语言文件脱壳
这玩意是国外的设计软件上的，很多翻译错误，本来想要自己改下修正的，可以被加密了，PEiD也查不错什么壳，无从下手，不晓得有大侠能否给点提示！ 不是可执行文件,以下是字符参考Ultra 字符串参考
地址 反汇编 文本字符串
0F004449 push ntvdm.0F001FB8 d:\xpsp\base\mvdm\softpc.new\host\src\nt_timer.c
0F008456 push ntvdm.0F003660 .TTF
0F008467 push ntvdm.0F003658 .FON
0F008478 push ntvdm.0F003650 .FOT
0F0084AE push ntvdm.0F003660 .TTF
0F0084F7 mov esi,ntvdm.0F003650 .FOT
0F008FF0 mov esi,ntvdm.0F0025F4 \_default.pif
0F00914A mov edi,ntvdm.0F0025E4 MICROSOFT PIFEX
0F0091AC mov edi,ntvdm.0F0025D4 WINDOWS 286 3.0
0F009235 mov edi,ntvdm.0F0025C4 WINDOWS 386 3.0
0F00934F mov edi,ntvdm.0F0025B4 WINDOWS NT3.1
0F009417 mov edi,ntvdm.0F0025A4 WINDOWS VMM 4.0
0F009634 push ntvdm.0F003B8C xmsAllocBlock:SAAlloc failed !!!!\n
0F0098B7 push ntvdm.0F00253C d:\xpsp\base\mvdm\softpc.new\host\src\nt_event.c
0F009EA2 mov edi,ntvdm.0F00206C SYSTEM\CurrentControlSet\Control\VirtualDeviceDrivers
0F009F08 push ntvdm.0F002068 VDD
0F009F36 push ntvdm.0F002068 VDD
0F009F5B mov ebx,ntvdm.0F002068 VDD
0F00A598 push ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F00A64C push ntvdm.0F0035A0 demDosDispRet\n\tAX=%.4x BX=%.4x CX=%.4x DX=%.4x DI=%.4x SI=%.4x\n
0F00A6AC push ntvdm.0F003558 \tCS=%.4x IP=%.4x DS=%.4x ES=%.4x SS=%.4x SP=%.4x BP=%.4x CF=%.1x\n
0F00AB08 push ntvdm.0F003808 BLASTER
0F00ABDE mov esi,ntvdm.0F0037FC Inactive
0F00AD06 push ntvdm.0F0660CC C:\
0F00AF6B push ntvdm.0F0037F4 .EXE
0F00AF87 push ntvdm.0F0037EC .COM
0F00AFA3 push ntvdm.0F0037E4 .BAT
0F00B3C3 push ntvdm.0F0035E0 demEntryDosApp: Entry=%.4x:%.4x, Stk=%.4x:%.4x PDB=%.4x\n
0F00BFE0 mov esi,ntvdm.0F003970 PROMPT
0F00BFF0 push ntvdm.0F003968 $P$G
0F00C0BA push ntvdm.0F0660D0 COMSPEC=
0F00C0DD push ntvdm.0F065F28 windir
0F00C5D9 push ntvdm.0F002768 WOW32
0F00C5F6 push ntvdm.0F002760 W32Init
0F00C618 push ntvdm.0F002754 W32Dispatch
0F00C62E push ntvdm.0F002744 EnterVxDMutex
0F00C63B push ntvdm.0F002734 LeaveVxDMutex
0F00C65D push ntvdm.0F002724 GetCommHandle
0F00C673 push ntvdm.0F002710 GetCommShadowMSR
0F00C68D push ntvdm.0F0026F8 W32HungAppNotifyThread
0F00D4E7 push ntvdm.0F066020 country
0F00D511 push ntvdm.0F066018 shell
0F00D54D push ntvdm.0F065FF0 %SystemRoot%
0F00D5AC push ntvdm.0F066000 \System32\command.com
0F00D61B push ntvdm.0F06602C /e:
0F00D637 push ntvdm.0F066038 PROMPT
0F00D653 mov eax,ntvdm.0F066038 PROMPT
0F00D6E3 push ntvdm.0F066040 PATH
0F00D6FF mov eax,ntvdm.0F066040 PATH
0F00D78D push ntvdm.0F066034 SET
0F00D866 push ntvdm.0F066030 \n\n
