![]() |
|
#8
|
|||
|
|||
|
It seems like I'm a bit too stupid to use LiveKD. I did the following:
First I tried to show what's located at "fs:[124]" by entering "d fs:124", but I only got the message "GetContextState failed, 0x80004001" three times followed by "bad segment error at '124'. Next I only entered "d 124" and got a memory dump, but only filled with "??" as data. After that I read the help file entry for the "d" command to learn all possible "dump" commands and their correct syntax, but none of them worked, even the dump commands for psysical memory failed. So how should I read "fs:[124]" from Ring-0 with WinDBG? |
| Thread Tools | |
| Display Modes | |
|
|