On 2014-03-17 17:22, Uwe Bonnes wrote:
"Alois" == Alois Schlögl alois.schloegl@gmail.com writes:
Alois> In one case, HKLM\System\CurrentControlSet\Services\<driver name> Alois> points to system32\Driver\hidusb.sys;Can you show the exports of hidusb.sys? Maybe it is also a good candidate for a replacement dll.
Bye
I'm not sure how to export that information. nm does not work because its a sys file. pefile gives quite some information but no export section. grep Hint pefile_output lists this:
ntoskrnl.exe.ExFreePool Hint[77] ntoskrnl.exe.ExAllocatePoolWithTag Hint[65] ntoskrnl.exe.KeSetEvent Hint[598] ntoskrnl.exe.IofCallDriver Hint[482] ntoskrnl.exe.KeWaitForSingleObject Hint[621] ntoskrnl.exe.MmMapLockedPages Hint[687] ntoskrnl.exe.InterlockedDecrement Hint[278] ntoskrnl.exe.IoBuildDeviceIoControlRequest Hint[302] ntoskrnl.exe.InterlockedIncrement Hint[281] ntoskrnl.exe.KeResetEvent Hint[588] ntoskrnl.exe.InterlockedExchange Hint[279] ntoskrnl.exe.IoInvalidateDeviceState Hint[385] ntoskrnl.exe.IoQueueWorkItem Hint[401] ntoskrnl.exe.InterlockedCompareExchange Hint[277] ntoskrnl.exe.IoAllocateWorkItem Hint[294] ntoskrnl.exe.IoCancelIrp Hint[307] ntoskrnl.exe.KeTickCount Hint[614] ntoskrnl.exe.KeBugCheckEx Hint[502] ntoskrnl.exe.PoCallDriver Hint[822] ntoskrnl.exe.KeInitializeSpinLock Hint[542] ntoskrnl.exe.KeInitializeEvent Hint[536] ntoskrnl.exe.IoFreeWorkItem Hint[355] ntoskrnl.exe.IofCompleteRequest Hint[483] HIDCLASS.SYS.HidRegisterMinidriver Hint[3] USBD.SYS.USBD_ParseConfigurationDescriptorEx Hint[22] USBD.SYS.USBD_CreateConfigurationRequestEx Hint[6]
-- Alois