Cracking 2

home *** CD-ROM | disk | FTP | other *** search

/ Cracking 2 / Cracking II..iso / Tools / icedump 6.018 and nticedump 1.9 / wnt / src / ntice323.inc < prev next >

Wrap

Text File | 2000-02-26 | 37.8 KB | 808 lines

Control_0 EQU 0x00010316 jSET_DEVICE_FOCUS EQU 0x0001052A jDESTROY_VM EQU 0x00010566 pSavePort_21_A1 EQU 0x00010585 pRestorePort_21_A1 EQU 0x000105A7 nullsub_11 EQU 0x000108ED nullsub_12 EQU 0x000108EE nullsub_13 EQU 0x00010919 pNew_VMM_F5 EQU 0x0001098F pPatch_VKD EQU 0x000109AD nullsub_10 EQU 0x00010A45 PM_0 EQU 0x00010A4E V86_0 EQU 0x00010A8F unkserv_0 EQU 0x00010B01 unkserv_2 EQU 0x00010B08 unkserv_3 EQU 0x00010B11 nullsub_8 EQU 0x00010B21 unkserv_1 EQU 0x00010B22 pDefaultWiniceIntHandler EQU 0x00010B24 pINT_06 EQU 0x00010CD0 pINT_0B EQU 0x00010DB5 pINT_0C EQU 0x00010F23 pINT_0D EQU 0x00010F87 pINT_0E EQU 0x000113DD pIRQ_3 EQU 0x00011889 pIRQ_4 EQU 0x000118BE pIRQ_C EQU 0x000119C1 pINT_37 EQU 0x000119F2 pINT_01 EQU 0x00011A0C pINT_03 EQU 0x00011D77 pIRQ_1 EQU 0x00012131 pKbdWaitMbOutputReady EQU 0x000122F5 pPutBackScanCode EQU 0x0001230C pINT_02 EQU 0x00012806 pProcessBeforeIRET EQU 0x00012990 pRestoreLDTR EQU 0x00012DE3 pInvalidateLDTR EQU 0x00012E06 pPrintMessage_HotKey EQU 0x00013062 pEnterWiniceBySelfTrace EQU 0x000131CF pVKD_PUT_BYTE EQU 0x00013201 pPrintBreakReason_ EQU 0x000132F0 pGetDisplayDriverEntryPoint EQU 0x00013526 nullsub_9 EQU 0x00013570 nullsub_14 EQU 0x00013596 pSwapIDT_INT_0E EQU 0x000137BA pHookFaults_IDT EQU 0x00013854 pSetWiniceIRQs EQU 0x000139C6 pIoConnectInterrupt_2_ EQU 0x00013A85 dSetIDTVector_CR0 EQU 0x00013A9F pHookInt_IDT EQU 0x00013AA3 pUnHookInt_IDT EQU 0x00013AF9 pReHookInt_IDT EQU 0x00013B28 pSetIDTVector_ EQU 0x00013B6D pGetWiniceIntJumpTableOffset EQU 0x00013BEE pInitWiniceIntHandlerJumpTable EQU 0x00013C10 pSaveDRx EQU 0x00013D2D pINT_02_IOAPIC EQU 0x00013E9D pSaveRegisters_APIC EQU 0x00013F55 pGetBase_Initial_FS EQU 0x00014020 pGetFSLinearAddress EQU 0x0001403D pSaveAllRegisters EQU 0x0001404B pSaveProcessorRegisters EQU 0x00014184 pSaveCPUID EQU 0x000141FB pGetNumOfProcesors EQU 0x00014350 pMapIRQ2INT EQU 0x000143A6 pSendEOI EQU 0x000143D0 pSendEOI_ EQU 0x0001441F pEnableIRQ EQU 0x00014457 pDisableIRQ EQU 0x000144C6 pEnableIRQ_IOAPIC EQU 0x0001451D pDisableIRQ_IOAPIC EQU 0x00014579 pDisableAllIRQs EQU 0x00014598 pDisableAllIRQs_IOAPIC EQU 0x0001463A pGetIRQStatus_IOAPIC EQU 0x00014718 pSetIRQStatus_IOAPIC EQU 0x00014735 pGetIRQStatus_IOAPIC_ EQU 0x00014752 pSetIRQStatus_IOAPIC_ EQU 0x00014769 c_CPU_i EQU 0x000147DC c_CPU_i_ EQU 0x0001484E c_CPU EQU 0x00014910 jCPU_InvalidProcID EQU 0x000149A1 c_CPU_ProcID EQU 0x00014A9D pPrintCPUFeatures EQU 0x00014B4C pPrintSpecialRegisters EQU 0x00014C37 pPrintAPICInfo EQU 0x00014FE0 c_LBRECORD EQU 0x00015172 jLBRECORD_Disable EQU 0x000151C3 pRecordLastFaultInfo EQU 0x000151CF pRecordLastBranchInfo EQU 0x0001524F pPrintLastBranchInfo EQU 0x00015299 pInAlDx EQU 0x00015412 pOutDxEax EQU 0x0001541C pOutDxAl EQU 0x00015437 pByte2HexString