diff --git a/Makefile.am b/Makefile.am index fba12d5b..faab0a14 100644 --- a/Makefile.am +++ b/Makefile.am @@ -51,9 +51,12 @@ lib_LTLIBRARIES = src/libairbag.la src_libairbag_la_SOURCES = \ src/google/airbag_types.h \ + src/google/call_stack.h \ src/google/minidump_processor.h \ src/google/stack_frame.h \ + src/google/stack_frame_cpu.h \ src/google/symbol_supplier.h \ + src/processor/call_stack.cc \ src/processor/contained_range_map.h \ src/processor/contained_range_map-inl.h \ src/processor/linked_ptr.h \ @@ -109,6 +112,7 @@ src_processor_contained_range_map_unittest_SOURCES = \ src_processor_minidump_processor_unittest_SOURCES = \ src/processor/minidump_processor_unittest.cc src_processor_minidump_processor_unittest_LDADD = \ + src/processor/call_stack.lo \ src/processor/minidump_processor.lo \ src/processor/minidump.lo \ src/processor/stackwalker.lo \ @@ -130,6 +134,7 @@ src_processor_source_line_resolver_unittest_LDADD = \ src_processor_stackwalker_selftest_SOURCES = \ src/processor/stackwalker_selftest.cc src_processor_stackwalker_selftest_LDADD = \ + src/processor/call_stack.lo \ src/processor/minidump.lo \ src/processor/source_line_resolver.lo \ src/processor/stackwalker.lo \ @@ -148,6 +153,7 @@ src_processor_minidump_dump_LDADD = \ src_processor_minidump_stackwalk_SOURCES = \ src/processor/minidump_stackwalk.cc src_processor_minidump_stackwalk_LDADD = \ + src/processor/call_stack.lo \ src/processor/minidump.lo \ src/processor/stackwalker.lo \ src/processor/stackwalker_ppc.lo \ diff --git a/Makefile.in b/Makefile.in index 72572d65..fd15374d 100644 --- a/Makefile.in +++ b/Makefile.in @@ -108,8 +108,8 @@ libLTLIBRARIES_INSTALL = $(INSTALL) LTLIBRARIES = $(lib_LTLIBRARIES) src_libairbag_la_LIBADD = am__dirstamp = $(am__leading_dot)dirstamp -am_src_libairbag_la_OBJECTS = src/processor/minidump.lo \ - src/processor/minidump_processor.lo \ +am_src_libairbag_la_OBJECTS = src/processor/call_stack.lo \ + src/processor/minidump.lo src/processor/minidump_processor.lo \ src/processor/source_line_resolver.lo \ src/processor/stackwalker.lo src/processor/stackwalker_ppc.lo \ src/processor/stackwalker_x86.lo @@ -133,6 +133,7 @@ am_src_processor_minidump_processor_unittest_OBJECTS = \ src_processor_minidump_processor_unittest_OBJECTS = \ $(am_src_processor_minidump_processor_unittest_OBJECTS) src_processor_minidump_processor_unittest_DEPENDENCIES = \ + src/processor/call_stack.lo \ src/processor/minidump_processor.lo src/processor/minidump.lo \ src/processor/stackwalker.lo src/processor/stackwalker_ppc.lo \ src/processor/stackwalker_x86.lo \ @@ -142,8 +143,8 @@ am_src_processor_minidump_stackwalk_OBJECTS = \ src_processor_minidump_stackwalk_OBJECTS = \ $(am_src_processor_minidump_stackwalk_OBJECTS) src_processor_minidump_stackwalk_DEPENDENCIES = \ - src/processor/minidump.lo src/processor/stackwalker.lo \ - src/processor/stackwalker_ppc.lo \ + src/processor/call_stack.lo src/processor/minidump.lo \ + src/processor/stackwalker.lo src/processor/stackwalker_ppc.lo \ src/processor/stackwalker_x86.lo \ src/processor/source_line_resolver.lo am_src_processor_postfix_evaluator_unittest_OBJECTS = \ @@ -167,7 +168,7 @@ am_src_processor_stackwalker_selftest_OBJECTS = \ src_processor_stackwalker_selftest_OBJECTS = \ $(am_src_processor_stackwalker_selftest_OBJECTS) src_processor_stackwalker_selftest_DEPENDENCIES = \ - src/processor/minidump.lo \ + src/processor/call_stack.lo src/processor/minidump.lo \ src/processor/source_line_resolver.lo \ src/processor/stackwalker.lo src/processor/stackwalker_ppc.lo \ src/processor/stackwalker_x86.lo @@ -342,9 +343,12 @@ dist_doc_DATA = \ lib_LTLIBRARIES = src/libairbag.la src_libairbag_la_SOURCES = \ src/google/airbag_types.h \ + src/google/call_stack.h \ src/google/minidump_processor.h \ src/google/stack_frame.h \ + src/google/stack_frame_cpu.h \ src/google/symbol_supplier.h \ + src/processor/call_stack.cc \ src/processor/contained_range_map.h \ src/processor/contained_range_map-inl.h \ src/processor/linked_ptr.h \ @@ -380,6 +384,7 @@ src_processor_minidump_processor_unittest_SOURCES = \ src/processor/minidump_processor_unittest.cc src_processor_minidump_processor_unittest_LDADD = \ + src/processor/call_stack.lo \ src/processor/minidump_processor.lo \ src/processor/minidump.lo \ src/processor/stackwalker.lo \ @@ -403,6 +408,7 @@ src_processor_stackwalker_selftest_SOURCES = \ src/processor/stackwalker_selftest.cc src_processor_stackwalker_selftest_LDADD = \ + src/processor/call_stack.lo \ src/processor/minidump.lo \ src/processor/source_line_resolver.lo \ src/processor/stackwalker.lo \ @@ -420,6 +426,7 @@ src_processor_minidump_stackwalk_SOURCES = \ src/processor/minidump_stackwalk.cc src_processor_minidump_stackwalk_LDADD = \ + src/processor/call_stack.lo \ src/processor/minidump.lo \ src/processor/stackwalker.lo \ src/processor/stackwalker_ppc.lo \ @@ -524,6 +531,8 @@ src/processor/$(am__dirstamp): src/processor/$(DEPDIR)/$(am__dirstamp): @$(mkdir_p) src/processor/$(DEPDIR) @: > src/processor/$(DEPDIR)/$(am__dirstamp) +src/processor/call_stack.lo: src/processor/$(am__dirstamp) \ + src/processor/$(DEPDIR)/$(am__dirstamp) src/processor/minidump.lo: src/processor/$(am__dirstamp) \ src/processor/$(DEPDIR)/$(am__dirstamp) src/processor/minidump_processor.lo: src/processor/$(am__dirstamp) \ @@ -633,6 +642,8 @@ src/processor/stackwalker_selftest$(EXEEXT): $(src_processor_stackwalker_selftes mostlyclean-compile: -rm -f *.$(OBJEXT) + -rm -f src/processor/call_stack.$(OBJEXT) + -rm -f src/processor/call_stack.lo -rm -f src/processor/contained_range_map_unittest.$(OBJEXT) -rm -f src/processor/minidump.$(OBJEXT) -rm -f src/processor/minidump.lo @@ -657,6 +668,7 @@ mostlyclean-compile: distclean-compile: -rm -f *.tab.c +@AMDEP_TRUE@@am__include@ @am__quote@src/processor/$(DEPDIR)/call_stack.Plo@am__quote@ @AMDEP_TRUE@@am__include@ @am__quote@src/processor/$(DEPDIR)/contained_range_map_unittest.Po@am__quote@ @AMDEP_TRUE@@am__include@ @am__quote@src/processor/$(DEPDIR)/minidump.Plo@am__quote@ @AMDEP_TRUE@@am__include@ @am__quote@src/processor/$(DEPDIR)/minidump_dump.Po@am__quote@ diff --git a/src/common/windows/pdb_source_line_writer.cc b/src/common/windows/pdb_source_line_writer.cc index b6fe15fe..5e0c4a2e 100644 --- a/src/common/windows/pdb_source_line_writer.cc +++ b/src/common/windows/pdb_source_line_writer.cc @@ -30,8 +30,15 @@ #include #include #include +#include #include "common/windows/pdb_source_line_writer.h" +// This constant may be missing from DbgHelp.h. See the documentation for +// IDiaSymbol::get_undecoratedNameEx. +#ifndef UNDNAME_NO_ECSU +#define UNDNAME_NO_ECSU 0x8000 // Suppresses enum/class/struct/union. +#endif // UNDNAME_NO_ECSU + namespace google_airbag { PDBSourceLineWriter::PDBSourceLineWriter() : output_(NULL) { @@ -119,14 +126,10 @@ bool PDBSourceLineWriter::PrintLines(IDiaEnumLineNumbers *lines) { bool PDBSourceLineWriter::PrintFunction(IDiaSymbol *function) { // The function format is: - // FUNC
- CComBSTR name; - if (FAILED(function->get_name(&name))) { - fprintf(stderr, "failed to get function name\n"); - return false; - } - if (name.Length() == 0) { - fprintf(stderr, "empty function name\n"); + // FUNC
+ DWORD rva; + if (FAILED(function->get_relativeVirtualAddress(&rva))) { + fprintf(stderr, "couldn't get rva\n"); return false; } @@ -136,18 +139,26 @@ bool PDBSourceLineWriter::PrintFunction(IDiaSymbol *function) { return false; } - DWORD rva; - if (FAILED(function->get_relativeVirtualAddress(&rva))) { - fprintf(stderr, "couldn't get rva\n"); + CComBSTR name; + int stack_param_size; + if (!GetSymbolFunctionName(function, &name, &stack_param_size)) { return false; } + // If the decorated name didn't give the parameter size, try to + // calculate it. + if (stack_param_size < 0) { + stack_param_size = GetFunctionStackParamSize(function); + } + + fprintf(output_, "FUNC %x %llx %x %ws\n", + rva, length, stack_param_size, name); + CComPtr lines; if (FAILED(session_->findLinesByRVA(rva, DWORD(length), &lines))) { return false; } - fwprintf(output_, L"FUNC %x %llx %s\n", rva, length, name); if (!PrintLines(lines)) { return false; } @@ -211,7 +222,7 @@ bool PDBSourceLineWriter::PrintFunctions() { DWORD rva_last = 0; if (FAILED(symbol->get_relativeVirtualAddress(&rva_last))) { fprintf(stderr, "failed to get symbol rva\n"); - return false; + return false; } ULONG count; @@ -221,10 +232,19 @@ bool PDBSourceLineWriter::PrintFunctions() { fprintf(stderr, "failed to get symbol tag\n"); return false; } + + // For a given function, DIA seems to give either a symbol with + // SymTagFunction or SymTagPublicSymbol, but not both. This means + // that PDBSourceLineWriter will output either a FUNC or PUBLIC line, + // but not both. if (tag == SymTagFunction) { if (!PrintFunction(symbol)) { return false; } + } else if (tag == SymTagPublicSymbol) { + if (!PrintCodePublicSymbol(symbol)) { + return false; + } } symbol.Release(); } while (SUCCEEDED(symbols->Next(1, &symbol, &count)) && count == 1); @@ -247,7 +267,7 @@ bool PDBSourceLineWriter::PrintFrameData() { ULONG count; while (!frame_data_enum && SUCCEEDED(tables->Next(1, &table, &count)) && - count == 1) { + count == 1) { table->QueryInterface(_uuidof(IDiaEnumFrameData), reinterpret_cast(&frame_data_enum)); table.Release(); @@ -277,6 +297,9 @@ bool PDBSourceLineWriter::PrintFrameData() { // epliog_size is always 0. DWORD epilog_size = 0; + // parameter_size is the size of parameters passed on the stack. If any + // parameters are not passed on the stack (such as in registers), their + // sizes will not be included in parameter_size. DWORD parameter_size; if (FAILED(frame_data->get_lengthParams(¶meter_size))) return false; @@ -289,18 +312,39 @@ bool PDBSourceLineWriter::PrintFrameData() { if (FAILED(frame_data->get_lengthLocals(&local_size))) return false; - DWORD max_stack_size; + // get_maxStack can return S_FALSE, just use 0 in that case. + DWORD max_stack_size = 0; if (FAILED(frame_data->get_maxStack(&max_stack_size))) return false; - BSTR program_string; - if (FAILED(frame_data->get_program(&program_string))) + // get_programString can return S_FALSE, indicating that there is no + // program string. In that case, check whether %ebp is used. + HRESULT program_string_result; + CComBSTR program_string; + if (FAILED(program_string_result = frame_data->get_program( + &program_string))) { return false; + } - fprintf(output_, "STACK WIN %x %x %x %x %x %x %x %x %x %ws\n", + // get_allocatesBasePointer can return S_FALSE, treat that as though + // %ebp is not used. + BOOL allocates_base_pointer = FALSE; + if (program_string_result != S_OK) { + if (FAILED(frame_data->get_allocatesBasePointer( + &allocates_base_pointer))) { + return false; + } + } + + fprintf(output_, "STACK WIN %x %x %x %x %x %x %x %x %x %d ", type, rva, code_size, prolog_size, epilog_size, parameter_size, saved_register_size, local_size, max_stack_size, - program_string); + program_string_result == S_OK); + if (program_string_result == S_OK) { + fprintf(output_, "%ws\n", program_string); + } else { + fprintf(output_, "%d\n", allocates_base_pointer); + } frame_data.Release(); } @@ -308,6 +352,259 @@ bool PDBSourceLineWriter::PrintFrameData() { return true; } +bool PDBSourceLineWriter::PrintCodePublicSymbol(IDiaSymbol *symbol) { + BOOL is_code; + if (FAILED(symbol->get_code(&is_code))) { + return false; + } + if (!is_code) { + return true; + } + + DWORD rva; + if (FAILED(symbol->get_relativeVirtualAddress(&rva))) { + return false; + } + + CComBSTR name; + int stack_param_size; + if (!GetSymbolFunctionName(symbol, &name, &stack_param_size)) { + return false; + } + + fprintf(output_, "PUBLIC %x %x %ws\n", rva, + stack_param_size > 0 ? stack_param_size : 0, name); + return true; +} + +// wcstol_positive_strict is sort of like wcstol, but much stricter. string +// should be a buffer pointing to a null-terminated string containing only +// decimal digits. If the entire string can be converted to an integer +// without overflowing, and there are no non-digit characters before the +// result is set to the value and this function returns true. Otherwise, +// this function returns false. This is an alternative to the strtol, atoi, +// and scanf families, which are not as strict about input and in some cases +// don't provide a good way for the caller to determine if a conversion was +// successful. +static bool wcstol_positive_strict(wchar_t *string, int *result) { + int value = 0; + for (wchar_t *c = string; *c != '\0'; ++c) { + int last_value = value; + value *= 10; + // Detect overflow. + if (value / 10 != last_value || value < 0) { + return false; + } + if (*c < '0' || *c > '9') { + return false; + } + unsigned int c_value = *c - '0'; + last_value = value; + value += c_value; + // Detect overflow. + if (value < last_value) { + return false; + } + // Forbid leading zeroes unless the string is just "0". + if (value == 0 && *(c+1) != '\0') { + return false; + } + } + *result = value; + return true; +} + +// static +bool PDBSourceLineWriter::GetSymbolFunctionName(IDiaSymbol *function, + BSTR *name, + int *stack_param_size) { + *stack_param_size = -1; + const DWORD undecorate_options = UNDNAME_NO_MS_KEYWORDS | + UNDNAME_NO_FUNCTION_RETURNS | + UNDNAME_NO_ALLOCATION_MODEL | + UNDNAME_NO_ALLOCATION_LANGUAGE | + UNDNAME_NO_THISTYPE | + UNDNAME_NO_ACCESS_SPECIFIERS | + UNDNAME_NO_THROW_SIGNATURES | + UNDNAME_NO_MEMBER_TYPE | + UNDNAME_NO_RETURN_UDT_MODEL | + UNDNAME_NO_ECSU; + + // Use get_undecoratedNameEx to get readable C++ names with arguments. + if (function->get_undecoratedNameEx(undecorate_options, name) != S_OK) { + if (function->get_name(name) != S_OK) { + fprintf(stderr, "failed to get function name\n"); + return false; + } + // If a name comes from get_name because no undecorated form existed, + // it's already formatted properly to be used as output. Don't do any + // additional processing. + } else { + // C++ uses a bogus "void" argument for functions and methods that don't + // take any parameters. Take it out of the undecorated name because it's + // ugly and unnecessary. + const wchar_t *replace_string = L"(void)"; + const size_t replace_length = wcslen(replace_string); + const wchar_t *replacement_string = L"()"; + size_t length = wcslen(*name); + if (length >= replace_length) { + wchar_t *name_end = *name + length - replace_length; + if (wcscmp(name_end, replace_string) == 0) { + wcscpy_s(name_end, replace_length, replacement_string); + length = wcslen(*name); + } + } + + // Undecorate names used for stdcall and fastcall. These names prefix + // the identifier with '_' (stdcall) or '@' (fastcall) and suffix it + // with '@' followed by the number of bytes of parameters, in decimal. + // If such a name is found, take note of the size and undecorate it. + // Only do this for names that aren't C++, which is determined based on + // whether the undecorated name contains any ':' or '(' characters. + if (!wcschr(*name, ':') && !wcschr(*name, '(') && + (*name[0] == '_' || *name[0] == '@')) { + wchar_t *last_at = wcsrchr(*name + 1, '@'); + if (last_at && wcstol_positive_strict(last_at + 1, stack_param_size)) { + // If this function adheres to the fastcall convention, it accepts up + // to the first 8 bytes of parameters in registers (%ecx and %edx). + // We're only interested in the stack space used for parameters, so + // so subtract 8 and don't let the size go below 0. + if (*name[0] == '@') { + if (*stack_param_size > 8) { + *stack_param_size -= 8; + } else { + *stack_param_size = 0; + } + } + + // Undecorate the name by moving it one character to the left in its + // buffer, and terminating it where the last '@' had been. + wcsncpy_s(*name, length, *name + 1, last_at - *name - 1); + } else if (*name[0] == '_') { + // This symbol's name is encoded according to the cdecl rules. The + // name doesn't end in a '@' character followed by a decimal positive + // nteger, so it's not a stdcall name. Strip off the leading + // underscore. + wcsncpy_s(*name, length, *name + 1, length - 1); + } + } + } + + return true; +} + +// static +int PDBSourceLineWriter::GetFunctionStackParamSize(IDiaSymbol *function) { + // This implementation is highly x86-specific. + + // Gather the symbols corresponding to data. + CComPtr data_children; + if (FAILED(function->findChildren(SymTagData, NULL, nsNone, + &data_children))) { + return 0; + } + + // lowest_base is the lowest %ebp-relative byte offset used for a parameter. + // highest_end is one greater than the highest offset (i.e. base + length). + // Stack parameters are assumed to be contiguous, because in reality, they + // are. + int lowest_base = INT_MAX; + int highest_end = INT_MIN; + + CComPtr child; + DWORD count; + while (SUCCEEDED(data_children->Next(1, &child, &count)) && count == 1) { + // If any operation fails at this point, just proceed to the next child. + // Use the next_child label instead of continue because child needs to + // be released before it's reused. Declare constructable/destructable + // types early to avoid gotos that cross initializations. + CComPtr child_type; + + // DataIsObjectPtr is only used for |this|. Because |this| can be passed + // as a stack parameter, look for it in addition to traditional + // parameters. + DWORD child_kind; + if (FAILED(child->get_dataKind(&child_kind)) || + (child_kind != DataIsParam && child_kind != DataIsObjectPtr)) { + goto next_child; + } + + // Only concentrate on register-relative parameters. Parameters may also + // be enregistered (passed directly in a register), but those don't + // consume any stack space, so they're not of interest. + DWORD child_location_type; + if (FAILED(child->get_locationType(&child_location_type)) || + child_location_type != LocIsRegRel) { + goto next_child; + } + + // Of register-relative parameters, the only ones that make any sense are + // %ebp- or %esp-relative. Note that MSVC's debugging information always + // gives parameters as %ebp-relative even when a function doesn't use a + // traditional frame pointer and stack parameters are accessed relative to + // %esp, so just look for %ebp-relative parameters. If you wanted to + // access parameters, you'd probably want to treat these %ebp-relative + // offsets as if they were relative to %esp before a function's prolog + // executed. + DWORD child_register; + if (FAILED(child->get_registerId(&child_register)) || + child_register != CV_REG_EBP) { + goto next_child; + } + + LONG child_register_offset; + if (FAILED(child->get_offset(&child_register_offset))) { + goto next_child; + } + + if (FAILED(child->get_type(&child_type))) { + goto next_child; + } + + ULONGLONG child_length; + if (FAILED(child_type->get_length(&child_length))) { + goto next_child; + } + + int child_end = child_register_offset + static_cast(child_length); + if (child_register_offset < lowest_base) { + lowest_base = child_register_offset; + } + if (child_end > highest_end) { + highest_end = child_end; + } + +next_child: + child.Release(); + } + + int param_size = 0; + // Make sure lowest_base isn't less than 4, because [%esp+4] is the lowest + // possible address to find a stack parameter before executing a function's + // prolog (see above). Some optimizations cause parameter offsets to be + // lower than 4, but we're not concerned with those because we're only + // looking for parameters contained in addresses higher than where the + // return address is stored. + if (lowest_base < 4) { + lowest_base = 4; + } + if (highest_end > lowest_base) { + // All stack parameters are pushed as at least 4-byte quantities. If the + // last type was narrower than 4 bytes, promote it. This assumes that all + // parameters' offsets are 4-byte-aligned, which is always the case. Only + // worry about the last type, because we're not summing the type sizes, + // just looking at the lowest and highest offsets. + int remainder = highest_end % 4; + if (remainder) { + highest_end += 4 - remainder; + } + + param_size = highest_end - lowest_base; + } + + return param_size; +} + bool PDBSourceLineWriter::WriteMap(FILE *map_file) { bool ret = false; output_ = map_file; diff --git a/src/common/windows/pdb_source_line_writer.h b/src/common/windows/pdb_source_line_writer.h index c4ce489f..fabc6885 100644 --- a/src/common/windows/pdb_source_line_writer.h +++ b/src/common/windows/pdb_source_line_writer.h @@ -96,6 +96,24 @@ class PDBSourceLineWriter { // backtraces in the absence of frame pointers. Returns true on success. bool PrintFrameData(); + // Outputs a single public symbol address and name, if the symbol corresponds + // to a code address. Returns true on success. If symbol is does not + // correspond to code, returns true without outputting anything. + bool PrintCodePublicSymbol(IDiaSymbol *symbol); + + // Returns the function name for a symbol. If possible, the name is + // undecorated. If the symbol's decorated form indicates the size of + // parameters on the stack, this information is returned in stack_param_size. + // Returns true on success. If the symbol doesn't encode parameter size + // information, stack_param_size is set to -1. + static bool GetSymbolFunctionName(IDiaSymbol *function, BSTR *name, + int *stack_param_size); + + // Returns the number of bytes of stack space used for a function's + // parameters. function must have the tag SymTagFunction. In the event of + // a failure, returns 0, which is also a valid number of bytes. + static int GetFunctionStackParamSize(IDiaSymbol *function); + // The session for the currently-open pdb file. CComPtr session_; diff --git a/src/google/call_stack.h b/src/google/call_stack.h new file mode 100644 index 00000000..6e8f5f13 --- /dev/null +++ b/src/google/call_stack.h @@ -0,0 +1,73 @@ +// Copyright (c) 2006, Google Inc. +// All rights reserved. +// +// Redistribution and use in source and binary forms, with or without +// modification, are permitted provided that the following conditions are +// met: +// +// * Redistributions of source code must retain the above copyright +// notice, this list of conditions and the following disclaimer. +// * Redistributions in binary form must reproduce the above +// copyright notice, this list of conditions and the following disclaimer +// in the documentation and/or other materials provided with the +// distribution. +// * Neither the name of Google Inc. nor the names of its +// contributors may be used to endorse or promote products derived from +// this software without specific prior written permission. +// +// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR +// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT +// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, +// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT +// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, +// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY +// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT +// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE +// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +// call_stack.h: A call stack comprised of stack frames. +// +// This class manages a vector of stack frames. It is used instead of +// exposing the vector directly to allow the CallStack to own StackFrame +// pointers without having to publicly export the linked_ptr class. A +// CallStack must be composed of pointers instead of objects to allow for +// CPU-specific StackFrame subclasses. +// +// By convention, the stack frame at index 0 is the innermost callee frame, +// and the frame at the highest index in a call stack is the outermost +// caller. CallStack only allows stacks to be built by pushing frames, +// beginning with the innermost callee frame. +// +// Author: Mark Mentovai + +#ifndef GOOGLE_CALL_STACK_H__ +#define GOOGLE_CALL_STACK_H__ + +#include + +namespace google_airbag { + +using std::vector; + +struct StackFrame; +template class linked_ptr; + +class CallStack { + public: + ~CallStack(); + + const vector* frames() const { return &frames_; } + + private: + // Stackwalker is responsible for building the frames_ vector. + friend class Stackwalker; + + // Storage for pushed frames. + vector frames_; +}; + +} // namespace google_airbag + +#endif // GOOGLE_CALL_STACK_H__ diff --git a/src/google/minidump_processor.h b/src/google/minidump_processor.h index d5470b70..925ea90a 100644 --- a/src/google/minidump_processor.h +++ b/src/google/minidump_processor.h @@ -31,12 +31,12 @@ #define GOOGLE_MINIDUMP_PROCESSOR_H__ #include -#include "google/stack_frame.h" namespace google_airbag { using std::string; +class CallStack; class SymbolSupplier; class MinidumpProcessor { @@ -46,9 +46,9 @@ class MinidumpProcessor { MinidumpProcessor(SymbolSupplier *supplier); ~MinidumpProcessor(); - // Fills in the given StackFrames vector by processing the minidump file. - // Returns true on success. - bool Process(const string &minidump_file, StackFrames *stack_frames); + // Fills in the given CallStack by processing the minidump file. Returns + // true on success. + bool Process(const string &minidump_file, CallStack *stack); private: SymbolSupplier *supplier_; diff --git a/src/google/stack_frame.h b/src/google/stack_frame.h index 110dfc63..43b52dd0 100644 --- a/src/google/stack_frame.h +++ b/src/google/stack_frame.h @@ -31,58 +31,51 @@ #define GOOGLE_STACK_FRAME_H__ #include -#include #include "google/airbag_types.h" namespace google_airbag { using std::string; -using std::vector; struct StackFrame { - // Initialize sensible defaults, or this will be instantiated with - // primitive members in an undetermined state. StackFrame() - : instruction() - , frame_pointer() - , module_base() - , module_name() - , function_base() - , function_name() - , source_file_name() - , source_line() {} + : instruction(), + module_base(), + module_name(), + function_base(), + function_name(), + source_file_name(), + source_line() {} + virtual ~StackFrame() {} - // The program counter location relative to the module base + // The program counter location as an absolute virtual address. For the + // innermost called frame in a stack, this will be an exact program counter + // or instruction pointer value. For all other frames, this will be within + // the instruction that caused execution to branch to a called function, + // but may not necessarily point to the exact beginning of that instruction. u_int64_t instruction; - // The frame pointer to this stack frame - u_int64_t frame_pointer; - - // The base address of the module + // The base address of the module. u_int64_t module_base; - // The module in which the pc resides + // The module in which the instruction resides. string module_name; // The start address of the function, may be omitted if debug symbols // are not available. u_int64_t function_base; - // The function name, may be omitted if debug symbols are not available + // The function name, may be omitted if debug symbols are not available. string function_name; - // The source file name, may be omitted if debug symbols are not available + // The source file name, may be omitted if debug symbols are not available. string source_file_name; - // The (1-based) source line number, - // may be omitted if debug symbols are not available + // The (1-based) source line number, may be omitted if debug symbols are + // not available. int source_line; - - // TODO(bryner): saved registers }; -typedef vector StackFrames; - } // namespace google_airbag #endif // GOOGLE_STACK_FRAME_H__ diff --git a/src/google/stack_frame_cpu.h b/src/google/stack_frame_cpu.h new file mode 100644 index 00000000..46539418 --- /dev/null +++ b/src/google/stack_frame_cpu.h @@ -0,0 +1,103 @@ +// Copyright (c) 2006, Google Inc. +// All rights reserved. +// +// Redistribution and use in source and binary forms, with or without +// modification, are permitted provided that the following conditions are +// met: +// +// * Redistributions of source code must retain the above copyright +// notice, this list of conditions and the following disclaimer. +// * Redistributions in binary form must reproduce the above +// copyright notice, this list of conditions and the following disclaimer +// in the documentation and/or other materials provided with the +// distribution. +// * Neither the name of Google Inc. nor the names of its +// contributors may be used to endorse or promote products derived from +// this software without specific prior written permission. +// +// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR +// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT +// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, +// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT +// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, +// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY +// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT +// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE +// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +// stack_frame_cpu.h: CPU-specific StackFrame extensions. +// +// These types extend the StackFrame structure to carry CPU-specific register +// state. They are defined in this header instead of stack_frame.h to +// avoid the need to include minidump_format.h when only the generic +// StackFrame type is needed. +// +// Author: Mark Mentovai + +#ifndef GOOGLE_STACK_FRAME_CPU_H__ +#define GOOGLE_STACK_FRAME_CPU_H__ + +#include "google/stack_frame.h" +#include "processor/minidump_format.h" + +namespace google_airbag { + +struct StackFrameX86 : public StackFrame { + // ContextValidity has one entry for each relevant hardware pointer register + // (%eip and %esp) and one entry for each nonvolatile (callee-save) register. + enum ContextValidity { + CONTEXT_VALID_NONE = 0, + CONTEXT_VALID_EIP = 1 << 0, + CONTEXT_VALID_ESP = 1 << 1, + CONTEXT_VALID_EBP = 1 << 2, + CONTEXT_VALID_EBX = 1 << 3, + CONTEXT_VALID_ESI = 1 << 4, + CONTEXT_VALID_EDI = 1 << 5, + CONTEXT_VALID_ALL = -1 + }; + + StackFrameX86() : context(), context_validity(CONTEXT_VALID_NONE) {} + + // Register state. This is only fully valid for the topmost frame in a + // stack. In other frames, the values of nonvolatile registers may be + // present, given sufficient debugging information. Refer to + // context_validity. + MDRawContextX86 context; + + // context_validity is actually ContextValidity, but int is used because + // the OR operator doesn't work well with enumerated types. This indicates + // which fields in context are valid. + int context_validity; +}; + +struct StackFramePPC : public StackFrame { + // ContextValidity should eventually contain entries for the validity of + // other nonvolatile (callee-save) registers as in + // StackFrameX86::ContextValidity, but the ppc stackwalker doesn't currently + // locate registers other than the ones listed here. + enum ContextValidity { + CONTEXT_VALID_NONE = 0, + CONTEXT_VALID_SRR0 = 1 << 0, + CONTEXT_VALID_GPR1 = 1 << 1, + CONTEXT_VALID_ALL = -1 + }; + + StackFramePPC() : context(), context_validity(CONTEXT_VALID_NONE) {} + + // Register state. This is only fully valid for the topmost frame in a + // stack. In other frames, the values of nonvolatile registers may be + // present, given sufficient debugging information. Refer to + // context_validity. + MDRawContextPPC context; + + // context_validity is actually ContextValidity, but int is used because + // the OR operator doesn't work well with enumerated types. This indicates + // which fields in context are valid. + int context_validity; +}; + +} // namespace google_airbag + +#endif // GOOGLE_STACK_FRAME_CPU_H__ diff --git a/src/processor/call_stack.cc b/src/processor/call_stack.cc new file mode 100644 index 00000000..27d62799 --- /dev/null +++ b/src/processor/call_stack.cc @@ -0,0 +1,50 @@ +// Copyright (c) 2006, Google Inc. +// All rights reserved. +// +// Redistribution and use in source and binary forms, with or without +// modification, are permitted provided that the following conditions are +// met: +// +// * Redistributions of source code must retain the above copyright +// notice, this list of conditions and the following disclaimer. +// * Redistributions in binary form must reproduce the above +// copyright notice, this list of conditions and the following disclaimer +// in the documentation and/or other materials provided with the +// distribution. +// * Neither the name of Google Inc. nor the names of its +// contributors may be used to endorse or promote products derived from +// this software without specific prior written permission. +// +// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR +// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT +// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, +// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT +// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, +// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY +// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT +// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE +// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +// call_stack.cc: A call stack comprised of stack frames. +// +// See call_stack.h for documentation. +// +// Author: Mark Mentovai + +#include "google/call_stack.h" +#include "google/stack_frame.h" +#include "processor/linked_ptr.h" + +namespace google_airbag { + +CallStack::~CallStack() { + for (vector::const_iterator iterator = frames_.begin(); + iterator != frames_.end(); + ++iterator) { + delete *iterator; + } +} + +} // namespace google_airbag diff --git a/src/processor/linked_ptr.h b/src/processor/linked_ptr.h index b4c2787c..c1277dc2 100644 --- a/src/processor/linked_ptr.h +++ b/src/processor/linked_ptr.h @@ -53,6 +53,8 @@ #ifndef PROCESSOR_LINKED_PTR_H__ #define PROCESSOR_LINKED_PTR_H__ +namespace google_airbag { + // This is used internally by all instances of linked_ptr<>. It needs to be // a non-template class because different types of linked_ptr<> can refer to // the same object (linked_ptr(obj) vs linked_ptr(obj)). @@ -186,4 +188,6 @@ linked_ptr make_linked_ptr(T* ptr) { return linked_ptr(ptr); } -#endif // PROCESSOR_LINKED_PTR_H__ +} // namespace google_airbag + +#endif // PROCESSOR_LINKED_PTR_H__ diff --git a/src/processor/minidump.cc b/src/processor/minidump.cc index 2c751e07..6b33aeed 100644 --- a/src/processor/minidump.cc +++ b/src/processor/minidump.cc @@ -647,7 +647,7 @@ const u_int8_t* MinidumpMemoryRegion::GetMemory() { return NULL; // TODO(mmentovai): verify rational size! - auto_ptr > memory( + auto_ptr< vector > memory( new vector(descriptor_->memory.data_size)); if (!minidump_->ReadBytes(&(*memory)[0], descriptor_->memory.data_size)) @@ -1086,7 +1086,7 @@ const u_int8_t* MinidumpModule::GetCVRecord() { // variable-sized due to their pdb_file_name fields; these structures // are not sizeof(MDCVInfoPDB70) or sizeof(MDCVInfoPDB20) and treating // them as such would result in incomplete structures or overruns. - auto_ptr > cv_record( + auto_ptr< vector > cv_record( new vector(module_.cv_record.data_size)); if (!minidump_->ReadBytes(&(*cv_record)[0], module_.cv_record.data_size)) @@ -1161,7 +1161,7 @@ const MDImageDebugMisc* MinidumpModule::GetMiscRecord() { // because the MDImageDebugMisc is variable-sized due to its data field; // this structure is not sizeof(MDImageDebugMisc) and treating it as such // would result in an incomplete structure or an overrun. - auto_ptr > misc_record_mem( + auto_ptr< vector > misc_record_mem( new vector(module_.misc_record.data_size)); MDImageDebugMisc* misc_record = reinterpret_cast(&(*misc_record_mem)[0]); diff --git a/src/processor/minidump_processor.cc b/src/processor/minidump_processor.cc index f58b54ba..2972fc5c 100644 --- a/src/processor/minidump_processor.cc +++ b/src/processor/minidump_processor.cc @@ -45,7 +45,7 @@ MinidumpProcessor::~MinidumpProcessor() { } bool MinidumpProcessor::Process(const string &minidump_file, - StackFrames *stack_frames) { + CallStack *stack) { Minidump dump(minidump_file); if (!dump.Read()) { return false; @@ -79,7 +79,7 @@ bool MinidumpProcessor::Process(const string &minidump_file, return false; } - walker->Walk(stack_frames); + walker->Walk(stack); return true; } diff --git a/src/processor/minidump_processor_unittest.cc b/src/processor/minidump_processor_unittest.cc index d5e7bdcb..eefc64a2 100644 --- a/src/processor/minidump_processor_unittest.cc +++ b/src/processor/minidump_processor_unittest.cc @@ -31,13 +31,15 @@ // corresponding symbol file, and checks the stack frames for correctness. #include +#include "google/call_stack.h" #include "google/minidump_processor.h" +#include "google/stack_frame.h" #include "google/symbol_supplier.h" #include "processor/minidump.h" using std::string; +using google_airbag::CallStack; using google_airbag::MinidumpProcessor; -using google_airbag::StackFrames; #define ASSERT_TRUE(cond) \ if (!