setupldr源代码分析加载drvmain.sdb和查询winnt.sif中的data节的EMSPort的值和显示蓝底白字Windows Setup//// Let the kernel deal with failure to load this driver database.//BlLoaderBlock-Extension-DrvDBImage NULL;BlLoaderBlock-Extension-DrvDBSize 0;DrvMainSdb.Buffer DRIVER_DATABASE_FILENAME;DrvMainSdb.MaximumLength sizeof(DRIVER_DATABASE_FILENAME); // MaxLength is size of bufferDrvMainSdb.Length sizeof(DRIVER_DATABASE_FILENAME) - sizeof(WCHAR); // Length does not include \0BlLoadDrvDB( BootDeviceId,NULL, // BlFindMessage(SL_DRVMAINSDB_NAME),BootPath,DrvMainSdb,BlLoaderBlock-Extension-DrvDBImage,BlLoaderBlock-Extension-DrvDBSize,BadFileName);kd kc#00 setupldr!BlLoadFileImage01 setupldr!SlInit02 setupldr!BlStartup03 setupldr!NtProcessStartupWARNING: Frame IP not in any known module. Following frames may be wrong.04 0x005 0x0kd dvDeviceId 0xaDeviceName 0x00000000 Directory 0x8021cb48 \I386\FileName 0x00060d9c drvmain.sdbMemoryType LoaderRegistryData (0n19)Image 0x8007709cImageSize 0x800770a0BadFileName 0x00348298 size 0actualBase 0x8021cb48sizeRead 8infName char [256] fileId 0x60d9cfileInfo struct _FILE_INFORMATION//// Get the fully qualified name for the file being loaded.//sprintf(infName[0], %s%wZ, Directory, FileName);kd dv infNameinfName char [256] \I386\drvmain.sdb//// Display the name of file being loaded.//BlOutputLoadMessage(DeviceName, infName, NULL);//// Open the file.//status BlOpen(DeviceId, infName, ArcOpenReadOnly, fileId);if (status ESUCCESS) {BlUpdateBootStatus();//// Find out size of INF file.//status BlGetFileInformation(fileId, fileInfo);if (status ESUCCESS) {kd dv fileInfofileInfo struct _FILE_INFORMATIONkd dx -r1 (*((setupldr!_FILE_INFORMATION *)0x60b4c))(*((setupldr!_FILE_INFORMATION *)0x60b4c)) [Type: _FILE_INFORMATION][0x000] StartingAddress : {0} [Type: _LARGE_INTEGER][0x008] EndingAddress : {12050} [Type: _LARGE_INTEGER][0x010] CurrentPosition : {0} [Type: _LARGE_INTEGER][0x018] Type : ArcSystem (0) [Type: _CONFIGURATION_TYPE][0x01c] FileNameLength : 0xb [Type: unsigned long][0x020] Attributes : 0x1 [Type: unsigned char][0x021] FileName : drvmain.sdb [Type: char [32]]pageCount (ULONG)(ROUND_TO_PAGES(size) PAGE_SHIFT);status BlAllocateDescriptor( MemoryType, // Descriptor gets reclaimed by MM.0,pageCount,actualBase);if (status ESUCCESS) {buffer (PCHAR)(KSEG0_BASE | (actualBase PAGE_SHIFT));//// Read the file in.//status BlRead(fileId, buffer, size, sizeRead);if (status ESUCCESS) {//// If the file was successfully read, return the// desired parameters.