Giter Site home page Giter Site logo

Comments (4)

rodneyviana avatar rodneyviana commented on May 28, 2024

freaksterrao,

Please show me with !wdo which field(s) you want to show?

Thanks,

Rodney

from netext.

freaksterrao avatar freaksterrao commented on May 28, 2024

netext !wdo command:
image

The same using SOSEX !mdt command:
image

As you can see I want to select d which is a System.Guid[]. But d which is a System.Threading.AutoResetEvent is selected since its first to be listed.

from netext.

rodneyviana avatar rodneyviana commented on May 28, 2024

Sorry for the delay.
In this case, you use the offset (+50) plus the size of the word (4 bytes for 32-bit and 8 for 64-bit). To use your example:

!wfrom -nofield -nospace -obj 57EDDF3C+50+4 select $dbgrun("dt KERNELBASE!_GUID poi("+$tohexstring($addr())+")")
{3d705aeb-61b1-4287-ae07-0dc81ff8a7c8}
+0x000 Data1 : 0x3d705aeb
+0x004 Data2 : 0x61b1
+0x006 Data3 : 0x4287
+0x008 Data4 : [8] "???"

Or:
!wfrom -nofield -nospace -obj 57EDDF3C+50+4 select $split($dbgrun("dt KERNELBASE!_GUID poi("+$tohexstring($addr())+")"),"\n",0)
{3d705aeb-61b1-4287-ae07-0dc81ff8a7c8}

Notice that if it was a GUID instead of an array (GUID[]) you should have used this:
0:000> !wfrom -nofield -nospace -obj 57EDDF3C+50+4 select $split($dbgrun("dt KERNELBASE!_GUID "+$tohexstring($addr())),"\n",0)
{3d705aeb-61b1-4287-ae07-0dc81ff8a7c8}

from netext.

rodneyviana avatar rodneyviana commented on May 28, 2024

Closing for lack of activities. Please reopen if help is still needed

from netext.

Related Issues (18)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.