约有 17 项符合查询结果， 以下是第 2 - 2项。
费时 < 1 秒。
汗,昨天看错了.把 Raymond 大叔看成wy了.
感谢Raymond大叔的热心帮助,我明白不少~~
嘿嘿~~
Posted in Windows内核调试
by
sudami
on 2008-10-06
Driver object (81797808) is for:
\FileSystem\Ntfs
DriverEntry: f97a8184 Ntfs!GsDriverEntry
DriverStartIo: 00000000
DriverUnload: 00000000
AddDevice: 00000000
Dispatch routines:
[00] IRP_MJ_CREATE f9748c01 Ntfs!NtfsFsdCreate
[01] IRP_MJ_CREATE_NAMED_PIPE 804f43f8 nt!IopInvalidDeviceRequest
[02] ...
Posted in Windows内核调试
by
sudami
on 2008-10-05
如何利用 windbg+vm 动态跟踪NtDeleteFile函数执行的全过程,各位同学,请指点一二,谢谢啦~~
Posted in Windows内核调试
by
sudami
on 2008-10-04