流沙团
分析GDT表
2018-3-14 流沙团


0x001 读取GDT表 (删除部分 00000000 )



0: kd> dq 8003f000 l 3ff

8003f000  00000000`00000000 00cf9b00`0000ffff

8003f010  00cf9300`0000ffff 00cffb00`0000ffff

8003f020  00cff300`0000ffff 80008b04`200020ab

8003f030  ffc093df`f0000001 0040f300`00000fff

8003f040  0000f200`0400ffff 00000000`00000000

8003f050  80008955`27000068 80008955`27680068

8003f060  00009302`2f40ffff 0000920b`80003fff

8003f070  ff0092ff`700003ff 80009a40`0000ffff

8003f080  80009240`0000ffff 00009200`00000000

8003f090  00000000`00000000 00000000`00000000

8003f0a0  8600893a`b1000068 00000000`00000000

8003f0b0  00000000`00000000 00000000`00000000

8003f0c0  00000000`00000000 00000000`00000000

8003f0d0  00000000`00000000 00000000`00000000

8003f0e0  f7009f66`d000ffff 00009200`0000ffff

8003f0f0  8000984f`cfd003b7 00009200`0000ffff

8003f100  f7409329`8400ffff f7409329`8400ffff

8003f110  f7409329`8400ffff 00000000`8003f120

8003f120  00000000`8003f128 00000000`8003f130

8003f130  00000000`8003f138 00000000`8003f140

8003f140  00000000`8003f148 00000000`8003f150

8003f150  00000000`8003f158 00000000`8003f160

8003f160  00000000`8003f168 00000000`8003f170

8003f170  00000000`8003f178 00000000`8003f180

8003f180  00000000`8003f188 00000000`8003f190

8003f190  00000000`8003f198 00000000`8003f1a0

8003f1a0  00000000`8003f1a8 00000000`8003f1b0

8003f1b0  00000000`8003f1b8 00000000`8003f1c0

8003f1c0  00000000`8003f1c8 00000000`8003f1d0

8003f1d0  00000000`8003f1d8 00000000`8003f1e0

8003f1e0  00000000`8003f1e8 00000000`8003f1f0

8003f1f0  00000000`8003f1f8 00000000`8003f200

8003f200  00000000`8003f208 00000000`8003f210

8003f210  00000000`8003f218 00000000`8003f220

8003f220  00000000`8003f228 00000000`8003f230

8003f230  00000000`8003f238 00000000`8003f240

8003f240  00000000`8003f248 00000000`8003f250

8003f250  00000000`8003f258 00000000`8003f260

8003f260  00000000`8003f268 00000000`8003f270

8003f270  00000000`8003f278 00000000`8003f280

8003f280  00000000`8003f288 00000000`8003f290

8003f290  00000000`8003f298 00000000`8003f2a0

8003f2a0  00000000`8003f2a8 00000000`8003f2b0

8003f2b0  00000000`8003f2b8 00000000`8003f2c0

8003f2c0  00000000`8003f2c8 00000000`8003f2d0

8003f2d0  00000000`8003f2d8 00000000`8003f2e0

8003f2e0  00000000`8003f2e8 00000000`8003f2f0

8003f2f0  00000000`8003f2f8 00000000`8003f300

8003f300  00000000`8003f308 00000000`8003f310

8003f310  00000000`8003f318 00000000`8003f320

8003f320  00000000`8003f328 00000000`8003f330

8003f330  00000000`8003f338 00000000`8003f340

8003f340  00000000`8003f348 00000000`8003f350

8003f350  00000000`8003f358 00000000`8003f360

8003f360  00000000`8003f368 00000000`8003f370

8003f370  00000000`8003f378 00000000`8003f380

8003f380  00000000`8003f388 00000000`8003f390

8003f390  00000000`8003f398 00000000`8003f3a0

8003f3a0  00000000`8003f3a8 00000000`8003f3b0

8003f3b0  00000000`8003f3b8 00000000`8003f3c0

8003f3c0  00000000`8003f3c8 00000000`8003f3d0

8003f3d0  00000000`8003f3d8 00000000`8003f3e0

8003f3e0  00000000`8003f3e8 00000000`8003f3f0

