zoukankan      html  css  js  c++  java
  • windbg命令----!idt

    !idt扩展显示指定的中断分配表(interrupt dispatch table (IDT))中的中断服务例程(interrupt service routine (ISR))

    -a
    没有指定IDT时,会以简短的格式显示目标机上所有处理器的IDT。如果指定了-a,则显示所有IDT的ISR。  
     简短方式:
    kd> !idt
    
    Dumping IDT:
    
    37:	806e6864 hal!PicSpuriousService37
    3d:	806e7e2c hal!HalpApcInterrupt
    41:	806e7c88 hal!HalpDispatchInterrupt
    50:	806e693c hal!HalpApicRebootService
    62:	82494044 atapi!IdePortInterrupt (KINTERRUPT 82494008)
    63:	82506dd4 USBPORT!USBPORT_InterruptService (KINTERRUPT 82506d98)
    73:	824942cc SCSIPORT!ScsiPortInterrupt (KINTERRUPT 82494290)
    	         USBPORT!USBPORT_InterruptService (KINTERRUPT 82500b28)
    82:	822c1b3c atapi!IdePortInterrupt (KINTERRUPT 822c1b00)
    83:	8208f82c *** ERROR: Symbol file could not be found.  Defaulted to export symbols for vmci.sys - 
    vmci!DllUnload+0x80C (KINTERRUPT 8208f7f0)
    	         VIDEOPRT!pVideoPortInterrupt (KINTERRUPT 82099548)
    	         portcls!CKsShellRequestor::`scalar deleting destructor'+0x26 (KINTERRUPT 81f4f450)
    92:	82506844 serial!SerialCIsrSw (KINTERRUPT 82506808)
    93:	82073044 i8042prt!I8042KeyboardInterruptService (KINTERRUPT 82073008)
    a3:	82073364 i8042prt!I8042MouseInterruptService (KINTERRUPT 82073328)
    b1:	8253b85c ACPI!ACPIInterruptServiceRoutine (KINTERRUPT 8253b820)
    b4:	8248d57c NDIS!ndisMIsr (KINTERRUPT 8248d540)
    c1:	806e6ac0 hal!HalpBroadcastCallService
    d1:	806e5e54 hal!HalpClockInterrupt
    e1:	806e7048 hal!HalpIpiHandler
    e3:	806e6dac hal!HalpLocalApicErrorService
    fd:	806e75a8 hal!HalpProfileInterrupt
    fe:	806e7748 hal!HalpPerfInterrupt

    完整:(取部分显示出来)

    kd> !idt -a
    
    Dumping IDT:
    
    00:	805431a0 nt!KiTrap00
    01:	8054331c nt!KiTrap01
    02:	Task Selector = 0x0058
    03:	80543730 nt!KiTrap03
    04:	805438b0 nt!KiTrap04
    05:	80543a10 nt!KiTrap05
    06:	80543b84 nt!KiTrap06
    07:	805441fc nt!KiTrap07
    08:	Task Selector = 0x0050
    09:	80544600 nt!KiTrap09
    0a:	80544720 nt!KiTrap0A
    0b:	80544860 nt!KiTrap0B
    0c:	80544ac0 nt!KiTrap0C
    0d:	80544dac nt!KiTrap0D
    0e:	805454a8 nt!KiTrap0E
    0f:	805457e0 nt!KiTrap0F
    10:	80545900 nt!KiTrap10
    11:	80545a3c nt!KiTrap11
    12:	Task Selector = 0x00A0
    13:	80545ba4 nt!KiTrap13
    14:	805457e0 nt!KiTrap0F
    15:	805457e0 nt!KiTrap0F
    16:	805457e0 nt!KiTrap0F
    17:	805457e0 nt!KiTrap0F
    

    也可以指定中断号显示:

    kd> !idt 3
    
    Dumping IDT:
    
    03:	80543730 nt!KiTrap03






  • 相关阅读:
    nfs只能挂载为nobody的解决方法
    Mysql一些记忆
    shell中交互输入自动化
    关闭SElinux
    《Windows核心编程系列》十谈谈同步设备IO与异步设备IO之异步IO
    《Windows核心编程系列》九谈谈同步设备IO与异步设备IO之同步设备IO
    《Windows核心编程系列》八谈谈用内核对象进行线程同步
    《windows核心编程系列》七谈谈用户模式下的线程同步
    《windows核心编程系列 》六谈谈线程调度、优先级和关联性
    《windows核心编程系列》五谈谈线程基础
  • 原文地址:https://www.cnblogs.com/hgy413/p/3693351.html
Copyright © 2011-2022 走看看