MODULE windows x86 4BB484A522D745B594F08A4CDB0B75852 testdllinterceptor.pdb
FILE 1 d:/sdks/v7.0/include/StrAlign.h
FILE 2 d:/sdks/v7.0/include/Ime_cmodes.h
FILE 3 d:/sdks/v7.0/include/PshPack8.h
FILE 4 d:/msvs8/vc/include/stdarg.h
FILE 5 d:/sdks/v7.0/include/winternl.h
FILE 6 d:/sdks/v7.0/include/WinSvc.h
FILE 7 d:/sdks/v7.0/include/PshPack4.h
FILE 8 d:/sdks/v7.0/include/WinDef.h
FILE 9 d:/sdks/v7.0/include/WinCon.h
FILE 10 d:/msvs8/vc/include/wtime.inl
FILE 11 d:/sdks/v7.0/include/WinNetWk.h
FILE 12 d:/sdks/v7.0/include/wnnc.h
FILE 13 hg:hg.mozilla.org/releases/mozilla-beta:toolkit/xre/test/win/TestDllInterceptor.cpp:0f5f1db9d848
FILE 14 d:/sdks/v7.0/include/WinReg.h
FILE 15 d:/sdks/v7.0/include/WinBase.h
FILE 16 d:/sdks/v7.0/include/Imm.h
FILE 17 d:/sdks/v7.0/include/WinNT.h
FILE 18 d:/msvs8/vc/include/ctype.h
FILE 19 d:/sdks/v7.0/include/ktmtypes.h
FILE 20 d:/sdks/v7.0/include/PopPack.h
FILE 21 d:/sdks/v7.0/include/WinVer.h
FILE 22 d:/sdks/v7.0/include/VerRsrc.h
FILE 23 d:/sdks/v7.0/include/PshPack2.h
FILE 24 d:/sdks/v7.0/include/WinNls.h
FILE 25 d:/sdks/v7.0/include/WinUser.h
FILE 26 d:/sdks/v7.0/include/PshPack1.h
FILE 27 d:/sdks/v7.0/include/Guiddef.h
FILE 28 d:/sdks/v7.0/include/WinError.h
FILE 29 d:/sdks/v7.0/include/Tvout.h
FILE 30 d:/msvs8/vc/include/string.h
FILE 31 hg:hg.mozilla.org/releases/comm-beta:objdir/mozilla/dist/include/mozilla/StandardInteger.h:9c0b3acdbc8a
FILE 32 hg:hg.mozilla.org/releases/comm-beta:objdir/mozilla/dist/include/mozilla/MSStdInt.h:9c0b3acdbc8a
FILE 33 d:/msvs8/vc/include/limits.h
FILE 34 d:/msvs8/vc/include/wchar.h
FILE 35 d:/sdks/v7.0/include/specstrings.h
FILE 36 d:/sdks/v7.0/include/sal_supp.h
FILE 37 d:/sdks/v7.0/include/specstrings_supp.h
FILE 38 d:/sdks/v7.0/include/specstrings_strict.h
FILE 39 d:/sdks/v7.0/include/specstrings_undef.h
FILE 40 d:/sdks/v7.0/include/WinGDI.h
FILE 41 d:/sdks/v7.0/include/driverspecs.h
FILE 42 d:/sdks/v7.0/include/sdv_driverspecs.h
FILE 43 d:/sdks/v7.0/include/kernelspecs.h
FILE 44 d:/sdks/v7.0/include/BaseTsd.h
FILE 45 hg:hg.mozilla.org/releases/mozilla-beta:toolkit/xre/nsWindowsDllInterceptor.h:0f5f1db9d848
FILE 46 d:/sdks/v7.0/include/Mcx.h
FILE 47 d:/sdks/v7.0/include/Windows.h
FILE 48 d:/msvs8/vc/include/swprintf.inl
FILE 49 d:/sdks/v7.0/include/sdkddkver.h
FILE 50 hg:hg.mozilla.org/releases/comm-beta:objdir/mozilla/dist/include/mozilla-config.h:9c0b3acdbc8a
FILE 51 d:/msvs8/vc/include/excpt.h
FILE 52 d:/msvs8/vc/include/stdio.h
FILE 53 d:/msvs8/vc/include/crtdefs.h
FILE 54 d:/msvs8/vc/include/sal.h
FILE 55 d:/msvs8/vc/include/crtassem.h
FILE 56 d:/sdks/v7.0/include/Reason.h
FILE 57 d:/msvs8/vc/include/vadefs.h
FILE 58 f:/sp/public/sdk/inc/poppack.h
FILE 59 f:/sp/public/sdk/inc/winnetwk.h
FILE 60 f:/sp/public/sdk/inc/imm.h
FILE 61 f:/sp/vctools/crt_bld/self_x86/crt/src/stdarg.h
FILE 62 f:/sp/public/sdk/inc/windef.h
FILE 63 f:/sp/vctools/crt_bld/self_x86/crt/src/crtdbg.h
