 0x0001CB91 c_EB EQU 0x0001CBA6 c_EW EQU 0x0001CBB6 c_ED EQU 0x0001CBC6 c_DL EQU 0x0001CBD6 c_DS EQU 0x0001CBE6 c_DT EQU 0x0001CBF6 c_D EQU 0x0001CC06 pMouse_Display_2 EQU 0x0001CC12 c_DATA EQU 0x0001CC84 c_DEX EQU 0x0001CCC3 c_DOT EQU 0x0001CDF9 c_EC EQU 0x0001CE76 c_U EQU 0x0001CEB7 c_X EQU 0x0001D039 c_T EQU 0x0001D0B9 c_P EQU 0x0001D2BF c_G EQU 0x0001D5B6 c_RS EQU 0x0001D894 c_ID EQU 0x0001D8C0 c_IW EQU 0x0001D8C7 c_I_IB EQU 0x0001D8CE c_O_OB EQU 0x0001D99B c_SET_MOUSE EQU 0x0001DB0F c_SET_WHEELLINES EQU 0x0001DBA6 c_CODE EQU 0x0001DBFA c_? EQU 0x0001DC79 c_VER EQU 0x0001DE54 c_CLS EQU 0x0001DE91 c_ALTSCR EQU 0x0001DEB2 c_SERIAL EQU 0x0001DEBF c_ALTKEY EQU 0x0001E0BD c_FKEY EQU 0x0001E17B c_COLOR EQU 0x0001E346 pIsTraceOn EQU 0x0001E49D c_ZAP EQU 0x0001E4B6 c_SRC EQU 0x0001E4F8 c_TABS EQU 0x0001E611 c_A EQU 0x0001E65C c_FORMAT EQU 0x0001E740 c_LINES EQU 0x0001E79A c_LINES_ EQU 0x0001E8A4 c_SET EQU 0x0001EA11 pFindSetParameter_ EQU 0x0001EB49 pFindSetParameter EQU 0x0001EB6D pFindSetParameter__ EQU 0x0001EBA4 c_OBJDIR EQU 0x0001EBD2 c_DEVICE EQU 0x0001EBF4 c_OBJTAB EQU 0x0001EC05 c_ANSWER EQU 0x0001EC22 pCopyUntilWhiteSpace EQU 0x0001ED4F c_DIAL EQU 0x0001ED65 c_SET_VERBOSE EQU 0x0001EF44 c_SET_LOWERCASE EQU 0x0001EF8D c_SET_REFERENCE EQU 0x0001EFC5 c_SET_CASESENSITIVE EQU 0x0001EFFB c_SET_THREADP EQU 0x0001F03A c_BSTAT EQU 0x0001F091 c_MACRO EQU 0x0001F0A2 c_TYPES EQU 0x0001F0B5 j_SYM_ EQU 0x0001F0CB c_PEEK EQU 0x0001F0D6 c_POKE EQU 0x0001F0E1 c_PCI EQU 0x0001F0EC c_FOBJ EQU 0x0001F0F7 c_WIDTH EQU 0x0001F119 c_PAGEIN EQU 0x0001F124 c_PROC EQU 0x0001F12F c_FIBER EQU 0x0001F13A pDetectVideoCardType EQU 0x0001F150 pInitMonoVideoCard EQU 0x0001F24B c_CSIP EQU 0x0001F6A4 c_BC_BD_BE EQU 0x0001F952 c_BL EQU 0x0001FA83 c_BPINT EQU 0x0001FC93 pPrintBPInfo_BPINT EQU 0x0001FD40 nullsub_13 EQU 0x0001FD61 nullsub_14 EQU 0x0001FD62 pEval_Bx EQU 0x0001FD63 c_BPX EQU 0x0001FDFD pPrintBPInfo_BPX EQU 0x00020203 pBE_BPX EQU 0x00020262 pBD_BPX EQU 0x00020294 pBD_BPX_BMSG EQU 0x000202AC pBD_BPX_BMSG_ EQU 0x00020345 pPrintBPInfo_BMSG EQU 0x00020543 j_pBE_BPX EQU 0x0002060C c_BPM_BPMB EQU 0x00020629 c_BPMD EQU 0x0002062E c_BPMW EQU 0x00020633 pBE_BPM EQU 0x000209E6 pBD_BPM EQU 0x00020A18 pPrintBPInfo_BPIO EQU 