//if (Image) {*Image buffer;}if (ImageSize) {*ImageSize sizeRead;}}kd dvDeviceId 0xaDeviceName 0x00002f12 FileName 0x00000000MemoryType LoaderRegistryData (0n19)Image 0x8007709cImageSize 0x800770a0BadFileName 0x00348298 size 0x2f12actualBase 0xcsizeRead 0x2f12infName char [256] \I386\drvmain.sdbfileId 0fileInfo struct _FILE_INFORMATIONkd dx -r1 ((setupldr!void * *)0x8007709c)((setupldr!void * *)0x8007709c) : 0x8007709c [Type: void * *]0x8000c000 [Type: void *]kd db 0x8000c0008000c000 02 00 00 00 12 ad 03 00-73 64 62 66 02 78 fe 05 ........sdbf.x..8000c010 00 00 03 78 d8 02 00 00-02 38 07 70 03 38 01 60 ...x.....8.p.8.8000c020 16 40 01 00 00 00 01 98-c4 02 00 00 2e 54 41 44 ............TAD8000c030 4d 4d 34 30 42 06 00 00-43 49 51 48 43 52 41 30 MM40B...CIQHCRA08000c040 92 06 00 00 45 50 41 54-54 4c 44 30 e2 06 00 00 ....EPATTLD0....8000c050 49 51 4d 42 41 58 45 30-32 07 00 00 45 54 59 42 IQMBAXE02...ETYB8000c060 41 58 45 30 82 07 00 00-49 51 4d 44 4e 41 54 30 AXE0....IQMDNAT08000c070 22 08 00 00 43 49 51 44-4e 41 54 30 72 08 00 00 ...CIQDNAT0r...kd db 0x8000c000808000c080 43 49 51 47 4e 41 57 30-c2 08 00 00 4b 32 4c 54 CIQGNAW0....K2LT8000c090 43 4e 49 41 62 09 00 00-2e 4c 32 4b 4e 45 4c 41 CNIAb....L2KNELA8000c0a0 ca 09 00 00 2e 55 32 4b-4e 45 4c 41 32 0a 00 00 .....U2KNELA2...8000c0b0 2e 52 54 4c 49 46 50 41-9a 0a 00 00 56 52 44 4b .RTLIFPA....VRDK8000c0c0 43 41 4c 42 02 0b 00 00-2e 44 53 56 34 52 44 43 CALB.....DSV4RDC8000c0d0 52 0b 00 00 2e 4b 32 5f-34 52 44 43 b0 0b 00 00 R....K2_4RDC....8000c0e0 4b 32 57 4c 41 52 44 43-0e 0c 00 00 59 53 2e 46 K2WLARDC....YS.F8000c0f0 44 55 44 43 76 0c 00 00-52 54 46 43 46 51 50 43 DUDCv...RTFCFQPCkd db 0x8000c00080*28000c100 ae 0d 00 00 00 53 59 53-2e 45 4e 44 16 0e 00 00 .....SYS.END....8000c110 2e 30 30 30 32 45 4e 44-66 0e 00 00 4b 53 44 42 .0002ENDf...KSDB8000c120 53 55 50 45 b6 0e 00 00-2e 41 52 45 53 49 54 45 SUPE.....ARESITE8000c130 1e 0f 00 00 4e 45 52 45-53 49 54 45 6e 0f 00 00 ....NERESITEn...8000c140 44 50 52 45 53 49 54 45-be 0f 00 00 59 53 2e 4e DPRESITE....YS.N8000c150 41 49 56 45 0e 10 00 00-59 53 2e 53 46 49 58 45 AIVE....YS.SFIXE8000c160 76 10 00 00 2e 56 52 53-57 4e 50 46 da 10 00 00 v....VRSWNPF....8000c170 48 43 4e 49 46 4c 41 48-42 11 00 00 32 42 53 55 HCNIFLAHB...2BSUkd db 0x8000c00080*38000c180 5f 49 50 48 92 11 00 00-52 54 4c 46 5f 4f 4e 49 _IPH....RTLF_ONI8000c190 fa 11 00 00 2e 4b 53 49-44 4d 4f 49 5e 12 00 00 .....KSIDMOI^...8000c1a0 58 45 54 4c 46 50 53 4d-c2 12 00 00 31 4c 32 50 XETLFPSM....1L2P8000c1b0 42 53 55 4d 2a 13 00 00-31 55 32 50 42 53 55 4d BSUM*...1U2PBSUM8000c1c0 92 13 00 00 44 49 48 46-4d 43 45 4e fa 13 00 00 ....DIHFMCEN....8000c1d0 2e 34 39 33 31 50 49 4e-62 14 00 00 53 2e 35 4e .4931PINb...S.5N8000c1e0 41 4d 54 4f ca 14 00 00-53 2e 56 52 44 56 41 50 AMTO....S.VRDVAP8000c1f0 32 15 00 00 44 52 51 45-53 54 52 50 82 15 00 00 2...DRQESTRP....kd db 0x8000c00080*48000c200 53 2e 30 33 36 38 56 50-e0 15 00 00 2e 54 50 4f S.0368VP.....TPO8000c210 49 53 43 53 48 16 00 00-2e 4c 4b 32 41 43 44 53 