0F00D8C7 push ntvdm.0F066030 \n\n
0F00D8CC mov ecx,ntvdm.0F066020 country
0F00D8E1 push ntvdm.0F003998 %s=%3.3u,%3.3u,%s\system32\%s.sys%s
0F00D915 push ntvdm.0F066000 \System32\command.com
0F00D91B push ntvdm.0F066018 shell
0F00D926 push ntvdm.0F003980 %s=%s%s /p %s\system32
0F00D9A0 mov esi,ntvdm.0F003978 /c
0F00DA5F push ntvdm.0F066030 \n\n
0F00DB1C mov esi,ntvdm.0F002534 \\.\?:
0F00DB2B mov esi,ntvdm.0F002524 \DosDevices\?:
0F00DE79 push ntvdm.0F001FB8 d:\xpsp\base\mvdm\softpc.new\host\src\nt_timer.c
0F00E02A push ntvdm.0F001FFC d:\xpsp\base\mvdm\softpc.new\host\src\nt_eoi.c
0F00E06A mov ebx,ntvdm.0F00253C d:\xpsp\base\mvdm\softpc.new\host\src\nt_event.c
0F00E1F7 push ntvdm.0F0020D8 NTVDM:DemInit fails
0F00E215 push ntvdm.0F0020C4 NTVDM:XMSInit fails
0F00E644 push ntvdm.0F003634 CDFS
0F00E788 push ntvdm.0F002A70 d:\xpsp\base\mvdm\softpc.new\host\src\nt_sec.c
0F00EEEA push ntvdm.0F002C20 SoftPc: NtDeCommitVirtualMemory failed !!!! Status = %lx\n
0F00F500 push 18 (初始化 CPU 选择状态)
0F00FFA9 mov ebx,ntvdm.0F0039BC scs
0F010AC5 mov eax,ntvdm.0F0021A8 \
0F010EFE mov esi,ntvdm.0F00235C LPT3
0F010F05 mov esi,ntvdm.0F002354 LPT2
0F010F0C mov esi,ntvdm.0F00234C LPT1
0F010F1D mov esi,ntvdm.0F002344 COM1
0F010F54 mov esi,ntvdm.0F00233C COM4
0F010F5B mov esi,ntvdm.0F002334 COM3
0F010F62 mov esi,ntvdm.0F00232C COM2
0F010F7B mov esi,ntvdm.0F00231C \\.\$VDMLPT1
0F010FAD mov esi,ntvdm.0F00230C \\.\$VDMLPT3
0F010FB4 mov esi,ntvdm.0F0022FC \\.\$VDMLPT2
0F011431 push ntvdm.0F002138 NTVDM:InitialiseDosEmulation fails
0F011473 mov esi,ntvdm.0F00212C \ntio.sys
0F01148D mov esi,ntvdm.0F00211C \ntio804.sys
0F0114A3 mov esi,ntvdm.0F00210C \ntio412.sys
0F0114B9 mov esi,ntvdm.0F0020FC \ntio411.sys
0F0114CF mov esi,ntvdm.0F0020EC \ntio404.sys
0F01182F mov ebx,ntvdm.0F002258 d:\xpsp\base\mvdm\softpc.new\host\src\config.c
0F011D8A mov eax,ntvdm.0F0021A8 \
0F011F06 push ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F011F99 push ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F0120E3 push ntvdm.0F0022D4 SYSTEM\CurrentControlSet\Control\WOW
0F012102 push ntvdm.0F0023E8 RomFontPointers
0F01264B mov esi,ntvdm.0F00246C \DosDevices\A:
0F012717 push ntvdm.0F002C6C NTVDMD.DLL
0F012726 push ntvdm.0F002C5C xxxDbgDispatch
0F012A61 mov esi,ntvdm.0F00251C \\.\A:
0F01308A push ntvdm.0F0660D0 COMSPEC=
0F0130B4 push ntvdm.0F065F28 windir
0F0135F1 push ntvdm.0F001F84 mouse_io: NIDDB_Allocate_Instance_Data() failed.
