为什么我在调试器中通过命令dd W32pServiceTable 显示全是?????
谢谢回答
kd> dd KeServiceDescriptorTableShadow
80553340 805021fc 00000000 0000011c 80502670
80553350 bf999280 00000000 0000029b bf999f90
80553360 00000000 00000000 00000000 00000000
80553370 00000000 00000000 00000000 00000000
80553380 805021fc 00000000 0000011c 80502670
80553390 00000000 00000000 00000000 00000000
805533a0 00000000 00000000 00000000 00000000
805533b0 00000000 00000000 00000000 00000000
kd> ln 805021fc
(805021fc) nt!KiServiceTable | (8050266c) nt!KiServiceLimit
Exact matches:
nt!KiServiceTable = <no type information>
kd> ln 80553340
(80553340) nt!KeServiceDescriptorTableShadow | (80553380) nt!KeServiceDescriptorTable
Exact matches:
nt!KeServiceDescriptorTableShadow = <no type information>
kd> ln 80553350
(80553340) nt!KeServiceDescriptorTableShadow+0x10 | (80553380) nt!KeServiceDescriptorTable
kd> ln bf999280
(bf999280) win32k!W32pServiceTable | (bf999f8c) win32k!W32pServiceLimit
Exact matches:
win32k!W32pServiceTable = <no type information>
kd> dd bf999280
bf999280 ???????? ???????? ???????? ????????
bf999290 ???????? ???????? ???????? ????????
bf9992a0 ???????? ???????? ???????? ????????
bf9992b0 ???????? ???????? ???????? ????????
bf9992c0 ???????? ???????? ???????? ????????
bf9992d0 ???????? ???????? ???????? ????????
bf9992e0 ???????? ???????? ???????? ????????
bf9992f0 ???????? ???????? ???????? ????????
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!