news 2026/6/15 12:20:15

nt!IopInitializeDeviceInstanceKey函数分析之add it to the device list

作者头像

张小明

前端开发工程师

1.2k 24
文章封面图
nt!IopInitializeDeviceInstanceKey函数分析之add it to the device list

nt!IopInitializeDeviceInstanceKey函数分析之add it to the device list
1: kd> kc
#
00 nt!IopInitializeDeviceInstanceKey
01 nt!PipApplyFunctionToSubKeys
02 nt!IopInitializeDeviceKey
03 nt!PipApplyFunctionToSubKeys
04 nt!IopGetRootDevices
05 nt!IopPnPDispatch
06 nt!IofCallDriver
07 nt!IopSynchronousCall
08 nt!IopQueryDeviceRelations
09 nt!PipEnumerateDevice
0a nt!PipProcessDevNodeTree
0b nt!PiProcessReenumeration
0c nt!PipDeviceActionWorker
0d nt!PipRequestDeviceAction
0e nt!IopInitializePlugPlayServices
0f nt!IoInitSystem
10 nt!Phase1Initialization
11 nt!PspSystemThreadStartup
12 nt!KiThreadStartup

BOOLEAN
IopInitializeDeviceInstanceKey(
IN HANDLE KeyHandle,
IN PUNICODE_STRING KeyName,
IN OUT PVOID Context
)
{
PROOT_ENUMERATOR_CONTEXT enumContext = (PROOT_ENUMERATOR_CONTEXT)Context;


//
// If we enumerated a root device, add it to the device list
//

if (NT_SUCCESS(status)) {
ASSERT(deviceObject != NULL);

enumContext->DeviceList[enumContext->DeviceCount] = deviceObject;
enumContext->DeviceCount++;

return TRUE;
} else {
enumContext->Status = status;
return FALSE;
}
}

1: kd> dv context
Context = 0xf789a23c
1: kd> dt ROOT_ENUMERATOR_CONTEXT 0xf789a23c
nt!ROOT_ENUMERATOR_CONTEXT
+0x000 Status : 0n0
+0x004 KeyName : 0xf789a258 _UNICODE_STRING "Root\COMPOSITE_BATTERY"
+0x008 MaxDeviceCount : 0x100
+0x00c DeviceCount : 1
+0x010 DeviceList : 0xe1297918 -> 0x899c59a8 _DEVICE_OBJECT
1: kd> dd 0xe1297918
e1297918 899c59a8 00000000 00000000 00000000
e1297928 00000000 00000000 00000000 00000000
e1297938 00000000 00000000 00000000 00000000
e1297948 00000000 00000000 00000000 00000000
e1297958 00000000 00000000 00000000 00000000
e1297968 00000000 00000000 00000000 00000000
e1297978 00000000 00000000 00000000 00000000
e1297988 00000000 00000000 00000000 00000000
1: kd> !devobj 899c59a8
Device object (899c59a8) is for:
00000001 \Driver\PnpManager DriverObject 899873b0
Current Irp 00000000 RefCount 0 Type 00000004 Flags 00001040
SecurityDescriptor e1297680 DevExt 899c5a60 DevObjExt 899c5a68 DevNode 899c5850
ExtensionFlags (0x00000010) DOE_START_PENDING
Characteristics (0x00000080) FILE_AUTOGENERATED_DEVICE_NAME
Device queue is not busy.
1: kd> !devnode 899c5850
DevNode 0x899c5850 for PDO 0x899c59a8
Parent 0x899c5bc8 Sibling 0x89986d38 Child 0000000000
InstancePath is "Root\ACPI_HAL\0000"
State = DeviceNodeInitialized (0x302)
Previous State = DeviceNodeUninitialized (0x301)
StateHistory[00] = DeviceNodeUninitialized (0x301)
StateHistory[19] = Unknown State (0x0)
StateHistory[18] = Unknown State (0x0)
StateHistory[17] = Unknown State (0x0)
StateHistory[16] = Unknown State (0x0)
StateHistory[15] = Unknown State (0x0)
StateHistory[14] = Unknown State (0x0)
StateHistory[13] = Unknown State (0x0)
StateHistory[12] = Unknown State (0x0)
StateHistory[11] = Unknown State (0x0)
StateHistory[10] = Unknown State (0x0)
StateHistory[09] = Unknown State (0x0)
StateHistory[08] = Unknown State (0x0)
StateHistory[07] = Unknown State (0x0)
StateHistory[06] = Unknown State (0x0)
StateHistory[05] = Unknown State (0x0)
StateHistory[04] = Unknown State (0x0)
StateHistory[03] = Unknown State (0x0)
StateHistory[02] = Unknown State (0x0)
StateHistory[01] = Unknown State (0x0)
Flags (0x00000011) DNF_MADEUP, DNF_ENUMERATED