(cond)) { \ @@ -72,40 +74,40 @@ static bool RunTests() { TestSymbolSupplier supplier; MinidumpProcessor processor(&supplier); - StackFrames stack_frames; + CallStack stack; string minidump_file = string(getenv("srcdir") ? getenv("srcdir") : ".") + "/src/processor/testdata/minidump2.dmp"; - ASSERT_TRUE(processor.Process(minidump_file, &stack_frames)); - ASSERT_EQ(stack_frames.size(), 4); + ASSERT_TRUE(processor.Process(minidump_file, &stack)); + ASSERT_EQ(stack.frames()->size(), 4); - ASSERT_EQ(stack_frames[0].module_base, 0x400000); - ASSERT_EQ(stack_frames[0].module_name, "c:\\test_app.exe"); - ASSERT_EQ(stack_frames[0].function_name, "CrashFunction"); - ASSERT_EQ(stack_frames[0].source_file_name, "c:\\test_app.cc"); - ASSERT_EQ(stack_frames[0].source_line, 36); + ASSERT_EQ(stack.frames()->at(0)->module_base, 0x400000); + ASSERT_EQ(stack.frames()->at(0)->module_name, "c:\\test_app.exe"); + ASSERT_EQ(stack.frames()->at(0)->function_name, "CrashFunction()"); + ASSERT_EQ(stack.frames()->at(0)->source_file_name, "c:\\test_app.cc"); + ASSERT_EQ(stack.frames()->at(0)->source_line, 65); - ASSERT_EQ(stack_frames[1].module_base, 0x400000); - ASSERT_EQ(stack_frames[1].module_name, "c:\\test_app.exe"); - ASSERT_EQ(stack_frames[1].function_name, "main"); - ASSERT_EQ(stack_frames[1].source_file_name, "c:\\test_app.cc"); - ASSERT_EQ(stack_frames[1].source_line, 42); + ASSERT_EQ(stack.frames()->at(1)->module_base, 0x400000); + ASSERT_EQ(stack.frames()->at(1)->module_name, "c:\\test_app.exe"); + ASSERT_EQ(stack.frames()->at(1)->function_name, "main"); + ASSERT_EQ(stack.frames()->at(1)->source_file_name, "c:\\test_app.cc"); + ASSERT_EQ(stack.frames()->at(1)->source_line, 70); // This comes from the CRT - ASSERT_EQ(stack_frames[2].module_base, 0x400000); - ASSERT_EQ(stack_frames[2].module_name, "c:\\test_app.exe"); - ASSERT_EQ(stack_frames[2].function_name, "__tmainCRTStartup"); - ASSERT_EQ(stack_frames[2].source_file_name, + ASSERT_EQ(stack.frames()->at(2)->module_base, 0x400000); + ASSERT_EQ(stack.frames()->at(2)->module_name, "c:\\test_app.exe"); + ASSERT_EQ(stack.frames()->at(2)->function_name, "__tmainCRTStartup"); + ASSERT_EQ(stack.frames()->at(2)->source_file_name, "f:\\rtm\\vctools\\crt_bld\\self_x86\\crt\\src\\crt0.c"); - ASSERT_EQ(stack_frames[2].source_line, 318); + ASSERT_EQ(stack.frames()->at(2)->source_line, 318); // No debug info available for kernel32.dll - ASSERT_EQ(stack_frames[3].module_base, 0x7c800000); - ASSERT_EQ(stack_frames[3].module_name, + ASSERT_EQ(stack.frames()->at(3)->module_base, 0x7c800000); + ASSERT_EQ(stack.frames()->at(3)->module_name, "C:\\WINDOWS\\system32\\kernel32.dll"); - ASSERT_TRUE(stack_frames[3].function_name.empty()); - ASSERT_TRUE(stack_frames[3].source_file_name.empty()); - ASSERT_EQ(stack_frames[3].source_line, 0); + ASSERT_TRUE(stack.frames()->at(3)->function_name.empty()); + ASSERT_TRUE(stack.frames()->at(3)->source_file_name.empty()); + ASSERT_EQ(stack.frames()->at(3)->source_line, 0); return true; } diff --git a/src/processor/minidump_stackwalk.cc b/src/processor/minidump_stackwalk.cc index 3620e30c..a7d57f3c 100644 --- a/src/processor/minidump_stackwalk.cc +++ b/src/processor/minidump_stackwalk.cc @@ -38,12 +38,15 @@ #include #include +#include "google/call_stack.h" +#include "google/stack_frame.h" #include "processor/minidump.h" #include "processor/stackwalker_x86.h" using std::auto_ptr; using std::string; +using google_airbag::CallStack; using google_airbag::MemoryRegion; using google_airbag::Minidump; using google_airbag::MinidumpContext; @@ -52,7 +55,6 @@ using google_airbag::MinidumpModuleList; using google_airbag::MinidumpThread; using google_airbag::MinidumpThreadList; using google_airbag::StackFrame; -using google_airbag::StackFrames; using google_airbag::Stackwalker; @@ -112,18 +114,17 @@ int main(int argc, char **argv) { exit(1); } - StackFrames stack; + CallStack stack; stackwalker->Walk(&stack); unsigned int index; - for (index = 0 ; index < stack.size() ; index++) { - StackFrame frame = stack.at(index); - printf("[%2d] ebp = 0x%08llx eip = 0x%08llx \"%s\" + 0x%08llx\n", + for (index = 0; index < stack.frames()->size(); ++index) { + StackFrame *frame = stack.frames()->at(index); + printf("[%2d] instruction = 0x%08llx \"%s\" + 0x%08llx\n", index, - frame.frame_pointer, - frame.instruction, - frame.module_base ? frame.module_name.c_str() : "0x0", - frame.instruction - frame.module_base); + frame->instruction, + frame->module_base ? frame->module_name.c_str() : "0x0", + frame->instruction - frame->module_base); } return 0; diff --git a/src/processor/postfix_evaluator-inl.h b/src/processor/postfix_evaluator-inl.h index a45a9a08..c78037bc 100644 --- a/src/processor/postfix_evaluator-inl.h +++ b/src/processor/postfix_evaluator-inl.h @@ -47,7 +47,8 @@ class AutoStackClearer { template -bool PostfixEvaluator::Evaluate(const string &expression) { +bool PostfixEvaluator::Evaluate(const string &expression, + DictionaryValidityType *assigned) { // Ensure that the stack is cleared before returning. AutoStackClearer clearer(&stack_); @@ -142,6 +143,8 @@ bool PostfixEvaluator::Evaluate(const string &expression) { return false; (*dictionary_)[identifier] = value; + if (assigned) + (*assigned)[identifier] = true; } else { // The token is not an operator, it's a literal value or an identifier. // Push it onto the stack as-is. Use push_back instead of PushValue diff --git a/src/processor/postfix_evaluator.h b/src/processor/postfix_evaluator.h index 28d8023d..46a32ac0 100644 --- a/src/processor/postfix_evaluator.h +++ b/src/processor/postfix_evaluator.h @@ -69,6 +69,7 @@ template class PostfixEvaluator { public: typedef map DictionaryType; + typedef map DictionaryValidityType; // Create a PostfixEvaluator object that may be used (with Evaluate) on // one or more expressions. PostfixEvaluator does not take ownership of @@ -82,8 +83,11 @@ class PostfixEvaluator { // Evaluate the expression. The results of execution will be stored // in one (or more) variables in the dictionary. Returns false if any // failures occure during execution, leaving variables in the dictionary - // in an indeterminate state. - bool Evaluate(const string &expression); + // in an indeterminate state. If assigned is non-NULL, any keys set in + // the dictionary as a result of evaluation will also be set to true in + // assigned, providing a way to determine if an expression modifies any + // of its input variables. + bool Evaluate(const string &expression, DictionaryValidityType *assigned); DictionaryType* dictionary() const { return dictionary_; } diff --git a/src/processor/postfix_evaluator_unittest.cc b/src/processor/postfix_evaluator_unittest.cc index 5db2e27c..f6cab215 100644 --- a/src/processor/postfix_evaluator_unittest.cc +++ b/src/processor/postfix_evaluator_unittest.cc @@ -61,7 +61,7 @@ struct EvaluateTest { struct EvaluateTestSet { // The dictionary used for all tests in the set. - map *dictionary; + PostfixEvaluator::DictionaryType *dictionary; // The list of tests. const EvaluateTest *evaluate_tests; @@ -77,7 +77,7 @@ struct EvaluateTestSet { bool RunTests() { // The first test set checks the basic operations and failure modes. - map dictionary_0; + PostfixEvaluator::DictionaryType dictionary_0; const EvaluateTest evaluate_tests_0[] = { { "$rAdd 2 2 + =", true }, // $rAdd = 2 + 2 = 4 { "$rAdd $rAdd 2 + =", true }, // $rAdd = $rAdd + 2 = 6 @@ -122,7 +122,7 @@ bool RunTests() { // The data is fudged a little bit because the tests use FakeMemoryRegion // instead of a real stack snapshot, but the program strings are real and // the implementation doesn't know or care that the data is not real. - map dictionary_1; + PostfixEvaluator::DictionaryType dictionary_1; dictionary_1["$ebp"] = 0xbfff0010; dictionary_1["$eip"] = 0x10000000; dictionary_1["$esp"] = 0xbfff0000; @@ -186,13 +186,17 @@ bool RunTests() { // tests can affect the state of the dictionary for later tests. postfix_evaluator.set_dictionary(evaluate_test_set->dictionary); + // Use a new validity dictionary for each test set. + PostfixEvaluator::DictionaryValidityType assigned; + for (unsigned int evaluate_test_index = 0; evaluate_test_index < evaluate_test_count; ++evaluate_test_index) { const EvaluateTest *evaluate_test = &evaluate_tests[evaluate_test_index]; // Do the test. - bool result = postfix_evaluator.Evaluate(evaluate_test->expression); + bool result = postfix_evaluator.Evaluate(evaluate_test->expression, + &assigned); if (result != evaluate_test->evaluable) { fprintf(stderr, "FAIL: evaluate set %d/%d, test %d/%d, " "expression \"%s\", expected %s, observed %s\n", @@ -236,6 +240,24 @@ bool RunTests() { identifier.c_str(), expected_value, observed_value); return false; } + + // The value must be set in the "assigned" dictionary if it was a + // variable. It must not have been assigned if it was a constant. + bool expected_assigned = identifier[0] == '$'; + bool observed_assigned = false; + PostfixEvaluator::DictionaryValidityType::const_iterator + iterator_assigned = assigned.find(identifier); + if (iterator_assigned != assigned.end()) { + observed_assigned = iterator_assigned->second; + } + if (expected_assigned != observed_assigned) { + fprintf(stderr, "FAIL: evaluate test set %d/%d, " + "validate assignment of \"%s\", " + "expected %d, observed %d\n", + evaluate_test_set_index, evaluate_test_set_count, + identifier.c_str(), expected_assigned, observed_assigned); + return false; + } } } diff --git a/src/processor/source_line_resolver.cc b/src/processor/source_line_resolver.cc index 6d5f219c..3c612c75 100644 --- a/src/processor/source_line_resolver.cc +++ b/src/processor/source_line_resolver.cc @@ -62,13 +62,19 @@ struct SourceLineResolver::Line { struct SourceLineResolver::Function { Function(const string &function_name, MemAddr function_address, - MemAddr code_size) - : name(function_name), address(function_address), size(code_size) { } + MemAddr code_size, + int set_parameter_size) + : name(function_name), address(function_address), size(code_size), + parameter_size(set_parameter_size) { } string name; MemAddr address; MemAddr size; - RangeMap > lines; + + // The size of parameters passed to this function on the stack. + int parameter_size; + + RangeMap< MemAddr, linked_ptr > lines; }; class SourceLineResolver::Module { @@ -128,7 +134,7 @@ class SourceLineResolver::Module { string name_; FileMap files_; - RangeMap > functions_; + RangeMap< MemAddr, linked_ptr > functions_; // Each element in the array is a ContainedRangeMap for a type listed in // StackInfoTypes. These are split by type because there may be overlaps @@ -184,7 +190,10 @@ bool SourceLineResolver::Module::LoadMap(const string &map_file) { return false; } - char buffer[1024]; + // TODO(mmentovai): this might not be large enough to handle really long + // lines, which might be present for FUNC lines of highly-templatized + // code. + char buffer[8192]; Function *cur_func = NULL; while (fgets(buffer, sizeof(buffer), f)) { @@ -201,6 +210,8 @@ bool SourceLineResolver::Module::LoadMap(const string &map_file) { } functions_.StoreRange(cur_func->address, cur_func->size, linked_ptr(cur_func)); + } else if (strncmp(buffer, "PUBLIC ", 7) == 0) { + // TODO(mmentovai): add a public map } else { if (!cur_func) { return false; @@ -221,18 +232,19 @@ bool SourceLineResolver::Module::LoadMap(const string &map_file) { void SourceLineResolver::Module::LookupAddress( MemAddr address, StackFrame *frame, StackFrameInfo *frame_info) const { if (frame_info) { + frame_info->valid = StackFrameInfo::VALID_NONE; + // Check for debugging info first, before any possible early returns. // The caller will know that frame_info was filled in by checking its // valid field. // - // We only know about STACK_INFO_FRAME_DATA and STACK_INFO_FPO. - // STACK_INFO_STANDARD looks like it would do the right thing, too. - // Prefer them in this order. + // We only know about STACK_INFO_FRAME_DATA and STACK_INFO_FPO. Prefer + // them in this order. STACK_INFO_FRAME_DATA is the newer type that + // includes its own program string. STACK_INFO_FPO is the older type + // corresponding to the FPO_DATA struct. See stackwalker_x86.cc. if (!stack_info_[STACK_INFO_FRAME_DATA].RetrieveRange(address, frame_info)) { - if (!stack_info_[STACK_INFO_FPO].RetrieveRange(address, frame_info)) { - stack_info_[STACK_INFO_STANDARD].RetrieveRange(address, frame_info); - } + stack_info_[STACK_INFO_FPO].RetrieveRange(address, frame_info); } } @@ -252,6 +264,16 @@ void SourceLineResolver::Module::LookupAddress( frame->source_file_name = files_.find(line->source_file_id)->second; } frame->source_line = line->line; + + if (frame_info && + !(frame_info->valid & StackFrameInfo::VALID_PARAMETER_SIZE)) { + // Even without a relevant STACK line, many functions contain information + // about how much space their parameters consume on the stack. Prefer + // the STACK stuff (above), but if it's not present, take the + // information from the FUNC line. + frame_info->parameter_size = func->parameter_size; + frame_info->valid |= StackFrameInfo::VALID_PARAMETER_SIZE; + } } // static @@ -303,19 +325,20 @@ void SourceLineResolver::Module::ParseFile(char *file_line) { SourceLineResolver::Function* SourceLineResolver::Module::ParseFunction( char *function_line) { - // FUNC
+ // FUNC
function_line += 5; // skip prefix vector tokens; - if (!Tokenize(function_line, 3, &tokens)) { + if (!Tokenize(function_line, 4, &tokens)) { return NULL; } - u_int64_t address = strtoull(tokens[0], NULL, 16); - u_int64_t size = strtoull(tokens[1], NULL, 16); - char *name = tokens[2]; + u_int64_t address = strtoull(tokens[0], NULL, 16); + u_int64_t size = strtoull(tokens[1], NULL, 16); + int stack_param_size = strtoull(tokens[2], NULL, 16); + char *name = tokens[3]; - return new Function(name, address, size); + return new Function(name, address, size, stack_param_size); } SourceLineResolver::Line* SourceLineResolver::Module::ParseLine( @@ -340,17 +363,24 @@ SourceLineResolver::Line* SourceLineResolver::Module::ParseLine( bool SourceLineResolver::Module::ParseStackInfo(char *stack_info_line) { // STACK WIN // - // + // + // + // If has_program_string is 1, the rest of the line is a program string. + // Otherwise, the final token tells whether the stack info indicates that + // a base pointer has been allocated. + // + // Expect has_program_string to be 1 when type is STACK_INFO_FRAME_DATA and + // 0 when type is STACK_INFO_FPO, but don't enforce this. // Skip "STACK " prefix. stack_info_line += 6; vector tokens; - if (!Tokenize(stack_info_line, 11, &tokens)) + if (!Tokenize(stack_info_line, 12, &tokens)) return false; // Only MSVC stack frame info is understood for now. - char *platform = tokens[0]; + const char *platform = tokens[0]; if (strcmp(platform, "WIN") != 0) return false; @@ -358,15 +388,23 @@ bool SourceLineResolver::Module::ParseStackInfo(char *stack_info_line) { if (type < 0 || type > STACK_INFO_LAST - 1) return false; - u_int64_t rva = strtoull(tokens[2], NULL, 16); - u_int64_t code_size = strtoull(tokens[3], NULL, 16); - u_int32_t prolog_size = strtoul(tokens[4], NULL, 16); - u_int32_t epilog_size = strtoul(tokens[5], NULL, 16); - u_int32_t parameter_size = strtoul(tokens[6], NULL, 16); - u_int32_t saved_register_size = strtoul(tokens[7], NULL, 16); - u_int32_t local_size = strtoul(tokens[8], NULL, 16); - u_int32_t max_stack_size = strtoul(tokens[9], NULL, 16); - char *program_string = tokens[10]; + u_int64_t rva = strtoull(tokens[2], NULL, 16); + u_int64_t code_size = strtoull(tokens[3], NULL, 16); + u_int32_t prolog_size = strtoul(tokens[4], NULL, 16); + u_int32_t epilog_size = strtoul(tokens[5], NULL, 16); + u_int32_t parameter_size = strtoul(tokens[6], NULL, 16); + u_int32_t saved_register_size = strtoul(tokens[7], NULL, 16); + u_int32_t local_size = strtoul(tokens[8], NULL, 16); + u_int32_t max_stack_size = strtoul(tokens[9], NULL, 16); + int has_program_string = strtoul(tokens[10], NULL, 16); + + const char *program_string = ""; + int allocates_base_pointer = 0; + if (has_program_string) { + program_string = tokens[11]; + } else { + allocates_base_pointer = strtoul(tokens[11], NULL, 16); + } // TODO(mmentovai): I wanted to use StoreRange's return value as this // method's return value, but MSVC infrequently outputs stack info that @@ -395,6 +433,7 @@ bool SourceLineResolver::Module::ParseStackInfo(char *stack_info_line) { saved_register_size, local_size, max_stack_size, + allocates_base_pointer, program_string)); return true; diff --git a/src/processor/source_line_resolver_unittest.cc b/src/processor/source_line_resolver_unittest.cc index 0b70b43f..5cdfb85b 100644 --- a/src/processor/source_line_resolver_unittest.cc +++ b/src/processor/source_line_resolver_unittest.cc @@ -81,6 +81,7 @@ static bool RunTests() { ASSERT_EQ(frame.function_name, "Function1_1"); ASSERT_EQ(frame.source_file_name, "file1_1.cc"); ASSERT_EQ(frame.source_line, 44); + ASSERT_FALSE(frame_info.allocates_base_pointer); ASSERT_EQ(frame_info.program_string, "$eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ ="); @@ -88,6 +89,7 @@ static bool RunTests() { frame.instruction = 0x800; resolver.FillSourceLineInfo(&frame, &frame_info); ASSERT_TRUE(VerifyEmpty(frame)); + ASSERT_FALSE(frame_info.allocates_base_pointer); ASSERT_TRUE(frame_info.program_string.empty()); frame.instruction = 0x1280; @@ -95,6 +97,7 @@ static bool RunTests() { ASSERT_EQ(frame.function_name, "Function1_3"); ASSERT_TRUE(frame.source_file_name.empty()); ASSERT_EQ(frame.source_line, 0); + ASSERT_FALSE(frame_info.allocates_base_pointer); ASSERT_TRUE(frame_info.program_string.empty()); frame.instruction = 0x1380; @@ -102,6 +105,7 @@ static bool RunTests() { ASSERT_EQ(frame.function_name, "Function1_4"); ASSERT_TRUE(frame.source_file_name.empty()); ASSERT_EQ(frame.source_line, 0); + ASSERT_FALSE(frame_info.allocates_base_pointer); ASSERT_FALSE(frame_info.program_string.empty()); frame.instruction = 0x2180; diff --git a/src/processor/stack_frame_info.h b/src/processor/stack_frame_info.h index 5901b970..4b5e5534 100644 --- a/src/processor/stack_frame_info.h +++ b/src/processor/stack_frame_info.h @@ -46,13 +46,20 @@ namespace google_airbag { struct StackFrameInfo { public: - StackFrameInfo() : valid(false), + enum Validity { + VALID_NONE = 0, + VALID_PARAMETER_SIZE = 1, + VALID_ALL = -1 + }; + + StackFrameInfo() : valid(VALID_NONE), prolog_size(0), epilog_size(0), parameter_size(0), saved_register_size(0), local_size(0), max_stack_size(0), + allocates_base_pointer(0), program_string() {} StackFrameInfo(u_int32_t set_prolog_size, @@ -61,18 +68,27 @@ struct StackFrameInfo { u_int32_t set_saved_register_size, u_int32_t set_local_size, u_int32_t set_max_stack_size, + int set_allocates_base_pointer, const std::string set_program_string) - : valid(true), + : valid(VALID_ALL), prolog_size(set_prolog_size), epilog_size(set_epilog_size), parameter_size(set_parameter_size), saved_register_size(set_saved_register_size), local_size(set_local_size), max_stack_size(set_max_stack_size), + allocates_base_pointer(set_allocates_base_pointer), program_string(set_program_string) {} - // True when the contents of the structure are valid. - bool valid; + // Clears the StackFrameInfo object so that users will see it as though + // it contains no information. + void Clear() { valid = VALID_NONE; program_string.erase(); } + + // Identifies which fields in the structure are valid. This is of + // type Validity, but it is defined as an int because it's not + // possible to OR values into an enumerated type. Users must check + // this field before using any other. + int valid; // These values come from IDiaFrameData. u_int32_t prolog_size; @@ -81,6 +97,10 @@ struct StackFrameInfo { u_int32_t saved_register_size; u_int32_t local_size; u_int32_t max_stack_size; + + // Only one of allocates_base_pointer or program_string will be valid. + // If program_string is empty, use allocates_base_pointer. + bool allocates_base_pointer; std::string program_string; }; diff --git a/src/processor/stackwalker.cc b/src/processor/stackwalker.cc index e5c79cc2..13bb2040 100644 --- a/src/processor/stackwalker.cc +++ b/src/processor/stackwalker.cc @@ -37,6 +37,8 @@ #include #include "processor/stackwalker.h" +#include "google/call_stack.h" +#include "google/stack_frame.h" #include "google/symbol_supplier.h" #include "processor/minidump.h" #include "processor/source_line_resolver.h" @@ -55,22 +57,23 @@ Stackwalker::Stackwalker(MemoryRegion *memory, MinidumpModuleList *modules, } -void Stackwalker::Walk(StackFrames *frames) { - frames->clear(); +void Stackwalker::Walk(CallStack *stack) { stack_frame_info_.clear(); SourceLineResolver resolver; // Begin with the context frame, and keep getting callers until there are // no more. - auto_ptr frame(new StackFrame()); - auto_ptr frame_info(new StackFrameInfo()); - bool valid = GetContextFrame(frame.get()); - while (valid) { + // Take ownership of the pointer returned by GetContextFrame. + auto_ptr frame(GetContextFrame()); + + while (frame.get()) { // frame already contains a good frame with properly set instruction and // frame_pointer fields. The frame structure comes from either the // context frame (above) or a caller frame (below). + StackFrameInfo frame_info; + // Resolve the module information, if a module map was provided. if (modules_) { MinidumpModule *module = @@ -84,22 +87,20 @@ void Stackwalker::Walk(StackFrames *frames) { resolver.LoadModule(frame->module_name, symbol_file); } } - resolver.FillSourceLineInfo(frame.get(), frame_info.get()); + resolver.FillSourceLineInfo(frame.get(), &frame_info); } } - // Copy the frame into the frames vector. - frames->push_back(*frame); - stack_frame_info_.push_back(*frame_info); + // Add the frame to the call stack. Relinquish the ownership claim + // over the frame, because the stack now owns it. + stack->frames_.push_back(frame.release()); - // Use a new object for the next frame, even though the old object was - // copied. If StackFrame provided some sort of Clear() method, then - // the same frame could be reused. - frame.reset(new StackFrame()); - frame_info.reset(new StackFrameInfo()); + // Copy the frame info. + stack_frame_info_.push_back(frame_info); + frame_info.Clear(); - // Get the next frame. - valid = GetCallerFrame(frame.get(), frames); + // Get the next frame and take ownership. + frame.reset(GetCallerFrame(stack)); } } diff --git a/src/processor/stackwalker.h b/src/processor/stackwalker.h index e3fb1360..d4eb0745 100644 --- a/src/processor/stackwalker.h +++ b/src/processor/stackwalker.h @@ -33,8 +33,7 @@ // methods that apply to stacks from all systems. Specific implementations // will extend this class by providing GetContextFrame and GetCallerFrame // methods to fill in system-specific data in a StackFrame structure. -// Stackwalker assembles these StackFrame strucutres into a vector of -// StackFrames. +// Stackwalker assembles these StackFrame strucutres into a CallStack. // // Author: Mark Mentovai @@ -44,14 +43,15 @@ #include -#include "google/stack_frame.h" -#include "processor/memory_region.h" #include "processor/stack_frame_info.h" namespace google_airbag { +class CallStack; +class MemoryRegion; class MinidumpContext; class MinidumpModuleList; +struct StackFrame; class SymbolSupplier; @@ -59,10 +59,9 @@ class Stackwalker { public: virtual ~Stackwalker() {} - // Fills the given vector of StackFrames by calling GetContextFrame and - // GetCallerFrame, and populating the returned frames with all available - // data. - void Walk(StackFrames *frames); + // Fills the given CallStack by calling GetContextFrame and GetCallerFrame, + // and populating the returned frames with all available data. + void Walk(CallStack* stack); // Returns a new concrete subclass suitable for the CPU that a stack was // generated on, according to the CPU type indicated by the context @@ -88,23 +87,26 @@ class Stackwalker { MemoryRegion *memory_; // Additional debugging information for each stack frame. This vector - // parallels the StackFrames vector. Subclasses may use this information - // to walk the stack. + // parallels the CallStack. Subclasses may use this information to help + // walk the stack. std::vector stack_frame_info_; private: // Obtains the context frame, the innermost called procedure in a stack - // trace. Returns false on failure. - virtual bool GetContextFrame(StackFrame *frame) = 0; + // trace. Returns NULL on failure. GetContextFrame allocates a new + // StackFrame (or StackFrame subclass), ownership of which is taken by + // the caller. + virtual StackFrame* GetContextFrame() = 0; // Obtains a caller frame. Each call to GetCallerFrame should return the // frame that called the last frame returned by GetContextFrame or - // GetCallerFrame. To aid this purpose, walked_frames contains the - // StackFrames vector of frames that have already been walked. - // GetCallerFrame should return false on failure or when there are no more - // caller frames (when the end of the stack has been reached). - virtual bool GetCallerFrame(StackFrame *frame, - const StackFrames *walked_frames) = 0; + // GetCallerFrame. To aid this purpose, stack contains the CallStack + // made of frames that have already been walked. GetCallerFrame should + // return NULL on failure or when there are no more caller frames (when + // the end of the stack has been reached). GetCallerFrame allocates a new + // StackFrame (or StackFrame subclass), ownership of which is taken by + // the caller. + virtual StackFrame* GetCallerFrame(const CallStack *stack) = 0; // A list of modules, for populating each StackFrame's module information. // This field is optional and may be NULL. diff --git a/src/processor/stackwalker_ppc.cc b/src/processor/stackwalker_ppc.cc index 668f59c2..2980c51a 100644 --- a/src/processor/stackwalker_ppc.cc +++ b/src/processor/stackwalker_ppc.cc @@ -35,6 +35,8 @@ #include "processor/stackwalker_ppc.h" +#include "google/call_stack.h" +#include "google/stack_frame_cpu.h" #include "processor/minidump.h" namespace google_airbag { @@ -55,65 +57,77 @@ StackwalkerPPC::StackwalkerPPC(const MDRawContextPPC *context, } -bool StackwalkerPPC::GetContextFrame(StackFrame *frame) { - if (!context_ || !memory_ || !frame) - return false; +StackFrame* StackwalkerPPC::GetContextFrame() { + if (!context_ || !memory_) + return NULL; - // The stack frame and instruction pointers are stored directly in - // registers, so pull them straight out of the CPU context structure. - frame->frame_pointer = context_->gpr[1]; - frame->instruction = context_->srr0; + StackFramePPC *frame = new StackFramePPC(); - return true; + // The instruction pointer is stored directly in a register, so pull it + // straight out of the CPU context structure. + frame->context = *context_; + frame->context_validity = StackFramePPC::CONTEXT_VALID_ALL; + frame->instruction = frame->context.srr0; + + return frame; } -bool StackwalkerPPC::GetCallerFrame(StackFrame *frame, - const StackFrames *walked_frames) { - if (!memory_ || !frame || !walked_frames) - return false; +StackFrame* StackwalkerPPC::GetCallerFrame(const CallStack *stack) { + if (!memory_ || !stack) + return NULL; - // The stack frame and instruction pointers for previous frames are saved - // on the stack. The typical ppc calling convention is for the called - // procedure to store its return address in the calling procedure's stack - // frame at 8(%r1), and to allocate its own stack frame by decrementing %r1 - // (the stack pointer) and saving the old value of %r1 at 0(%r1). Because - // the ppc has no hardware stack, there is no distinction between the - // stack pointer and frame pointer, and what is typically thought of as - // the frame pointer on an x86 is usually referred to as the stack pointer - // on a ppc. + // The instruction pointers for previous frames are saved on the stack. + // The typical ppc calling convention is for the called procedure to store + // its return address in the calling procedure's stack frame at 8(%r1), + // and to allocate its own stack frame by decrementing %r1 (the stack + // pointer) and saving the old value of %r1 at 0(%r1). Because the ppc has + // no hardware stack, there is no distinction between the stack pointer and + // frame pointer, and what is typically thought of as the frame pointer on + // an x86 is usually referred to as the stack pointer on a ppc. - u_int32_t last_stack_pointer = walked_frames->back().frame_pointer; - - // Don't pass frame.frame_pointer or frame.instruction directly - // ReadMemory, because their types are too wide (64-bit), and we - // specifically want to read 32-bit quantities for both. - u_int32_t stack_pointer; - if (!memory_->GetMemoryAtAddress(last_stack_pointer, &stack_pointer)) - return false; + StackFramePPC *last_frame = static_cast( + stack->frames()->back()); // A caller frame must reside higher in memory than its callee frames. // Anything else is an error, or an indication that we've reached the // end of the stack. - if (stack_pointer <= last_stack_pointer) - return false; - - u_int32_t instruction; - if (!memory_->GetMemoryAtAddress(stack_pointer + 8, &instruction)) - return false; + u_int32_t stack_pointer; + if (!memory_->GetMemoryAtAddress(last_frame->context.gpr[1], + &stack_pointer) || + stack_pointer <= last_frame->context.gpr[1]) { + return NULL; + } // Mac OS X/Darwin gives 1 as the return address from the bottom-most // frame in a stack (a thread's entry point). I haven't found any // documentation on this, but 0 or 1 would be bogus return addresses, // so check for them here and return false (end of stack) when they're // hit to avoid having a phantom frame. - if (instruction <= 1) - return false; + u_int32_t instruction; + if (!memory_->GetMemoryAtAddress(stack_pointer + 8, &instruction) || + instruction <= 1) { + return NULL; + } - frame->frame_pointer = stack_pointer; - frame->instruction = instruction; + StackFramePPC *frame = new StackFramePPC(); - return true; + frame->context = last_frame->context; + frame->context.srr0 = instruction; + frame->context.gpr[1] = stack_pointer; + frame->context_validity = StackFramePPC::CONTEXT_VALID_SRR0 | + StackFramePPC::CONTEXT_VALID_GPR1; + + // frame->context.srr0 is the return address, which is one instruction + // past the branch that caused us to arrive at the callee. Set + // frame_ppc->instruction to four less than that. Since all ppc + // instructions are 4 bytes wide, this is the address of the branch + // instruction. This allows source line information to match up with the + // line that contains a function call. Callers that require the exact + // return address value may access the context.srr0 field of StackFramePPC. + frame->instruction = frame->context.srr0 - 4; + + return frame; } diff --git a/src/processor/stackwalker_ppc.h b/src/processor/stackwalker_ppc.h index dfd70c36..7da76157 100644 --- a/src/processor/stackwalker_ppc.h +++ b/src/processor/stackwalker_ppc.h @@ -64,9 +64,8 @@ class StackwalkerPPC : public Stackwalker { // Implementation of Stackwalker, using ppc context (stack pointer in %r1, // saved program counter in %srr0) and stack conventions (saved stack // pointer at 0(%r1), return address at 8(0(%r1)). - virtual bool GetContextFrame(StackFrame *frame); - virtual bool GetCallerFrame(StackFrame *frame, - const StackFrames *walked_frames); + virtual StackFrame* GetContextFrame(); + virtual StackFrame* GetCallerFrame(const CallStack *stack); // Stores the CPU context corresponding to the innermost stack frame to // be returned by GetContextFrame. diff --git a/src/processor/stackwalker_selftest.cc b/src/processor/stackwalker_selftest.cc index 08dea134..4e8d2fd7 100644 --- a/src/processor/stackwalker_selftest.cc +++ b/src/processor/stackwalker_selftest.cc @@ -40,13 +40,17 @@ #include #include "google/airbag_types.h" +#include "google/call_stack.h" #include "google/stack_frame.h" +#include "google/stack_frame_cpu.h" #include "processor/memory_region.h" #include "processor/minidump_format.h" +using google_airbag::CallStack; using google_airbag::MemoryRegion; using google_airbag::StackFrame; -using google_airbag::StackFrames; +using google_airbag::StackFramePPC; +using google_airbag::StackFrameX86; #if defined(__i386__) #include "processor/stackwalker_x86.h" @@ -78,6 +82,14 @@ class SelfMemoryRegion : public MemoryRegion { private: template bool GetMemoryAtAddressInternal(u_int64_t address, T* value) { + // Without knowing what addresses are actually mapped, just assume that + // everything low is not mapped. This helps the stackwalker catch the + // end of a stack when it tries to dereference a null or low pointer + // in an attempt to find the caller frame. Other unmapped accesses will + // cause the program to crash, but that would properly be a test failure. + if (address < 0x100) + return false; + u_int8_t* memory = 0; *value = *reinterpret_cast(&memory[address]); return true; @@ -105,6 +117,22 @@ static u_int32_t GetEBP() { } +// The caller's %esp is 8 higher than the value of %ebp in this function, +// assuming that it's not inlined and that the standard prolog is used. +// The CALL instruction places a 4-byte return address on the stack above +// the caller's %esp, and this function's prolog will save the caller's %ebp +// on the stack as well, for another 4 bytes, before storing %esp in %ebp. +static u_int32_t GetESP() __attribute__((noinline)); +static u_int32_t GetESP() { + u_int32_t ebp; + __asm__ __volatile__( + "movl %%ebp, %0" + : "=a" (ebp) + ); + return ebp + 8; +} + + // GetEIP returns the instruction pointer identifying the next instruction // to execute after GetEIP returns. It obtains this information from the // stack, where it was placed by the call instruction that called GetEIP. @@ -177,6 +205,7 @@ static unsigned int CountCallerFrames() { MDRawContextX86 context = MDRawContextX86(); context.eip = GetEIP(); context.ebp = GetEBP(); + context.esp = GetESP(); StackwalkerX86 stackwalker = StackwalkerX86(&context, &memory, NULL, NULL); #elif defined(__ppc__) @@ -187,24 +216,32 @@ static unsigned int CountCallerFrames() { StackwalkerPPC stackwalker = StackwalkerPPC(&context, &memory, NULL, NULL); #endif // __i386__ || __ppc__ - StackFrames stack; + CallStack stack; stackwalker.Walk(&stack); #ifdef PRINT_STACKS printf("\n"); for(unsigned int frame_index = 0; - frame_index < stack.size(); + frame_index < stack.Count(); ++frame_index) { - StackFrame *frame = &stack[frame_index]; - printf("frame %-3d instruction = 0x%08llx frame_pointer = 0x%08llx\n", - frame_index, frame->instruction, frame->frame_pointer); + StackFrame *frame = stack.FrameAt(frame_index); + printf("frame %-3d instruction = 0x%08llx", + frame_index, frame->instruction); +#if defined(__i386__) + StackFrameX86 *frame_x86 = reinterpret_cast(frame.get()); + printf(" esp = 0x%08x ebp = 0x%08x\n", + frame_x86->context.esp, frame_x86->context.ebp); +#elif defined(__ppc__) + StackFramePPC *frame_ppc = reinterpret_cast(frame.get()); + printf(" gpr[1] = 0x%08x\n", frame_ppc->context.gpr[1]); +#endif // __i386__ || __ppc__ } #endif // PRINT_STACKS // Subtract 1 because the caller wants the number of frames beneath // itself. Because the caller called us, subract two for our frame and its // frame, which are included in stack->size(). - return stack.size() - 2; + return stack.frames()->size() - 2; } diff --git a/src/processor/stackwalker_x86.cc b/src/processor/stackwalker_x86.cc index a5819c86..b865ac7d 100644 --- a/src/processor/stackwalker_x86.cc +++ b/src/processor/stackwalker_x86.cc @@ -35,7 +35,10 @@ #include "processor/stackwalker_x86.h" +#include "google/call_stack.h" +#include "google/stack_frame_cpu.h" #include "processor/minidump.h" +#include "processor/postfix_evaluator-inl.h" namespace google_airbag { @@ -54,63 +57,249 @@ StackwalkerX86::StackwalkerX86(const MDRawContextX86 *context, } -bool StackwalkerX86::GetContextFrame(StackFrame *frame) { - if (!context_ || !memory_ || !frame) - return false; +StackFrame* StackwalkerX86::GetContextFrame() { + if (!context_ || !memory_) + return NULL; - // The frame and instruction pointers are stored directly in registers, - // so pull them straight out of the CPU context structure. - frame->frame_pointer = context_->ebp; - frame->instruction = context_->eip; + StackFrameX86 *frame = new StackFrameX86(); - return true; + // The instruction pointer is stored directly in a register, so pull it + // straight out of the CPU context structure. + frame->context = *context_; + frame->context_validity = StackFrameX86::CONTEXT_VALID_ALL; + frame->instruction = frame->context.eip; + + return frame; } -bool StackwalkerX86::GetCallerFrame(StackFrame *frame, - const StackFrames *walked_frames) { - if (!memory_ || !frame || !walked_frames) - return false; +StackFrame* StackwalkerX86::GetCallerFrame(const CallStack *stack) { + if (!memory_ || !stack) + return NULL; - // The frame and instruction pointers for previous frames are saved on the - // stack. The typical x86 calling convention, when frame pointers are - // present, is for the calling procedure to use CALL, which pushes the - // return address onto the stack and sets the instruction pointer (%eip) - // to the entry point of the called routine. The called routine's then - // PUSHes the calling routine's frame pointer (%ebp) onto the stack before - // copying the stack pointer (%esp) to the frame pointer (%ebp). Therefore, - // the calling procedure's frame pointer is always available by - // dereferencing the called procedure's frame pointer, and the return - // address is always available at the memory location immediately above - // the address pointed to by the called procedure's frame pointer. + StackFrameX86 *last_frame = static_cast( + stack->frames()->back()); + StackFrameInfo *last_frame_info = &stack_frame_info_.back(); - // If there