Start von Disky:

a3kVmmInitialize verwendet aPthID
				  
Names in A3KFSIO, item 65 Address=1008A120
 Section=.data Type=Export Name=aVmmId

es werden Adressen zur Basis 
EAX= 1008A1A8  00                       .
auf 0 gesetzt

1000D11C  |> 8948 04        MOV DWORD PTR DS:[EAX+4],ECX
1000D11F  |. 8908           MOV DWORD PTR DS:[EAX],ECX
1000D121  |. 8948 FC        MOV DWORD PTR DS:[EAX-4],ECX
1000D124  |. 8948 F8        MOV DWORD PTR DS:[EAX-8],ECX
1000D127  |. 8948 F4        MOV DWORD PTR DS:[EAX-C],ECX
1000D12A  |. 8948 F0        MOV DWORD PTR DS:[EAX-10],ECX
1000D12D  |. 8948 EC        MOV DWORD PTR DS:[EAX-14],ECX
1000D130  |. 8948 E4        MOV DWORD PTR DS:[EAX-1C],ECX
1000D133  |. 8948 E0        MOV DWORD PTR DS:[EAX-20],ECX
1000D136  |. 8948 DC        MOV DWORD PTR DS:[EAX-24],ECX
1000D139  |. 8948 D8        MOV DWORD PTR DS:[EAX-28],ECX

-> das entspricht 11 32Bit Werten 

1000D13C  |. 66:8948 96     MOV WORD PTR DS:[EAX-6A],CX

1000D140  |. 8948 08        MOV DWORD PTR DS:[EAX+8],ECX

-> noch ein 32Bit Wert

1000D143  |. 8848 98        MOV BYTE PTR DS:[EAX-68],CL
1000D146  |. C702 FFFFFFFF  MOV DWORD PTR DS:[EDX],-1
1000D14C  |. 83C0 76        ADD EAX,76
1000D14F  |. 81C2 84000000  ADD EDX,84


aVmmId		1008A120 
{
	16x mal folgende Struktur
	{
	short;	1008A13E
	char;	1008A140
	long;	1008A180
	long;
	long;
	long;
	long;
	long;
	long;
	long;
	long;
	long;	1008A1A8
	long;
	long;
	}
}	
	

jetzt wird aPthID auf -1 gesetzt
100898E0 >FF FF FF FF              
ist also auch ein 32Bit Wert

1000D14C  |. 83C0 76        ADD EAX,76

-> in EAX steht jetzt 1008A200

1000D14F  |. 81C2 84000000  ADD EDX,84

-> in EDX steht jetzt 10089964

1000D155  |. 3D EAA80810    CMP EAX,A3KFSIO.1008A8EA

jetzt wird also EAX mit 1008A8EA verglichen

1000D15A  |.^7C C0          JL SHORT A3KFSIO.1000D11C

wenn EAX kleiner ist, wird nocht mal auf 1000D11C gesprungen
und zwar 1008A1A8 + x * 76 < 1008A8EA -> x = 0xF

Am Ende steht 1008A8EA in EAX
und 1008A120 in EDX, das ist genau aVmmID

1000D15C  |. E8 FF60FFFF    CALL A3KFSIO.10003260

Das knnte eine Unterfunktion sein code hier eingefgt.
10003260  /$ B8 68410210    MOV EAX,A3KFSIO.10024168

EAX=10024168

10003265  |. 33C9           XOR ECX,ECX
10003267  |> 8948 04        /MOV DWORD PTR DS:[EAX+4],ECX
1000326A  |. 8908           |MOV DWORD PTR DS:[EAX],ECX
1000326C  |. 8948 F8        |MOV DWORD PTR DS:[EAX-8],ECX
1000326F  |. 8948 F4        |MOV DWORD PTR DS:[EAX-C],ECX
10003272  |. 8948 F0        |MOV DWORD PTR DS:[EAX-10],ECX
10003275  |. 8948 EC        |MOV DWORD PTR DS:[EAX-14],ECX
10003278  |. 8948 E8        |MOV DWORD PTR DS:[EAX-18],ECX
1000327B  |. 8948 FC        |MOV DWORD PTR DS:[EAX-4],ECX
1000327E  |. 8948 08        |MOV DWORD PTR DS:[EAX+8],ECX
10003281  |. 83C0 24        |ADD EAX,24
10003284  |. 3D A8430210    |CMP EAX,A3KFSIO.100243A8
10003289  |.^7C DC          \JL SHORT A3KFSIO.10003267
1000328B  \. C3             RETN
knnte nach der Adresse, eine lokale Struktur sein

hierher wird zurckgesprungen:

1000D161  |. A1 C0980810    MOV EAX,DWORD PTR DS:[100898C0]

1000D166  |. 68 00004000    PUSH 400000    ;  ASCII "MZP"

-> das ist die Cache Grsse?
1000D16B  |. 50             PUSH EAX
1000D16C  |. 68 00040000    PUSH 400
1000D171  |. E8 1A61FFFF    CALL A3KFSIO.10003290
-> diese Funktion hat also 3 Parameter


aPthID:
100898E0 >FF                       
10089960              FF               
100899E8  FF                       
10089A68              FF               
10089AF0  FF                       
10089B70              FF               
10089BF8  FF                       
10089C78              FF               
.
.
.
.
1008A098              FF               

Differenz zwischen den Elementen ist 0x80 
insgesamt sind es 0xF (=16) Eintrge

Names in A3KFSIO, item 4 Address=1000AD40 Section=.text
 Type=Export Name=a3kclmInitialize
 
 1000AD40 >/$ 56             PUSH ESI
 1000AD41  |. 57             PUSH EDI
 
 
 1000AD42  |. B8 22C40910    MOV EAX,A3KFSIO.1009C422
 
 Names in A3KFSIO, item 62  Address=1009C420
  Section=.data  Type=Export  Name=aClmId

 1009C422 = aClmID + 0x2
 
 1000AD47  |. BA FEFFFFFF    MOV EDX,-2
 
 in EDX steht also -2 ( = FFFFFFE)
 
 1000AD4C  |. 33C9           XOR ECX,ECX
 1000AD4E  |> 66:8950 FE     /MOV WORD PTR DS:[EAX-2],DX
 1000AD52  |. 66:8908        |MOV WORD PTR DS:[EAX],CX
 
 1000AD55  |. 8D70 0E        |LEA ESI,DWORD PTR DS:[EAX+E]
 
 ESI hat 1009C430 drin ( 0xE = 14)
 
 1000AD58  |. 8948 02        |MOV DWORD PTR DS:[EAX+2],ECX
 1000AD5B  |. 8970 06        |MOV DWORD PTR DS:[EAX+6],ESI
 1000AD5E  |. 8948 0A        |MOV DWORD PTR DS:[EAX+A],ECX
 1000AD61  |. 83C0 10        |ADD EAX,10
 
 Adressbasis wird um 0x10 erhht -> struktur ist 16 Byte lang
 
 1000AD64  |. 3D 42C70910    |CMP EAX,A3KFSIO.1009C742
 
 1009C422 + x * 10 = 1009C742 -> x = 0x32 ( = 50 )
 
 1000AD69  |.^7C E3          \JL SHORT A3KFSIO.1000AD4E
 1000AD6B  |. 890D 38C70910  MOV DWORD PTR DS:[1009C738],ECX
 1000AD71  |. B9 96000000    MOV ECX,96
 1000AD76  |. 33C0           XOR EAX,EAX
 1000AD78  |. BF 80A80810    MOV EDI,A3KFSIO.1008A880
 
 1000AD7D  |. F3:AB          REP STOS DWORD PTR ES:[EDI]
 ca. 150 mal wird hier was wiederholt, wobei ES, also die Adresse
 immer um 4 Byte erhht wird (knnte noch zu aVmmId gehren)
 
