Содержимое FS

Discussion in 'WASM.BEGINNERS' started by Sholar, Jan 27, 2012.

  1. Sholar

    Sholar New Member

    Blog Posts:
    0
    Joined:
    Oct 16, 2011
    Messages:
    189
    Что за структура лежит в FS:[40] в кернелмоде?
     
    Sholar, Jan 27, 2012
    #1
  2. l_inc

    l_inc New Member

    Blog Posts:
    0
    Joined:
    Sep 29, 2005
    Messages:
    2,566
    Sholar
    По [fs:0] хранится KPCR. Соответственно, по [fs:40] — поле IRR, а по [fs:40h] — указатель на TSS.
     
    l_inc, Jan 27, 2012
    #2
  3. Sholar

    Sholar New Member

    Blog Posts:
    0
    Joined:
    Oct 16, 2011
    Messages:
    189
    l_inc
    Спасибо, помог.
     
    Sholar, Jan 27, 2012
    #3