is no frame pointer, determining the layout of the stack is - // considerably more difficult, requiring debugging information. This - // stackwalker doesn't attempt to solve that problem (at this point). + // This stackwalker sets each frame's %esp to its value immediately prior + // to the CALL into the callee. This means that %esp points to the last + // callee argument pushed onto the stack, which may not be where %esp points + // after the callee returns. Specifically, the value is correct for the + // cdecl calling convention, but not other conventions. The cdecl + // convention requires a caller to pop its callee's arguments from the + // stack after the callee returns. This is usually accomplished by adding + // the known size of the arguments to %esp. Other calling conventions, + // including stdcall, thiscall, and fastcall, require the callee to pop any + // parameters stored on the stack before returning. This is usually + // accomplished by using the RET n instruction, which pops n bytes off + // the stack after popping the return address. + // + // Because each frame's %esp will point to a location on the stack after + // callee arguments have been PUSHed, when locating things in a stack frame + // relative to %esp, the size of the arguments to the callee need to be + // taken into account. This seems a little bit unclean, but it's better + // than the alternative, which would need to take these same things into + // account, but only for cdecl functions. With this implementation, we get + // to be agnostic about each function's calling convention. Furthermore, + // this is how Windows debugging tools work, so it means that the %esp + // values produced by this stackwalker directly correspond to the %esp + // values you'll see there. + // + // If the last frame has no callee (because it's the context frame), just + // set the callee parameter size to 0: the stack pointer can't point to + // callee arguments because there's no callee. This is correct as long + // as the context wasn't captured while arguments were being pushed for + // a function call. Note that there may be functions whose parameter sizes + // are unknown, 0 is also used in that case. When that happens, it should + // be possible to walk to the next frame without reference to %esp. - u_int32_t last_frame_pointer = walked_frames->back().frame_pointer; + int frames_already_walked = stack_frame_info_.size(); + u_int32_t last_frame_callee_parameter_size = 0; + if (frames_already_walked >= 2) { + StackFrameInfo *last_frame_callee_info = + &stack_frame_info_[frames_already_walked - 2]; + if (last_frame_callee_info->valid & StackFrameInfo::VALID_PARAMETER_SIZE) { + last_frame_callee_parameter_size = + last_frame_callee_info->parameter_size; + } + } - // Don't pass frame.frame_pointer or frame.instruction directly - // ReadMemory, because their types are too wide (64-bit), and we - // specifically want to read 32-bit quantities for both. - u_int32_t frame_pointer; - if (!memory_->GetMemoryAtAddress(last_frame_pointer, &frame_pointer)) - return false; + // Set up the dictionary for the PostfixEvaluator. %ebp and %esp are used + // in each program string, and their previous values are known, so set them + // here. .cbCalleeParams is an Airbag extension that allows us to use + // the PostfixEvaluator engine when certain types of debugging information + // are present without having to write the constants into the program string + // as literals. + PostfixEvaluator::DictionaryType dictionary; + dictionary["$ebp"] = last_frame->context.ebp; + dictionary["$esp"] = last_frame->context.esp; + dictionary[".cbCalleeParams"] = last_frame_callee_parameter_size; - // A caller frame must reside higher in memory than its callee frames. - // Anything else is an error, or an indication that we've reached the - // end of the stack. - if (frame_pointer <= last_frame_pointer) - return false; + if (last_frame_info->valid == StackFrameInfo::VALID_ALL) { + // FPO debugging data is available. Initialize constants. + dictionary[".cbSavedRegs"] = last_frame_info->saved_register_size; + dictionary[".cbLocals"] = last_frame_info->local_size; + dictionary[".raSearchStart"] = last_frame->context.esp + + last_frame_callee_parameter_size + + last_frame_info->local_size + + last_frame_info->saved_register_size; + } + if (last_frame_info->valid & StackFrameInfo::VALID_PARAMETER_SIZE) { + // This is treated separately because it can either come from FPO data or + // from other debugging data. + dictionary[".cbParams"] = last_frame_info->parameter_size; + } - u_int32_t instruction; - if (!memory_->GetMemoryAtAddress(last_frame_pointer + 4, &instruction)) - return false; + // Decide what type of program string to use. The program string is in + // postfix notation and will be passed to PostfixEvaluator::Evaluate. + // Given the dictionary and the program string, it is possible to compute + // the return address and the values of other registers in the calling + // function. + string program_string; + if (last_frame_info->valid == StackFrameInfo::VALID_ALL) { + // FPO data available. + if (!last_frame_info->program_string.empty()) { + // The FPO data has its own program string, which will tell us how to + // get to the caller frame, and may even fill in the values of + // nonvolatile registers and provide pointers to local variables and + // parameters. + program_string = last_frame_info->program_string; + } else if (last_frame_info->allocates_base_pointer) { + // The function corresponding to the last frame doesn't use the frame + // pointer for conventional purposes, but it does allocate a new + // frame pointer and use it for its own purposes. Its callee's + // information is still accessed relative to %esp, and the previous + // value of %ebp can be recovered from a location in its stack frame, + // within the saved-register area. + // + // Functions that fall into this category use the %ebp register for + // a purpose other than the frame pointer. They restore the caller's + // %ebp before returning. These functions create their stack frame + // after a CALL by decrementing the stack pointer in an amount + // sufficient to store local variables, and then PUSHing saved + // registers onto the stack. Arguments to a callee function, if any, + // are PUSHed after that. Walking up to the caller, therefore, + // can be done solely with calculations relative to the stack pointer + // (%esp). The return address is recovered from the memory location + // above the known sizes of the callee's parameters, saved registers, + // and locals. The caller's stack pointer (the value of %esp when + // the caller executed CALL) is the location immediately above the + // saved return address. The saved value of %ebp to be restored for + // the caller is at a known location in the saved-register area of + // the stack frame. + // + // %eip_new = *(%esp_old + callee_params + saved_regs + locals) + // %ebp_new = *(%esp_old + callee_params + saved_regs - 8) + // %esp_new = %esp_old + callee_params + saved_regs + locals + 4 + program_string = "$eip .raSearchStart ^ = " + "$ebp $esp .cbCalleeParams + .cbSavedRegs + 8 - ^ = " + "$esp .raSearchStart 4 + ="; + } else { + // The function corresponding to the last frame doesn't use %ebp at + // all. The callee frame is located relative to %esp. %ebp is reset + // to itself only to cause it to appear to have been set in + // dictionary_validity. + // + // The called procedure's instruction pointer and stack pointer are + // recovered in the same way as the case above, except that no + // frame pointer (%ebp) is used at all, so it is not saved anywhere + // in the callee's stack frame and does not need to be recovered. + // Because %ebp wasn't used in the callee, whatever value it has + // is the value that it had in the caller, so it can be carried + // straight through without bringing its validity into question. + // + // %eip_new = *(%esp_old + callee_params + saved_regs + locals) + // %esp_new = %esp_old + callee_params + saved_regs + locals + 4 + // %ebp_new = %ebp_old + program_string = "$eip .raSearchStart ^ = " + "$esp .raSearchStart 4 + = " + "$ebp $ebp ="; + } + } else { + // No FPO information is available for the last frame. Assume that the + // standard %ebp-using x86 calling convention is in use. + // + // The typical x86 calling convention, when frame pointers are present, + // is for the calling procedure to use CALL, which pushes the return + // address onto the stack and sets the instruction pointer (%eip) to + // the entry point of the called routine. The called routine then + // PUSHes the calling routine's frame pointer (%ebp) onto the stack + // before copying the stack pointer (%esp) to the frame pointer (%ebp). + // Therefore, the calling procedure's frame pointer is always available + // by dereferencing the called procedure's frame pointer, and the return + // address is always available at the memory location immediately above + // the address pointed to by the called procedure's frame pointer. The + // calling procedure's stack pointer (%esp) is 8 higher than the value + // of the called procedure's frame pointer at the time the calling + // procedure made the CALL: 4 bytes for the return address pushed by the + // CALL itself, and 4 bytes for the callee's PUSH of the caller's frame + // pointer. + // + // %eip_new = *(%ebp_old + 4) + // %esp_new = %ebp_old + 8 + // %ebp_new = *(%ebp_old) + program_string = "$eip $ebp 4 + ^ = " + "$esp $ebp 8 + = " + "$ebp $ebp ^ ="; + } - frame->frame_pointer = frame_pointer; - frame->instruction = instruction; + // Now crank it out, making sure that the program string set the three + // required variables. + PostfixEvaluator evaluator = + PostfixEvaluator(&dictionary, memory_); + PostfixEvaluator::DictionaryValidityType dictionary_validity; + if (!evaluator.Evaluate(program_string, &dictionary_validity) || + dictionary_validity.find("$eip") == dictionary_validity.end() || + dictionary_validity.find("$esp") == dictionary_validity.end() || + dictionary_validity.find("$ebp") == dictionary_validity.end()) { + return NULL; + } - return true; + // Treat an instruction address of 0 as end-of-stack. Treat incorrect stack + // direction as end-of-stack to enforce progress and avoid infinite loops. + if (dictionary["$eip"] == 0 || + dictionary["$esp"] <= last_frame->context.esp) { + return NULL; + } + + // Create a new stack frame (ownership will be transferred to the caller) + // and fill it in. + StackFrameX86 *frame = new StackFrameX86(); + + frame->context = last_frame->context; + frame->context.eip = dictionary["$eip"]; + frame->context.esp = dictionary["$esp"]; + frame->context.ebp = dictionary["$ebp"]; + frame->context_validity = StackFrameX86::CONTEXT_VALID_EIP | + StackFrameX86::CONTEXT_VALID_ESP | + StackFrameX86::CONTEXT_VALID_EBP; + + // These are nonvolatile (callee-save) registers, and the program string + // may have filled them in. + if (dictionary_validity.find("$ebx") == dictionary_validity.end()) { + frame->context.ebx = dictionary["$ebx"]; + frame->context_validity |= StackFrameX86::CONTEXT_VALID_EBX; + } + if (dictionary_validity.find("$esi") == dictionary_validity.end()) { + frame->context.esi = dictionary["$esi"]; + frame->context_validity |= StackFrameX86::CONTEXT_VALID_ESI; + } + if (dictionary_validity.find("$edi") == dictionary_validity.end()) { + frame->context.edi = dictionary["$edi"]; + frame->context_validity |= StackFrameX86::CONTEXT_VALID_EDI; + } + + // frame->context.eip is the return address, which is one instruction + // past the CALL that caused us to arrive at the callee. Set + // frame->instruction to one less than that. This won't reference the + // beginning of the CALL instruction, but it's guaranteed to be within the + // CALL, which is sufficient to get the source line information to match up + // with the line that contains a function call. Callers that require the + // exact return address value may access the context.eip field of + // StackFrameX86. + frame->instruction = frame->context.eip - 1; + + return frame; } diff --git a/src/processor/stackwalker_x86.h b/src/processor/stackwalker_x86.h index 6a1d6ddf..9f133417 100644 --- a/src/processor/stackwalker_x86.h +++ b/src/processor/stackwalker_x86.h @@ -61,11 +61,11 @@ class StackwalkerX86 : public Stackwalker { SymbolSupplier *supplier); private: - // Implementation of Stackwalker, using x86 context (%ebp, %eip) and - // stack conventions (saved %ebp at [%ebp], saved %eip at 4[%ebp]). - virtual bool GetContextFrame(StackFrame *frame); - virtual bool GetCallerFrame(StackFrame *frame, - const StackFrames *walked_frames); + // Implementation of Stackwalker, using x86 context (%ebp, %esp, %eip) and + // stack conventions (saved %ebp at [%ebp], saved %eip at 4[%ebp], or + // alternate conventions as guided by stack_frame_info_). + virtual StackFrame* GetContextFrame(); + virtual StackFrame* GetCallerFrame(const CallStack *stack); // Stores the CPU context corresponding to the innermost stack frame to // be returned by GetContextFrame. diff --git a/src/processor/testdata/minidump1.stack.out b/src/processor/testdata/minidump1.stack.out index d2e254d8..28d77739 100644 --- a/src/processor/testdata/minidump1.stack.out +++ b/src/processor/testdata/minidump1.stack.out @@ -1,23 +1,23 @@ -[ 0] ebp = 0x0012ecb8 eip = 0x020a1515 "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x00221515 -[ 1] ebp = 0x0012ecd8 eip = 0x020a03e3 "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x002203e3 -[ 2] ebp = 0x0012ecf0 eip = 0x023c8a28 "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x00548a28 -[ 3] ebp = 0x0012ed30 eip = 0x023ccfd9 "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x0054cfd9 -[ 4] ebp = 0x0012ed64 eip = 0x0222fd12 "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x003afd12 -[ 5] ebp = 0x0012ed94 eip = 0x022311dd "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x003b11dd -[ 6] ebp = 0x0012edc8 eip = 0x034eb0f1 "c:\lizard\trunk\mozilla\dist\bin\components\xpc3250.dll" + 0x0005b0f1 -[ 7] ebp = 0x0012eeb0 eip = 0x0049bda4 "c:\lizard\trunk\mozilla\dist\bin\js3250.dll" + 0x0007bda4 -[ 8] ebp = 0x0012f834 eip = 0x0047b92f "c:\lizard\trunk\mozilla\dist\bin\js3250.dll" + 0x0005b92f -[ 9] ebp = 0x0012f93c eip = 0x0046c945 "c:\lizard\trunk\mozilla\dist\bin\js3250.dll" + 0x0004c945 -[10] ebp = 0x0012f9c8 eip = 0x0046d345 "c:\lizard\trunk\mozilla\dist\bin\js3250.dll" + 0x0004d345 -[11] ebp = 0x0012f9f0 eip = 0x00430ec3 "c:\lizard\trunk\mozilla\dist\bin\js3250.dll" + 0x00010ec3 -[12] ebp = 0x0012fa4c eip = 0x02213b7f "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x00393b7f -[13] ebp = 0x0012fb60 eip = 0x02249ced "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x003c9ced -[14] ebp = 0x0012fb70 eip = 0x0224a810 "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x003ca810 -[15] ebp = 0x0012fbbc eip = 0x002ebff8 "c:\lizard\trunk\mozilla\dist\bin\xpcom_core.dll" + 0x0007bff8 -[16] ebp = 0x0012fbe4 eip = 0x002ec8ec "c:\lizard\trunk\mozilla\dist\bin\xpcom_core.dll" + 0x0007c8ec -[17] ebp = 0x0012fc48 eip = 0x029193b5 "c:\lizard\trunk\mozilla\dist\bin\components\gkwidget.dll" + 0x000293b5 -[18] ebp = 0x0012fc5c eip = 0x03174b19 "c:\lizard\trunk\mozilla\dist\bin\components\tkitcmps.dll" + 0x00004b19 -[19] ebp = 0x0012ff54 eip = 0x10008e60 "c:\lizard\trunk\mozilla\dist\bin\xul.dll" + 0x00008e60 -[20] ebp = 0x0012ff68 eip = 0x00401036 "c:\lizard\trunk\mozilla\dist\bin\firefox.exe" + 0x00001036 -[21] ebp = 0x0012ffc0 eip = 0x004011bc "c:\lizard\trunk\mozilla\dist\bin\firefox.exe" + 0x000011bc -[22] ebp = 0x0012fff0 eip = 0x7c816d4f "C:\WINDOWS\system32\kernel32.dll" + 0x00016d4f +[ 0] instruction = 0x020a1515 "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x00221515 +[ 1] instruction = 0x020a03e2 "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x002203e2 +[ 2] instruction = 0x023c8a27 "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x00548a27 +[ 3] instruction = 0x023ccfd8 "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x0054cfd8 +[ 4] instruction = 0x0222fd11 "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x003afd11 +[ 5] instruction = 0x022311dc "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x003b11dc +[ 6] instruction = 0x034eb0f0 "c:\lizard\trunk\mozilla\dist\bin\components\xpc3250.dll" + 0x0005b0f0 +[ 7] instruction = 0x0049bda3 "c:\lizard\trunk\mozilla\dist\bin\js3250.dll" + 0x0007bda3 +[ 8] instruction = 0x0047b92e "c:\lizard\trunk\mozilla\dist\bin\js3250.dll" + 0x0005b92e +[ 9] instruction = 0x0046c944 "c:\lizard\trunk\mozilla\dist\bin\js3250.dll" + 0x0004c944 +[10] instruction = 0x0046d344 "c:\lizard\trunk\mozilla\dist\bin\js3250.dll" + 0x0004d344 +[11] instruction = 0x00430ec2 "c:\lizard\trunk\mozilla\dist\bin\js3250.dll" + 0x00010ec2 +[12] instruction = 0x02213b7e "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x00393b7e +[13] instruction = 0x02249cec "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x003c9cec +[14] instruction = 0x0224a80f "c:\lizard\trunk\mozilla\dist\bin\components\gklayout.dll" + 0x003ca80f +[15] instruction = 0x002ebff7 "c:\lizard\trunk\mozilla\dist\bin\xpcom_core.dll" + 0x0007bff7 +[16] instruction = 0x002ec8eb "c:\lizard\trunk\mozilla\dist\bin\xpcom_core.dll" + 0x0007c8eb +[17] instruction = 0x029193b4 "c:\lizard\trunk\mozilla\dist\bin\components\gkwidget.dll" + 0x000293b4 +[18] instruction = 0x03174b18 "c:\lizard\trunk\mozilla\dist\bin\components\tkitcmps.dll" + 0x00004b18 +[19] instruction = 0x10008e5f "c:\lizard\trunk\mozilla\dist\bin\xul.dll" + 0x00008e5f +[20] instruction = 0x00401035 "c:\lizard\trunk\mozilla\dist\bin\firefox.exe" + 0x00001035 +[21] instruction = 0x004011bb "c:\lizard\trunk\mozilla\dist\bin\firefox.exe" + 0x000011bb +[22] instruction = 0x7c816d4e "C:\WINDOWS\system32\kernel32.dll" + 0x00016d4e diff --git a/src/processor/testdata/minidump2.dmp b/src/processor/testdata/minidump2.dmp index 89745ca4..91acf922 100644 Binary files a/src/processor/testdata/minidump2.dmp and b/src/processor/testdata/minidump2.dmp differ diff --git a/src/processor/testdata/minidump2.sym b/src/processor/testdata/minidump2.sym index a621982f..ce49ccf3 100644 --- a/src/processor/testdata/minidump2.sym +++ b/src/processor/testdata/minidump2.sym @@ -4123,49 +4123,51 @@ FILE 4122 f:\rtm\public\sdk\inc\pshpack4.h FILE 4123 f:\rtm\public\sdk\inc\poppack.h FILE 4124 f:\rtm\public\sdk\inc\winnetwk.h FILE 4125 f:\rtm\public\sdk\inc\imm.h -FUNC 1020 18 CrashFunction -1020 4 34 12 -1024 7 35 12 -102b 9 36 12 -1034 4 37 12 -FUNC 1040 73 main -1040 33 39 12 -1073 7 40 12 -107a 5 41 12 -107f 19 42 12 -1098 7 43 12 -109f 2 44 12 -10a1 12 45 12 -FUNC 10c0 70 HandleException -10c0 6 8 12 -10c6 20 15 12 -10e6 9 18 12 -10ef 6 19 12 -10f5 7 20 12 -10fc 21 28 12 -111d a 30 12 -1127 5 31 12 -112c 4 32 12 -FUNC 1180 24 ValidateLocalCookies -FUNC 11b0 196 _except_handler4 -FUNC 1346 a _set_osplatform +PUBLIC 1005 0 @ILT+0(?CrashFunction@@YAXXZ) +PUBLIC 100a 0 @ILT+5(_main) +FUNC 1020 18 0 CrashFunction() +1020 4 63 12 +1024 7 64 12 +102b 9 65 12 +1034 4 66 12 +FUNC 1040 73 8 main +1040 33 68 12 +1073 7 69 12 +107a 5 70 12 +107f 19 71 12 +1098 7 72 12 +109f 2 73 12 +10a1 12 74 12 +FUNC 10c0 70 4 HandleException +10c0 6 37 12 +10c6 20 44 12 +10e6 9 47 12 +10ef 6 48 12 +10f5 7 49 12 +10fc 21 57 12 +111d a 59 12 +1127 5 60 12 +112c 4 61 12 +FUNC 1180 24 0 ValidateLocalCookies +FUNC 11b0 196 10 _except_handler4 +FUNC 1346 a 4 _set_osplatform 1346 a 385 1073 -FUNC 1350 a _set_osver +FUNC 1350 a 4 _set_osver 1350 a 386 1073 -FUNC 135a a _set_winver +FUNC 135a a 4 _set_winver 135a a 387 1073 -FUNC 1364 a _set_winmajor +FUNC 1364 a 4 _set_winmajor 1364 a 388 1073 -FUNC 136e a _set_winminor +FUNC 136e a 4 _set_winminor 136e a 389 1073 -FUNC 1378 24 fast_error_exit +FUNC 1378 24 4 fast_error_exit 1378 0 366 1088 1378 9 375 1088 1381 5 377 1088 1386 9 379 1088 138f c 380 1088 139b 1 381 1088 -FUNC 139c 41 check_managed_app +FUNC 139c 41 0 check_managed_app 139c 0 404 1088 139c b 409 1088 13a7 5 413 1088 @@ -4179,7 +4181,7 @@ FUNC 139c 41 check_managed_app 13d9 1 429 1088 13da 2 410 1088 13dc 1 429 1088 -FUNC 13dd 1b6 __tmainCRTStartup +FUNC 13dd 1b6 0 __tmainCRTStartup 13dd c 194 1088 13e9 19 224 1088 1402 4 225 1088 @@ -4236,24 +4238,24 @@ FUNC 13dd 1b6 __tmainCRTStartup 1583 7 340 1088 158a 3 342 1088 158d 6 343 1088 -FUNC 1593 a mainCRTStartup +FUNC 1593 a 0 mainCRTStartup 1593 0 177 1088 1593 5 184 1088 1598 5 186 1088 -FUNC 159d f __security_check_cookie +FUNC 159d f 0 __security_check_cookie 159d 0 52 2839 159d 6 55 2839 15a3 2 56 2839 15a5 2 57 2839 15a7 5 59 2839 -FUNC 15ac 90 _local_unwind4 -FUNC 163c 46 _unwind_handler4 -FUNC 1682 1c _seh_longjmp_unwind4 -FUNC 169e 17 @_EH4_CallFilterFunc@8 -FUNC 16b5 19 @_EH4_TransferToHandler@8 -FUNC 16ce 1a @_EH4_GlobalUnwind@4 -FUNC 16e8 17 @_EH4_LocalUnwind@16 -FUNC 1700 29 _ValidateImageBase +FUNC 15ac 90 0 _local_unwind4 +FUNC 163c 46 0 _unwind_handler4 +FUNC 1682 1c 4 _seh_longjmp_unwind4 +FUNC 169e 17 0 _EH4_CallFilterFunc +FUNC 16b5 19 0 _EH4_TransferToHandler +FUNC 16ce 1a 0 _EH4_GlobalUnwind +FUNC 16e8 17 8 _EH4_LocalUnwind +FUNC 1700 29 4 _ValidateImageBase 1700 0 44 1601 1700 b 50 1601 170b 2 52 1601 @@ -4263,7 +4265,7 @@ FUNC 1700 29 _ValidateImageBase 1719 2 58 1601 171b d 62 1601 1728 1 68 1601 -FUNC 1730 42 _FindPESection +FUNC 1730 42 8 _FindPESection 1730 0 92 1601 1730 9 99 1601 1739 19 108 1601 @@ -4271,7 +4273,7 @@ FUNC 1730 42 _FindPESection 1762 a 108 1601 176c 5 123 1601 1771 1 124 1601 -FUNC 1772 6c _IsNonwritableInCurrentImage +FUNC 1772 6c 4 _IsNonwritableInCurrentImage 1772 c 152 1601 177e 4 159 1601 1782 e 167 1601 @@ -4284,14 +4286,14 @@ FUNC 1772 6c _IsNonwritableInCurrentImage 17b8 17 190 1601 17cf 9 196 1601 17d8 6 198 1601 -FUNC 17de 24 _amsg_exit +FUNC 17de 24 4 _amsg_exit 17de 0 446 1038 17de 5 449 1038 17e3 9 450 1038 17ec b 451 1038 17f7 a 452 1038 1801 1 453 1038 -FUNC 1802 26 __crtCorExitProcess +FUNC 1802 26 4 __crtCorExitProcess 1802 0 650 1038 1802 b 654 1038 180d 4 655 1038 @@ -4299,19 +4301,19 @@ FUNC 1802 26 __crtCorExitProcess 181d 4 657 1038 1821 6 658 1038 1827 1 668 1038 -FUNC 1828 15 __crtExitProcess +FUNC 1828 15 4 __crtExitProcess 1828 0 673 1038 1828 a 674 1038 1832 b 683 1038 -FUNC 183d 9 _lockexit +FUNC 183d 9 0 _lockexit 183d 0 733 1038 183d 8 734 1038 1845 1 735 1038 -FUNC 1846 9 _unlockexit +FUNC 1846 9 0 _unlockexit 1846 0 759 1038 1846 8 760 1038 184e 1 761 1038 -FUNC 184f 18 _initterm +FUNC 184f 18 4 _initterm 184f 3 841 1038 1852 2 855 1038 1854 6 853 1038 @@ -4319,7 +4321,7 @@ FUNC 184f 18 _initterm 185c 3 855 1038 185f 7 848 1038 1866 1 857 1038 -FUNC 1867 20 _initterm_e +FUNC 1867 20 8 _initterm_e 1867 1 890 1038 1868 c 899 1038 1874 6 904 1038 @@ -4327,7 +4329,7 @@ FUNC 1867 20 _initterm_e 187c 3 906 1038 187f 7 899 1038 1886 1 910 1038 -FUNC 1887 37 _get_osplatform +FUNC 1887 37 4 _get_osplatform 1887 0 929 1038 1887 27 931 1038 18ae 1 939 1038 @@ -4335,7 +4337,7 @@ FUNC 1887 37 _get_osplatform 18b8 2 936 1038 18ba 3 938 1038 18bd 1 939 1038 -FUNC 18be 3c _get_osver +FUNC 18be 3c 4 _get_osver 18be 0 958 1038 18be 27 960 1038 18e5 1 968 1038 @@ -4343,7 +4345,7 @@ FUNC 18be 3c _get_osver 18ee 8 965 1038 18f6 3 967 1038 18f9 1 968 1038 -FUNC 18fa 3c _get_winver +FUNC 18fa 3c 4 _get_winver 18fa 0 987 1038 18fa 27 989 1038 1921 1 997 1038 @@ -4351,7 +4353,7 @@ FUNC 18fa 3c _get_winver 192a 8 994 1038 1932 3 996 1038 1935 1 997 1038 -FUNC 1936 3c _get_winmajor +FUNC 1936 3c 4 _get_winmajor 1936 0 1016 1038 1936 27 1018 1038 195d 1 1026 1038 @@ -4359,7 +4361,7 @@ FUNC 1936 3c _get_winmajor 1966 8 1023 1038 196e 3 1025 1038 1971 1 1026 1038 -FUNC 1972 3c _get_winminor +FUNC 1972 3c 4 _get_winminor 1972 0 1045 1038 1972 27 1047 1038 1999 1 1055 1038 @@ -4367,7 +4369,7 @@ FUNC 1972 3c _get_winminor 19a2 8 1052 1038 19aa 3 1054 1038 19ad 1 1055 1038 -FUNC 19ae 37 _get_wpgmptr +FUNC 19ae 37 4 _get_wpgmptr 19ae 0 1074 1038 19ae 27 1076 1038 19d5 1 1085 1038 @@ -4375,7 +4377,7 @@ FUNC 19ae 37 _get_wpgmptr 19df 2 1082 1038 19e1 3 1084 1038 19e4 1 1085 1038 -FUNC 19e5 37 _get_pgmptr +FUNC 19e5 37 4 _get_pgmptr 19e5 0 1104 1038 19e5 27 1106 1038 1a0c 1 1115 1038 @@ -4383,7 +4385,7 @@ FUNC 19e5 37 _get_pgmptr 1a16 2 1112 1038 1a18 3 1114 1038 1a1b 1 1115 1038 -FUNC 1a1c 92 _cinit +FUNC 1a1c 92 4 _cinit 1a1c 0 263 1038 1a1c 18 273 1038 1a34 b 275 1038 @@ -4397,7 +4399,7 @@ FUNC 1a1c 92 _cinit 1a9f c 308 1038 1aab 2 312 1038 1aad 1 313 1038 -FUNC 1aae ce doexit +FUNC 1aae ce c doexit 1aae c 499 1038 1aba 8 517 1038 1ac2 4 518 1038 @@ -4423,23 +4425,23 @@ FUNC 1aae ce doexit 1b67 6 585 1038 1b6d 9 586 1038 1b76 6 597 1038 -FUNC 1b7c 11 exit +FUNC 1b7c 11 4 exit 1b7c 0 397 1038 1b7c 10 398 1038 1b8c 1 399 1038 -FUNC 1b8d 11 _exit +FUNC 1b8d 11 4 _exit 1b8d 0 405 1038 1b8d 10 406 1038 1b9d 1 407 1038 -FUNC 1b9e f _cexit +FUNC 1b9e f 0 _cexit 1b9e 0 412 1038 1b9e e 413 1038 1bac 1 414 1038 -FUNC 1bad f _c_exit +FUNC 1bad f 0 _c_exit 1bad 0 419 1038 1bad e 420 1038 1bbb 1 421 1038 -FUNC 1bbc 4c _init_pointers +FUNC 1bbc 4c 0 _init_pointers 1bbc 1 786 1038 1bbd 7 787 1038 1bc4 6 789 1038 @@ -4452,12 +4454,12 @@ FUNC 1bbc 4c _init_pointers 1bee 6 796 1038 1bf4 13 799 1038 1c07 1 800 1038 -FUNC 1c08 22 _invoke_watson_if_error +FUNC 1c08 22 18 _invoke_watson_if_error 1c08 3 726 893 1c0b 6 727 893 1c11 17 731 893 1c28 2 732 893 -FUNC 1c2a 1a0 _NMSG_WRITE +FUNC 1c2a 1a0 4 _NMSG_WRITE 1c2a 2 174 901 1c2c a 178 901 1c36 f 179 901 @@ -4477,7 +4479,7 @@ FUNC 1c2a 1a0 _NMSG_WRITE 1d9b 9 206 901 1da4 24 212 901 1dc8 2 245 901 -FUNC 1dca 20 _GET_RTERRMSG +FUNC 1dca 20 4 _GET_RTERRMSG 1dca 0 268 901 1dca 2 271 901 1dcc 13 272 901 @@ -4485,16 +4487,16 @@ FUNC 1dca 20 _GET_RTERRMSG 1de1 1 276 901 1de2 7 273 901 1de9 1 276 901 -FUNC 1dea 39 _FF_MSGBANNER +FUNC 1dea 39 0 _FF_MSGBANNER 1dea 0 141 901 1dea 22 145 901 1e0c a 147 901 1e16 c 148 901 1e22 1 150 901 -FUNC 1e23 1 _initp_misc_winxfltr +FUNC 1e23 1 4 _initp_misc_winxfltr 1e23 0 105 1237 1e23 1 106 1237 -FUNC 1e24 32 xcptlookup +FUNC 1e24 32 4 xcptlookup 1e24 0 411 1237 1e24 b 412 1237 1e2f 14 419 1237 @@ -4502,7 +4504,7 @@ FUNC 1e24 32 xcptlookup 1e51 2 429 1237 1e53 2 427 1237 1e55 1 430 1237 -FUNC 1e56 16f _XcptFilter +FUNC 1e56 16f 8 _XcptFilter 1e56 6 204 1237 1e5c 7 211 1237 1e63 4 212 1237 @@ -4546,14 +4548,14 @@ FUNC 1e56 16f _XcptFilter 1fb6 7 376 1237 1fbd 6 378 1237 1fc3 2 380 1237 -FUNC 1fc5 1b __CppXcptFilter +FUNC 1fc5 1b 8 __CppXcptFilter 1fc5 0 145 1237 1fc5 b 146 1237 1fd0 c 147 1237 1fdc 1 151 1237 1fdd 2 149 1237 1fdf 1 151 1237 -FUNC 1fe0 db _setenvp +FUNC 1fe0 db 0 _setenvp 1fe0 1 77 760 1fe1 c 85 760 1fed 5 86 760 @@ -4578,9 +4580,9 @@ FUNC 1fe0 db _setenvp 2093 a 149 760 209d 7 152 760 20a4 17 153 760 -FUNC 20bb a _set_pgmptr +FUNC 20bb a 4 _set_pgmptr 20bb a 334 832 -FUNC 20c5 198 parse_cmdline +FUNC 20c5 198 c parse_cmdline 20c5 4 218 803 20c9 6 226 803 20cf 8 230 803 @@ -4651,7 +4653,7 @@ FUNC 20c5 198 parse_cmdline 2256 3 383 803 2259 2 384 803 225b 2 385 803 -FUNC 225d b9 _setargv +FUNC 225d b9 0 _setargv 225d 7 88 803 2264 c 97 803 2270 5 98 803 @@ -4670,7 +4672,7 @@ FUNC 225d b9 _setargv 230a 4 172 803 230e 6 134 803 2314 2 173 803 -FUNC 2316 135 __crtGetEnvironmentStringsA +FUNC 2316 135 0 __crtGetEnvironmentStringsA 2316 2 43 2746 2318 1a 57 2746 2332 8 59 2746 @@ -4706,7 +4708,7 @@ FUNC 2316 135 __crtGetEnvironmentStringsA 243b 7 147 2746 2442 6 149 2746 2448 3 153 2746 -FUNC 244b 240 _ioinit +FUNC 244b 240 0 _ioinit 244b c 111 3164 2457 5 122 3164 245c a 127 3164 @@ -4775,7 +4777,7 @@ FUNC 244b 240 _ioinit 2674 7 128 3164 267b a 129 3164 2685 6 316 3164 -FUNC 268b 4c _ioterm +FUNC 268b 4c 0 _ioterm 268b 2 341 3164 268d 5 345 3164 2692 6 347 3164 @@ -4786,9 +4788,9 @@ FUNC 268b 4c _ioterm 26be 7 361 3164 26c5 11 362 3164 26d6 1 365 3164 -FUNC 26d7 24 _RTC_Initialize -FUNC 26fb 24 _RTC_Terminate -FUNC 271f 63 _encode_pointer +FUNC 26d7 24 0 _RTC_Initialize +FUNC 26fb 24 0 _RTC_Terminate +FUNC 271f 63 4 _encode_pointer 271f 1 82 710 2720 2b 91 710 274b 8 107 710 @@ -4799,11 +4801,11 @@ FUNC 271f 63 _encode_pointer 2772 a 112 710 277c 5 115 710 2781 1 116 710 -FUNC 2782 9 _encoded_null +FUNC 2782 9 0 _encoded_null 2782 0 135 710 2782 8 136 710 278a 1 137 710 -FUNC 278b 63 _decode_pointer +FUNC 278b 63 4 _decode_pointer 278b 1 156 710 278c 2b 165 710 27b7 8 181 710 @@ -4814,28 +4816,28 @@ FUNC 278b 63 _decode_pointer 27de a 186 710 27e8 5 189 710 27ed 1 190 710 -FUNC 27ee 9 __crtTlsAlloc +FUNC 27ee 9 4 __crtTlsAlloc 27ee 0 202 710 27ee 6 203 710 27f4 3 204 710 -FUNC 27f7 15 __fls_getvalue +FUNC 27f7 15 4 __fls_getvalue 27f7 0 220 710 27f7 12 221 710 2809 3 222 710 -FUNC 280c 6 __get_flsindex +FUNC 280c 6 0 __get_flsindex 280c 0 234 710 280c 5 235 710 2811 1 236 710 -FUNC 2812 2a __set_flsgetvalue +FUNC 2812 2a 0 __set_flsgetvalue 2812 0 248 710 2812 10 250 710 2822 19 252 710 283b 1 255 710 -FUNC 283c 19 __fls_setvalue +FUNC 283c 19 8 __fls_setvalue 283c 0 272 710 283c 16 273 710 2852 3 274 710 -FUNC 2855 3d _mtterm +FUNC 2855 3d 0 _mtterm 2855 0 430 710 2855 a 437 710 285f f 438 710 @@ -4844,7 +4846,7 @@ FUNC 2855 3d _mtterm 287f 7 443 710 2886 7 444 710 288d 5 451 710 -FUNC 2892 b4 _initptd +FUNC 2892 b4 8 _initptd 2892 c 478 710 289e e 479 710 28ac a 481 710 @@ -4866,7 +4868,7 @@ FUNC 2892 b4 _initptd 292b c 519 710 2937 6 522 710 293d 9 520 710 -FUNC 2946 83 _getptd_noexit +FUNC 2946 83 0 _getptd_noexit 2946 2 542 710 2948 8 546 710 2950 5 551 710 @@ -4882,14 +4884,14 @@ FUNC 2946 83 _getptd_noexit 29bd 8 583 710 29c5 3 585 710 29c8 1 586 710 -FUNC 29c9 18 _getptd +FUNC 29c9 18 0 _getptd 29c9 1 607 710 29ca 7 608 710 29d1 4 609 710 29d5 8 610 710 29dd 3 612 710 29e0 1 613 710 -FUNC 29e1 121 _freefls +FUNC 29e1 121 4 _freefls 29e1 c 641 710 29ed b 652 710 29f8 7 653 710 @@ -4924,7 +4926,7 @@ FUNC 29e1 121 _freefls 2aed 9 682 710 2af6 3 697 710 2af9 9 698 710 -FUNC 2b02 69 _freeptd +FUNC 2b02 69 4 _freeptd 2b02 0 728 710 2b02 a 733 710 2b0c 1b 745 710 @@ -4934,13 +4936,13 @@ FUNC 2b02 69 _freeptd 2b57 a 757 710 2b61 9 761 710 2b6a 1 763 710 -FUNC 2b6b 6 __threadid +FUNC 2b6b 6 0 __threadid 2b6b 0 787 710 2b6b 6 788 710 -FUNC 2b71 6 __threadhandle +FUNC 2b71 6 0 __threadhandle 2b71 0 794 710 2b71 6 795 710 -FUNC 2b77 184 _mtinit +FUNC 2b77 184 0 _mtinit 2b77 1 303 710 2b78 d 312 710 2b85 4 313 710 @@ -4972,7 +4974,7 @@ FUNC 2b77 184 _mtinit 2cf1 5 387 710 2cf6 4 346 710 2cfa 1 401 710 -FUNC 2cfb 5b __heap_select +FUNC 2cfb 5b 0 __heap_select 2cfb 6 70 3489 2d01 23 143 3489 2d24 1b 144 3489 @@ -4981,7 +4983,7 @@ FUNC 2cfb 5b __heap_select 2d4f 2 164 3489 2d51 3 161 3489 2d54 2 164 3489 -FUNC 2d56 5a _heap_init +FUNC 2d56 5a 4 _heap_init 2d56 0 192 3489 2d56 20 199 3489 2d76 2 200 3489 @@ -4994,7 +4996,7 @@ FUNC 2d56 5a _heap_init 2daa 2 213 3489 2dac 3 239 3489 2daf 1 240 3489 -FUNC 2db0 74 _heap_term +FUNC 2db0 74 0 _heap_term 2db0 1 261 3489 2db1 c 264 3489 2dbd 1b 270 3489 @@ -5005,13 +5007,13 @@ FUNC 2db0 74 _heap_term 2e10 c 300 3489 2e1c 7 301 3489 2e23 1 302 3489 -FUNC 2e24 6 _get_heap_handle +FUNC 2e24 6 0 _get_heap_handle 2e24 0 320 3489 2e24 5 322 3489 2e29 1 323 3489 -FUNC 2e2c 45 __SEH_prolog4 -FUNC 2e71 14 __SEH_epilog4 -FUNC 2e85 94 __security_init_cookie +FUNC 2e2c 45 0 _SEH_prolog4 +FUNC 2e71 14 0 _SEH_epilog4 +FUNC 2e85 94 0 __security_init_cookie 2e85 6 97 2131 2e8b 21 117 2131 2eac 7 119 2131 @@ -5030,7 +5032,7 @@ FUNC 2e85 94 __security_init_cookie 2f06 6 215 2131 2f0c b 216 2131 2f17 2 218 2131 -FUNC 2f19 104 __report_gsfailure +FUNC 2f19 104 0 __report_gsfailure 2f19 9 140 2173 2f22 5 170 2173 2f27 6 171 2173 @@ -5067,14 +5069,16 @@ FUNC 2f19 104 __report_gsfailure 3001 8 315 2173 3009 12 319 2173 301b 2 320 2173 -FUNC 3020 20 __global_unwind2 -FUNC 3040 45 __unwind_handler -FUNC 3085 84 __local_unwind2 -FUNC 3109 23 __abnormal_termination -FUNC 312c 9 _NLG_Notify1 -FUNC 3135 1f _NLG_Notify -FUNC 3154 3 _NLG_Call -FUNC 3157 49 _mtinitlocks +FUNC 3020 20 0 _global_unwind2 +FUNC 3040 45 0 __unwind_handler +FUNC 3085 84 0 _local_unwind2 +FUNC 3109 23 0 _abnormal_termination +FUNC 312c 9 0 _NLG_Notify1 +FUNC 3135 1f 0 _NLG_Notify +PUBLIC 314c 0 _NLG_Dispatch +FUNC 3154 3 0 _NLG_Call +PUBLIC 3156 0 _NLG_Return2 +FUNC 3157 49 0 _mtinitlocks 3157 2 137 852 3159 7 144 852 3160 11 145 852 @@ -5083,7 +5087,7 @@ FUNC 3157 49 _mtinitlocks 3188 6 144 852 318e 5 157 852 3193 d 158 852 -FUNC 31a0 55 _mtdeletelocks +FUNC 31a0 55 0 _mtdeletelocks 31a0 1 188 852 31a1 d 194 852 31ae c 196 852 @@ -5094,16 +5098,16 @@ FUNC 31a0 55 _mtdeletelocks 31d8 c 217 852 31e4 10 221 852 31f4 1 224 852 -FUNC 31f5 15 _unlock +FUNC 31f5 15 4 _unlock 31f5 3 371 852 31f8 10 375 852 3208 2 376 852 -FUNC 320a 18 _lockerr_exit +FUNC 320a 18 4 _lockerr_exit 320a 0 403 852 320a c 404 852 3216 b 405 852 3221 1 406 852 -FUNC 3222 c3 _mtinitlocknum +FUNC 3222 c3 4 _mtinitlocknum 3222 c 259 852 322e 6 261 852 3234 a 269 852 @@ -5130,18 +5134,18 @@ FUNC 3222 c3 _mtinitlocknum 32d3 3 304 852 32d6 6 305 852 32dc 9 301 852 -FUNC 32e5 31 _lock +FUNC 32e5 31 4 _lock 32e5 3 333 852 32e8 10 338 852 32f8 b 340 852 3303 8 341 852 330b 9 348 852 3314 2 349 852 -FUNC 3316 a _initp_misc_invarg +FUNC 3316 a 4 _initp_misc_invarg 3316 0 38 1773 3316 9 39 1773 331f 1 40 1773 -FUNC 3320 fc _invoke_watson +FUNC 3320 fc 14 _invoke_watson 3320 1c 111 1773 333c 6 128 1773 3342 6 129 1773 @@ -5170,22 +5174,22 @@ FUNC 3320 fc _invoke_watson 33ec 8 181 1773 33f4 12 184 1773 3406 16 185 1773 -FUNC 341c 22 _set_invalid_parameter_handler +FUNC 341c 22 4 _set_invalid_parameter_handler 341c 1 207 1773 341d b 211 1773 3428 d 212 1773 3435 5 214 1773 343a 3 216 1773 343d 1 217 1773 -FUNC 343e d _get_invalid_parameter_handler +FUNC 343e d 0 _get_invalid_parameter_handler 343e 0 221 1773 343e c 225 1773 344a 1 228 1773 -FUNC 344b 9 _invoke_watson +FUNC 344b 9 14 _invoke_watson(unsigned short const *,unsigned short const *,unsigned short const *,unsigned int,unsigned int) 344b 3 266 1773 344e 1 274 1773 344f 5 273 1773 -FUNC 3454 24 _invalid_parameter +FUNC 3454 24 14 _invalid_parameter 3454 3 70 1773 3457 b 77 1773 3462 5 78 1773 @@ -5194,15 +5198,15 @@ FUNC 3454 24 _invalid_parameter 346a 8 86 1773 3472 1 89 1773 3473 5 88 1773 -FUNC 3478 10 _invalid_parameter_noinfo +FUNC 3478 10 0 _invalid_parameter_noinfo 3478 0 98 1773 3478 f 99 1773 3487 1 100 1773 -FUNC 3488 9 _invalid_parameter +FUNC 3488 9 14 _invalid_parameter(unsigned short const *,unsigned short const *,unsigned short const *,unsigned int,unsigned int) 3488 3 249 1773 348b 1 257 1773 348c 5 256 1773 -FUNC 3491 3b _get_errno_from_oserr +FUNC 3491 3b 4 _get_errno_from_oserr 3491 0 119 3701 3491 6 123 3701 3497 f 124 3701 @@ -5213,7 +5217,7 @@ FUNC 3491 3b _get_errno_from_oserr 34b9 1 139 3701 34ba 11 135 3701 34cb 1 139 3701 -FUNC 34cc 13 _errno +FUNC 34cc 13 0 _errno 34cc 0 280 3701 34cc 5 281 3701 34d1 4 282 3701 @@ -5221,7 +5225,7 @@ FUNC 34cc 13 _errno 34da 1 288 3701 34db 3 285 3701 34de 1 288 3701 -FUNC 34df 13 __doserrno +FUNC 34df 13 0 __doserrno 34df 0 293 3701 34df 5 294 3701 34e4 4 295 3701 @@ -5229,12 +5233,12 @@ FUNC 34df 13 __doserrno 34ed 1 300 3701 34ee 3 298 3701 34f1 1 300 3701 -FUNC 34f2 1e _dosmaperr +FUNC 34f2 1e 4 _dosmaperr 34f2 1 110 3701 34f3 9 111 3701 34fc 13 113 3701 350f 1 114 3701 -FUNC 3510 1b _set_errno +FUNC 3510 1b 4 _set_errno 3510 0 157 3701 3510 5 158 3701 3515 4 159 3701 @@ -5243,14 +5247,14 @@ FUNC 3510 1b _set_errno 351d b 165 3701 3528 2 166 3701 352a 1 168 3701 -FUNC 352b 2a _get_errno +FUNC 352b 2a 4 _get_errno 352b 1 187 3701 352c 1b 189 3701 3547 1 195 3701 3548 9 193 3701 3551 3 194 3701 3554 1 195 3701 -FUNC 3555 1b _set_doserrno +FUNC 3555 1b 4 _set_doserrno 3555 0 213 3701 3555 5 214 3701 355a 4 215 3701 @@ -5259,14 +5263,14 @@ FUNC 3555 1b _set_doserrno 3562 b 221 3701 356d 2 222 3701 356f 1 224 3701 -FUNC 3570 2a _get_doserrno +FUNC 3570 2a 4 _get_doserrno 3570 1 243 3701 3571 1b 245 3701 358c 1 251 3701 358d 9 249 3701 3596 3 250 3701 3599 1 251 3701 -FUNC 359a ad _onexit_nolock +FUNC 359a ad 4 _onexit_nolock 359a 5 104 1691 359f b 107 1691 35aa 13 108 1691 @@ -5283,7 +5287,7 @@ FUNC 359a ad _onexit_nolock 363b 4 159 1691 363f 6 114 1691 3645 2 160 1691 -FUNC 3647 2f __onexitinit +FUNC 3647 2f 0 __onexitinit 3647 1 205 1691 3648 b 208 1691 3653 9 209 1691 @@ -5293,7 +5297,7 @@ FUNC 3647 2f __onexitinit 366f 3 218 1691 3672 3 220 1691 3675 1 221 1691 -FUNC 3676 3c _onexit +FUNC 3676 3c 4 _onexit 3676 c 85 1691 3682 5 88 1691 3687 4 90 1691 @@ -5302,16 +5306,16 @@ FUNC 3676 3c _onexit 36a3 3 97 1691 36a6 6 98 1691 36ac 6 94 1691 -FUNC 36b2 12 atexit +FUNC 36b2 12 4 atexit 36b2 0 165 1691 36b2 11 166 1691 36c3 1 167 1691 -FUNC 36c4 1f _initp_misc_cfltcvt_tab +FUNC 36c4 1f 0 _initp_misc_cfltcvt_tab 36c4 2 54 2515 36c6 8 56 2515 36ce 14 58 2515 36e2 1 60 2515 -FUNC 36e3 39 terminate +FUNC 36e3 39 0 terminate() 36e3 c 94 3648 36ef 8 107 3648 36f7 4 111 3648 @@ -5322,13 +5326,13 @@ FUNC 36e3 39 terminate 370a 7 127 3648 3711 5 135 3648 3716 6 136 3648 -FUNC 371c 13 unexpected +FUNC 371c 13 0 unexpected() 371c 0 149 3648 371c 8 159 3648 3724 4 163 3648 3728 2 167 3648 372a 5 173 3648 -FUNC 372f 37 _inconsistency +FUNC 372f 37 0 _inconsistency() 372f c 187 3648 373b c 196 3648 3747 4 197 3648 @@ -5338,18 +5342,18 @@ FUNC 372f 37 _inconsistency 3753 7 205 3648 375a 7 211 3648 3761 5 217 3648 -FUNC 3766 11 _initp_eh_hooks +FUNC 3766 11 4 _initp_eh_hooks 