锘??xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>&#x4E45;&#x4E45;&#x4E45;&#x4E45;&#x4E45;&#x591C;&#x7CBE;&#x54C1;&#x7CBE;&#x54C1;&#x514D;&#x8D39;&#x5566;&#x2C;&#x4E9A;&#x6D32;&#x7EFC;&#x5408;&#x4E45;&#x4E45;&#x7EFC;&#x5408;&#x6FC0;&#x60C5;&#x4E45;&#x4E45;&#x2C;&#x4E45;&#x4E45;&#x5F71;&#x89C6;&#x7EFC;&#x5408;&#x4E9A;&#x6D32;</title><link>http://www.shnenglu.com/Alexxu/category/10098.html</link><description>娓告垙鐞嗘兂
Time is life</description><language>zh-cn</language><lastBuildDate>Thu, 21 Jan 2010 14:21:24 GMT</lastBuildDate><pubDate>Thu, 21 Jan 2010 14:21:24 GMT</pubDate><ttl>60</ttl><item><title>FS瀵勫瓨鍣ㄥ埌_TEB綰跨▼鐜鍧?/title><link>http://www.shnenglu.com/Alexxu/archive/2010/01/20/106066.html</link><dc:creator>Only Soft</dc:creator><author>Only Soft</author><pubDate>Wed, 20 Jan 2010 07:10:00 GMT</pubDate><guid>http://www.shnenglu.com/Alexxu/archive/2010/01/20/106066.html</guid><wfw:comment>http://www.shnenglu.com/Alexxu/comments/106066.html</wfw:comment><comments>http://www.shnenglu.com/Alexxu/archive/2010/01/20/106066.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.shnenglu.com/Alexxu/comments/commentRss/106066.html</wfw:commentRss><trackback:ping>http://www.shnenglu.com/Alexxu/services/trackbacks/106066.html</trackback:ping><description><![CDATA[浠嶧S瀵勫瓨鍣ㄨ幏鍙栧綋鍓嶇嚎紼婭D<br>int GetThreadId()<br>{<br>&nbsp;int ithread = 0;<br>&nbsp;_asm{<br>&nbsp;&nbsp;&nbsp; xor esi , esi<br>&nbsp;&nbsp;&nbsp; mov eax, fs:[esi+18h]&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; mov ecx, [eax+ 20h] <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; mov eax, [eax+ 24h]<br>&nbsp;&nbsp;&nbsp; mov dword ptr[ithread], eax<br>&nbsp;}<br>&nbsp;return ithread;<br>}<br>浠嶧S瀵勫瓨鍣ㄨ幏鍙栧綋鍓嶈繘紼婭D<br>int GetProcessId()<br>{<br>&nbsp;int iProcess = 0;<br>&nbsp;_asm{<br>&nbsp;&nbsp;&nbsp; xor esi , esi<br>&nbsp;&nbsp;&nbsp; mov eax, fs:[esi+18h]<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; mov ecx, [eax+ 20h] <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; mov eax, [eax+ 24h]<br>&nbsp;&nbsp;&nbsp; mov dword ptr[iProcess ],&nbsp;ecx<br>&nbsp;}<br>&nbsp;return iProcess ;<br>}<br><br>鍘熺悊錛?br>1.fs:18h 鍦板潃鎸囧悜綰跨▼鐜鍧梍TEB<br>鎵撳紑windbg鍙互璇佹槑錛?br>0:028&gt; dd fs:18h L1<br>0053:00000018&nbsp; <span style="COLOR: red">7eeb8000</span><br>0:028&gt; !teb<br>TEB at <span style="COLOR: red">7eeb8000</span><br>&nbsp;&nbsp;&nbsp; ExceptionList:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1f8ff15c<br>&nbsp;&nbsp;&nbsp; StackBase:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1f900000<br>&nbsp;&nbsp;&nbsp; StackLimit:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1f8fc000<br>&nbsp;&nbsp;&nbsp; SubSystemTib:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 00000000<br>&nbsp;&nbsp;&nbsp; FiberData:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 00001e00<br>&nbsp;&nbsp;&nbsp; ArbitraryUserPointer: 00000000<br>&nbsp;&nbsp;&nbsp; Self:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 7eeb8000<br>&nbsp;&nbsp;&nbsp; EnvironmentPointer:&nbsp;&nbsp; 00000000<br>&nbsp;&nbsp;&nbsp; ClientId:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 00001a30 . 