0x00020C79 nullsub_5 EQU 0x00020CBC pBD_BPIO EQU 0x00020CBD pBPIOSetPortInPermissionMap EQU 0x00020CC9 c_BPR_RangeCheck EQU 0x00020D77 pRangeCheck EQU 0x00020EB7 pCheckDuplicateBP EQU 0x00020F10 jNotDuplicateBP EQU 0x00020FA3 jItsDuplicateBP EQU 0x00020FB3 pAllocateBP EQU 0x00021046 pSetupBPStruct EQU 0x00021197 pBP_SetModuleName EQU 0x000212A7 c_BH EQU 0x00021363 pNew_PM_VMM_INT_0E_ EQU 0x00021A90 pIdentifyWiniceBPINT EQU 0x00022792 pDeactivateBPs EQU 0x00022A0A pDeactivateBPs_safe EQU 0x00022B02 pActivateBPs EQU 0x00022CFC pActivateBPs_safe EQU 0x00022E3F pActivate_BPINT EQU 0x00022E4A pINT_41_F003_ EQU 0x0002308B pSetDRx EQU 0x000230E5 pSetDR_01237 EQU 0x0002315C pCalledOnTaskSwitch EQU 0x0002350F pDisasmOneOpCode EQU 0x000235C8 pDisAsm_DOS_INT21 EQU 0x000238BA pDisAsm_DPMI_INT31 EQU 0x00023A26 pDisAsm_VMM_INT20 EQU 0x00023A81 pDisAsm_JumpStatus EQU 0x00023B71 jJECXZ EQU 0x00023C32 jDisAsm_JMPs_nojmp EQU 0x00023C4B jDisAsm_JMPs_jmp EQU 0x00023C52 jDisAsm_JMPs_ret EQU 0x00023C8B pDisAsm_AppendCharToLine EQU 0x00023D1E pDisAsm_AppendBufferToLine EQU 0x00023D70 pReadClientRegister EQU 0x00023DE7 pWriteClientRegister EQU 0x00023E00 pDisAsm_SkipInLine EQU 0x00023E31 pDisAsm_SkipPrefix EQU 0x00023E5C pMaximizeSomeRange EQU 0x00023E80 pMaximizeSafeReadRange EQU 0x00023EA6 pSetFlag_ClientCS_16_32 EQU 0x00023EC5 pSearchPattern_InProcedure EQU 0x00023EDD pSearchPattern EQU 0x00023F5F c_GDT EQU 0x00024360 pPrintInfo_GDT_LDT EQU 0x000245B4 c_IDT_PrintInfo EQU 0x000246F8 pPrintInfo_IDT EQU 0x0002475B pPrintSelectorOffset EQU 0x00024B0C pPrint_Dword EQU 0x00024B2B pPM_01xx EQU 0x00024B36 c_PHYS EQU 0x00024F19 c_PHYS_ EQU 0x00024F53 pPEEK_POKE_CALL_EBX EQU 0x0002506E pPEEK_LinAddr EQU 0x000250C3 pPEEK_B EQU 0x000250D8 pPEEK_W EQU 0x000250FD pPEEK_D EQU 0x00025123 pPOKE_B EQU 0x00025148 pPOKE_W EQU 0x0002516B pPOKE_D EQU 0x0002518E pRDTSC_AtIntExit EQU 0x000251B1 pRDTSC_AtIntEntry EQU 0x000251D9 pRDTSC EQU 0x00025200 pPrintExecTime EQU 0x0002520F pPrintExecTime_ EQU 0x00025277 pCalibrate_INT8 EQU 0x00025398 pCPUID EQU 0x000253C2 pCalibrateBy_Timer EQU 0x000254AE c_WF_D EQU 0x000254FE pPrintFPUStatusWord EQU 0x00025681 pPrintFPUControlWord EQU 0x000256A2 pPrintFPUStatusWord_ EQU 0x000256C3 pPrintFPUControlWord_ EQU 