最初由 doskey 发布
; EXP=\SystemRoot\System32\hal.dll
; EXP=\SystemRoot\System32\ntoskrnl.exe
; EXP=\SystemRoot\System32\ntdll.dll
; EXP=\SystemRoot\System32\kernel32.dll
; EXP=\SystemRoot\System32\user32.dll
; EXP=\SystemRoot\System32\csrsrv.dll
; EXP=\SystemRoot\System32\basesrv.dll
; EXP=\SystemRoot\System32\winsrv.dll
前面的分号去掉
分号去掉也不行。这几个可能是softice自动加载的.
================ Mon May 03 01:46:08 2004
NTICE: Pentium TSC calibration, processor set to 851.0 MHZ
SoftICE (R) - DriverStudio (tm) 4.3.0 (Build 1268)
Windows NT Version 5.0 - Build 2195 (Free) SP 4
Bill Gates
Microsoft
78593180DFBF
Copyright (c) 2003 Compuware Corporation. All rights reserved.
NTICE: LPT1 = Port: 0378
NTICE: PS/2 Mouse Detected
NTICE: 512K allocated for SYM memory
NTICE: 1024K allocated for HST memory
NTICE: 32K allocated for HEAP memory
NTICE: 2048 bytes allocated for NAME memory
NTICE: EXP=\SystemRoot\system32\kernel32.dll
NTICE: EXP=\SystemRoot\system32\user32.dll
NTICE: EXP=\SystemRoot\system32\gdi32.dll
NTICE: EXP=\SystemRoot\system32\ntoskrnl.exe
NTICE: EXP=\SystemRoot\system32\hal.dll
NTICE: EXP=\SYSTEMROOT\SYSTEM32\ADVAPI32.DLL
NTICE: EXP=\SYSTEMROOT\SYSTEM32\COMCTL32.DLL
NTICE: EXP=\SYSTEMROOT\SYSTEM32\COMDLG32.DLL
NTICE: EXP=\SYSTEMROOT\SYSTEM32\MSVBVM60.DLL
NTICE: EXP=\SYSTEMROOT\SYSTEM32\OLEAUT32.DLL
NTICE: EXP=\SYSTEMROOT\SYSTEM32\HAL.DLL
Error: Exports already loaded for this module
NTICE: EXP=\SYSTEMROOT\SYSTEM32\NTOSKRNL.EXE
Error: Exports already loaded for this module
NTICE: EXP=\SYSTEMROOT\SYSTEM32\NTDLL.DLL
NTICE: EXP=\SYSTEMROOT\SYSTEM32\KERNEL32.DLL
Error: Exports already loaded for this module
NTICE: EXP=\SYSTEMROOT\SYSTEM32\USER32.DLL
Error: Exports already loaded for this module
NTICE: EXP=\SYSTEMROOT\SYSTEM32\CSRSRV.DLL
NTICE: EXP=\SYSTEMROOT\SYSTEM32\BASESRV.DLL
NTICE: EXP=\SYSTEMROOT\SYSTEM32\WINSRV.DLL
NTICE: 180K allocated for 32 bit exports
Macro: Memory allocated for 32 Macro entries
Macro: 'SVONSY' defined
Macro: 'SDDG' defined
Macro: 'S82' defined
Macro: 'SALL' defined
Macro: 'BPXMSGA' defined
Macro: 'BPXMSGW' defined
Macro: 'BPMSG' defined
Macro: 'ARGESP8' defined
Macro: 'ARGESPC' defined
Macro: 'BPXGETA' defined
Macro: 'BPXGETW' defined
Macro: 'BPXGDA' defined
Macro: 'BPXGDW' defined
Macro: 'BPGETA' defined
Macro: 'BPGETW' defined
NTICE: IoConnectInterrupt found at 804CF0E3
NTICE: IoDisconnectInterrupt found at 804CF93B
NTICE: MiMapViewOfImageSection found at 8044384E
NTICE: MmUnmapViewOfSection found at 804A240A
NTICE: MiAddValidPageToWorkingSet found at 80442C25
NTICE: KeBugCheckEx found at 8042C762
NTICE: MiCopyOnWrite found at 8044F26B
NTICE: HalDisplayString found at 8006748C
NTICE: RtlAssert found at 8045A91B
NTICE: USBD_AllocateUsbAddress found at ED35331E
NTICE: USBD_ParseConfigurationDescriptorEx found at ED353D6E
NTICE: UHCD_RemoveQueueHeadFromSchedule found at ED33A02C
NTICE: UHCD_InsertQueueHeadInSchedule found at ED339ED6
NTICE: HalpBiosDisplayReset found at 800670C4
NTICE: RtlAssert end found at 8045A9CF
NTICE: NTTerminateProcess found at index 00E0.
NTICE: NTRaiseHardError found at index 00A0. Delta=0000033B
NTICE: KDExtensions are disabled KDHeapSize=00000000 and KDStackSize=00000000
NTICE: Patching Keyboard using method 0
NTICE: Keyboard driver found - i8042prt.sys
NTICE: Keyboard successfully patched using RPUC hook
NTICE: Found UHCI Host Controller at Bus 00 Device 07 Function 02
NTICE: Found UHCI Host Controller at Bus 00 Device 07 Function 03
NTICE: Found 2 USB Host Controllers. USB HID support will be available.
NTICE: 6688 bytes allocated for use by USB HID devices
:LINES 60
:WD 4
:WC 20
:CODE ON
:FAULTS OFF
:DATA 3
:DD
:DEX 3 SS:ESP
:DATA 0
:X
:x