00001408<br>&nbsp;&nbsp;&nbsp; RpcHandle:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 00000000<br>&nbsp;&nbsp;&nbsp; Tls Storage:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 133d2718<br>&nbsp;&nbsp;&nbsp; PEB Address:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 7efde000<br>&nbsp;&nbsp;&nbsp; LastErrorValue:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<br>&nbsp;&nbsp;&nbsp; LastStatusValue:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; c0000302<br>&nbsp;&nbsp;&nbsp; Count Owned Locks:&nbsp;&nbsp;&nbsp; 0<br>&nbsp;&nbsp;&nbsp; HardErrorMode:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<br><br>2. 鍦╛TEB涓壘鍒扮嚎紼婭D鍜岃繘紼婭D<br>0:028&gt; dt ntdll!_TEB<br>&nbsp;&nbsp; +0x000 NtTib&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : _NT_TIB<br>&nbsp;&nbsp; +0x01c EnvironmentPointer : Ptr32 Void<br>&nbsp;&nbsp; +0x020 ClientId&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : _CLIENT_ID<br><br>0:028&gt; dt ntdll!_CLIENT_ID<br>&nbsp;&nbsp; +0x000 UniqueProcess&nbsp;&nbsp;&nbsp; : Ptr32 Void&nbsp;&nbsp;&gt;榪涚▼ID<br>&nbsp;&nbsp; +0x004 UniqueThread&nbsp;&nbsp;&nbsp;&nbsp; : Ptr32 Void&nbsp; &gt;綰跨▼ID<br><br>褰撶劧浠嶵EB鍙堝彲浠ユ壘鍒癬PEB鐨勫湴鍧�錛屼粠_PEB閲岄潰鍙互鑾峰彇鍒版洿澶氱殑淇℃伅銆傛殏涓旀悂絎攡~
<img src ="http://www.shnenglu.com/Alexxu/aggbug/106066.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.shnenglu.com/Alexxu/" target="_blank">Only Soft</a> 2010-01-20 15:10 <a href="http://www.shnenglu.com/Alexxu/archive/2010/01/20/106066.html#Feedback" target="_blank" style="text-decoration:none;">鍙戣〃璇勮</a></div>]]></description></item><item><title>椹卞姩涓叧浜庡唴瀛樺垎閰?/title><link>http://www.shnenglu.com/Alexxu/archive/2009/11/15/101030.html</link><dc:creator>Only Soft</dc:creator><author>Only Soft</author><pubDate>Sun, 15 Nov 2009 15:57:00 GMT</pubDate><guid>http://www.shnenglu.com/Alexxu/archive/2009/11/15/101030.html</guid><wfw:comment>http://www.shnenglu.com/Alexxu/comments/101030.html</wfw:comment><comments>http://www.shnenglu.com/Alexxu/archive/2009/11/15/101030.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.shnenglu.com/Alexxu/comments/commentRss/101030.html</wfw:commentRss><trackback:ping>http://www.shnenglu.com/Alexxu/services/trackbacks/101030.html</trackback:ping><description><![CDATA[&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 鍦ㄩ┍鍔ㄤ腑鍒嗛厤鍐呭瓨錛岄�氬父浣犵殑椹卞姩浼?xì)鍚慛T VMM璇鋒眰鍐呭瓨錛岃繖鏄綘蹇呴』鍐沖畾浣犵殑鍐呭瓨鏄彲鍒嗛〉鐨勬垨鑰呴潪鍙垎欏電殑銆?br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 鍒嗛厤鍘熷垯錛氬敖閲忎嬌鐢ㄥ彲鍒嗛〉鍐呭瓨錛屼絾鏄繀欏繪敞鎰忛珮絳夌駭IRQL鎵ц涓嶅厑璁竝age fault銆傛墍浠ヤ笉鍏佽閲囩敤鍙垎欏靛唴瀛樸�傚彲浠ヤ嬌鐢≒AGED_CODE();瀹忔潵媯�(gè)鏌ャ�?br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 闈炲垎欏靛唴瀛樺湪緋葷粺涓槸涓�涓湁闄愮殑璧勬簮錛屽彇鍐充簬鎿嶄綔緋葷粺鍜岀墿鐞嗗唴瀛樺ぇ灝? (NT VMM浣跨敤涓�涓鏈夌畻娉曟潵璁＄畻闈炲垎欏靛ぇ灝忥紝榪欎釜綆楁硶浣跨敤鐗╃悊鍐呭瓨鎬繪槸浣滀負(fù)璁＄畻鍥犲瓙鏉ヨ綆椼�?