ISCSH....LK2ACDS8000c220 98 16 00 00 2e 55 4b 32-41 43 44 53 00 17 00 00 .....UK2ACDS....8000c230 4c 54 53 56 45 44 44 53-68 17 00 00 55 54 53 56 LTSVEDDSh...UTSV8000c240 45 44 44 53 d0 17 00 00-52 45 56 49 52 44 44 53 EDDS....REVIRDDS8000c250 38 18 00 00 34 39 33 31-59 4e 4f 53 88 18 00 00 8...4931YNOS....8000c260 2e 58 44 53 59 4e 4f 53-d4 18 00 00 53 59 53 2e .XDSYNOS....SYS.8000c270 50 45 54 53 24 19 00 00-54 4e 45 56 45 4d 59 53 PETS$...TNEVEMYSkd db 0x8000c00080*58000c280 70 19 00 00 2e 49 50 41-54 41 52 54 c0 19 00 00 p....IPATART....8000c290 53 2e 49 53 43 53 52 54-10 1a 00 00 52 44 41 45 S.ISCSRT....RDAE8000c2a0 52 46 44 55 60 1a 00 00-53 2e 32 57 32 33 41 56 RFDU...S.2W23AV8000c2b0 98 1b 00 00 54 4e 41 54-41 44 53 56 e8 1b 00 00 ....TNATADSV....8000c2c0 46 53 48 43 41 4e 49 57-38 1c 00 00 42 53 55 43 FSHCANIW8...BSUC8000c2d0 41 4e 49 57 84 1c 00 00-59 53 2e 47 58 43 41 59 ANIW....YS.GXCAY8000c2e0 f2 1c 00 00 53 2e 43 47-58 43 41 59 42 1d 00 00 ....S.CGXCAYB...8000c2f0 03 78 1a 03 00 00 02 38-07 70 03 38 04 90 01 98 .x.....8.p.8....kd db 0x8000c00080*68000c300 0c 03 00 00 4d ae bc 1b-b8 d2 68 05 6e 0f 00 00 ....M.....h.n...8000c310 01 4b 4d 40 bb 59 87 05-9a 0a 00 00 2a 4b 57 f0 .KM.Y......*KW.8000c320 a3 bb 8c 06 62 09 00 00-60 33 6f e8 7f 99 3b 1a ....b...3o...;.8000c330 42 06 00 00 55 08 02 c1-70 a4 a4 1a 02 0b 00 00 B...U...p.......8000c340 bc ae b3 ef bd 44 e9 1d-76 10 00 00 d9 8a 8e 37 .....D..v......78000c350 6e 60 f5 1d 30 1b 00 00-fc f2 92 d2 e2 81 74 21 n..0.........t!8000c360 32 0a 00 00 bc 3b 40 74-4e 24 64 27 d4 18 00 00 2....;tN$d....8000c370 3c fb bf 2a e6 98 4d 32-62 14 00 00 1a 7d db f7 ..*..M2b....}..kd db 0x8000c00080*78000c380 d3 98 54 32 52 0b 00 00-1c 30 c6 fd 15 4e 22 34 ..T2R....0...N48000c390 ae 0d 00 00 ff 96 ff 88-8d ae 54 38 38 18 00 00 ..........T88...8000c3a0 44 bc 0b 89 7d 8e 9f 39-c2 12 00 00 48 c0 d0 b6 D...}..9....H...8000c3b0 69 5d 8b 3d 66 0e 00 00-0c 4e 89 10 61 47 bb 3d i].f....N..aG.8000c3c0 0e 0c 00 00 c1 4a 1f f5-47 eb dc 3d d2 07 00 00 .....J..G......8000c3d0 c5 02 5a 3c 31 b8 72 3e-c2 08 00 00 a4 70 e2 b2 ..Z1.r.....p..8000c3e0 b5 e7 f5 3f 92 06 00 00-6d 6f dc 51 97 b6 4e 42 ...?....mo.Q..NB8000c3f0 22 08 00 00 ce 23 bb 91-67 f0 17 48 82 07 00 00 ....#..g..H....kd db 0x8000c00080*88000c400 b8 e2 32 33 90 29 90 48-24 19 00 00 25 ab 18 92 ..23.).H$...%...8000c410 58 55 f1 4b d0 17 00 00-d1 91 40 73 a9 0b 6d 4c XU.K......s..mL8000c420 de 0c 00 00 79 b5 8c 5e-5d 4f 78 4e 12 09 00 00 ....y..^]OxN....8000c430 09 76 29 24 f8 ac 80 54-92 11 00 00 aa 66 b1 38 .v)$...T.....f.88000c440 0d 04 98 59 48 16 00 00-70 37 77 47 63 49 6b 5a ...YH...p7wGcIkZ8000c450 98 1b 00 00 eb 96 3c 72-f0 25 02 65 10 1a 00 00 ......r.%.e....8000c460 e2 e7 36 51 7e 3f 2a 66-38 1c 00 00 88 b2 87 13 ..6Q~?