FILE 64 f:/sp/public/sdk/inc/pshpack1.h
FILE 65 f:/sp/public/sdk/inc/winver.h
FILE 66 f:/sp/vctools/crt_bld/self_x86/crt/src/internal.h
FILE 67 f:/sp/vctools/crt_bld/self_x86/crt/src/crtdefs.h
FILE 68 f:/sp/vctools/crt_bld/self_x86/crt/src/sal.h
FILE 69 f:/sp/public/sdk/inc/winnt.h
FILE 70 f:/sp/vctools/crt_bld/self_x86/crt/src/ctype.h
FILE 71 f:/sp/vctools/crt_bld/self_x86/crt/src/errno.h
FILE 72 f:/sp/public/sdk/inc/winreg.h
FILE 73 f:/sp/vctools/crt_bld/self_x86/crt/src/_newmode.c
FILE 74 f:/sp/public/sdk/inc/winbase.h
FILE 75 f:/sp/public/sdk/inc/winerror.h
FILE 76 f:/sp/public/sdk/inc/pshpack8.h
FILE 77 f:/sp/public/sdk/inc/reason.h
FILE 78 f:/sp/public/sdk/inc/wincon.h
FILE 79 f:/sp/public/sdk/inc/ddbanned.h
FILE 80 f:/sp/vctools/crt_bld/self_x86/crt/src/vadefs.h
FILE 81 f:/sp/vctools/crt_bld/self_x86/crt/src/cruntime.h
FILE 82 f:/sp/public/sdk/inc/pshpack2.h
FILE 83 f:/sp/public/sdk/inc/mcx.h
FILE 84 f:/sp/public/sdk/inc/winuser.h
FILE 85 f:/sp/vctools/crt_bld/self_x86/crt/src/limits.h
FILE 86 f:/sp/public/sdk/inc/winnls.h
FILE 87 f:/sp/public/sdk/inc/guiddef.h
FILE 88 f:/sp/public/sdk/inc/windows.h
FILE 89 f:/sp/vctools/crt_bld/self_x86/crt/src/excpt.h
FILE 90 f:/sp/public/sdk/inc/specstrings.h
FILE 91 f:/sp/public/sdk/inc/basetsd.h
FILE 92 f:/sp/public/sdk/inc/stralign.h
FILE 93 f:/sp/public/sdk/inc/tvout.h
FILE 94 f:/sp/public/sdk/inc/winsvc.h
FILE 95 f:/sp/vctools/crt_bld/self_x86/crt/src/string.h
FILE 96 f:/sp/public/sdk/inc/wingdi.h
FILE 97 f:/sp/public/sdk/inc/pshpack4.h
FILE 113 f:/sp/vctools/crt_bld/self_x86/crt/src/xncommod.c
FILE 138 f:/sp/vctools/crt_bld/self_x86/crt/src/stdlib.h
FILE 141 f:/sp/vctools/crt_bld/self_x86/crt/src/xtxtmode.c
FILE 153 f:/sp/vctools/crt_bld/self_x86/crt/src/mtdll.h
FILE 158 f:/sp/vctools/crt_bld/self_x86/crt/src/locale.h
FILE 160 f:/sp/vctools/crt_bld/self_x86/crt/src/xthdloc.c
FILE 183 f:/sp/vctools/crt_bld/self_x86/crt/src/setlocal.h
FILE 184 f:/sp/vctools/crt_bld/self_x86/crt/src/oscalls.h
FILE 213 f:/sp/vctools/crt_bld/self_x86/crt/src/atonexit.c
FILE 255 f:/sp/vctools/crt_bld/self_x86/crt/src/stdio.h
FILE 260 f:/sp/vctools/crt_bld/self_x86/crt/src/cinitexe.c
FILE 265 f:/sp/vctools/crt_bld/self_x86/crt/src/swprintf.inl
FILE 266 f:/sp/vctools/crt_bld/self_x86/crt/src/sect_attribs.h
FILE 289 f:/sp/vctools/crt_bld/self_x86/crt/src/tchar.h
FILE 291 f:/sp/vctools/crt_bld/self_x86/crt/src/mbstring.h
FILE 294 f:/sp/vctools/crt_bld/self_x86/crt/src/rterr.h
FILE 298 f:/sp/vctools/crt_bld/self_x86/crt/src/rtcapi.h
FILE 305 f:/sp/vctools/crt_bld/self_x86/crt/src/crtexe.c
FILE 315 f:/sp/vctools/crt_bld/self_x86/crt/src/process.h
FILE 320 f:/sp/vctools/crt_bld/self_x86/crt/src/math.h
FILE 328 f:/sp/vctools/crt_bld/self_x86/crt/src/crtassem.h
FILE 329 f:/sp/vctools/crt_bld/self_x86/crt/src/crtmanifest.c
FILE 348 f:/sp/vctools/crt_bld/self_x86/crt/src/dllargv.c
FILE 388 f:/sp/vctools/crt_bld/self_x86/crt/src/gs_cookie.c