<br>&nbsp;&nbsp;&nbsp;&nbsp; NT鎻愪緵濡備笅渚嬬▼鏉ュ垎閰嶅唴瀛橈細(xì)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ExAllocatePool();<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ExAllocatePoolWithQuota();<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ExAllocatePoolWithTag();<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ExAllocatePoolWithQuotaTag<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 璋冪敤浠ヤ笂渚嬬▼鍒嗛厤鍐呭瓨鏄繀欏誨埗瀹氬唴瀛樼殑綾誨瀷錛?br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NonPagedPool<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; PagedPool<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NonPagedPoolMustSuccessed.<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ......................<br><br>&nbsp;&nbsp;&nbsp; 鍏充簬闈炲垎欏靛唴瀛樼鐗囬棶棰橈細(xì)<br>&nbsp;&nbsp;&nbsp;&nbsp; 鏈潵鍒濆鍖栫殑鏃跺�欏湴鍧�閮芥槸鐩擱偦鐨勯潪鍒嗛〉姹犱細(xì)鍙樻垚紕庣墖銆傝�屼笖VMM鍦ㄦ墭澶х殑鏃跺�欎篃涓嶄繚璇佸湴鍧�鐩擱偦銆?br>&nbsp;&nbsp;&nbsp; 濡傛灉璇鋒眰鐨勫垎閰嶆垨鑰呴噴鏀懼皬鍧楀唴瀛橈紙灝忎簬涓�涓狿AGE_SIZE錛?鍙兘瀵艱嚧鐗╃悊鍐呭瓨紕庣墖鍖栥�傝繖鍥炵粰緋葷粺甯︽潵鍚勭鍚勬牱鐨勯棶棰橈紝鍖呮嫭闄嶄綆緋葷粺鎬ц兘鍜屽垎閰嶅唴瀛樺け璐ョ殑鎯呭喌銆?br>&nbsp;&nbsp;&nbsp; 瑙ｅ喅鍔炴硶浣跨敤鏃佽鍒楄〃錛屾梺瑙嗗垪琛ㄦ槸涓�涓狽T4.0寮�濮嬫彁渚涚殑涓�涓唴瀛樺垎閰嶆柟寮忥紱鍏蜂綋璇峰弬鑰僕DK docment.<br>&nbsp;&nbsp;&nbsp;&nbsp; 欏轟究鎻愪竴涓嬪唴鏍告爤錛?br>&nbsp;&nbsp;&nbsp;&nbsp; 姣忎釜鍦∟T騫沖彴鐨勭嚎紼嬫湁涓�涓敤鎴鋒爤鍦ㄧ敤鎴鋒ā寮忔墽琛岀殑鏃跺�欎嬌鐢紝涓�涓唴鏍告爤鍦ㄥ唴鏍告ā寮忔墽琛岀殑鏃跺�欎嬌鐢ㄣ�傚綋綰跨▼璇鋒眰緋葷粺鏈嶅姟鑰屽垏鎹㈠埌鍐呮牳妯″紡鐨勬椂鍊欙紝闄烽槺鏈哄埗浼?xì)鍒囨崲鏍堛�傜敤鍒嗛厤鍜岀嚎紼嬬殑鍐呮牳絀洪棿鏍堟潵瑕嗙洊鐢ㄦ埛絀洪棿鏍堛�?br>鍦∟T3.51涔嬪墠錛屽唴鏍告爤闄愬埗鍦ㄤ袱欏電殑鍐呭瓨涓�侼T4.0寮�濮嬪鍔犲埌12KB.蹇呴』瑕佽皚鎱庣殑鍦ㄦ爤涓婁嬌鐢ㄥ彉閲忎互鑺傜渷鍗犵┖闂達(dá)紝闃叉瓚呰繃闄愬埗鑰屾槸緋葷粺鍋滄銆?br><br>
<img src ="http://www.shnenglu.com/Alexxu/aggbug/101030.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.shnenglu.com/Alexxu/" target="_blank">Only Soft</a> 2009-11-15 23:57 <a href="http://www.shnenglu.com/Alexxu/archive/2009/11/15/101030.html#Feedback" target="_blank" style="text-decoration:none;">鍙戣〃璇勮</a></div>]]></description></item><item><title>windbg鍩虹綃?-window API</title><link>http://www.shnenglu.com/Alexxu/archive/2009/08/24/94232.html</link><dc:creator>Only Soft</dc:creator><author>Only Soft</author><pubDate>Mon, 24 Aug 2009 03:20:00 GMT</pubDate><guid>http://www.shnenglu.com/Alexxu/archive/2009/08/24/94232.html</guid><wfw:comment>http://www.shnenglu.com/Alexxu/comments/94232.html</wfw:comment><comments>http://www.shnenglu.com/Alexxu/archive/2009/08/24/94232.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.shnenglu.com/Alexxu/comments/commentRss/94232.html</wfw:commentRss><trackback:ping>http://www.shnenglu.com/Alexxu/services/trackbacks/94232.html</trackback:ping><description><![CDATA[User32.dll,kernel32.dll,shell32.dll,gdi32.dll,rpcrt4.dll,comctl32.dll,advapi32.dll,version.dll絳塪ll浠ｈ〃浜?jiǎn)Win32 API鐨勫熀鏈彁渚涜�咃紱<br>Win32 API涓殑鎵�鏈夎皟鐢ㄦ渶緇堥兘杞悜浜?jiǎn)ntdll.dll錛屽啀鐢卞畠杞彂鑷硁toskrnl.exe銆俷tdll.dll鏄湰鏈?API鐢ㄦ埛妯″紡鐨勭粓绔�傜湡姝ｇ殑鎺ュ彛鍦╪toskrnl.exe閲屽畬鎴愩�備簨瀹炰笂錛屽唴鏍告ā寮忕殑椹卞姩澶ч儴鍒嗘椂闂磋皟鐢ㄨ繖涓ā鍧楋紝濡傛灉瀹冧滑璇鋒眰緋葷粺鏈嶅姟銆侼tdll.dll鐨勪富瑕佷綔鐢ㄥ氨鏄鍐呮牳鍑芥暟鐨勭壒瀹氬瓙闆嗗彲浠ヨ鐢ㄦ埛妯″紡涓嬭繍琛岀殑紼嬪簭璋冪敤銆侼tdll.dll閫氳繃杞歡涓柇int 2Eh榪涘叆ntoskrnl.exe錛屽氨鏄�氳繃涓柇闂ㄥ垏鎹PU鐗規(guī)潈綰с�?br>Ntdll.dll 涓婇潰鐨勭浉鍏矨PI鍑芥暟鍘熷瀷鍜屽弬鏁伴兘娌℃湁鏂囨。