作者:三封封封_391 | 来源:互联网 | 2023-09-24 07:32
rdmsr176inWindbginKernelDebuggingmodeonlocalmachinegives“rdmsr176”在本地机器内核调试模式下的Windb
"rdmsr 176" in Windbg in Kernel Debugging mode on local machine gives
“rdmsr 176”在本地机器内核调试模式下的Windbg。
msr[176] = 00000000`82c3f8d0
msr c3f8d0[176]= 00000000 ' 176
However disassembling the function at 82c3fsd0 gives nt!ZwYieldExecution+0aa30 rather than nt!KiFastCallEntry
但是在82c3fsd0上分解函数会得到nt!ZwYieldExecution + 0 aa30而非nt ! KiFastCallEntry
![WinDbg Capture](https://www.#.com/go/aHR0cHM6Ly9pLnN0YWNrLmltZ3VyLmNvbS9Nd2tTMS5wbmc=)
Is there something wrong?
有什么错了吗?
1 个解决方案