news 2026/4/23 14:16:08

nt!IopInitializeDeviceInstanceKey函数分析之add it to the device list

作者头像

张小明

前端开发工程师

1.2k 24
文章封面图
nt!IopInitializeDeviceInstanceKey函数分析之add it to the device list

nt!IopInitializeDeviceInstanceKey函数分析之add it to the device list
1: kd> kc
#
00 nt!IopInitializeDeviceInstanceKey
01 nt!PipApplyFunctionToSubKeys
02 nt!IopInitializeDeviceKey
03 nt!PipApplyFunctionToSubKeys
04 nt!IopGetRootDevices
05 nt!IopPnPDispatch
06 nt!IofCallDriver
07 nt!IopSynchronousCall
08 nt!IopQueryDeviceRelations
09 nt!PipEnumerateDevice
0a nt!PipProcessDevNodeTree
0b nt!PiProcessReenumeration
0c nt!PipDeviceActionWorker
0d nt!PipRequestDeviceAction
0e nt!IopInitializePlugPlayServices
0f nt!IoInitSystem
10 nt!Phase1Initialization
11 nt!PspSystemThreadStartup
12 nt!KiThreadStartup

BOOLEAN
IopInitializeDeviceInstanceKey(
IN HANDLE KeyHandle,
IN PUNICODE_STRING KeyName,
IN OUT PVOID Context
)
{
PROOT_ENUMERATOR_CONTEXT enumContext = (PROOT_ENUMERATOR_CONTEXT)Context;


//
// If we enumerated a root device, add it to the device list
//

if (NT_SUCCESS(status)) {
ASSERT(deviceObject != NULL);

enumContext->DeviceList[enumContext->DeviceCount] = deviceObject;
enumContext->DeviceCount++;

return TRUE;
} else {
enumContext->Status = status;
return FALSE;
}
}

1: kd> dv context
Context = 0xf789a23c
1: kd> dt ROOT_ENUMERATOR_CONTEXT 0xf789a23c
nt!ROOT_ENUMERATOR_CONTEXT
+0x000 Status : 0n0
+0x004 KeyName : 0xf789a258 _UNICODE_STRING "Root\COMPOSITE_BATTERY"
+0x008 MaxDeviceCount : 0x100
+0x00c DeviceCount : 1
+0x010 DeviceList : 0xe1297918 -> 0x899c59a8 _DEVICE_OBJECT
1: kd> dd 0xe1297918
e1297918 899c59a8 00000000 00000000 00000000
e1297928 00000000 00000000 00000000 00000000
e1297938 00000000 00000000 00000000 00000000
e1297948 00000000 00000000 00000000 00000000
e1297958 00000000 00000000 00000000 00000000
e1297968 00000000 00000000 00000000 00000000
e1297978 00000000 00000000 00000000 00000000
e1297988 00000000 00000000 00000000 00000000
1: kd> !devobj 899c59a8
Device object (899c59a8) is for:
00000001 \Driver\PnpManager DriverObject 899873b0
Current Irp 00000000 RefCount 0 Type 00000004 Flags 00001040
SecurityDescriptor e1297680 DevExt 899c5a60 DevObjExt 899c5a68 DevNode 899c5850
ExtensionFlags (0x00000010) DOE_START_PENDING
Characteristics (0x00000080) FILE_AUTOGENERATED_DEVICE_NAME
Device queue is not busy.
1: kd> !devnode 899c5850
DevNode 0x899c5850 for PDO 0x899c59a8
Parent 0x899c5bc8 Sibling 0x89986d38 Child 0000000000
InstancePath is "Root\ACPI_HAL\0000"
State = DeviceNodeInitialized (0x302)
Previous State = DeviceNodeUninitialized (0x301)
StateHistory[00] = DeviceNodeUninitialized (0x301)
StateHistory[19] = Unknown State (0x0)
StateHistory[18] = Unknown State (0x0)
StateHistory[17] = Unknown State (0x0)
StateHistory[16] = Unknown State (0x0)
StateHistory[15] = Unknown State (0x0)
StateHistory[14] = Unknown State (0x0)
StateHistory[13] = Unknown State (0x0)
StateHistory[12] = Unknown State (0x0)
StateHistory[11] = Unknown State (0x0)
StateHistory[10] = Unknown State (0x0)
StateHistory[09] = Unknown State (0x0)
StateHistory[08] = Unknown State (0x0)
StateHistory[07] = Unknown State (0x0)
StateHistory[06] = Unknown State (0x0)
StateHistory[05] = Unknown State (0x0)
StateHistory[04] = Unknown State (0x0)
StateHistory[03] = Unknown State (0x0)
StateHistory[02] = Unknown State (0x0)
StateHistory[01] = Unknown State (0x0)
Flags (0x00000011) DNF_MADEUP, DNF_ENUMERATED