鍖?Undocumented ):&nbsp; <a >http://undocumented.ntinternals.net/</a>&nbsp;榪欓噷鎻愪緵浜?jiǎn)Ntdll.dll閮ㄥ垎鏈叕寮�鍑芥暟鐨勫師鍨?<br><br>鐞嗚Вwindow API鍙?qiáng)鍑芥暟鍘熷瀷瀵规垜浠殑璋冭瘯灏嗘槸闈炲笖R噸瑕佺殑: 鍥犱負(fù)浣犳椂甯擱渶瑕佸幓瀵熺湅涓�浜涘嚱鏁扮殑鍙傛暟,鎴栬�呮牴鎹弬鏁版壘鍒版煇浜涜緭鍏ユ寚閽?<br><br>渚嬪:<br>&nbsp; 17&nbsp; Id: a84.cc4 Suspend: 1 Teb: 7ff3a000 Unfrozen<br>ChildEBP RetAddr&nbsp; Args to Child&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>187ffdb8 77845e6c 7782fc72 00001938 00000000 ntdll!KiFastSystemCallRet<br>187ffdbc 7782fc72 00001938 00000000 00000000 ntdll!NtWaitForSingleObject+0xc<br>187ffe20 7782fb56 00000000 00000000 00000000 ntdll!RtlpWaitOnCriticalSection+0x13e<br>187ffe48 01b05d13 0x77c8ba60&nbsp;81fa55ed 028766c8 ntdll!RtlEnterCriticalSection+0x150<br><br>浠庡爢鏍堝彲浠ョ湅鍑虹嚎紼?7 姝ｅ湪榪涘叆鏌愪竴涓復(fù)鐣屽尯.&nbsp; 0x77c8ba60 灝辨槸浼犲叆鐨勪復(fù)鐣屽�?鍙傛暟.<br><br>17&gt; !cs 0x77c8ba60&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; --&gt; !cs 鏄敤鏉ユ煡鐪嬩復(fù)鐣屽尯淇℃伅鐨勫懡浠?br>DebugInfo&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=&nbsp;0x77fbde20<br>Critical&nbsp;section&nbsp;&nbsp;&nbsp;=&nbsp;0x77c8ba60&nbsp;(GDI32!semColorSpaceCache+0x0)<br>LOCKED<br>LockCount&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=&nbsp;0x0<br>OwningThread&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=&nbsp;0x00000dd8<br>RecursionCount&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=&nbsp;0x1<br>LockSemaphore&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=&nbsp;0x0<br>SpinCount&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=&nbsp;0x00000000<br><br>鍙互鐪嬪埌 LOCKED 浠ｈ〃涓寸晫鍖烘槸閿佸畾鐘舵�? 鍗寵鍗犵敤.<br>OwningThread&nbsp;&nbsp;&nbsp;鍗蟲槸鍗犵敤綰跨▼.<br><br>涓寸晫鍖轟俊鎭粨鏋勫畾涔夊湪ntdll, 鍙互浣跨敤濡備笅鎸囦護(hù)榪涜瀵熺湅.<br>&gt; dt&nbsp; ntdll!_RTL_CRITICAL_SECTION<br>&nbsp;&nbsp; +0x000 DebugInfo&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Ptr32 _RTL_CRITICAL_SECTION_DEBUG<br>&nbsp;&nbsp; +0x004 LockCount&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Int4B<br>&nbsp;&nbsp; +0x008 RecursionCount&nbsp;&nbsp; : Int4B<br>&nbsp;&nbsp; +0x00c OwningThread&nbsp;&nbsp;&nbsp;&nbsp; : Ptr32 Void<br>&nbsp;&nbsp; +0x010 LockSemaphore&nbsp;&nbsp;&nbsp; : Ptr32 Void<br>&nbsp;&nbsp; +0x014 SpinCount&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Uint4B<br><br>瀵熺湅鏌愪釜鍔ㄦ�佸簱鍑芥暟琛ㄧ殑鎸囦護(hù):<br>x ntdll!*<br>x kernal!*<br><br>瀵熺湅緇撴瀯浣撳畾涔?<br>dt ntdll!*<br><br>浠諱綍鍔ㄦ�佸簱鍖呮嫭window 32鐨勭敤鎴鋒�乨ll 鍜岀敤鎴瘋嚜瀹氫箟鍔ㄦ�佸簱閮芥槸鐢熼暱鍦ㄨ繘紼嬪唴瀛樼┖闂翠笂鐨?<br>DLL 娌℃湁鑷繁鐨?縐佹湁"鍦板潃絀洪棿. 瀹冧滑鎬繪槸琚獎(jiǎng)灝勫埌搴旂敤紼嬪簭鐨勮櫄鎷熷湴鍧�絀洪棿,鍦ㄩ渶瑕佹椂鎵嶄細(xì)琚鍙栧埌鐗╃悊鍐呭瓨涓? <br>鍦ㄦ湰緋誨垪鐨勫叾瀹冪珷鑺傛垜浼?xì)璋堝埌铏氭嫙鍦板潃絀洪棿鐨勫唴瀹?<br><br>閫氳繃鎸囦護(hù)鍙互鐪嬪埌ntdll 琚槧灝勫埌77800000 ~ 7793c000鐨勫唴瀛樼┖闂翠腑.<br>&gt; x *!