 1000AD7F  |. 5F             POP EDI
 
 1000AD80  |. C705 D8AA0810 >MOV DWORD PTR DS:[1008AAD8],OFFSET A3KFS>
 
 das ist die Adresse von aClmID ( knnte rckgabewert sein )
 
 1000AD8A  |. 5E             POP ESI
 1000AD8B  \. C3             RETN
 
aClmID		1009C420
{
	{
	short	1009C420 mit -2 vorbelegt
	short	1009C422 mit 0 vorbelegt EAX
	short
	p*	
	short	
	
	Struktur belegt im Speicher 16 Byte
	also fehlt hier noch ein long oder andere 4 Byte	
	} [50];

}
erster Eintrag bei 1009C420 >FE FF                    
letzer Eintrag bei 1009C730  FE FF                    



Aufrufliste bisher:
Log data
10012D50   Breakpoint at A3KFSIO.a3kNumA3kDisks
10012D60   Breakpoint at A3KFSIO.a3kNumAdapters
1000D110   Breakpoint at A3KFSIO.a3kVmmInitialize
1000D15C   Breakpoint at A3KFSIO.1000D15C (a3kVmmInitialize+4C)
1000AD7D   Breakpoint at A3KFSIO.1000AD7D (a3kclmInitialize+3D)
1000AD7D   Breakpoint at A3KFSIO.1000AD7D (a3kclmInitialize+3D)
1000E2B0   Breakpoint at A3KFSIO.a3kpfsInitialize

Hinweis: die beiden Get Funktionen werden nicht aufgerufen!!

jetzt kommt a3kMountAll()
da wird irgendwas mit "YAMAHA_dev3" vorbelegt und die
Anzahl der Laufwerke festgestellt.

10002FB0 >/$ 81EC 04020000  SUB ESP,204
10002FB6  |. A1 C4480210    MOV EAX,DWORD PTR DS:[100248C4]
10002FBB  |. 55             PUSH EBP
10002FBC  |. 33ED           XOR EBP,EBP
10002FBE  |. 3BC5           CMP EAX,EBP
10002FC0  |. 896C24 04      MOV DWORD PTR SS:[ESP+4],EBP
10002FC4  |. 7E 76          JLE SHORT A3KFSIO.1000303C
10002FC6  |. 57             PUSH EDI
10002FC7  |. 56             PUSH ESI
10002FC8  |. 53             PUSH EBX
10002FC9  |> 33DB           /XOR EBX,EBX
10002FCB  |> 53             |/PUSH EBX
10002FCC  |. 55             ||PUSH EBP
	
	EBX = EBP = 0
	
10002FCD  |. E8 1EF20000    ||CALL A3KFSIO.100121F0
10002FD2  |. 83C4 08        ||ADD ESP,8
10002FD5  |. 85C0           ||TEST EAX,EAX
10002FD7  |. 74 50          ||JE SHORT A3KFSIO.10003029
10002FD9  |. 8D0CEB         ||LEA ECX,DWORD PTR DS:[EBX+EBP*8]
10002FDC  |. 8D4424 14      ||LEA EAX,DWORD PTR SS:[ESP+14]
10002FE0  |. C1E1 0B        ||SHL ECX,0B
10002FE3  |. 50             ||PUSH EAX
10002FE4  |. 51             ||PUSH ECX

das knnten zwei Aufrufparameter sein

10002FE5  |. E8 C6A90000    ||CALL A3KFSIO.a3kVmmReadBootBlock

a3kVmmReadBootBlock() hat keinen offensichlichen Rckgabewert,
in EBX steht aber 1 vor dem Rcksprung