FILE 424 f:/sp/vctools/crt_bld/self_x86/crt/src/gs_report.c
FILE 427 f:/sp/vctools/crt_bld/self_x86/crt/src/dbgint.h
FILE 452 f:/binaries.x86ret/vcboot/inc/mm3dnow.h
FILE 454 f:/sp/vctools/crt_bld/self_x86/crt/src/malloc.h
FILE 464 f:/sp/vctools/crt_bld/self_x86/crt/src/gs_support.c
FILE 467 f:/sp/vctools/crt_bld/self_x86/crt/src/intrin.h
FILE 468 f:/sp/vctools/crt_bld/self_x86/crt/src/setjmp.h
FILE 481 f:/sp/vctools/crt_bld/self_x86/crt/src/stddef.h
FILE 487 f:/binaries.x86ret/vcboot/inc/emmintrin.h
FILE 488 f:/binaries.x86ret/vcboot/inc/xmmintrin.h
FILE 489 f:/binaries.x86ret/vcboot/inc/mmintrin.h
FILE 506 f:/sp/vctools/crt_bld/self_x86/crt/src/merr.c
FILE 545 f:/sp/vctools/crt_bld/self_x86/crt/src/natstart.c
FILE 587 f:/sp/vctools/crt_bld/self_x86/crt/src/pesect.c
FILE 610 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/stdlib.h
FILE 614 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/crtdbg.h
FILE 617 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/eh/unhandld.cpp
FILE 618 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/eh.h
FILE 626 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/stdarg.h
FILE 630 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/excpt.h
FILE 631 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/sect_attribs.h
FILE 632 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/crtdefs.h
FILE 633 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/sal.h
FILE 634 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/ehhooks.h
FILE 635 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/errno.h
FILE 639 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/ehassert.h
FILE 642 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/ctype.h
FILE 644 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/internal.h
FILE 646 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/limits.h
FILE 647 f:/sp/vctools/langapi/include/ehdata.h
FILE 648 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/stddef.h
FILE 650 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/string.h
FILE 652 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/vadefs.h
FILE 654 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/cruntime.h
FILE 670 f:/sp/vctools/crt_bld/self_x86/crt/src/wildcard.c
FILE 695 f:/sp/vctools/crt_bld/self_x86/crt/src/adjustfd.c
FILE 699 f:/sp/public/sdk/inc/ntldr.h
FILE 700 f:/sp/public/sdk/inc/ntpoapi.h
FILE 701 f:/sp/public/sdk/inc/ntexapi.h
FILE 705 f:/sp/public/sdk/inc/ntdef.h
FILE 707 f:/sp/public/sdk/inc/mce.h
FILE 709 f:/sp/public/sdk/inc/ntimage.h
FILE 711 f:/sp/public/sdk/inc/ntpsapi.h
FILE 712 f:/sp/public/sdk/inc/nti386.h
FILE 713 f:/sp/public/sdk/inc/nt.h
FILE 719 f:/sp/public/sdk/inc/ntxcapi.h
FILE 721 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/misc/i386/chandler4gs.c
FILE 722 f:/sp/public/sdk/inc/ntstatus.h
FILE 723 f:/sp/public/sdk/inc/ntkeapi.h
FILE 724 f:/sp/public/sdk/inc/ntconfig.h
FILE 725 f:/sp/public/sdk/inc/ntregapi.h
FILE 726 f:/sp/public/sdk/inc/ntmmapi.h
FILE 727 f:/sp/public/sdk/inc/ntobapi.h
FILE 728 f:/sp/public/sdk/inc/nxi386.h
FILE 729 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/process.h
FILE 730 f:/sp/public/sdk/inc/ntioapi.h
FILE 731 f:/sp/public/sdk/inc/devioctl.h
FILE 733 f:/sp/public/sdk/inc/ntseapi.h
FILE 737 f:/sp/public/sdk/inc/ntnls.h
FILE 738 f:/sp/public/sdk/inc/ntelfapi.h
FILE 740 f:/sp/public/sdk/inc/ntiolog.h
FILE 741 f:/sp/public/sdk/inc/ntlpcapi.h
FILE 742 f:/sp/public/sdk/inc/ntpnpapi.h
FILE 743 f:/sp/public/sdk/inc/cfg.h
FILE 744 f:/sp/public/sdk/inc/pebteb.h
FILE 769 f:/sp/vctools/crt_bld/self_x86/crt/src/intel/fp8.c
FILE 786 f:/sp/vctools/crt_bld/self_x86/crt/src/float.h
FILE 787 f:/sp/vctools/crt_bld/self_x86/crt/src/crtwrn.h
FILE 803 f:/sp/vctools/crt_bld/self_x86/crt/src/intel/loadcfg.c
FILE 839 f:/sp/vctools/crt_bld/self_x86/crt/src/intel/secchk.c
FILE 861 F:/SP/vctools/crt_bld/SELF_X86/crt/prebuild/misc/i386/sehprolg4.asm
FILE 862 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/rtcapi.h
FILE 867 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/rtcpriv.h
FILE 869 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/h/malloc.h
FILE 876 f:/sp/vctools/crt_bld/self_x86/crt/prebuild/rtc/initsect.cpp
FUNC 1000 7f 0 mozilla::internal::WindowsDllNopSpacePatcher::~WindowsDllNopSpacePatcher()
1000 3 118 45
1003 24 121 45
1027 3 122 45
102a 13 126 45
103d 16 135 45
1053 28 140 45
107b 4 142 45
FUNC 107f 17 4 mozilla::internal::WindowsDllNopSpacePatcher::Init(char const *)
107f 1 145 45
1080 13 146 45
1093 3 151 45
FUNC 1096 5a c mozilla::internal::WindowsDllNopSpacePatcher::WriteHook(unsigned char *,int,void * *)
1096 0 193 45
1096 7 200 45
109d c 201 45
10a9 10 212 45
10b9 2 213 45
10bb 4 218 45
10bf c 222 45
10cb 1c 230 45
10e7 2 232 45
10e9 3 233 45
10ec 4 202 45
FUNC 10f0 6b 0 mozilla::internal::WindowsDllDetourPatcher::~WindowsDllDetourPatcher()
10f0 2 253 45
10f2 19 256 45
110b 2 264 45
110d 17 267 45
1124 8 275 45
112c 2c 282 45
1158 3 284 45
FUNC 115b 59 8 mozilla::internal::WindowsDllDetourPatcher::Init(char const *,int)
115b 4 287 45
115f 6 288 45
1165 c 291 45
1171 6 292 45
1177 b 298 45
1182 2 299 45
1184 3 301 45
1187 1f 305 45
11a6 7 307 45
11ad 4 308 45
11b1 3 311 45
FUNC 11b4 18 0 mozilla::internal::WindowsDllDetourPatcher::FindTrampolineSpace()
11b4 0 606 45
11b4 8 607 45
11bc 2 608 45
11be 1 615 45
11bf 8 610 45
11c7 4 612 45
11cb 1 615 45
FUNC 11cc 2a 0 mozilla::WindowsDllInterceptor::WindowsDllInterceptor()
11cc 2a 632 45
FUNC 11f6 24 8 mozilla::WindowsDllInterceptor::Init(char const *,int)
11f6 0 635 45
11f6 b 636 45
1201 6 640 45
1207 4 641 45
120b c 642 45
1217 3 646 45
FUNC 121a 3c 4 payload::operator==(payload const &)
121a 0 48 13
121a 39 51 13
1253 3 52 13
FUNC 1256 3a 18 rotatePayload
1256 3 55 13
1259 14 57 13
126d 9 58 13