<br>77800000 7793c000&nbsp;&nbsp; ntdll&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (pdb symbols)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; c:\mylocalsymbols\ntdll.pdb\F0164DA71FAF4765B8F3DB4F2D7650EA2\ntdll.pdb<br><br>褰撲綘鐨勪唬鐮?綰跨▼)鏍堜腑鍑虹幇鍦板潃鑼冨洿鍦?77800000 ~7793c000&nbsp;涔嬮棿鐨勫嚱鏁拌皟鐢ㄩ兘琛ㄧず鍦╟all NTDLL.dll<br>姣斿:<br>&nbsp;&nbsp; 7&nbsp; Id: a84.c34 Suspend: 1 Teb: 7ff3f000 Unfrozen<br>ChildEBP RetAddr&nbsp; Args to Child&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>089bfe8c 77845e6c 75a0179c 00000d98 00000000 ntdll!KiFastSystemCallRet<br>089bfe90 75a0179c 00000d98 00000000 00000000 ntdll!NtWaitForSingleObject+0xc<br>089bfefc 75c9f003 00000d98 ffffffff 00000000 KERNELBASE!WaitForSingleObjectEx+0x98<br>089bff14 75c9efb2 00000d98 ffffffff 00000000 kernel32!WaitForSingleObjectExImplementation+0x75<br>089bff28 69434fea 00000d98 ffffffff 0780c178 kernel32!WaitForSingleObject+0x12<br>WARNING: Stack unwind information not available. Following frames may be wrong.<br>姝ょ嚎紼嬩腑WARNING: Stack unwind information not available. Following frames may be wrong.琛ㄧずwindbg鏃犳硶緲昏瘧鎴栬�呮壘鍒板搴攕ymbols鏉ユ樉紺篶ode stack. 榪欑閿欒寰�寰�鏄繚瀛榙ump file鏃跺嚭鐜扮殑鏌愮寮傚父淇℃伅.window涔熸病鏈夌粰鍑哄悎鐞嗙殑瑙ｉ噴.<br>浠ヤ笅鏄疢SDN鐨勫師璇?<br><span style="FONT-SIZE: 14pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: +mn-ea; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">In some cases, the stack trace function will fail in the debugger. This can be caused by a call to an invalid address that caused the debugger to lose the location of the return address; or you may have come across a stack pointer for which you cannot directly get a stack trace; or there could be some other debugger problem. In any case, being able to manually walk a stack is often valuable.<br></span><br>榪欐椂鍊欎綘闇�瑕佹墜鍔ㄧ殑榪涜鎭㈠鏍堣皟鐢? 濡傛灉浣犱簡(jiǎn)瑙ｆ瘡涓姩鎬佸簱鐨勬槧灝勫湴鍧�浣犲氨寰堝鏄撹繘琛屽垎鏋愪簡(jiǎn).<br><br>瀵熺湅鍔ㄦ�佸簱涓瘡涓嚱鏁版槧灝勭殑鍦板潃鍙互閲囩敤濡備笅鎸囦護(hù) :<br>x ntdll!<br><br><br>鎵嬪姩鎭㈠鏍堢殑澶ц嚧鍘熺悊濡備笅:<br>1. 鍒楀嚭綰跨▼鐜淇℃伅<br>&nbsp;<span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">0:000&gt; !</span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">teb</span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US"> </span>
<p style="MARGIN-TOP: 8pt; MARGIN-BOTTOM: 0pt; MARGIN-LEFT: 0.21in; VERTICAL-ALIGN: baseline; DIRECTION: ltr; TEXT-INDENT: -0.21in; LINE-HEIGHT: 18pt; unicode-bidi: embed; TEXT-ALIGN: left; language: en-US; mso-line-height-rule: exactly"><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">TEB at 7fffe000</span></p>
<p style="MARGIN-TOP: 8pt; MARGIN-BOTTOM: 0pt; MARGIN-LEFT: 0.21in; VERTICAL-ALIGN: baseline; DIRECTION: ltr; TEXT-INDENT: -0.21in; LINE-HEIGHT: 18pt; unicode-bidi: embed; TEXT-ALIGN: left; language: en-US; mso-line-height-rule: exactly"><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US"><span style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp; </span></span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">ExceptionList</span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">:<span style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>0012ff88</span></p>