*f8.......8000c470 b7 19 32 67 42 11 00 00-a6 95 92 89 76 fc 1c 6e ..2gB.......v..nkd db 0x8000c00080*98000c480 1e 0f 00 00 b4 e3 81 84-b4 bb 88 6e ca 09 00 00 ...........n....8000c490 72 e2 80 55 c1 d3 f6 6e-b6 0e 00 00 cd 19 e1 4b r..U...n.......K8000c4a0 45 ff 20 7c 32 15 00 00-80 fd 76 61 ab e3 b5 82 E. |2.....va....8000c4b0 00 17 00 00 1e 6b 28 17-c3 86 a0 85 e0 15 00 00 .....k(.........8000c4c0 86 71 0b 45 7c 63 d0 90-42 1d 00 00 d8 b2 2c 9b .q.E|c..B.....,.8000c4d0 dc 14 1d 91 92 13 00 00-75 7c 2a 0a 4b f9 77 98 ........u|*.K.w.8000c4e0 5e 12 00 00 1c b4 70 d7-db 6f 99 9c 70 19 00 00 ^.....p..o..p...8000c4f0 02 5d a4 e7 1e 80 9f 9e-c8 1a 00 00 53 6c bd 6f .]..........Sl.okd db 0x8000c00080*a8000c500 42 d2 de 9f fa 11 00 00-54 de 08 60 cc fc 65 a3 B.......T....e.8000c510 84 1c 00 00 e3 35 70 c6-e3 12 c2 a3 fa 13 00 00 .....5p.........8000c520 38 d1 98 76 eb 71 fe ab-2a 13 00 00 ec 2b fd 80 8..v.q..*......8000c530 2a db 11 ad 46 0d 00 00-3f 05 13 da d8 d8 70 b0 *...F...?.....p.8000c540 c0 19 00 00 f3 9f 62 fb-04 91 bb b4 82 15 00 00 ......b.........8000c550 de a0 c1 e8 0e 58 51 bb-ca 14 00 00 a6 1f 72 7b .....XQ.......r{8000c560 40 1b 59 c6 60 1a 00 00-da c6 24 f5 ca ba e9 ce .Y......$.....8000c570 be 0f 00 00 47 3d 77 fa-06 48 8f cf 72 08 00 00 ....Gw..H..r...kd db 0x8000c00080*b8000c580 b6 da 40 ad 05 0a 2f d2-f2 1c 00 00 18 2a 66 95 ...../......*f.8000c590 d4 4a ea da 76 0c 00 00-aa eb 73 33 72 02 40 dd .J..v.....s3r..8000c5a0 88 18 00 00 43 cc 3d 66-8c 70 85 de 16 0e 00 00 ....C.f.p......8000c5b0 0f 5d 60 f4 4c 2a f6 df-0e 10 00 00 95 1e 55 8a .].L*........U.8000c5c0 a7 5b 27 e0 32 07 00 00-07 c7 96 b9 96 6e 7a e6 .[.2........nz.8000c5d0 68 17 00 00 c7 ce 51 f9-9f 23 a5 e7 98 16 00 00 h.....Q..#......8000c5e0 b5 1a ee 0f 80 49 e9 ec-b0 0b 00 00 9b 60 47 06 .....I.......G.8000c5f0 61 03 41 f0 da 10 00 00-b2 cc fb 23 c5 dd fc fa a.A........#....kd db 0x8000c00080*c8000c600 e8 1b 00 00 34 bc 31 f3-f7 7b 00 fe e2 06 00 00 ....4.1..{......8000c610 01 70 7c 17 00 00 01 50-c2 6c 04 80 1d 07 db 01 .p|....P.l......8000c620 22 60 06 00 00 00 01 60-1e 00 00 00 07 90 10 00 .............8000c630 00 00 28 22 ab f9 12 33-73 4a b6 f9 93 6d 70 e1 ..(...3sJ...mp.8000c640 12 ef 07 70 4a 00 00 00-01 60 74 00 00 00 06 60 ...pJ....t....8000c650 92 00 00 00 05 60 c4 00-00 00 04 90 10 00 00 00 ...............8000c660 e9 1f 1b eb 2a 80 9e 49-89 2c 74 03 55 19 a5 53 ....*..I.,t.U..S8000c670 0d 70 06 00 00 00 15 40-b9 c3 00 00 08 70 10 00 .p..........p..kd db 0x8000c00080*d8000c680 00 00 01 60 fa 00 00 00-06 50 ff ff ff ff ff ff ........P......8000c690 04 00 07 70 4a 00 00 00-01 60 04 01 00 00 06 60 ...pJ.........8000c6a0 92 00 00 00 05 60 c4 00-00 00 04 90 10 00 00 00 ...............8000c6b0 0b 37 40 ca 45 c1 d2 45-af 47 a2 78 f0 26 27 7a .7.E..E.G.x.z8000c6c0 0d 70 06 00 00 00 15 40-b9 c3 00 00 08 70 10 00 .p..........p..8000c6d0 00 00 01 60 fa 00 00 00-06 50 ff ff ff ff ff ff ........P......8000c6e0 04 00 07 70 4a 00 00 00-01 60 24 01 00 00 06 60 ...pJ....