SZDD'3Az// // WIN32CB.VXDC -- Monitor fV Win$ServicesThis VxD must be static since it hooks Int 2Fh to insert5 a&callbackxtercep;s tHIdonVometime betweene BEGIN_PM_APP and KERNEL32_INITIALIZE system control messages.Copyright (C) 1996 by Stan Mitchell #`lude defiWANTWRAPSbasevmmnetvxdrw(ifsdebuerrornt2fapiDDBR_Z ""i)7mulonx-|, mgrex+=<wrap ,!7lib-fs$z ~pragmasic(memcpy,0set1cmp)=1len,1H1at,0[=f7-7L_LOCKED_CODE_SEGv=ކ2DATA;warn (disable:4005,1CUR0() L1=1efaa 5f=j; SYSCTRL_CALLBACK CB0Msg_Private_I( PVMMZ!pS5Mgr );(M8MHDShutdown( voideMuMg_Arm_S@MONDEF pABOOLmXllHiHPEB1 GetAvailBlkHSetup's+procedurB__declspec( nake@>~EDispasE {}DISPATCH_MAPuUOPEVICE(~FDe0NB ,0X@_VM_TERMINATE]D@Sys>RerminK@\DIRECTED1AS@RIVP_ARM_@ITOR,MCm m0mKgGI`mpd0xm6gSHUTDOWNm|GmEFAUL\SU2EN0Zu}}DKParee!( " ",1w,0,\\, \WUAIN1TD, IFSMGR_ORDER+0x1001y} g 0,xXavWP>- addr5@FNpPrevAllocPMCsB;&95 A|Uufillsn!z' HlerLpWpdw 'CBE'Api = FALSERNUMPM_W32SV CS4w`R/pthrough 28hJump3 t1MM-P hW4_V@Hdlrs[]{0};NBYSV@A c]*UF79Ņ4eύc#.;*acQO_rx1fqINT21p021API256.nNոswE=n1d21=p@v7Svcsmm PIoJRAVstd: l21 REp,9CLIENT_STRUCT* pCReg, 0type, P_arrRr->ъџ@sub6index= ([0]&0xff00)>>8`( S!wr(rcw36:h'47:|{dH@->CBRS.Client_DALub9s+3abcjUds1s3sb*{es551>WStr32REDX,м,sizeof(FH)-1AnE7Fcs68->WBXGfs0.->r .  a qcouI| C n0xSL olo D 0 @ x42_ eeku euofs - | ()<<16I^ pspseg-#,a6^n~woH0.src,15BH--(I(t-n-f6--_EAS"=:43,<P(AH)2= ,(AL1 00 -Q >S Data=݃010 P= Mz2^0ReceC1T7A0cha\=ML 3)BndgMwMMr94]MGblkMMC05MMMx60Cheא0DInpStatus (ړX=]t7U]OCutg]w]]q8W|RemovMedia (?number]] 09\5QteHmm&mAVe籠0DFh]gmuB)DS@ing@tryF0mm0C0V`oPqqlay ېF0de Page FmC}0DCatego`(#CHmA}M-r(CLj}z} 0D2neric ByLر0DRequm0}}R}b}}}}zKE4Logiѐ?dMapOmN^F)Dv11Que`IOCTL Hےߍ0@Rm.>ҝn~(Adэ2%8Jub4୼N,octl.cLH3bݙ:ᱞ5eB-/?  15H X ,x  6|a2"< \ defaultֲ -0ThdModuleNameszF L!6 void __stdÀlalVmmSvcsBlk( PEBLOCK p, LIENT_STRUCT*, BYTE type, PDWORD args! }!@$0'3~ͤADebug_}P`tf( "{+~0%d\n",7(elways tak",}0though most ules1t(could looku_p the! 0ntReach apimemcpydd028 *")^ 1=-M- ]-m-ll----"---==$8g=@ MM*M:ESc`@D,AUSrcG6ISUQ, NAME_LEN_83%Vwh`( *HRif V== 'PݫVF-fRelHR+++-,]DDB<]LPPVMM/`GPJ`V8WkU/`->/`_!] //*h W@oows Spet`pecifpi`9MIEendTM#f*p+"buf, 70qlenMMI1M= (2a0set[, 0, ZC)pof fip ZC}pW%V8qxru'YYEq+Wam(MYFExtraI1= NUL"* lpvInBufRqO)N1[2] qiMP0="[3]/40Ьi1][9*հ{z1sb("af,"proto#hdlab]*V#t*(V%+ 42C44gev.dd[0]Rq<<16)|(!