-
-
[求助][求助]为什么windbg在以big-endian方式显示数据?
-
发表于:
2012-12-28 15:23
3917
-
[求助][求助]为什么windbg在以big-endian方式显示数据?
为什么我的windbg会以big-endian显示数据?。。。
我的CPU是Intel i5 绝对是 little-endian的
刚才发现,有时候以 big-endian 显示,有时候以 little-endian 显示,诡异啊
windbg: 6.2.9200.16384 AMD64
host: windows 7 64位
virtualmachine: windows 7 32bit
kd> r
eax=0000010b ebx=0000010b ecx=00000006 edx=82a976a7 esi=94ac7734 edi=94ac76a4
eip=828781ab esp=94ac76a4 ebp=94ac76bc iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000206
nt!KiFastCallEntry+0xeb:
828781ab 3b351c479a82 cmp esi,dword ptr [nt!MmUserProbeAddress (829a471c)] ds:0023:829a471c=0000ff7f
kd> db 829a471c
829a471c 00 00 ff 7f 00 10 74 80-ef ff 03 00 78 ff 3f c0 ......t.....x.?.
829a472c f8 1f 60 c0 00 00 00 00-01 00 00 00 02 00 00 00 ..`.............
829a473c 01 00 00 00 00 00 00 00-02 00 00 00 00 00 00 00 ................
829a474c 01 00 00 00 02 00 00 00-01 00 00 00 00 00 00 00 ................
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课