Cracking 2

home *** CD-ROM | disk | FTP | other *** search

/ Cracking 2 / Cracking II..iso / Tools / icedump 6.018 and nticedump 1.9 / wnt / src / ntice405.inc < prev next >

Wrap

Text File | 2000-02-26 | 38.3 KB | 817 lines

ExReleaseFastMutex EQU 0x00010304 READ_PORT_UCHAR EQU 0x00010308 HalDisplayString EQU 0x0001030C KdComPortInUse EQU 0x00010310 HalInitializeProcessor EQU 0x00010314 ObReferenceObjectByHandle EQU 0x0001031C DbgBreakPoint EQU 0x00010320 ExRaiseDatatypeMisalignment EQU 0x00010324 KeUpdateSystemTime EQU 0x00010328 RtlAssert EQU 0x0001032C ZwTerminateProcess EQU 0x00010330 _snwprintf_0 EQU 0x00010334 _strnicmp_0 EQU 0x00010338 _wcsicmp_0 EQU 0x0001033C _wcsnicmp_0 EQU 0x00010340 DbgPrint_0 EQU 0x00010344 isspace_0 EQU 0x00010348 isprint_0 EQU 0x0001034C RtlCompareMemoryUlong_0 EQU 0x00010350 RtlCompareMemory_0 EQU 0x00010354 RtlCompareString_0 EQU 0x00010358 RtlCompareUnicodeString_0 EQU 0x0001035C RtlConvertSidToUnicodeString_0 EQU 0x00010360 RtlInitAnsiString_0 EQU 0x00010364 RtlInitString_0 EQU 0x00010368 RtlInitUnicodeString_0 EQU 0x0001036C RtlLengthRequiredSid_0 EQU 0x00010370 RtlLengthSid_0 EQU 0x00010374 RtlNumberGenericTableElements_0 EQU 0x00010378 RtlUnwind_0 EQU 0x0001037C RtlValidSid_0 EQU 0x00010380 RtlTimeToTimeFields_0 EQU 0x00010384 RtlTimeFieldsToTime_0 EQU 0x00010388 sprintf_0 EQU 0x0001038C strchr_0 EQU 0x00010390 strncmp_0 EQU 0x00010394 strncpy_0 EQU 0x00010398 strstr_0 EQU 0x0001039C swprintf_0 EQU 0x000103A0 tolower_0 EQU 0x000103A4 toupper_0 EQU 0x000103A8 vsprintf_0 EQU 0x000103AC wcscmp_0 EQU 0x000103B0 wcscpy_0 EQU 0x000103B4 wcslen_0 EQU 0x000103B8 qsort_0 EQU 0x000103BC ExAllocatePoolWithTag EQU 0x000103C0 ExFreePool EQU 0x000103C4 KeSetTimer EQU 0x000103C8 MmIsAddressValid EQU 0x000103CC KeBugCheckEx EQU 0x000103D0 MmGetPhysicalAddress EQU 0x000103D4 MmAllocateContiguousMemory EQU 0x000103D8 KeInitializeEvent EQU 0x000103DC IoRegisterShutdownNotification EQU 0x000103E0 PsInitialSystemProcess EQU 0x000103E4 KeServiceDescriptorTable EQU 0x000103E8 NtBuildNumber EQU 0x000103EC MmMapIoSpace EQU 0x000103F0 IoDeleteDevice EQU 0x000103F4 IoCreateSymbolicLink EQU 0x000103F8 IoCreateDevice EQU 0x000103FC KeWaitForSingleObject EQU 0x00010400 IofCallDriver EQU 0x00010404 IoBuildDeviceIoControlRequest EQU 0x00010408 memmove EQU 0x0001040C ZwClose EQU 0x00010410 ObfDereferenceObject EQU 0x00010414 ZwOpenDirectoryObject EQU 0x00010418 RtlFreeAnsiString EQU 0x0001041C RtlUnicodeStringToAnsiString_0 EQU 0x00010420 IoQueryDeviceDescription EQU 0x00010424 IofCompleteRequest EQU 0x00010428 IoDeleteSymbolicLink EQU 0x0001042C MmUnmapIoSpace EQU 0x00010430 KeCancelTimer EQU 0x00010434 IoGetDeviceObjectPointer EQU 0x00010438 RtlFreeUnicodeString_0 EQU 0x0001043C ZwWriteFile EQU 0x00010440 ZwCreateFile EQU 0x00010444 RtlAnsiStringToUnicodeString_0 EQU 0x00010448 KeDelayExecutionThread EQU 0x0001044C ZwOpenKey EQU 0x00010450 RtlAppendUnicodeToString EQU 0x00010454 ExReleaseResourceForThread EQU 0x00010458 ExInitializeResourceLite EQU 0x0001045C