<p style="MARGIN-TOP: 8pt; MARGIN-BOTTOM: 0pt; MARGIN-LEFT: 0.21in; VERTICAL-ALIGN: baseline; DIRECTION: ltr; TEXT-INDENT: -0.21in; LINE-HEIGHT: 18pt; unicode-bidi: embed; TEXT-ALIGN: left; language: en-US; mso-line-height-rule: exactly"><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US"><span style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp; </span></span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">StackBase</span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">:<span style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>00130000</span></p>
<p style="MARGIN-TOP: 8pt; MARGIN-BOTTOM: 0pt; MARGIN-LEFT: 0.21in; VERTICAL-ALIGN: baseline; DIRECTION: ltr; TEXT-INDENT: -0.21in; LINE-HEIGHT: 18pt; unicode-bidi: embed; TEXT-ALIGN: left; language: en-US; mso-line-height-rule: exactly"><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US"><span style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp; </span></span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">StackLimit</span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">:<span style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>00126000</span></p>
<p style="MARGIN-TOP: 8pt; MARGIN-BOTTOM: 0pt; MARGIN-LEFT: 0.21in; VERTICAL-ALIGN: baseline; DIRECTION: ltr; TEXT-INDENT: -0.21in; LINE-HEIGHT: 18pt; unicode-bidi: embed; TEXT-ALIGN: left; language: en-US; mso-line-height-rule: exactly"><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US"><span style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp; </span>&#8230;&#8230;&#8230;.<br></span></p>
<p style="MARGIN-TOP: 8pt; MARGIN-BOTTOM: 0pt; MARGIN-LEFT: 0.21in; VERTICAL-ALIGN: baseline; DIRECTION: ltr; TEXT-INDENT: -0.21in; LINE-HEIGHT: 18pt; unicode-bidi: embed; TEXT-ALIGN: left; language: en-US; mso-line-height-rule: exactly"><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">2. 鎵撳紑鏁翠釜綰跨▼鏍?<br>0:000&gt; </span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">dds</span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US"> 00126000 00130000</span></p>
<p style="MARGIN-TOP: 8pt; MARGIN-BOTTOM: 0pt; MARGIN-LEFT: 0.21in; VERTICAL-ALIGN: baseline; DIRECTION: ltr; TEXT-INDENT: -0.21in; LINE-HEIGHT: 18pt; unicode-bidi: embed; TEXT-ALIGN: left; language: en-US; mso-line-height-rule: exactly"><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 瀹嬩綋; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: zh-CN">3. 瀵熺湅鍐呭瓨涓墍鏈夊彲鑳芥槸鍑芥暟榪斿洖鍊?/span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">.<span style="mso-spacerun: yes">&nbsp;&nbsp;<br></span>&gt;</span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US">ln</span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 'Times New Roman'; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: en-US"></span><span style="FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY: 瀹嬩綋; mso-ascii-font-family: 'Times New Roman'; mso-fareast-font-family: 瀹嬩綋; mso-bidi-font-family: +mn-cs; mso-color-index: 1; mso-font-kerning: 12.0pt; language: zh-CN">&nbsp;address</span><br><br><br><br></p>
