------------------------------------------------
sym(来自softice帮助):
When you load symbols for an application, SoftICE creates a
symbol table that contains all the symbols defined for that module.
Use the TABLE command to see all the symbol tables that are loaded:
:TABLE
GDIDEMO [NM32]
964657 Bytes Of Symbol Memory Available
The currently active symbol table is listed in bold. This is the symbol
table used to resolve symbol names. If the current table is not the
Table 3-2: Classes Used by GDIDEMO Application
Class Name Handle Owner Wndw Proc Styles
• ------------------Application Private------------------
BOUNCEDEMO A018A3B0 GDIDEMO 004015A4 00000003
DRAWDEMO A018A318 GDIDEMO 00403CE4 00000003
MAZEDEMO A018A280 GDIDEMO 00403A94 00000003
XFORMDEMO A018A1E8 GDIDEMO 00403764 00000003
POLYDEMO A018A150 GDIDEMO 00402F34 00000003
GDIDEMO A018A0C0 GDIDEMO 004010B5 00000003
BETA REVIEW
26 Using SoftICE
table from which you want to reference symbols, use the TABLE
command and specify the name of the table to make active:
:TABLE GDIDEMO
Use the SYM command to display the symbols from the current
symbol table. With the current table set to GDIDEMO, the SYM
command produces output similar to the following abbreviated
output:
:SYM
.text(001B)
001B:00401000 WinMain
001B:004010B5 WndProc
001B:004011DB CreateProc
001B:00401270 CommandProc
001B:00401496 PaintProc
001B:004014D2 DestroyProc
001B:004014EA lRandom
001B:00401530 CreateBounceWindow
001B:004015A4 BounceProc
001B:004016A6 BounceCreateProc
001B:00401787 BounceCommandProc
001B:0040179C BouncePaintProc
This list of symbol names is from the .text section of the executable. The
.text section is typically used for procedures and functions. The symbols
displayed in this example are all functions of GDIDEMO.
大致用处我猜测是用于在softice中显示加载了符号的api名字,比如GetLocalTime函数