3766 0 74 3648 3766 10 80 3648 3776 1 81 3648 -FUNC 3777 19 _initp_misc_winsig +FUNC 3777 19 4 _initp_misc_winsig 3777 0 57 1270 3777 9 58 1270 3780 5 59 1270 3785 5 60 1270 378a 5 61 1270 378f 1 62 1270 -FUNC 3790 9b ctrlevent_capture +FUNC 3790 9b 4 ctrlevent_capture 3790 c 89 1270 379c 9 94 1270 37a5 3 95 1270 @@ -5373,7 +5377,7 @@ FUNC 3790 9b ctrlevent_capture 3819 7 131 1270 3820 3 138 1270 3823 8 139 1270 -FUNC 382b 34 siglookup +FUNC 382b 34 4 siglookup 382b 0 634 1270 382b b 635 1270 3836 15 645 1270 @@ -5381,19 +5385,19 @@ FUNC 382b 34 siglookup 385a 2 653 1270 385c 2 658 1270 385e 1 659 1270 -FUNC 385f d __get_sigabrt +FUNC 385f d 0 __get_sigabrt 385f 0 676 1270 385f c 677 1270 386b 1 678 1270 -FUNC 386c 9 __fpecode +FUNC 386c 9 0 __fpecode 386c 0 699 1270 386c 8 700 1270 3874 1 701 1270 -FUNC 3875 9 __pxcptinfoptrs +FUNC 3875 9 0 __pxcptinfoptrs 3875 0 721 1270 3875 8 722 1270 387d 1 723 1270 -FUNC 387e 23d signal +FUNC 387e 23d 8 signal 387e c 219 1270 388a 4 224 1270 388e 3 230 1270 @@ -5446,7 +5450,7 @@ FUNC 387e 23d signal 3a98 1a 419 1270 3ab2 3 417 1270 3ab5 6 423 1270 -FUNC 3abb 1b0 raise +FUNC 3abb 1b0 4 raise 3abb c 452 1270 3ac7 5 459 1270 3acc 3 460 1270 @@ -5500,11 +5504,11 @@ FUNC 3abb 1b0 raise 3c5d 6 604 1270 3c63 2 607 1270 3c65 6 608 1270 -FUNC 3c6b a _initp_misc_rand_s +FUNC 3c6b a 4 _initp_misc_rand_s 3c6b 0 58 1559 3c6b 9 59 1559 3c74 1 60 1559 -FUNC 3c75 104 rand_s +FUNC 3c75 104 4 rand_s 3c75 3 66 1559 3c78 b 67 1559 3c83 2b 68 1559 @@ -5524,7 +5528,7 @@ FUNC 3c75 104 rand_s 3d69 9 110 1559 3d72 6 112 1559 3d78 1 113 1559 -FUNC 3d79 15a __getlocaleinfo +FUNC 3d79 15a 14 __getlocaleinfo 3d79 1d 70 1967 3d96 7 76 1967 3d9d 87 109 1967 @@ -5544,20 +5548,20 @@ FUNC 3d79 15a __getlocaleinfo 3eab 10 134 1967 3ebb 16 135 1967 3ed1 2 139 1967 -FUNC 3ed3 a _initp_misc_purevirt +FUNC 3ed3 a 4 _initp_misc_purevirt 3ed3 0 166 1967 3ed3 9 167 1967 3edc 1 168 1967 -FUNC 3edd a _initp_misc_initcrit +FUNC 3edd a 4 _initp_misc_initcrit 3edd 0 47 2049 3edd 9 48 2049 3ee6 1 49 2049 -FUNC 3ee7 10 __crtInitCritSecNoSpinCount +FUNC 3ee7 10 8 __crtInitCritSecNoSpinCount 3ee7 0 76 2049 3ee7 a 77 2049 3ef1 3 78 2049 3ef4 3 79 2049 -FUNC 3ef7 c5 __crtInitCritSecAndSpinCount +FUNC 3ef7 c5 8 __crtInitCritSecAndSpinCount 3ef7 c 109 2049 3f03 5 111 2049 3f08 e 112 2049 @@ -5581,11 +5585,11 @@ FUNC 3ef7 c5 __crtInitCritSecAndSpinCount 3fac 7 174 2049 3fb3 3 176 2049 3fb6 6 177 2049 -FUNC 3fbc a _initp_heap_handler +FUNC 3fbc a 4 _initp_heap_handler 3fbc 0 31 3251 3fbc 9 32 3251 3fc5 1 33 3251 -FUNC 3fc6 31 _set_new_handler +FUNC 3fc6 31 4 _set_new_handler(int (*)(unsigned int)) 3fc6 1 53 3251 3fc7 7 57 3251 3fce b 59 3251 @@ -5593,15 +5597,15 @@ FUNC 3fc6 31 _set_new_handler 3fe4 f 63 3251 3ff3 3 65 3251 3ff6 1 66 3251 -FUNC 3ff7 9 _set_new_handler +FUNC 3ff7 9 4 _set_new_handler(int) 3ff7 0 86 3251 3ff7 8 89 3251 3fff 1 90 3251 -FUNC 4000 d _query_new_handler +FUNC 4000 d 0 _query_new_handler() 4000 0 110 3251 4000 c 111 3251 400c 1 112 3251 -FUNC 400d 22 _callnewh +FUNC 400d 22 4 _callnewh 400d 0 131 3251 400d b 133 3251 4018 10 135 3251 @@ -5609,7 +5613,7 @@ FUNC 400d 22 _callnewh 402b 1 139 3251 402c 2 136 3251 402e 1 139 3251 -FUNC 402f 19e __crtMessageBoxA +FUNC 402f 19e c __crtMessageBoxA 402f 9 41 2471 4038 5 49 2471 403d 2 56 2471 @@ -5642,7 +5646,7 @@ FUNC 402f 19e __crtMessageBoxA 419f f 141 2471 41ae 1d 144 2471 41cb 2 145 2471 -FUNC 41cd 71 strcat_s +FUNC 41cd 71 c strcat_s 41cd 0 13 600 41cd 30 18 600 41fd c 19 600 @@ -5658,7 +5662,7 @@ FUNC 41cd 71 strcat_s 422a e 42 600 4238 5 45 600 423d 1 46 600 -FUNC 423e b3 strncpy_s +FUNC 423e b3 10 strncpy_s 423e 5 13 516 4243 14 17 516 4257 5 65 516 @@ -5680,7 +5684,7 @@ FUNC 423e b3 strncpy_s 42d5 c 59 516 42e1 2 61 516 42e3 e 62 516 -FUNC 4300 8b strlen +FUNC 4300 8b 4 strlen 4300 0 54 622 4300 4 63 622 4304 6 64 622 @@ -5726,7 +5730,7 @@ FUNC 4300 8b strlen 4384 4 119 622 4388 2 120 622 438a 1 121 622 -FUNC 438b 65 strcpy_s +FUNC 438b 65 c strcpy_s 438b 0 13 558 438b 30 18 558 43bb c 19 558 @@ -5737,7 +5741,7 @@ FUNC 438b 65 strcpy_s 43dc e 30 558 43ea 5 33 558 43ef 1 34 558 -FUNC 43f0 46 _set_error_mode +FUNC 43f0 46 4 _set_error_mode 43f0 0 43 2379 43f0 15 50 2379 4405 6 58 2379 @@ -5747,15 +5751,15 @@ FUNC 43f0 46 _set_error_mode 4418 1 65 2379 4419 1c 61 2379 4435 1 65 2379 -FUNC 4436 a __set_app_type +FUNC 4436 a 4 __set_app_type 4436 0 91 2379 4436 9 96 2379 443f 1 97 2379 -FUNC 4440 6 __get_app_type +FUNC 4440 6 0 __get_app_type 4440 0 120 2379 4440 5 125 2379 4445 1 126 2379 -FUNC 4446 8e free +FUNC 4446 8e 4 free 4446 c 42 3525 4452 7 47 3525 4459 9 53 3525 @@ -5772,7 +5776,7 @@ FUNC 4446 8e free 44b4 4 110 3525 44b8 16 112 3525 44ce 6 115 3525 -FUNC 44d4 21 wait_a_bit +FUNC 44d4 21 4 wait_a_bit 44d4 1 18 3565 44d5 b 19 3565 44e0 6 20 3565 @@ -5780,11 +5784,11 @@ FUNC 44d4 21 wait_a_bit 44ee 3 22 3565 44f1 3 23 3565 44f4 1 24 3565 -FUNC 44f5 10 _set_malloc_crt_max_wait +FUNC 44f5 10 4 _set_malloc_crt_max_wait 44f5 0 32 3565 44f5 f 34 3565 4504 1 36 3565 -FUNC 4505 40 _malloc_crt +FUNC 4505 40 4 _malloc_crt 4505 2 39 3565 4507 2 40 3565 4509 b 44 3565 @@ -5793,7 +5797,7 @@ FUNC 4505 40 _malloc_crt 4539 7 47 3565 4540 4 50 3565 4544 1 51 3565 -FUNC 4545 48 _calloc_crt +FUNC 4545 48 8 _calloc_crt 4545 2 54 3565 4547 2 55 3565 4549 14 61 3565 @@ -5802,7 +5806,7 @@ FUNC 4545 48 _calloc_crt 4581 7 64 3565 4588 4 67 3565 458c 1 68 3565 -FUNC 458d 4b _realloc_crt +FUNC 458d 4b 8 _realloc_crt 458d 2 71 3565 458f 2 72 3565 4591 f 76 3565 @@ -5811,7 +5815,7 @@ FUNC 458d 4b _realloc_crt 45cc 7 79 3565 45d3 4 82 3565 45d7 1 83 3565 -FUNC 45d8 50 _recalloc_crt +FUNC 45d8 50 c _recalloc_crt 45d8 2 86 3565 45da 2 87 3565 45dc 16 91 3565 @@ -5820,27 +5824,27 @@ FUNC 45d8 50 _recalloc_crt 461c 7 95 3565 4623 4 100 3565 4627 1 101 3565 -FUNC 4628 8 _malloc_crt_fastcall +FUNC 4628 8 0 _malloc_crt_fastcall 4628 0 105 3565 4628 7 106 3565 462f 1 107 3565 -FUNC 4630 a _calloc_crt_fastcall +FUNC 4630 a 0 _calloc_crt_fastcall 4630 0 110 3565 4630 9 111 3565 4639 1 112 3565 -FUNC 463a a _realloc_crt_fastcall +FUNC 463a a 0 _realloc_crt_fastcall 463a 0 115 3565 463a 9 116 3565 4643 1 117 3565 -FUNC 4644 e _LocaleUpdate::~_LocaleUpdate +FUNC 4644 e 0 _LocaleUpdate::~_LocaleUpdate() 4644 0 282 3085 4644 6 283 3085 464a 7 284 3085 4651 1 285 3085 -FUNC 4652 3 _LocaleUpdate::GetLocaleT +FUNC 4652 3 0 _LocaleUpdate::GetLocaleT() 4652 2 287 3085 4654 1 289 3085 -FUNC 4655 2f CPtoLCID +FUNC 4655 2f 0 CPtoLCID 4655 0 329 3061 4655 14 330 3061 4669 2 345 3061 @@ -5853,7 +5857,7 @@ FUNC 4655 2f CPtoLCID 467d 1 346 3061 467e 5 333 3061 4683 1 346 3061 -FUNC 4684 55 setSBCS +FUNC 4684 55 0 setSBCS 4684 4 363 3061 4688 14 368 3061 469c 3 371 3061 @@ -5865,7 +5869,7 @@ FUNC 4684 55 setSBCS 46c0 b 384 3061 46cb d 385 3061 46d8 1 386 3061 -FUNC 46d9 18a setSBUpLow +FUNC 46d9 18a 0 setSBUpLow 46d9 1d 402 3061 46f6 f 412 3061 4705 d 415 3061 @@ -5895,7 +5899,7 @@ FUNC 46d9 18a setSBUpLow 4844 3 472 3061 4847 5 460 3061 484c 17 474 3061 -FUNC 4863 a4 __updatetmbcinfo +FUNC 4863 a4 0 __updatetmbcinfo 4863 c 496 3061 486f 7 499 3061 4876 10 500 3061 @@ -5913,7 +5917,7 @@ FUNC 4863 a4 __updatetmbcinfo 48e6 7 525 3061 48ed 11 528 3061 48fe 9 530 3061 -FUNC 4907 82 _LocaleUpdate::_LocaleUpdate +FUNC 4907 82 4 _LocaleUpdate::_LocaleUpdate(localeinfo_struct *) 4907 0 261 3085 4907 f 262 3085 4916 8 264 3085 @@ -5927,7 +5931,7 @@ FUNC 4907 82 _LocaleUpdate::_LocaleUpdate 4977 2 276 3085 4979 a 278 3085 4983 6 280 3085 -FUNC 4989 7a getSystemCP +FUNC 4989 7a 0 getSystemCP 4989 7 282 3061 4990 b 284 3061 499b b 289 3061 @@ -5940,7 +5944,7 @@ FUNC 4989 7a getSystemCP 49e0 12 305 3061 49f2 f 308 3061 4a01 2 309 3061 -FUNC 4a03 1ab _setmbcp_nolock +FUNC 4a03 1ab 8 _setmbcp_nolock 4a03 15 686 3061 4a18 b 693 3061 4a23 9 696 3061 @@ -5980,7 +5984,7 @@ FUNC 4a03 1ab _setmbcp_nolock 4b96 6 789 3061 4b9c 3 793 3061 4b9f f 794 3061 -FUNC 4bae 3c _getmbcp +FUNC 4bae 3c 0 _getmbcp 4bae 6 811 3061 4bb4 a 813 3061 4bbe 9 814 3061 @@ -5988,7 +5992,7 @@ FUNC 4bae 3c _getmbcp 4bd7 2 818 3061 4bd9 f 817 3061 4be8 2 818 3061 -FUNC 4bea 19a _setmbcp +FUNC 4bea 19a 4 _setmbcp 4bea c 574 3061 4bf6 4 575 3061 4bfa a 579 3061 @@ -6035,100 +6039,100 @@ FUNC 4bea 19a _setmbcp 4d77 4 673 3061 4d7b 3 682 3061 4d7e 6 683 3061 -FUNC 4d84 1e __initmbctable +FUNC 4d84 1e 0 __initmbctable 4d84 0 835 3061 4d84 9 845 3061 4d8d 8 846 3061 4d95 a 847 3061 4d9f 2 852 3061 4da1 1 853 3061 -FUNC 4da2 51 x_ismbbtype_l +FUNC 4da2 51 10 x_ismbbtype_l 4da2 6 213 3115 4da8 b 214 3115 4db3 4 219 3115 4db7 3a 222 3115 4df1 2 223 3115 -FUNC 4df3 15 _ismbbkalnum_l +FUNC 4df3 15 8 _ismbbkalnum_l 4df3 0 80 3115 4df3 14 81 3115 4e07 1 82 3115 -FUNC 4e08 13 _ismbbkalnum +FUNC 4e08 13 4 _ismbbkalnum 4e08 0 85 3115 4e08 12 86 3115 4e1a 1 87 3115 -FUNC 4e1b 15 _ismbbkprint_l +FUNC 4e1b 15 8 _ismbbkprint_l 4e1b 0 90 3115 4e1b 14 91 3115 4e2f 1 92 3115 -FUNC 4e30 13 _ismbbkprint +FUNC 4e30 13 4 _ismbbkprint 4e30 0 95 3115 4e30 12 96 3115 4e42 1 97 3115 -FUNC 4e43 15 _ismbbkpunct_l +FUNC 4e43 15 8 _ismbbkpunct_l 4e43 0 100 3115 4e43 14 101 3115 4e57 1 102 3115 -FUNC 4e58 13 _ismbbkpunct +FUNC 4e58 13 4 _ismbbkpunct 4e58 0 105 3115 4e58 12 106 3115 4e6a 1 107 3115 -FUNC 4e6b 18 _ismbbalnum_l +FUNC 4e6b 18 8 _ismbbalnum_l 4e6b 0 113 3115 4e6b 17 114 3115 4e82 1 115 3115 -FUNC 4e83 16 _ismbbalnum +FUNC 4e83 16 4 _ismbbalnum 4e83 0 118 3115 4e83 15 119 3115 4e98 1 120 3115 -FUNC 4e99 18 _ismbbalpha_l +FUNC 4e99 18 8 _ismbbalpha_l 4e99 0 123 3115 4e99 17 124 3115 4eb0 1 125 3115 -FUNC 4eb1 16 _ismbbalpha +FUNC 4eb1 16 4 _ismbbalpha 4eb1 0 128 3115 4eb1 15 129 3115 4ec6 1 130 3115 -FUNC 4ec7 18 _ismbbgraph_l +FUNC 4ec7 18 8 _ismbbgraph_l 4ec7 0 133 3115 4ec7 17 134 3115 4ede 1 135 3115 -FUNC 4edf 16 _ismbbgraph +FUNC 4edf 16 4 _ismbbgraph 4edf 0 138 3115 4edf 15 139 3115 4ef4 1 140 3115 -FUNC 4ef5 18 _ismbbprint_l +FUNC 4ef5 18 8 _ismbbprint_l 4ef5 0 143 3115 4ef5 17 144 3115 4f0c 1 145 3115 -FUNC 4f0d 16 _ismbbprint +FUNC 4f0d 16 4 _ismbbprint 4f0d 0 148 3115 4f0d 15 149 3115 4f22 1 150 3115 -FUNC 4f23 15 _ismbbpunct_l +FUNC 4f23 15 8 _ismbbpunct_l 4f23 0 153 3115 4f23 14 154 3115 4f37 1 155 3115 -FUNC 4f38 13 _ismbbpunct +FUNC 4f38 13 4 _ismbbpunct 4f38 0 158 3115 4f38 12 159 3115 4f4a 1 160 3115 -FUNC 4f4b 15 _ismbblead_l +FUNC 4f4b 15 8 _ismbblead_l 4f4b 0 166 3115 4f4b 14 167 3115 4f5f 1 168 3115 -FUNC 4f60 13 _ismbblead +FUNC 4f60 13 4 _ismbblead 4f60 0 171 3115 4f60 12 172 3115 4f72 1 173 3115 -FUNC 4f73 15 _ismbbtrail_l +FUNC 4f73 15 8 _ismbbtrail_l 4f73 0 176 3115 4f73 14 177 3115 4f87 1 178 3115 -FUNC 4f88 13 _ismbbtrail +FUNC 4f88 13 4 _ismbbtrail 4f88 0 181 3115 4f88 12 182 3115 4f9a 1 183 3115 -FUNC 4f9b 53 _ismbbkana_l +FUNC 4f9b 53 8 _ismbbkana_l 4f9b 6 189 3115 4fa1 b 190 3115 4fac 10 192 3115 @@ -6136,11 +6140,11 @@ FUNC 4f9b 53 _ismbbkana_l 4fdb 2 197 3115 4fdd f 196 3115 4fec 2 197 3115 -FUNC 4fee e _ismbbkana +FUNC 4fee e 4 _ismbbkana 4fee 0 200 3115 4fee d 201 3115 4ffb 1 202 3115 -FUNC 5000 365 memcpy +FUNC 5000 365 c memcpy 5000 3 101 689 5003 1 113 689 5004 1 114 689 @@ -6379,15 +6383,15 @@ FUNC 5000 365 memcpy 5361 1 596 689 5362 1 597 689 5363 2 598 689 -FUNC 5365 6 ___setlc_active_func +FUNC 5365 6 0 ___setlc_active_func 5365 0 90 1478 5365 5 91 1478 536a 1 92 1478 -FUNC 536b 6 ___unguarded_readlc_active_add_func +FUNC 536b 6 0 ___unguarded_readlc_active_add_func 536b 0 104 1478 536b 5 105 1478 5370 1 106 1478 -FUNC 5371 140 __freetlocinfo +FUNC 5371 140 4 __freetlocinfo 5371 3 144 1478 5374 26 152 1478 539a e 155 1478 @@ -6413,7 +6417,7 @@ FUNC 5371 140 __freetlocinfo 5498 d 207 1478 54a5 b 214 1478 54b0 1 215 1478 -FUNC 54b1 86 __addlocaleref +FUNC 54b1 86 4 __addlocaleref 54b1 3 225 1478 54b4 e 227 1478 54c2 a 228 1478 @@ -6431,7 +6435,7 @@ FUNC 54b1 86 __addlocaleref 551b 9 246 1478 5524 12 248 1478 5536 1 249 1478 -FUNC 5537 8c __removelocaleref +FUNC 5537 8c 4 __removelocaleref 5537 1 259 1478 5538 b 261 1478 5543 9 263 1478 @@ -6451,14 +6455,14 @@ FUNC 5537 8c __removelocaleref 55ae 11 285 1478 55bf 3 287 1478 55c2 1 288 1478 -FUNC 55c3 24 _copytlocinfo_nolock +FUNC 55c3 24 0 _copytlocinfo_nolock 55c3 3 302 1478 55c6 d 303 1478 55d3 7 304 1478 55da 3 305 1478 55dd 9 306 1478 55e6 1 308 1478 -FUNC 55e7 3e _updatetlocinfoEx_nolock +FUNC 55e7 3e 0 _updatetlocinfoEx_nolock 55e7 0 321 1478 55e7 9 324 1478 55f0 2 326 1478 @@ -6472,7 +6476,7 @@ FUNC 55e7 3e _updatetlocinfoEx_nolock 5621 1 356 1478 5622 2 325 1478 5624 1 356 1478 -FUNC 5625 76 __updatetlocinfo +FUNC 5625 76 0 __updatetlocinfo 5625 c 382 1478 5631 7 384 1478 5638 10 386 1478 @@ -6487,7 +6491,7 @@ FUNC 5625 76 __updatetlocinfo 5681 e 392 1478 568f 8 394 1478 5697 4 395 1478 -FUNC 569b 66 _configthreadlocale +FUNC 569b 66 4 _configthreadlocale 569b 2 420 1478 569d 5 434 1478 56a2 10 435 1478 @@ -6500,7 +6504,7 @@ FUNC 569b 66 _configthreadlocale 56f5 7 452 1478 56fc 4 460 1478 5700 1 462 1478 -FUNC 5701 53 sync_legacy_variables_lk +FUNC 5701 53 0 sync_legacy_variables_lk 5701 0 489 1478 5701 e 490 1478 570f 9 491 1478 @@ -6510,7 +6514,7 @@ FUNC 5701 53 sync_legacy_variables_lk 573c c 495 1478 5748 b 496 1478 5753 1 497 1478 -FUNC 5754 96 _free_locale +FUNC 5754 96 4 _free_locale 5754 c 517 1478 5760 9 518 1478 5769 1c 522 1478 @@ -6528,10 +6532,10 @@ FUNC 5754 96 _free_locale 57d8 6 556 1478 57de 3 543 1478 57e1 9 545 1478 -FUNC 57ea 5 __free_locale +FUNC 57ea 5 4 __free_locale 57ea 0 562 1478 57ea 5 563 1478 -FUNC 57ef 88 _get_current_locale +FUNC 57ef 88 0 _get_current_locale 57ef c 687 1478 57fb 7 689 1478 5802 14 691 1478 @@ -6550,20 +6554,20 @@ FUNC 57ef 88 _get_current_locale 5865 6 718 1478 586b 3 712 1478 586e 9 713 1478 -FUNC 5877 5 __get_current_locale +FUNC 5877 5 0 __get_current_locale 5877 0 722 1478 5877 5 723 1478 -FUNC 587c 3 __init_dummy +FUNC 587c 3 4 __init_dummy 587c 0 1283 1478 587c 2 1284 1478 587e 1 1285 1478 -FUNC 587f 3e _strcats +FUNC 587f 3e c _strcats 587f 2 1288 1478 5881 f 1294 1478 5890 26 1296 1478 58b6 6 1294 1478 58bc 1 1299 1478 -FUNC 58bd 129 __lc_strtolc +FUNC 58bd 129 8 __lc_strtolc 58bd 6 1302 1478 58c3 11 1307 1478 58d4 c 1309 1478 @@ -6584,7 +6588,7 @@ FUNC 58bd 129 __lc_strtolc 59c6 18 1350 1478 59de 6 1338 1478 59e4 2 1353 1478 -FUNC 59e6 6b __lc_lctostr +FUNC 59e6 6b c __lc_lctostr 59e6 5 1356 1478 59eb 25 1357 1478 5a10 7 1358 1478 @@ -6592,7 +6596,7 @@ FUNC 59e6 6b __lc_lctostr 5a2d c 1360 1478 5a39 16 1361 1478 5a4f 2 1362 1478 -FUNC 5a51 171 _setlocale_get_all +FUNC 5a51 171 0 _setlocale_get_all 5a51 4 1124 1478 5a55 3 1126 1478 5a58 1d 1134 1478 @@ -6620,7 +6624,7 @@ FUNC 5a51 171 _setlocale_get_all 5ba3 9 1177 1478 5bac 12 1183 1478 5bbe 4 1187 1478 -FUNC 5bc2 1d4 _expandlocale +FUNC 5bc2 1d4 18 _expandlocale 5bc2 15 1198 1478 5bd7 41 1230 1478 5c18 14 1211 1478 @@ -6654,7 +6658,7 @@ FUNC 5bc2 1d4 _expandlocale 5d7d 5 1277 1478 5d82 2 1212 1478 5d84 12 1278 1478 -FUNC 5d96 2f6 _setlocale_set_cat +FUNC 5d96 2f6 4 _setlocale_set_cat 5d96 19 980 1478 5daf 5 993 1478 5db4 2f 998 1478 @@ -6707,7 +6711,7 @@ FUNC 5d96 2f6 _setlocale_set_cat 6060 18 1116 1478 6078 3 1118 1478 607b 11 1119 1478 -FUNC 608c 1ce _setlocale_nolock +FUNC 608c 1ce 4 _setlocale_nolock 608c 1a 873 1478 60a6 7 877 1478 60ad 5 904 1478 @@ -6747,7 +6751,7 @@ FUNC 608c 1ce _setlocale_nolock 6241 2 965 1478 6243 5 966 1478 6248 12 972 1478 -FUNC 625a f3 _create_locale +FUNC 625a f3 8 _create_locale 625a 0 605 1478 625a 10 609 1478 626a 13 612 1478 @@ -6777,10 +6781,10 @@ FUNC 625a f3 _create_locale 633c 5 652 1478 6341 5 653 1478 6346 7 657 1478 -FUNC 634d 5 __create_locale +FUNC 634d 5 8 __create_locale 634d 0 665 1478 634d 5 666 1478 -FUNC 6352 170 setlocale +FUNC 6352 170 8 setlocale 6352 c 791 1478 635e 5 792 1478 6363 25 797 1478 @@ -6817,14 +6821,14 @@ FUNC 6352 170 setlocale 64b4 6 866 1478 64ba 3 860 1478 64bd 5 862 1478 -FUNC 64c2 21 _get_sbh_threshold +FUNC 64c2 21 0 _get_sbh_threshold 64c2 0 61 3299 64c2 9 64 3299 64cb 2 66 3299 64cd 1 81 3299 64ce 14 69 3299 64e2 1 81 3299 -FUNC 64e3 46 _set_amblksiz +FUNC 64e3 46 4 _set_amblksiz 64e3 0 214 3299 64e3 2b 216 3299 650e 1 224 3299 @@ -6832,7 +6836,7 @@ FUNC 64e3 46 _set_amblksiz 6520 5 220 3299 6525 3 223 3299 6528 1 224 3299 -FUNC 6529 3c _get_amblksiz +FUNC 6529 3c 4 _get_amblksiz 6529 0 243 3299 6529 27 245 3299 6550 1 253 3299 @@ -6840,7 +6844,7 @@ FUNC 6529 3c _get_amblksiz 6559 8 249 3299 6561 3 252 3299 6564 1 253 3299 -FUNC 6565 48 __sbh_heap_init +FUNC 6565 48 4 __sbh_heap_init 6565 0 274 3299 6565 1c 275 3299 6581 1 285 3299 @@ -6849,7 +6853,7 @@ FUNC 6565 48 __sbh_heap_init 658d c 281 3299 6599 13 284 3299 65ac 1 285 3299 -FUNC 65ad 2b __sbh_find_block +FUNC 65ad 2b 4 __sbh_find_block 65ad 0 306 3299 65ad 12 307 3299 65bf 7 316 3299 @@ -6858,7 +6862,7 @@ FUNC 65ad 2b __sbh_find_block 65d1 4 314 3299 65d5 2 321 3299 65d7 1 322 3299 -FUNC 65d8 314 __sbh_free_block +FUNC 65d8 314 8 __sbh_free_block 65d8 6 381 3299 65de 7 399 3299 65e5 9 402 3299 @@ -6942,7 +6946,7 @@ FUNC 65d8 314 __sbh_free_block 68d9 8 608 3299 68e1 9 609 3299 68ea 2 611 3299 -FUNC 68ec b0 __sbh_alloc_new_region +FUNC 68ec b0 0 __sbh_alloc_new_region 68ec 0 891 3299 68ec 13 897 3299 68ff 1e 900 3299 @@ -6959,7 +6963,7 @@ FUNC 68ec b0 __sbh_alloc_new_region 6991 6 933 3299 6997 4 935 3299 699b 1 936 3299 -FUNC 699c 106 __sbh_alloc_new_group +FUNC 699c 106 4 __sbh_alloc_new_group 699c 5 958 3299 69a1 3 959 3299 69a4 9 972 3299 @@ -6991,7 +6995,7 @@ FUNC 699c 106 __sbh_alloc_new_group 6a8d e 1036 3299 6a9b 5 1038 3299 6aa0 2 1039 3299 -FUNC 6aa2 2df __sbh_resize_block +FUNC 6aa2 2df c __sbh_resize_block 6aa2 6 1061 3299 6aa8 c 1080 3299 6ab4 b 1083 3299 @@ -7078,7 +7082,7 @@ FUNC 6aa2 2df __sbh_resize_block 6d75 4 1278 3299 6d79 6 1281 3299 6d7f 2 1282 3299 -FUNC 6d81 cd __sbh_heapmin +FUNC 6d81 cd 0 __sbh_heapmin 6d81 0 1302 3299 6d81 d 1306 3299 6d8e 6 1310 3299 @@ -7093,7 +7097,7 @@ FUNC 6d81 cd __sbh_heapmin 6e40 6 1334 3299 6e46 7 1338 3299 6e4d 1 1340 3299 -FUNC 6e4e 2e2 __sbh_heap_check +FUNC 6e4e 2e2 0 __sbh_heap_check 6e4e 3 1361 3299 6e51 12 1391 3299 6e63 8 1393 3299 @@ -7178,7 +7182,7 @@ FUNC 6e4e 2e2 __sbh_heap_check 7123 4 1576 3299 7127 4 1592 3299 712b 5 1603 3299 -FUNC 7130 a8 _set_sbh_threshold +FUNC 7130 a8 4 _set_sbh_threshold 7130 1 102 3299 7131 a 104 3299 713b 3 106 3299 @@ -7198,7 +7202,7 @@ FUNC 7130 a8 _set_sbh_threshold 71c8 b 193 3299 71d3 4 194 3299 71d7 1 195 3299 -FUNC 71d8 2e3 __sbh_alloc_block +FUNC 71d8 2e3 4 __sbh_alloc_block 71d8 6 632 3299 71de 5 633 3299 71e3 15 650 3299 @@ -7290,11 +7294,11 @@ FUNC 71d8 2e3 __sbh_alloc_block 74ae 5 866 3299 74b3 6 868 3299 74b9 2 869 3299 -FUNC 74bb 8 _crt_debugger_hook +FUNC 74bb 8 4 _crt_debugger_hook 74bb 0 62 2412 74bb 7 65 2412 74c2 1 66 2412 -FUNC 74d0 7a memset +FUNC 74d0 7a c memset 74d0 0 59 676 74d0 4 68 676 74d4 4 69 676 @@ -7343,7 +7347,7 @@ FUNC 74d0 7a memset 7544 1 145 676 7545 4 148 676 7549 1 150 676 -FUNC 754a a3 _msize +FUNC 754a a3 4 _msize 754a c 43 3387 7556 2d 47 3387 7583 9 51 3387 @@ -7358,11 +7362,11 @@ FUNC 754a a3 _msize 75d6 6 93 3387 75dc 8 61 3387 75e4 9 62 3387 -FUNC 75ed 9 _fptrap +FUNC 75ed 9 0 _fptrap 75ed 0 46 988 75ed 8 47 988 75f5 1 48 988 -FUNC 75f6 f3 abort +FUNC 75f6 f3 0 abort 75f6 1b 53 2559 7611 a 56 2559 761b 8 59 2559 @@ -7393,188 +7397,188 @@ FUNC 75f6 f3 abort 76c2 15 126 2559 76d7 a 128 2559 76e1 8 137 2559 -FUNC 76e9 1e _set_abort_behavior +FUNC 76e9 1e 8 _set_abort_behavior 76e9 0 158 2559 76e9 1d 160 2559 7706 1 162 2559 -FUNC 7707 54 _isalpha_l +FUNC 7707 54 8 _isalpha_l 7707 6 57 4008 770d b 58 4008 7718 41 60 4008 7759 2 61 4008 -FUNC 775b 2b isalpha +FUNC 775b 2b 4 isalpha 775b 0 66 4008 775b 9 67 4008 7764 13 69 4008 7777 1 75 4008 7778 d 73 4008 7785 1 75 4008 -FUNC 7786 4f _isupper_l +FUNC 7786 4f 8 _isupper_l 7786 6 81 4008 778c b 82 4008 7797 3c 84 4008 77d3 2 85 4008 -FUNC 77d5 29 isupper +FUNC 77d5 29 4 isupper 77d5 0 90 4008 77d5 9 91 4008 77de 11 93 4008 77ef 1 99 4008 77f0 d 97 4008 77fd 1 99 4008 -FUNC 77fe 4f _islower_l +FUNC 77fe 4f 8 _islower_l 77fe 6 105 4008 7804 b 106 4008 780f 3c 108 4008 784b 2 109 4008 -FUNC 784d 29 islower +FUNC 784d 29 4 islower 784d 0 114 4008 784d 9 115 4008 7856 11 117 4008 7867 1 123 4008 7868 d 121 4008 7875 1 123 4008 -FUNC 7876 4f _isdigit_l +FUNC 7876 4f 8 _isdigit_l 7876 6 129 4008 787c b 130 4008 7887 3c 132 4008 78c3 2 133 4008 -FUNC 78c5 29 isdigit +FUNC 78c5 29 4 isdigit 78c5 0 138 4008 78c5 9 139 4008 78ce 11 141 4008 78df 1 147 4008 78e0 d 145 4008 78ed 1 147 4008 -FUNC 78ee 54 _isxdigit_l +FUNC 78ee 54 8 _isxdigit_l 78ee 6 153 4008 78f4 b 154 4008 78ff 41 156 4008 7940 2 157 4008 -FUNC 7942 2b isxdigit +FUNC 7942 2b 4 isxdigit 7942 0 162 4008 7942 9 163 4008 794b 13 165 4008 795e 1 171 4008 795f d 169 4008 796c 1 171 4008 -FUNC 796d 4f _isspace_l +FUNC 796d 4f 8 _isspace_l 796d 6 177 4008 7973 b 178 4008 797e 3c 180 4008 79ba 2 181 4008 -FUNC 79bc 29 isspace +FUNC 79bc 29 4 isspace 79bc 0 186 4008 79bc 9 187 4008 79c5 11 189 4008 79d6 1 195 4008 79d7 d 193 4008 79e4 1 195 4008 -FUNC 79e5 4f _ispunct_l +FUNC 79e5 4f 8 _ispunct_l 79e5 6 201 4008 79eb b 202 4008 79f6 3c 204 4008 7a32 2 205 4008 -FUNC 7a34 29 ispunct +FUNC 7a34 29 4 ispunct 7a34 0 210 4008 7a34 9 211 4008 7a3d 11 213 4008 7a4e 1 219 4008 7a4f d 217 4008 7a5c 1 219 4008 -FUNC 7a5d 54 _isalnum_l +FUNC 7a5d 54 8 _isalnum_l 7a5d 6 225 4008 7a63 b 226 4008 7a6e 41 228 4008 7aaf 2 229 4008 -FUNC 7ab1 2b isalnum +FUNC 7ab1 2b 4 isalnum 7ab1 0 234 4008 7ab1 9 235 4008 7aba 13 237 4008 7acd 1 243 4008 7ace d 241 4008 7adb 1 243 4008 -FUNC 7adc 54 _isprint_l +FUNC 7adc 54 8 _isprint_l 7adc 6 249 4008 7ae2 b 250 4008 7aed 41 252 4008 7b2e 2 253 4008 -FUNC 7b30 2b isprint +FUNC 7b30 2b 4 isprint 7b30 0 258 4008 7b30 9 259 4008 7b39 13 261 4008 7b4c 1 267 4008 7b4d d 265 4008 7b5a 1 267 4008 -FUNC 7b5b 54 _isgraph_l +FUNC 7b5b 54 8 _isgraph_l 7b5b 6 273 4008 7b61 b 274 4008 7b6c 41 276 4008 7bad 2 277 4008 -FUNC 7baf 2b isgraph +FUNC 7baf 2b 4 isgraph 7baf 0 282 4008 7baf 9 283 4008 7bb8 13 285 4008 7bcb 1 291 4008 7bcc d 289 4008 7bd9 1 291 4008 -FUNC 7bda 4f _iscntrl_l +FUNC 7bda 4f 8 _iscntrl_l 7bda 6 297 4008 7be0 b 298 4008 7beb 3c 300 4008 7c27 2 301 4008 -FUNC 7c29 29 iscntrl +FUNC 7c29 29 4 iscntrl 7c29 0 306 4008 7c29 9 307 4008 7c32 11 309 4008 7c43 1 315 4008 7c44 d 313 4008 7c51 1 315 4008 -FUNC 7c52 d __isascii +FUNC 7c52 d 4 __isascii 7c52 0 320 4008 7c52 c 321 4008 7c5e 1 322 4008 -FUNC 7c5f 8 __toascii +FUNC 7c5f 8 4 __toascii 7c5f 0 327 4008 7c5f 7 328 4008 7c66 1 329 4008 -FUNC 7c67 1f _iscsymf_l +FUNC 7c67 1f 8 _iscsymf_l 7c67 0 335 4008 7c67 1a 336 4008 7c81 1 337 4008 7c82 3 336 4008 7c85 1 337 4008 -FUNC 7c86 1a __iscsymf +FUNC 7c86 1a 4 __iscsymf 7c86 0 341 4008 7c86 15 342 4008 7c9b 1 343 4008 7c9c 3 342 4008 7c9f 1 343 4008 -FUNC 7ca0 1f _iscsym_l +FUNC 7ca0 1f 8 _iscsym_l 7ca0 0 349 4008 7ca0 1a 350 4008 7cba 1 351 4008 7cbb 3 350 4008 7cbe 1 351 4008 -FUNC 7cbf 1c __iscsym +FUNC 7cbf 1c 4 __iscsym 7cbf 0 356 4008 7cbf 17 357 4008 7cd6 1 358 4008 7cd7 3 357 4008 7cda 1 358 4008 -FUNC 7cdb 12 _MarkAllocaS +FUNC 7cdb 12 8 _MarkAllocaS 7cdb 0 203 1382 7cdb 8 204 1382 7ce3 6 206 1382 7ce9 3 207 1382 7cec 1 210 1382 -FUNC 7ced 1b _freea +FUNC 7ced 1b 4 _freea 7ced 0 245 1382 7ced 8 247 1382 7cf5 3 249 1382 7cf8 8 251 1382 7d00 7 253 1382 7d07 1 262 1382 -FUNC 7d08 13b __crtGetLocaleInfoW_stat +FUNC 7d08 13b 18 __crtGetLocaleInfoW_stat 7d08 f 60 1364 7d17 14 68 1364 7d2b d 70 1364 @@ -7600,12 +7604,12 @@ FUNC 7d08 13b __crtGetLocaleInfoW_stat 7e27 6 134 1364 7e2d 4 136 1364 7e31 12 141 1364 -FUNC 7e43 3b __crtGetLocaleInfoW +FUNC 7e43 3b 18 __crtGetLocaleInfoW 7e43 6 151 1364 7e49 b 152 1364 7e54 28 161 1364 7e7c 2 162 1364 -FUNC 7e7e 13d __crtGetLocaleInfoA_stat +FUNC 7e7e 13d 18 __crtGetLocaleInfoA_stat 7e7e f 60 2697 7e8d 17 68 2697 7ea4 a 70 2697 @@ -7630,12 +7634,12 @@ FUNC 7e7e 13d __crtGetLocaleInfoA_stat 7f93 4 141 2697 7f97 12 81 2697 7fa9 12 145 2697 -FUNC 7fbb 3b __crtGetLocaleInfoA +FUNC 7fbb 3b 18 __crtGetLocaleInfoA 7fbb 6 155 2697 7fc1 b 156 2697 7fcc 28 165 2697 7ff4 2 166 2697 -FUNC 7ff6 4f V6_HeapAlloc +FUNC 7ff6 4f 4 V6_HeapAlloc 7ff6 c 27 3435 8002 4 28 3435 8006 b 29 3435 @@ -7646,7 +7650,7 @@ FUNC 7ff6 4f V6_HeapAlloc 8033 3 39 3435 8036 6 40 3435 803c 9 36 3435 -FUNC 8045 75 _heap_alloc +FUNC 8045 75 4 _heap_alloc 8045 0 90 3435 8045 9 95 3435 804e 5 96 3435 @@ -7663,7 +7667,7 @@ FUNC 8045 75 _heap_alloc 80a3 6 124 3435 80a9 10 126 3435 80b9 1 129 3435 -FUNC 80ba c3 malloc +FUNC 80ba c3 4 malloc 80ba 1 155 3435 80bb 16 159 3435 80d1 65 163 3435 @@ -7679,7 +7683,7 @@ FUNC 80ba c3 malloc 816e b 186 3435 8179 3 187 3435 817c 1 196 3435 -FUNC 817d 11e _calloc_impl +FUNC 817d 11e c _calloc_impl 817d c 23 3608 8189 9 28 3608 8192 2e 30 3608 @@ -7711,7 +7715,7 @@ FUNC 817d 11e _calloc_impl 828d 6 103 3608 8293 2 105 3608 8295 6 119 3608 -FUNC 829b 3f calloc +FUNC 829b 3f 8 calloc 829b 4 145 3608 829f 5 146 3608 82a4 14 147 3608 @@ -7719,7 +7723,7 @@ FUNC 829b 3f calloc 82cd 8 151 3608 82d5 3 153 3608 82d8 2 154 3608 -FUNC 82da 21b realloc +FUNC 82da 21b 8 realloc 82da c 64 3348 82e6 7 69 3348 82ed e 70 3348 @@ -7784,7 +7788,7 @@ FUNC 82da 21b realloc 84d7 4 334 3348 84db 16 341 3348 84f1 4 343 3348 -FUNC 84f5 47 _recalloc +FUNC 84f5 47 c _recalloc 84f5 0 744 3348 84f5 b 748 3348 8500 28 750 3348 @@ -7792,7 +7796,7 @@ FUNC 84f5 47 _recalloc 8529 5 752 3348 852e d 754 3348 853b 1 756 3348 -FUNC 853c 1a strncnt +FUNC 853c 1a 4 strncnt 853c 0 48 2649 853c 6 49 2649 8542 6 52 2649 @@ -7800,7 +7804,7 @@ FUNC 853c 1a strncnt 8549 5 52 2649 854e 7 55 2649 8555 1 56 2649 -FUNC 8556 3a2 __crtLCMapStringA_stat +FUNC 8556 3a2 20 __crtLCMapStringA_stat 8556 12 99 2649 8568 d 108 2649 8575 1b 109 2649 @@ -7865,12 +7869,12 @@ FUNC 8556 3a2 __crtLCMapStringA_stat 88dd 7 207 2649 88e4 2 208 2649 88e6 12 350 2649 -FUNC 88f8 43 __crtLCMapStringA +FUNC 88f8 43 24 __crtLCMapStringA 88f8 6 363 2649 88fe b 364 2649 8909 30 376 2649 8939 2 377 2649 -FUNC 893b 1b8 __crtGetStringTypeA_stat +FUNC 893b 1b8 1c __crtGetStringTypeA_stat 893b f 66 2601 894a 10 75 2601 895a 18 79 2601 @@ -7908,27 +7912,27 @@ FUNC 893b 1b8 __crtGetStringTypeA_stat 8ad8 7 114 2601 8adf 2 115 2601 8ae1 12 182 2601 -FUNC 8af3 40 __crtGetStringTypeA +FUNC 8af3 40 20 __crtGetStringTypeA 8af3 6 194 2601 8af9 b 195 2601 8b04 2d 206 2601 8b31 2 207 2601 -FUNC 8b33 87 fastcopy_I -FUNC 8bba e3 _VEC_memcpy -FUNC 8c9d 14 _sse2_mathfcns_init -FUNC 8cb1 14 _set_SSE2_enable -FUNC 8cc5 6 __pwctype_func +FUNC 8b33 87 c fastcopy_I +FUNC 8bba e3 c _VEC_memcpy +FUNC 8c9d 14 0 _sse2_mathfcns_init +FUNC 8cb1 14 4 _set_SSE2_enable +FUNC 8cc5 6 0 __pwctype_func 8cc5 0 24 2428 8cc5 5 25 2428 8cca 1 26 2428 -FUNC 8ccb 29 __pctype_func +FUNC 8ccb 29 0 __pctype_func 8ccb 0 29 2428 8ccb 7 35 2428 8cd2 3 36 2428 8cd5 18 38 2428 8ced 6 39 2428 8cf3 1 40 2428 -FUNC 8cf4 419 _get_lc_time +FUNC 8cf4 419 0 _get_lc_time 8cf4 6 94 1820 8cfa 12 104 1820 8d0c 3 105 1820 @@ -7980,7 +7984,7 @@ FUNC 8cf4 419 _get_lc_time 90e1 20 165 1820 9101 a 169 1820 910b 2 170 1820 -FUNC 910d 190 __free_lc_time +FUNC 910d 190 4 __free_lc_time 910d 1 179 1820 910e c 180 1820 911a 8 183 1820 @@ -8027,7 +8031,7 @@ FUNC 910d 190 __free_lc_time 9282 b 229 1820 928d f 230 1820 929c 1 232 1820 -FUNC 929d 73 __init_time +FUNC 929d 73 4 __init_time 929d 4 56 1820 92a1 f 60 1820 92b0 16 64 1820 @@ -8043,7 +8047,7 @@ FUNC 929d 73 __init_time 9307 2 82 1820 9309 6 83 1820 930f 1 84 1820 -FUNC 9310 33 fix_grouping +FUNC 9310 33 0 fix_grouping 9310 0 32 1867 9310 8 40 1867 9318 a 43 1867 @@ -8056,7 +8060,7 @@ FUNC 9310 33 fix_grouping 9334 7 55 1867 933b 6 56 1867 9341 2 60 1867 -FUNC 9343 40 __free_lconv_num +FUNC 9343 40 4 __free_lconv_num 9343 1 211 1867 9344 8 212 1867 934c a 215 1867 @@ -8066,7 +8070,7 @@ FUNC 9343 40 __free_lconv_num 936f b 221 1867 937a 8 222 1867 9382 1 223 1867 -FUNC 9383 1c8 __init_numeric +FUNC 9383 1c8 4 __init_numeric 9383 7 84 1867 938a 4 92 1867 938e 2 93 1867 @@ -8110,7 +8114,7 @@ FUNC 9383 1c8 __init_numeric 953b 9 200 1867 9544 5 201 1867 9549 2 202 1867 -FUNC 954b 33 fix_grouping +FUNC 954b 33 0 fix_grouping 954b 0 214 1911 954b 8 222 1911 9553 a 225 1911 @@ -8123,7 +8127,7 @@ FUNC 954b 33 fix_grouping 956f 7 237 1911 9576 6 238 1911 957c 2 242 1911 -FUNC 957e 89 __free_lconv_mon +FUNC 957e 89 4 __free_lconv_mon 957e 1 255 1911 957f 8 256 1911 9587 b 259 1911 @@ -8141,7 +8145,7 @@ FUNC 957e 89 __free_lconv_mon 95f3 b 277 1911 95fe 8 278 1911 9606 1 279 1911 -FUNC 9607 2c4 __init_monetary +FUNC 9607 2c4 4 __init_monetary 9607 8 65 1911 960f 6 73 1911 9615 13 77 1911 @@ -8197,7 +8201,7 @@ FUNC 9607 2c4 __init_monetary 98be 6 206 1911 98c4 5 208 1911 98c9 2 209 1911 -FUNC 98cb 395 __init_ctype +FUNC 98cb 395 4 __init_ctype 98cb 11 59 2002 98dc 6 60 2002 98e2 1f 82 2002 @@ -8258,43 +8262,43 @@ FUNC 98cb 395 __init_ctype 9c45 a 236 2002 9c4f 2 238 2002 9c51 f 240 2002 -FUNC 9c60 29 ___mb_cur_max_func +FUNC 9c60 29 0 ___mb_cur_max_func 9c60 0 248 2002 9c60 7 254 2002 9c67 3 255 2002 9c6a 18 257 2002 9c82 6 259 2002 9c88 1 260 2002 -FUNC 9c89 16 ___mb_cur_max_l_func +FUNC 9c89 16 4 ___mb_cur_max_l_func 9c89 0 263 2002 9c89 15 264 2002 9c9e 1 265 2002 -FUNC 9c9f 26 ___lc_codepage_func +FUNC 9c9f 26 0 ___lc_codepage_func 9c9f 0 268 2002 9c9f 7 274 2002 9ca6 3 275 2002 9ca9 18 277 2002 9cc1 3 279 2002 9cc4 1 280 2002 -FUNC 9cc5 26 ___lc_collate_cp_func +FUNC 9cc5 26 0 ___lc_collate_cp_func 9cc5 0 284 2002 9cc5 7 290 2002 9ccc 3 291 2002 9ccf 18 293 2002 9ce7 3 295 2002 9cea 1 296 2002 -FUNC 9ceb 26 ___lc_handle_func +FUNC 9ceb 26 0 ___lc_handle_func 9ceb 0 300 2002 9ceb 7 306 2002 9cf2 3 307 2002 9cf5 18 309 2002 9d0d 3 311 2002 9d10 1 312 2002 -FUNC 9d11 3 __init_collate +FUNC 9d11 3 4 __init_collate 9d11 0 41 2090 9d11 2 42 2090 9d13 1 43 2090 -FUNC 9d14 fe _Getdays_l +FUNC 9d14 fe 4 _Getdays_l 9d14 9 111 265 9d1d d 115 265 9d2a 9 117 265 @@ -8310,11 +8314,11 @@ FUNC 9d14 fe _Getdays_l 9dfa 3 134 265 9dfd 13 137 265 9e10 2 138 265 -FUNC 9e12 9 _Getdays +FUNC 9e12 9 0 _Getdays 9e12 0 142 265 9e12 8 143 265 9e1a 1 144 265 -FUNC 9e1b fe _Getmonths_l +FUNC 9e1b fe 4 _Getmonths_l 9e1b 9 150 265 9e24 d 154 265 9e31 16 156 265 @@ -8329,11 +8333,11 @@ FUNC 9e1b fe _Getmonths_l 9f01 3 173 265 9f04 13 176 265 9f17 2 177 265 -FUNC 9f19 9 _Getmonths +FUNC 9f19 9 0 _Getmonths 9f19 0 181 265 9f19 8 182 265 9f21 1 183 265 -FUNC 9f22 355 _Gettnames_l +FUNC 9f22 355 4 _Gettnames_l 9f22 9 189 265 9f2b d 193 265 9f38 9 195 265 @@ -8374,17 +8378,17 @@ a229 a 240 265 a233 30 242 265 a263 12 245 265 a275 2 246 265 -FUNC a277 9 _Gettnames +FUNC a277 9 0 _Gettnames a277 0 250 265 a277 8 251 265 a27f 1 252 265 -FUNC a280 20 _store_str +FUNC a280 20 0 _store_str a280 0 848 265 a280 f 850 265 a28f 7 851 265 a296 9 852 265 a29f 1 854 265 -FUNC a2a0 36 _store_number +FUNC a2a0 36 0 _store_number a2a0 0 944 265 a2a0 8 952 265 a2a8 c 955 265 @@ -8397,7 +8401,7 @@ a2c6 7 967 265 a2cd 3 968 265 a2d0 5 969 265 a2d5 1 970 265 -FUNC a2d6 79 _store_num +FUNC a2d6 79 4 _store_num a2d6 8 888 265 a2de 2 889 265 a2e0 8 891 265 @@ -8412,7 +8416,7 @@ a345 2 903 265 a347 2 905 265 a349 4 906 265 a34d 2 907 265 -FUNC a34f 3db _expandtime +FUNC a34f 3db 10 _expandtime a34f 5 527 265 a354 4f 537 265 a3a3 16 638 265 @@ -8502,7 +8506,7 @@ a712 2 686 265 a714 e 687 265 a722 6 818 265 a728 2 819 265 -FUNC a72a 51d _store_winword +FUNC a72a 51d 18 _store_winword a72a 10 1014 265 a73a 4 1022 265 a73e b 1032 265 @@ -8623,7 +8627,7 @@ ac1e 2 1175 265 ac20 1f 1290 265 ac3f 3 1294 265 ac42 5 1295 265 -FUNC ac47 1af _Strftime_l +FUNC ac47 1af 18 _Strftime_l ac47 6 356 265 ac4d 4 361 265 ac51 13 362 265 @@ -8664,25 +8668,25 @@ adc9 2 464 265 adcb 18 485 265 ade3 11 488 265 adf4 2 490 265 -FUNC adf6 1e _strftime_l +FUNC adf6 1e 14 _strftime_l adf6 3 291 265 adf9 19 292 265 ae12 2 293 265 -FUNC ae14 1d strftime +FUNC ae14 1d 10 strftime ae14 0 300 265 ae14 1c 301 265 ae30 1 302 265 -FUNC ae31 1e _Strftime +FUNC ae31 1e 14 _Strftime ae31 3 343 265 ae34 19 345 265 ae4d 2 346 265 -FUNC ae4f 26 localeconv +FUNC ae4f 26 0 localeconv ae4f 0 69 1743 ae4f 5 75 1743 ae54 1b 78 1743 ae6f 5 79 1743 ae74 1 80 1743 -FUNC ae80 46 strcspn +FUNC ae80 46 8 strcspn ae80 4 191 666 ae84 2 198 666 ae86 1 199 666 @@ -8712,7 +8716,7 @@ aebc 2 245 666 aebe 2 255 666 aec0 3 257 666 aec3 3 259 666 -FUNC aed0 88 strcmp +FUNC aed0 88 8 strcmp aed0 0 65 668 aed0 4 73 668 aed4 4 74 668 @@ -8767,7 +8771,7 @@ af4f 2 147 668 af51 2 148 668 af53 3 149 668 af56 2 150 668 -FUNC af58 60 TranslateName +FUNC af58 60 c TranslateName af58 3 340 2291 af5b 3 342 2291 af5e 3 343 2291 @@ -8783,12 +8787,12 @@ afa2 3 356 2291 afa5 7 346 2291 afac a 359 2291 afb6 2 360 2291 -FUNC afb8 14 GetLcidFromDefault +FUNC afb8 14 0 GetLcidFromDefault afb8 0 761 2291 afb8 7 762 2291 afbf c 763 2291 afcb 1 764 2291 -FUNC afcc 77 ProcessCodePage +FUNC afcc 77 0 ProcessCodePage afcc 13 784 2291 afdf 1a 787 2291 aff9 11 795 2291 @@ -8798,7 +8802,7 @@ b014 18 791 2291 b02c 3 793 2291 b02f 7 805 2291 b036 d 806 2291 -FUNC b043 1e TestDefaultCountry +FUNC b043 1e 4 TestDefaultCountry b043 0 826 2291 b043 2 830 2291 b045 15 832 2291 @@ -8806,7 +8810,7 @@ b05a 3 835 2291 b05d 1 836 2291 b05e 2 833 2291 b060 1 836 2291 -FUNC b061 32 LcidFromHexString +FUNC b061 32 0 LcidFromHexString b061 1 893 2291 b062 2 895 2291 b064 2 897 2291 @@ -8817,7 +8821,7 @@ b07c 3 902 2291 b07f 10 903 2291 b08f 3 906 2291 b092 1 907 2291 -FUNC b093 1b GetPrimaryLen +FUNC b093 1b 0 GetPrimaryLen b093 0 926 2291 b093 2 927 2291 b095 3 930 2291 @@ -8825,7 +8829,7 @@ b098 12 931 2291 b0aa 1 933 2291 b0ab 2 935 2291 b0ad 1 938 2291 -FUNC b0ae 96 CountryEnumProc +FUNC b0ae 96 4 CountryEnumProc b0ae 15 717 2291 b0c3 7 718 2291 b0ca f 719 2291 @@ -8837,7 +8841,7 @@ b114 b 734 2291 b11f a 738 2291 b129 b 741 2291 b134 10 742 2291 -FUNC b144 72 TestDefaultLanguage +FUNC b144 72 8 TestDefaultLanguage b144 11 858 2291 b155 22 864 2291 b177 4 865 2291 @@ -8846,7 +8850,7 @@ b188 1c 871 2291 b1a4 2 872 2291 b1a6 3 874 2291 b1a9 d 875 2291 -FUNC b1b6 1d0 LangCountryEnumProc +FUNC b1b6 1d0 4 LangCountryEnumProc b1b6 16 435 2291 b1cc 7 436 2291 b1d3 d 437 2291 @@ -8883,7 +8887,7 @@ b362 5 558 2291 b367 3 559 2291 b36a b 566 2291 b375 11 567 2291 -FUNC b386 bf LanguageEnumProc +FUNC b386 bf 4 LanguageEnumProc b386 15 624 2291 b39b 7 625 2291 b3a2 f 626 2291 @@ -8898,14 +8902,14 @@ b411 f 654 2291 b420 a 658 2291 b42a b 662 2291 b435 10 663 2291 -FUNC b445 2c GetLcidFromCountry +FUNC b445 2c 0 GetLcidFromCountry b445 0 686 2291 b445 10 687 2291 b455 11 689 2291 b466 6 693 2291 b46c 4 694 2291 b470 1 695 2291 -FUNC b471 65 GetLcidFromLangCountry +FUNC b471 65 0 GetLcidFromLangCountry b471 0 386 2291 b471 7 388 2291 b478 1a 389 2291 @@ -8915,7 +8919,7 @@ b4ae 10 394 2291 b4be 13 402 2291 b4d1 4 403 2291 b4d5 1 404 2291 -FUNC b4d6 3c GetLcidFromLanguage +FUNC b4d6 3c 0 GetLcidFromLanguage b4d6 0 591 2291 b4d6 13 593 2291 b4e9 e 594 2291 @@ -8923,7 +8927,7 @@ b4f7 10 596 2291 b507 6 600 2291 b50d 4 601 2291 b511 1 602 2291 -FUNC b512 1e3 __get_qualified_locale +FUNC b512 1e3 c __get_qualified_locale b512 4 205 2291 b516 5 208 2291 b51b 12 212 2291 @@ -8970,13 +8974,13 @@ b6d5 14 313 2291 b6e9 5 315 2291 b6ee 6 286 2291 b6f4 1 316 2291 -FUNC b6f5 12 cmpResult -FUNC b707 18 cmpBYTE -FUNC b71f 40 cmpWORD -FUNC b75f 78 cmpDWORD -FUNC b7d7 1490 unaligned_memcmp -FUNC cc67 1680 memcmp -FUNC e2e7 be strncmp +FUNC b6f5 12 0 cmpResult +FUNC b707 18 0 cmpBYTE +FUNC b71f 40 0 cmpWORD +FUNC b75f 78 0 cmpDWORD +FUNC b7d7 1490 0 unaligned_memcmp +FUNC cc67 1680 c memcmp +FUNC e2e7 be c strncmp e2e7 4 42 618 e2eb 5 43 618 e2f0 7 45 618 @@ -9000,7 +9004,7 @@ e390 5 79 618 e395 4 89 618 e399 2 90 618 e39b a 83 618 -FUNC e3b0 40 strpbrk +FUNC e3b0 40 8 strpbrk e3b0 4 191 611 e3b4 2 198 611 e3b6 1 199 611 @@ -9028,7 +9032,7 @@ e3e5 2 247 611 e3e7 3 248 611 e3ea 3 257 611 e3ed 3 259 611 -FUNC e3f0 365 memmove +FUNC e3f0 365 c memmove e3f0 3 101 679 e3f3 1 113 679 e3f4 1 114 679 @@ -9267,9 +9271,9 @@ e74e 3 595 679 e751 1 596 679 e752 1 597 679 e753 2 598 679 -FUNC e755 57 fastzero_I -FUNC e7ac 8f _VEC_memzero -FUNC e83b b6 _isctype_l +FUNC e755 57 8 fastzero_I +FUNC e7ac 8f c _VEC_memzero +FUNC e83b b6 c _isctype_l e83b 7 114 3871 e842 b 118 3871 e84d d 121 3871 @@ -9283,14 +9287,14 @@ e8a4 26 144 3871 e8ca 10 146 3871 e8da 15 149 3871 e8ef 2 150 3871 -FUNC e8f1 2f _isctype +FUNC e8f1 2f 8 _isctype e8f1 0 156 3871 e8f1 9 157 3871 e8fa 12 159 3871 e90c 1 165 3871 e90d 12 163 3871 e91f 1 165 3871 -FUNC e920 2c _alloca_probe_16 +FUNC e920 2c 0 _alloca_probe_16 e920 0 44 1120 e920 1 46 1120 e921 4 47 1120 @@ -9310,14 +9314,15 @@ e942 2 64 1120 e944 2 65 1120 e946 1 66 1120 e947 5 67 1120 -FUNC e94c 47 __ansicp +PUBLIC e936 0 _alloca_probe_8 +FUNC e94c 47 4 __ansicp e94c 10 39 1417 e95c 1c 44 1417 e978 3 45 1417 e97b 2 46 1417 e97d a 47 1417 e987 c 49 1417 -FUNC e993 1b2 __convertcp +FUNC e993 1b2 18 __convertcp e993 16 79 1417 e9a9 10 83 1417 e9b9 18 85 1417 @@ -9350,31 +9355,31 @@ eb22 5 166 1417 eb27 9 174 1417 eb30 3 177 1417 eb33 12 178 1417 -FUNC eb45 50 has_osfxsr_set -FUNC eb95 60 _get_sse2_info -FUNC ebf5 d __sse2_available_init -FUNC ec02 34 _get_daylight +FUNC eb45 50 0 has_osfxsr_set +FUNC eb95 60 0 _get_sse2_info +FUNC ebf5 d 0 __sse2_available_init +FUNC ec02 34 4 _get_daylight ec02 0 35 230 ec02 27 36 230 ec29 1 41 230 ec2a 8 39 230 ec32 3 40 230 ec35 1 41 230 -FUNC ec36 34 _get_dstbias +FUNC ec36 34 4 _get_dstbias ec36 0 44 230 ec36 27 45 230 ec5d 1 50 230 ec5e 8 48 230 ec66 3 49 230 ec69 1 50 230 -FUNC ec6a 34 _get_timezone +FUNC ec6a 34 4 _get_timezone ec6a 0 53 230 ec6a 27 54 230 ec91 1 59 230 ec92 8 57 230 ec9a 3 58 230 ec9d 1 59 230 -FUNC ec9e a2 _get_tzname +FUNC ec9e a2 10 _get_tzname ec9e 3 62 230 eca1 10 63 230 ecb1 4 64 230 @@ -9389,29 +9394,29 @@ ed21 5 78 230 ed26 5 80 230 ed2b 13 82 230 ed3e 2 83 230 -FUNC ed40 6 __daylight +FUNC ed40 6 0 __daylight ed40 0 118 230 ed40 5 119 230 ed45 1 120 230 -FUNC ed46 6 __dstbias +FUNC ed46 6 0 __dstbias ed46 0 123 230 ed46 5 124 230 ed4b 1 125 230 -FUNC ed4c 6 __timezone +FUNC ed4c 6 0 __timezone ed4c 0 128 230 ed4c 5 129 230 ed51 1 130 230 -FUNC ed52 6 __tzname +FUNC ed52 6 0 __tzname ed52 0 133 230 ed52 5 134 230 ed57 1 135 230 -FUNC ed58 c _set_daylight +FUNC ed58 c 4 _set_daylight ed58 c 189 164 -FUNC ed64 c _set_dstbias +FUNC ed64 c 4 _set_dstbias ed64 c 190 164 -FUNC ed70 c _set_timezone +FUNC ed70 c 4 _set_timezone ed70 c 191 164 -FUNC ed7c 33f _tzset_nolock +FUNC ed7c 33f 0 _tzset_nolock ed7c c 124 187 ed88 5 127 187 ed8d 3 129 187 @@ -9486,7 +9491,7 @@ f0a4 2 353 187 f0a6 5 354 187 f0ab a 356 187 f0b5 6 358 187 -FUNC f0bb 1f5 cvtdate +FUNC f0bb 1f5 24 cvtdate f0bb 6 407 187 f0c1 4 410 187 f0c5 c 412 187 @@ -9512,7 +9517,7 @@ f299 6 489 187 f29f 6 490 187 f2a5 9 497 187 f2ae 2 501 187 -FUNC f2b0 1ae _isindst_nolock +FUNC f2b0 1ae 0 _isindst_nolock f2b0 5 552 187 f2b5 20 556 187 f2d5 5 558 187 @@ -9543,7 +9548,7 @@ f442 b 680 187 f44d 2 683 187 f44f d 689 187 f45c 2 692 187 -FUNC f45e 4f __tzset +FUNC f45e 4f 0 __tzset f45e c 85 187 f46a a 88 187 f474 8 90 187 @@ -9554,7 +9559,7 @@ f48c 6 95 187 f492 c 98 187 f49e 6 103 187 f4a4 9 99 187 -FUNC f4ad 38 _tzset +FUNC f4ad 38 0 _tzset f4ad c 109 187 f4b9 8 110 187 f4c1 4 111 187 @@ -9562,7 +9567,7 @@ f4c5 5 113 187 f4ca c 115 187 f4d6 6 118 187 f4dc 9 116 187 -FUNC f4e5 41 _isindst +FUNC f4e5 41 4 _isindst f4e5 c 536 187 f4f1 8 539 187 f4f9 4 540 187 @@ -9571,7 +9576,7 @@ f508 c 542 187 f514 3 546 187 f517 6 547 187 f51d 9 543 187 -FUNC f526 35 __ascii_stricmp +FUNC f526 35 8 __ascii_stricmp f526 a 75 442 f530 c 80 442 f53c 3 81 442 @@ -9580,7 +9585,7 @@ f54b 3 83 442 f54e 9 85 442 f557 3 87 442 f55a 1 88 442 -FUNC f55b d3 _stricmp_l +FUNC f55b d3 c _stricmp_l f55b 7 47 442 f562 b 49 442 f56d 36 52 442 @@ -9592,7 +9597,7 @@ f600 11 64 442 f611 8 65 442 f619 13 68 442 f62c 2 69 442 -FUNC f62e 50 _stricmp +FUNC f62e 50 8 _stricmp f62e 4 94 442 f632 a 95 442 f63c 24 98 442 @@ -9601,154 +9606,154 @@ f666 1 107 442 f667 5 101 442 f66c 10 105 442 f67c 2 107 442 -FUNC f67e 36 _isleadbyte_l +FUNC f67e 36 8 _isleadbyte_l f67e 6 55 3963 f684 b 56 3963 f68f 23 57 3963 f6b2 2 58 3963 -FUNC f6b4 e isleadbyte +FUNC f6b4 e 4 isleadbyte f6b4 0 63 3963 f6b4 d 64 3963 f6c1 1 65 3963 -FUNC f6c2 16 _iswalpha_l +FUNC f6c2 16 8 _iswalpha_l f6c2 0 71 3963 f6c2 15 72 3963 f6d7 1 73 3963 -FUNC f6d8 11 iswalpha +FUNC f6d8 11 4 iswalpha f6d8 0 78 3963 f6d8 10 79 3963 f6e8 1 80 3963 -FUNC f6e9 13 _iswupper_l +FUNC f6e9 13 8 _iswupper_l f6e9 0 86 3963 f6e9 12 87 3963 f6fb 1 88 3963 -FUNC f6fc e iswupper +FUNC f6fc e 4 iswupper f6fc 0 93 3963 f6fc d 94 3963 f709 1 95 3963 -FUNC f70a 13 _iswlower_l +FUNC f70a 13 8 _iswlower_l f70a 0 101 3963 f70a 12 102 3963 f71c 1 103 3963 -FUNC f71d e iswlower +FUNC f71d e 4 iswlower f71d 0 108 3963 f71d d 109 3963 f72a 1 110 3963 -FUNC f72b 13 _iswdigit_l +FUNC f72b 13 8 _iswdigit_l f72b 0 116 3963 f72b 12 117 3963 f73d 1 118 3963 -FUNC f73e e iswdigit +FUNC f73e e 4 iswdigit f73e 0 123 3963 f73e d 124 3963 f74b 1 125 3963 -FUNC f74c 16 _iswxdigit_l +FUNC f74c 16 8 _iswxdigit_l f74c 0 131 3963 f74c 15 132 3963 f761 1 133 3963 -FUNC f762 11 iswxdigit +FUNC f762 11 4 iswxdigit f762 0 138 3963 f762 10 139 3963 f772 1 140 3963 -FUNC f773 13 _iswspace_l +FUNC f773 13 8 _iswspace_l f773 0 146 3963 f773 12 147 3963 f785 1 148 3963 -FUNC f786 e iswspace +FUNC f786 e 4 iswspace f786 0 153 3963 f786 d 154 3963 f793 1 155 3963 -FUNC f794 13 _iswpunct_l +FUNC f794 13 8 _iswpunct_l f794 0 161 3963 f794 12 162 3963 f7a6 1 163 3963 -FUNC f7a7 e iswpunct +FUNC f7a7 e 4 iswpunct f7a7 0 168 3963 f7a7 d 169 3963 f7b4 1 170 3963 -FUNC f7b5 16 _iswalnum_l +FUNC f7b5 16 8 _iswalnum_l f7b5 0 176 3963 f7b5 15 177 3963 f7ca 1 178 3963 -FUNC f7cb 11 iswalnum +FUNC f7cb 11 4 iswalnum f7cb 0 183 3963 f7cb 10 184 3963 f7db 1 185 3963 -FUNC f7dc 16 _iswprint_l +FUNC f7dc 16 8 _iswprint_l f7dc 0 191 3963 f7dc 15 192 3963 f7f1 1 193 3963 -FUNC f7f2 11 iswprint +FUNC f7f2 11 4 iswprint f7f2 0 198 3963 f7f2 10 199 3963 f802 1 200 3963 -FUNC f803 16 _iswgraph_l +FUNC f803 16 8 _iswgraph_l f803 0 206 3963 f803 15 207 3963 f818 1 208 3963 -FUNC f819 11 iswgraph +FUNC f819 11 4 iswgraph f819 0 213 3963 f819 10 214 3963 f829 1 215 3963 -FUNC f82a 13 _iswcntrl_l +FUNC f82a 13 8 _iswcntrl_l f82a 0 221 3963 f82a 12 222 3963 f83c 1 223 3963 -FUNC f83d e iswcntrl +FUNC f83d e 4 iswcntrl f83d 0 228 3963 f83d d 229 3963 f84a 1 230 3963 -FUNC f84b c iswascii +FUNC f84b c 4 iswascii f84b 0 235 3963 f84b b 236 3963 f856 1 237 3963 -FUNC f857 26 _iswcsym_l +FUNC f857 26 8 _iswcsym_l f857 0 243 3963 f857 21 244 3963 f878 1 245 3963 f879 3 244 3963 f87c 1 245 3963 -FUNC f87d 21 __iswcsym +FUNC f87d 21 4 __iswcsym f87d 0 250 3963 f87d 1c 251 3963 f899 1 252 3963 f89a 3 251 3963 f89d 1 252 3963 -FUNC f89e 26 _iswcsymf_l +FUNC f89e 26 8 _iswcsymf_l f89e 0 258 3963 f89e 21 259 3963 f8bf 1 260 3963 f8c0 3 259 3963 f8c3 1 260 3963 -FUNC f8c4 21 __iswcsymf +FUNC f8c4 21 4 __iswcsymf f8c4 0 265 3963 f8c4 1c 266 3963 f8e0 1 267 3963 f8e1 3 266 3963 f8e4 1 267 3963 -FUNC f8e5 11 atol +FUNC f8e5 11 4 atol f8e5 0 55 4092 f8e5 10 56 4092 f8f5 1 57 4092 -FUNC f8f6 15 _atol_l +FUNC f8f6 15 8 _atol_l f8f6 0 64 4092 f8f6 14 65 4092 f90a 1 66 4092 -FUNC f90b 5 atoi +FUNC f90b 5 4 atoi f90b 0 99 4092 f90b 5 100 4092 -FUNC f910 5 _atoi_l +FUNC f910 5 8 _atoi_l f910 0 107 4092 f910 5 108 4092 -FUNC f915 11 _atoi64 +FUNC f915 11 4 _atoi64 f915 0 143 4092 f915 10 144 4092 f925 1 145 4092 -FUNC f926 15 _atoi64_l +FUNC f926 15 8 _atoi64_l f926 0 151 4092 f926 14 152 4092 f93a 1 153 4092 -FUNC f93b f0 _strnicmp_l +FUNC f93b f0 10 _strnicmp_l f93b 7 51 399 f942 d 54 399 f94f b 56 399 @@ -9763,7 +9768,7 @@ fa11 d 74 399 fa1e 6 76 399 fa24 5 79 399 fa29 2 80 399 -FUNC fa2b 5c _strnicmp +FUNC fa2b 5c c _strnicmp fa2b 4 125 399 fa2f a 127 399 fa39 24 130 399 @@ -9773,7 +9778,7 @@ fa6c 1 141 399 fa6d 5 134 399 fa72 13 138 399 fa85 2 141 399 -FUNC fa87 db xtoa_s +FUNC fa87 db c xtoa_s fa87 8 93 4044 fa8f 24 102 4044 fab3 24 103 4044 @@ -9801,22 +9806,22 @@ fb54 1 155 4044 fb55 4 156 4044 fb59 5 158 4044 fb5e 4 160 4044 -FUNC fb62 28 _itoa_s +FUNC fb62 28 10 _itoa_s fb62 3 172 4044 fb65 d 175 4044 fb72 4 176 4044 fb76 2 177 4044 fb78 10 178 4044 fb88 2 181 4044 -FUNC fb8a 25 _ltoa_s +FUNC fb8a 25 10 _ltoa_s fb8a 3 189 4044 fb8d 20 190 4044 fbad 2 191 4044 -FUNC fbaf 18 _ultoa_s +FUNC fbaf 18 10 _ultoa_s fbaf 0 199 4044 fbaf 17 200 4044 fbc6 1 201 4044 -FUNC fbc7 f6 x64toa_s +FUNC fbc7 f6 14 x64toa_s fbc7 7 309 4044 fbce 25 318 4044 fbf3 5 319 4044 @@ -9841,15 +9846,15 @@ fcad 1 371 4044 fcae 7 372 4044 fcb5 4 375 4044 fcb9 4 377 4044 -FUNC fcbd 33 _i64toa_s +FUNC fcbd 33 14 _i64toa_s fcbd 3 390 4044 fcc0 2e 391 4044 fcee 2 392 4044 -FUNC fcf0 1d _ui64toa_s +FUNC fcf0 1d 14 _ui64toa_s fcf0 4 400 4044 fcf4 17 401 4044 fd0b 2 402 4044 -FUNC fd10 2b _chkstk +FUNC fd10 2b 0 _chkstk fd10 0 65 1122 fd10 1 69 1122 fd11 4 73 1122 @@ -9870,7 +9875,7 @@ fd31 1 94 1122 fd32 5 98 1122 fd37 2 99 1122 fd39 2 100 1122 -FUNC fd3b 81 _getenv_helper_nolock +FUNC fd3b 81 4 _getenv_helper_nolock fd3b 0 95 2340 fd3b 10 103 2340 fd4b 3 104 2340 @@ -9887,7 +9892,7 @@ fda5 3 164 2340 fda8 6 150 2340 fdae 5 168 2340 fdb3 9 169 2340 -FUNC fdbc 93 _getenv_s_helper +FUNC fdbc 93 c _getenv_s_helper fdbc 7 220 2340 fdc3 21 224 2340 fde4 15 226 2340 @@ -9904,7 +9909,7 @@ fe23 5 251 2340 fe28 20 254 2340 fe48 5 256 2340 fe4d 2 257 2340 -FUNC fe4f a2 _dupenv_s_helper +FUNC fe4f a2 8 _dupenv_s_helper fe4f 6 339 2340 fe55 21 344 2340 fe76 9 346 2340 @@ -9923,7 +9928,7 @@ fee2 7 371 2340 fee9 2 373 2340 feeb 4 375 2340 feef 2 376 2340 -FUNC fef1 83 getenv +FUNC fef1 83 4 getenv fef1 c 75 2340 fefd 2a 78 2340 ff27 18 79 2340 @@ -9934,7 +9939,7 @@ ff56 c 85 2340 ff62 3 89 2340 ff65 6 90 2340 ff6b 9 86 2340 -FUNC ff74 d8 getenv_s +FUNC ff74 d8 10 getenv_s ff74 c 198 2340 ff80 8 201 2340 ff88 5 202 2340 @@ -9943,7 +9948,7 @@ ff8d a1 203 2340 1003a 3 209 2340 1003d 6 210 2340 10043 9 206 2340 -FUNC 1004c e6 _dupenv_s +FUNC 1004c e6 c _dupenv_s 1004c c 303 2340 10058 8 306 2340 10060 5 307 2340 @@ -9952,11 +9957,11 @@ FUNC 1004c e6 _dupenv_s 10120 3 318 2340 10123 6 319 2340 10129 9 315 2340 -FUNC 10132 8 _tolower +FUNC 10132 8 4 _tolower 10132 0 48 3737 10132 7 49 3737 10139 1 50 3737 -FUNC 1013a 117 _tolower_l +FUNC 1013a 117 8 _tolower_l 1013a 8 70 3737 10142 b 74 3737 1014d c 77 3737 @@ -9975,14 +9980,14 @@ FUNC 1013a 117 _tolower_l 1022f 6 117 3737 10235 1a 119 3737 1024f 2 120 3737 -FUNC 10251 27 tolower +FUNC 10251 27 4 tolower 10251 0 143 3737 10251 9 145 3737 1025a f 147 3737 10269 1 153 3737 1026a d 151 3737 10277 1 153 3737 -FUNC 10278 82 _iswctype_l +FUNC 10278 82 c _iswctype_l 10278 6 66 3917 1027e 8 69 3917 10286 6 70 3917 @@ -9995,7 +10000,7 @@ FUNC 10278 82 _iswctype_l 102e1 d 87 3917 102ee a 89 3917 102f8 2 90 3917 -FUNC 102fa 6e iswctype +FUNC 102fa 6e 8 iswctype 102fa 4 96 3917 102fe 8 97 3917 10306 2 99 3917 @@ -10007,10 +10012,10 @@ FUNC 102fa 6e iswctype 10331 25 117 3917 10356 10 121 3917 10366 2 122 3917 -FUNC 10368 5 is_wctype +FUNC 10368 5 8 is_wctype 10368 0 148 3917 10368 5 149 3917 -FUNC 1036d 22b strtoxl +FUNC 1036d 22b 14 strtoxl 1036d 8 80 3828 10375 b 86 3828 10380 3 89 3828 @@ -10069,27 +10074,27 @@ FUNC 1036d 22b strtoxl 10582 2 115 3828 10584 12 116 3828 10596 2 222 3828 -FUNC 10598 29 strtol +FUNC 10598 29 c strtol 10598 3 229 3828 1059b 8 230 3828 105a3 13 232 3828 105b6 9 236 3828 105bf 2 238 3828 -FUNC 105c1 1b _strtol_l +FUNC 105c1 1b 10 _strtol_l 105c1 0 246 3828 105c1 1a 247 3828 105db 1 248 3828 -FUNC 105dc 2a strtoul +FUNC 105dc 2a c strtoul 105dc 3 255 3828 105df 7 256 3828 105e6 14 258 3828 105fa a 262 3828 10604 2 264 3828 -FUNC 10606 1b _strtoul_l +FUNC 10606 1b 10 _strtoul_l 10606 0 272 3828 10606 1a 273 3828 10620 1 274 3828 -FUNC 10621 294 strtoxq +FUNC 10621 294 14 strtoxq 10621 8 80 3783 10629 b 86 3783 10634 3 89 3783 @@ -10145,27 +10150,27 @@ FUNC 10621 294 strtoxq 1088b 13 201 3783 1089e 15 203 3783 108b3 2 204 3783 -FUNC 108b5 29 _strtoi64 +FUNC 108b5 29 c _strtoi64 108b5 3 211 3783 108b8 8 212 3783 108c0 13 214 3783 108d3 9 218 3783 108dc 2 220 3783 -FUNC 108de 1b _strtoi64_l +FUNC 108de 1b 10 _strtoi64_l 108de 0 227 3783 108de 1a 228 3783 108f8 1 229 3783 -FUNC 108f9 2a _strtoui64 +FUNC 108f9 2a c _strtoui64 108f9 3 236 3783 108fc 7 237 3783 10903 14 239 3783 10917 a 243 3783 10921 2 245 3783 -FUNC 10923 1b _strtoui64_l +FUNC 10923 1b 10 _strtoui64_l 10923 0 253 3783 10923 1a 254 3783 1093d 1 255 3783 -FUNC 10940 61 __ascii_strnicmp +FUNC 10940 61 c __ascii_strnicmp 10940 6 69 613 10946 3 75 613 10949 2 76 613 @@ -10205,7 +10210,7 @@ FUNC 10940 61 __ascii_strnicmp 10998 2 135 613 1099a 2 138 613 1099c 5 140 613 -FUNC 109b0 95 _aulldvrm +FUNC 109b0 95 0 _aulldvrm 109b0 0 45 3193 109b0 1 47 3193 109b1 4 79 3193 @@ -10265,7 +10270,7 @@ FUNC 109b0 95 _aulldvrm 10a3f 2 173 3193 10a41 1 179 3193 10a42 3 181 3193 -FUNC 10a45 ec _mbsnbicoll_l +FUNC 10a45 ec 10 _mbsnbicoll_l 10a45 7 53 2964 10a4c b 55 2964 10a57 9 57 2964 @@ -10279,11 +10284,11 @@ FUNC 10a45 ec _mbsnbicoll_l 10b0e 10 75 2964 10b1e 11 77 2964 10b2f 2 79 2964 -FUNC 10b31 17 _mbsnbicoll +FUNC 10b31 17 c _mbsnbicoll 10b31 0 85 2964 10b31 16 86 2964 10b47 1 87 2964 -FUNC 10b48 95 __wtomb_environ +FUNC 10b48 95 0 __wtomb_environ 10b48 7 43 1181 10b4f 3 44 1181 10b52 9 45 1181 @@ -10301,11 +10306,11 @@ FUNC 10b48 95 __wtomb_environ 10bcd 5 58 1181 10bd2 9 67 1181 10bdb 2 68 1181 -FUNC 10bdd 1a strnlen +FUNC 10bdd 1a 8 strnlen 10bdd 0 38 606 10bdd 19 45 606 10bf6 1 49 606 -FUNC 10bf7 224 __crtGetStringTypeW_stat +FUNC 10bf7 224 1c __crtGetStringTypeW_stat 10bf7 10 64 1316 10c07 9 72 1316 10c10 7 73 1316 @@ -10345,12 +10350,12 @@ FUNC 10bf7 224 __crtGetStringTypeW_stat 10dfd 8 194 1316 10e05 4 196 1316 10e09 12 200 1316 -FUNC 10e1b 3e __crtGetStringTypeW +FUNC 10e1b 3e 1c __crtGetStringTypeW 10e1b 6 211 1316 10e21 b 212 1316 10e2c 2b 222 1316 10e57 2 223 1316 -FUNC 10e60 34 _allmul +FUNC 10e60 34 0 _allmul 10e60 0 47 3196 10e60 4 62 3196 10e64 4 63 3196 @@ -10371,7 +10376,7 @@ FUNC 10e60 34 _allmul 10e8e 2 90 3196 10e90 1 92 3196 10e91 3 94 3196 -FUNC 10e94 1a strncnt +FUNC 10e94 1a 4 strncnt 10e94 0 50 2791 10e94 6 51 2791 10e9a 6 54 2791 @@ -10379,7 +10384,7 @@ FUNC 10e94 1a strncnt 10ea1 5 54 2791 10ea6 7 57 2791 10ead 1 58 2791 -FUNC 10eae 389 __crtCompareStringA_stat +FUNC 10eae 389 18 __crtCompareStringA_stat 10eae 10 96 2791 10ebe 31 280 2791 10eef c 107 2791 @@ -10457,12 +10462,12 @@ FUNC 10eae 389 __crtCompareStringA_stat 1121b 8 182 2791 11223 2 184 2791 11225 12 337 2791 -FUNC 11237 40 __crtCompareStringA +FUNC 11237 40 20 __crtCompareStringA 11237 6 349 2791 1123d b 350 2791 11248 2d 361 2791 11275 2 362 2791 -FUNC 11277 f8 _strnicoll_l +FUNC 11277 f8 10 _strnicoll_l 11277 7 55 352 1127e b 57 352 11289 9 59 352 @@ -10477,14 +10482,14 @@ FUNC 11277 f8 _strnicoll_l 1134c 10 81 352 1135c 11 84 352 1136d 2 85 352 -FUNC 1136f 27 _strnicoll +FUNC 1136f 27 c _strnicoll 1136f 3 92 352 11372 9 93 352 1137b 1 101 352 1137c 5 95 352 11381 13 99 352 11394 2 101 352 -FUNC 11396 4d findenv +FUNC 11396 4d 4 findenv 11396 1 386 1515 11397 8 389 1515 1139f 12 393 1515 @@ -10494,7 +10499,7 @@ FUNC 11396 4d findenv 113d5 1 407 1515 113d6 c 399 1515 113e2 1 407 1515 -FUNC 113e3 5d copy_environ +FUNC 113e3 5d 0 copy_environ 113e3 4 427 1515 113e7 2 428 1515 113e9 6 433 1515 @@ -10509,7 +10514,7 @@ FUNC 113e3 5d copy_environ 11437 2 460 1515 11439 5 462 1515 1143e 2 463 1515 -FUNC 11440 247 __crtsetenv +FUNC 11440 247 8 __crtsetenv 11440 6 76 1515 11446 2c 89 1515 11472 2 91 1515 @@ -10566,7 +10571,7 @@ FUNC 11440 247 __crtsetenv 11672 8 271 1515 1167a 6 274 1515 11680 7 276 1515 -FUNC 11687 50 _strdup +FUNC 11687 50 4 _strdup 11687 1 66 636 11688 b 70 636 11693 6 71 636 @@ -10576,7 +10581,7 @@ FUNC 11687 50 _strdup 116cc 4 81 636 116d0 6 84 636 116d6 1 85 636 -FUNC 116d7 ba _mbschr_l +FUNC 116d7 ba c _mbschr_l 116d7 7 53 3013 116de b 55 3013 116e9 32 58 3013 @@ -10592,11 +10597,11 @@ FUNC 116d7 ba _mbschr_l 11771 e 77 3013 1177f 10 79 3013 1178f 2 80 3013 -FUNC 11791 13 _mbschr +FUNC 11791 13 8 _mbschr 11791 0 86 3013 11791 12 87 3013 117a3 1 88 3013 -FUNC 117c0 be strchr +FUNC 117c0 be 8 strchr 117c0 0 60 670 117c0 2 68 670 117c2 4 69 670 @@ -10684,861 +10689,862 @@ FUNC 117c0 be strchr 1187b 1 186 670 1187c 1 187 670 1187d 1 188 670 -STACK WIN 4 1020 18 4 0 0 0 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1040 73 33 0 8 c 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 105a 59 19 0 8 10 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 1088 d 0 0 8 c 18 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 10c0 70 6 0 4 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1180 24 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11b0 196 14 0 10 0 14 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11b4 d3 10 0 10 4 14 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 24 - ^ = -STACK WIN 4 11b9 cd b 0 10 8 14 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 28 - ^ = $ebx $T0 24 - ^ = -STACK WIN 4 11ba cb a 0 10 c 14 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 28 - ^ = $ebx $T0 24 - ^ = -STACK WIN 4 11c4 c0 0 0 10 10 14 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 28 - ^ = $ebx $T0 24 - ^ = -STACK WIN 4 1346 a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1350 a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 135a a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1364 a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 136e a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1378 24 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 139c 41 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 13dd 1b6 c 0 0 c 2c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1555 14 0 0 0 c 2c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 1593 a 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 159d f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1700 29 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1730 42 18 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 173e 33 a 0 8 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 173f 31 9 0 8 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 1748 27 0 0 8 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 1772 6c c 0 4 c 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 17b8 14 0 0 4 c 18 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 17de 24 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1802 26 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1828 15 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 183d 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1846 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 184f 18 3 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1850 16 2 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1867 20 1 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1868 1e 0 0 8 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1887 37 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 188c 31 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 18be 3c 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 18c3 36 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 18fa 3c 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 18ff 36 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1936 3c 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 193b 36 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1972 3c 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1977 36 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 19ae 37 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 19b3 31 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 19e5 37 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 19ea 31 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1a1c 92 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1a5a 34 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1a5b 32 0 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1aae ce c 0 c c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1b64 11 0 0 c c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 1b7c 11 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1b8d 11 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1b9e f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1bad f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1bbc 4c 1 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1bbd 4a 0 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1c08 22 3 0 18 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1c2a 1a0 8 0 4 0 4 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1c2c 19c 6 0 4 4 4 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = -STACK WIN 4 1c31 196 1 0 4 8 4 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = -STACK WIN 4 1c32 194 0 0 4 c 4 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = -STACK WIN 4 1c4f 176 0 0 4 10 4 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 20 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 1dca 20 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1dea 39 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1e23 1 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1e24 32 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1e2f 1c 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1e56 16f 6 0 8 0 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1e5c 167 0 0 8 4 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1e7e 144 0 0 8 8 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1e84 13d 0 0 8 c 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 1fc5 1b 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1fe0 db b 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1fe1 c3 a 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 1fea b9 1 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 1feb b7 0 0 0 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 203a 67 0 0 0 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 16 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 20bb a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 20c5 198 e 0 c 0 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 20cd 187 6 0 c 4 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 20d3 180 0 0 c 8 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 225d b9 11 0 0 0 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 2264 b0 a 0 0 4 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = -STACK WIN 4 226d a6 1 0 0 8 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = -STACK WIN 4 226e a4 0 0 0 c c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = -STACK WIN 4 2316 135 b 0 0 0 8 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 231e 12a 3 0 0 4 8 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 12 - ^ = -STACK WIN 4 231f 128 2 0 0 8 8 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 16 - ^ = $ebx $T0 12 - ^ = -STACK WIN 4 2320 126 1 0 0 c 8 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 16 - ^ = $ebx $T0 12 - ^ = -STACK WIN 4 2321 124 0 0 0 10 8 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 16 - ^ = $ebx $T0 12 - ^ = -STACK WIN 4 244b 240 c 0 0 c 64 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 2674 4 0 0 0 c 64 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 268b 4c 2 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 268c 4a 1 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 268d 48 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 26d7 24 2 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 26d8 22 1 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 26d9 20 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 26fb 24 2 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 26fc 22 1 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 26fd 20 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 271f 63 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2720 61 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2782 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 278b 63 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 278c 61 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 27ee 9 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 27f7 15 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 280c 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2812 2a 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 283c 19 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2855 3d 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2892 b4 c 0 8 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 293d 8 0 0 8 c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 2946 83 2 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2947 81 1 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2948 7d 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 29c9 18 1 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 29ca 16 0 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 29e1 121 c 0 4 c 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 2aea b 0 0 4 c 18 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 2af6 b 0 0 4 c 18 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 2b02 69 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2b0c 4b 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2b15 25 0 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2b6b 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2b71 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2b77 184 1 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2b78 182 0 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2b93 166 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2cfb 5b 6 0 0 0 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 2d01 43 0 0 0 4 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 2d56 5a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2db0 74 1 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2db1 72 0 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = -STACK WIN 4 2dbd 53 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 2dc4 4b 0 0 0 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 2dcf 30 0 0 0 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 2e24 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2e85 94 15 0 0 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 2e99 7e 1 0 0 4 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 2e9a 7c 0 0 0 8 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 2eb6 5f 0 0 0 c 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 2f19 104 9 0 0 0 328 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3157 49 2 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3158 3b 1 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3159 39 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 31a0 55 8 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 31a1 53 7 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 31a8 4b 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 31ae 2a 0 0 0 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 31f5 15 3 0 4 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 320a 18 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3222 c3 c 0 4 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 32dc 8 0 0 4 c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 32e5 31 7 0 4 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 32ec 28 0 0 4 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3316 a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3320 fc 1c 0 14 4 328 0 $T0 $ebp 680 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 341c 22 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 341d 20 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 343e d 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 344b 9 3 0 14 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3454 24 3 0 14 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3478 10 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3488 9 3 0 14 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3491 3b 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 34cc 13 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 34df 13 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 34f2 1e 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 34f3 1c 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3510 1b 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 352b 2a 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 352c 28 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3555 1b 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3570 2a 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3571 28 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 359a ad 5 0 4 0 4 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 359c a9 3 0 4 4 4 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = -STACK WIN 4 359d a7 2 0 4 8 4 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 12 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 359e a5 1 0 4 c 4 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 12 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 359f a3 0 0 4 10 4 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 12 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 3647 2f 1 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3648 2d 0 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3676 3c c 0 4 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 36ac 5 0 0 4 c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 36b2 12 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 36c4 1f 2 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 36c5 1d 1 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 36c6 1b 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 36e3 39 c 0 0 c 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3703 4 0 0 0 c 18 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 371c 13 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 372f 37 c 0 0 c 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3753 4 0 0 0 c 18 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 3766 11 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3777 19 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3790 9b c 0 4 c 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3809 9 0 0 4 c 20 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 382b 34 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3836 1d 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 385f d 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 386c 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3875 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 387e 23d c 0 8 c 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3a73 b 0 0 8 c 20 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 3abb 1b0 c 0 4 c 30 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3c29 14 0 0 4 c 30 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 3c6b a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3c75 104 3 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3c76 102 2 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = -STACK WIN 4 3c77 100 1 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = -STACK WIN 4 3c78 fe 0 0 4 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = -STACK WIN 4 3cb1 c4 0 0 4 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 16 - ^ = -STACK WIN 4 3d79 15a 24 0 14 0 94 0 $T0 $ebp 100 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3d92 bc b 0 14 4 94 0 $T0 $ebp 100 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 152 - ^ = -STACK WIN 4 3d93 b8 a 0 14 8 94 0 $T0 $ebp 100 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 152 - ^ = -STACK WIN 4 3d9d ad 0 0 14 c 94 0 $T0 $ebp 100 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 152 - ^ = -STACK WIN 4 3ed3 a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3edd a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3ee7 10 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3ef7 c5 c 0 8 c 24 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 3f7d 17 0 0 8 c 24 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 3fbc a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3fc6 31 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3fc7 2f 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 3ff7 9 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4000 d 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 400d 22 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 402f 19e 9 0 c 0 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 4036 195 2 0 c 4 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = -STACK WIN 4 4037 193 1 0 c 8 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = -STACK WIN 4 4038 191 0 0 c c 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = -STACK WIN 4 41cd 71 b 0 c 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 41d2 6b 6 0 c 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 41d7 65 1 0 c 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 41d8 63 0 0 c c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 423e b3 e 0 10 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 4242 1a a 0 10 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 4243 2e 9 0 10 8 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 424c e 0 0 10 c 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 438b 65 b 0 c 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4390 5f 6 0 c 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 4395 59 1 0 c 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 4396 57 0 0 c c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 43f0 46 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 43f5 40 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4436 a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4440 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4446 8e c 0 4 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 449c 8 0 0 4 c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 44d4 21 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 44d5 1f 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 44f5 10 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4505 40 2 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4506 3e 1 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4507 3c 0 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4545 48 2 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4546 46 1 0 8 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4547 44 0 0 8 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 458d 4b 2 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 458e 49 1 0 8 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 458f 47 0 0 8 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 45d8 50 2 0 c 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 45d9 4e 1 0 c 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 45da 4c 0 0 c 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4628 8 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4630 a 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 463a a 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4644 e 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4652 3 2 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4655 2f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4684 55 b 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4685 53 a 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 4686 51 9 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 4687 4f 8 0 0 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 4688 4d 7 0 0 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 46d9 18a 1d 0 0 0 51c 0 $T0 $ebp 1180 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 46f5 161 1 0 0 4 51c 0 $T0 $ebp 1180 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 1312 - ^ = -STACK WIN 4 46f6 15d 0 0 0 8 51c 0 $T0 $ebp 1180 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 1312 - ^ = -STACK WIN 4 4863 a4 c 0 0 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 48fb b 0 0 0 c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 4907 82 9 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 490e 78 2 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4989 7a 7 0 0 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 4990 71 0 0 0 4 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 4a03 1ab 19 0 8 0 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 4a14 193 8 0 8 4 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = -STACK WIN 4 4a18 18c 4 0 8 8 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = -STACK WIN 4 4a1c 187 0 0 8 c 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = -STACK WIN 4 4bae 3c 6 0 0 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 4bea 19a c 0 4 c 24 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 4d4b 8 0 0 4 c 24 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 4d84 1e 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4da2 51 6 0 10 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 4df3 15 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4e08 13 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4e1b 15 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4e30 13 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4e43 15 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4e58 13 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4e6b 18 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4e83 16 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4e99 18 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4eb1 16 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4ec7 18 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4edf 16 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4ef5 18 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4f0d 16 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4f23 15 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4f38 13 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4f4b 15 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4f60 13 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4f73 15 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4f88 13 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 4f9b 53 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 4fee e 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 5365 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 536b 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 5371 140 12 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 