1276 3 59 13
1279 15 60 13
128e 2 61 13
FUNC 1290 39 18 patched_rotatePayload
1290 8 69 13
1298 2d 71 13
12c5 4 72 13
FUNC 12c9 16 0 mozilla::WindowsDllInterceptor::~WindowsDllInterceptor()
FUNC 12df a2 c mozilla::internal::WindowsDllNopSpacePatcher::AddHook(char const *,int,void * *)
12df 8 155 45
12e7 6 156 45
12ed 7 157 45
12f4 a 159 45
12fe 2 161 45
1300 a 164 45
130a 5 165 45
130f 3 167 45
1312 22 174 45
1334 4 176 45
1338 13 179 45
134b 15 182 45
1360 7 184 45
1367 d 185 45
1374 9 186 45
137d 4 190 45
FUNC 1381 12a c mozilla::internal::WindowsDllDetourPatcher::CreateTrampoline(void *,int,void * *)
1381 4 361 45
1385 9 362 45
138e 7 364 45
1395 8 365 45
139d 8 371 45
13a5 b 380 45
13b0 4 382 45
13b4 1d 385 45
13d1 13 389 45
13e4 2 392 45
13e6 4 396 45
13ea e 399 45
13f8 3 401 45
13fb 2 405 45
13fd 2 406 45
13ff 2 408 45
1401 a 409 45
140b 3 411 45
140e 4 412 45
1412 4 414 45
1416 8 415 45
141e 3 416 45
1421 3 418 45
1424 9 374 45
142d 5 522 45
1432 d 532 45
143f a 538 45
1449 a 542 45
1453 2 543 45
1455 f 545 45
1464 5 575 45
1469 1b 579 45
1484 b 587 45
148f 18 602 45
14a7 4 603 45
FUNC 14ab 39 c mozilla::internal::WindowsDllDetourPatcher::AddHook(char const *,int,void * *)
14ab 3 330 45
14ae 6 331 45
14b4 4 332 45
14b8 b 334 45
14c3 2 335 45
14c5 3 337 45
14c8 11 340 45
14d9 8 341 45
14e1 3 347 45
FUNC 14e4 5e c mozilla::WindowsDllInterceptor::AddHook(char const *,int,void * *)
14e4 6 655 45
14ea 9 656 45
14f3 4 658 45
14f7 12 661 45
1509 5 663 45
150e b 666 45
1519 13 668 45
152c 12 671 45
153e 4 674 45
FUNC 1542 70 8 TestHook(char const *,char const *)
1542 a 75 13
154c b 77 13
1557 11 78 13
1568 15 79 13
157d 18 80 13
1595 e 81 13
15a3 2 86 13
15a5 d 83 13
FUNC 15b2 221 0 main
15b2 c 89 13
15be 2 90 13
15c0 2a 92 13
15ea c 93 13
15f6 20 95 13
1616 b 98 13
1621 11 99 13
1632 22 100 13
1654 d 101 13
1661 19 107 13
167a 17 109 13
1691 8 110 13
1699 14 116 13
16ad 8 117 13
16b5 b 122 13
16c0 14 125 13
16d4 19 127 13
16ed 17 129 13
1704 8 130 13
170c 10 136 13
171c 7 137 13
1723 64 152 13
1787 8 153 13
178f 4 154 13
1793 8 139 13
179b 2 140 13
179d 5 132 13
17a2 2 133 13
17a4 7 119 13
17ab 2 120 13
17ad 5 112 13
17b2 2 113 13
17b4 c 103 13
17c0 e 104 13
17ce 5 158 13
FUNC 17e0 4b 0 pre_cpp_init
17e0 0 321 305
17e0 a 323 305
17ea 5 333 305
17ef 2a 341 305
1819 9 345 305
1822 8 346 305
182a 1 348 305
FUNC 182b 176 0 __tmainCRTStartup
182b c 421 305
1837 5 444 305
183c 9 469 305
1845 8 470 305
184d d 471 305
185a 4 473 305
185e 6 475 305
1864 2 476 305
1866 b 483 305
1871 5 484 305
1876 9 486 305
187f a 488 305
1889 9 490 305
1892 6 492 305
1898 15 494 305
18ad 11 496 305
18be 6 504 305
18c4 9 510 305
18cd 11 512 305
18de a 513 305
18e8 5 516 305
18ed 8 521 305
18f5 17 532 305
190c a 534 305
1916 d 596 305
1923 1f 597 305
1942 8 607 305
194a 7 608 305
1951 17 614 305
1968 8 620 305
1970 a 627 305
197a 7 628 305
1981 8 630 305
1989 6 631 305
198f 7 632 305
