------------------------------
On Tue, Mar 18, 2014 1:56 PM GMT Alois Schlögl wrote:
>On 2014-03-17 17:22, Uwe Bonnes wrote:
>> "Alois" == Alois Schlögl <alois.schloegl(a)gmail.com> writes:
>
> Alois> In one case, HKLM\System\CurrentControlSet\Services\<driver name>
> Alois> points to system32\Driver\hidusb.sys;
>
> Can you show the exports of hidusb.sys? Maybe it is also a good candidate for
> a replacement dll.
>
> Bye
>
>
>
>I'm not sure how to export that information. nm does not work because
>its a sys file.
>pefile gives quite some information but no export section. grep Hint
>pefile_output lists this:
>
>ntoskrnl.exe.ExFreePool Hint[77]
>ntoskrnl.exe.ExAllocatePoolWithTag Hint[65]
>ntoskrnl.exe.KeSetEvent Hint[598]
>ntoskrnl.exe.IofCallDriver Hint[482]
>ntoskrnl.exe.KeWaitForSingleObject Hint[621]
>ntoskrnl.exe.MmMapLockedPages Hint[687]
>ntoskrnl.exe.InterlockedDecrement Hint[278]
>ntoskrnl.exe.IoBuildDeviceIoControlRequest Hint[302]
>ntoskrnl.exe.InterlockedIncrement Hint[281]
>ntoskrnl.exe.KeResetEvent Hint[588]
>ntoskrnl.exe.InterlockedExchange Hint[279]
>ntoskrnl.exe.IoInvalidateDeviceState Hint[385]
>ntoskrnl.exe.IoQueueWorkItem Hint[401]
>ntoskrnl.exe.InterlockedCompareExchange Hint[277]
>ntoskrnl.exe.IoAllocateWorkItem Hint[294]
>ntoskrnl.exe.IoCancelIrp Hint[307]
>ntoskrnl.exe.KeTickCount Hint[614]
>ntoskrnl.exe.KeBugCheckEx Hint[502]
>ntoskrnl.exe.PoCallDriver Hint[822]
>ntoskrnl.exe.KeInitializeSpinLock Hint[542]
>ntoskrnl.exe.KeInitializeEvent Hint[536]
>ntoskrnl.exe.IoFreeWorkItem Hint[355]
>ntoskrnl.exe.IofCompleteRequest Hint[483]
>HIDCLASS.SYS.HidRegisterMinidriver Hint[3]
>USBD.SYS.USBD_ParseConfigurationDescriptorEx Hint[22]
>USBD.SYS.USBD_CreateConfigurationRequestEx Hint[6]
>
>
>-- Alois
>
>