0x0002570A nullsub_7 EQU 0x000257F4 c_LHEAP_ EQU 0x000265D9 c_TASK_ EQU 0x00026851 c_MOD_ EQU 0x00026CD6 pWalkTaskList EQU 0x00026EDD pGetLinAddr_selKernel32SomeThing EQU 0x000272FA pMapSelectorToLinAddr EQU 0x000273CA pClearLogLine EQU 0x000274C7 pGetBase_LDT EQU 0x000274E0 pAddressToSymbol EQU 0x00027507 jAddressToSymbol_Exit EQU 0x00027813 pWalkDDBChain EQU 0x00027E1B pGetVMM_API_offsets EQU 0x00027E4E pPageIn_AL_EDI EQU 0x00028065 pINT_41 EQU 0x000280A6 pINT_41_0150__ EQU 0x000285A5 pINT3_FGJM_80xx EQU 0x000287D1 pINT3_FGJM_82xx EQU 0x00028835 pINT3_FGJM_83xx EQU 0x00028901 pDeviceIO_9 EQU 0x000289A2 nullsub_15 EQU 0x00028A81 c_EXP EQU 0x00028AF8 c_WMSG EQU 0x00028D1E c_NTCALL EQU 0x00028DD0 pGetModuleName EQU 0x00028DD5 pFindModuleByName EQU 0x00028E90 pINT_41_0040 EQU 0x000290AF pINT3_FGJM_09xx EQU 0x000299B4 pINT3_FGJM_09xx_OK EQU 0x000299DD pINT3_FGJM_0900 EQU 0x00029A55 pFindEntryPoint EQU 0x00029FAC pINT3_FGJM_0904_0905 EQU 0x0002A0B7 pINT3_FGJM_0903 EQU 0x0002A466 pINT3_FGJM_090E EQU 0x0002A551 pINT3_FGJM_0907 EQU 0x0002A75F pINT3_FGJM_0908 EQU 0x0002A83B pINT3_FGJM_0909 EQU 0x0002A87F pINT3_FGJM_090A EQU 0x0002A8EE pINT3_FGJM_090B_090D EQU 0x0002A903 pINT3_FGJM_090C EQU 0x0002AA31 pINT3_FGJM_0918 EQU 0x0002AA47 pINT3_FGJM_0919 EQU 0x0002AAB3 pFindSymbolInExe EQU 0x0002B0CC pPM_FF1F_ EQU 0x0002C349 c_SS EQU 0x0002CA1C c_FILE EQU 0x0002CBEA c_TABLE_AUTO EQU 0x0002CEF2 j_TABLE_AUTO EQU 0x0002CEFC pGetFSLiniarAddress EQU 0x0002D152 nullsub_4 EQU 0x0002DBE9 c_STACK_ EQU 0x0002DC80 c_STACK___ EQU 0x0002DC8E c__stack__ EQU 0x0002DDAD c_SYMLOC_X EQU 0x0002E3A5 pStrchr EQU 0x0002E5EA c_A_ EQU 0x0002E5FC pHasArgument EQU 0x0003026F pPrintQuestion EQU 0x0003035F pReadClientRegister_ EQU 0x0003043B pReadSerialChar EQU 0x000308D8 pSetSerialSpeed EQU 0x00031127 pReadSerial_Byte EQU 0x000311BA pSendSerial_Byte EQU 0x00031231 pAttachToSerialDevice EQU 0x00031699 pResetModem EQU 0x0003172C pGetModemResponse EQU 0x00031759 pSendSerial_Line EQU 0x00031799 pReadSerial_String EQU 0x000317BD pDelay_200ms EQU 0x000317F3 pDelayMilliSec EQU 0x00031800 pPrintChar_PAR EQU 0x0003221C pPrintChar_LPT_SER EQU 0x0003228A pPrintScreen EQU 0x0003229F pPrintChar_SER EQU 0x000322EE pStr2ShortReal EQU 0x00032344 