ZwQueryValueKey EQU 0x00010460 RtlCopyUnicodeString EQU 0x00010464 ZwReadFile EQU 0x00010468 ZwQueryInformationFile EQU 0x0001046C _purecall EQU 0x00010470 MmUnmapViewOfSection EQU 0x00010474 MmIsThisAnNtAsSystem EQU 0x00010478 IoDisconnectInterrupt EQU 0x0001047C IoConnectInterrupt EQU 0x00010480 KeInitializeDpc EQU 0x00010484 KeInitializeTimer EQU 0x00010488 j_start_ EQU 0x000280C1 start__ EQU 0x000280E1 jSET_DEVICE_FOCUS EQU 0x000282F2 jDESTROY_VM EQU 0x0002832E pSavePort_21_A1 EQU 0x0002834D pRestorePort_21_A1 EQU 0x0002836F nullsub_16 EQU 0x000283BE nullsub_17 EQU 0x000283BF pNew_VMM_F5 EQU 0x00028460 pPatch_VKD EQU 0x0002847E pWINICE_service_3 EQU 0x000285E2 nullsub_18 EQU 0x000285EE pDefaultWiniceIntHandler EQU 0x000285F1 pINT_06 EQU 0x0002879D pINT_0B EQU 0x00028882 pINT_0C EQU 0x000289F0 pINT_0D EQU 0x00028A54 pINT_0E EQU 0x00028EAA pIRQ_03 EQU 0x000293A5 pIRQ_04 EQU 0x00029403 pIRQ_0C EQU 0x0002952F pINT_37 EQU 0x00029585 pINT_01 EQU 0x0002959F pINT_03 EQU 0x0002990B pIRQ_01 EQU 0x00029D2F pKbdWaitMbOutputReady EQU 0x00029F34 pPutBackScanCode EQU 0x00029F4B pINT_02 EQU 0x0002A038 pNTICEMain EQU 0x0002A1C2 pRestoreLDTR EQU 0x0002A651 pInvalidateLDTR EQU 0x0002A674 pPrintMessage_HotKey EQU 0x0002A8D0 pEnterWiniceBySelfTrace EQU 0x0002AA3D pVKD_PUT_BYTE EQU 0x0002AA6F pGetDisplayDriverEntryPoint EQU 0x0002AE22 pNTICE EQU 0x0002AE5E nullsub_2 EQU 0x0002AE6C start_ EQU 0x0002AE6D nullsub_3 EQU 0x0002AE92 pGetOldIntHandler EQU 0x0002B007 pSwapIDT_INT_0E EQU 0x0002B0BA pHookFaults_IDT EQU 0x0002B154 pHookInt_IDT EQU 0x0002B44B pUnHookInt_IDT EQU 0x0002B4A5 pReHookInt_IDT EQU 0x0002B4D4 pHookInt_IDT_ EQU 0x0002B519 pGetWiniceIntJumpTableOffset EQU 0x0002B59A pInitWiniceIntHandlerJumpTable EQU 0x0002B5BC pGetVMMIntHandler EQU 0x0002B5E4 pSaveDRx EQU 0x0002B6D9 pINT_02_IOAPIC EQU 0x0002B849 pINT_02__ EQU 0x0002B885 pSaveRegisters_APIC EQU 0x0002B901 pGetBase_Initial_FS EQU 0x0002B9CC pGetFSLiniarAddress EQU 0x0002B9E9 pSaveAllRegisters EQU 0x0002B9F7 pSaveProcessorRegisters EQU 0x0002BB30 pSaveCPUID EQU 0x0002BBA7 pIRQ2INT EQU 0x0002BD95 pSendSpecificEOI EQU 0x0002BE30 pSendNonSpecificEOI EQU 0x0002BE54 pSendSpecificEOI_ EQU 0x0002BE80 pEnableIRQ EQU 0x0002BEC4 pDisableIRQ EQU 0x0002BF3F pDisableAllIRQs EQU 0x0002C00D pGetIRQStatus_IOAPIC EQU 0x0002C186 pGetIRQStatus_IOAPIC_ EQU 0x0002C1C4 c_CPU EQU 0x0002C3C4 jCPU_InvalidProcID EQU 0x0002C455 c_CPU_ProcID EQU 0x0002C551 pPrintCPUFeatures EQU 0x0002C600 pPrintSpecialRegisters EQU 0x0002C6EB pPrintAPICInfo EQU 0x0002CA94 c_LBRECORD EQU 0x0002CC26 jLBRECORD_Disable EQU 0x0002CC77 pRecordLastFaultInfo EQU 0x0002CC83 pRecordLastBranchInfo EQU 0x0002CD03 pPrintLastBranchInfo EQU 0x0002CD4D pInAxDx EQU 0x0002CEB7 pInAlDx EQU 0x0002CEC2 pOutDxEax EQU 0x0002CECC pOutDxAx EQU 0x0002CED7 pOutDxAl EQU 0x0002CEE7 pByte2HexString EQU 0x0002CEF5 pWord2HexString EQU 0x0002CF15 pDword2HexString EQU 0x0002CF32 pDword2DecimalString EQU 0x0002CF6D pWord2DecimalString EQU 0x0002CF9A pExcludePhysicalMemoryRange EQU 0x0002CFC7 pIsBlockExcluded