【dbg】Debug Print Filter

Ayala

windows系统的调试信息过滤体系

1. DPFLTR_LEVEL_MASK* KdComponentTable[DPFLTR_ENDOFTABLE_ID+1];
   
2. DPFLTR_LEVEL_MASK  Kd_WIN2000_Mask=DPFLTR_WARNING_LEVEL; //1
   
3. 
   
4. BOOL
   
5. NtQueryDebugFilterState(DPFLTR_TYPE ty, DPFLTR_LEVEL lv)
   
6. {
   
7.         if (ty>DPFLTR_ENDOFTABLE_ID) //146
   
8.         {
   
9.                 ty=DPFLTR_DEFAULT_ID; //0x65
   
10.                 lv=DPFLTR_INFO_LEVEL; //0x3
    
11.         }
    
12.         if (lv < 0x1F) //31
    
13.     {
    
14.                 lv=1<<lv;
    
15.         }
    
16.   return lv & Kd_WIN2000_Mask || lv & *KdComponentTable[ty];
    
17. }

复制代码

1. Windows Registry Editor Version 5.00
   
2. 
   
3. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Debug Print Filter]
   
4. "WIN2000"=dword:00000000
   
5. "SYSTEM"=dword:00000000
   
6. "SMSS"=dword:00000000
   
7. "SETUP"=dword:00000000
   
8. "NTFS"=dword:00000000
   
9. "FSTUB"=dword:00000000
   
10. "CRASHDUMP"=dword:00000000
    
11. "CDAUDIO"=dword:00000000
    
12. "CDROM"=dword:00000000
    
13. "CLASSPNP"=dword:00000000
    
14. "DISK"=dword:00000000
    
15. "REDBOOK"=dword:00000000
    
16. "STORPROP"=dword:00000000
    
17. "SCSIPORT"=dword:00000000
    
18. "SCSIMINIPORT"=dword:00000000
    
19. "CONFIG"=dword:00000000
    
20. "I8042PRT"=dword:00000000
    
21. "SERMOUSE"=dword:00000000
    
22. "LSERMOUS"=dword:00000000
    
23. "KBDHID"=dword:00000000
    
24. "MOUHID"=dword:00000000
    
25. "KBDCLASS"=dword:00000000
    
26. "MOUCLASS"=dword:00000000
    
27. "TWOTRACK"=dword:00000000
    
28. "WMILIB"=dword:00000000
    
29. "ACPI"=dword:00000000
    
30. "AMLI"=dword:00000000
    
31. "HALIA64"=dword:00000000
    
32. "VIDEO"=dword:00000000
    
33. "SVCHOST"=dword:00000000
    
34. "VIDEOPRT"=dword:00000000
    
35. "TCPIP"=dword:00000000
    
36. "DMSYNTH"=dword:00000000
    
37. "NTOSPNP"=dword:00000000
    
38. "FASTFAT"=dword:00000000
    
39. "SAMSS"=dword:00000000
    
40. "PNPMGR"=dword:00000000
    
41. "NETAPI"=dword:00000000
    
42. "SCSERVER"=dword:00000000
    
43. "SCCLIENT"=dword:00000000
    
44. "SERIAL"=dword:00000000
    
45. "SERENUM"=dword:00000000
    
46. "UHCD"=dword:00000000
    
47. "RPCPROXY"=dword:00000000
    
48. "AUTOCHK"=dword:00000000
    
49. "DCOMSS"=dword:00000000
    
50. "UNIMODEM"=dword:00000000
    
51. "SIS"=dword:00000000
    
52. "FLTMGR"=dword:00000000
    
53. "WMICORE"=dword:00000000
    
54. "BURNENG"=dword:00000000
    
55. "IMAPI"=dword:00000000
    
56. "SXS"=dword:00000000
    
57. "FUSION"=dword:00000000
    
58. "IDLETASK"=dword:00000000
    
59. "SOFTPCI"=dword:00000000
    
60. "TAPE"=dword:00000000
    
61. "MCHGR"=dword:00000000
    
62. "IDEP"=dword:00000000
    
63. "PCIIDE"=dword:00000000
    
64. "FLOPPY"=dword:00000000
    
65. "FDC"=dword:00000000
    
66. "TERMSRV"=dword:00000000
    
67. "W32TIME"=dword:00000000
    
