Question

I have a setup in which host is win8 and guest on virtual machine is also win8. 
Running windbg on host and debuggin guest on virtual machine throgh pipe. 
          Now i want to analyse how a device stack is built internally for a keboard. 
 For this when i run 

 "!drvobj kbdclass"

 on windbg it doesnt show up any keyboard device object in guest,Below is the output     
 what i get

 kd> !drvobj kbdclass
 Driver object (862357d0) is for:
 \Driver\kbdclass
 Driver Extension List: (id , addr)

 Device Object list:
 862480e8

Answer 1

plz，使用！devstack扩展命令。

ex）！devstack 862480e8

！devstack

！devstack扩展显示与设备对象关联的设备堆栈的格式化视图。

!devstack DeviceObject

参数

设备对象指定设备对象。这可以是DEVICE_OBJECT结构的十六进制地址或设备的名称。

DLL Windows 2000 Kdextx86.dll

Windows XP及更高版本 Kdexts.dll

如何从windbg获取有关设备堆栈的信息

1 个答案: