i8042prt

Posted 2020-08-23 DriverSkill

参考网址：http://blog.csdn.net/iqian1314/article/details/5644943

1、

　　1.1、

kd> !object \driver\i8042prt
Object: 82831da0  Type: (82da5398) Driver
    ObjectHeader: 82831d88 (old version)
    HandleCount: 0  PointerCount: 5
    Directory Object: e12f59a0  Name: i8042prt

　　1.2、“kd> !strct driver_object fe4f69f0” 提示错误信息：“No export strct found”，换struct也一样“No export struct found”... 于是 换成命令dt：

kd> dt _driver_object 82831da0
nt!_DRIVER_OBJECT
   +0x000 Type             : 0n4
   +0x002 Size             : 0n168
   +0x004 DeviceObject     : 0x827a7578 _DEVICE_OBJECT
   +0x008 Flags            : 0x12
   +0x00c DriverStart      : 0xf7677000 Void
   +0x010 DriverSize       : 0xb900
   +0x014 DriverSection    : 0x82c6e668 Void
   +0x018 DriverExtension  : 0x82831e48 _DRIVER_EXTENSION
   +0x01c DriverName       : _UNICODE_STRING "\Driver\i8042prt"
   +0x024 HardwareDatabase : 0x80671ae0 _UNICODE_STRING "\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\SYSTEM"
   +0x028 FastIoDispatch   : (null) 
   +0x02c DriverInit       : 0xf7680285     long  i8042prt!GsDriverEntry+0
   +0x030 DriverStartIo    : 0xf7677910     void  i8042prt!I8xStartIo+0
   +0x034 DriverUnload     : 0xf767deb6     void  i8042prt!I8xUnload+0
   +0x038 MajorFunction    : [28] 0xf767aaa6     long  i8042prt!I8xCreate+0

　　1.3、

kd> !devobj 827a7578
Device object (827a7578) is for:
  \Driver\i8042prt DriverObject 82831da0
Current Irp 00000000 RefCount 0 Type 00000027 Flags 00002004
DevExt 827a7630 DevObjExt 827a78c0 
ExtensionFlags (0000000000)  
AttachedDevice (Upper) 82bb5020 \Driver\vmmouse
AttachedTo (Lower) 82d9c3c8 \Driver\ACPI
Device queue is not busy.

　　　　这是用于鼠标的那个设备对象

　　1.4、

kd> dt _device_object 827a7578
nt!_DEVICE_OBJECT
   +0x000 Type             : 0n3
   +0x002 Size             : 0x348
   +0x004 ReferenceCount   : 0n0
   +0x008 DriverObject     : 0x82831da0 _DRIVER_OBJECT
   +0x00c NextDevice       : 0x828313e8 _DEVICE_OBJECT
   +0x010 AttachedDevice   : 0x82bb5020 _DEVICE_OBJECT
   +0x014 CurrentIrp       : (null) 
   +0x018 Timer            : (null) 
   +0x01c Flags            : 0x2004
   +0x020 Characteristics  : 0
   +0x024 Vpb              : (null) 
   +0x028 DeviceExtension  : 0x827a7630 Void
   +0x02c DeviceType       : 0x27
   +0x030 StackSize        : 5 ‘‘
   +0x034 Queue            : __unnamed
   +0x05c AlignmentRequirement : 0
   +0x060 DeviceQueue      : _KDEVICE_QUEUE
   +0x074 Dpc              : _KDPC
   +0x094 ActiveThreadCount : 0
   +0x098 SecurityDescriptor : (null) 
   +0x09c DeviceLock       : _KEVENT
   +0x0ac SectorSize       : 0
   +0x0ae Spare1           : 1
   +0x0b0 DeviceObjectExtension : 0x827a78c0 _DEVOBJ_EXTENSION
   +0x0b4 Reserved         : (null) 

　　1.5、

kd> !devobj 828313e8
Device object (828313e8) is for:
  \Driver\i8042prt DriverObject 82831da0
Current Irp 00000000 RefCount 0 Type 00000027 Flags 00002004
DevExt 828314a0 DevObjExt 82831730 
ExtensionFlags (0000000000)  
AttachedDevice (Upper) 82831200 \Driver\Kbdclass
AttachedTo (Lower) 82d9c4e0 \Driver\ACPI
Device queue is not busy.

　　1.6、

kd> dt _device_object 828313e8
nt!_DEVICE_OBJECT
   +0x000 Type             : 0n3
   +0x002 Size             : 0x348
   +0x004 ReferenceCount   : 0n0
   +0x008 DriverObject     : 0x82831da0 _DRIVER_OBJECT
   +0x00c NextDevice       : (null) 
   +0x010 AttachedDevice   : 0x82831200 _DEVICE_OBJECT
   +0x014 CurrentIrp       : (null) 
   +0x018 Timer            : (null) 
   +0x01c Flags            : 0x2004
   +0x020 Characteristics  : 0
   +0x024 Vpb              : (null) 
   +0x028 DeviceExtension  : 0x828314a0 Void
   +0x02c DeviceType       : 0x27
   +0x030 StackSize        : 5 ‘‘
   +0x034 Queue            : __unnamed
   +0x05c AlignmentRequirement : 0
   +0x060 DeviceQueue      : _KDEVICE_QUEUE
   +0x074 Dpc              : _KDPC
   +0x094 ActiveThreadCount : 0
   +0x098 SecurityDescriptor : (null) 
   +0x09c DeviceLock       : _KEVENT
   +0x0ac SectorSize       : 0
   +0x0ae Spare1           : 1
   +0x0b0 DeviceObjectExtension : 0x82831730 _DEVOBJ_EXTENSION
   +0x0b4 Reserved         : (null) 

　　1.7、

2、

3、