8003f3f0  00000000`8003f3f8 00000000`00000000

8003f400  80548e00`000831a0 80548e00`0008331c

8003f410  00008500`0058113e 8054ee00`00083730

8003f420  8054ee00`000838b0 80548e00`00083a10

8003f430  80548e00`00083b84 80548e00`000841fc

8003f440  00008500`00501198 80548e00`00084600

8003f450  80548e00`00084720 80548e00`00084860

8003f460  80548e00`00084ac0 80548e00`00084dac

8003f470  80548e00`000854a8 80548e00`000857e0

8003f480  80548e00`00085900 80548e00`00085a3c

8003f490  80548500`00a057e0 80548e00`00085ba4

8003f4a0  80548e00`000857e0 80548e00`000857e0

8003f4b0  80548e00`000857e0 80548e00`000857e0

8003f4c0  80548e00`000857e0 80548e00`000857e0

8003f4d0  80548e00`000857e0 80548e00`000857e0

8003f4e0  80548e00`000857e0 80548e00`000857e0

8003f4f0  80548e00`000857e0 806e8e00`0008710c

8003f500  00000000`00080000 00000000`00080000

8003f510  00000000`00080000 00000000`00080000

8003f520  00000000`00080000 00000000`00080000

8003f530  00000000`00080000 00000000`00080000

8003f540  00000000`00080000 00000000`00080000

8003f550  8054ee00`000829ce 8054ee00`00082ad0

8003f560  8054ee00`00082c80 8054ee00`0008360c

8003f570  8054ee00`00082451 80548e00`000857e0

8003f580  80548e00`00081b10 80548e00`00081b1a

8003f590  80548e00`00081b24 80548e00`00081b2e

8003f5a0  80548e00`00081b38 80548e00`00081b42

8003f5b0  80548e00`00081b4c 806e8e00`00086864

8003f5c0  80548e00`00081b60 80548e00`00081b6a

8003f5d0  80548e00`00081b74 80548e00`00081b7e

8003f5e0  80548e00`00081b88 806e8e00`00087e2c

8003f5f0  80548e00`00081b9c 80548e00`00081ba6

8003f600  80548e00`00081bb0 806e8e00`00087c88

8003f610  80548e00`00081bc4 80548e00`00081bce

8003f620  80548e00`00081bd8 80548e00`00081be2

8003f630  80548e00`00081bec 80548e00`00081bf6

8003f640  80548e00`00081c00 80548e00`00081c0a

8003f650  80548e00`00081c14 80548e00`00081c1e

8003f660  80548e00`00081c28 80548e00`00081c32

8003f670  80548e00`00081c3c 80548e00`00081c46

8003f680  806e8e00`0008693c 80548e00`00081c5a

8003f690  80548e00`00081c64 80548e00`00081c6e

8003f6a0  80548e00`00081c78 80548e00`00081c82

8003f6b0  80548e00`00081c8c 80548e00`00081c96

8003f6c0  80548e00`00081ca0 80548e00`00081caa

8003f6d0  80548e00`00081cb4 80548e00`00081cbe

8003f6e0  80548e00`00081cc8 80548e00`00081cd2

8003f6f0  80548e00`00081cdc 80548e00`00081ce6

8003f700  80548e00`00081cf0 80548e00`00081cfa

8003f710  862a8e00`0008d30c 85e58e00`00085044

8003f720  80548e00`00081d18 80548e00`00081d22

8003f730  80548e00`00081d2c 80548e00`00081d36

8003f740  80548e00`00081d40 80548e00`00081d4a

8003f750  80548e00`00081d54 80548e00`00081d5e

8003f760  80548e00`00081d68 80548e00`00081d72

8003f770  80548e00`00081d7c 80548e00`00081d86

8003f780  80548e00`00081d90 80548e00`00081d9a

8003f790  80548e00`00081da4 86398e00`00087884

8003f7a0  80548e00`00081db8 80548e00`00081dc2

8003f7b0  80548e00`00081dcc 80548e00`00081dd6

8003f7c0  80548e00`00081de0 80548e00`00081dea

8003f7d0  80548e00`00081df4 80548e00`00081dfe

8003f7e0  80548e00`00081e08 80548e00`00081e12