10002FEA  |. 83C4 08        ||ADD ESP,8
10002FED  |. 33FF           ||XOR EDI,EDI
10002FEF  |. 8D8424 C000000>||LEA EAX,DWORD PTR SS:[ESP+C0]
10002FF6  |> 8B48 FC        ||/MOV ECX,DWORD PTR DS:[EAX-4]
10002FF9  |. 85C9           |||TEST ECX,ECX
10002FFB  |. 75 05          |||JNZ SHORT A3KFSIO.10003002
10002FFD  |. 8338 00        |||CMP DWORD PTR DS:[EAX],0
10003000  |. 74 09          |||JE SHORT A3KFSIO.1000300B
10003002  |> 47             |||INC EDI
10003003  |. 83C0 08        |||ADD EAX,8
10003006  |. 83FF 08        |||CMP EDI,8
10003009  |.^7C EB          ||\JL SHORT A3KFSIO.10002FF6
1000300B  |> 33F6           ||XOR ESI,ESI
1000300D  |. 85FF           ||TEST EDI,EDI
1000300F  |. 7C 18          ||JL SHORT A3KFSIO.10003029
10003011  |> 56             ||/PUSH ESI
10003012  |. 53             |||PUSH EBX
10003013  |. 55             |||PUSH EBP
10003014  |. E8 D7FEFFFF    |||CALL A3KFSIO.a3kMountPartition

knnten 3 Aufrufparameter sein und ein Rckgabewert

10003019  |. 83C4 0C        |||ADD ESP,0C
1000301C  |. 85C0           |||TEST EAX,EAX
1000301E  |. 7E 04          |||JLE SHORT A3KFSIO.10003024
10003020  |. FF4424 10      |||INC DWORD PTR SS:[ESP+10]
10003024  |> 46             |||INC ESI
10003025  |. 3BF7           |||CMP ESI,EDI
10003027  |.^7E E8          ||\JLE SHORT A3KFSIO.10003011
10003029  |> 43             ||INC EBX
1000302A  |. 83FB 07        ||CMP EBX,7
1000302D  |.^7E 9C          |\JLE SHORT A3KFSIO.10002FCB
1000302F  |. A1 C4480210    |MOV EAX,DWORD PTR DS:[100248C4]
10003034  |. 45             |INC EBP
10003035  |. 3BE8           |CMP EBP,EAX
10003037  |.^7C 90          \JL SHORT A3KFSIO.10002FC9
10003039  |. 5B             POP EBX
1000303A  |. 5E             POP ESI
1000303B  |. 5F             POP EDI
1000303C  |> 8B4424 04      MOV EAX,DWORD PTR SS:[ESP+4]
10003040  |. 5D             POP EBP
10003041  |. 81C4 04020000  ADD ESP,204
10003047  \. C3             RETN


jetzt wird in aVmmID was geschrieben
1. 
1008A120 >00 88                    .
2. 
1008A160           02                 
3.
1008A160                    02           
4. 
1008A168        C8                   
5.
1008A168                    7E D4        ~
1008A170  0F                       
6.
1008A170                    02           
7.
1008A178        02                   
8.
1008A178                    81           
9.
1008A180  00 00 94 13              ..
10.
1008A180              00 00 00 01      ...
11.
1008A188  00 00 66 01              ..f
??.
1008A120 >      62 61 63 6B 75 70    backup
1008A128  20 20 20 20 20 20 20 20
1008A130  20 20
13.
1008A190        50 41 02 10          PA

jetzt wird a3kVmmMountPath() gerufen
1000D680 >/$ 53             PUSH EBX
1000D681  |. 8B5C24 08      MOV EBX,DWORD PTR SS:[ESP+8]
1000D685  |. 56             PUSH ESI
1000D686  |. 57             PUSH EDI
1000D687  |. 53             PUSH EBX
1000D688  |. E8 834A0000    CALL A3KFSIO.10012110
1000D68D  |. 83C4 04        ADD ESP,4
1000D690  |. 85C0           TEST EAX,EAX
1000D692  |. 7C 73          JL SHORT A3KFSIO.1000D707
1000D694  |. 8B5424 14      MOV EDX,DWORD PTR SS:[ESP+14]