EQU 0x00015445 pWord2HexString EQU 0x00015465 pDword2HexString EQU 0x00015482 pDword2DecimalString EQU 0x000154BD pWord2DecimalString EQU 0x000154EA pExcludePhysicalMemoryRange EQU 0x00015517 pIsBlockExcluded EQU 0x000155DB pMOV_AL_EDI_safe EQU 0x00015636 pMOV_AX_EDI_safe EQU 0x0001566D pMOV_EAX_EDI_safe EQU 0x000156A7 pMOV_AL_EDI EQU 0x000156E1 pMOV_AX_EDI EQU 0x000156F7 pMOV_EAX_EDI EQU 0x00015710 pPutFlatByte_safe EQU 0x00015729 pPutFlatByte EQU 0x00015773 pMOV_EDI_AX EQU 0x000157E5 pMOV_EDI_AX_safe EQU 0x000157FA pMOV_EDI_EAX_safe EQU 0x00015830 pMOV_EDI_EAX EQU 0x00015865 pREP_CMPSB EQU 0x00015879 pREP_MOVSB EQU 0x0001588B pREP_MOVSD EQU 0x000158A9 pREP_STOSD EQU 0x000158C7 pREP_STOSB EQU 0x000158D8 pREP_LODSB EQU 0x000158E5 pREP_LODSD EQU 0x000158F2 pREPNE_SCASB EQU 0x000158FF pREPNE_SCASW EQU 0x0001590D pMOD_ARG1_ARG0 EQU 0x00015936 pSkipWhiteSpace EQU 0x00015951 pSkipDelimiters EQU 0x00015962 pSkipNonWhiteSpace EQU 0x00015973 pGetDecimalDigit EQU 0x00015986 pGetHexDigit EQU 0x00015994 pGetDecimalNumber EQU 0x000159B0 pGetHexNumber EQU 0x000159EA pExpression2Integer EQU 0x00016121 pCheckAddres2 EQU 0x00016319 pCheckAddress EQU 0x0001634F pParseInitLine EQU 0x000163AA nullsub_1 EQU 0x000164C6 pPrintUserInfo EQU 0x000164C7 pSetupVideoRegisterInfo_ EQU 0x00016556 pPrintString EQU 0x00016602 pPrintEmptyLine EQU 0x0001671D pStrcpy EQU 0x00016870 pStrlen EQU 0x0001687E pToUpper EQU 0x00016896 pStrnicmp_ EQU 0x000168CB pMoveCursor EQU 0x00016909 pMoveCursor_ EQU 0x0001695D pUpdateSomeWindows EQU 0x000169F7 pPrintLine EQU 0x00016A16 pPrintQuestion_ EQU 0x00016A7B pUpdateAllWindows EQU 0x00016AD6 pUpdateHistoryWindow EQU 0x00016B21 pUpdateHistoryWindow_ EQU 0x00016BA3 pUpdateCodeWindow EQU 0x00016C1A pShowCodeWindow EQU 0x00017206 pUpdateWatchesWindow EQU 0x000172A1 pUpdateLocalsWindow EQU 0x00017321 pUpdateDataWindow EQU 0x00017333 pPrintGenericRegisters EQU 0x000178E7 pUpdateRegistersWindow EQU 0x000179A6 pGetRegisterColor EQU 0x00017DDD pPrintFlags EQU 0x00017E14 pSaveClientRegistersForDisplay EQU 0x00017E5A pGeneralProtectionFault EQU 0x00017E7A pSaveClientRegisters EQU 0x00017F0D pSaveAllClientRegisters EQU 0x0001801B pRestoreAllClientRegisters EQU 0x0001812A pMouse_SelectionOff EQU 0x00018F53 pMouse_CopyPaste EQU 0x000192E1 pMouse_Display EQU 0x000192F0 pMouse_Display_1 EQU 0x0001931D pMouse_UnAssemble_1 EQU 0x00019393 pMouse_UnAssemble EQU 0x0001943C pMouse_What EQU 0x00019469 pMouse_Previous EQU 0x0001948C pMouse_Previous_1 EQU 0x000195A0 pMouse_Previous_2 EQU 0x000195D5 pMouse_Copy_ EQU 0x00019809 pMouse_Paste_ EQU 0x0001986D nullsub_3 EQU 0x000198BF pEnableWin95Commands EQU 0x00019FE0 pExecUserCommand EQU 0x0001A02C pFindCommand EQU 0x0001A272 pPrintToCommandWindow_ EQU 0x0001A3C9 pV86_1 EQU 0x0001A4A5 pV86_0 EQU 0x0001A4B5 pInsertStringIntoBuffer EQU 0x0001AA4F pEmptyKeyboardBuffer EQU 0x0001B62A pReadOneKey EQU 0x0001B642 pProgramLEDs EQU 0x0001B79B pKbdWaitMbInputReady EQU 0x0001B804 pProcessScanCode EQU 0x0001B843 