5372 13e 11 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 5373 13c 10 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 5374 13a f 0 4 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 5383 12a 0 0 4 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 54b1 86 8 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 54b2 84 7 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 54b3 82 6 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 54b4 80 5 0 4 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 54b9 7a 0 0 4 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 5537 8c 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 5538 8a 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 5541 7e 0 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = -STACK WIN 4 5542 7c 0 0 4 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 12 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 5543 7a 0 0 4 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 12 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 55c3 24 3 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 55c4 22 2 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 55d3 12 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 55e7 3e 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 55f0 31 0 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 5625 76 c 0 0 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 568f 8 0 0 0 c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 569b 66 2 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 569c 64 1 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 569d 62 0 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 5701 53 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 5754 96 c 0 4 c 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 57de b 0 0 4 c 18 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 57ea 5 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 57ef 88 c 0 0 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 586b b 0 0 0 c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 5877 5 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 587c 3 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 587f 3e 2 0 c 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 5880 3c 1 0 c 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 5881 3a 0 0 c 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 588c 2e 0 0 c c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 58bd 129 6 0 8 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 58c1 123 2 0 8 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 58c2 121 1 0 8 8 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 58c3 11f 0 0 8 c 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 59e6 6b 5 0 c 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 59ea 4d 1 0 c 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 59eb 4b 0 0 c 8 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 5a51 171 4 0 0 0 10 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 5a55 169 0 0 0 4 10 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 20 - ^ = -STACK WIN 4 5a74 149 0 0 0 8 10 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 24 - ^ = $ebx $T0 20 - ^ = -STACK WIN 4 5a75 141 0 0 0 c 10 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 24 - ^ = $ebx $T0 20 - ^ = -STACK WIN 4 5bc2 1d4 1e 0 18 0 b4 0 $T0 $ebp 96 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 5bdb 1b1 5 0 18 4 b4 0 $T0 $ebp 96 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 184 - ^ = -STACK WIN 4 5bdc 1ad 4 0 18 8 b4 0 $T0 $ebp 96 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 184 - ^ = -STACK WIN 4 5be0 1a8 0 0 18 c b4 0 $T0 $ebp 96 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 184 - ^ = -STACK WIN 4 5d96 2f6 17 0 4 0 1c4 0 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 5dac 2d6 1 0 4 4 1c4 0 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 456 - ^ = -STACK WIN 4 5dad 2d2 0 0 4 8 1c4 0 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 456 - ^ = -STACK WIN 4 608c 1ce 18 0 4 0 98 0 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 60a5 1ab 0 0 4 4 98 0 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 156 - ^ = -STACK WIN 4 60a6 1a7 0 0 4 8 98 0 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 156 - ^ = -STACK WIN 4 60ad 19f 0 0 4 c 98 0 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 156 - ^ = -STACK WIN 4 625a f3 7 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 6260 2c 1 0 8 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 6261 2a 0 0 8 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 634d 5 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 6352 170 c 0 8 c 24 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 6478 10 0 0 8 c 24 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 6489 b 0 0 8 c 24 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 64ba 7 0 0 8 c 24 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 64c2 21 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 64e3 46 b 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 64ee 3a 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 6529 3c 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 652e 36 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 6565 48 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 65ad 2b 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 65d8 314 11 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 65e5 305 4 0 8 4 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 65e9 300 0 0 8 8 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 6616 2d2 0 0 8 c 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 68ec b0 d 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 68f2 a9 7 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 68f9 a1 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 699c 106 11 0 4 0 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 69a8 f8 5 0 4 4 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = -STACK WIN 4 69a9 f6 4 0 4 8 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = -STACK WIN 4 69ad f1 0 0 4 c 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = -STACK WIN 4 6aa2 2df 12 0 c 0 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 6aaf 2d0 5 0 c 4 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = -STACK WIN 4 6ab0 2ce 4 0 c 8 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = -STACK WIN 4 6ab4 2c9 0 0 c c c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = -STACK WIN 4 6d81 cd 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 6e4e 2e2 f 0 0 0 138 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 6e5d 294 0 0 0 4 138 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 316 - ^ = -STACK WIN 4 6e72 27e 0 0 0 8 138 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 316 - ^ = -STACK WIN 4 6e75 27a 0 0 0 c 138 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 316 - ^ = -STACK WIN 4 7130 a8 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7131 a6 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7179 5d 0 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 71d8 2e3 2a 0 4 0 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 71fc 2bd 6 0 4 4 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = -STACK WIN 4 7201 2b7 1 0 4 8 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = -STACK WIN 4 7202 2b5 0 0 4 c 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = -STACK WIN 4 74bb 8 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 754a a3 c 0 4 c 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 75dc 10 0 0 4 c 20 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 75ed 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 75f6 f3 23 0 0 4 328 0 $T0 $ebp 680 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 76e9 1e 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7707 54 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 775b 2b 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7786 4f 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 77d5 29 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 77fe 4f 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 784d 29 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7876 4f 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 78c5 29 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 78ee 54 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 7942 2b 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 796d 4f 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 79bc 29 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 79e5 4f 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 7a34 29 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7a5d 54 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 7ab1 2b 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7adc 54 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 7b30 2b 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7b5b 54 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 7baf 2b 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7bda 4f 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 7c29 29 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7c52 d 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7c5f 8 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7c67 1f 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7c86 1a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7ca0 1f 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7cbf 1c 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7cdb 12 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7ced 1b 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 7d08 13b 1d 0 18 8 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 7d1d 126 8 0 18 c 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = -STACK WIN 4 7e43 3b 6 0 18 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 7e7e 13d 1d 0 18 8 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 7e93 128 8 0 18 c 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = -STACK WIN 4 7fbb 3b 6 0 18 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 7ff6 4f c 0 4 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 803c 8 0 0 4 c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 8045 75 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 808d 2c 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 80ba c3 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 80bb c1 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = -STACK WIN 4 80c9 9c 0 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 80d0 94 0 0 4 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 80d1 90 0 0 4 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = -STACK WIN 4 817d 11e c 0 c c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 8274 d 0 0 c c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 829b 3f 9 0 8 0 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 82a4 34 0 0 8 4 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 82bd 18 0 0 8 8 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 82da 21b c 0 8 c 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 8418 e 0 0 8 c 20 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 84f5 47 5 0 c 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 84fa 41 0 0 c 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 853c 1a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 8556 3a2 1d 0 20 8 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 8567 391 c 0 20 c 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = -STACK WIN 4 88f8 43 6 0 24 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 893b 1b8 1d 0 1c 8 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 8950 1a3 8 0 1c c 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = -STACK WIN 4 8af3 40 6 0 20 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 8b33 87 0 0 c 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 8bba e3 0 0 c 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 8c9d 14 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 8cb1 14 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 8cc5 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 8ccb 29 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 8cf4 419 6 0 0 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 8d16 3f5 0 0 0 4 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 8d17 3ed 0 0 0 8 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 910d 190 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 910e 18e 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 929d 73 4 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 929e 71 3 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 929f 6f 2 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 92a0 6d 1 0 4 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 92a1 6b 0 0 4 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 9310 33 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9317 16 0 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 9318 14 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 9343 40 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9344 3e 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9383 1c8 11 0 4 0 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 938a 1bf a 0 4 4 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 938e 1ba 6 0 4 8 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 9394 1b3 0 0 4 c 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 954b 33 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9552 16 0 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 9553 14 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 957e 89 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 957f 87 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9607 2c4 c 0 4 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 960e 2bb 5 0 4 4 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 960f 2b9 4 0 4 8 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 9613 2b4 0 0 4 c 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 98cb 395 1b 0 4 0 48 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 98dc 37d a 0 4 4 48 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 76 - ^ = -STACK WIN 4 98df 377 7 0 4 8 48 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 76 - ^ = -STACK WIN 4 98e6 36f 0 0 4 c 48 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 76 - ^ = -STACK WIN 4 9c60 29 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9c89 16 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9c9f 26 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9cc5 26 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9ceb 26 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9d11 3 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9d14 fe 9 0 4 0 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 9d1b e9 2 0 4 4 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 9d1c e7 1 0 4 8 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 9d1d e5 0 0 4 c 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 9e12 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9e1b fe 9 0 4 0 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 9e22 e9 2 0 4 4 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 32 - ^ = -STACK WIN 4 9e23 e7 1 0 4 8 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 32 - ^ = -STACK WIN 4 9e24 e5 0 0 4 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 32 - ^ = -STACK WIN 4 9f19 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 9f22 355 9 0 4 0 24 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 9f29 34c 2 0 4 4 24 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 40 - ^ = -STACK WIN 4 9f2a 348 1 0 4 8 24 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 40 - ^ = -STACK WIN 4 9f2b 346 0 0 4 c 24 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 40 - ^ = -STACK WIN 4 a277 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 a280 20 6 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 a284 1b 2 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 a289 15 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 a2a0 36 6 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 a2a6 2f 0 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 a2d6 79 8 0 4 0 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 a2db 72 3 0 4 4 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 a2dc 70 2 0 4 8 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 a34f 3db 11 0 10 0 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 a354 3d4 c 0 10 4 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 a35b 3cc 5 0 10 8 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 a35c 3ca 4 0 10 c 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 a72a 51d 1d 0 18 8 24 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 a73e 509 9 0 18 c 24 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 40 - ^ = -STACK WIN 4 ac47 1af a 0 18 0 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 ac51 1a3 0 0 18 4 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = -STACK WIN 4 ac97 15c 0 0 18 8 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = -STACK WIN 4 acca 128 0 0 18 c 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = -STACK WIN 4 adf6 1e 3 0 14 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 ae14 1d 0 0 10 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ae31 1e 3 0 14 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 ae4f 26 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 af58 60 6 0 c 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 af5e 56 0 0 c 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 af67 45 0 0 c 8 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 af68 43 0 0 c c 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 afb8 14 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 afcc 77 11 0 0 0 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 afdd 5f 0 0 0 4 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 b043 1e 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b061 32 1 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b062 30 0 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b093 1b 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b0ae 96 12 0 4 0 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 b0bf 7c 1 0 4 4 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 b0c0 78 0 0 4 8 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 b144 72 11 0 8 0 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 b155 5a 0 0 8 4 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 b191 13 0 0 8 8 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 b1b6 1d0 13 0 4 0 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 b1c7 1b6 2 0 4 4 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 128 - ^ = -STACK WIN 4 b1c8 1b2 1 0 4 8 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 128 - ^ = -STACK WIN 4 b1c9 1b0 0 0 4 c 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 128 - ^ = -STACK WIN 4 b386 bf 12 0 4 0 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 b397 a5 1 0 4 4 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 b398 a1 0 0 4 8 7c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 b445 2c 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b471 65 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b4d6 3c 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b512 1e3 4 0 c 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b513 1e1 3 0 c 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 b514 1df 2 0 c 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 b515 1dd 1 0 c c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 b516 1db 0 0 c 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 b6f5 12 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b707 18 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b71f 40 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b75f 78 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b7d7 1490 4 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b7d8 83f 3 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 b7d9 83d 2 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 cc67 1680 5 0 c 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 cc6b 15f8 1 0 c 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 cc6c 15f6 0 0 c 8 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 cc9d 86c 0 0 c c 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = -STACK WIN 4 e2e7 be 9 0 c 0 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 e2f0 a9 0 0 c 4 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 e302 96 0 0 c 8 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 e755 57 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 e7ac 8f 0 0 c 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 e83b b6 7 0 c 0 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 e842 ad 0 0 c 4 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 e8f1 2f 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 e94c 47 10 0 4 0 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 e993 1b2 2a 0 18 8 34 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 e9b0 195 d 0 18 c 34 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 56 - ^ = -STACK WIN 4 eb45 50 c 0 0 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 eb62 1c 0 0 0 c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 eb95 60 9 0 0 0 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 eb9e 57 0 0 0 4 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 ebf5 d 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ec02 34 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ec07 2e 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ec36 34 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ec3b 2e 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ec6a 34 5 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ec6f 2e 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ec9e a2 c 0 10 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 eca5 99 5 0 10 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 ecaa 93 0 0 10 8 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 ecb8 84 0 0 10 c 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 ed40 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ed46 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ed4c 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ed52 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ed58 c 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ed64 c 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ed70 c 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 ed7c 33f c 0 0 c 3c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f026 d 0 0 0 c 3c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 f0bb 1f5 14 0 24 0 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f0ca 1e4 5 0 24 4 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = -STACK WIN 4 f0cb 1e2 4 0 24 8 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = -STACK WIN 4 f0cc 1e0 3 0 24 c c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = -STACK WIN 4 f2b0 1ae 5 0 0 0 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f2b5 15f 0 0 0 4 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f2e5 12e 0 0 0 8 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = -STACK WIN 4 f45e 4f c 0 0 c 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f4a4 8 0 0 0 c 18 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 f4ad 38 c 0 0 c 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f4dc 8 0 0 0 c 18 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 f4e5 41 c 0 4 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f51d 8 0 0 4 c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 f526 35 a 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f52b 2f 5 0 8 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f530 27 0 0 8 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f55b d3 7 0 c 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f562 ca 0 0 c 4 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 f5a3 88 0 0 c 8 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 f5eb 33 0 0 c c 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 f62e 50 4 0 8 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f632 4a 0 0 8 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f67e 36 6 0 8 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f6b4 e 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f6c2 16 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f6d8 11 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f6e9 13 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f6fc e 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f70a 13 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f71d e 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f72b 13 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f73e e 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f74c 16 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f762 11 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f773 13 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f786 e 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f794 13 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f7a7 e 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f7b5 16 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f7cb 11 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f7dc 16 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f7f2 11 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f803 16 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f819 11 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f82a 13 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f83d e 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f84b c 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f857 26 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f87d 21 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f89e 26 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f8c4 21 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f8e5 11 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f8f6 15 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f90b 5 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f910 5 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f915 11 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f926 15 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 f93b f0 e 0 10 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 f942 e7 7 0 10 4 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 f948 e0 1 0 10 8 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 f949 de 0 0 10 c 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 fa2b 5c 4 0 c 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fa2f 56 0 0 c 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fa87 db 8 0 c 0 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fa8c d2 3 0 c 4 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 fa8d d0 2 0 c 8 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 fab7 a5 0 0 c c 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 fb62 28 3 0 10 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fb8a 25 3 0 10 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fbaf 18 0 0 10 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 fbc7 f6 c 0 14 0 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fbce eb 5 0 14 4 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = -STACK WIN 4 fbd3 e5 0 0 14 8 c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = -STACK WIN 4 fcbd 33 3 0 14 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fcd8 16 0 0 14 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fcf0 1d 4 0 14 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fcf4 17 0 0 14 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fd3b 81 8 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 fd43 70 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 fd52 60 0 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = -STACK WIN 4 fd53 5e 0 0 4 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = -STACK WIN 4 fdbc 93 7 0 c 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fdc0 8d 3 0 c 4 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 fdc1 8b 2 0 c 8 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 fe00 4b 0 0 c c 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = -STACK WIN 4 fe4f a2 6 0 8 0 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fe54 9b 1 0 8 4 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fe55 99 0 0 8 8 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 fef1 83 c 0 4 c 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 ff6b 8 0 0 4 c 20 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 ff74 d8 c 0 10 c 1c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10043 8 0 0 10 c 1c 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 1004c e6 c 0 c c 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10129 8 0 0 c c 20 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 10132 8 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1013a 117 8 0 8 0 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10141 10e 1 0 8 4 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 10142 10c 0 0 8 8 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = -STACK WIN 4 10251 27 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 10278 82 6 0 c 0 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 102fa 6e 4 0 8 0 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10368 5 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1036d 22b 8 0 14 0 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10374 222 1 0 14 4 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10375 220 0 0 14 8 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 103d3 1c1 0 0 14 c 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 32 - ^ = -STACK WIN 4 10598 29 3 0 c 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 105c1 1b 0 0 10 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 105dc 2a 3 0 c 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10606 1b 0 0 10 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 10621 294 8 0 14 0 38 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10628 28b 1 0 14 4 38 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 60 - ^ = -STACK WIN 4 10629 289 0 0 14 8 38 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 60 - ^ = -STACK WIN 4 10685 1f9 0 0 14 c 38 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 60 - ^ = -STACK WIN 4 108b5 29 3 0 c 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 108de 1b 0 0 10 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 108f9 2a 3 0 c 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10923 1b 0 0 10 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 10a45 ec 7 0 10 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10a4c e3 0 0 10 4 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 10aac 82 0 0 10 8 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 10b31 17 0 0 c 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 10b48 95 a 0 0 0 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10b4e 7d 4 0 0 4 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = -STACK WIN 4 10b4f 7b 3 0 0 8 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = -STACK WIN 4 10b52 77 0 0 0 c 8 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = -STACK WIN 4 10bdd 1a 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 10bf7 224 17 0 1c 8 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10c0c 20f 2 0 1c c 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 10e1b 3e 6 0 1c 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10e94 1a 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 10eae 389 16 0 18 8 2c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 10ec2 375 2 0 18 c 2c 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 48 - ^ = -STACK WIN 4 11237 40 6 0 20 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 11277 f8 7 0 10 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1127e ef 0 0 10 4 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 112de 8e 0 0 10 8 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 1136f 27 3 0 c 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 11396 4d 1 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11397 48 0 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 113e3 5d 4 0 0 0 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 113ff 3f 0 0 0 4 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 11400 3d 0 0 0 8 4 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = -STACK WIN 4 11440 247 f 0 8 0 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1144a 95 5 0 8 4 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = -STACK WIN 4 1144f 8f 0 0 8 8 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = -STACK WIN 4 11472 6b 0 0 8 c 14 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = -STACK WIN 4 11687 50 6 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11688 4e 5 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 1168d 48 0 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 11698 3c 0 0 4 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 11699 3a 0 0 4 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = -STACK WIN 4 116d7 ba 7 0 c 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 116de b1 0 0 c 4 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 1171b 73 0 0 c 8 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 11791 13 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 1088 d 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 1555 14 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 15ac 90 3 0 c c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 163c 46 0 0 10 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 169e 17 4 0 0 10 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 16b5 19 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 16e8 17 1 0 8 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 17b8 14 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 1b64 12 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 2674 4 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 293d 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 2aea c 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 2af6 c 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 3085 84 3 0 8 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 3109 23 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 3154 3 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 32dc 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 36ac 6 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 3703 4 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 3753 4 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 3809 a 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 3a73 c 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 3c29 15 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 3f7d 17 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 4300 8b 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 449c 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 48fb c 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 4d4b 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 568f 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 57de c 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 586b c 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 6478 11 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 6489 c 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 64ba 8 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 74d0 7a 0 0 c 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 75dc 11 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 803c 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 8274 e 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 8418 f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 aed0 88 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 eb62 1c 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 f026 e 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 f4a4 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 f4dc 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 f51d 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 ff6b 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 10043 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 10129 9 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 0 117c0 be 0 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +PUBLIC 117c6 0 __from_strstr_to_strchr +STACK WIN 4 1020 18 4 0 0 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1040 73 33 0 8 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 105a 59 19 0 8 10 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 1088 d 0 0 8 c 18 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 10c0 70 6 0 4 