EDX zeigt jetzt auf "2:1:0"

1000D698  |. 83C9 FF        OR ECX,FFFFFFFF
1000D69B  |. 8BFA           MOV EDI,EDX
1000D69D  |. 33C0           XOR EAX,EAX
1000D69F  |. F2:AE          REPNE SCAS BYTE PTR ES:[EDI]
1000D6A1  |. F7D1           NOT ECX
1000D6A3  |. 49             DEC ECX
1000D6A4  |. 81F9 80000000  CMP ECX,80
1000D6AA  |. 7C 09          JL SHORT A3KFSIO.1000D6B5
1000D6AC  |. B8 1BB7FFFF    MOV EAX,FFFFB71B
1000D6B1  |. 5F             POP EDI
1000D6B2  |. 5E             POP ESI
1000D6B3  |. 5B             POP EBX
1000D6B4  |. C3             RETN
1000D6B5  |> 33C9           XOR ECX,ECX
1000D6B7  |. B8 E0980810    MOV EAX,OFFSET A3KFSIO.aPthId

jetzt wird aPthID mit -1 verglichen

1000D6BC  |> 8338 FF        /CMP DWORD PTR DS:[EAX],-1
1000D6BF  |. 74 0D          |JE SHORT A3KFSIO.1000D6CE
wenn's nicht -1 war ( d.h. schon belegt, dann 0x84 
auf die Adresse draufrechnen und dort nochmal porbieren

1000D6C1  |. 05 84000000    |ADD EAX,84
1000D6C6  |. 41             |INC ECX
1000D6C7  |. 3D 20A10810    |CMP EAX,OFFSET A3KFSIO.aVmmId
1000D6CC  |.^7C EE          \JL SHORT A3KFSIO.1000D6BC
1000D6CE  |> 83F9 10        CMP ECX,10

es wird maximal 10 mal porbiert

1000D6D1  |. 75 09          JNZ SHORT A3KFSIO.1000D6DC
1000D6D3  |. B8 5BB8FFFF    MOV EAX,FFFFB85B
1000D6D8  |. 5F             POP EDI
1000D6D9  |. 5E             POP ESI
1000D6DA  |. 5B             POP EBX
1000D6DB  |. C3             RETN
1000D6DC  |> 8BF1           MOV ESI,ECX
1000D6DE  |. 6A 7F          PUSH 7F
1000D6E0  |. C1E6 05        SHL ESI,5
1000D6E3  |. 03F1           ADD ESI,ECX
1000D6E5  |. 52             PUSH EDX
1000D6E6  |. C1E6 02        SHL ESI,2
1000D6E9  |. 8D86 E4980810  LEA EAX,DWORD PTR DS:[ESI+100898E4]

EBX hat 0 drin
1000D6EF  |. 899E E0980810  MOV DWORD PTR DS:[ESI+aPthId],EBX

Speichert 
100898E0 >00 00 00 00              ....
es wird also der long an Index 1 in aPthID von FFFFF auf 0 gesetzt
-> -1 = frei, 0 = belegt

1000D6F5  |. 50             PUSH EAX
1000D6F6  |. E8 65780000    CALL A3KFSIO.10014F60

jetzt wurde in aPthID der Mountpunkt an Offset 0x4 eingetragen
100898E0 >            32 3A 31 3A      2:1:
100898E8  30                       0
und zwar als Nullterminierter String


1000D6FB  |. 83C4 0C        ADD ESP,0C
1000D6FE  |. C686 63990810 >MOV BYTE PTR DS:[ESI+10089963],0
1000D705  |. 33C0           XOR EAX,EAX
1000D707  |> 5F             POP EDI
1000D708  |. 5E             POP ESI
1000D709  |. 5B             POP EBX
1000D70A  \. C3             RETN