jProcessScanCode_Translate EQU 0x0001B9AB pInsertCharIntoBuffer EQU 0x0001B9CB pSkipWord EQU 0x0001BA0C c_InvalidCommand EQU 0x0001BA2C pIsItOnOrOff EQU 0x0001BA38 c_WR EQU 0x0001BAF8 c_WHAT_ EQU 0x0001BBC4 c_WL EQU 0x0001BE72 c_WATCH EQU 0x0001C0D2 c_WW EQU 0x0001C1FF c_WC EQU 0x0001C34A c_F EQU 0x0001C47E c_S EQU 0x0001C57A jS_NoSearchInProgress EQU 0x0001C731 jS_PatternNotFound EQU 0x0001C738 jS_SyntaxError EQU 0x0001C73F jS_PrintMessage EQU 0x0001C744 c_M EQU 0x0001C983 c_EB EQU 0x0001CA82 c_EW EQU 0x0001CA92 c_ED EQU 0x0001CAA2 c_ES EQU 0x0001CAB2 c_EL EQU 0x0001CAC2 c_ET EQU 0x0001CAD2 c_E EQU 0x0001CAE2 pCopyDelimitedString EQU 0x0001CD02 pGetPattern EQU 0x0001CD16 c_C EQU 0x0001CD5D c_R EQU 0x0001CF3C pUpdateWindows EQU 0x0001D0D9 c_DL EQU 0x0001D11E c_DS EQU 0x0001D12E c_DT EQU 0x0001D13E c_D EQU 0x0001D14E pMouse_Display_2 EQU 0x0001D15A c_DATA EQU 0x0001D1CC c_DEX EQU 0x0001D20B c_EC EQU 0x0001D3BE c_U EQU 0x0001D3FF pMouse_UnAssemble_2 EQU 0x0001D40F c_X EQU 0x0001D581 c_T EQU 0x0001D601 c_P EQU 0x0001D807 c_G EQU 0x0001DB05 c_RS EQU 0x0001DDE3 c_ID EQU 0x0001DE0F c_IW EQU 0x0001DE16 c_I_IB EQU 0x0001DE1D c_O_OB EQU 0x0001DEEA c_I3HERE EQU 0x0001DFE4 c_SET_MOUSE EQU 0x0001E082 c_SET_WHEELLINES EQU 0x0001E119 c_CODE EQU 0x0001E16D c_?_H_HELP EQU 0x0001E1EC c_VER EQU 0x0001E3C7 c_CLS EQU 0x0001E404 c_ALTSCR EQU 0x0001E425 c_SERIAL EQU 0x0001E432 c_ALTKEY EQU 0x0001E630 c_FKEY EQU 0x0001E6EE c_COLOR EQU 0x0001E8B9 pIsTraceOn EQU 0x0001EA10 c_ZAP EQU 0x0001EA29 c_SRC EQU 0x0001EA6B c_TABS EQU 0x0001EB84 c_A EQU 0x0001EBCF c_FORMAT EQU 0x0001ECB3 c_LINES EQU 0x0001ED0D c_LINES_ EQU 0x0001EE17 c_SET EQU 0x0001EF8D pFindSetParameter_ EQU 0x0001F0C5 pFindSetParameter EQU 0x0001F0E9 pFindSetParameter__ EQU 0x0001F120 c_OBJTAB EQU 0x0001F181 c_ANSWER EQU 0x0001F19E pCopyUntilWhiteSpace EQU 0x0001F2CB c_DIAL EQU 0x0001F2E1 c_SET_VERBOSE EQU 0x0001F4C0 c_SET_LOWERCASE EQU 0x0001F509 c_SET_REFERENCE EQU 0x0001F541 c_SET_CASESENSITIVE EQU 0x0001F577 c_SET_THREADP EQU 0x0001F5B6 c_MACRO EQU 0x0001F61E c_TYPES EQU 0x0001F631 j_SYM_ EQU 0x0001F647 c_PEEK EQU 0x0001F652 c_POKE EQU 0x0001F65D c_PCI EQU 0x0001F668 c_FOBJ EQU 0x0001F673 c_WIDTH EQU 0x0001F695 c_PAGEIN EQU 0x0001F6A0 c_FIBER EQU 0x0001F6B6 pDetectMonoVideoCard EQU 0x0001F6CC pInitMonoVideoCard EQU 0x0001F7C7 c_CSIP EQU 0x0001FC20 c_BC_BD_BE EQU 0x0001FECE c_BL EQU 0x0001FFFF c_BPINT EQU 0x0002020F pPrintBPInfo_BPINT EQU 0x000202BC nullsub_24 EQU 0x000202DD nullsub_25 EQU 0x000202DE pEval_Bx EQU 0x000202DF c_BPX EQU 0x00020379 pPrintBPInfo_BPX EQU 0x0002077F pBE_BPX EQU 0x000207DE pBD_BPX EQU 0x00020810 pBD_BPX_BMSG EQU 0x00020828 pBD_BPX_BMSG_ EQU 0x000208C1 pPrintBPInfo_BMSG EQU 0x00020ABF j_pBE_BPX EQU 0x00020B88 c_BPM_BPMB EQU 0x00020BA5 c_BPMD EQU 0x00020BAA c_BPMW EQU 0x00020BAF pBE_BPM EQU 0x00020F62 pBD_BPM EQU 0x00020F94 pPrintBPInfo_BPIO EQU 0x000211F5 nullsub_6 EQU 0x00021238 pBD_BPIO EQU 0x00021239 pBPIOSetPortInPermissionMap EQU 0x00021245 c_BPR_RangeCheck EQU 0x000212F3 