68. "PREFETCHER"=dword:00000000
    
69. "RSFILTER"=dword:00000000
    
70. "FCPORT"=dword:00000000
    
71. "PCI"=dword:00000000
    
72. "DMIO"=dword:00000000
    
73. "DMCONFIG"=dword:00000000
    
74. "DMADMIN"=dword:00000000
    
75. "WSOCKTRANSPORT"=dword:00000000
    
76. "VSS"=dword:00000000
    
77. "PNPMEM"=dword:00000000
    
78. "PROCESSOR"=dword:00000000
    
79. "DMSERVER"=dword:00000000
    
80. "SR"=dword:00000000
    
81. "INFINIBAND"=dword:00000000
    
82. "IHVDRIVER"=dword:00000000
    
83. "IHVVIDEO"=dword:00000000
    
84. "IHVAUDIO"=dword:00000000
    
85. "IHVNETWORK"=dword:00000000
    
86. "IHVSTREAMING"=dword:00000000
    
87. "IHVBUS"=dword:00000000
    
88. "HPS"=dword:00000000
    
89. "RTLTHREADPOOL"=dword:00000000
    
90. "LDR"=dword:00000000
    
91. "TCPIP6"=dword:00000000
    
92. "ISAPNP"=dword:00000000
    
93. "SHPC"=dword:00000000
    
94. "STORPORT"=dword:00000000
    
95. "STORMINIPORT"=dword:00000000
    
96. "PRINTSPOOLER"=dword:00000000
    
97. "VSSDYNDISK"=dword:00000000
    
98. "VERIFIER"=dword:00000000
    
99. "VDS"=dword:00000000
    
100. "VDSBAS"=dword:00000000
     
101. "VDSDYN"=dword:00000000
     
102. "VDSDYNDR"=dword:00000000
     
103. "VDSLDR"=dword:00000000
     
104. "VDSUTIL"=dword:00000000
     
105. "DFRGIFC"=dword:00000000
     
106. "DEFAULT"=dword:00000000
     
107. "MM"=dword:00000000
     
108. "DFSC"=dword:00000000
     
109. "WOW64"=dword:00000000
     
110. "ALPC"=dword:00000000
     
111. "WDI"=dword:00000000
     
112. "PERFLIB"=dword:00000000
     
113. "KTM"=dword:00000000
     
114. "IOSTRESS"=dword:00000000
     
115. "HEAP"=dword:00000000
     
116. "WHEA"=dword:00000000
     
117. "USERGDI"=dword:00000000
     
118. "MMCSS"=dword:00000000
     
119. "TPM"=dword:00000000
     
120. "THREADORDER"=dword:00000000
     
121. "ENVIRON"=dword:00000000
     
122. "EMS"=dword:00000000
     
123. "WDT"=dword:00000000
     
124. "FVEVOL"=dword:00000000
     
125. "NDIS"=dword:00000000
     
126. "NVCTRACE"=dword:00000000
     
127. "LUAFV"=dword:00000000
     
128. "APPCOMPAT"=dword:00000000
     
129. "USBSTOR"=dword:00000000
     
130. "SBP2PORT"=dword:00000000
     
131. "COVERAGE"=dword:00000000
     
132. "CACHEMGR"=dword:00000000
     
133. "MOUNTMGR"=dword:00000000
     
134. "CFR"=dword:00000000
     
135. "TXF"=dword:00000000
     
136. "KSECDD"=dword:00000000
     
137. "FLTREGRESS"=dword:00000000
     
138. "MPIO"=dword:00000000
     
139. "MSDSM"=dword:00000000
     
140. "UDFS"=dword:00000000
     
141. "PSHED"=dword:00000000
     
142. "STORVSP"=dword:00000000
     
143. "LSASS"=dword:00000000
     
144. "SSPICLI"=dword:00000000
     
145. "CNG"=dword:00000000
     
146. "EXFAT"=dword:00000000
     
147. "FILETRACE"=dword:00000000
     
148. "XSAVE"=dword:00000000
     
149. "SE"=dword:00000000
     
150. "DRIVEEXTENDER"=dword:00000000
     
151. "ENDOFTABLE"=dword:00000000
     

复制代码

FFFFFFFE

好评.