为什么我在调试器中通过命令dd W32pServiceTable 显示全是?????
谢谢回答
kd> dd KeServiceDescriptorTableShadow
80553340 805021fc 00000000 0000011c 80502670
80553350 bf999280 00000000 0000029b bf999f90
80553360 00000000 00000000 00000000 00000000
80553370 00000000 00000000 00000000 00000000
80553380 805021fc 00000000 0000011c 80502670
80553390 00000000 00000000 00000000 00000000
805533a0 00000000 00000000 00000000 00000000
805533b0 00000000 00000000 00000000 00000000
kd> ln 805021fc
(805021fc) nt!KiServiceTable | (8050266c) nt!KiServiceLimit
Exact matches:
nt!KiServiceTable = <no type information>
kd> ln 80553340
(80553340) nt!KeServiceDescriptorTableShadow | (80553380) nt!KeServiceDescriptorTable
Exact matches:
nt!KeServiceDescriptorTableShadow = <no type information>
kd> ln 80553350
(80553340) nt!KeServiceDescriptorTableShadow+0x10 | (80553380) nt!KeServiceDescriptorTable
kd> ln bf999280
(bf999280) win32k!W32pServiceTable | (bf999f8c) win32k!W32pServiceLimit
Exact matches:
win32k!W32pServiceTable = <no type information>
kd> dd bf999280
bf999280 ???????? ???????? ???????? ????????
bf999290 ???????? ???????? ???????? ????????
bf9992a0 ???????? ???????? ???????? ????????
bf9992b0 ???????? ???????? ???????? ????????
bf9992c0 ???????? ???????? ???????? ????????
bf9992d0 ???????? ???????? ???????? ????????
bf9992e0 ???????? ???????? ???????? ????????
bf9992f0 ???????? ???????? ???????? ????????
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课