<<8)|a =@]Lb`ʉNconnecɍ]#f,pWortP"paAddro"pNetRq~) jHCopyNpם>char*@ iRTB/!=py'7-1XJp`Nuiid_u->p_Req _s_NtD2} */ԋGA"pͭݭlHuoIFSDZstruct\!32apq* p+=+y,j4>cregAXy0->ar_eax & fmRXVW$ IOC_REGISTERS.diocfy^n~->|_E͢c=6A0_DEVICE_IDWWS rN\RTGetTh-Module϶szϱrmyvol SBH.er( e pKDDebug_Pr@f( "WIN32CB: %s\n"e{z_sT@protBoed m I2FE$r.only funQ we loo7pt is 168D?h whic6@΁znBs,quesby Kel16 duyg sym$Part upaIf o72spxs rraga*lXp1aAb5qhas al-y wbeeDplloG @a4B>declspec(pk) My2}@ES_asm"mp>ord pf[ebp+CLIENT_AX],d6@jnzBn?ext_2f7EpCW( Simun_I$r3popB&#Cd fwromBCliRebApi_TRUE 62aaA@errupt toTcomplete,{w u Aޝ_PM_X_BćbQ Begin_N_Execrmov@ax, EFLAGSKpQ aPushHXzx ecx, i2f.wSelPUQe}ddwOff u_FXrRes ALS$7CF:SJmp`>IA֑( SCT.Cnum5/*Dbx,"; dsaxSsUsin7:ESPF8laĐ`^;=w]401/:is_32sctk:U2si4t$aC`T30ch~?Hskip oB eIhYdi,x"6Ptina1Ra9v"M$WreBYs08YBmoEv(:_(=CaxvJ@`Sas sP݁ "u'011hQtID0 @?vmm32_Id@]P]`U2ajSr]`ZR“]7 dw [t$_'z]pHbNUM_S_W32SVCS0 ge_out_of_rang̯i[o#}`Hdlrs +Ha*4Kp[4mDmTmdmt`MM|mmmmepmD}Tqlm b7BOOL DoNotgify0]Igx"' s MultiMon'ork Bbpۺ_Cukr__()TC#P)4$ITI_ ]uq bEnab',0]Cw32-!fEBL p,"0#_AL_A_FRӰ! ))Lp#s AmXv)LhBlcKpr010RGED*_Sy+s_1ӰS, REQUESlVQBLK, !&d ݯlevdOZj, NOTIFY㰑ܺñ!= NULL'jݺ:옭d->= OVR_ERRORܭZj >8 ] -&221E̦INT'0b -bM*-:-M$]MM]]]3]>k-^͉---& Hook for Allocate/_PM_=a_PaHOOKPROCOOTMGR wasDtRher|l`pelf-exn6bArm%1Y]J'C@= (H)(I,7[0E-ebug_Pr^mf( "-6>y\r\n"]@q~{e%KM i ==C ||'DEVIO)ntinue]􂐀d(D? :]E۝CH.JZՉAW .> rX0sX`IoGҪ½͘È͘ XcIoT[LTcop09UEPmyw7a frP end A}}pi,offnqM=yProcdu#iqXord ptr k/}r pa 8ret+Thkpkpqlaeach Monitp_indexqpi,kp @be.|nclud e#`TamSYSCTR0ALLBAs0CtrlMsg_w_( PMONDEF p6mnumps,pU`0p#Stu`3SPV_Heade0"jvu` w3c M->czHz i0&#'s! (7vOݟ0#IzTCX }1General%C j zIMʭڭ00OY͙  2! {.I݀*@-P-3 /״-WgF-(-8- urn( VXD_SUCCESS֨+_I8CDDB@r:Ar60A?FMITCBqCur_ThrZ@_c(bFilteAQqʝ{M7`bMͽ ݱw0]=oM== M)SysӀ_Terminu`(? HVM hPPr6vEMFALST8]F1.mZZT][mjXiRMP Vצ]]}"x #pragma VxD_PAGEABLE_CODE_SEG2}BtDATAM{warning (disӑ:4005)QpEine C{URNp() PIqp}qFu"}%|]M)DShutdow`voidUqml` km:mJmZmjmzm~mmލi= \%S3mem#( , 0, *PIWm}},}ف_;pa(*, HEAPZEROINITVzp$ r_Y<.m= #if>e DEBUPp x( B՜3Debu&Bwntf` %xed\r\n", endifK`^3Q 9FH=FreP? -,6"!= 1  5 E -u* }= ==-==]7MD5MM>-MMM-*-MJ-}cIo8פ--( 2--\U:82U0=N=!|Zp=]M==TMK\J]BM]&][-k"MMu-[]k] 3}]]----]='=7=muzo=m==}5mEmS}=MMWmupMMmJmmB'mBM]`[m3Yg||MÖ!c×2TjirTed__פ1e, R=STEoR_MOspORCBфfXD_SUCCEIS竳*{dufile |**