Could someone please tell me why when i type "gi" command in CE Shell
Window,
I get exeptions. Command is working as expected but exceptions!?
Here is the output:
4294784921 PID:23abe59e TID:23ae70f2 0x83abe35c: ExceptionDispatch:
pexi=0603eb64 Pc=8014fe2c
4294784921 PID:23abe59e TID:23ae70f2 0x83abe35c: addr c3fea528, id 4, sp
0603ebb4, fsr=00000007, BVA = 8014fe2c
4294784924 PID:23abe59e TID:23ae70f2 0x83abe35c: ExceptionDispatch:
pexi=0603eb64 Pc=8014fe2c
4294784924 PID:23abe59e TID:23ae70f2 0x83abe35c: addr c3fdd548, id 4, sp
0603ebb4, fsr=00000007, BVA = 8014fe2c
4294784927 PID:23abe59e TID:23ae70f2 0x83abe35c: ExceptionDispatch:
pexi=0603eb64 Pc=8014fe2c
4294784927 PID:23abe59e TID:23ae70f2 0x83abe35c: addr c3fd45e8, id 4, sp
0603ebb4, fsr=00000007, BVA = 8014fe2c
4294784930 PID:23abe59e TID:23ae70f2 0x83abe35c: ExceptionDispatch:
pexi=0603eb64 Pc=8014fe2c
4294784931 PID:23abe59e TID:23ae70f2 0x83abe35c: addr c3fe2670, id 4, sp
0603ebb4, fsr=00000007, BVA = 8014fe2c
4294784934 PID:23abe59e TID:23ae70f2 0x83abe35c: ExceptionDispatch:
pexi=0603eb64 Pc=8014fe2c
4294784934 PID:23abe59e TID:23ae70f2 0x83abe35c: addr c3fee588, id 4, sp
0603ebb4, fsr=00000007, BVA = 8014fe2c
4294784937 PID:23abe59e TID:23ae70f2 0x83abe35c: ExceptionDispatch:
pexi=0603eb64 Pc=8014fe2c
4294784937 PID:23abe59e TID:23ae70f2 0x83abe35c: addr c3fdfb70, id 4, sp
0603ebb4, fsr=00000007, BVA = 8014fe2c
4294784940 PID:23abe59e TID:23ae70f2 0x83abe35c: ExceptionDispatch:
pexi=0603eb64 Pc=8014fe2c
After some address calculations i got the module name "nk.exe" from the
makeimage log
and function caused exception from my "kernkitl.map" (KITL is enabled, so my
NK.EXE is
actually "KERNKITL.EXE"). Function name is "THGetMods".
0001:0004e1f4 SC_ProcSetVer 0005f1f4 f nk:kmisc.obj
0001:0004e3a4 SC_OpenProcess 0005f3a4 f nk:kmisc.obj
0001:0004e4b4 SC_THGrow 0005f4b4 f nk:kmisc.obj
0001:0004e6ac THGetProcs 0005f6ac f nk:kmisc.obj
0001:0004eb14 THGetMods 0005fb14 f nk:kmisc.obj
<<<<<<<<< This one
0001:0004eec0 THGetThreads 0005fec0 f nk:kmisc.obj
0001:0004f274 THGetHeaps 00060274 f nk:kmisc.obj
0001:0004f348 SC_THCreateSnapshot 00060348 f nk:kmisc.obj
0001:0004f68c SC_GetProcessVersion 0006068c f nk:kmisc.obj
0001:0004f7ac SC_SetStdioPathW 000607ac f nk:kmisc.obj
Does anybody know why THGetMods rises exceptions when
"gi" command is executed in CE Shell?