0F0140A1 mov ebx,ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F0141EE push ntvdm.0F0037BC -a
0F014298 mov esi,ntvdm.0F001690 \n\n
0F01437C push ntvdm.0F002680 \
0F0143D9 push ntvdm.0F002654 C
0F014B40 mov esi,ntvdm.0F001EF8 shut
0F014B75 mov esi,ntvdm.0F001EF0 power
0F014B9C mov esi,ntvdm.0F001EE8 diag
0F014BC2 mov esi,ntvdm.0F001EE0 equip
0F014BE9 mov esi,ntvdm.0F001ED8 flop
0F014C08 mov esi,ntvdm.0F001ED0 disk
0F014C26 mov esi,ntvdm.0F001EC8 bms
0F014C44 mov esi,ntvdm.0F001EB4 extended memory
0F014C63 mov esi,ntvdm.0F001EAC cksum
0F014DBE mov esi,ntvdm.0F00212C \ntio.sys
0F014DD8 mov esi,ntvdm.0F00211C \ntio804.sys
0F014DEE mov esi,ntvdm.0F00210C \ntio412.sys
0F014E04 mov esi,ntvdm.0F0020FC \ntio411.sys
0F014E1A mov esi,ntvdm.0F0020EC \ntio404.sys
0F014E53 mov esi,ntvdm.0F0034C8 \ntdos.sys
0F014E6E mov esi,ntvdm.0F0034B8 \ntdos804.sys
0F014E84 mov esi,ntvdm.0F0034A8 \ntdos412.sys
0F014E9A mov esi,ntvdm.0F003498 \ntdos411.sys
0F014EB0 mov esi,ntvdm.0F003488 \ntdos404.sys
0F014F90 push ntvdm.0F0015C0 \
0F0150FE mov ebx,ntvdm.0F002A08 d:\xpsp\base\mvdm\softpc.new\host\src\nt_hosts.c
0F0153C6 push ntvdm.0F002A08 d:\xpsp\base\mvdm\softpc.new\host\src\nt_hosts.c
0F015400 push ntvdm.0F002A08 d:\xpsp\base\mvdm\softpc.new\host\src\nt_hosts.c
0F015446 push ntvdm.0F002A44 CONIN$
0F015466 push ntvdm.0F002A08 d:\xpsp\base\mvdm\softpc.new\host\src\nt_hosts.c
0F0154A8 push ntvdm.0F002A3C CONOUT$
0F0154CE push ntvdm.0F002A08 d:\xpsp\base\mvdm\softpc.new\host\src\nt_hosts.c
0F0155B0 mov eax,ntvdm.0F06497C WbWWb
0F015780 push ntvdm.0F0036EC Software\Microsoft\Windows\CurrentVersion\Setup
0F0157BD push ntvdm.0F0036E4 BootDir
0F0158C4 mov edi,ntvdm.0F003ACC 00000409
0F0158DB push ntvdm.0F003ABC DosKeybCodes
0F0158E0 push ntvdm.0F003A88 System\CurrentControlSet\Control\Keyboard Layout\
0F0158EB push ntvdm.0F003A80 %s%s
0F01598C push ntvdm.0F003A74 DosKeybIDs
0F015991 push ntvdm.0F003A88 System\CurrentControlSet\Control\Keyboard Layout\
0F01599C push ntvdm.0F003A80 %s%s
0F015A3F push ntvdm.0F0660E0 US
0F015AB2 push ntvdm.0F003A68 \KB16.COM
0F015AC4 push ntvdm.0F003A80 %s%s
0F015BD2 push ntvdm.0F003A5C %s,%d,%s
0F015BFB mov esi,ntvdm.0F003A54 /id:
0F015EB6 mov esi,ntvdm.0F0037C4 COMSPEC=
0F0161C2 push ntvdm.0F003628 PIPE
0F018D1A mov edi,ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F01924E push ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F0192C9 push ntvdm.0F065FF0 %SystemRoot%
0F019433 push ntvdm.0F001FB8 d:\xpsp\base\mvdm\softpc.new\host\src\nt_timer.c
0F01945F push ntvdm.0F001FB8 d:\xpsp\base\mvdm\softpc.new\host\src\nt_timer.c
0F01963E push ntvdm.0F003750 dem: not enough memory for BDS\n
0F0196E9 push ntvdm.0F002410 \ega.cpi
0F019BE5 mov esi,ntvdm.0F003B20 /z
0F019D04 push ntvdm.0F003AE0 Software\Microsoft\Windows NT\CurrentVersion\WOW\Compatibility
0F019DB2 push ntvdm.0F003AD8 0x%lx
0F01A583 mov dword ptr ds:涨
0F01A723 mov esi,ntvdm.0F002058 C:\MSDOS.SYS
0F01A73D push ntvdm.0F002048 C:\IBMDOS.SYS
0F01A773 mov esi,ntvdm.0F00203C C:\IO.SYS
0F01A787 push ntvdm.0F00202C C:\IBMBIO.SYS
0F01A92D push ntvdm.0F0023CC HARDWARE\DESCRIPTION\System
0F01A95B push ntvdm.0F0023C0 Identifier
0F01A976 push ntvdm.0F0023B8 ARCx86
0F01A9ED push ntvdm.0F0023A4 ntvdm-%lx.%lx.%lx
0F01AA22 push ntvdm.0F002380 Hidden Console of WOW VDM - %lx.%lx
0F01AB72 push ntvdm.0F002378 ntvdm.