pRangeCheck EQU 0x00021433 pCheckDuplicateBP EQU 0x0002148C jNotDuplicateBP EQU 0x0002151F jItsDuplicateBP EQU 0x0002152F pAllocateBP EQU 0x000215C2 pSetupBPStruct EQU 0x00021713 pBP_SetModuleName EQU 0x00021823 c_BH EQU 0x000218DF oNew_PM_VMM_INT_0E_ EQU 0x00022000 pIdentifyWiniceBPINT EQU 0x00022D02 pDeactivateBPs EQU 0x00022F7A pDbgBreakPoint_1_ EQU 0x0002307D pDbgBreakPoint_2_ EQU 0x000230AE pActivateBPs EQU 0x00023253 pINT_41_F003_2 EQU 0x000235E2 pSetDRx EQU 0x0002363C pSetDR_01237 EQU 0x000236B3 pDisasmOneOpCode EQU 0x00023C34 pDisAsm_DOS_INT21 EQU 0x00023F26 pDisAsm_DPMI_INT31 EQU 0x00024092 pDisAsm_VMM_INT20 EQU 0x000240ED pDisAsm_JumpStatus EQU 0x000241DD jJECXZ EQU 0x0002429E jDisAsm_JMPs_nojmp EQU 0x000242B7 jDisAsm_JMPs_jmp EQU 0x000242BE jDisAsm_JMPs_ret EQU 0x000242F7 pDisAsm_AppendCharToLine EQU 0x0002438A pDisAsm_AppendBufferToLine EQU 0x000243DC pReadClientRegister EQU 0x00024453 pWriteClientRegister EQU 0x0002446C pDisAsm_SkipInLine EQU 0x0002449D pDisAsm_SkipPrefix EQU 0x000244C8 pMaximizeSomeRange EQU 0x000244EC pMaximizeSafeReadRange EQU 0x00024512 pSetFlag_Client_CS_32bit EQU 0x00024531 pSearchPattern_InProcedure EQU 0x00024549 pFindPattern EQU 0x000245CB c_GDT EQU 0x000249F0 pPrintInfo_GDT_LDT EQU 0x00024C44 c_IDT_PrintInfo EQU 0x00024D88 pPrintInfo_IDT EQU 0x00024DEB pPrintSelectorOffset EQU 0x0002519C pPrint_Dword EQU 0x000251BB pPM_01xx EQU 0x000251C6 c_PHYS EQU 0x000255A9 c_PHYS_ EQU 0x000255E3 pPEEK_POKE_CALL_EBX EQU 0x000256FE pPEEK_LinAddr EQU 0x00025753 pPEEK_B EQU 0x00025768 pPEEK_W EQU 0x0002578D pPEEK_D EQU 0x000257B3 pPOKE_B EQU 0x000257D8 pPOKE_W EQU 0x000257FB pPOKE_D EQU 0x0002581E pRDTSC_AtIntExit EQU 0x00025841 pRDTSC_AtIntEntry EQU 0x00025869 pRDTSC EQU 0x00025890 pPrintExecTime EQU 0x0002589F pPrintExecTime_ EQU 0x00025921 pCalibrateBy_Timer EQU 0x00025B83 pPrintFPUStatusWord EQU 0x00025D5D pPrintFPUControlWord EQU 0x00025D7E pPrintFPUStatusWord_ EQU 0x00025D9F pPrintFPUControlWord_ EQU 0x00025DE6 nullsub_15 EQU 0x00025F90 c_LHEAP_ EQU 0x00026D75 c_TASK_ EQU 0x00026FED c_MOD_ EQU 0x00027472 pWalkTaskList EQU 0x00027679 jWalkTaskList_error EQU 0x00027927 pGetLinAddr_selKernel32SomeThing EQU 0x00027A96 pMapSelectorToLinAddr EQU 0x00027B66 pClearLogLine EQU 0x00027C63 pGetBase_LDT EQU 0x00027C7C pAddressToSymbol EQU 0x00027CA3 jAddressToSymbol_Exit EQU 0x00027FAF c_VER_TOUCH EQU 0x00028801 pINT_41 EQU 0x00028842 pINT_41_0150_3 EQU 0x00028D41 pINT3_FGJM_80xx EQU 0x00028F6D pINT3_FGJM_82xx EQU 0x00028FD1 pINT3_FGJM_83xx EQU 0x0002909D pDeviceIO_9 EQU 0x0002913E nullsub_22 EQU 0x0002921D c_EXP EQU 0x00029294 c_WMSG EQU 0x000294BA j_c_NTCALL_ EQU 0x0002956C pGetModuleName EQU 0x00029571 pFindModuleByName EQU 0x0002962C pINT3_FGJM_09xx EQU 0x0002A150 pINT3_FGJM_09xx_OK EQU 0x0002A179 pINT3_FGJM_0900 EQU 0x0002A1F1 pFindEntryPoint EQU 0x0002A748 pINT3_FGJM_0904_0905 EQU 0x0002A853 pINT3_FGJM_0903 EQU 0x0002AC02 pINT3_FGJM_090E EQU 0x0002ACED pINT3_FGJM_0907 EQU 0x0002AEFB pINT3_FGJM_0908 EQU 0x0002AFD7 