1996 5 634 305
199b 6 635 305
FUNC 19a1 e2 0 pre_c_init
19a1 0 232 305
19a1 60 236 305
1a01 d 244 305
1a0e 14 252 305
1a22 e 257 305
1a30 e 258 305
1a3e c 265 305
1a4a 5 272 305
1a4f 5 283 305
1a54 9 290 305
1a5d c 291 305
1a69 5 294 305
1a6e 9 298 305
1a77 9 300 305
1a80 2 303 305
1a82 1 304 305
FUNC 1a83 a 0 mainCRTStartup
1a83 0 404 305
1a83 5 411 305
1a88 5 413 305
FUNC 1a8d 3d 4 __CxxUnhandledExceptionFilter(_EXCEPTION_POINTERS *)
1a8d 0 67 617
1a8d 33 68 617
1ac0 5 69 617
1ac5 2 72 617
1ac7 3 73 617
FUNC 1aca e 0 __CxxSetUnhandledExceptionFilter
1aca 0 86 617
1aca b 89 617
1ad5 2 90 617
1ad7 1 91 617
FUNC 1ade a5 4 _onexit
1ade c 79 213
1aea 12 84 213
1afc 5 86 213
1b01 c 90 213
1b0d 8 103 213
1b15 4 105 213
1b19 b 107 213
1b24 d 108 213
1b31 1d 110 213
1b4e a 112 213
1b58 d 113 213
1b65 c 115 213
1b71 3 120 213
1b74 6 121 213
1b7a 9 117 213
FUNC 1b83 12 4 atexit
1b83 0 126 213
1b83 11 127 213
1b94 1 128 213
FUNC 1b95 24 0 _RTC_Initialize
FUNC 1bb9 24 0 _RTC_Terminate
FUNC 1bf0 29 4 _ValidateImageBase
1bf0 0 44 587
1bf0 b 50 587
1bfb 2 52 587
1bfd 1 68 587
1bfe 5 55 587
1c03 6 56 587
1c09 2 58 587
1c0b d 62 587
1c18 1 68 587
FUNC 1c20 42 8 _FindPESection
1c20 0 92 587
1c20 9 99 587
1c29 19 108 587
1c42 10 111 587
1c52 a 108 587
1c5c 5 123 587
1c61 1 124 587
FUNC 1c70 bb 4 _IsNonwritableInCurrentImage
1c70 33 149 587
1ca3 7 156 587
1caa f 164 587
1cb9 2 166 587
1cbb 8 174 587
1cc3 e 175 587
1cd1 2 176 587
1cd3 2 178 587
1cd5 12 185 587
1ce7 12 195 587
1cf9 17 187 587
1d10 9 193 587
1d19 12 195 587
FUNC 1d38 45 0 _SEH_prolog4
FUNC 1d7d 14 0 _SEH_epilog4
FUNC 1d91 23 10 _except_handler4
FUNC 1db4 29 0 _setdefaultprecision
1db4 1 30 769
1db5 27 31 769
1ddc 1 32 769
FUNC 1ddd 3 0 _matherr
1ddd 0 56 348
1ddd 2 57 348
1ddf 1 58 348
FUNC 1de0 94 0 __security_init_cookie
1de0 6 97 464
1de6 21 114 464
1e07 7 116 464
1e0e 3 117 464
1e11 a 127 464
1e1b 6 132 464
1e21 8 135 464
1e29 8 136 464
1e31 8 137 464
1e39 10 139 464
1e49 2 144 464
1e4b 4 161 464
1e4f 7 163 464
1e56 4 166 464
1e5a 7 168 464
1e61 6 172 464
1e67 b 173 464
1e72 2 175 464
FUNC 1e8c f 0 __security_check_cookie
1e8c 0 52 839
1e8c 6 55 839
1e92 2 56 839
1e94 2 57 839
1e96 5 59 839
FUNC 1eae 104 0 __report_gsfailure
1eae 9 140 424
1eb7 5 170 424
1ebc 6 171 424
1ec2 6 172 424
1ec8 6 173 424
1ece 6 174 424
1ed4 6 175 424
1eda 7 176 424
1ee1 7 177 424
1ee8 7 178 424
1eef 7 179 424
1ef6 7 180 424
1efd 7 181 424
1f04 1 182 424
1f05 6 183 424
1f0b 3 190 424
1f0e 5 191 424
1f13 3 192 424
1f16 5 193 424
1f1b 3 194 424
1f1e 5 195 424
1f23 6 201 424
1f29 a 204 424
1f33 a 206 424
1f3d a 285 424
1f47 a 286 424
1f51 b 293 424
1f5c b 294 424
1f67 b 297 424
1f72 8 298 424
1f7a 8 302 424
1f82 b 304 424
1f8d 9 313 424
1f96 8 315 424
1f9e 12 319 424
1fb0 2 320 424
STACK WIN 4 1000 7f 12 0 0 0 c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1015 66 0 0 0 4 c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 16 - ^ =