0F01ADB0 push ntvdm.0F002364 ConsoleWindowClass
0F01B081 push ntvdm.0F0021FC (%d)
0F01B721 mov eax,ntvdm.0F06522C \
0F01B750 mov eax,ntvdm.0F065230 config.nt
0F01B757 mov eax,ntvdm.0F06523C autoexec.nt
0F01BC78 push ntvdm.0F001674 mscoree.dll
0F01BC87 push ntvdm.0F001664 CorExitProcess
0F01BE4F mov esi,ntvdm.0F0019CC <program name unknown>
0F01BE94 push ntvdm.0F0019C8 ...
0F01BEDE mov esi,ntvdm.0F0019AC Runtime Error!\n\nProgram:
0F01BF20 mov esi,ntvdm.0F0019A8 \n\n
0F01BF55 push ntvdm.0F001980 Microsoft Visual C++ Runtime Library
0F01CBB6 push ntvdm.0F001A48 user32.dll
0F01CBD1 push ntvdm.0F001A3C MessageBoxA
0F01CBE2 push ntvdm.0F001A2C GetActiveWindow
0F01CBEA push ntvdm.0F001A18 GetLastActivePopup
0F01CC05 push ntvdm.0F0019FC GetUserObjectInformationA
0F01CC16 push ntvdm.0F0019E4 GetProcessWindowStation
0F02CD39 push ntvdm.0F001F00 BIOS keyboard buffer overflow
0F02CEBD push ntvdm.0F001F20 hardware keyboard buffer overflow
0F02E4B7 push ntvdm.0F0642E8 ISMMC
0F032EAB push ntvdm.0F0020A4 Failed to release VDD memory\n
0F03367A mov esi,ntvdm.0F00215C VJOY.DLL
0F033F84 mov edi,ntvdm.0F00218C Default
0F0341D9 mov esi,ntvdm.0F002194 %s
0F034317 mov esi,ntvdm.0F002198
0F034708 mov esi,ntvdm.0F00219C \n
0F03486D mov esi,ntvdm.0F064A00 .
0F034941 mov esi,ntvdm.0F064A00 .
0F034CCF mov esi,ntvdm.0F0021A8 \
0F0358DF push ntvdm.0F0021BC d:\xpsp\base\mvdm\softpc.new\host\src\nt_com.c
0F035D3A push ntvdm.0F002298 Software\Microsoft\Windows NT\CurrentVersion\WOW\Console
0F035D68 push ntvdm.0F002288 ForceRefresh
0F035DB5 push ntvdm.0F0022D4 SYSTEM\CurrentControlSet\Control\WOW
0F035F01 push ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F035F32 push ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F0361CC push ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F0363CF push ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F03642F mov ebx,ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F0365A7 mov ebx,ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F03673A push ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F03680B push ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F03685F push ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F0369BB mov ebx,ntvdm.0F00241C d:\xpsp\base\mvdm\softpc.new\host\src\nt_fulsc.c
0F036B01 push ntvdm.0F002450 \
0F037A04 mov dword ptr ds:jDh
0F039B68 mov esi,ntvdm.0F00247C Drive %c:
0F03A0F9 push ntvdm.0F002488 Unknown Media\n
0F03A385 push ntvdm.0F002500 Format Error, code = %lx\n
0F03A476 push ntvdm.0F0024E8 Read Error, code = %lx\n
0F03A553 push ntvdm.0F0024CC Write Error, code = %lx\n
0F03A626 push ntvdm.0F002498 Incompatible DOS diskette, C H R N = %d %d %d %d\n
0F03B9AA mov ebx,ntvdm.0F00253C d:\xpsp\base\mvdm\softpc.new\host\src\nt_event.c
0F03BB7F push ntvdm.0F00253C d:\xpsp\base\mvdm\softpc.new\host\src\nt_event.c
0F03BDA5 push ntvdm.0F002570 Undocumented event from console\n
0F03BE72 push ntvdm.0F00253C d:\xpsp\base\mvdm\softpc.new\host\src\nt_event.c