8003f7f0  80548e00`00081e1c 80548e00`00081e26

8003f800  80548e00`00081e30 80548e00`00081e3a

8003f810  85ea8e00`00083bec 85e88e00`000851dc

8003f820  80548e00`00081e58 80548e00`00081e62

8003f830  80548e00`00081e6c 80548e00`00081e76

8003f840  80548e00`00081e80 80548e00`00081e8a

8003f850  80548e00`00081e94 80548e00`00081e9e

8003f860  80548e00`00081ea8 80548e00`00081eb2

8003f870  80548e00`00081ebc 80548e00`00081ec6

8003f880  80548e00`00081ed0 80548e00`00081eda

8003f890  85e08e00`0008858c 85da8e00`000898bc

8003f8a0  80548e00`00081ef8 80548e00`00081f02

8003f8b0  80548e00`00081f0c 80548e00`00081f16

8003f8c0  80548e00`00081f20 80548e00`00081f2a

8003f8d0  80548e00`00081f34 80548e00`00081f3e

8003f8e0  80548e00`00081f48 80548e00`00081f52

8003f8f0  80548e00`00081f5c 80548e00`00081f66

8003f900  80548e00`00081f70 80548e00`00081f7a

8003f910  80548e00`00081f84 85d98e00`00088044

8003f920  80548e00`00081f98 80548e00`00081fa2

8003f930  80548e00`00081fac 80548e00`00081fb6

8003f940  80548e00`00081fc0 80548e00`00081fca

8003f950  80548e00`00081fd4 80548e00`00081fde

8003f960  80548e00`00081fe8 80548e00`00081ff2

8003f970  80548e00`00081ffc 80548e00`00082006

8003f980  80548e00`00082010 86328e00`0008f044

8003f990  85e48e00`00084954 80548e00`0008202e

8003f9a0  85e48e00`000823f4 80548e00`00082042

8003f9b0  80548e00`0008204c 80548e00`00082056

8003f9c0  80548e00`00082060 80548e00`0008206a

8003f9d0  80548e00`00082074 80548e00`0008207e

8003f9e0  80548e00`00082088 80548e00`00082092

8003f9f0  80548e00`0008209c 80548e00`000820a6

8003fa00  80548e00`000820b0 806e8e00`00086ac0

8003fa10  80548e00`000820c4 80548e00`000820ce

8003fa20  80548e00`000820d8 80548e00`000820e2

8003fa30  80548e00`000820ec 80548e00`000820f6

8003fa40  80548e00`00082100 80548e00`0008210a

8003fa50  80548e00`00082114 80548e00`0008211e

8003fa60  80548e00`00082128 80548e00`00082132

8003fa70  80548e00`0008213c 80548e00`00082146

8003fa80  80548e00`00082150 806e8e00`00085e54

8003fa90  80548e00`00082164 80548e00`0008216e

8003faa0  80548e00`00082178 80548e00`00082182

8003fab0  80548e00`0008218c 80548e00`00082196

8003fac0  80548e00`000821a0 80548e00`000821aa

8003fad0  80548e00`000821b4 80548e00`000821be

8003fae0  80548e00`000821c8 80548e00`000821d2

8003faf0  80548e00`000821dc 80548e00`000821e6

8003fb00  80548e00`000821f0 806e8e00`00087048

8003fb10  80548e00`00082204 806e8e00`00086dac

8003fb20  80548e00`00082218 80548e00`00082222

8003fb30  80548e00`0008222c 80548e00`00082236

8003fb40  80548e00`00082240 80548e00`0008224a

8003fb50  80548e00`00082254 80548e00`0008225e

8003fb60  80548e00`00082268 80548e00`00082272

8003fb70  80548e00`00082279 80548e00`00082280

8003fb80  80548e00`00082287 80548e00`0008228e

8003fb90  80548e00`00082295 80548e00`0008229c

8003fba0  80548e00`000822a3 80548e00`000822aa

8003fbb0  80548e00`000822b1 80548e00`000822b8

8003fbc0  80548e00`000822bf 80548e00`000822c6

8003fbd0  80548e00`000822cd 80548e00`000822d4

8003fbe0  80548e00`000822db 806e8e00`000875a8

8003fbf0  806e8e00`00087748 80548e00`000822f0