EQU 0x0002D08B pMOV_AL_EDI_safe EQU 0x0002D0E6 pMOV_AX_EDI_safe EQU 0x0002D11D pMOV_EAX_EDI_safe EQU 0x0002D157 pMOV_AL_EDI EQU 0x0002D191 pMOV_AX_EDI EQU 0x0002D1A7 pMOV_EAX_EDI EQU 0x0002D1C0 pPutFlatByte_safe EQU 0x0002D20A pPutFlatByte EQU 0x0002D254 pMOV_EDI_AL EQU 0x0002D27D pMOV_EDI_AL_safe EQU 0x0002D291 pMOV_EDI_AX EQU 0x0002D2C6 pMOV_EDI_AX_safe EQU 0x0002D2DB pMOV_EDI_EAX_safe EQU 0x0002D311 pMOV_EDI_EAX EQU 0x0002D346 pREP_CMPSB EQU 0x0002D35A pREP_MOVSB EQU 0x0002D36C pREP_MOVSD EQU 0x0002D38A pREP_STOSD EQU 0x0002D3A8 pREP_STOSB EQU 0x0002D3B9 pREP_LODSB EQU 0x0002D3C6 pREP_LODSD EQU 0x0002D3D3 pREPNE_SCASB EQU 0x0002D3E0 pREPNE_SCASW EQU 0x0002D3EE pMOD_ARG1_ARG0 EQU 0x0002D44E pSkipWhiteSpace EQU 0x0002D469 pSkipDelimiters EQU 0x0002D47A pSkipNonWhiteSpace EQU 0x0002D48B pGetDecimalDigit EQU 0x0002D49E pGetHexDigit EQU 0x0002D4AC pGetDecimalNumber EQU 0x0002D4E2 pGetHexNumber EQU 0x0002D536 pExpression2Integer EQU 0x0002DC6F pCheckAddres2 EQU 0x0002DE67 pCheckAddress EQU 0x0002DE9D pParseInitLine EQU 0x0002DEF8 nullsub_4 EQU 0x0002E014 c_VER_PrintUserInfo EQU 0x0002E015 pSetupVideoRegisterInfo EQU 0x0002E09E pSetupVideoRegisterInfo_ EQU 0x0002E0A4 pStrcpy EQU 0x0002E3A0 pStrlen EQU 0x0002E3AE pToUpper EQU 0x0002E3C6 pStrnicmp_ EQU 0x0002E3FB pMoveCursor EQU 0x0002E439 pPrintLine EQU 0x0002E550 pPrintQuestion_ EQU 0x0002E5B5 pUpdateAllWindows EQU 0x0002E610 pUpdateCodeWindow EQU 0x0002E7C7 pShowCodeWindow EQU 0x0002EDB3 pUpdateWatchesWindow EQU 0x0002EE4E pUpdateLocalsWindow EQU 0x0002EECE pUpdateDataWindow EQU 0x0002EFA5 pPrintGenericRegisters EQU 0x0002F559 pUpdateRegistersWindow EQU 0x0002F618 pUpdateFPUWindow EQU 0x0002F8B6 pGetRegisterColor EQU 0x0002FA4F pPrintFlags EQU 0x0002FA86 pSaveClientRegistersForDisplay EQU 0x0002FACC pGeneralProtectionFault EQU 0x0002FAEC pSaveClientRegisters EQU 0x0002FB7F pSaveAllClientRegisters EQU 0x0002FC8D pRestoreAllClientRegisters EQU 0x0002FD9C nullsub_5 EQU 0x00030140 pWinDraw_Arrows EQU 0x00030A0A pParseOneKey_Mouse EQU 0x00031061 pGetNextKey EQU 0x000310FC pMouse_Display_1 EQU 0x000311E5 pMouse_UnAssemble_1 EQU 0x0003125B pMouse_What EQU 0x000313E0 pMouse_Previous EQU 0x00031403 pMouse_Previous_1 EQU 0x00031517 pMouse_Previous_2 EQU 0x0003154C pMouse_Copy_ EQU 0x00031774 pMouse_Paste_ EQU 0x000317D8 nullsub_6 EQU 0x0003182A pCallVideoDriver_1x EQU 0x00031A70 pCallVideoDriver_1 EQU 0x00031A94 pCallVideoDriver_2x EQU 0x00031AAE pCallVideoDriver_2 EQU 0x00031ACD pCallVideoDriver_3 EQU 0x00031AE7 pCallVideoDriver_4 EQU 0x00031B04 pCallVideoDriver_5 EQU 0x00031B16 pCallVideoDriver_6 EQU 0x00031B2D pCallVideoDriver_B EQU 0x00031B44 pCallVideoDriver_C EQU 0x00031B5C pEnableWin95Commands EQU 0x000320C4 pFindCommand EQU 0x000323B0 pPrintToCommandWindow EQU 0x00032416 pV86_1 EQU 0x00032624 pV86_0 EQU 0x00032634 pSaveUserCommand EQU 0x00032778 pExecUserCommand_ EQU 0x00032A02 pWriteToKbdBuffer_string EQU 0x00032C84 pParseOneKey_Mouse_ EQU 0x00032D30 pExecUserCommand__ EQU 0x00032D78 pReadFromKbdBuffer_char EQU 0x000338EC