• windbg学习24(!idt)


    !idt显示指定的中断分配表(interrupt dispatch table (IDT))中的中断服务例程(interrupt service routine (ISR))

    最典型的自陷int 2e,其中断表使用的是:

    lkd> !idt 2e
    
    Dumping IDT:
    
    2e:	82c8369e nt!KiSystemService

    如不指定IDT,会简短的显示目标机中所有处理器的IDT:

    lkd> !idt
    
    Dumping IDT:
    
    37:	82c29104 hal!PicSpuriousService37
    51:	85e672d8 ataport!IdePortInterrupt (KINTERRUPT 85e67280)
    	         ataport!IdePortInterrupt (KINTERRUPT 85e67000)
    80:	869412d8 ndis!ndisMiniportMessageIsr (KINTERRUPT 86941280)
    82:	86941cd8 9517ef00 (KINTERRUPT 86941c80)
    90:	85e67558 pci!ExpressRootPortMessageRoutine (KINTERRUPT 85e67500)
    91:	86fc4cd8 9460749a (KINTERRUPT 86fc4c80)
    92:	86941a58 9519b486 (KINTERRUPT 86941a00)
    	         951b67ab (KINTERRUPT 86941780)
    	         9509dd47 (KINTERRUPT 86fc4a00)
    a0:	85e677d8 pci!ExpressRootPortMessageRoutine (KINTERRUPT 85e67780)
    a2:	86941558 9517ef00 (KINTERRUPT 86941500)
    b0:	85e67a58 pci!ExpressRootPortMessageRoutine (KINTERRUPT 85e67a00)
    b1:	85e67cd8 ACPI!ACPIInterruptServiceRoutine (KINTERRUPT 85e67c80)
    b2:	86941058 951b67ab (KINTERRUPT 86941000)
    c1:	82c293f4 hal!HalpBroadcastCallService
    d1:	82c11634 hal!HalpHpetClockInterrupt
    d2:	82c11898 hal!HalpHpetRolloverInterrupt
    df:	82c291dc hal!HalpApicRebootService
    e1:	82c29958 hal!HalpIpiHandler
    e3:	82c296f8 hal!HalpLocalApicErrorService
    fd:	82c29f2c hal!HalpProfileInterrupt
    fe:	82c2a1a8 hal!HalpPerfInterrupt

    如果指定了-a,则显示所有IDT的ISR

    lkd> !idt -a
    
    Dumping IDT:
    
    00:	82c84670 nt!KiTrap00
    01:	82c84800 nt!KiTrap01
    02:	Task Selector = 0x0058
    03:	82c46ffb nt!_imp__VidBitBlt <PERF> (nt+0xffb)
    04:	82c84df8 nt!KiTrap04
    05:	82c84f58 nt!KiTrap05
    06:	82c850cc nt!KiTrap06
    07:	82c856c8 nt!KiTrap07
    08:	Task Selector = 0x0050
    09:	82c85b28 nt!KiTrap09
    0a:	82c85c4c nt!KiTrap0A
    0b:	82c85d8c nt!KiTrap0B
    0c:	82c85fec nt!KiTrap0C
    0d:	82c862dc nt!KiTrap0D
    0e:	82c869ac nt!KiTrap0E
    0f:	82c86d60 nt!KiTrap0F
    10:	82c86e84 nt!KiTrap10
    11:	82c86fc4 nt!KiTrap11
    12:	Task Selector = 0x00A0

  • 相关阅读:
    mysql事件之修改事件(ALTER EVENT)&禁用事件(DISABLE)&启用事件(ENABLE)&事件重命名&数据库事件迁移
    用Sqoop进行Hive和MySQL之间的数据互导
    Sqoop使用手册
    azkaban使用案例
    azkaban3.x安装
    工作流调度器azkaban概述
    将 Hive 空值统一为 N
    [模拟] [洛谷] P1765 手机
    [NYISTOJ] 题目845 无主之地1
    [NYISTOJ] 题目 458 小光棍数
  • 原文地址:https://www.cnblogs.com/hgy413/p/3693428.html
Copyright © 2020-2023  润新知