Danach kommen mount...
DirOpen
ReadDirEntry...

jeder ReadDirEntry zhlt
100248E8              00 02            .
in aPfsID 0x20 hoch.
auch hier wieder 0 = belegt, ffffffff = frei

Am Ende, oder beim CloseDir
wird
100248E8                    00 00        ..
100248F0  0B B6                    
beschrieben

auch in aClmID hat sich was getan
1009C420 >00 00 01 00 01 00 00 00  ......
1009C428  20 59 1E 01 00 00 00 00   Y....
1009C430  FE FF 00 00 00 00 00 00  ......
1009C438  40 C4 09 10 00 00 00 00  @.....

der 1. Eintrag gilt als belegt und zeigt mit seinem Zeiger
wo anders hin, wird aber bei nchstem OpenDir
wieder zurckgesetzt auf
1009C420 >FF FF 00 00 00 00 00 00  ......
1009C428  30 C4 09 10 00 00 00 00  0.....
1009C430  FE FF 00 00 00 00 00 00  ......
1009C438  40 C4 09 10 00 00 00 00  @.....


ESI=00A72028, (ASCII "2:1:0\Ambient Kit 2   \PROG\001             ")
Local calls from a3kLs+0A9, 100023BC, a3kCheckVol+6E8, lsa3kvol+73, 10008C37, 1000978A, 100097D0
A3KFSIO.a3kReadDirEnt
ESI=0012FD1B, (ASCII "2:1:0\Analog Bass     \PROG\")
Local calls from a3kLs+0A9, 100023BC, a3kCheckVol+6E8, lsa3kvol+73, 10008C37, 1000978A, 100097D0
A3KFSIO.a3kReadDirEnt


das war folgender Ablauf:
Log data
Address    Message
           OllyDbg v1.10
           Bookmarks sample plugin v1.06 (plugin demo)
             Copyright (C) 2001, 2002 Oleh Yuschuk
           Command line plugin v1.10
             Written by Oleh Yuschuk