pEmptyKbdBuffer EQU 0x00033912 pReadOneKey EQU 0x0003392A jReadOneKey_ret EQU 0x000339F5 pPeekInKbdBuffer_char EQU 0x00033A04 pProgramLEDs EQU 0x00033A83 pKbdWaitMbInputReady EQU 0x00033AEC pProcessScanCode EQU 0x00033B2B jProcessScanCode_Translate EQU 0x00033C93 pWriteToKbdBuffer_char EQU 0x00033CB3 pSkipWord EQU 0x00033CF4 pIsItOnOrOff EQU 0x00033D20 c_WD EQU 0x0003458F c_WATCH EQU 0x00034703 c_WC EQU 0x000349D7 c_F EQU 0x00034B3B c_M EQU 0x000350C3 c_DB EQU 0x000351C2 c_DW EQU 0x000351D2 c_DD EQU 0x000351E2 c_ES EQU 0x000351F2 c_EL EQU 0x00035202 c_ET EQU 0x00035212 c_E EQU 0x00035222 pCopyDelimitedString EQU 0x00035442 pGetPattern EQU 0x00035456 c_C EQU 0x0003549D c_R EQU 0x0003567C pUpdateWindows EQU 0x00035819 c_DL EQU 0x0003585E c_DS EQU 0x0003586E c_DT EQU 0x0003587E pMouse_Display_2 EQU 0x0003589A c_DATA EQU 0x0003590C c_DEX EQU 0x0003594B c_EC EQU 0x00035AFE c_X EQU 0x00035CC6 pGet_P_RET_inst EQU 0x00035D0A c_P EQU 0x00035FC5 c_G EQU 0x000362C3 c_RS EQU 0x000365A1 c_ID EQU 0x000365CD c_IW EQU 0x000365D4 c_I_IB EQU 0x000365DB c_O_OB EQU 0x000366A8 c_SET_MOUSE EQU 0x00036840 c_SET_WHEELLINES EQU 0x000368D7 c_CODE EQU 0x0003693D c_?_H_HELP EQU 0x000369BC c_CLS EQU 0x00036BBE c_ALTKEY EQU 0x00036DEF c_FKEY EQU 0x00036EAD c_COLOR EQU 0x00037078 pIsTraceOn EQU 0x000371CF c_ZAP EQU 0x000371E8 c_SRC EQU 0x0003722A c_TABS EQU 0x00037343 c_A EQU 0x0003738E c_FORMAT EQU 0x00037472 c_LINES_ EQU 0x0003762B c_SET EQU 0x000377A1 pFindSetParameter EQU 0x000378FD c_ANSWER EQU 0x000379B2 pCopyUntilWhiteSpace EQU 0x00037ADF c_SET_VERBOSE EQU 0x00037CC3 c_SET_LOWERCASE EQU 0x00037D0C c_SET_REFERENCE EQU 0x00037D44 c_SET_CASESENSITIVE EQU 0x00037D7A c_SET_THREADP EQU 0x00037DB9 c_PCI EQU 0x00037E6B c_PAGEIN EQU 0x00037EA3 pDetectMonoVideoCard EQU 0x00037F10 pInitMonoVideoCard EQU 0x0003800B c_CSIP EQU 0x00038458 c_BC_BD_BE EQU 0x00038706 c_BL EQU 0x00038837 c_BPINT EQU 0x00038A47 pPrintBPInfo_BPINT EQU 0x00038AF4 nullsub_11 EQU 0x00038B15 nullsub_13 EQU 0x00038B16 c_BPX EQU 0x00038BB3 pPrintBPInfo_BPX EQU 0x00038FB9 pBE_BPX EQU 0x00039018 pBD_BPX EQU 0x0003904A pBD_BPX_BMSG EQU 0x00039062 pBD_BPX_BMSG_ EQU 0x000390FB pPrintBPInfo_BMSG EQU 0x000392F9 j_pBE_BPX EQU 0x000393C2 c_BPM_BPMB EQU 0x000393DF c_BPMD EQU 0x000393E4 c_BPMW EQU 0x000393E9 pBE_BPM EQU 0x0003979C pBD_BPM EQU 0x000397CE c_BPIO EQU 0x000397ED pPrintBPInfo_BPIO EQU 0x00039A2F nullsub_12 EQU 0x00039A72 pBD_BPIO EQU 0x00039A73 pBPIOSetPortInPermissionMap EQU 0x00039A7F c_BPR_RangeCheck EQU 0x00039B2D pRangeCheck EQU 0x00039C6D pCheckDuplicateBP EQU 0x00039CC6 jNotDuplicateBP EQU 0x00039D59 jItsDuplicateBP EQU 0x00039D69 pAllocateBP EQU 0x00039DFC pSetupBPStruct EQU 0x00039F4D pBP_SetModuleName EQU 0x0003A05D c_BH EQU 0x0003A11B oNew_PM_VMM_INT_0E_ EQU 0x0003A840 pClearTempBPs EQU 0x0003AE2D pIdentifyWiniceBPINT EQU 0x0003B542 pDeactivateBPs EQU 0x0003B7BA pActivateBPs EQU 0x0003BA93 pSetBPX EQU 0x0003BD9B pINT_41_F003_2 EQU 0x0003BE51 pAllocateDRx EQU 0x0003BE95 pSetDRx EQU 0x0003BEAB pSetDR_01237 EQU 0x0003BF22 