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1180 24 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11b0 196 14 0 10 0 14 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11b4 d3 10 0 10 4 14 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 24 - ^ = +STACK WIN 4 11b9 cd b 0 10 8 14 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 28 - ^ = $ebx $T0 24 - ^ = +STACK WIN 4 11ba cb a 0 10 c 14 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 28 - ^ = $ebx $T0 24 - ^ = +STACK WIN 4 11c4 c0 0 0 10 10 14 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 28 - ^ = $ebx $T0 24 - ^ = +STACK WIN 4 1346 a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1350 a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 135a a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1364 a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 136e a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1378 24 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 139c 41 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 13dd 1b6 c 0 0 c 2c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1555 14 0 0 0 c 2c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 1593 a 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 159d f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1700 29 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1730 42 18 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 173e 33 a 0 8 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 173f 31 9 0 8 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 1748 27 0 0 8 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 1772 6c c 0 4 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 17b8 14 0 0 4 c 18 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 17de 24 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1802 26 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1828 15 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 183d 9 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1846 9 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 184f 18 3 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1850 16 2 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1867 20 1 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1868 1e 0 0 8 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1887 37 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 188c 31 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 18be 3c 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 18c3 36 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 18fa 3c 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 18ff 36 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1936 3c 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 193b 36 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1972 3c 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1977 36 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 19ae 37 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 19b3 31 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 19e5 37 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 19ea 31 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1a1c 92 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1a5a 34 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1a5b 32 0 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1aae ce c 0 c c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1b64 11 0 0 c c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 1b7c 11 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1b8d 11 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1b9e f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1bad f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1bbc 4c 1 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1bbd 4a 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1c08 22 3 0 18 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1c2a 1a0 8 0 4 0 4 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1c2c 19c 6 0 4 4 4 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = +STACK WIN 4 1c31 196 1 0 4 8 4 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = +STACK WIN 4 1c32 194 0 0 4 c 4 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = +STACK WIN 4 1c4f 176 0 0 4 10 4 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 20 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 1dca 20 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1dea 39 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1e23 1 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1e24 32 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1e2f 1c 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1e56 16f 6 0 8 0 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1e5c 167 0 0 8 4 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1e7e 144 0 0 8 8 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1e84 13d 0 0 8 c 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 1fc5 1b 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1fe0 db b 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1fe1 c3 a 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 1fea b9 1 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 1feb b7 0 0 0 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 203a 67 0 0 0 10 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 16 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 20bb a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 20c5 198 e 0 c 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 20cd 187 6 0 c 4 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 20d3 180 0 0 c 8 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 225d b9 11 0 0 0 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 2264 b0 a 0 0 4 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = +STACK WIN 4 226d a6 1 0 0 8 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = +STACK WIN 4 226e a4 0 0 0 c c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = +STACK WIN 4 2316 135 b 0 0 0 8 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 231e 12a 3 0 0 4 8 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 12 - ^ = +STACK WIN 4 231f 128 2 0 0 8 8 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 16 - ^ = $ebx $T0 12 - ^ = +STACK WIN 4 2320 126 1 0 0 c 8 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 16 - ^ = $ebx $T0 12 - ^ = +STACK WIN 4 2321 124 0 0 0 10 8 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 16 - ^ = $ebx $T0 12 - ^ = +STACK WIN 4 244b 240 c 0 0 c 64 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 2674 4 0 0 0 c 64 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 268b 4c 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 268c 4a 1 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 268d 48 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 26d7 24 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 26d8 22 1 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 26d9 20 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 26fb 24 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 26fc 22 1 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 26fd 20 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 271f 63 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2720 61 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2782 9 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 278b 63 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 278c 61 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 27ee 9 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 27f7 15 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 280c 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2812 2a 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 283c 19 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2855 3d 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2892 b4 c 0 8 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 293d 8 0 0 8 c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 2946 83 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2947 81 1 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2948 7d 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 29c9 18 1 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 29ca 16 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 29e1 121 c 0 4 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 2aea b 0 0 4 c 18 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 2af6 b 0 0 4 c 18 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 2b02 69 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2b0c 4b 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2b15 25 0 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2b6b 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2b71 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2b77 184 1 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2b78 182 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2b93 166 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2cfb 5b 6 0 0 0 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 2d01 43 0 0 0 4 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 2d56 5a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2db0 74 1 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2db1 72 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = +STACK WIN 4 2dbd 53 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 2dc4 4b 0 0 0 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 2dcf 30 0 0 0 10 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 2e24 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2e85 94 15 0 0 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 2e99 7e 1 0 0 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 2e9a 7c 0 0 0 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 2eb6 5f 0 0 0 c 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 2f19 104 9 0 0 0 328 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3157 49 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3158 3b 1 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3159 39 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 31a0 55 8 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 31a1 53 7 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 31a8 4b 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 31ae 2a 0 0 0 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 31f5 15 3 0 4 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 320a 18 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3222 c3 c 0 4 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 32dc 8 0 0 4 c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 32e5 31 7 0 4 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 32ec 28 0 0 4 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3316 a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3320 fc 1c 0 14 4 328 0 1 $T0 $ebp 680 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 341c 22 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 341d 20 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 343e d 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 344b 9 3 0 14 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3454 24 3 0 14 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3478 10 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3488 9 3 0 14 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3491 3b 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 34cc 13 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 34df 13 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 34f2 1e 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 34f3 1c 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3510 1b 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 352b 2a 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 352c 28 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3555 1b 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3570 2a 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3571 28 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 359a ad 5 0 4 0 4 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 359c a9 3 0 4 4 4 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = +STACK WIN 4 359d a7 2 0 4 8 4 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 12 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 359e a5 1 0 4 c 4 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 12 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 359f a3 0 0 4 10 4 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 12 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 3647 2f 1 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3648 2d 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3676 3c c 0 4 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 36ac 5 0 0 4 c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 36b2 12 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 36c4 1f 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 36c5 1d 1 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 36c6 1b 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 36e3 39 c 0 0 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3703 4 0 0 0 c 18 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 371c 13 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 372f 37 c 0 0 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3753 4 0 0 0 c 18 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 3766 11 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3777 19 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3790 9b c 0 4 c 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3809 9 0 0 4 c 20 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 382b 34 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3836 1d 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 385f d 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 386c 9 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3875 9 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 387e 23d c 0 8 c 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3a73 b 0 0 8 c 20 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 3abb 1b0 c 0 4 c 30 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3c29 14 0 0 4 c 30 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 3c6b a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3c75 104 3 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3c76 102 2 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = +STACK WIN 4 3c77 100 1 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = +STACK WIN 4 3c78 fe 0 0 4 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = +STACK WIN 4 3cb1 c4 0 0 4 10 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 16 - ^ = +STACK WIN 4 3d79 15a 24 0 14 0 94 0 1 $T0 $ebp 100 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3d92 bc b 0 14 4 94 0 1 $T0 $ebp 100 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 152 - ^ = +STACK WIN 4 3d93 b8 a 0 14 8 94 0 1 $T0 $ebp 100 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 152 - ^ = +STACK WIN 4 3d9d ad 0 0 14 c 94 0 1 $T0 $ebp 100 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 152 - ^ = +STACK WIN 4 3ed3 a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3edd a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3ee7 10 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3ef7 c5 c 0 8 c 24 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 3f7d 17 0 0 8 c 24 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 3fbc a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3fc6 31 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3fc7 2f 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 3ff7 9 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4000 d 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 400d 22 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 402f 19e 9 0 c 0 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 4036 195 2 0 c 4 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = +STACK WIN 4 4037 193 1 0 c 8 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = +STACK WIN 4 4038 191 0 0 c c 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = +STACK WIN 4 41cd 71 b 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 41d2 6b 6 0 c 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 41d7 65 1 0 c 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 41d8 63 0 0 c c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 423e b3 e 0 10 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 4242 1a a 0 10 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 4243 2e 9 0 10 8 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 424c e 0 0 10 c 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 438b 65 b 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4390 5f 6 0 c 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 4395 59 1 0 c 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 4396 57 0 0 c c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 43f0 46 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 43f5 40 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4436 a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4440 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4446 8e c 0 4 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 449c 8 0 0 4 c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 44d4 21 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 44d5 1f 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 44f5 10 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4505 40 2 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4506 3e 1 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4507 3c 0 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4545 48 2 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4546 46 1 0 8 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4547 44 0 0 8 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 458d 4b 2 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 458e 49 1 0 8 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 458f 47 0 0 8 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 45d8 50 2 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 45d9 4e 1 0 c 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 45da 4c 0 0 c 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4628 8 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4630 a 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 463a a 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4644 e 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4652 3 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4655 2f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4684 55 b 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4685 53 a 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 4686 51 9 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 4687 4f 8 0 0 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 4688 4d 7 0 0 10 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 46d9 18a 1d 0 0 0 51c 0 1 $T0 $ebp 1180 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 46f5 161 1 0 0 4 51c 0 1 $T0 $ebp 1180 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 1312 - ^ = +STACK WIN 4 46f6 15d 0 0 0 8 51c 0 1 $T0 $ebp 1180 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 1312 - ^ = +STACK WIN 4 4863 a4 c 0 0 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 48fb b 0 0 0 c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 4907 82 9 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 490e 78 2 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4989 7a 7 0 0 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 4990 71 0 0 0 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 4a03 1ab 19 0 8 0 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 4a14 193 8 0 8 4 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = +STACK WIN 4 4a18 18c 4 0 8 8 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = +STACK WIN 4 4a1c 187 0 0 8 c 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = +STACK WIN 4 4bae 3c 6 0 0 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 4bea 19a c 0 4 c 24 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 4d4b 8 0 0 4 c 24 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 4d84 1e 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4da2 51 6 0 10 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 4df3 15 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4e08 13 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4e1b 15 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4e30 13 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4e43 15 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4e58 13 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4e6b 18 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4e83 16 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4e99 18 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4eb1 16 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4ec7 18 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4edf 16 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4ef5 18 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4f0d 16 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4f23 15 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4f38 13 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4f4b 15 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4f60 13 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4f73 15 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4f88 13 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 4f9b 53 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 4fee e 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 5365 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 536b 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 5371 140 12 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 5372 13e 11 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 5373 13c 10 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 5374 13a f 0 4 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 5383 12a 0 0 4 10 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 54b1 86 8 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 54b2 84 7 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 54b3 82 6 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 54b4 80 5 0 4 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 54b9 7a 0 0 4 10 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 5537 8c 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 5538 8a 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 5541 7e 0 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = +STACK WIN 4 5542 7c 0 0 4 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 12 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 5543 7a 0 0 4 10 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 12 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 55c3 24 3 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 55c4 22 2 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 55d3 12 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 55e7 3e 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 55f0 31 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 5625 76 c 0 0 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 568f 8 0 0 0 c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 569b 66 2 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 569c 64 1 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 569d 62 0 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 5701 53 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 5754 96 c 0 4 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 57de b 0 0 4 c 18 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 57ea 5 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 57ef 88 c 0 0 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 586b b 0 0 0 c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 5877 5 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 587c 3 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 587f 3e 2 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 5880 3c 1 0 c 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 5881 3a 0 0 c 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 588c 2e 0 0 c c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 58bd 129 6 0 8 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 58c1 123 2 0 8 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 58c2 121 1 0 8 8 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 58c3 11f 0 0 8 c 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 59e6 6b 5 0 c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 59ea 4d 1 0 c 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 59eb 4b 0 0 c 8 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 5a51 171 4 0 0 0 10 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 5a55 169 0 0 0 4 10 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 20 - ^ = +STACK WIN 4 5a74 149 0 0 0 8 10 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 24 - ^ = $ebx $T0 20 - ^ = +STACK WIN 4 5a75 141 0 0 0 c 10 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 24 - ^ = $ebx $T0 20 - ^ = +STACK WIN 4 5bc2 1d4 1e 0 18 0 b4 0 1 $T0 $ebp 96 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 5bdb 1b1 5 0 18 4 b4 0 1 $T0 $ebp 96 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 184 - ^ = +STACK WIN 4 5bdc 1ad 4 0 18 8 b4 0 1 $T0 $ebp 96 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 184 - ^ = +STACK WIN 4 5be0 1a8 0 0 18 c b4 0 1 $T0 $ebp 96 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 184 - ^ = +STACK WIN 4 5d96 2f6 17 0 4 0 1c4 0 1 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 5dac 2d6 1 0 4 4 1c4 0 1 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 456 - ^ = +STACK WIN 4 5dad 2d2 0 0 4 8 1c4 0 1 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 456 - ^ = +STACK WIN 4 608c 1ce 18 0 4 0 98 0 1 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 60a5 1ab 0 0 4 4 98 0 1 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 156 - ^ = +STACK WIN 4 60a6 1a7 0 0 4 8 98 0 1 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 156 - ^ = +STACK WIN 4 60ad 19f 0 0 4 c 98 0 1 $T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 156 - ^ = +STACK WIN 4 625a f3 7 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 6260 2c 1 0 8 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 6261 2a 0 0 8 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 634d 5 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 6352 170 c 0 8 c 24 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 6478 10 0 0 8 c 24 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 6489 b 0 0 8 c 24 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 64ba 7 0 0 8 c 24 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 64c2 21 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 64e3 46 b 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 64ee 3a 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 6529 3c 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 652e 36 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 6565 48 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 65ad 2b 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 65d8 314 11 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 65e5 305 4 0 8 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 65e9 300 0 0 8 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 6616 2d2 0 0 8 c 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 68ec b0 d 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 68f2 a9 7 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 68f9 a1 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 699c 106 11 0 4 0 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 69a8 f8 5 0 4 4 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = +STACK WIN 4 69a9 f6 4 0 4 8 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = +STACK WIN 4 69ad f1 0 0 4 c 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = +STACK WIN 4 6aa2 2df 12 0 c 0 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 6aaf 2d0 5 0 c 4 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = +STACK WIN 4 6ab0 2ce 4 0 c 8 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = +STACK WIN 4 6ab4 2c9 0 0 c c c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = +STACK WIN 4 6d81 cd 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 6e4e 2e2 f 0 0 0 138 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 6e5d 294 0 0 0 4 138 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 316 - ^ = +STACK WIN 4 6e72 27e 0 0 0 8 138 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 316 - ^ = +STACK WIN 4 6e75 27a 0 0 0 c 138 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 316 - ^ = +STACK WIN 4 7130 a8 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7131 a6 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7179 5d 0 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 71d8 2e3 2a 0 4 0 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 71fc 2bd 6 0 4 4 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = +STACK WIN 4 7201 2b7 1 0 4 8 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = +STACK WIN 4 7202 2b5 0 0 4 c 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = +STACK WIN 4 74bb 8 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 754a a3 c 0 4 c 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 75dc 10 0 0 4 c 20 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 75ed 9 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 75f6 f3 23 0 0 4 328 0 1 $T0 $ebp 680 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 76e9 1e 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7707 54 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 775b 2b 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7786 4f 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 77d5 29 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 77fe 4f 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 784d 29 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7876 4f 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 78c5 29 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 78ee 54 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 7942 2b 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 796d 4f 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 79bc 29 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 79e5 4f 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 7a34 29 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7a5d 54 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 7ab1 2b 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7adc 54 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 7b30 2b 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7b5b 54 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 7baf 2b 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7bda 4f 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 7c29 29 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7c52 d 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7c5f 8 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7c67 1f 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7c86 1a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7ca0 1f 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7cbf 1c 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7cdb 12 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7ced 1b 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 7d08 13b 1d 0 18 8 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 7d1d 126 8 0 18 c 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = +STACK WIN 4 7e43 3b 6 0 18 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 7e7e 13d 1d 0 18 8 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 7e93 128 8 0 18 c 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = +STACK WIN 4 7fbb 3b 6 0 18 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 7ff6 4f c 0 4 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 803c 8 0 0 4 c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 8045 75 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 808d 2c 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 80ba c3 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 80bb c1 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = +STACK WIN 4 80c9 9c 0 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 80d0 94 0 0 4 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 80d1 90 0 0 4 10 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ = $ebx $T0 8 - ^ = +STACK WIN 4 817d 11e c 0 c c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 8274 d 0 0 c c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 829b 3f 9 0 8 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 82a4 34 0 0 8 4 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 82bd 18 0 0 8 8 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 82da 21b c 0 8 c 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 8418 e 0 0 8 c 20 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 84f5 47 5 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 84fa 41 0 0 c 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 853c 1a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 8556 3a2 1d 0 20 8 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 8567 391 c 0 20 c 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = +STACK WIN 4 88f8 43 6 0 24 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 893b 1b8 1d 0 1c 8 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 8950 1a3 8 0 1c c 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = +STACK WIN 4 8af3 40 6 0 20 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 8b33 87 0 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 8bba e3 0 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 8c9d 14 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 8cb1 14 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 8cc5 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 8ccb 29 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 8cf4 419 6 0 0 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 8d16 3f5 0 0 0 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 8d17 3ed 0 0 0 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 910d 190 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 910e 18e 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 929d 73 4 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 929e 71 3 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 929f 6f 2 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 92a0 6d 1 0 4 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 92a1 6b 0 0 4 10 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 9310 33 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9317 16 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 9318 14 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 9343 40 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9344 3e 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9383 1c8 11 0 4 0 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 938a 1bf a 0 4 4 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 938e 1ba 6 0 4 8 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 9394 1b3 0 0 4 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 954b 33 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9552 16 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 9553 14 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 957e 89 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 957f 87 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9607 2c4 c 0 4 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 960e 2bb 5 0 4 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 960f 2b9 4 0 4 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 9613 2b4 0 0 4 c 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 98cb 395 1b 0 4 0 48 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 98dc 37d a 0 4 4 48 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 76 - ^ = +STACK WIN 4 98df 377 7 0 4 8 48 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 76 - ^ = +STACK WIN 4 98e6 36f 0 0 4 c 48 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 76 - ^ = +STACK WIN 4 9c60 29 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9c89 16 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9c9f 26 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9cc5 26 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9ceb 26 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9d11 3 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9d14 fe 9 0 4 0 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 9d1b e9 2 0 4 4 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 9d1c e7 1 0 4 8 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 9d1d e5 0 0 4 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 9e12 9 