0F03BE88 push ntvdm.0F00253C d:\xpsp\base\mvdm\softpc.new\host\src\nt_event.c
0F03BF59 push ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F03C4EF mov edi,ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F03C509 mov edi,ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F03C708 push ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F03C759 push ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F03CAB4 push ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F03CB2B push ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F03CB8D push ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F03CBDE push ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F03CC31 push ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F03CDA5 push ntvdm.0F002604 d:\xpsp\base\mvdm\softpc.new\host\src\nt_det.c
0F03D388 push ntvdm.0F0026DC NTVDM:BOP_DBGBREAKPOINT\n
0F03D449 push ntvdm.0F002828 VDMREDIR
0F03D466 push ntvdm.0F00281C VrDispatch
0F03D47B push ntvdm.0F00280C VrInitialized
0F03D495 push ntvdm.0F0027FC VrReadNamedPipe
0F03D4AF push ntvdm.0F0027E8 VrWriteNamedPipe
0F03D4C5 push ntvdm.0F0027D4 VrIsNamedPipeName
0F03D4DB push ntvdm.0F0027C0 VrIsNamedPipeHandle
0F03D4F1 push ntvdm.0F0027A8 VrAddOpenNamedPipeInfo
0F03D507 push ntvdm.0F00278C VrConvertLocalNtPipeName
0F03D51D push ntvdm.0F002770 VrRemoveOpenNamedPipeInfo
0F03D84C push ntvdm.0F0029F0 WINMM.DLL
0F03D86D push ntvdm.0F0029DC waveOutSetVolume
0F03D875 push ntvdm.0F0029C8 waveOutGetVolume
0F03D887 push ntvdm.0F0029B4 waveOutGetNumDevs
0F03D899 push ntvdm.0F0029A0 waveOutGetDevCapsA
0F03D8AB push ntvdm.0F002994 waveOutOpen
0F03D8BD push ntvdm.0F002984 waveOutPause
0F03D8CF push ntvdm.0F002974 waveOutRestart
0F03D8E1 push ntvdm.0F002964 waveOutReset
0F03D8F3 push ntvdm.0F002954 waveOutClose
0F03D905 push ntvdm.0F002940 waveOutGetPosition
0F03D917 push ntvdm.0F002930 waveOutWrite
0F03D929 push ntvdm.0F002918 waveOutPrepareHeader
0F03D93B push ntvdm.0F002900 waveOutUnprepareHeader
0F03D94D push ntvdm.0F0028EC midiOutSetVolume
0F03D95F push ntvdm.0F0028D8 midiOutGetVolume
0F03D971 push ntvdm.0F0028C4 midiOutGetNumDevs
0F03D983 push ntvdm.0F0028B0 midiOutGetDevCapsA
0F03D995 push ntvdm.0F0028A4 midiOutOpen
0F03D9A7 push ntvdm.0F002894 midiOutReset
0F03D9B9 push ntvdm.0F002884 midiOutClose
0F03D9CB push ntvdm.0F002874 midiOutLongMsg
0F03D9DD push ntvdm.0F002864 midiOutShortMsg
0F03D9EF push ntvdm.0F00284C midiOutPrepareHeader
0F03DA01 push ntvdm.0F002834 midiOutUnprepareHeader
0F03DF39 mov esi,ntvdm.0F0029FC VSB:
0F03DFBE mov esi,ntvdm.0F001690 \n\n
0F03E2E1 mov ebx,ntvdm.0F002A04 %x
0F03E54B push ntvdm.0F002A4C NtDeviceIoControlFile failed %x\n
0F03E962 push ntvdm.0F002A70 d:\xpsp\base\mvdm\softpc.new\host\src\nt_sec.c
0F03E9B0 push ntvdm.0F002A70 d:\xpsp\base\mvdm\softpc.new\host\src\nt_sec.c
0F041C25 push ntvdm.0F002BC4 VSB: ADLIB/FM mode\n
0F041C2C push ntvdm.0F002BB0 VSB: MIXER mode\n
0F041C33 push ntvdm.0F002BA0 VSB: MIDI mode\n
