首页
社区
课程
招聘
[求助]windbg的IDT命令不显示ISR函数
2022-7-10 15:09 3958

[求助]windbg的IDT命令不显示ISR函数

2022-7-10 15:09
3958

最近在学习相关IDT的知识,本机WIN10,宿主机WIN7_X86。

 

重新做的系统,双机调试挂上后,用!IDT命令查看,显示的是

 

2: kd> !idt

 

Dumping IDT: 8e71e000

 

d856640800000030: 8472f4a0 nt!KiUnexpectedInterrupt0Shadow
d856640800000031: 8472f4b0 nt!KiUnexpectedInterrupt1Shadow
d856640800000032: 8472f4c0 nt!KiUnexpectedInterrupt2Shadow
d856640800000033: 8472f4d0 nt!KiUnexpectedInterrupt3Shadow
d856640800000034: 8472f4e0 nt!KiUnexpectedInterrupt4Shadow
d856640800000035: 8472f4f0 nt!KiUnexpectedInterrupt5Shadow
d856640800000036: 8472f500 nt!KiUnexpectedInterrupt6Shadow
d856640800000037: 8472f510 nt!KiUnexpectedInterrupt7Shadow
d856640800000038: 8472f520 nt!KiUnexpectedInterrupt8Shadow
d856640800000039: 8472f530 nt!KiUnexpectedInterrupt9Shadow
d85664080000003a: 8472f540 nt!KiUnexpectedInterrupt10Shadow

 

竟然不显示ISR函数

 

正常应该显示的是

 

37: 806e6864 hal!PicSpuriousService37
3d: 806e7e2c hal!HalpApcInterrupt
41: 806e7c88 hal!HalpDispatchInterrupt
50: 806e693c hal!HalpApicRebootService
62: 82494044 atapi!IdePortInterrupt (KINTERRUPT 82494008)
63: 82506dd4 USBPORT!USBPORT_InterruptService (KINTERRUPT 82506d98)
73: 824942cc SCSIPORT!ScsiPortInterrupt (KINTERRUPT 82494290

 

请问这个怎么处理,困扰两天了


[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法

收藏
点赞2
打赏
分享
最新回复 (0)
游客
登录 | 注册 方可回帖
返回