pStr2LongReal EQU 0x00032BDA pPM_FF01 EQU 0x0003310F pPM_FF02 EQU 0x0003316A pPM_FF03 EQU 0x00033206 pPM_FF04 EQU 0x0003322F pPM_FF05 EQU 0x000333AC pPM_FF06 EQU 0x000333EF pPM_FF07 EQU 0x0003345E pPM_FF08 EQU 0x000334D1 pPM_FF09 EQU 0x000334ED pPM_FF0A EQU 0x00033508 pPM_FF0B EQU 0x00033586 pPM_FF0D EQU 0x000335AA pPM_FF0E EQU 0x000335C4 pPM_FF0F EQU 0x0003364E pPM_FF11 EQU 0x000336A0 pPM_FF12 EQU 0x000336EB pPM_FF15 EQU 0x0003370C pPM_FF16 EQU 0x000337CD pPM_FF17 EQU 0x00033810 pPM_FF18 EQU 0x00033876 pPM_FF1A EQU 0x000339BF pPM_FF1B EQU 0x000339D2 pPM_FF1C EQU 0x00033A08 pPM_FF1D EQU 0x00033A64 pPM_FF1E EQU 0x00033AAA pPM_FF1F EQU 0x00033AD4 pSwitchContext_InWinice EQU 0x00033C58 pGetCurrentContext EQU 0x000340E6 pSaveRestoreContextInfo EQU 0x0003415F pINT_41_0070 EQU 0x00034304 pINT_41_0071 EQU 0x00034315 pINT_41_0072 EQU 0x00034326 pINT_41_0074 EQU 0x00034346 pINT_41_0073 EQU 0x0003435C pINT_41_0075 EQU 0x000343C5 pINT_41_0076 EQU 0x000343E6 pINT_41_0078 EQU 0x00034437 pINT_41_0079 EQU 0x0003446B pINT_41_0080 EQU 0x000346EE pHandleFaultIn_DOT_QUERY EQU 0x0003474D pFindDotCommand EQU 0x000347D7 pRegisterDotCommand EQU 0x000347FE c_DOT_VXDNAME_? EQU 0x00034825 c_DOT_VXDNAME_ EQU 0x0003486D pDotCommand_FaultHandler EQU 0x000348D7 pSaveClientRegisters_ EQU 0x0003496C c_VER_DOT_ EQU 0x000349F1 pStrend EQU 0x00034B24 pINT_41_0050 EQU 0x00034B40 pINT_41_0152 EQU 0x00034C8A pINT_41_0052 EQU 0x00034D05 pINT_41_0065 EQU 0x00034D64 pINT_41_0066 EQU 0x00034DE3 pINT_41_0064 EQU 0x00034E85 pINT_41_007x_PrintRegs EQU 0x00034F17 pNew_VMM_12D EQU 0x00035047 pNew_VMM_F3 EQU 0x0003505B pNew_VMM_C2 EQU 0x00035072 jNew_VMM_C2_next EQU 0x000350A2 jNew_VMM_C2_TAB EQU 0x000350E9 jNew_VMM_C2_QUESTIONMARK EQU 0x00035100 jNew_VMM_C2_HASHMARK EQU 0x0003515D jNew_VMM_C2_LF EQU 0x00035200 pINT_41_0002_0012 EQU 0x00035226 pINT_41_0001 EQU 0x00035255 pNew_VMM_C4 EQU 0x000352BB pINT_41_0000 EQU 0x000352F3 pINT_41_000F EQU 0x00035315 pBeep EQU 0x00035351 c_VER_ EQU 0x000353AD c_VER_ICE EQU 0x00035503 c_VER_LIN_ EQU 0x00035616 c_VER_ADD_ EQU 0x00035662 c_VER_ADD__ EQU 0x0003572D c_VER_EXP_ EQU 0x0003581E c_VER_SYM_ EQU 0x00035AED pINT_41_0152_ EQU 0x00035CD6 pINT_41_F003 EQU 0x00035E3F pINT_41_0150_3_2 EQU 0x000361A6 pINT_41_0150 