CommandLine: notepad.exe
…
…
…
ntdll!DbgBreakPoint:
7c90120e cc int 3
0:000> .symfix
No downstream store given, using c:\Program Files\Debugging Tools for Windows\sym
0:000> .reload
Reloading current modules
..............
0:000> X notepad!*Save*
01001a28 notepad!NpSaveDialogHookProc = <no type information>
0100270f notepad!CheckSave = <no type information>
0100a528 notepad!g_ftSaveAs = <no type information>
01003a39 notepad!SaveGlobals = <no type information>
010012e4 notepad!_imp__GetSaveFileNameW = <no type information>
0100a540 notepad!szSaveFilterSpec = <no type information>
01004eae notepad!SaveFile = <no type information>
01009854 notepad!fInSaveAsDlg = <no type information>
0100136c notepad!s_SaveAsHelpIDs = <no type information>
01009090 notepad!szSaveCaption = <no type information>
0:000> bp notepad!SaveFile
0:000> g
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
…
…
…
ModLoad: 01790000 01a55000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 73ba0000 73bb3000 C:\WINDOWS\system32\sti.dll
ModLoad: 74ae0000 74ae7000 C:\WINDOWS\system32\CFGMGR32.dll
Breakpoint 0 hit
eax=0007fbb0 ebx=00000104 ecx=00002bd2 edx=7c90e4f4 esi=00000000 edi=7c80ba7f
eip=01004eae esp=0007fb40 ebp=0007fdbc iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
notepad!SaveFile:
01004eae