80040000  805524f0`80551cb0 00000000`8054f700

80040010  00000000`00000000 ffdff000`00000000

80040020  00000000`ffdff120 00000000`00000000

80040030  8054e2b8`ffffffff 8003f000`8003f400

80040040  00010001`80042000 00000c15`00000001

80040090  00000000`00000000 00000000`052f5cb0

800400a0  b8597370`052f5cb0 b8617b8f`00000000

80040120  8055ce60`00010001 8055ce60`00000000

80040130  00000001`00000000 0001003f`3c030106

80040140  00000000`00000000 00000000`00000000

80040150  00000000`00000000 00000003`00000001

80040160  806eda5b`f7a70d14 805520cc`85dfb1f8

80040170  8055202c`806e7100 80552007`806e7106

80040180  805520cc`000000e1 badb0d00`806eda5b

80040190  806edb15`00000177 805520f4`85dfb234

800401a0  000010ca`806e7100 00000004`00000004

800401b0  00000177`f7427dae 861e30e8`861e3374

800401c0  8055207c`861e3370 00000030`00000000

800401d0  00000023`00000023 00000000`22161eb8

800401e0  80556a40`00000e4c 00000001`80554780

800401f0  8052c5dc`805523c0 00000202`00000008

80040200  00000010`805523b0 861e30e8`85ea3bb0

80040210  00000000`80552100 804fc25a`072acef8

80040220  80500b5e`80552100 00000000`f787d121

80040230  00000000`c43c1000 861e3370`806eda5b

80040240  806e7100`80552190 f7427dae`80552100

80040250  861e3374`00000177 861e3370`861e30e8

80040260  f742f871`80552118 8625d288`861e3374

80040270  f742e602`80552130 861e3374`862acef8

80040280  85dfb1f8`806eda54 f7428dd7`80552168

80040290  861e3370`00000001 85ea3bb0`00000000

800402a0  85ea3bb0`804fc8cf 80552200`861e30e8

800402b0  072acef8`00000000 f742b6b2`8055217c

800402c0  00000000`ffdff9c0 85ea3e14`00000000

800402d0  805521a0`80552238 85ea3bb0`80546695

800402e0  00010007`861e3030 805466a8`00000182

800402f0  00000182`58000002 806e7422`80552238

80040300  00000170`badb0d00 805521d4`021e3030

80040310  861e3030`f742da6a 85dbccd8`861e3030

80040320  862ace50`00000000 1d09ffff`00000000

80040330  00000170`00004168 00000002`00000041

80040340  ffffffff`85dfb1f8 861e31c8`85ea3e14

80040350  00000001`861e30e8 00000000`80552238

80040360  00000008`806e7422 8054643d`00000246

80040370  f742c39d`861e3030 f742bfdc`85ea3bb0

80040380  80500c07`00000206 f787dca8`00000002

80040390  80504419`f787d120 85fe9090`eecee038

800403a0  80500c07`00000206 f787dca8`00000002

800403b0  80504419`f787d120 861b1020`8612c328

800403c0  ffdff120`00000008 80552288`001b1020

800403d0  861b1020`80503dda 000000c0`00000000

800403e0  80500af7`8055229c 00000000`00000000

800403f0  00000001`805522b0 00000206`804fd4e7

80040400  00000002`80500c07 d6904000`8001003b

80040410  000006f9`00b4f000 00000000`00000000

80040420  00000000`00000000 00000400`ffff0ff0

80040430  8003f000`03ff0000 8003f400`07ff0000

80040440  00000000`00000028 00000000`00000000

80040530  00000000`00000000 80554880`00000000

80040540  80554800`00000000 80554b00`00000000

80040550  80554b80`00000000 80554100`00000000

80040560  80554000`00000000 80554300`00000000

80040570  80554480`00000000 80554080`00000000

80040580  80554500`00000000 80554580`00000000

80040590  80554400`00000000 80554d80`00000000