1: kd> dt ROOT_ENUMERATOR_CONTEXT 0xf789a23c
nt!ROOT_ENUMERATOR_CONTEXT
+0x000 Status : 0n0
+0x004 KeyName : 0xf789a258 _UNICODE_STRING "Root\COMPOSITE_BATTERY"
+0x008 MaxDeviceCount : 0x100
+0x00c DeviceCount : 2
+0x010 DeviceList : 0xe1297918 -> 0x899c59a8 _DEVICE_OBJECT
1: kd> dd 0xe1297918
e1297918 899c59a8 89986e90 00000000 00000000
e1297928 00000000 00000000 00000000 00000000
e1297938 00000000 00000000 00000000 00000000
e1297948 00000000 00000000 00000000 00000000
e1297958 00000000 00000000 00000000 00000000
e1297968 00000000 00000000 00000000 00000000
e1297978 00000000 00000000 00000000 00000000
e1297988 00000000 00000000 00000000 00000000
1: kd> !devobj 89986e90
Device object (89986e90) is for:
00000002 \Driver\PnpManager DriverObject 899873b0
Current Irp 00000000 RefCount 0 Type 00000004 Flags 00001040
SecurityDescriptor e1297680 DevExt 89986f48 DevObjExt 89986f50 DevNode 89986d38
ExtensionFlags (0x00000010) DOE_START_PENDING
Characteristics (0x00000080) FILE_AUTOGENERATED_DEVICE_NAME
Device queue is not busy.
1: kd> !devnode 89986d38
DevNode 0x89986d38 for PDO 0x89986e90
Parent 0x899c5bc8 Sibling 0000000000 Child 0000000000
InstancePath is "Root\COMPOSITE_BATTERY\0000"
ServiceName is "Compbatt"
State = DeviceNodeInitialized (0x302)
Previous State = DeviceNodeUninitialized (0x301)
StateHistory[00] = DeviceNodeUninitialized (0x301)
StateHistory[19] = Unknown State (0x0)
StateHistory[18] = Unknown State (0x0)
StateHistory[17] = Unknown State (0x0)
StateHistory[16] = Unknown State (0x0)
StateHistory[15] = Unknown State (0x0)
StateHistory[14] = Unknown State (0x0)
StateHistory[13] = Unknown State (0x0)
StateHistory[12] = Unknown State (0x0)
StateHistory[11] = Unknown State (0x0)
StateHistory[10] = Unknown State (0x0)
StateHistory[09] = Unknown State (0x0)
StateHistory[08] = Unknown State (0x0)
StateHistory[07] = Unknown State (0x0)
StateHistory[06] = Unknown State (0x0)
StateHistory[05] = Unknown State (0x0)
StateHistory[04] = Unknown State (0x0)
StateHistory[03] = Unknown State (0x0)
StateHistory[02] = Unknown State (0x0)
StateHistory[01] = Unknown State (0x0)
Flags (0x00000011) DNF_MADEUP, DNF_ENUMERATED

