https://www.osronline.com/showthread.cfm?link=286141
1. Copy gflags.exe and gflagsui.dll to the target machine
2. Under Object Reference Tracing tick the Enable box3. In Pool Tags put: Devi4. Click OK, rebootkd> !obtrace 8d359830Object: 8d359830Image: SystemSequence (+/-) Tag Stack-------- ----- ---- --------------------------------------------------- 41d7 +1 Dflt nt!ObCreateObject+1ab nt!IoCreateDevice+17f ksecdd!DriverEntry+df nt!IopInitializeBuiltinDriver+34c nt!PnpInitializeBootStartDriver+a1 nt!IopInitializeBootDrivers+377 nt!IoInitSystem+593 nt!Phase1InitializationDiscard+d67 nt!Phase1Initialization+d nt!PspSystemThreadStartup+178
跟踪DRIVER_OBJECT计数
最新推荐文章于 2022-04-29 18:30:27 发布