pINT3_FGJM_0909 EQU 0x0002B01B pINT3_FGJM_090A EQU 0x0002B08A pINT3_FGJM_090B_090D EQU 0x0002B09F pINT3_FGJM_090C EQU 0x0002B1CD pINT3_FGJM_0918 EQU 0x0002B1E3 pINT3_FGJM_0919 EQU 0x0002B24F pFindSymbolInExe EQU 0x0002B868 pPM_FF1F_ EQU 0x0002CAED c_SS EQU 0x0002D1C0 c_FILE EQU 0x0002D38E c_TABLE_AUTO EQU 0x0002D696 j_TABLE_AUTO EQU 0x0002D6A0 nullsub_5 EQU 0x0002E38D c_STACK_ EQU 0x0002E424 c_STACK___ EQU 0x0002E432 c__stack__ EQU 0x0002E551 c_SYMLOC_X EQU 0x0002EB49 pStrchr EQU 0x0002ED8E c_A_ EQU 0x0002EDA0 nullsub_4 EQU 0x00030804 pHasArgument EQU 0x00030B8B pPrintQuestion EQU 0x00030C7B pReadClientRegister_ EQU 0x00030D57 pReadSerialChar EQU 0x000311F4 pSetSerialSpeed EQU 0x00031A43 pReadSerial_Byte EQU 0x00031AD6 pSendSerial_Byte EQU 0x00031B4D pAttachToSerialDevice EQU 0x00031FB5 pResetModem EQU 0x00032048 pGetModemResponse EQU 0x00032075 pSendSerial_Line EQU 0x000320B5 pReadSerial_String EQU 0x000320D9 pDelay_200ms EQU 0x0003210F pDelayMilliSec EQU 0x0003211C pPrintChar_PAR EQU 0x00032B38 pPrintChar_LPT_SER EQU 0x00032BA6 pPrintChar_SER EQU 0x00032C25 pStr2ShortReal EQU 0x00032C7C pStr2LongReal EQU 0x00033512 pPM_FF01 EQU 0x00033A47 pPM_FF02 EQU 0x00033AA2 pPM_FF03 EQU 0x00033B3E pPM_FF04 EQU 0x00033B67 pPM_FF05 EQU 0x00033CE4 pPM_FF06 EQU 0x00033D27 pPM_FF07 EQU 0x00033D96 pPM_FF08 EQU 0x00033E09 pPM_FF09 EQU 0x00033E25 pPM_FF0A EQU 0x00033E40 pPM_FF0B EQU 0x00033EBE pPM_FF0D EQU 0x00033EE2 pPM_FF0E EQU 0x00033EFC pPM_FF0F EQU 0x00033F86 pPM_FF11 EQU 0x00033FD8 pPM_FF12 EQU 0x00034023 pPM_FF15 EQU 0x00034044 pPM_FF16 EQU 0x00034105 pPM_FF17 EQU 0x00034148 pPM_FF18 EQU 0x000341AE pPM_FF1A EQU 0x000342F7 pPM_FF1B EQU 0x0003430A pPM_FF1C EQU 0x00034340 pPM_FF1D EQU 0x0003439C pPM_FF1E EQU 0x000343E2 pPM_FF1F EQU 0x0003440C pSwitchContext_InWinice EQU 0x00034590 c_VER_CON_ EQU 0x000349D1 pINT_41_0070 EQU 0x00034C3C pINT_41_0071 EQU 0x00034C4D pINT_41_0072 EQU 0x00034C5E pINT_41_0074 EQU 0x00034C7E pINT_41_0073 EQU 0x00034C94 pINT_41_0075 EQU 0x00034CFD pINT_41_0076 EQU 0x00034D1E pINT_41_0077 EQU 0x00034D40 pINT_41_0078 EQU 0x00034D6F pINT_41_0079 EQU 0x00034DA3 pINT_41_007A EQU 0x00034DBF pINT_41_007B EQU 0x00034F95 pINT_41_007F EQU 0x00034FAE pINT_41_0080 EQU 0x00035026 pHandleFaultIn_DOT_QUERY EQU 0x00035085 nullsub_20 EQU 0x000350B6 pINT_41_0084 EQU 0x000350BF pFindDotCommand EQU 0x0003510F pRegisterDotCommand EQU 0x00035136 c_DOT_VXDNAME_? EQU 0x0003515D c_DOT_VXDNAME_ EQU 0x000351A5 pDotCommand_FaultHandler EQU 0x0003520F pSaveClientRegisters_ EQU 0x000352A4 c_VER_DOT_ EQU 0x00035329 nullsub_21 EQU 0x0003545B pStrend EQU 0x0003545C pINT_41_0050 EQU 0x00035478 pINT_41_0152_1 EQU 0x000355C2 pINT_41_0052 EQU 0x0003563D pINT_41_0065 EQU 0x0003569C pINT_41_0066 EQU 0x0003571B pINT_41_0064 EQU 0x000357BD pINT_41_007x_PrintRegs EQU 0x0003584F pNew_VMM_12D EQU 0x0003597F pNew_VMM_F3 EQU 0x00035993 pINT_41_0002_0012 EQU 0x00035C05 pINT_41_0001 EQU 0x00035C34 pNew_VMM_C4 EQU 0x00035C9A pNew_VMM_C3 EQU 0x00035CC6 pINT_41_0000 EQU 0x00035CD2 