pCalledOnTaskSwitch EQU 0x0003C318 pDisasmOneOpCode EQU 0x0003C53C pDisAsm_DOS_INT21 EQU 0x0003C82E pDisAsm_DPMI_INT31 EQU 0x0003C99A pDisAsm_VMM_INT20 EQU 0x0003C9F5 pDisAsm_JumpStatus EQU 0x0003CAE5 jJECXZ EQU 0x0003CBA6 jDisAsm_JMPs_nojmp EQU 0x0003CBBF jDisAsm_JMPs_jmp EQU 0x0003CBC6 jDisAsm_JMPs_ret EQU 0x0003CBFF pDisAsm_AppendCharToLine EQU 0x0003CC92 pDisAsm_AppendBufferToLine EQU 0x0003CCE4 pReadClientRegister EQU 0x0003CD5B pWriteClientRegister EQU 0x0003CD74 pDisAsm_SkipInLine EQU 0x0003CDA5 pDisAsm_SkipPrefix EQU 0x0003CDD0 pMaximizeSomeRange EQU 0x0003CDF4 pMaximizeSafeReadRange EQU 0x0003CE1A pSetFlag_Client_CS_32bit EQU 0x0003CE39 pSearchPattern_InProcedure EQU 0x0003CE51 pSearchPattern EQU 0x0003CEED c_GDT EQU 0x0003D330 c_LDT EQU 0x0003D441 jLDT_NoLDT EQU 0x0003D569 jLDT_PageNotPresent EQU 0x0003D570 jLDT_SyntaxError EQU 0x0003D577 pPrintInfo_GDT_LDT EQU 0x0003D584 c_IDT EQU 0x0003D6C8 pPrintInfo_IDT EQU 0x0003D72B pPrintSelectorOffset EQU 0x0003DADC pPM_01xx EQU 0x0003DB06 c_PHYS EQU 0x0003DEE9 c_PHYS_ EQU 0x0003DF23 pPEEK_POKE_CALL_EBX EQU 0x0003E03E pPEEK_LinAddr EQU 0x0003E093 pPEEK_B EQU 0x0003E0A8 pPEEK_W EQU 0x0003E0CD pPEEK_D EQU 0x0003E0F3 pPOKE_B EQU 0x0003E118 pPOKE_W EQU 0x0003E13B pPOKE_D EQU 0x0003E15E pRDTSC_AtIntExit EQU 0x0003E181 pRDTSC_AtIntEntry EQU 0x0003E1A9 pRDTSC EQU 0x0003E1D0 pPrintExecTime EQU 0x0003E1DF pPrintExecTime_ EQU 0x0003E261 pPrintFPUStatusWord EQU 0x0003E60A pPrintFPUControlWord EQU 0x0003E62B pPrintFPUStatusWord_ EQU 0x0003E64C pPrintFPUControlWord_ EQU 0x0003E693 c_LHEAP_ EQU 0x0003F661 c_TASK_ EQU 0x0003F8D9 pWalkTaskList EQU 0x0003FFA2 jWalkTaskList_error EQU 0x00040250 pGetLinAddr_selKernel32SomeThing EQU 0x000403BF pMapSelectorToLinAddr EQU 0x0004048F pClearLogLine EQU 0x0004058C pGetBase_LDT EQU 0x000405A5 pWalkDDBChain EQU 0x00041070 pGetVMM_API_offsets EQU 0x000410A3 pINT_41_0150_3_4 EQU 0x00041232 pINT_41_0150_SetBPs EQU 0x000417FA pINT3_FGJM_82xx EQU 0x00041A8A pDeviceIO_9_1 EQU 0x00041AFE pINT3_FGJM_83xx EQU 0x00041B56 pDeviceIO_9_2 EQU 0x00041BB2 pDeviceIO_9 EQU 0x00041BF7 nullsub_7 EQU 0x00041CD6 c_EXP EQU 0x00041D4D pLoadExports_ EQU 0x00041E83 pLoadExports EQU 0x00041F15 c_WMSG EQU 0x00041F73 j_c_NTCALL_ EQU 0x00042025 pGetModuleName EQU 0x0004202A pFindModuleByName EQU 0x000420E5 pINT_41_0040 EQU 0x00042304 pPM_FF13_ EQU 0x00042A86 pPM_FF14_ EQU 0x00042AF3 pINT3_FGJM_09xx EQU 0x00042C0C pINT3_FGJM_09xx_OK EQU 0x00042C35 pINT3_FGJM_0900 EQU 0x00042CAD pFindEntryPoint EQU 0x00043204 pDeviceIO_9_FindEntryPoint EQU 0x000432AF pINT3_FGJM_0904_0905 EQU 0x0004330F pINT3_FGJM_0903 EQU 0x000436BE pINT3_FGJM_090E EQU 0x000437A9 pINT3_FGJM_0907 EQU 0x000439C1 pINT3_FGJM_0908 EQU 0x00043A9D pINT3_FGJM_0909 EQU 0x00043AE1 pINT3_FGJM_090A EQU 0x00043B50 pINT3_FGJM_090B_090D EQU 0x00043B65 pINT3_FGJM_090C EQU 0x00043C93 pINT3_FGJM_0918 EQU 0x00043CA9 pINT3_FGJM_0919 EQU 0x00043D15 pPM_FF1F_ EQU 0x0004554D c_SS EQU 0x00045C20 c_FILE EQU 0x00045DEE c_TABLE EQU 0x00045F47 c_TABLE_AUTO EQU 0x000460E6 j_TABLE_AUTO EQU 0x000460F0 