<img src ="http://www.shnenglu.com/Alexxu/aggbug/94232.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.shnenglu.com/Alexxu/" target="_blank">Only Soft</a> 2009-08-24 11:20 <a href="http://www.shnenglu.com/Alexxu/archive/2009/08/24/94232.html#Feedback" target="_blank" style="text-decoration:none;">鍙戣〃璇勮</a></div>]]></description></item><item><title>windbg鍩虹綃?-寮傚父涓婁笅鏂?/title><link>http://www.shnenglu.com/Alexxu/archive/2009/08/22/94085.html</link><dc:creator>Only Soft</dc:creator><author>Only Soft</author><pubDate>Sat, 22 Aug 2009 05:47:00 GMT</pubDate><guid>http://www.shnenglu.com/Alexxu/archive/2009/08/22/94085.html</guid><wfw:comment>http://www.shnenglu.com/Alexxu/comments/94085.html</wfw:comment><comments>http://www.shnenglu.com/Alexxu/archive/2009/08/22/94085.html#Feedback</comments><slash:comments>4</slash:comments><wfw:commentRss>http://www.shnenglu.com/Alexxu/comments/commentRss/94085.html</wfw:commentRss><trackback:ping>http://www.shnenglu.com/Alexxu/services/trackbacks/94085.html</trackback:ping><description><![CDATA[&nbsp;&nbsp;&nbsp;&nbsp; 鎽樿: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 鏈漢榪?騫存潵涓昏鍦ㄥ仛windbg璋冭瘯鐩稿叧鐨勫伐浣? 鏈変竴浜涘績(jī)寰楀拰浣撲細(xì). 鎴戜細(xì)閫愮墖鍐欏湪鎴慴log涓?甯屾湜瀵瑰ぇ瀹舵湁鐢?&nbsp; windbg璋冭瘯鏈�閲嶈鐨勬槸瑕佸緋葷粺鐨勬柟鏂歸潰闈㈡湁姣旇緝娣卞叆鐨勪簡(jiǎn)瑙? 鍙湁浜?jiǎn)瑙ｄ簡(jiǎn)绯痪l熷伐浣滃師鐞嗘墠鑳藉欏鴻棨鎽哥摐.&nbsp; 涓�姝ユ灞曞紑綰跨儲(chǔ).&nbsp;&nbsp; windbg鍩虹綃?..&nbsp;&nbsp;<a href='http://www.shnenglu.com/Alexxu/archive/2009/08/22/94085.html'>闃呰鍏ㄦ枃</a><img src ="http://www.shnenglu.com/Alexxu/aggbug/94085.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.shnenglu.com/Alexxu/" target="_blank">Only Soft</a> 2009-08-22 13:47 <a href="http://www.shnenglu.com/Alexxu/archive/2009/08/22/94085.html#Feedback" target="_blank" style="text-decoration:none;">鍙戣〃璇勮</a></div>]]></description></item></channel></rss>                                             <footer>
<div class="friendship-link">
<p>感谢您访问我们的网站，您可能还对以下资源感兴趣：</p>
<a href="http://www.shnenglu.com/" title="&#31934;&#21697;&#35270;&#39057;&#20037;&#20037;&#20037;&#20037;">&#31934;&#21697;&#35270;&#39057;&#20037;&#20037;&#20037;&#20037;</a>

<div class="friend-links">


</div>
</div>

</footer>

<a href="http://www.cq81.cn" target="_blank">久久婷婷人人澡人人爽人人爱</a>|
<a href="http://www.yangyongfu.com.cn" target="_blank">久久精品视频91</a>|
<a href="http://www.96papa.cn" target="_blank">久久久精品视频免费观看</a>|
<a href="http://www.tpjqrj.cn" target="_blank">一本伊大人香蕉久久网手机</a>|
<a href="http://www.jandown.cn" target="_blank">久久久久国产亚洲AV麻豆</a>|