pINT_41_000F EQU 0x00035CF4 pBeep EQU 0x00035D30 c_VER_ EQU 0x00035D8C c_VER_QUE EQU 0x00035DCD c_VER_INT EQU 0x00035DD7 c_VER_ADD EQU 0x00035DE6 c_VER_CON EQU 0x00035E10 c_VER_DEB EQU 0x00035E3D c_VER_BRE EQU 0x00035E4C c_VER_EXP EQU 0x00035E75 c_VER_SYM EQU 0x00035E7F c_VER_TES EQU 0x00035E89 c_VER_DOT EQU 0x00035E93 c_VER_PHY EQU 0x00035E9D c_VER_SIO EQU 0x00035EE2 c_VER_LIN EQU 0x0003603B c_VER_LIN_ EQU 0x00036046 c_VER_ADD_1 EQU 0x00036092 c_VER_ADD_2 EQU 0x0003615D c_VER_EXP_ EQU 0x0003624E c_VER_BRE_DEB EQU 0x000363AE c_VER_SYM_ EQU 0x0003651D pINT_41_0152_2 EQU 0x00036706 pINT_41_F003_1 EQU 0x0003686F pINT_41_0150_3_2 EQU 0x00036BD6 pINT_41_0150_1 EQU 0x00036C91 pINT_41_0152_3 EQU 0x00036D19 c_MAP32 EQU 0x00037186 c_STACK__ EQU 0x000376CF pCheckInternalStack EQU 0x00037D18 pPrintErrorMessage EQU 0x00038168 pPrintErrorToCommandWindow EQU 0x00038179 pPrintLine_Color EQU 0x0003818A pPrintLine_Help EQU 0x000381A6 pMemset EQU 0x00038277 pMemcopy EQU 0x000382C6 pMapSelectorOffsetToLinAddr EQU 0x0003840A pCopyDword EQU 0x00038435 pCopyWord EQU 0x00038460 pCopyByte EQU 0x0003848C pWriteDword EQU 0x000384B7 pReadArea EQU 0x000384D7 jPAGEIN_INT3 EQU 0x0003850F c_PAGEIN__ EQU 0x00038510 pINT3_CleanupForPAGEIN EQU 0x000385A4 pSwitchContext EQU 0x000385E0 pGetNumber EQU 0x000388CB c_addr_ EQU 0x00038C7F pEvaluateProcessType EQU 0x00038E59 pGetCurrentThreadAndProcessPointers EQU 0x00038F0B c_ADDR EQU 0x00039068 pPrintADDRResults EQU 0x0003911A c_NTCALL_ EQU 0x000391B7 c_query_ EQU 0x000392F3 query_extendedinfo EQU 0x00039320 query_alien_context EQU 0x00039337 query_switch_to_next_context EQU 0x0003935C query_exec_query EQU 0x00039386 query_leave EQU 0x000393A6 c_VER_QUE_ EQU 0x000396C2 c_VER_PHY_ EQU 0x00039B4B c_VER_TES_ EQU 0x00039E3F pHook_MapViewOfImageSection EQU 0x0003A00C jHook_MVOIS_Fail EQU 0x0003A084 pHook_AddValidPageToWorkingSet EQU 0x0003A091 jHook_AVPTWS_fail EQU 0x0003A15F pHook_MiCopyOnWrite EQU 0x0003A16C jHook_MCOW_fail EQU 0x0003A1BB pHook_RtlAssert EQU 0x0003A1C9 pIoConnectInterrupt_1 EQU 0x0003A510 pIoConnectInterrupt_1_ EQU 0x0003A519 pIoDisconnectInterrupt_2_ EQU 0x0003A565 pIoConnectInterrupt_2 EQU 0x0003A5DE pIoDisconnectInterrupt_1 EQU 0x0003A5FC pIoDisconnectInterrupt_2 EQU 0x0003A61B pMmIsThisAnNtAsSystem_1 EQU 0x0003A634 pMmIsThisAnNtAsSystem_2 EQU 0x0003A72B pMmIsThisAnNtAsSystem_2_ EQU 0x0003A7B8 jMmIsThisAnNtAsSystem_2_Start EQU 0x0003A7F7 jMmIsThisAnNtAsSystem_2_End EQU 0x0003A834 pMmUnmapViewOfFile_1 EQU 0x0003A8F8 pMmUnmapViewOfFile_2 EQU 0x0003A9E5 pDbgBreakPoint_1 EQU 0x0003A9F9 pDbgBreakPoint_2 EQU 0x0003A9FF pINT_2D EQU 0x0003AA18 pINT_2E EQU 0x0003AD87 tMmIsAddressValid_1 EQU 0x0003B2AD tMmIsAddressValid_2 EQU 0x0003B2AE pKeBugCheck_1 EQU 0x0003B2D3 pKeBugCheck_2 EQU 0x0003B409 pHalDisplayString_1 EQU 0x0003B41D pHalDisplayString_2 EQU 0x0003B425 pRtlAssert_1 EQU 0x0003B439 pRtlAssert_2 EQU 0x0003B47C start EQU 0x0003B91B pDispatchIo EQU 0x0003C298 devio_UnknownControlCode EQU 0x0003C305 devio_Leave EQU 0x0003C4F9 pDeviceIOControl EQU 0x0003C591 pRetriveRegistryValueLite EQU 0x0003D3E0 pPrintToBlueScreen EQU 0x0003D466 pGetUserInfo EQU 0x0003D696 pSprintf_ EQU 0x0003DA35 pInitTypeParsers_1 EQU 0x0003ECC1 jInitEvalStructs EQU 0x0003F8B9 pInitEvalStructs EQU 0x0003F9BC pParser_EVALUE EQU 0x00041599 pGetIRQLLevel EQU 0x0004169B pExpression2Integer2_ EQU 0x000437D0 pExpression2Integer2 EQU 0x0004395A pEval_Bx_IF EQU 0x00043A2E pGetPrintLineStatus EQU 0x00049FD1 pPrintf EQU 0x0004A202 pIsNullPointer EQU 0x0004A9AD pGetValueFromPCRB EQU 0x0004A9E2 c_XFRAME__ EQU 0x0004B2F5 c_OBJDIR_ EQU 0x0004E27C c_DEVICE_ EQU 0x0004E5C6 c_FOBJ_ EQU 0x0004F45D c_objtab_ EQU 0x0004FA4F pIsNTVersionSufficient EQU 0x000503E8 pGetNTInfo EQU 0x00050409 pGet_NT_Version EQU 0x00050459 pGet_NT_Version_Major EQU 0x00050460 pGet_NT_Check EQU 0x0005046B pPrintNTVersionInfo EQU 0x00050472 c_BSTAT_ EQU 0x00050A8B c_WHAT__ EQU 0x0005172F pParseMacro EQU 0x00053C15 pEval_Bx_DO EQU 0x00053DF9 c_MACRO_ EQU 0x00053E34 pParseUserCommand EQU 0x0005419E pParse_EXCLUDE_SIWVIDRANGE EQU 0x00054B7F pDeleteSymbolTable__ EQU 0x00057E9B nullsub_2 EQU 0x00057EC7 pDeleteSymbolTable_ EQU 0x00057ECA pDeviceIO_3 EQU 0x000584A0 c_SYM_ EQU 0x0005D3C5 c_TYPES_ EQU 0x0005D680 c_PEEK_ EQU 0x0005D976 c_POKE_ EQU 0x0005DAA7 c_ALTSCR_ EQU 0x0005DBFC pInitUpdateFunctions_Base EQU 0x0005DE5F nullsub_16 EQU 0x0005DE80 nullsub_17 EQU 0x0005DE81 nullsub_18 EQU 0x0005DE82 nullsub_19 EQU 0x0005DE88 pUpdateBase_38 EQU 0x0005DE8B pUpdateBase_20 EQU 0x0005DE94 pUpdateBase_44 EQU 0x0005DEAD pUpdateBase_00 EQU 0x0005DF27 pInitUpdateFunctions_Locals EQU 0x0005E1E1 pUpdateLocals_44 EQU 0x0005E4F5 pPrintLocals_ EQU 0x0005E706 pInitUpdateFunctions_Watches EQU 0x0005EC24 pUpdateWatches_44 EQU 0x0005ED4E pPrintWatches_ EQU 0x0005F0D7 c_PCI_QueryPCIRegisters EQU 0x0005F3D2 c_PCI_Query_BusDeviceFunction EQU 0x0005F56B c_PCI_ EQU 0x0005FA8A c_fiber_ EQU 0x0005FD6F c_width_ EQU 0x00061170 pAllocateHeapBlock EQU 0x0006233D pHeapFree EQU 0x0006236F c_PAGEIN_ EQU 0x00062399 nullsub_23 EQU 0x000626F8 j_strstr EQU 0x000626FA j__purecall EQU 0x00062892 j_RtlUnwind EQU 0x00062898 Service_Table_0 EQU 0x00088480 SDK_Version_0 EQU 0x00088494 Req_Device_Number_0 EQU 0x00088496 Dev_Major_Version_0 EQU 0x00088498 Dev_Minor_Version_0 EQU 0x00088499 Flags_0 EQU 0x0008849A Name_0 EQU 0x0008849C Init_Order_0 EQU 0x000884A4 Control_Proc_0 EQU 0x000884A8 V86_API_Proc_0 EQU 0x000884AC PM_API_Proc_0 EQU 0x000884B0 V86_API_CSIP_0 EQU 0x000884B4 PM_API_CSIP_0 EQU 0x000884B8 Reference_Data_0 EQU 0x000884BC Service_Table_Ptr_0 EQU 0x000884C0 Service_Size_0 EQU 0x000884C4 Win32_Service_Table_0 EQU 0x000884C8 Prev_0 EQU 0x000884CC Size_0 EQU 0x000884D0 Reserved1_0 EQU 0x000884D4 Reserved2_0 EQU 0x000884D8 Reserved3_0 EQU 0x000884DC fExecuteMoreCommands EQU 0x0008FC59 fClientMode EQU 0x0008FC5B fUsing_IOAPIC EQU 0x000926FF dPhysAddr_IOAPIC EQU 0x00092700 dLinAddr_IOAPIC EQU 0x00092704 dNumOfProcessors EQU 0x0009270C tIRQ2INT EQU 0x0009279A tSerial