$....8000c6f0 92 00 00 00 05 60 c4 00-00 00 04 90 10 00 00 00 ...............kd db 0x8000c00080*f8000c780 04 00 07 70 4a 00 00 00-01 60 66 01 00 00 06 60 ...pJ....f....8000c790 92 00 00 00 05 60 c4 00-00 00 04 90 10 00 00 00 ...............8000c7a0 6d d4 0a 91 cf 5a 90 4c-a3 f7 b1 00 a8 aa 87 04 m....Z.L........8000c7b0 0d 70 06 00 00 00 15 40-b9 c3 00 00 08 70 10 00 .p..........p..8000c7c0 00 00 01 60 fa 00 00 00-06 50 ff ff ff ff ff ff ........P......8000c7d0 04 00 07 70 4a 00 00 00-01 60 88 01 00 00 06 60 ...pJ.........8000c7e0 92 00 00 00 05 60 c4 00-00 00 04 90 10 00 00 00 ...............8000c7f0 4a ff 23 c5 e4 27 9a 46-8b b5 3c 30 a3 cc 46 7b J.#...F..0..F{kd db 0x8000c00080*108000c800 0d 70 06 00 00 00 15 40-b9 c3 00 00 08 70 10 00 .p..........p..8000c810 00 00 01 60 fa 00 00 00-06 50 ff ff ff ff ff ff ........P......8000c820 04 00 07 70 4a 00 00 00-01 60 aa 01 00 00 06 60 ...pJ.........8000c830 92 00 00 00 05 60 c4 00-00 00 04 90 10 00 00 00 ...............8000c840 d8 5e 76 38 c8 22 41 42-b5 31 aa 69 5f 94 0f 00 .^v8.AB.1.i_...8000c850 0d 70 06 00 00 00 15 40-b9 c3 00 00 08 70 10 00 .p..........p..8000c860 00 00 01 60 fa 00 00 00-06 50 ff ff ff ff ff ff ........P......8000c870 04 00 07 70 4a 00 00 00-01 60 cc 01 00 00 06 60 ...pJ.........kd db 0x8000c00080*208000d000 fa 00 00 00 06 50 ff ff-ff ff 05 00 02 00 07 70 .....P.........p8000d010 62 00 00 00 01 60 9a 07-00 00 06 60 b4 07 00 00 b.............8000d020 05 60 e6 07 00 00 04 90-10 00 00 00 b4 46 32 1f ............F2.8000d030 11 bc 40 41 bb 1b 52 eb-5d 96 b6 9e 0d 70 06 00 ..A..R.]....p..8000d040 00 00 15 40 5a c3 00 00-08 70 10 00 00 00 01 60 ...Z....p.....8000d050 fa 00 00 00 06 50 af 00-93 08 00 00 05 00 0f 70 .....P.........p8000d060 12 00 00 00 01 60 6e 02-00 00 18 40 04 00 00 00 .....n........8000d070 19 40 01 00 00 00 07 70-5e 00 00 00 01 60 12 08 ......p^......kd dx -r1 ((setupldr!unsigned long *)0x800770a0)((setupldr!unsigned long *)0x800770a0) : 0x800770a0 : 0x2f12 [Type: unsigned long *]0x2f12 [Type: unsigned long]kd ?0x2f12Evaluate expression: 12050 00002f1211.7 KB (12,050 字节)kd dv setupldr!BlLoaderBlocksetupldr!BlLoaderBlock 0x80077000kd dx -r1 ((setupldr!_LOADER_PARAMETER_BLOCK *)0x80077000)((setupldr!