1: kd> dt ROOT_ENUMERATOR_CONTEXT 0xf789a23c
nt!ROOT_ENUMERATOR_CONTEXT
+0x000 Status : 0n0
+0x004 KeyName : 0xf789a258 _UNICODE_STRING "Root\COMPOSITE_BATTERY"
+0x008 MaxDeviceCount : 0x100
+0x00c DeviceCount : 2
+0x010 DeviceList : 0xe1297918 -> 0x899c59a8 _DEVICE_OBJECT
1: kd> dd 0xe1297918
e1297918 899c59a8 89986e90 00000000 00000000
e1297928 00000000 00000000 00000000 00000000
e1297938 00000000 00000000 00000000 00000000
e1297948 00000000 00000000 00000000 00000000
e1297958 00000000 00000000 00000000 00000000
e1297968 00000000 00000000 00000000 00000000
e1297978 00000000 00000000 00000000 00000000
e1297988 00000000 00000000 00000000 00000000
1: kd> !devobj 89986e90
Device object (89986e90) is for:
00000002 \Driver\PnpManager DriverObject 899873b0
Current Irp 00000000 RefCount 0 Type 00000004 Flags 00001040
SecurityDescriptor e1297680 DevExt 89986f48 DevObjExt 89986f50 DevNode 89986d38
ExtensionFlags (0x00000010) DOE_START_PENDING
Characteristics (0x00000080) FILE_AUTOGENERATED_DEVICE_NAME
Device queue is not busy.
1: kd> !devnode 89986d38
DevNode 0x89986d38 for PDO 0x89986e90
Parent 0x899c5bc8 Sibling 0000000000 Child 0000000000
InstancePath is "Root\COMPOSITE_BATTERY\0000"
ServiceName is "Compbatt"
State = DeviceNodeInitialized (0x302)
Previous State = DeviceNodeUninitialized (0x301)
StateHistory[00] = DeviceNodeUninitialized (0x301)
StateHistory[19] = Unknown State (0x0)
StateHistory[18] = Unknown State (0x0)
StateHistory[17] = Unknown State (0x0)
StateHistory[16] = Unknown State (0x0)
StateHistory[15] = Unknown State (0x0)
StateHistory[14] = Unknown State (0x0)
StateHistory[13] = Unknown State (0x0)
StateHistory[12] = Unknown State (0x0)
StateHistory[11] = Unknown State (0x0)
StateHistory[10] = Unknown State (0x0)
StateHistory[09] = Unknown State (0x0)
StateHistory[08] = Unknown State (0x0)
StateHistory[07] = Unknown State (0x0)
StateHistory[06] = Unknown State (0x0)
StateHistory[05] = Unknown State (0x0)
StateHistory[04] = Unknown State (0x0)
StateHistory[03] = Unknown State (0x0)
StateHistory[02] = Unknown State (0x0)
StateHistory[01] = Unknown State (0x0)
Flags (0x00000011) DNF_MADEUP, DNF_ENUMERATED

