device tree 那的顯示僅僅是個名字而已 ( 它們都是 _device_object ),我還是喜歡 windbg 的原汁原味:
0: kd> !
drvobj
atapi
driver object (89de2b60) is for:
\driver\atapi
driver extension list: (id , addr)
(b9f1fcd8 89dea4f8)
device object list:
89da8940 89db8940 89dc5030 89daa030
89db9030
0: kd> !devstack 89db8940
!devobj
!drvobj
!devext objectname
89be33f0 \driver\redbook 89be34a8
89be2030
\driver\cdrom 89be20e8 cdrom0
89be37b0 \driver\imapi 89be3868
89e59030 \driver\acpi 89dfd6a8 00000093
> 89db8940 \driver\atapi 89db89f8 idedevicep0t0l0-3
!devnode 89e592e0 :
deviceinst is ""
servicename is ""
0: kd> !devobj
89be2030
device object (89be2030) is for:
cdrom0 \driver\cdrom driverobject 89be5218
current irp 00000000 refcount 2 type 00000002 flags 00002050
vpb
89d6be90
devext 89be20e8 devobjext 89be2668 dope 89ddf9c8
extensionflags (0000000000)
attacheddevice (upper) 89be33f0 \driver\redbook
attachedto (lower) 89be37b0 \driver\imapi
device queue is not busy.
0: kd> dt _vpb
89d6be90
ntdll!_vpb
+0x000 type : 10
+0x002 size : 88
+0x004 flags : 1
+0x006 volumelabellength : 0x18
+0x008 deviceobject :
0x89afcda8
_device_object
+0x00c realdevice : 0x89be2030 _device_object
+0x010 serialnumber : 0x3b6761ae
+0x014 referencecount : 3
+0x018 volumelabel : [32] 0x39
0: kd> !devobj
89afcda8
device object (89afcda8) is for:
\filesystem\cdfs driverobject 89a5a298
current irp 00000000 refcount 0 type 00000003 flags 00000000
devext 89afce60 devobjext 89afcfd0
extensionflags (0000000000)
attacheddevice (upper) 89a3e2a0 \filesystem\sfilter
device queue is not busy.
0: kd> !devstack
89afcda8
!devobj !
drvobj
!devext objectname
89655c98 \driver\symevent 89655d50
89a3e2a0 \filesystem\sfilter89a3e358
> 89afcda8 \filesystem\cdfs 89afce60
Windbg斷點命令
windbg斷點命令 1 bu bp bm設定軟體斷點 a bp設定位址關聯的斷點 b bu設定符號關聯的斷點 c bm支援設定含萬用字元的斷點,可以一次建立乙個或多個bu或bp bm d 斷點 bp和bu的主要區別 a bp所設斷點和位址關聯,如果模組把該位址的指令移到其它地方,斷點不會隨之移動,...
Windbg斷點命令
文章 1 bu bp bm設定軟體斷點 a bp設定位址關聯的斷點 b bu設定符號關聯的斷點 c bm支援設定含萬用字元的斷點,可以一次建立乙個或多個bu或bp bm d 斷點 bp和bu的主要區別 a bp所設斷點和位址關聯,如果模組把該位址的指令移到其它地方,斷點不會隨之移動,而是依然關聯在在...
WinDBG標準命令
windbg的大多數功能是以命令方式工作的,本系列將介紹windbg的三類命令,標準命令,元命令和擴充套件命令.標準命令 標準命令用來提供適用於所有除錯目標的基本除錯功能.所有基本命令都是實現在windbg內部的,執行這些命令時不需要載入任何擴充套件模組.大多數標準命令是一兩個字元或者符號,只有ve...