开个线程写文件(WriteFile)被阻塞了
以下是PE Explorer看到的栈回朔
ntkrnlpa.exe!KeSetEvent+0x2a1
ntkrnlpa.exe!RtlInsertElementGenericTableFullAvl+0x171
ntkrnlpa.exe!RtlCreateAcl+0x30d
ntkrnlpa.exe!KiDeliverApc+0x111
ntkrnlpa.exe!KeRemoveQueueEx+0x988
ntkrnlpa.exe!KeDelayExecutionThread+0x5cc
ntkrnlpa.exe!KeWaitForMutexObject+0x393
Ntfs.sys+0x6c940
Ntfs.sys+0x1265d
Ntfs.sys+0x98120
Ntfs.sys+0x9da4d
Ntfs.sys+0xabd53
ntkrnlpa.exe!IofCallDriver+0x64
ntkrnlpa.exe!CcMapData+0x190
halmacpi.dll!KfLowerIrql+0x61
ntkrnlpa.exe!ExAllocatePoolWithTag+0x8bb
Ntfs.sys+0x85111
ntkrnlpa.exe!MmProbeAndLockPages+0x289
ntdll.dll!KiFastSystemCallRet
kernel32.dll!WriteFile+0x4e
Test.exe+0x52f80
Test.exe+0x6127f
FileMon.dll!StartFileMon+0x181c
kernel32.dll!BaseThreadInitThunk+0x12
ntdll.dll!RtlInitializeExceptionChain+0x63
ntdll.dll!RtlInitializeExceptionChain+0x36

windbg看到的栈回朔
ntdll.dll!KiFastSystemCallRet
kernel32.dll!WriteFile+0x4e
Test.exe+0x52f80
Test.exe+0x6127f
FileMon.dll!StartFileMon+0x181c
kernel32.dll!BaseThreadInitThunk+0x12
ntdll.dll!RtlInitializeExceptionChain+0x63
ntdll.dll!RtlInitializeExceptionChain+0x36

现在只知道阻塞在了WriteFile里，其一直没有返回。
但是看这个栈回朔看不出什么问题啊！
求教.

[课程]Android-CTF解题方法汇总！