_LOADER_PARAMETER_BLOCK *)0x80077000) : 0x80077000 [Type: _LOADER_PARAMETER_BLOCK *][0x000] LoadOrderListHead [Type: _LIST_ENTRY][0x008] MemoryDescriptorListHead [Type: _LIST_ENTRY][0x010] BootDriverListHead [Type: _LIST_ENTRY][0x018] KernelStack : 0x0 [Type: unsigned long][0x01c] Prcb : 0x0 [Type: unsigned long][0x020] Process : 0x0 [Type: unsigned long][0x024] Thread : 0x0 [Type: unsigned long][0x028] RegistryLength : 0x0 [Type: unsigned long][0x02c] RegistryBase : 0x0 [Type: void *][0x030] ConfigurationRoot : 0x80078988 [Type: _CONFIGURATION_COMPONENT_DATA *][0x034] ArcBootDeviceName : 0x8021cb28 : multi(0)disk(0)cdrom(159) [Type: char *][0x038] ArcHalDeviceName : 0x0 [Type: char *][0x03c] NtBootPathName : 0x0 [Type: char *][0x040] NtHalPathName : 0x0 [Type: char *][0x044] LoadOptions : 0x80152090 : /FASTDETECT /NOGUIBOOT /NODEBUG [Type: char *][0x048] NlsData : 0x0 [Type: _NLS_DATA_BLOCK *][0x04c] ArcDiskInformation : 0x0 [Type: _ARC_DISK_INFORMATION *][0x050] OemFontFile : 0x0 [Type: void *][0x054] SetupLoaderBlock : 0x80078600 [Type: _SETUP_LOADER_BLOCK *][0x058] Extension : 0x80077068 [Type: _LOADER_PARAMETER_EXTENSION *][0x05c] u [Type: __unnamed]kd dx -r1 ((setupldr!_LOADER_PARAMETER_EXTENSION *)0x80077068)((setupldr!_LOADER_PARAMETER_EXTENSION *)0x80077068) : 0x80077068 [Type: _LOADER_PARAMETER_EXTENSION *][0x000] Size : 0x50 [Type: unsigned long][0x004] Profile [Type: _PROFILE_PARAMETER_BLOCK][0x014] MajorVersion : 0x5 [Type: unsigned long][0x018] MinorVersion : 0x2 [Type: unsigned long][0x01c] InfFileImage : 0x80001000 [Type: void *][0x020] InfFileSize : 0xa92f [Type: unsigned long][0x024] TriageDumpBlock : 0x0 [Type: void *][0x028] LoaderPagesSpanned : 0x0 [Type: unsigned long][0x02c] HeadlessLoaderBlock : 0x0 [Type: _HEADLESS_LOADER_BLOCK *][0x030] SMBiosEPSHeader : 0x0 [Type: _SMBIOS_TABLE_HEADER *][0x034] DrvDBImage : 0x8000c000 [Type: void *][0x038] DrvDBSize : 0x2f12 [Type: unsigned long][0x03c] NetworkLoaderBlock : 0x0 [Type: _NETWORK_LOADER_BLOCK *][0x040] HalpIRQLToTPR : 0x0 [Type: unsigned char *][0x044] HalpVectorToIRQL : 0x0 [Type: unsigned char *][0x048] FirmwareDescriptorListHead [Type: _LIST_ENTRY]kd dv FloppyUsedFloppyUsed 0x01 虚拟机有软盘autoinst.flp//// If the BIOS told us to redirect, wed be doing it right now. However,// the user may have told us some specific settings. If thats the case,// override anything were doing now with the settings from the user.//if( WinntSifHandle ) {p SlGetSectionKeyIndex(WinntSifHandle, WINNT_DATA_A, WINNT_U_HEADLESS_REDIRECT_A, 0);if (p ! NULL) {if (!_strnicmp(p, com, 3)) {kd kc 5#00 setupldr!SlGetSectionKeyIndex01 setupldr!SlInit02 setupldr!BlStartup03 setupldr!NtProcessStartupWARNING: Frame IP not in any known module. Following frames may be wrong.04 0x0kd dvINFHandle 0x8021ddf8SectionName 0x0032550c dataKey 0x00325504 EMSPortValueIndex 0kd dvINFHandle 0x8021ddf8SectionName 0x0032550c dataKey 0x00325504 EMSPortValueIndex 0kd dt INF 0x8021ddf8Symbol INF not found.kd dt _INF 0x8021ddf8setupldr!_inf0x000 pSection : 0x8021ea48 _sectionkd dx -r1 ((setupldr!