约有 6 项符合查询结果， 以下是第 1 - 1项。
费时 < 1 秒。
fullUniName = ExAllocatePool( PagedPool, MAXPATHLEN*sizeof(WCHAR)+2*sizeof(ULONG)); if( !fullUniName ) ...
Posted in Windows内核调试
by
lxy_xian
on 2009-07-01
1: kd> r eax=bad0b0b0 ebx=00000000 ecx=00000810 edx=206b6444 esi=e1339008 edi=e5573690 eip=8058b5bc esp=a936ac10 ebp=a936acc4 iopl=0 nv up ei pl zr na pe nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246 nt!ObQueryNameString+0x9b: 8058b5bc 8b88a4000000 mov ecx,dword ptr [eax+0A4h] ds:0023:bad0b154=???????? ...
Posted in Windows内核调试
by
lxy_xian
on 2009-07-01
多谢 benlong了,倒不是上面所说的原因,
现在的寄存器
1: kd> r
eax=bad0b0b0 ebx=00000000 ecx=00000810 edx=206b6444 esi=e1339008 edi=e5573690
eip=8058b5bc esp=a936ac10 ebp=a936acc4 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!ObQueryNameString+0x9b:
8058b5bc 8b88a4000000 mov ...
Posted in Windows内核调试
by
lxy_xian
on 2009-07-01