------------------------------
On Tue, Mar 18, 2014 1:56 PM GMT Alois Schlögl wrote:
On 2014-03-17 17:22, Uwe Bonnes wrote:
"Alois" == Alois Schlögl alois.schloegl@gmail.com writes:
Alois> In one case, HKLM\System\CurrentControlSet\Services\<driver name>
Alois> points to system32\Driver\hidusb.sys;
Can you show the exports of hidusb.sys? Maybe it is also a good candidate for
a replacement dll.
Bye
I'm not sure how to export that information. nm does not work because
its a sys file.
pefile gives quite some information but no export section. grep Hint
pefile_output lists this:
Does winedump -j export... Not work?
ntoskrnl.exe.ExFreePool Hint[77]
ntoskrnl.exe.ExAllocatePoolWithTag Hint[65]
ntoskrnl.exe.KeSetEvent Hint[598]
ntoskrnl.exe.IofCallDriver Hint[482]
ntoskrnl.exe.KeWaitForSingleObject Hint[621]
ntoskrnl.exe.MmMapLockedPages Hint[687]
ntoskrnl.exe.InterlockedDecrement Hint[278]
ntoskrnl.exe.IoBuildDeviceIoControlRequest Hint[302]
ntoskrnl.exe.InterlockedIncrement Hint[281]
ntoskrnl.exe.KeResetEvent Hint[588]
ntoskrnl.exe.InterlockedExchange Hint[279]
ntoskrnl.exe.IoInvalidateDeviceState Hint[385]
ntoskrnl.exe.IoQueueWorkItem Hint[401]
ntoskrnl.exe.InterlockedCompareExchange Hint[277]
ntoskrnl.exe.IoAllocateWorkItem Hint[294]
ntoskrnl.exe.IoCancelIrp Hint[307]
ntoskrnl.exe.KeTickCount Hint[614]
ntoskrnl.exe.KeBugCheckEx Hint[502]
ntoskrnl.exe.PoCallDriver Hint[822]
ntoskrnl.exe.KeInitializeSpinLock Hint[542]
ntoskrnl.exe.KeInitializeEvent Hint[536]
ntoskrnl.exe.IoFreeWorkItem Hint[355]
ntoskrnl.exe.IofCompleteRequest Hint[483]
HIDCLASS.SYS.HidRegisterMinidriver Hint[3]
USBD.SYS.USBD_ParseConfigurationDescriptorEx Hint[22]
USBD.SYS.USBD_CreateConfigurationRequestEx Hint[6]
-- Alois