XPsp3键盘设备链/栈信息_02_VMware

1、WinDBG中 打印的信息：

zcFirst.SYS: entering DriverEntry
zcFirst.sys _DriverObject : 0x8280EB10
MyAttach
Chain[0] :
Stack[0] -- message begin :
_pDeviceObject->DeviceType : 0x0000000B， _pDeviceObject->Characteristics : 0x00000000
STATUS_INFO_LENGTH_MISMATCH : 0xC0000004
ObQueryNameString - ulRtnLen(1) : 0x00000036
ObQueryNameString - objNameInfo : \Device\KeyboardClass1
pDevObjExt->Size : 0x00000000
pDevObjExt->Type : 0x0000000D
Stack[1] -- message end .

Stack[1] -- message begin :
_pDeviceObject->DeviceType : 0x00000027， _pDeviceObject->Characteristics : 0x00000000
STATUS_INFO_LENGTH_MISMATCH : 0xC0000004
ObQueryNameString - ulRtnLen(1) : 0x00000032
ObQueryNameString - objNameInfo : \Device\RDP_CONSOLE0
pDevObjExt->Size : 0x00000000
pDevObjExt->Type : 0x0000000D
Stack[2] -- message end .

Stack[2] -- message begin :
_pDeviceObject->DeviceType : 0x00000004， _pDeviceObject->Characteristics : 0x00000080
STATUS_INFO_LENGTH_MISMATCH : 0xC0000004
ObQueryNameString - ulRtnLen(1) : 0x0000002A
ObQueryNameString - objNameInfo : \Device\00000032
pDevObjExt->Size : 0x00000000
pDevObjExt->Type : 0x0000000D
Stack[3] -- message end .

Chain[1] :
Stack[0] -- message begin :
_pDeviceObject->DeviceType : 0x0000000B， _pDeviceObject->Characteristics : 0x00000000
STATUS_INFO_LENGTH_MISMATCH : 0xC0000004
ObQueryNameString - ulRtnLen(1) : 0x00000036
ObQueryNameString - objNameInfo : \Device\KeyboardClass0
pDevObjExt->Size : 0x00000000
pDevObjExt->Type : 0x0000000D
Stack[1] -- message end .

Stack[1] -- message begin :
_pDeviceObject->DeviceType : 0x00000027， _pDeviceObject->Characteristics : 0x00000000
STATUS_INFO_LENGTH_MISMATCH : 0xC0000004
ObQueryNameString - ulRtnLen(1) : 0x00000008
ObQueryNameString - objNameInfo is empty .
pDevObjExt->Size : 0x00000000
pDevObjExt->Type : 0x0000000D
Stack[2] -- message end .

Stack[2] -- message begin :
_pDeviceObject->DeviceType : 0x00000032， _pDeviceObject->Characteristics : 0x00000080
STATUS_INFO_LENGTH_MISMATCH : 0xC0000004
ObQueryNameString - ulRtnLen(1) : 0x0000002A
ObQueryNameString - objNameInfo : \Device\0000006e
pDevObjExt->Size : 0x00000000
pDevObjExt->Type : 0x0000000D
Stack[3] -- message end .

 

2、

3、