-
-
[求助]用汇编写定时器，蓝屏，高手救我！
-
发表于: 2008-7-9 12:08
-
什么都不说了，直接看代码：
.386
.model flat,stdcall
option casemap:none
include ntstatus.inc
include ntddk.inc
include w2kundoc.inc
include hal.inc
include ntoskrnl.inc
includelib hal.lib
includelib ntoskrnl.lib
.data
Timer db 30h (0)
ZhDpc db 30h (0)
sz2 db 'Timer对象 : %08x',0
sz3 db 'Dpc Routine地址 : %08x',0
.code
ZhDpcRoutine proc Dpc,Context,Argument1,Argument2
pushad
call @F
db '进入了DPC例程!',0
@@:
call DbgPrint
pop eax
popad
ret
ZhDpcRoutine endp
ZhSetTimer proc
pushad
invoke DbgPrint,offset sz2,offset Timer
invoke DbgPrint,offset sz3,offset ZhDpcRoutine
invoke KeInitializeTimer,offset Timer
invoke KeInitializeDpc,offset ZhDpc,offset ZhDpcRoutine,90
invoke KeSetTimerEx,offset Timer,10,10,5000,offset ZhDpc
popad
ret
ZhSetTimer endp
DriverUnload proc DriverObject
pushad
invoke KeCancelTimer,offset Timer
invoke KeRemoveQueueDpc,offset ZhDpc
popad
ret
DriverUnload endp
DriverEntry proc DriverObject,RegistryPath
pushad
mov eax,DriverObject
mov [eax+34h],offset DriverUnload
invoke ZhSetTimer
_end:
popad
xor eax,eax
ret
DriverEntry endp
end DriverEntry
加载运行后，等到定时器第一次到期时，蓝了，
如下图：
请高手分析，先行谢过！！！
.386
.model flat,stdcall
option casemap:none
include ntstatus.inc
include ntddk.inc
include w2kundoc.inc
include hal.inc
include ntoskrnl.inc
includelib hal.lib
includelib ntoskrnl.lib
.data
Timer db 30h (0)
ZhDpc db 30h (0)
sz2 db 'Timer对象 : %08x',0
sz3 db 'Dpc Routine地址 : %08x',0
.code
ZhDpcRoutine proc Dpc,Context,Argument1,Argument2
pushad
call @F
db '进入了DPC例程!',0
@@:
call DbgPrint
pop eax
popad
ret
ZhDpcRoutine endp
ZhSetTimer proc
pushad
invoke DbgPrint,offset sz2,offset Timer
invoke DbgPrint,offset sz3,offset ZhDpcRoutine
invoke KeInitializeTimer,offset Timer
invoke KeInitializeDpc,offset ZhDpc,offset ZhDpcRoutine,90
invoke KeSetTimerEx,offset Timer,10,10,5000,offset ZhDpc
popad
ret
ZhSetTimer endp
DriverUnload proc DriverObject
pushad
invoke KeCancelTimer,offset Timer
invoke KeRemoveQueueDpc,offset ZhDpc
popad
ret
DriverUnload endp
DriverEntry proc DriverObject,RegistryPath
pushad
mov eax,DriverObject
mov [eax+34h],offset DriverUnload
invoke ZhSetTimer
_end:
popad
xor eax,eax
ret
DriverEntry endp
end DriverEntry
加载运行后，等到定时器第一次到期时，蓝了，
如下图：
请高手分析，先行谢过！！！
|
|
|---|---|
|
|
|
|
|
驱动不是都以非分页内存加载的吗?
我这是驱动,出错地址怎么会到70301280H处呢? 
|
|
|
|
|
|
|
|
|
|
|
|
是用KmdManager加载的,肯定是加载到了系统空间中.
晕了好久,问题依然...
|
|
|
|
|
|
|