800405a0  80554e00`00000000 80554280`00000000

800405c0  0000254d`00000000 00000009`00000e0a

800405d0  00000000`0000014d 00000014`00000027

800405e0  00000001`000036cb 8055d560`00000000

800405f0  ffdff120`00000001 00000000`00000000

80040600  00000249`00000000 00000003`00000000

80040610  00000003`000003fd 000283cf`00000000

80040620  000000ec`00000000 00000000`00000000

80040630  00000000`00000000 00000000`000cdeba

80040640  80556580`8639eb30 80556600`8639eab0

80040650  80556500`8639ebb0 80556f80`863b4f80

80040660  80556f00`863b4ef8 80555a80`863ab638

80040670  80556680`8639ea30 

800406c0  80559080`863af000 80559100`863af100

800406d0  80559180`863af200 80559200`863af300

800406e0  80559280`863af400 80559300`863af500

800406f0  80559380`863af600 80559400`863af700

80040700  80559480`863af800 80559500`863af900

80040710  80559580`863afa00 80559600`863afb00

80040720  80559680`863afc00 80559700`863afd00

80040730  80559780`863afe00 80559800`863aff00

80040740  80559880`863b0000 80559900`863b0100

80040750  80559980`863b0200 80559a00`863b0300

80040760  80559a80`863b0400 80559b00`863b0500

80040770  80559b80`863b0600 80559c00`863b0700

80040780  80559c80`863b0800 80559d00`863b0900

80040790  80559d80`863b0a00 80559e00`863b0b00

800407a0  80559e80`863b0c00 80559f00`863b0d00

800407b0  80559f80`863b0e00 8055a000`863b0f00

800407c0  80558080`863af080 80558100`863af180

800407d0  80558180`863af280 80558200`863af380

800407e0  80558280`863af480 80558300`863af580

800407f0  80558380`863af680 80558400`863af780

80040800  80558480`863af880 80558500`863af980

80040810  80558580`863afa80 80558600`863afb80

80040820  80558680`863afc80 80558700`863afd80

80040830  80558780`863afe80 80558800`863aff80

80040840  80558880`863b0080 80558900`863b0180

80040850  80558980`863b0280 80558a00`863b0380

80040860  80558a80`863b0480 80558b00`863b0580

80040870  80558b80`863b0680 80558c00`863b0780

80040880  80558c80`863b0880 80558d00`863b0980

80040890  80558d80`863b0a80 80558e00`863b0b80

800408a0  80558e80`863b0c80 80558f00`863b0d80

800408b0  80558f80`863b0e80 80559000`863b0f80

800408c0  000000d0`00000000 00000000`80552100

80040910  00000024`804fc242 00000000`00000000

80040980  ffdff980`ffdff980 00001848`f7a15000

80040990  00000000`00000000 00001848`00000000

800409a0  00000001`00000000 00000000`00000003

800409e0  00000000`02200013 00000000`00000000

80040a00  000002c8`00000000 00000000`00000000

80040a20  49656e69`756e6547 00010000`6c65746e

80040a30  a0033fff`00000c14 00000012`00000000

80040c50  00000446`805296e0 863e71f0`000001c5

80040c60  00000001`863e71f0 00000028`b5846e98

80040c70  00000028`c6c88da4 00000028`c6c7f2d0

80040c90  fffffebc`112ca034 00006464`cfb410a2

80040ca0  00000000`00000000 00000000`00000000

80040cb0  00000000`00000000 00000012`e0e0b0d6

80040cd0  00000000`0000c511 00000000`00000000

80040ce0  00000000`00000000 00000064`64000000

80040d10  00000000`000003d8 00000000`000a0009

80040d20  ffdffd20`ffdffd20 00000000`00000000

80040d40  00000000`01200013 8052a5a8`00000000