STACK WIN 4 101c 5e 0 0 0 8 c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 20 - ^ = $ebx $T0 16 - ^ =
STACK WIN 4 101d 5c 0 0 0 c c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 20 - ^ = $ebx $T0 16 - ^ =
STACK WIN 4 101e 5a 0 0 0 10 c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 20 - ^ = $ebx $T0 16 - ^ =
STACK WIN 4 107f 17 b 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1080 13 a 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1096 5a 0 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 10f0 6b 9 0 0 0 8 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 10f7 61 2 0 0 4 8 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 12 - ^ =
STACK WIN 4 10fe 59 0 0 0 8 8 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 12 - ^ =
STACK WIN 4 1104 52 0 0 0 c 8 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 20 - ^ = $ebx $T0 12 - ^ =
STACK WIN 4 110b 4a 0 0 0 10 8 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 20 - ^ = $ebx $T0 12 - ^ =
STACK WIN 4 115b 59 4 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 115c 55 3 0 8 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 115d 53 2 0 8 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 11b4 18 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 11cc 2a 4 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 11f6 24 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 121a 3c 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1256 3a 14 0 1c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 1263 2b 7 0 1c 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 126a 23 0 0 1c 8 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 1290 39 8 0 1c 8 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 12c9 16 3 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 12ca 10 2 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 12df a2 8 0 c 0 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 12e5 98 2 0 c 4 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ =
STACK WIN 4 1312 6a 0 0 c 8 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ =
STACK WIN 4 1319 62 0 0 c c 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ =
STACK WIN 4 1381 12a 9 0 c 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 1389 11e 1 0 c 4 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ =
STACK WIN 4 138a 11c 0 0 c 8 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ =
STACK WIN 4 13a2 103 0 0 c c 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ =
STACK WIN 4 14ab 39 3 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 14ac 35 2 0 c 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 14c8 15 0 0 c 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 14e4 5e 6 0 c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 14e8 56 2 0 c 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 150e 2f 0 0 c 8 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 1542 70 a 0 8 0 224 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 154c 57 0 0 8 4 224 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 552 - ^ =