EQU 0x00036261 pINT_41_0152__ EQU 0x000362E9 c_MAP32 EQU 0x00036756 c_STACK__ EQU 0x00036C9F pCheckInternalStack EQU 0x000372E8 pPrintErrorToCommandWindow EQU 0x00037738 pPrintLine_Color EQU 0x0003775A pPrintLine_Help EQU 0x00037776 pPrintErrorMessage EQU 0x000377A5 pMemset EQU 0x00037837 pMemcopy EQU 0x00037886 pMapSelectorOffsetToLinAddr EQU 0x000379CA pCopyDword EQU 0x000379F5 pCopyWord EQU 0x00037A20 pCopyByte EQU 0x00037A4C pWriteDword EQU 0x00037A77 pReadArea EQU 0x00037A97 pMOV_EAX_PTR_EBX EQU 0x00037ACD pINT3 EQU 0x00037ACF c_PAGEIN__ EQU 0x00037AD0 pINT3_CleanupForPAGEIN EQU 0x00037B64 pSwitchContext EQU 0x00037BA0 pGetNumber EQU 0x00037E8B c_addr_ EQU 0x0003823F pEvaluateProcessType EQU 0x00038412 pGetCurrentThreadAndProcessPointers EQU 0x000384C4 c_THREAD EQU 0x00038582 c_ADDR EQU 0x00038609 pPrintADDRResults EQU 0x000386BB c_NTCALL_ EQU 0x00038758 c_query_ EQU 0x00038894 query_extendedinfo EQU 0x000388C1 query_alien_context EQU 0x000388D8 query_switch_to_next_context EQU 0x000388FD query_exec_query EQU 0x00038927 query_leave EQU 0x00038947 pHookMapViewOfImageSection EQU 0x00039587 pINT_2E EQU 0x0003A2AB nullsub_6 EQU 0x0003A7D1 start EQU 0x0003AE8D pDeviceIOControl EQU 0x0003BABD pRegQueryKey EQU 0x0003C90C pPrintToBlueScreen EQU 0x0003C992 pStrcpy_ EQU 0x0003CC63 pSprintf_ EQU 0x0003CF3A pGetThreadStatus EQU 0x0003D630 pTHREAD_extended EQU 0x0003D6B7 c_THREAD__ EQU 0x0003DD6E j_THREAD__ret EQU 0x0003DE4E c_THREAD_ EQU 0x0003DE55 j_THREAD_R EQU 0x0003DEFF j_THREAD_U EQU 0x0003DF04 j_THREAD_X EQU 0x0003DF10 j_THREAD EQU 0x0003DF17 pInitTypeParsers_1 EQU 0x0003E1C6 jInitEvalStructs EQU 0x0003EDBE pInitEvalStructs EQU 0x0003EEC1 pParser_EVALUE EQU 0x00040A9B pExpression2Integer2_ EQU 0x00042CD2 pExpression2Integer_ EQU 0x00042D7A pExpression2Integer2 EQU 0x00042E8D pEval_Bx_IF EQU 0x00042F61 pGetNextThread? EQU 0x000442C4 c_PROC_ EQU 0x00046570 pStrncpy EQU 0x00047859 pStrlen__ EQU 0x0004789A pIsWhiteSpace EQU 0x00047A23 pWaitForOneKey? EQU 0x00047D48 pGetPrintLineStatus EQU 0x00047D8C pPrintf EQU 0x00047FBD pSprintf EQU 0x0004818C pMakeArgvFromCommandLine EQU 0x000484E1 pIsNullPointer EQU 0x00048764 pGetStructMember EQU 0x00048799 pSetErrno EQU 0x000488A9 pGetErrno EQU 0x000488B9 c_XFRAME__ EQU 0x000490B3 c_OBJDIR_ EQU 0x0004C033 c_DEVICE_ EQU 0x0004C37D c_FOBJ_ EQU 0x0004D1B9 c_objtab_ EQU 0x0004D7AB pGet_NT_Checked EQU 0x0004E143 pGet_NT_Build EQU 0x0004E14A pGet_NT_Version_Major EQU 0x0004E151 pGet_NT_Version_Minor EQU 0x0004E15C pGet_NT_Version EQU 0x0004E167 pIsIt_NT_v331_or_b1057 EQU 0x0004E16E pGetNTInfo EQU 0x0004E18F c_BSTAT_ EQU 0x0004E7F1 c_WHAT__ EQU 0x0004F495 pParseMacro EQU 0x00051B19 pEval_Bx_DO EQU 0x00051CFD c_MACRO_ EQU 0x00051D38 pParseUserCommand EQU 0x000520A2 pParse_EXCLUDE_SIWVIDRANGE EQU 0x00052A83 pDeleteSymbolTable__ EQU 0x00055701 nullsub_2 EQU 0x0005572D pDeleteSymbolTable_ EQU 0x00055730 pDeviceIO_3 EQU 0x00055D05 c_SYM_ EQU 0x0005AC2A c_TYPES_ EQU 0x0005AEE5 c_PEEK_ EQU 0x0005B1DB c_POKE_ EQU 0x0005B30C c_ALTSCR_ EQU 0x0005B461 pInitUpdateFunctions_Base EQU 0x0005B6C4 nullsub_16 EQU 0x0005B6E5 nullsub_17 EQU 0x0005B6E6 nullsub_18 EQU 0x0005B6E7 nullsub_19 EQU 0x0005B6ED pUpdateBase_38 EQU 0x0005B6F0 pUpdateBase_20 EQU 0x0005B6F9 pUpdateBase_44 EQU 0x0005B712 pUpdateBase_00 EQU 0x0005B78C pInitUpdateFunctions_Locals EQU 0x0005BA46 pUpdateLocals_44 EQU 0x0005BD5A pPrintLocals_ EQU 0x0005BF6B pInitUpdateFunctions_Watches EQU 0x0005C491 pUpdateWatches_44 EQU 0x0005C5BB pPrintWatches_ EQU 0x0005C946 c_PCI_QueryPCIRegisters EQU 0x0005CC49 c_PCI_Query_BusDeviceFunction EQU 0x0005CDB5 c_PCI_ EQU 0x0005D2EC c_fiber_ EQU 0x0005D5D1 c_width_ EQU 0x0005E980 pAllocateHeapBlock EQU 0x0005FB4E pHeapFree EQU 0x0005FB80 c_PAGEIN_ EQU 0x0005FBAA jPAGEIN_error EQU 0x0005FD2B j_memcpy EQU 0x0005FECA j__purecall EQU 0x0005FED0 j_RtlUnwind EQU 0x0005FED6 tPAGEIN_argv EQU 0x000858D8 oRegistryPath EQU 0x00085E44 Service_Table_0 EQU 0x00085F60 SDK_Version_0 EQU 0x00085F74 Req_Device_Number_0 EQU 0x00085F76 Dev_Major_Version_0 EQU 0x00085F78 Dev_Minor_Version_0 EQU 0x00085F79 Flags_0 EQU 0x00085F7A Name_0 EQU 0x00085F7C Init_Order_0 EQU 0x00085F84 Control_Proc_0 EQU 0x00085F88 V86_API_Proc_0 EQU 0x00085F8C PM_API_Proc_0 EQU 0x00085F90 V86_API_CSIP_0 EQU 0x00085F94 PM_API_CSIP_0 EQU 0x00085F98 Reference_Data_0 EQU 0x00085F9C Service_Table_Ptr_0 EQU 0x00085FA0 Service_Size_0 EQU 0x00085FA4 fNOPAGE EQU 0x00085FCC oFaultHookAddress EQU 0x000884F2 fHotKeyControlStatus EQU 0x000885C1 bHotKeyScanCode_Control EQU 0x000885C2 bScanCode_Release_LALT EQU 0x000885C6 bHotKeyScanCode_Char EQU 0x0008D6F1 wWINICE_DS EQU 0x0008D6F2 dHotKeyHandle EQU 0x0008D6F4 fMainInitDone EQU 0x0008D6F8 fRedisplayClientRegisters EQU 0x0008D720 fExecuteMoreCommands EQU 0x0008D739 fClientMode EQU 0x0008D73B fPatched_VKD EQU 0x0008D8D5 oPrivateArenaTop EQU 0x0008E59B dCurrentScreenWidth EQU 0x0008E59F wKernel_FS EQU 0x000901B0 fLBRECORD EQU 0x0009025A fEXCLUDE EQU 0x000909F4 dClient_EAX EQU 0x00090A7D dClient_EBX EQU 0x00090A81 dClient_ECX EQU 0x00090A85 dClient_EDX EQU 0x00090A89 dClient_ESI EQU 0x00090A8D dClient_EDI EQU 0x00090A91 dClient_EBP EQU 0x00090A95 dClient_ESP EQU 0x00090A99 dClient_EIP EQU 0x00090A9D dClient_EFLAGS EQU 0x00090AA1 dClient_CS EQU 0x00090AA5 dClient_DS EQU 0x00090AA9 dClient_SS EQU 0x00090AAD dClient_ES EQU 0x00090AB1 dClient_FS EQU 0x00090AB5 dClient_GS EQU 0x00090AB9 dClient_CR2 EQU 0x00090ABD dClient_CR3 EQU 0x00090AC1 dClient_EAX_ EQU 0x00090AC5 dClient_EBX_ EQU 0x00090AC9 dClient_ECX_ EQU 0x00090ACD dClient_EDX_ EQU 0x00090AD1 dClient_ESI_ EQU 0x00090AD5 dClient_EDI_ EQU 0x00090AD9 dClient_EBP_ EQU 0x00090ADD dClient_ESP_ EQU 0x00090AE1 dClient_EIP_ EQU 0x00090AE5 dClient_EFLAGS_ EQU 0x00090AE9 dClient_CS_ EQU 0x00090AED dClient_DS_ EQU 0x00090AF1 dClient_SS_ EQU 0x00090AF5 dClient_ES_ EQU 0x00090AF9 dClient_FS_ EQU 0x00090AFD dClient_GS_ EQU 0x00090B01 dSafeReadRangeEnd EQU 0x00090C0A dSafeReadRangeBase EQU 0x00090C0E fVisible_Registers EQU 0x0009174A bStart_History EQU 0x00091750 bLength_Command EQU 0x00091756 bUserCommand EQU 0x00093E57 fTraceFlagOn EQU 0x000A36E0 fSerial_Connected EQU 0x000A36EA fSerial_Answer EQU 0x000A36EC dLastInterrupt EQU 0x000A6766 tWiniceBPs EQU 0x000A6788 bCounter_Free EQU 0x000BEA09 bCounter_BPINT EQU 0x000BEA0A bCounter_BPIO EQU 0x000BEA0B bCounter_BPM EQU 0x000BEA0C bCounter_BPR EQU 0x000BEA0D bCounter_BPX EQU 0x000BEA0E bCounter_BMSG EQU 0x000BEA0F tBPINT EQU 0x000BEA11 tBPIO_0 EQU 0x000BEE0D tBPIO EQU 0x000BEE11 tBPM_0 EQU 0x000BF20D tBPM EQU 0x000BF211 tBPR_0 EQU 0x000BF215 tBPR EQU 0x000BF611 tBPX_0 EQU 0x000BFA0D tBPX EQU 0x000BFA11 tBMSG_0 EQU 0x000BFE0D tBMSG EQU 0x000BFE11 tBPTables EQU 0x000C020D dLinAddrBreakPoints EQU 0x000C04D6 