0F041C3A push ntvdm.0F002B80 VSB: HIGH SPEED AUTO-INIT mode\n
0F041C41 push ntvdm.0F002B68 VSB: AUTO-INIT mode\n
0F041C48 push ntvdm.0F002B44 VSB: HIGH SPEED SINGLE CYCLE mode\n
0F041C4F push ntvdm.0F002B2C VSB: SINGLE CYCLE mode\n
0F044937 push ntvdm.0F065A88 NtVdm : Using Yoda on an x86 may be hazardous to your systems' health\n
0F044D35 push ntvdm.0F002C6C NTVDMD.DLL
0F044D51 push ntvdm.0F002D3C xxxDbgInit
0F044D59 push ntvdm.0F002D28 xxxDbgIsDebuggee
0F044D66 push ntvdm.0F002D14 xxxDbgDosAppStart
0F044D73 push ntvdm.0F002D00 xxxDbgSegmentNotice
0F044D80 push ntvdm.0F002CEC xxxDbgTraceEvent
0F044D8D push ntvdm.0F002CE0 xxxDbgFault
0F044D9A push ntvdm.0F002CD4 xxxDbgBPInt
0F044DA7 push ntvdm.0F002CC4 xxxDbgTraceInt
0F044DB4 push ntvdm.0F002CB0 xxxDbgNotifyNewTask
0F044DC1 push ntvdm.0F002C90 xxxDbgNotifyRemoteThreadAddress
0F044DCE push ntvdm.0F002C78 xxxDbgNotifyDebugged
0F044F62 push ntvdm.0F003510 demDosDispCall %s\n\tAX=%.4x BX=%.4x CX=%.4x DX=%.4x DI=%.4x SI=%.4x\n
0F044FB7 push ntvdm.0F0034D4 \tCS=%.4x IP=%.4x DS=%.4x ES=%.4x SS=%.4x SP=%.4x BP=%.4x\n
0F0450BA mov edx,ntvdm.0F002198
0F04516E push ntvdm.0F00361C config.nt
0F04542A push ntvdm.0F003630 VDM
0F0455D1 push ntvdm.0F003648 \DEV\
0F0455EC push ntvdm.0F00363C %c:%sNUL
0F0456D3 push ntvdm.0F0015BC \
0F0456DF push ntvdm.0F065CB0 \
0F0457CA push ntvdm.0F0015BC \
0F0459AA push ntvdm.0F003668 \Device
0F045A31 push ntvdm.0F003678 .
0F045A56 push ntvdm.0F003670 .
0F045C6B push ntvdm.0F00367C N
0F046886 push ntvdm.0F0036CC \
0F046892 push ntvdm.0F0036B8 \
0F04689E push ntvdm.0F0036AC \
0F0468AA push ntvdm.0F0036A4 :
0F047F2A mov esi,ntvdm.0F065CFC ?:\
0F047F71 push ntvdm.0F065D00 =?:
0F047FCC push ntvdm.0F065D04 ?:\
0F047FF3 push ntvdm.0F065D04 ?:\
0F0480C3 mov edi,ntvdm.0F065D08 =?:
0F048312 mov edi,ntvdm.0F065D0C =?:\
0F0483D4 push ntvdm.0F065D14 =?:
0F04859F mov esi,ntvdm.0F0015BC \
0F0494E6 mov dword ptr ss:TEMP
0F0494F0 mov dword ptr ss:TMP
0F04A64C push ntvdm.0F00371C Unimplemented SVC %d\n
0F04A777 push ntvdm.0F003734 Invalid Boot Sector Found\n
0F04AF01 push ntvdm.0F003770 %c:\
0F04AF4E push ntvdm.0F003770 %c:\
0F04C3E9 mov esi,ntvdm.0F002534 \\.\?:
0F04C679 push ntvdm.0F003780 Software\Microsoft\Windows NT\CurrentVersion\WOW\CmdLine
0F04C69A push ntvdm.0F003778 NoSpace
0F04C9DE mov esi,ntvdm.0F0037D4 Command Prompt
0F04CA58 mov esi,ntvdm.0F0037D0 -
0F04CABF mov esi,ntvdm.0F003940 \temp
0F04CAE6 push ntvdm.0F065F54 Software\Microsoft\Windows NT\CurrentVersion\Terminal Server
0F04CB0E push ntvdm.0F065F94 RootDrive
0F04CB3E mov eax,ntvdm.0F003934 SystemRoot
0F04CB45 mov eax,ntvdm.0F003928 SystemDrive
0F04CB8F mov dword ptr ss:,ntemp
0F04CCC8 push ntvdm.0F065F30 Userenv.dll
0F04CE11 push ntvdm.0F00394C Temp
0F04CE5E push ntvdm.0F003948 Tmp
0F04D113 push ntvdm.0F065F28 windir
0F04D27A push ntvdm.0F003954 C
0F04D387 push ntvdm.0F0660D0 COMSPEC=
0F04DF79 push ntvdm.0F0039C4 .pif
0F04E1EF push ntvdm.0F0039C0 .