c_SYM EQU 0x0004672D nullsub_19 EQU 0x00046DEA c_STACK_ EQU 0x00046E56 c_STACK___ EQU 0x00046E6E c__stack__ EQU 0x00046F8D c_SYMLOC_X EQU 0x00047585 pStrchr EQU 0x000477D6 c_A_ EQU 0x000477E8 pHasArgument EQU 0x00049653 pReadClientRegister_ EQU 0x0004981F pSetSerialSpeed EQU 0x0004A572 pReadSerial_Byte EQU 0x0004A605 pSendSerial_Byte EQU 0x0004A67C pAttachToSerialDevice EQU 0x0004AAD8 pResetModem EQU 0x0004AB6B pGetModemResponse EQU 0x0004AB98 pSendSerial_Line EQU 0x0004ABD8 pReadSerial_String EQU 0x0004ABFC pDelay_200ms EQU 0x0004AC32 pDelayMilliSec EQU 0x0004AC3F pPrintChar_PAR EQU 0x0004B65C pPrintChar_LPT_SER EQU 0x0004B6CA pPrintChar_SER EQU 0x0004B749 pStr2ShortReal EQU 0x0004B7A0 pStr2LongReal EQU 0x0004C036 pPM_FF01 EQU 0x0004C56B pPM_FF02 EQU 0x0004C5C6 pPM_FF03 EQU 0x0004C662 pPM_FF04 EQU 0x0004C68B pPM_FF05 EQU 0x0004C80A pPM_FF06 EQU 0x0004C84D pPM_FF07 EQU 0x0004C8BC pPM_FF08 EQU 0x0004C92F pPM_FF09 EQU 0x0004C94B pPM_FF0A EQU 0x0004C966 pPM_FF0B EQU 0x0004C9E4 pPM_FF0D EQU 0x0004CA08 pPM_FF0E EQU 0x0004CA22 pPM_FF0F EQU 0x0004CAAC pPM_FF11 EQU 0x0004CAFE pPM_FF12 EQU 0x0004CB49 pPM_FF15 EQU 0x0004CB6A pPM_FF16 EQU 0x0004CC2B pPM_FF17 EQU 0x0004CC6E pPM_FF18 EQU 0x0004CCD4 pPM_FF1A EQU 0x0004CE1D pPM_FF1B EQU 0x0004CE30 pPM_FF1C EQU 0x0004CE66 pPM_FF1D EQU 0x0004CEC2 pPM_FF1E EQU 0x0004CF08 pPM_FF1F EQU 0x0004CF32 pPM_SetClientRegisters EQU 0x0004CF52 pPM_FF0E_PrintMsg EQU 0x0004CF79 c_GENINT_BCW EQU 0x0004CFA9 pSwitchContext_InWinice EQU 0x0004D0B8 pINT_41_0070 EQU 0x0004D798 pINT_41_0071 EQU 0x0004D7A9 pINT_41_0072 EQU 0x0004D7BA pINT_41_0074 EQU 0x0004D7DA pINT_41_0073 EQU 0x0004D7F0 pINT_41_0075 EQU 0x0004D859 pINT_41_0076 EQU 0x0004D87A pINT_41_0077 EQU 0x0004D89C pINT_41_0078 EQU 0x0004D8CB pINT_41_0079 EQU 0x0004D8FF pINT_41_007A EQU 0x0004D91B pINT_41_007B EQU 0x0004DAF1 pINT_41_007F EQU 0x0004DB0A pINT_41_0080 EQU 0x0004DB82 pHandleFaultIn_DOT_QUERY EQU 0x0004DBE1 pFindDotCommand EQU 0x0004DC6B pRegisterDotCommand EQU 0x0004DC92 c_DOT_VXDNAME_? EQU 0x0004DCB9 c_DOT_VXDNAME_ EQU 0x0004DD01 pDotCommand_FaultHandler EQU 0x0004DD6B pSaveClientRegisters_ EQU 0x0004DE02 c_VER_DOT_ EQU 0x0004DE87 pStrend EQU 0x0004DFB3 pINT_41_0050 EQU 0x0004DFCF pINT_41_0152_1 EQU 0x0004E119 pINT_41_0052 EQU 0x0004E194 pINT_41_0065 EQU 0x0004E1F3 pINT_41_0066 EQU 0x0004E272 pINT_41_0064 EQU 0x0004E314 pINT_41_007x_PrintRegs EQU 0x0004E3A6 pNew_VMM_12D EQU 0x0004E4D6 pNew_VMM_F3 EQU 0x0004E4EA pINT_41_0002_0012 EQU 0x0004E75C pINT_41_0001 EQU 0x0004E78B pNew_VMM_C4 EQU 0x0004E7F1 pNew_VMM_C3 EQU 0x0004E81D pINT_41_0000 EQU 0x0004E829 pINT_41_000F EQU 0x0004E84B pBeep EQU 0x0004E887 c_VER_LIN_ EQU 0x0004ECC9 c_VER_ADD_ EQU 0x0004ED15 c_VER_ADD__ EQU 0x0004EDEC c_VER_EXP_ EQU 0x0004EEE9 c_VER_SYM_ EQU 0x0004F1B8 pINT_41_0152_2 EQU 0x0004F3A6 pINT_41_F003_1 EQU 0x0004F50F pINT_41_0150_3_2 EQU 0x0004F876 pINT_41_0150_GetDeviceInfo EQU 0x0004F931 pINT_41_0152_3 EQU 0x0004F9B9 pCheckInternalStack EQU 0x00050828 pGetBaseOfSelector EQU 0x00050A0A pPrintErrorToCommandWindow EQU 