Don't know if this helps, but I was looking through DDI.dll in IDA, and it has
Code:
.text:1000C6F8 aDrvescapeHtc_s unicode 0, <DrvEscape::HTC_SET_3D_LAUNCHING_FLAG.>
.text:1000C6F8 ; DATA XREF: .text:off_1002E198o
.text:1000C6F8 DCW 0xD
.text:1000C6F8 DCW 0xA
.text:1000C6F8 unicode 0, <>,0
It also has:
Code:
IMPORT __imp_gles_init ; DATA XREF: .text:off_1003A990o
being imported from ahi2dati
Code:
.idata:10043210 IMPORT __imp_gles_init ; DATA XREF: .text:off_1003A990o
.idata:10043214 IMPORT __imp_AhiInit ; DATA XREF: .text:off_1003A980o
.idata:10043218 IMPORT __imp_AhiDevEnum ; DATA XREF: .text:off_1003A970o
May be helpful as well.
A lot of things seem to be printing to the NKDebugconsole (my interpretation of ASM,which I know very little about).
Hope this helps a little, if not ignore please.
Edit: I'm looking through the nk.exe and there's a SPYapi and a GuardDog. Could this effect how haret boots at all?