80040d50  00000000`ffdff120 00000000`00000000



0x002 分析数据







1

00000000`00000000 



0000 0000

0000 0000



p=0 

描述符无效

段描述符无效





2

00cf9b00`0000ffff



00cf9b00

0000ffff



0000 0000 1010 1111 1001 1011 0000 0000

0000 0000 0000 0000 1111 1111 1111 1111

1001 1011 9b

p=1 有效

s=1 Code | Data



Type域

1011

代码段 Code



  C R A

1 0 1 1

Execute/Read,accessed



有效,代码段,访问过,可读可执行





3

00cf9300`0000ffff

00cf9300

0000 0000 1010 1111 1001 0011 0000 0000

1001 0011 93

p=1 有效

s=1 Type<8  Data



  E W A

0 0 1 1

Read/Write,accessed



有效,数据段,可读可写 , 访问过



4

00cffb00`0000ffff

00cffb00

0000 0000 1010 1111 1111 1011 0000 0000

1111 1011 fb

p=1

s=1 Type=1011  Code



  C R A

1 0 1 1   

Execute/Read,accessed

代码段 可读可执行,访问过



5

00cff300`0000ffff

00cff300

0000 0000 1010 1111 1111 0011 0000 0000

1111 0011 f3

p=1

s=1 type=0011  Data



  E W A

0 0 1 1

Read/Write accessed



数据段,可读可写 访问过



6

80008b04`200020ab

80008b04

1000 0000 0000 0000 1000 1011 0000 0100

1000 1011 8b

p=1

s=0 | Type = 1011  系统段



1011 32-Bit TSS(Busy)

有效 系统段 32-Bit TSS(Busy)







ffc093df`f0000001

ffc093df

1111 1111 1010 0000 1001 0011 1101 1111

1001 0011

p=1

s=1 type = 0011  Data

  E W A

0 0 1 1   Read/Write accessed



有效 ,数据段, 已访问过, 可读可写



8

0040f300`00000fff

0040f300



0000 0000 0100 0000 1111 0011 0000 0000

1111 0011

p=1 

s=1 type = 0011  Data

  E W A

0 0 1 1   Read/Write accessed



有效 ,数据段, 已访问过, 可读可写





0000f200`0400ffff

0000f200

0000 0000 0000 0000 1111 0010 0000 0000

1111 0010 f2

p=1

s=1 type = 0010  Data

  E W A

0 0 1 0 Read/Write

有效,数据段,可读可写



10

80008955`27000068

80008955

1000 0000 0000 0000 1000 1001 01010101

1000 1001 89

p=1 

s=0 type 1001  系统段



1001 32-Bit TSS(Availbale)



系统段 32-Bit TSS(Availbale)



11

80008955`27680068

80008955

1000 0000 0000 0000 1000 1001 01010101

1000 1001 89

p=1 

s=0 type 1001  系统段



1001 32-Bit TSS(Availbale)



系统段 32-Bit TSS(Availbale)





12

00009302`2f40ffff

00009302

0000 0000 0000 0000 1001 0011 0000 0010

1001 0011 93

p=1

s=1 type=0011  Data

  E W A

0 0 1 1 Read/Write accessed

有效, 数据段,Read/Write accessed



13

0000920b`80003fff

0000920b

0000 0000 0000 0000 1001 0010 0000 1011

1001 0010 92

p=1 

s=1 type = 0010  data

  E W A

0 0 1 0 Read/Write

有效,数据段,Read/Write



14

ff0092ff`700003ff

ff0092ff

1111 1111 0000 0000 1001 0010 1111 1111

1001 0010 92

p=1 

s=1 type = 0010  data

  E W A

0 0 1 0 Read/Write

有效,数据段,Read/Write



15

80009a40`0000ffff

80009a40

1000 0000 0000 0000 1001 1010 0010 0000

1001 1010 9a

p=1

s=1 type=1010 Code

  C R A

1 0 1 0  Execute/Read 

有效 代码段 可读可执行



16

80009240`0000ffff

80009240

92

1001 0010

p=1

s=1 type=0010 Data

  C R A

0 0 1 0 Read/Write

有效,代码段,可读可写



17

00009200`00000000

00009200

92

1001 0010

p=1

s=1 type=0010

  E W A

0 0 1 0

C R A

0 0 1 0 Read/Write

有效,代码段,可读可写



18

8600893a`b1000068 

8600893a

1000 0110 0000 0000 1000 1001 0011 1010

1000 1001 89

p=1

s=0 type = 1001   系统段

32-Bit TSS(Availbale)