0x00050C78 pPrintLine2 EQU 0x00050C89 pPrintLine_Color EQU 0x00050C9A pPrintLine_Help EQU 0x00050CB6 pPrintErrorMessage EQU 0x00050CF5 pMemset EQU 0x00050D87 pMemcopy EQU 0x00050DD6 pMapSelectorOffsetToLinAddr EQU 0x00050F1C pCopyDword EQU 0x00050F47 pCopyWord EQU 0x00050F72 pCopyByte EQU 0x00050F9E pWriteDword EQU 0x00050FC9 pReadArea EQU 0x00050FE9 jPAGEIN_INT3 EQU 0x00051021 c_PAGEIN__ EQU 0x00051022 pagein_ring0 EQU 0x00051080 pINT3_CleanupForPAGEIN EQU 0x000510B6 pSwitchContext EQU 0x000510F2 pGetNumber EQU 0x000513DD c_addr_ EQU 0x00051793 pEvaluateProcessType EQU 0x0005196D pGetCurrentThreadAndProcessPointers EQU 0x00051A1F c_ADDR EQU 0x00051B7C pPrintADDRResults EQU 0x00051C2E c_NTCALL_ EQU 0x00051CCB c_query_ EQU 0x00051E07 query_extendedinfo EQU 0x00051E34 query_alien_context EQU 0x00051E4B query_switch_to_next_context EQU 0x00051E70 query_exec_query EQU 0x00051E9A query_leave EQU 0x00051EBA pHookMapViewOfImageSection EQU 0x000529E9 pHookAddValidPageToWorkingSet EQU 0x00052A6E pHookCopyOnWrite EQU 0x00052B50 pHookRtlAssert EQU 0x00052BBF pINT_2D EQU 0x000534DE pINT_2E EQU 0x00053B8D nullsub_20 EQU 0x00054058 _snwprintf EQU 0x000545F0 _strnicmp EQU 0x000545F6 _wcsicmp EQU 0x000545FC _wcsnicmp EQU 0x00054602 DbgPrint EQU 0x00054608 isspace EQU 0x0005460E isprint EQU 0x00054614 RtlCompareMemoryUlong EQU 0x0005461A RtlCompareMemory EQU 0x00054620 RtlCompareString EQU 0x00054626 RtlCompareUnicodeString EQU 0x0005462C RtlConvertSidToUnicodeString EQU 0x00054632 RtlInitAnsiString EQU 0x00054638 RtlInitString EQU 0x0005463E RtlInitUnicodeString EQU 0x00054644 RtlLengthRequiredSid EQU 0x0005464A RtlLengthSid EQU 0x00054650 RtlNumberGenericTableElements EQU 0x00054656 RtlUnwind EQU 0x0005465C RtlValidSid EQU 0x00054662 RtlTimeToTimeFields EQU 0x00054668 RtlTimeFieldsToTime EQU 0x0005466E sprintf EQU 0x00054674 strchr EQU 0x0005467A strncmp EQU 0x00054680 strncpy EQU 0x00054686 strstr EQU 0x0005468C swprintf EQU 0x00054692 tolower EQU 0x00054698 toupper EQU 0x0005469E vsprintf EQU 0x000546A4 wcscmp EQU 0x000546AA wcscpy EQU 0x000546B0 wcslen EQU 0x000546B6 qsort EQU 0x000546BC _chkstk EQU 0x0005470A pDisableRW EQU 0x00054A26 pNTICE_CREATE_CLOSE EQU 0x00054BEE pNTICE_SHUTDOWN EQU 0x00054C0A pNTICE_DEVICE_CONTROL_ EQU 0x00054C84 pNTICE_DEVICE_CONTROL EQU 0x00054F52 pNTICE_INTERNAL_DEVICE_CONTROL EQU 0x00054FB9 pCleanup EQU 0x0005506E pTouchMemory EQU 0x0005519A pGet_BCHKD_DevExt EQU 0x0005539D pGetUserInfo EQU 0x0005566C pGetIRQLLevel EQU 0x00058776 _stricmp EQU 0x0006379A pPrintErrorMessage2 EQU 0x00063F50 _ui64toa EQU 0x00064E0E pPatchKeyboardDriver_ EQU 0x000698E6 pRetrieveNtVersionData EQU 0x0006CCD4 pGet_NTVersion EQU 0x0006CD54 pGet_NTVersionMajor EQU 0x0006CD5C pGet_NTCheck EQU 0x0006CD68 pGet_CSDVersion EQU 0x0006CDFC pGet_Uniprocessor EQU 0x0006CE04 pOpenFile EQU 0x00074C2D pReadFile EQU 0x00074F46 pPatchKeyboardDriver__ EQU 0x0007918E nullsub_8 EQU 0x0007F000 strcspn EQU 0x00080FE2 _strupr EQU 0x00081002 malloc EQU 0x000810C0 free EQU 0x00081110 LocalAlloc EQU 