<a href="http://www.luben8151998.cn" target="_blank">精品熟女少妇aⅴ免费久久</a>|
<a href="http://www.nbbook.com.cn" target="_blank">中文无码久久精品</a>|
<a href="http://www.midea-com.cn" target="_blank">久久久国产精品</a>|
<a href="http://www.0769zc.net.cn" target="_blank">99久久这里只精品国产免费</a>|
<a href="http://www.ixibai.cn" target="_blank">久久精品国产99国产精品澳门</a>|
<a href="http://www.zdjbc1.cn" target="_blank">一本色道久久88综合日韩精品
</a>|
<a href="http://www.hxstone.com.cn" target="_blank">曰曰摸天天摸人人看久久久</a>|
<a href="http://www.pudlv.cn" target="_blank">国产激情久久久久影院老熟女免费</a>|
<a href="http://www.0592xxw.cn" target="_blank">久久人人爽人人爽人人av东京热</a>|
<a href="http://www.liuxuehanguo.cn" target="_blank">99久久精品国产一区二区
</a>|
<a href="http://www.g549.cn" target="_blank">亚洲人成无码www久久久</a>|
<a href="http://www.qhylhsk.cn" target="_blank">久久精品国产AV一区二区三区</a>|
<a href="http://www.leftbank-cn.cn" target="_blank">精品久久久久久久久午夜福利</a>|
<a href="http://www.thha.cn" target="_blank">综合网日日天干夜夜久久</a>|
<a href="http://www.newlifefitness.cn" target="_blank">久久婷婷国产麻豆91天堂</a>|
<a href="http://www.vkbx.cn" target="_blank">久久亚洲综合色一区二区三区</a>|
<a href="http://www.hgrnoko.cn" target="_blank">欧美性猛交xxxx免费看久久久</a>|
<a href="http://www.94byq.cn" target="_blank">久久精品国内一区二区三区</a>|
<a href="http://www.05xx.cn" target="_blank">2021国内久久精品</a>|
<a href="http://www.xhc9jinmutongsm.cn" target="_blank">成人国内精品久久久久影院VR</a>|
<a href="http://www.xbvz.cn" target="_blank">亚洲av日韩精品久久久久久a</a>|
<a href="http://www.jyyyzxw.cn" target="_blank">久久久国产99久久国产一</a>|
<a href="http://www.gzsaikou.cn" target="_blank">精品国产青草久久久久福利</a>|
<a href="http://www.jnxfhb.cn" target="_blank">中文无码久久精品</a>|
<a href="http://www.love2coffe.cn" target="_blank">色妞色综合久久夜夜</a>|
<a href="http://www.smmz.com.cn" target="_blank">婷婷久久综合</a>|
<a href="http://www.qiaochaohuagong.cn" target="_blank">久久av高潮av无码av喷吹</a>|
<a href="http://www.17art.com.cn" target="_blank">久久99精品国产99久久6男男</a>|
<a href="http://www.aisile.com.cn" target="_blank">青青草原精品99久久精品66</a>|
<a href="http://www.wyj325.cn" target="_blank">粉嫩小泬无遮挡久久久久久</a>|
<a href="http://www.baizen.cn" target="_blank">欧美精品国产综合久久</a>|
<a href="http://www.227s.cn" target="_blank">区亚洲欧美一级久久精品亚洲精品成人网久久久久
</a>|
<a href="http://www.a737.cn" target="_blank">国产成人无码精品久久久性色</a>|
<a href="http://www.port1.com.cn" target="_blank">国产一区二区精品久久凹凸</a>|
<a href="http://www.s1307.cn" target="_blank">夜夜亚洲天天久久</a>|
<a href="http://www.h21jc.cn" target="_blank"> 久久综合狠狠综合久久激情 
</a>|
<script>
(function(){
    var bp = document.createElement('script');
    var curProtocol = window.location.protocol.split(':')[0];
    if (curProtocol === 'https') {
        bp.src = 'https://zz.bdstatic.com/linksubmit/push.js';
    }
    else {
        bp.src = 'http://push.zhanzhang.baidu.com/push.js';
    }
    var s = document.getElementsByTagName("script")[0];
    s.parentNode.insertBefore(bp, s);
})();
</script>
</body>