1: kd> dt _device_node 89986d38
nt!_DEVICE_NODE
+0x000 Sibling : (null)
+0x004 Child : (null)
+0x008 Parent : 0x899c5bc8 _DEVICE_NODE
+0x00c LastChild : (null)
+0x010 Level : 1
+0x014 Notify : (null)
+0x018 State : 302 ( DeviceNodeInitialized )
+0x01c PreviousState : 301 ( DeviceNodeUninitialized )
+0x020 StateHistory : [20] 301 ( DeviceNodeUninitialized )
+0x070 StateHistoryEntry : 1
+0x074 CompletionStatus : 0n0
+0x078 PendingIrp : (null)
+0x07c Flags : 0x11
+0x080 UserFlags : 0
+0x084 Problem : 0
+0x088 PhysicalDeviceObject : 0x89986e90 _DEVICE_OBJECT
+0x08c ResourceList : (null)
+0x090 ResourceListTranslated : (null)
+0x094 InstancePath : _UNICODE_STRING "Root\COMPOSITE_BATTERY\0000"
+0x09c ServiceName : _UNICODE_STRING "Compbatt"
+0x0a4 DuplicatePDO : (null)
+0x0a8 ResourceRequirements : (null)
+0x0ac InterfaceType : 0xffffffff (No matching name)
+0x0b0 BusNumber : 0xffffffff
+0x0b4 ChildInterfaceType : 0xffffffff (No matching name)
+0x0b8 ChildBusNumber : 0xffffffff
+0x0bc ChildBusTypeIndex : 0xffff
+0x0be RemovalPolicy : 0 ''
+0x0bf HardwareRemovalPolicy : 0 ''
+0x0c0 TargetDeviceNotify : _LIST_ENTRY [ 0x89986df8 - 0x89986df8 ]
+0x0c8 DeviceArbiterList : _LIST_ENTRY [ 0x89986e00 - 0x89986e00 ]
+0x0d0 DeviceTranslatorList : _LIST_ENTRY [ 0x89986e08 - 0x89986e08 ]
+0x0d8 NoTranslatorMask : 0
+0x0da QueryTranslatorMask : 0
+0x0dc NoArbiterMask : 0
+0x0de QueryArbiterMask : 0
+0x0e0 OverUsed1 : __unnamed
+0x0e4 OverUsed2 : __unnamed
+0x0e8 BootResources : (null)
+0x0ec CapabilityFlags : 0
+0x0f0 DockInfo : __unnamed
+0x100 DisableableDepends : 0
+0x104 PendedSetInterfaceState : _LIST_ENTRY [ 0x89986e3c - 0x89986e3c ]
+0x10c LegacyBusListEntry : _LIST_ENTRY [ 0x89986e44 - 0x89986e44 ]

版权声明: 本文来自互联网用户投稿,该文观点仅代表作者本人,不代表本站立场。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如若内容造成侵权/违法违规/事实不符,请联系邮箱:809451989@qq.com进行投诉反馈,一经查实,立即删除!
网站建设 2026/4/23 14:15:55

YOLOFuse脑机接口未来集成可能性

YOLOFuse与脑机接口的融合前景:从感知增强到智能协同 在医疗康复实验室的一间安静房间里,一位脊髓损伤患者正试图通过脑电波控制机械臂完成抓取动作。然而,当环境光线变暗或有人突然进入视野时,系统频繁误判目标位置,导…

作者头像 李华
网站建设 2026/4/20 15:39:22

实时视频流延迟高怎么办?C语言级性能优化的4种硬核方法

第一章:实时视频流延迟问题的根源剖析实时视频流在直播、远程会议和安防监控等场景中广泛应用,但延迟问题始终是影响用户体验的核心挑战。延迟的产生并非单一环节所致,而是多个技术阶段叠加的结果。编码与压缩开销 视频数据在传输前需经过编码…

作者头像 李华
网站建设 2026/4/23 11:30:19

YOLOFuse等保测评准备:信息安全等级保护

YOLOFuse在等保测评中的技术适配与工程实践 在智能安防系统日益成为关键信息基础设施的今天,如何确保视觉感知模块在复杂环境下的稳定性、可审计性和部署一致性,已成为信息安全等级保护(简称“等保”)测评中不可忽视的技术命题。尤…

作者头像 李华
网站建设 2026/4/23 13:19:58

YOLOFuse API接口设计草案:为后续产品化做准备

YOLOFuse API接口设计:迈向产品化的工程实践 在智能安防、自动驾驶和夜间监控等现实场景中,单一可见光图像的检测能力正面临严峻挑战。低光照、雾霾遮挡、伪装干扰等问题频繁导致传统目标检测模型漏检率上升,系统可靠性下降。这背后的核心矛盾…

作者头像 李华