_section *)0x8021ea48)((setupldr!_section *)0x8021ea48) : 0x8021ea48 [Type: _section *][0x000] pNext : 0x8021e920 [Type: _section *][0x004] pName : 0x8021e36d : VMwareData [Type: char *][0x008] pLine : 0x8021ea58 [Type: _line *]kd dx -r1 ((setupldr!_section *)0x8021e920)((setupldr!_section *)0x8021e920) : 0x8021e920 [Type: _section *][0x000] pNext : 0x8021e868 [Type: _section *][0x004] pName : 0x8021e335 : GuiRunOnce [Type: char *][0x008] pLine : 0x8021e930 [Type: _line *]kd dx -r1 ((setupldr!_section *)0x8021e868)((setupldr!_section *)0x8021e868) : 0x8021e868 [Type: _section *][0x000] pNext : 0x8021e820 [Type: _section *][0x004] pName : 0x8021e2ff : Display [Type: char *][0x008] pLine : 0x8021e878 [Type: _line *]kd dx -r1 ((setupldr!_section *)0x8021e820)((setupldr!_section *)0x8021e820) : 0x8021e820 [Type: _section *][0x000] pNext : 0x8021e7d8 [Type: _section *][0x004] pName : 0x8021e2db : Branding [Type: char *][0x008] pLine : 0x8021e830 [Type: _line *]kd dx -r1 ((setupldr!_section *)0x8021e7d8)((setupldr!_section *)0x8021e7d8) : 0x8021e7d8 [Type: _section *][0x000] pNext : 0x8021e790 [Type: _section *][0x004] pName : 0x8021e2b3 : Networking [Type: char *][0x008] pLine : 0x8021e7e8 [Type: _line *]kd dx -r1 ((setupldr!_section *)0x8021e790)((setupldr!_section *)0x8021e790) : 0x8021e790 [Type: _section *][0x000] pNext : 0x8021e710 [Type: _section *][0x004] pName : 0x8021e28c : Identification [Type: char *][0x008] pLine : 0x8021e7a0 [Type: _line *]kd dx -r1 ((setupldr!_section *)0x8021e710)((setupldr!_section *)0x8021e710) : 0x8021e710 [Type: _section *][0x000] pNext : 0x8021e620 [Type: _section *][0x004] pName : 0x8021e258 : LicenseFilePrintData [Type: char *][0x008] pLine : 0x8021e720 [Type: _line *]kd dx -r1 ((setupldr!_section *)0x8021e620)((setupldr!_section *)0x8021e620) : 0x8021e620 [Type: _section *][0x000] pNext : 0x8021e050 [Type: _section *][0x004] pName : 0x8021e224 : UserData [Type: char *][0x008] pLine : 0x8021e630 [Type: _line *]kd dx -r1 ((setupldr!_line *)0x8021e630)((setupldr!_line *)0x8021e630) : 0x8021e630 [Type: _line *][0x000] pNext : 0x8021e668 [Type: _line *][0x004] pName : 0x8021e22d : ProductKey [Type: char *][0x008] InternalValues [Type: char * [10]][0x030] pFirstExternalValue : 0x0 [Type: _value *]kd dx -r1 ((setupldr!_line *)0x8021e668)((setupldr!_line *)0x8021e668) : 0x8021e668 [Type: _line *][0x000] pNext : 0x8021e6a0 [Type: _line *][0x004] pName : 0x8021e238 : FullName [Type: char *][0x008] InternalValues [Type: char * [10]][0x030] pFirstExternalValue : 0x0 [Type: _value *]kd dx -r1 ((setupldr!_line *)0x8021e6a0)((setupldr!_line *)0x8021e6a0) : 0x8021e6a0 [Type: _line *][0x000] pNext : 0x8021e6d8 [Type: _line *][0x004] pName : 0x8021e241 : OrgName [Type: char *][0x008] InternalValues [Type: char * [10]][0x030] pFirstExternalValue : 0x0 [Type: _value *]kd dx -r1 ((setupldr!