wCounterBP EQU 0x000C04DA fDEBUG EQU 0x000C191C fVER_TOUCH EQU 0x000C1B01 dCurrentContext EQU 0x000CEDA3 dPopupContext EQU 0x000CEDA7 fContextInfoSaved EQU 0x000CEDAB wRing3CodeSelector EQU 0x000D3850 wRing3DataSelector EQU 0x000D3852 fPAGEIN_InProgress EQU 0x000D3977 tClientRegisters_Save EQU 0x000D397B oPAGEIN_INT3 EQU 0x000D39C3 fTHREAD_U EQU 0x000D5670 fTHREAD_U_ EQU 0x000D5674 dErrno EQU 0x000DC648 wNT_Checked EQU 0x000E0008 wNT_Build EQU 0x000E000C wNT_Version EQU 0x000E0010 wNT_UniProcessor EQU 0x000E0014 ExAcquireFastMutex EQU 0x000EBC90 ExReleaseFastMutex EQU 0x000EBC94 KdComPortInUse EQU 0x000EBC98 HalInitializeProcessor EQU 0x000EBC9C KeBugCheckEx EQU 0x000EBCA4 DbgBreakPoint EQU 0x000EBCA8 PsCreateSystemProcess EQU 0x000EBCAC MmIsAddressValid EQU 0x000EBCB0 NtSetSecurityObject EQU 0x000EBCB4 ExRaiseDatatypeMisalignment EQU 0x000EBCB8 ExAllocatePoolWithTag EQU 0x000EBCBC ExFreePool EQU 0x000EBCC0 PsInitialSystemProcess EQU 0x000EBCC4 KeInitializeEvent EQU 0x000EBCC8 IoRegisterShutdownNotification EQU 0x000EBCCC MmMapIoSpace EQU 0x000EBCD0 IoDeleteDevice EQU 0x000EBCD4 IoCreateSymbolicLink EQU 0x000EBCD8 IoCreateDevice EQU 0x000EBCDC RtlInitUnicodeString EQU 0x000EBCE0 ZwClose EQU 0x000EBCE4 ObfDereferenceObject EQU 0x000EBCE8 ObReferenceObjectByHandle EQU 0x000EBCEC ZwOpenDirectoryObject EQU 0x000EBCF0 RtlFreeAnsiString EQU 0x000EBCF4 MmUnmapViewOfSection EQU 0x000EBCF8 strstr EQU 0x000EBCFC IofCompleteRequest EQU 0x000EBD00 IoDeleteSymbolicLink EQU 0x000EBD04 MmUnmapIoSpace EQU 0x000EBD08 RtlFreeUnicodeString EQU 0x000EBD0C ZwQueryValueKey EQU 0x000EBD10 ZwOpenKey EQU 0x000EBD14 RtlAppendUnicodeToString EQU 0x000EBD18 RtlCopyUnicodeString EQU 0x000EBD1C RtlAnsiStringToUnicodeString EQU 0x000EBD20 RtlInitAnsiString EQU 0x000EBD24 ZwCreateFile EQU 0x000EBD28 ZwReadFile EQU 0x000EBD2C IoGetDeviceObjectPointer EQU 0x000EBD30 ZwWriteFile EQU 0x000EBD34 ZwQueryInformationFile EQU 0x000EBD38 KeDelayExecutionThread EQU 0x000EBD3C memcpy EQU 0x000EBD40 _purecall EQU 0x000EBD44 RtlUnwind EQU 0x000EBD48 MmIsThisAnNtAsSystem EQU 0x000EBD4C IoDisconnectInterrupt EQU 0x000EBD50 IoConnectInterrupt EQU 0x000EBD54 RtlUnicodeStringToAnsiString EQU 0x000EBD58 IoQueryDeviceDescription EQU 0x000EBD5C