有效,系统段,32-Bit TSS(Availbale)



19

f7009f66`d000ffff

f7009f66

9f

1001 1111

p=1

s=1 type = 1111 Code

  C R A

1 1 1 1 Execute/Read-Only conforming,accessed

有效,代码段,Execute/Read-Only conforming,accessed



20

00009200`0000ffff

1001 0010  92

p=1

s=1 type=0010 Data





21

8000984f`cfd003b7

8000984f

1001 1000 98

p=1

s=1 type = 1000 Code Execute-Only

有效,代码段,Execute-Only



22

00009200`0000ffff

1001 0010 92





23

f7409329`8400ffff

93



24

f7409329`8400ffff

93



25

80548e00`000831a0 

1000 1110 8e

p=1

s=0 type=1110  系统段

32-Bit interrupt Gate

有效, 系统端,中断门



26

80548e00`0008331c

8e



27

00008500`0058113e

85

1000 0101

p=1 

s=0 type = 0101  系统段

Task Gate 

有效, 系统段, 任务门



28

8054ee00`00083730

ee

1110 1110

p=1

s=0 type = 1110 系统段

32-Bit interrupt Gate

有效, 系统端,中断门



29

805524f0`80551cb0 

24

0010 0100

p=0  无效



30

ffdff000`00000000

f0

1111 0000

p=1

s=1 type=0000 data

Read-Only



有效 数据段,Read-Only



31

8054e2b8`ffffffff

e2

1110 0010

p=1

s=0 type=0010  系统段

LDT

有效,系统段,LDT



32

8003f000`8003f400

f0

1111 0000

p=1

s=1 type=0000 data

Read-Only



有效 数据段,Read-Only





33

b8597370`052f5cb0

73

0111 0011

p=0 无效





34

8055ce60`00010001

ce

1010 1110

p=1

s=0 type=1110 系统段,

32-Bit Interrupt Gate



35

806eda5b`f7a70d14 

da

1101 1010

p=1 

s=1 type = 1010 Code段

Execute/Read



36

806edb15`00000177 

db

1101 1011

p=1

s=1 type = 1011 Code段

Execute/Read accessed



37

8052c5dc`805523c0 

c5

1100 0101

p=1

s=0 type=0101 Task Gate

有效, 系统段, 任务门





38

804fc25a`072acef8

c2

1100 0010

p=1

s=0 type=0010 LDT

有效,系统段, LDT



39

f742f871`80552118

f8

1111 1000

p=1

s=1 type=1000 Execute-Only Code段



有效,code Execute-Only



40

8625d288`861e3374

d2

1101 0010

p=1 

s=1 type=0010  Data段 Read/Write



41

f742e602`80552130

e6

1110 0110

p=1

s=0 type=0110  系统段

16-Bit Interrupt Gate



42

861e3374`862acef8

e3

1110 0011

p=1

s=0 type=0011



43

85dfb1f8`806eda54

b1

1011 0001

p=1

s=1 Type=0001 Data

Read-Only,accessed



44

f7428dd7`80552168

8d

1000 1101

p=1

s=0 type = 1101

系统段,Reserved



45

072acef8`00000000

ce

1100 1110

p=1

s=0 type = 1110 系统段,

32-Bit Interrupt Gate



46

f742b6b2`8055217c

b6

1011 0110

p=1

s=1 type=0110 Data段

  E W A

0 1 1 0



Read/Write . expend-down





47

85ea3e14`00000000

3e 无效



48

85dbccd8`861e3030

cc

1100 1100

p=1

s=0 type=1100

32-Bit Call Gate



49

862ace50`00000000

ce

1100 1110

p=1

s=0 type=1110 32-Bit Interrupt Gate



50

ffffffff`85dfb1f8

ff

1111 1111

p=1

s=1 type = 1111 Code段

Execute/Read-Only conforming accessed







分析累了, 主要分析的是



P



S



TYPE



然后对比表









发表评论:
昵称

邮件地址 (选填)

个人主页 (选填)

内容