1: kd> dt _device_node 89986d38
nt!_DEVICE_NODE
+0x000 Sibling : (null)
+0x004 Child : (null)
+0x008 Parent : 0x899c5bc8 _DEVICE_NODE
+0x00c LastChild : (null)
+0x010 Level : 1
+0x014 Notify : (null)
+0x018 State : 302 ( DeviceNodeInitialized )
+0x01c PreviousState : 301 ( DeviceNodeUninitialized )
+0x020 StateHistory : [20] 301 ( DeviceNodeUninitialized )
+0x070 StateHistoryEntry : 1
+0x074 CompletionStatus : 0n0
+0x078 PendingIrp : (null)
+0x07c Flags : 0x11
+0x080 UserFlags : 0
+0x084 Problem : 0
+0x088 PhysicalDeviceObject : 0x89986e90 _DEVICE_OBJECT
+0x08c ResourceList : (null)
+0x090 ResourceListTranslated : (null)
+0x094 InstancePath : _UNICODE_STRING "Root\COMPOSITE_BATTERY\0000"
+0x09c ServiceName : _UNICODE_STRING "Compbatt"
+0x0a4 DuplicatePDO : (null)
+0x0a8 ResourceRequirements : (null)
+0x0ac InterfaceType : 0xffffffff (No matching name)
+0x0b0 BusNumber : 0xffffffff
+0x0b4 ChildInterfaceType : 0xffffffff (No matching name)
+0x0b8 ChildBusNumber : 0xffffffff
+0x0bc ChildBusTypeIndex : 0xffff
+0x0be RemovalPolicy : 0 ''
+0x0bf HardwareRemovalPolicy : 0 ''
+0x0c0 TargetDeviceNotify : _LIST_ENTRY [ 0x89986df8 - 0x89986df8 ]
+0x0c8 DeviceArbiterList : _LIST_ENTRY [ 0x89986e00 - 0x89986e00 ]
+0x0d0 DeviceTranslatorList : _LIST_ENTRY [ 0x89986e08 - 0x89986e08 ]
+0x0d8 NoTranslatorMask : 0
+0x0da QueryTranslatorMask : 0
+0x0dc NoArbiterMask : 0
+0x0de QueryArbiterMask : 0
+0x0e0 OverUsed1 : __unnamed
+0x0e4 OverUsed2 : __unnamed
+0x0e8 BootResources : (null)
+0x0ec CapabilityFlags : 0
+0x0f0 DockInfo : __unnamed
+0x100 DisableableDepends : 0
+0x104 PendedSetInterfaceState : _LIST_ENTRY [ 0x89986e3c - 0x89986e3c ]
+0x10c LegacyBusListEntry : _LIST_ENTRY [ 0x89986e44 - 0x89986e44 ]

版权声明: 本文来自互联网用户投稿,该文观点仅代表作者本人,不代表本站立场。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如若内容造成侵权/违法违规/事实不符,请联系邮箱:809451989@qq.com进行投诉反馈,一经查实,立即删除!
网站建设 2026/6/10 16:48:34

【最小均方(LMS)算法的分流有源滤波器】分流有源滤波器采用最小均方(LMS)算法的仿真电路可以减轻谐波和无功功率附Simulink仿真

✅作者简介:热爱科研的Matlab仿真开发者,擅长数据处理、建模仿真、程序设计、完整代码获取、论文复现及科研仿真。🍎 往期回顾关注个人主页:Matlab科研工作室🍊个人信条:格物致知,完整Matlab代码及仿真咨询…

作者头像 李华
网站建设 2026/6/11 17:25:41

YOLOFuse建筑工地人员安全管理

YOLOFuse建筑工地人员安全管理 在智慧工地建设加速推进的今天,一个看似简单却长期困扰工程管理者的难题依然存在:如何确保夜间或烟雾弥漫的施工现场,每一个工人都处于可视、可管、可控的状态? 传统监控系统依赖可见光摄像头&#…

作者头像 李华
网站建设 2026/6/10 23:17:32

RISC-V开发板Bring-up全流程解析,基于C语言实现固件引导的完整方案

第一章:RISC-V开发板Bring-up概述RISC-V开发板的Bring-up是嵌入式系统开发的关键初始阶段,旨在验证硬件平台的基本功能并建立初步的软件运行环境。该过程通常涵盖电源检测、时钟配置、串口通信建立、固件加载以及基础外设初始化等环节。准备工作与依赖项…

作者头像 李华
网站建设 2026/6/6 0:13:35

揭秘C语言编译WASM的代码混淆难点:3步实现高强度反逆向保护

第一章:C语言编译WASM的代码混淆概述将C语言代码编译为WebAssembly(WASM)已成为前端高性能计算的重要手段,然而随着应用范围的扩大,保护核心算法和逻辑免受逆向分析的需求日益迫切。代码混淆作为软件保护的关键技术&am…

作者头像 李华
网站建设 2026/6/12 16:35:06

【稀缺资料】:NVIDIA工程师不会告诉你的CUDA内存对齐秘密技巧

第一章:CUDA内存管理的核心挑战在GPU并行计算中,内存管理是决定程序性能的关键因素。与传统CPU内存模型不同,CUDA架构采用分层内存体系,包括全局内存、共享内存、寄存器和常量内存等。这些内存类型在访问延迟、带宽和生命周期上存…

作者头像 李华