STACK WIN 4 15b2 221 c 0 0 8 280 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 15bc 217 2 0 0 c 280 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 644 - ^ =
STACK WIN 4 17e0 4b 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 182b 176 c 0 0 c 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 1951 14 0 0 0 c 20 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + =
STACK WIN 4 19a1 e2 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1a83 a 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1a8d 3d 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1aca e 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1ade a5 c 0 4 c 24 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 1b7a 8 0 0 4 c 24 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + =
STACK WIN 4 1b83 12 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1b95 24 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1b96 22 1 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1b97 20 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1bb9 24 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1bba 22 1 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1bbb 20 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1bf0 29 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1c20 42 18 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1c2e 33 a 0 8 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ =
STACK WIN 4 1c2f 31 9 0 8 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ =
STACK WIN 4 1c38 27 0 0 8 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ =
STACK WIN 4 1c70 bb 33 0 4 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 1c8a a1 19 0 4 10 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ =
STACK WIN 4 1cf9 14 0 0 4 c 18 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = $ebx $T0 28 - ^ =
STACK WIN 4 1d91 23 0 0 10 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1db4 29 1 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1db5 27 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1ddd 3 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1de0 94 15 0 0 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 4 1df4 7e 1 0 0 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ =
STACK WIN 4 1df5 7c 0 0 0 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ =
STACK WIN 4 1e11 5f 0 0 0 c 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ =
STACK WIN 4 1e8c f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =
STACK WIN 4 1eae 104 9 0 0 0 328 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + =
STACK WIN 0 1951 14 0 0 0 0 0 0 0 0
STACK WIN 0 1b7a 9 0 0 0 0 0 0 0 0
STACK WIN 0 1cf9 14 0 0 0 0 0 0 0 0