_line *)0x8021e6d8)((setupldr!_line *)0x8021e6d8) : 0x8021e6d8 [Type: _line *][0x000] pNext : 0x0 [Type: _line *][0x004] pName : 0x8021e249 : ComputerName [Type: char *][0x008] InternalValues [Type: char * [10]][0x030] pFirstExternalValue : 0x0 [Type: _value *]kd dx -r1 ((setupldr!_section *)0x8021e050)((setupldr!_section *)0x8021e050) : 0x8021e050 [Type: _section *][0x000] pNext : 0x8021deb8 [Type: _section *][0x004] pName : 0x8021add6 : GuiUnattended [Type: char *][0x008] pLine : 0x8021e060 [Type: _line *]kd dx -r1 ((setupldr!_section *)0x8021deb8)((setupldr!_section *)0x8021deb8) : 0x8021deb8 [Type: _section *][0x000] pNext : 0x8021de00 [Type: _section *][0x004] pName : 0x8021ad3c : Unattended [Type: char *][0x008] pLine : 0x8021dec8 [Type: _line *]kd dx -r1 ((setupldr!_section *)0x8021de00)((setupldr!_section *)0x8021de00) : 0x8021de00 [Type: _section *][0x000] pNext : 0x0 [Type: _section *][0x004] pName : 0x8021ad06 : Data [Type: char *][0x008] pLine : 0x8021de10 [Type: _line *]kd dx -r1 ((setupldr!_line *)0x8021de10)((setupldr!_line *)0x8021de10) : 0x8021de10 [Type: _line *][0x000] pNext : 0x8021de48 [Type: _line *][0x004] pName : 0x8021ad0b : AutoPartition [Type: char *][0x008] InternalValues [Type: char * [10]][0x030] pFirstExternalValue : 0x0 [Type: _value *]kd dx -r1 ((setupldr!_line *)0x8021de48)((setupldr!_line *)0x8021de48) : 0x8021de48 [Type: _line *][0x000] pNext : 0x8021de80 [Type: _line *][0x004] pName : 0x8021ad1b : MsDosInitiated [Type: char *][0x008] InternalValues [Type: char * [10]][0x030] pFirstExternalValue : 0x0 [Type: _value *]kd dx -r1 ((setupldr!_line *)0x8021de80)((setupldr!_line *)0x8021de80) : 0x8021de80 [Type: _line *][0x000] pNext : 0x0 [Type: _line *][0x004] pName : 0x8021ad2a : UnattendedInstall [Type: char *][0x008] InternalValues [Type: char * [10]][0x030] pFirstExternalValue : 0x0 [Type: _value *]kd gueax00000000 ebx00000000 ecx00325504 edx00000000 esi003254f6 edi003482a3eip00326f14 esp00060bc0 ebp00060df4 iopl0 nv up di pl zr na pe nccs0008 ss0010 ds0010 es0010 fs0030 gs0000 efl00000046setupldr!SlInit0xece:00326f14 8bf0 mov esi,eaxif( WinntSifHandle ) {p SlGetSectionKeyIndex(WinntSifHandle, WINNT_DATA_A, WINNT_U_HEADLESS_REDIRECT_A, 0);eax00000000if( (LoaderRedirectionInformation.PortNumber) || (LoaderRedirectionInformation.PortAddress) ) {。。。} else {BlLoaderBlock-Extension-HeadlessLoaderBlock NULL; 这个}if (UseRegularBackground) {} else {SlSetCurrentAttribute(DEFATT);SlSetStatusAttribute(DEFSTATTR);SlClearDisplay();SlWriteHeaderText(SL_WELCOME_HEADER);SlClearClientArea();}kd x setupldr!UseRegularBackground003435e4 setupldr!UseRegularBackground 0x00