0F04E2A1 push ntvdm.0F0037F4 .EXE
0F04E2B5 push ntvdm.0F0037EC .COM
0F04E2C9 push ntvdm.0F0037E4 .BAT
0F04E32D mov esi,ntvdm.0F001690 \n\n
0F04E7B5 push ntvdm.0F003A2C SYSTEM\CurrentControlSet\Control\Wow
0F04E7EF mov edi,ntvdm.0F003A1C AlternativeKDFs
0F04E918 push ntvdm.0F003A18 JP
0F04E958 mov esi,ntvdm.0F003A0C \KEYAX.SYS
0F04E96D mov esi,ntvdm.0F003A00 \KEY01.SYS
0F04E982 mov esi,ntvdm.0F0039F4 \KEY02.SYS
0F04E9A3 mov esi,ntvdm.0F0039E8 \KEYJ31.SYS
0F04E9C6 mov esi,ntvdm.0F0039D8 \KEYBOARD.SYS
0F04EDD1 push ntvdm.0F003B24 COMSPEC
0F04EEBE push ntvdm.0F003B24 COMSPEC
0F04EEF8 mov esi,ntvdm.0F003978 /c
0F04FC37 mov eax,ntvdm.0F0021A8 \
0F05004E push ntvdm.0F003BB0 xmsFreeBlock:SAFree failed !!!!
0F0500AD push ntvdm.0F003BD0 xmsReallocBlock:SARealloc failed !!!!\n
0F0503F6 push ntvdm.0F003BF8 DPMI: Failed to set selectors %lx\n
0F050CCE push ntvdm.0F003C1C X#=%.02X, CS=%.04X IP=%.08X
0F05477F push ntvdm.0F003C38 HARDWARE\DEVICEMAP\SERIALCOMM
0F055C8A push ntvdm.0F003C58 VCDEX
0F055D5A push ntvdm.0F003C58 VCDEX
0F055D67 push ntvdm.0F003C60 VDDDispatch
0F055E5C mov edi,ntvdm.0F066450 MS-DOS
0F059A66 push ntvdm.0F004090 v7vga.rom
0F059A6D push ntvdm.0F004088 vga.rom
0F059A74 push ntvdm.0F004080 ega.rom
0F059ADC push ntvdm.0F0040A8 bios1.rom
0F059AE6 push ntvdm.0F00409C bios4.rom
0F05C1C7 push ntvdm.0F066A04 Base$
0F05D2E4 mov edi,ntvdm.0F0040C0 .spcprofile
0F05D2F2 mov eax,ntvdm.0F0040B4 profile.spc
0F05D474 push ntvdm.0F004108 d:\xpsp\base\mvdm\softpc.new\host\src\x86_emm.c
0F05D4E8 push ntvdm.0F004108 d:\xpsp\base\mvdm\softpc.new\host\src\x86_emm.c
0F05D50A push ntvdm.0F004108 d:\xpsp\base\mvdm\softpc.new\host\src\x86_emm.c
0F05D543 push ntvdm.0F004108 d:\xpsp\base\mvdm\softpc.new\host\src\x86_emm.c
0F05D587 push ntvdm.0F004108 d:\xpsp\base\mvdm\softpc.new\host\src\x86_emm.c
0F05E1BC push ntvdm.0F004138 CS:%04x IP:%04x OP:%02x %02x %02x %02x %02x
[ 本帖最后由 chadd 于 2009-9-10 22:07 编辑 ] 谢谢 已经找到解决方法
页:
[1]