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9e1b fe 9 0 4 0 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 9e22 e9 2 0 4 4 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 32 - ^ = +STACK WIN 4 9e23 e7 1 0 4 8 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 32 - ^ = +STACK WIN 4 9e24 e5 0 0 4 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 32 - ^ = +STACK WIN 4 9f19 9 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 9f22 355 9 0 4 0 24 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 9f29 34c 2 0 4 4 24 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 40 - ^ = +STACK WIN 4 9f2a 348 1 0 4 8 24 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 40 - ^ = +STACK WIN 4 9f2b 346 0 0 4 c 24 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 40 - ^ = +STACK WIN 4 a277 9 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 a280 20 6 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 a284 1b 2 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 a289 15 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 a2a0 36 6 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 a2a6 2f 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 a2d6 79 8 0 4 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 a2db 72 3 0 4 4 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 a2dc 70 2 0 4 8 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 a34f 3db 11 0 10 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 a354 3d4 c 0 10 4 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 a35b 3cc 5 0 10 8 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 a35c 3ca 4 0 10 c 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 a72a 51d 1d 0 18 8 24 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 a73e 509 9 0 18 c 24 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 40 - ^ = +STACK WIN 4 ac47 1af a 0 18 0 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 ac51 1a3 0 0 18 4 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = +STACK WIN 4 ac97 15c 0 0 18 8 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = +STACK WIN 4 acca 128 0 0 18 c 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 36 - ^ = +STACK WIN 4 adf6 1e 3 0 14 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 ae14 1d 0 0 10 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ae31 1e 3 0 14 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 ae4f 26 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 af58 60 6 0 c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 af5e 56 0 0 c 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 af67 45 0 0 c 8 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 af68 43 0 0 c c 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 afb8 14 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 afcc 77 11 0 0 0 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 afdd 5f 0 0 0 4 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 b043 1e 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b061 32 1 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b062 30 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b093 1b 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b0ae 96 12 0 4 0 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 b0bf 7c 1 0 4 4 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 b0c0 78 0 0 4 8 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 b144 72 11 0 8 0 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 b155 5a 0 0 8 4 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 b191 13 0 0 8 8 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 b1b6 1d0 13 0 4 0 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 b1c7 1b6 2 0 4 4 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 128 - ^ = +STACK WIN 4 b1c8 1b2 1 0 4 8 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 128 - ^ = +STACK WIN 4 b1c9 1b0 0 0 4 c 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 128 - ^ = +STACK WIN 4 b386 bf 12 0 4 0 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 b397 a5 1 0 4 4 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 b398 a1 0 0 4 8 7c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 b445 2c 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b471 65 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b4d6 3c 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b512 1e3 4 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b513 1e1 3 0 c 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 b514 1df 2 0 c 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 b515 1dd 1 0 c c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 b516 1db 0 0 c 10 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 b6f5 12 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b707 18 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b71f 40 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b75f 78 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b7d7 1490 4 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b7d8 83f 3 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 b7d9 83d 2 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 cc67 1680 5 0 c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 cc6b 15f8 1 0 c 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 cc6c 15f6 0 0 c 8 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 cc9d 86c 0 0 c c 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = +STACK WIN 4 e2e7 be 9 0 c 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 e2f0 a9 0 0 c 4 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 e302 96 0 0 c 8 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 e755 57 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 e7ac 8f 0 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 e83b b6 7 0 c 0 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 e842 ad 0 0 c 4 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 e8f1 2f 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 e94c 47 10 0 4 0 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 e993 1b2 2a 0 18 8 34 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 e9b0 195 d 0 18 c 34 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 56 - ^ = +STACK WIN 4 eb45 50 c 0 0 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 eb62 1c 0 0 0 c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 eb95 60 9 0 0 0 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 eb9e 57 0 0 0 4 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 ebf5 d 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ec02 34 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ec07 2e 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ec36 34 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ec3b 2e 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ec6a 34 5 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ec6f 2e 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ec9e a2 c 0 10 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 eca5 99 5 0 10 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 ecaa 93 0 0 10 8 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 ecb8 84 0 0 10 c 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 ed40 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ed46 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ed4c 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ed52 6 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ed58 c 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ed64 c 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ed70 c 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 ed7c 33f c 0 0 c 3c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f026 d 0 0 0 c 3c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 f0bb 1f5 14 0 24 0 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f0ca 1e4 5 0 24 4 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = +STACK WIN 4 f0cb 1e2 4 0 24 8 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = +STACK WIN 4 f0cc 1e0 3 0 24 c c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = +STACK WIN 4 f2b0 1ae 5 0 0 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f2b5 15f 0 0 0 4 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f2e5 12e 0 0 0 8 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = +STACK WIN 4 f45e 4f c 0 0 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f4a4 8 0 0 0 c 18 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 f4ad 38 c 0 0 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f4dc 8 0 0 0 c 18 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 f4e5 41 c 0 4 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f51d 8 0 0 4 c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 f526 35 a 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f52b 2f 5 0 8 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f530 27 0 0 8 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f55b d3 7 0 c 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f562 ca 0 0 c 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 f5a3 88 0 0 c 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 f5eb 33 0 0 c c 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 f62e 50 4 0 8 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f632 4a 0 0 8 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f67e 36 6 0 8 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f6b4 e 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f6c2 16 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f6d8 11 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f6e9 13 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f6fc e 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f70a 13 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f71d e 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f72b 13 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f73e e 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f74c 16 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f762 11 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f773 13 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f786 e 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f794 13 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f7a7 e 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f7b5 16 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f7cb 11 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f7dc 16 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f7f2 11 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f803 16 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f819 11 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f82a 13 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f83d e 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f84b c 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f857 26 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f87d 21 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f89e 26 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f8c4 21 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f8e5 11 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f8f6 15 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f90b 5 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f910 5 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f915 11 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f926 15 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 f93b f0 e 0 10 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 f942 e7 7 0 10 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 f948 e0 1 0 10 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 f949 de 0 0 10 c 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 fa2b 5c 4 0 c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fa2f 56 0 0 c 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fa87 db 8 0 c 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fa8c d2 3 0 c 4 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 fa8d d0 2 0 c 8 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 fab7 a5 0 0 c c 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 fb62 28 3 0 10 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fb8a 25 3 0 10 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fbaf 18 0 0 10 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 fbc7 f6 c 0 14 0 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fbce eb 5 0 14 4 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = +STACK WIN 4 fbd3 e5 0 0 14 8 c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 16 - ^ = +STACK WIN 4 fcbd 33 3 0 14 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fcd8 16 0 0 14 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fcf0 1d 4 0 14 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fcf4 17 0 0 14 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fd3b 81 8 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 fd43 70 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 fd52 60 0 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = +STACK WIN 4 fd53 5e 0 0 4 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 8 - ^ = +STACK WIN 4 fdbc 93 7 0 c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fdc0 8d 3 0 c 4 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 fdc1 8b 2 0 c 8 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 fe00 4b 0 0 c c 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 4 - ^ = +STACK WIN 4 fe4f a2 6 0 8 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fe54 9b 1 0 8 4 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fe55 99 0 0 8 8 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 fef1 83 c 0 4 c 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 ff6b 8 0 0 4 c 20 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 ff74 d8 c 0 10 c 1c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10043 8 0 0 10 c 1c 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 1004c e6 c 0 c c 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10129 8 0 0 c c 20 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 10132 8 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1013a 117 8 0 8 0 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10141 10e 1 0 8 4 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 10142 10c 0 0 8 8 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 28 - ^ = +STACK WIN 4 10251 27 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 10278 82 6 0 c 0 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 102fa 6e 4 0 8 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10368 5 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1036d 22b 8 0 14 0 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10374 222 1 0 14 4 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10375 220 0 0 14 8 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 103d3 1c1 0 0 14 c 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 32 - ^ = +STACK WIN 4 10598 29 3 0 c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 105c1 1b 0 0 10 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 105dc 2a 3 0 c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10606 1b 0 0 10 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 10621 294 8 0 14 0 38 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10628 28b 1 0 14 4 38 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 60 - ^ = +STACK WIN 4 10629 289 0 0 14 8 38 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 60 - ^ = +STACK WIN 4 10685 1f9 0 0 14 c 38 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 60 - ^ = +STACK WIN 4 108b5 29 3 0 c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 108de 1b 0 0 10 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 108f9 2a 3 0 c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10923 1b 0 0 10 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 10a45 ec 7 0 10 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10a4c e3 0 0 10 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 10aac 82 0 0 10 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 10b31 17 0 0 c 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 10b48 95 a 0 0 0 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10b4e 7d 4 0 0 4 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = +STACK WIN 4 10b4f 7b 3 0 0 8 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = +STACK WIN 4 10b52 77 0 0 0 c 8 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 12 - ^ = +STACK WIN 4 10bdd 1a 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 10bf7 224 17 0 1c 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10c0c 20f 2 0 1c c 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 10e1b 3e 6 0 1c 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10e94 1a 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 10eae 389 16 0 18 8 2c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 10ec2 375 2 0 18 c 2c 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 48 - ^ = +STACK WIN 4 11237 40 6 0 20 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 11277 f8 7 0 10 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1127e ef 0 0 10 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 112de 8e 0 0 10 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 1136f 27 3 0 c 0 0 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 11396 4d 1 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11397 48 0 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 113e3 5d 4 0 0 0 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 113ff 3f 0 0 0 4 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 11400 3d 0 0 0 8 4 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 8 - ^ = +STACK WIN 4 11440 247 f 0 8 0 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1144a 95 5 0 8 4 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = +STACK WIN 4 1144f 8f 0 0 8 8 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = +STACK WIN 4 11472 6b 0 0 8 c 14 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 24 - ^ = +STACK WIN 4 11687 50 6 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11688 4e 5 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 1168d 48 0 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 11698 3c 0 0 4 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 11699 3a 0 0 4 10 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ = +STACK WIN 4 116d7 ba 7 0 c 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 116de b1 0 0 c 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 1171b 73 0 0 c 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 11791 13 0 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 0 1088 d 0 0 0 0 0 0 0 0 +STACK WIN 0 1555 14 0 0 0 0 0 0 0 0 +STACK WIN 0 15ac 90 3 0 c c 0 0 0 0 +STACK WIN 0 163c 46 0 0 10 4 0 0 0 1 +STACK WIN 0 169e 17 4 0 0 10 0 0 0 1 +STACK WIN 0 16b5 19 0 0 0 0 0 0 0 0 +STACK WIN 0 16e8 17 1 0 8 4 0 0 0 1 +STACK WIN 0 17b8 14 0 0 0 0 0 0 0 0 +STACK WIN 0 1b64 12 0 0 0 0 0 0 0 0 +STACK WIN 0 2674 4 0 0 0 0 0 0 0 0 +STACK WIN 0 293d 9 0 0 0 0 0 0 0 0 +STACK WIN 0 2aea c 0 0 0 0 0 0 0 0 +STACK WIN 0 2af6 c 0 0 0 0 0 0 0 0 +STACK WIN 0 3085 84 3 0 8 c 0 0 0 0 +STACK WIN 0 3109 23 0 0 0 0 0 0 0 0 +STACK WIN 0 3154 3 0 0 0 0 0 0 0 0 +STACK WIN 0 32dc 9 0 0 0 0 0 0 0 0 +STACK WIN 0 36ac 6 0 0 0 0 0 0 0 0 +STACK WIN 0 3703 4 0 0 0 0 0 0 0 0 +STACK WIN 0 3753 4 0 0 0 0 0 0 0 0 +STACK WIN 0 3809 a 0 0 0 0 0 0 0 0 +STACK WIN 0 3a73 c 0 0 0 0 0 0 0 0 +STACK WIN 0 3c29 15 0 0 0 0 0 0 0 0 +STACK WIN 0 3f7d 17 0 0 0 0 0 0 0 0 +STACK WIN 0 4300 8b 0 0 4 0 0 0 0 0 +STACK WIN 0 449c 9 0 0 0 0 0 0 0 0 +STACK WIN 0 48fb c 0 0 0 0 0 0 0 0 +STACK WIN 0 4d4b 9 0 0 0 0 0 0 0 0 +STACK WIN 0 568f 9 0 0 0 0 0 0 0 0 +STACK WIN 0 57de c 0 0 0 0 0 0 0 0 +STACK WIN 0 586b c 0 0 0 0 0 0 0 0 +STACK WIN 0 6478 11 0 0 0 0 0 0 0 0 +STACK WIN 0 6489 c 0 0 0 0 0 0 0 0 +STACK WIN 0 64ba 8 0 0 0 0 0 0 0 0 +STACK WIN 0 74d0 7a 0 0 c 0 0 0 0 0 +STACK WIN 0 75dc 11 0 0 0 0 0 0 0 0 +STACK WIN 0 803c 9 0 0 0 0 0 0 0 0 +STACK WIN 0 8274 e 0 0 0 0 0 0 0 0 +STACK WIN 0 8418 f 0 0 0 0 0 0 0 0 +STACK WIN 0 aed0 88 0 0 8 0 0 0 0 0 +STACK WIN 0 eb62 1c 0 0 0 0 0 0 0 0 +STACK WIN 0 f026 e 0 0 0 0 0 0 0 0 +STACK WIN 0 f4a4 9 0 0 0 0 0 0 0 0 +STACK WIN 0 f4dc 9 0 0 0 0 0 0 0 0 +STACK WIN 0 f51d 9 0 0 0 0 0 0 0 0 +STACK WIN 0 ff6b 9 0 0 0 0 0 0 0 0 +STACK WIN 0 10043 9 0 0 0 0 0 0 0 0 +STACK WIN 0 10129 9 0 0 0 0 0 0 0 0 +STACK WIN 0 117c0 be 0 0 8 0 0 0 0 0 diff --git a/src/processor/testdata/module1.out b/src/processor/testdata/module1.out index 6b48db20..2d96eaf7 100644 --- a/src/processor/testdata/module1.out +++ b/src/processor/testdata/module1.out @@ -1,16 +1,16 @@ FILE 1 file1_1.cc FILE 2 file1_2.cc FILE 3 file1_3.cc -FUNC 1000 c Function1_1 +FUNC 1000 c 0 Function1_1 1000 4 44 1 1004 4 45 1 1008 4 46 1 -FUNC 1100 8 Function1_2 +FUNC 1100 8 4 Function1_2 1100 4 65 2 1104 4 66 2 -FUNC 1200 100 Function1_3 -FUNC 1300 100 Function1_4 -STACK WIN 4 1000 c 1 0 0 0 0 0 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = -STACK WIN 4 1100 8 1 0 0 0 0 0 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = -STACK WIN 4 1100 100 1 0 0 0 0 0 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = -STACK WIN 4 1300 100 1 0 0 0 0 0 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = +FUNC 1200 100 8 Function1_3 +FUNC 1300 100 c Function1_4 +STACK WIN 4 1000 c 1 0 0 0 0 0 1 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = +STACK WIN 4 1100 8 1 0 0 0 0 0 1 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = +STACK WIN 4 1100 100 1 0 0 0 0 0 1 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = +STACK WIN 4 1300 100 1 0 0 0 0 0 1 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = diff --git a/src/processor/testdata/module2.out b/src/processor/testdata/module2.out index 52e1577e..f25740b7 100644 --- a/src/processor/testdata/module2.out +++ b/src/processor/testdata/module2.out @@ -1,14 +1,14 @@ FILE 1 file2_1.cc FILE 2 file2_2.cc FILE 3 file2_3.cc -FUNC 2000 c Function2_1 +FUNC 2000 c 4 Function2_1 1000 4 54 1 1004 4 55 1 1008 4 56 1 -FUNC 2170 14 Function2_2 +FUNC 2170 14 4 Function2_2 2170 6 10 2 2176 4 12 2 217a 6 13 2 2180 4 21 2 -STACK WIN 4 2000 c 1 0 0 0 0 0 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = -STACK WIN 4 2170 14 1 0 0 0 0 0 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = +STACK WIN 4 2000 c 1 0 0 0 0 0 1 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = +STACK WIN 4 2170 14 1 0 0 0 0 0 1 $eip 4 + ^ = $esp $ebp 8 + = $ebp $ebp ^ = diff --git a/src/tools/windows/dump_syms/testdata/dump_syms_regtest.out b/src/tools/windows/dump_syms/testdata/dump_syms_regtest.out index d18e01a9..a0f988a2 100644 --- a/src/tools/windows/dump_syms/testdata/dump_syms_regtest.out +++ b/src/tools/windows/dump_syms/testdata/dump_syms_regtest.out @@ -1179,7 +1179,7 @@ FILE 1178 f:\rtm\public\sdk\inc\ddbanned.h FILE 1179 f:\rtm\vctools\crt_bld\self_x86\crt\prebuild\h\vadefs.h FILE 1180 f:\rtm\vctools\crt_bld\self_x86\crt\prebuild\h\cruntime.h FILE 1181 f:\rtm\public\sdk\inc\tvout.h -FUNC 1000 187 main +FUNC 1000 187 8 main 1000 39 24 172 1039 11 25 172 104a 1b 26 172 @@ -1197,21 +1197,21 @@ FUNC 1000 187 main 1142 9 47 172 114b 16 48 172 1161 26 49 172 -FUNC 1190 a ATL::CComBSTR::~CComBSTR +FUNC 1190 a 0 ATL::CComBSTR::~CComBSTR() 1190 0 1351 28 1190 9 1352 28 1199 1 1353 28 -FUNC 11a0 f ATL::CComPtr::~CComPtr +FUNC 11a0 f 0 ATL::CComPtr::~CComPtr() 11a0 0 25 26 11a0 f 26 26 -FUNC 11b0 15 airbag::PDBSourceLineWriter::Close +FUNC 11b0 15 0 airbag::PDBSourceLineWriter::Close() 11b0 0 212 26 11b0 14 213 26 11c4 1 214 26 -FUNC 11d0 10 airbag::PDBSourceLineWriter::PDBSourceLineWriter +FUNC 11d0 10 0 airbag::PDBSourceLineWriter::PDBSourceLineWriter() 11d0 f 22 26 11df 1 23 26 -FUNC 11e0 163 airbag::PDBSourceLineWriter::Open +FUNC 11e0 163 4 airbag::PDBSourceLineWriter::Open(std::basic_string,std::allocator > const &) 11e0 24 28 26 1204 14 29 26 1218 c 31 26 @@ -1230,7 +1230,7 @@ FUNC 11e0 163 airbag::PDBSourceLineWriter::Open 12fe 18 49 26 1316 1a 52 26 1330 13 53 26 -FUNC 1350 19b airbag::PDBSourceLineWriter::PrintLines +FUNC 1350 19b 4 airbag::PDBSourceLineWriter::PrintLines(IDiaEnumLineNumbers *) 1350 29 55 26 1379 6 58 26 137f 3c 61 26 @@ -1247,7 +1247,7 @@ FUNC 1350 19b airbag::PDBSourceLineWriter::PrintLines 14c5 1f 71 26 14e4 5 76 26 14e9 2 77 26 -FUNC 14f0 1d3 airbag::PDBSourceLineWriter::PrintFunction +FUNC 14f0 1d3 4 airbag::PDBSourceLineWriter::PrintFunction(IDiaSymbol *) 14f0 28 86 26 1518 6 89 26 151e 19 90 26 @@ -1273,7 +1273,7 @@ FUNC 14f0 1d3 airbag::PDBSourceLineWriter::PrintFunction 1675 20 118 26 1695 19 120 26 16ae 15 121 26 -FUNC 16d0 326 airbag::PDBSourceLineWriter::PrintSourceFiles +FUNC 16d0 326 0 airbag::PDBSourceLineWriter::PrintSourceFiles() 16d0 29 123 26 16f9 6 124 26 16ff 17 125 26 @@ -1304,7 +1304,7 @@ FUNC 16d0 326 airbag::PDBSourceLineWriter::PrintSourceFiles 19a3 33 142 26 19d6 17 148 26 19ed 9 153 26 -FUNC 1a00 1b1 airbag::PDBSourceLineWriter::PrintFunctions +FUNC 1a00 1b1 0 airbag::PDBSourceLineWriter::PrintFunctions() 1a00 27 164 26 1a27 6 165 26 1a2d 17 166 26 @@ -1328,7 +1328,7 @@ FUNC 1a00 1b1 airbag::PDBSourceLineWriter::PrintFunctions 1b95 12 199 26 1ba7 5 187 26 1bac 5 188 26 -FUNC 1bc0 35 airbag::PDBSourceLineWriter::WriteMap +FUNC 1bc0 35 4 airbag::PDBSourceLineWriter::WriteMap(_iobuf *) 1bc0 0 201 26 1bc0 d 203 26 1bcd 12 204 26 @@ -1337,13 +1337,13 @@ FUNC 1bc0 35 airbag::PDBSourceLineWriter::WriteMap 1beb 4 208 26 1bef 3 209 26 1bf2 3 210 26 -FUNC 1c02 f __security_check_cookie +FUNC 1c02 f 0 __security_check_cookie 1c02 0 52 1111 1c02 6 55 1111 1c08 2 56 1111 1c0a 2 57 1111 1c0c 5 59 1111 -FUNC 1c11 4b pre_cpp_init +FUNC 1c11 4b 0 pre_cpp_init 1c11 0 310 576 1c11 a 312 576 1c1b 5 322 576 @@ -1351,7 +1351,7 @@ FUNC 1c11 4b pre_cpp_init 1c4a 9 334 576 1c53 8 335 576 1c5b 1 337 576 -FUNC 1c5c 176 __tmainCRTStartup +FUNC 1c5c 176 0 __tmainCRTStartup 1c5c c 410 576 1c68 5 433 576 1c6d 9 458 576 @@ -1389,7 +1389,7 @@ FUNC 1c5c 176 __tmainCRTStartup 1dc0 7 621 576 1dc7 5 623 576 1dcc 6 624 576 -FUNC 1dd2 e2 pre_c_init +FUNC 1dd2 e2 0 pre_c_init 1dd2 0 221 576 1dd2 60 225 576 1e32 d 233 576 @@ -1406,11 +1406,11 @@ FUNC 1dd2 e2 pre_c_init 1ea8 9 289 576 1eb1 2 292 576 1eb3 1 293 576 -FUNC 1eb4 a mainCRTStartup +FUNC 1eb4 a 0 mainCRTStartup 1eb4 0 393 576 1eb4 5 400 576 1eb9 5 402 576 -FUNC 1ebe 104 __report_gsfailure +FUNC 1ebe 104 0 __report_gsfailure 1ebe 9 140 730 1ec7 5 170 730 1ecc 6 171 730 @@ -1447,7 +1447,7 @@ FUNC 1ebe 104 __report_gsfailure 1fa6 8 315 730 1fae 12 319 730 1fc0 2 320 730 -FUNC 1fc8 9f _onexit +FUNC 1fc8 9f 4 _onexit 1fc8 c 79 481 1fd4 12 84 481 1fe6 5 86 481 @@ -1463,13 +1463,13 @@ FUNC 1fc8 9f _onexit 2055 3 120 481 2058 6 121 481 205e 9 117 481 -FUNC 2067 12 atexit +FUNC 2067 12 4 atexit 2067 0 126 481 2067 11 127 481 2078 1 128 481 -FUNC 2079 24 _RTC_Initialize -FUNC 209d 24 _RTC_Terminate -FUNC 20d0 29 _ValidateImageBase +FUNC 2079 24 0 _RTC_Initialize +FUNC 209d 24 0 _RTC_Terminate +FUNC 20d0 29 4 _ValidateImageBase 20d0 0 44 893 20d0 b 50 893 20db 2 52 893 @@ -1479,7 +1479,7 @@ FUNC 20d0 29 _ValidateImageBase 20e9 2 58 893 20eb d 62 893 20f8 1 68 893 -FUNC 2100 42 _FindPESection +FUNC 2100 42 8 _FindPESection 2100 0 92 893 2100 9 99 893 2109 19 108 893 @@ -1487,7 +1487,7 @@ FUNC 2100 42 _FindPESection 2132 a 108 893 213c 5 123 893 2141 1 124 893 -FUNC 2142 6c _IsNonwritableInCurrentImage +FUNC 2142 6c 4 _IsNonwritableInCurrentImage 2142 c 152 893 214e 4 159 893 2152 e 167 893 @@ -1500,18 +1500,18 @@ FUNC 2142 6c _IsNonwritableInCurrentImage 2188 17 190 893 219f 9 196 893 21a8 6 198 893 -FUNC 21bc 45 __SEH_prolog4 -FUNC 2201 14 __SEH_epilog4 -FUNC 2215 23 _except_handler4 -FUNC 2238 29 _setdefaultprecision +FUNC 21bc 45 0 _SEH_prolog4 +FUNC 2201 14 0 _SEH_epilog4 +FUNC 2215 23 10 _except_handler4 +FUNC 2238 29 0 _setdefaultprecision 2238 1 30 1040 2239 27 31 1040 2260 1 32 1040 -FUNC 2261 3 _setargv +FUNC 2261 3 0 _setargv 2261 0 56 616 2261 2 57 616 2263 1 58 616 -FUNC 2264 94 __security_init_cookie +FUNC 2264 94 0 __security_init_cookie 2264 6 97 770 226a 21 117 770 228b 7 119 770 @@ -1530,66 +1530,66 @@ FUNC 2264 94 __security_init_cookie 22e5 6 215 770 22eb b 216 770 22f6 2 218 770 -STACK WIN 4 1000 187 39 0 8 8 23c 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1023 164 16 0 8 c 23c 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 576 - ^ = -STACK WIN 4 1190 a 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11a0 f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11a0 f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11a0 f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11a0 f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11a0 f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11a0 f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11a0 f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11a0 f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11a0 f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11b0 15 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11d0 10 2 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 11e0 163 24 0 4 8 10 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1350 19b 29 0 4 c 1c 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1362 189 17 0 4 10 1c 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 32 - ^ = -STACK WIN 4 1363 188 16 0 4 14 1c 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 36 - ^ = $ebx $T0 32 - ^ = -STACK WIN 4 14f0 1d3 28 0 4 c 1c 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1502 1c1 16 0 4 10 1c 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 32 - ^ = -STACK WIN 4 16d0 326 29 0 0 c 2c 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 16e2 314 17 0 0 10 2c 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 48 - ^ = -STACK WIN 4 16e3 313 16 0 0 14 2c 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 52 - ^ = $ebx $T0 48 - ^ = -STACK WIN 4 1a00 1b1 27 0 0 8 20 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1a12 19f 15 0 0 c 20 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 36 - ^ = -STACK WIN 4 1bc0 35 8 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1bc5 2d 3 0 4 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 1bc6 29 2 0 4 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 1c02 f 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1c11 4b 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1c5c 176 c 0 0 c 20 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1d82 14 0 0 0 c 20 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 1dd2 e2 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1eb4 a 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 1ebe 104 9 0 0 0 328 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 1fc8 9f c 0 4 c 24 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 205e 8 0 0 4 c 24 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 2067 12 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2079 24 2 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 207a 22 1 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 207b 20 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 209d 24 2 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 209e 22 1 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 209f 20 0 0 0 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 20d0 29 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2100 42 18 0 8 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 210e 33 a 0 8 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 210f 31 9 0 8 8 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 2118 27 0 0 8 c 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = -STACK WIN 4 2142 6c c 0 4 c 18 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 2188 14 0 0 4 c 18 0 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = -STACK WIN 4 2215 23 0 0 10 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2238 29 1 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2239 27 0 0 0 4 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2261 3 0 0 0 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2261 3 0 0 4 0 0 0 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = -STACK WIN 4 2264 94 15 0 0 0 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = -STACK WIN 4 2278 7e 1 0 0 4 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 2279 7c 0 0 0 8 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 4 2295 5f 0 0 0 c 10 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 0 1d82 14 0 0 0 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 0 205e 9 0 0 0 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = -STACK WIN 0 2188 14 0 0 0 0 0 0 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 1000 187 39 0 8 8 23c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1023 164 16 0 8 c 23c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 576 - ^ = +STACK WIN 4 1190 a 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11a0 f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11a0 f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11a0 f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11a0 f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11a0 f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11a0 f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11a0 f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11a0 f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11a0 f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11b0 15 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11d0 10 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 11e0 163 24 0 4 8 10 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1350 19b 29 0 4 c 1c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1362 189 17 0 4 10 1c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 32 - ^ = +STACK WIN 4 1363 188 16 0 4 14 1c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 36 - ^ = $ebx $T0 32 - ^ = +STACK WIN 4 14f0 1d3 28 0 4 c 1c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1502 1c1 16 0 4 10 1c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 32 - ^ = +STACK WIN 4 16d0 326 29 0 0 c 2c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 16e2 314 17 0 0 10 2c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 48 - ^ = +STACK WIN 4 16e3 313 16 0 0 14 2c 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 52 - ^ = $ebx $T0 48 - ^ = +STACK WIN 4 1a00 1b1 27 0 0 8 20 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1a12 19f 15 0 0 c 20 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 36 - ^ = +STACK WIN 4 1bc0 35 8 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1bc5 2d 3 0 4 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 1bc6 29 2 0 4 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 1c02 f 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1c11 4b 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1c5c 176 c 0 0 c 20 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1d82 14 0 0 0 c 20 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 1dd2 e2 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1eb4 a 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 1ebe 104 9 0 0 0 328 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 1fc8 9f c 0 4 c 24 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 205e 8 0 0 4 c 24 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 2067 12 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2079 24 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 207a 22 1 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 207b 20 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 209d 24 2 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 209e 22 1 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 209f 20 0 0 0 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 20d0 29 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2100 42 18 0 8 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 210e 33 a 0 8 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 210f 31 9 0 8 8 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 2118 27 0 0 8 c 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ = +STACK WIN 4 2142 6c c 0 4 c 18 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 2188 14 0 0 4 c 18 0 1 $T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $T0 = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T1 4 + .cbParams + = +STACK WIN 4 2215 23 0 0 10 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2238 29 1 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2239 27 0 0 0 4 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2261 3 0 0 0 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2261 3 0 0 4 0 0 0 1 $T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = +STACK WIN 4 2264 94 15 0 0 0 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = +STACK WIN 4 2278 7e 1 0 0 4 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 2279 7c 0 0 0 8 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 4 2295 5f 0 0 0 c 10 0 1 $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 8 + .cbParams + = $ebx $T0 20 - ^ = +STACK WIN 0 1d82 14 0 0 0 0 0 0 0 0 +STACK WIN 0 205e 9 0 0 0 0 0 0 0 0 +STACK WIN 0 2188 14 0 0 0 0 0 0 0 0