EQU 0x00092E64 tUser EQU 0x00092EB4 tCompany EQU 0x00092F04 dClient_EAX EQU 0x00092FDD dClient_EBX EQU 0x00092FE1 dClient_ECX EQU 0x00092FE5 dClient_EDX EQU 0x00092FE9 dClient_ESI EQU 0x00092FED dClient_EDI EQU 0x00092FF1 dClient_EBP EQU 0x00092FF5 dClient_ESP EQU 0x00092FF9 dClient_EIP EQU 0x00092FFD dClient_EFLAGS EQU 0x00093001 dClient_CS EQU 0x00093005 dClient_DS EQU 0x00093009 dClient_SS EQU 0x0009300D dClient_ES EQU 0x00093011 dClient_FS EQU 0x00093015 dClient_GS EQU 0x00093019 bUserCommand EQU 0x000963F7 dBreakReason EQU 0x000A8DC6 dCurrentContext EQU 0x000D18BF dPopupContext EQU 0x000D18C3 fPAGEIN_InProgress EQU 0x000D649B oPAGEIN_INT3 EQU 0x000D64E7 dMmMapViewOfFile_24 EQU 0x000D7580 dMmMapViewOfFile_30 EQU 0x000D7584 dMmMapViewOfFile_28 EQU 0x000D7588 tIoConnectInterrupt EQU 0x000D759F tIoDisconnectInterrupt EQU 0x000D75B0 tMmIsThisAnNtAsSystem EQU 0x000D75C1 tMmUnmapViewOfFile EQU 0x000D75D2 tMmIsAddressValid EQU 0x000D75E3 tKeBugCheck EQU 0x000D75F4 tDbgBreakPoint EQU 0x000D7605 tHalDisplayString EQU 0x000D7616 tRtlAssert EQU 0x000D7627 wNT_Check EQU 0x000E3CD0 wNT_Build EQU 0x000E3CD4 wNT_Version EQU 0x000E3CD8 wNT_Uniprocessor EQU 0x000E3CDC fHalDisplayString EQU 0x000F0018 ExAcquireFastMutex EQU 0x000F3D58 ExReleaseFastMutex EQU 0x000F3D5C HalDisplayString EQU 0x000F3D60 KdComPortInUse EQU 0x000F3D64 HalInitializeProcessor EQU 0x000F3D68 MmUnmapViewOfSection EQU 0x000F3D70 DbgBreakPoint EQU 0x000F3D74 PsCreateSystemProcess EQU 0x000F3D78 NtSetSecurityObject EQU 0x000F3D7C ExRaiseDatatypeMisalignment EQU 0x000F3D80 KeUpdateSystemTime EQU 0x000F3D84 RtlAssert EQU 0x000F3D88 ExAllocatePoolWithTag EQU 0x000F3D8C ExFreePool EQU 0x000F3D90 PsInitialSystemProcess EQU 0x000F3D94 KeInitializeEvent EQU 0x000F3D98 IoRegisterShutdownNotification EQU 0x000F3D9C MmMapIoSpace EQU 0x000F3DA0 IoDeleteDevice EQU 0x000F3DA4 IoCreateSymbolicLink EQU 0x000F3DA8 IoCreateDevice EQU 0x000F3DAC RtlInitUnicodeString EQU 0x000F3DB0 ZwClose EQU 0x000F3DB4 ObfDereferenceObject EQU 0x000F3DB8 ObReferenceObjectByHandle EQU 0x000F3DBC ZwOpenDirectoryObject EQU 0x000F3DC0 MmIsAddressValid EQU 0x000F3DC4 KeBugCheckEx EQU 0x000F3DC8 IoQueryDeviceDescription EQU 0x000F3DCC strstr EQU 0x000F3DD0 IofCompleteRequest EQU 0x000F3DD4 IoDeleteSymbolicLink EQU 0x000F3DD8 MmUnmapIoSpace EQU 0x000F3DDC RtlFreeUnicodeString EQU 0x000F3DE0 ZwQueryValueKey EQU 0x000F3DE4 ZwOpenKey EQU 0x000F3DE8 RtlAppendUnicodeToString EQU 0x000F3DEC RtlCopyUnicodeString EQU 0x000F3DF0 RtlAnsiStringToUnicodeString EQU 0x000F3DF4 RtlInitAnsiString EQU 0x000F3DF8 ZwCreateFile EQU 0x000F3DFC ZwReadFile EQU 0x000F3E00 IoGetDeviceObjectPointer EQU 0x000F3E04 ZwWriteFile EQU 0x000F3E08 ZwQueryInformationFile EQU 0x000F3E0C KeDelayExecutionThread EQU 0x000F3E10 _purecall EQU 0x000F3E14 RtlUnwind EQU 0x000F3E18 MmIsThisAnNtAsSystem EQU 0x000F3E1C IoDisconnectInterrupt EQU 0x000F3E20 IoConnectInterrupt EQU 0x000F3E24 RtlFreeAnsiString EQU 0x000F3E28 RtlUnicodeStringToAnsiString EQU 0x000F3E2C