           File 'C:\Programme\TekLab Custom Software\A3kDiskyPC\A3kDisky.exe'
           New process with ID 000006A4 created
00490304   Main thread with ID 00000484 created
00320000   Module C:\WINDOWS\system32\SHLWAPI.dll
00400000   Module C:\Programme\TekLab Custom Software\A3kDiskyPC\A3kDisky.exe
76350000   Module C:\WINDOWS\system32\comdlg32.dll
76AF0000   Module C:\WINDOWS\System32\winmm.dll
770F0000   Module C:\WINDOWS\system32\oleaut32.dll
77180000   Module C:\WINDOWS\system32\OLE32.DLL
77310000   Module C:\WINDOWS\system32\comctl32.dll
773A0000   Module C:\WINDOWS\system32\SHELL32.dll
77BB0000   Module C:\WINDOWS\System32\msacm32.dll
77BD0000   Module C:\WINDOWS\system32\version.dll
77BE0000   Module C:\WINDOWS\system32\MSVCRT.DLL
77C40000   Module C:\WINDOWS\system32\GDI32.dll
77D10000   Module C:\WINDOWS\system32\user32.dll
77DA0000   Module C:\WINDOWS\system32\ADVAPI32.dll
77E40000   Module C:\WINDOWS\system32\kernel32.dll
77F40000   Module C:\WINDOWS\System32\ntdll.dll
78000000   Module C:\WINDOWS\system32\RPCRT4.dll
003E0000   Module C:\WINDOWS\System32\myokent.dll
78090000   Module C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll
00490304   Program entry point
77E5D342   New thread with ID 00000728 created
0049037B   Breakpoint at A3kDisky.0049037B
0044B179   Breakpoint at A3kDisky.0044B179
77E5D342   New thread with ID 000001BC created
0047DCB9   Breakpoint at A3kDisky.0047DCB9
0047900D   Breakpoint at A3kDisky.0047900D
015C0000   Module C:\WINDOWS\System32\wnaspi32.dll
10000000   Module C:\Programme\TekLab Custom Software\A3kDiskyPC\A3KFSIO.DLL
10012D60   Breakpoint at A3KFSIO.a3kNumAdapters
004022DA   Breakpoint at A3kDisky.004022DA
1000D110   Breakpoint at A3KFSIO.a3kVmmInitialize
1000AD40   Breakpoint at A3KFSIO.a3kclmInitialize
1000E2B0   Breakpoint at A3KFSIO.a3kpfsInitialize
10002FB0   Breakpoint at A3KFSIO.a3kMountAll
77E5D342   New thread with ID 000007B0 created
10002FE4   Breakpoint at A3KFSIO.10002FE4 (a3kMountAll+34)
1000D9B0   Breakpoint at A3KFSIO.a3kVmmReadBootBlock
10002EF0   Breakpoint at A3KFSIO.a3kMountPartition
1000D9B0   Breakpoint at A3KFSIO.a3kVmmReadBootBlock
           Thread 000001BC terminated, exit code 0
1000D180   Breakpoint at A3KFSIO.a3kVmmMountVolume
10011AE9   Memory breakpoint when writing to [1008A120]
1000D2E3   Memory breakpoint when writing to [1008A192]
1000D680   Breakpoint at A3KFSIO.a3kVmmMountPath
10002EF0   Breakpoint at A3KFSIO.a3kMountPartition
1000D9B0   Breakpoint at A3KFSIO.a3kVmmReadBootBlock
1000D180   Breakpoint at A3KFSIO.a3kVmmMountVolume
10002E60   Breakpoint at A3KFSIO.a3kgetVolPath
100075D0   Breakpoint at A3KFSIO.a3kOpenDir
10007C40   Breakpoint at A3KFSIO.a3kFOpen
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007670   Breakpoint at A3KFSIO.a3kCloseDir
100075D0   Breakpoint at A3KFSIO.a3kOpenDir
10007C40   Breakpoint at A3KFSIO.a3kFOpen
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007C40   Breakpoint at A3KFSIO.a3kFOpen
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008930   Breakpoint at A3KFSIO.a3kGetFileSize
10007D90   Breakpoint at A3KFSIO.a3kFRead
10007D90   Breakpoint at A3KFSIO.a3kFRead
10007D40   Breakpoint at A3KFSIO.a3kFClose
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007670   Breakpoint at A3KFSIO.a3kCloseDir
100075D0   Breakpoint at A3KFSIO.a3kOpenDir
10007C40   Breakpoint at A3KFSIO.a3kFOpen
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007C40   Breakpoint at A3KFSIO.a3kFOpen
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008930   Breakpoint at A3KFSIO.a3kGetFileSize
10007D90   Breakpoint at A3KFSIO.a3kFRead
10007D90   Breakpoint at A3KFSIO.a3kFRead
10007D40   Breakpoint at A3KFSIO.a3kFClose
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007C40   Breakpoint at A3KFSIO.a3kFOpen
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008930   Breakpoint at A3KFSIO.a3kGetFileSize
10007D90   Breakpoint at A3KFSIO.a3kFRead
10007D90   Breakpoint at A3KFSIO.a3kFRead
10007D40   Breakpoint at A3KFSIO.a3kFClose
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007C40   Breakpoint at A3KFSIO.a3kFOpen
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008930   Breakpoint at A3KFSIO.a3kGetFileSize
10007D90   Breakpoint at A3KFSIO.a3kFRead
10007D90   Breakpoint at A3KFSIO.a3kFRead
10007D40   Breakpoint at A3KFSIO.a3kFClose
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007C40   Breakpoint at A3KFSIO.a3kFOpen
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt
10008870   Breakpoint at A3KFSIO.a3kFGetDataType
10007AD0   Breakpoint at A3KFSIO.a3kReadDirEnt



