0x00081124 LocalFree EQU 0x00081162 LocalLock EQU 0x0008117E fopen EQU 0x000811B1 fwrite EQU 0x000811D8 fclose EQU 0x00081200 LocalUnlock EQU 0x0008122D _initterm EQU 0x0008123C DisableThreadLibraryCalls EQU 0x0008123E sscanf EQU 0x0008126E CloseHandle EQU 0x000815DD CreateFileA EQU 0x0008160B GetFullPathNameW EQU 0x00081640 GetLastError EQU 0x00081650 GetVersion EQU 0x00081656 GetProcessHeap EQU 0x00081668 HeapAlloc EQU 0x0008168E HeapFree EQU 0x000816FB HeapReAlloc EQU 0x00081745 GlobalAlloc EQU 0x00081773 GlobalFree EQU 0x000817A0 RaiseException EQU 0x00081804 VirtualAlloc EQU 0x0008184C VirtualFree EQU 0x00081876 WriteFile EQU 0x000818B9 _except_handler3 EQU 0x000818EC _local_unwind2 EQU 0x0008191A _wtoi EQU 0x00081926 ctime EQU 0x000819AC strpbrk EQU 0x00081ACD strtok EQU 0x00081ADA strtoul EQU 0x00081B78 isalpha EQU 0x00081BC8 towlower EQU 0x00081BEC towupper EQU 0x00081C04 RtlGetAce EQU 0x00081C3B RtlValidAcl EQU 0x00081C65 RtlAnsiStringToUnicodeString EQU 0x00081C70 RtlUnicodeStringToAnsiString EQU 0x00081CD0 RtlFreeUnicodeString EQU 0x00081D32 RtlTimeToElapsedTimeFields EQU 0x00081D5A RtlEqualUnicodeString EQU 0x00081D6E GetTimeZoneInformation EQU 0x00081DCC nullsub_9 EQU 0x00081FE6 _vsnprintf EQU 0x00082562 nullsub_14 EQU 0x0008C3A6 nullsub_15 EQU 0x0008C3AE c_PCI_QueryRegisters EQU 0x0008D866 c_PCI_ EQU 0x0008E0DF pGetFlashInfo EQU 0x0009216C pFindKeyboardDriver EQU 0x000923CE pFillModuleInfo EQU 0x000924F8 c_PAGEIN_ EQU 0x00092A1F j_RtlUnwind_0 EQU 0x00094084 j_ExAllocatePoolWithTag EQU 0x0009408A j_HalDisplayString EQU 0x00094228 fNOPAGE EQU 0x000942AC fStart__ EQU 0x0009B9D9 flags EQU 0x0009BA16 fExecuteMoreCommands EQU 0x0009BA1A fClientMode EQU 0x0009BA1C fStart_ EQU 0x0009BBB6 fKbdUsingFilter EQU 0x0009C076 dNumOfCPUs EQU 0x0009E45D tSerial EQU 0x0009EC84 tUser EQU 0x0009ECD4 tCompany EQU 0x0009ED24 dClient_EAX EQU 0x0009EDFD dClient_EBX EQU 0x0009EE01 dClient_ECX EQU 0x0009EE05 dClient_EDX EQU 0x0009EE09 dClient_ESI EQU 0x0009EE0D dClient_EDI EQU 0x0009EE11 dClient_EBP EQU 0x0009EE15 dClient_ESP EQU 0x0009EE19 dClient_EIP EQU 0x0009EE1D dClient_EFLAGS EQU 0x0009EE21 dClient_CS EQU 0x0009EE25 dClient_DS EQU 0x0009EE29 dClient_SS EQU 0x0009EE2D dClient_ES EQU 0x0009EE31 dClient_FS EQU 0x0009EE35 dClient_GS EQU 0x0009EE39 fVER_TOUCH EQU 0x000D06FD dCurrentContext EQU 0x000DDED3 dPopupContext EQU 0x000DDED7 fPAGEIN_InProgress EQU 0x000E4AAF oPAGEIN_INT3 EQU 0x000E4AFB wNTBuild EQU 0x000E82CC wNTVersion EQU 0x000E82CE oKbdPatch EQU 0x000F1098 dKbdMethod EQU 0x000F109C dSIKBDFilter EQU 0x000FDA90 wNTCheck EQU 0x000FDBF4 wNTUniprocessor EQU 0x000FDBF6 dNTCSDVersion EQU 0x000FDBF8 oBCHKD_DeviceExtension EQU 0x00101550 fNullVGA EQU 0x001081EC fNullKeyboard EQU 0x00130E08 start EQU 0x00131B64 pPatchKeyboardDriver EQU 0x0013259B jPatchKeyboardDriver_0 EQU 0x00132690 jPatchKeyboardDriver_err2 EQU 0x0013277C jPatchKeyboardDriver_err EQU 0x00132781 jPatchKeyboardDriver_ok EQU 0x00132786 pQueryRegistry2 EQU 0x00133B6E pQueryRegistry EQU 0x00133C06 nullsub_10 EQU 0x00133DDC