Hi,
I am a beginner and have writen a very simple DriverEntry() function which
simply writes the RegistryPath string to DebugView. It displayed the
following string.
“\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\test_drv”
When I open the registry and search for this string it is not there,
however, a search on test_drv shows that that it is in the registry in
several places. Currently I am using OSRLoader to start/stop the driver.
Should I be able to find the above string as it is or is it some kind of
shorthand?
As an aside, it it possible to use DbgPrint() to display unicode strings? If
so, what is its format type? If not, are there any other fucntions which can
be used for this purpose?
Regards FarmerJo
The equivalent in the registry would be
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\test_drv
To print counted strings use %Z so for a unicode string this is %wZ
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply
“FarmerJo” wrote in message news:xxxxx@windbg…
> Hi,
>
> I am a beginner and have writen a very simple DriverEntry() function which
> simply writes the RegistryPath string to DebugView. It displayed the
> following string.
>
> “\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\test_drv”
>
> When I open the registry and search for this string it is not there,
> however, a search on test_drv shows that that it is in the registry in
> several places. Currently I am using OSRLoader to start/stop the driver.
>
> Should I be able to find the above string as it is or is it some kind of
> shorthand?
>
> As an aside, it it possible to use DbgPrint() to display unicode strings?
> If so, what is its format type? If not, are there any other fucntions
> which can be used for this purpose?
>
> Regards FarmerJo
>
>
Hi,
i have no idea about the different ControlSetXXXs but the configuration of
the driver hangs from CurrentControlSet so depending on what you need you
maybe have to search this branch.
AFAIK you can use %wZ to DbgPrint unicode at IRQL PASSIVE_LEVEL.
hope it helps
Julian
On Fri, Mar 14, 2008 at 1:50 PM, FarmerJo wrote:
> Hi,
>
> I am a beginner and have writen a very simple DriverEntry() function which
> simply writes the RegistryPath string to DebugView. It displayed the
> following string.
>
> “\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\test_drv”
>
> When I open the registry and search for this string it is not there,
> however, a search on test_drv shows that that it is in the registry in
> several places. Currently I am using OSRLoader to start/stop the driver.
>
> Should I be able to find the above string as it is or is it some kind of
> shorthand?
>
> As an aside, it it possible to use DbgPrint() to display unicode strings?
> If
> so, what is its format type? If not, are there any other fucntions which
> can
> be used for this purpose?
>
> Regards FarmerJo
>
>
>
> —
> You are currently subscribed to windbg as: xxxxx@gmail.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
Just for my own information is there a document or URL which describes these translations?
FarmerJo
“Juli?n de Navascu?s” wrote in message news:xxxxx@windbg…
Hi,
i have no idea about the different ControlSetXXXs but the configuration of the driver hangs from CurrentControlSet so depending on what you need you maybe have to search this branch.
AFAIK you can use %wZ to DbgPrint unicode at IRQL PASSIVE_LEVEL.
hope it helps
Julian
On Fri, Mar 14, 2008 at 1:50 PM, FarmerJo wrote:
Hi,
I am a beginner and have writen a very simple DriverEntry() function which
simply writes the RegistryPath string to DebugView. It displayed the
following string.
“\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\test_drv”
When I open the registry and search for this string it is not there,
however, a search on test_drv shows that that it is in the registry in
several places. Currently I am using OSRLoader to start/stop the driver.
Should I be able to find the above string as it is or is it some kind of
shorthand?
As an aside, it it possible to use DbgPrint() to display unicode strings? If
so, what is its format type? If not, are there any other fucntions which can
be used for this purpose?
Regards FarmerJo
—
You are currently subscribed to windbg as: xxxxx@gmail.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
CurrentControlSet is a symbolic link to ControlSetXXX. Things like booting
“last known good” will change the link.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply
“FarmerJo” wrote in message news:xxxxx@windbg…
Just for my own information is there a document or URL which describes these
translations?
FarmerJo
“Julián de Navascués” wrote in message
news:xxxxx@windbg…
Hi,
i have no idea about the different ControlSetXXXs but the configuration of
the driver hangs from CurrentControlSet so depending on what you need you
maybe have to search this branch.
AFAIK you can use %wZ to DbgPrint unicode at IRQL PASSIVE_LEVEL.
hope it helps
Julian
On Fri, Mar 14, 2008 at 1:50 PM, FarmerJo wrote:
Hi,
I am a beginner and have writen a very simple DriverEntry() function
which
simply writes the RegistryPath string to DebugView. It displayed the
following string.
“\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\test_drv”
When I open the registry and search for this string it is not there,
however, a search on test_drv shows that that it is in the registry in
several places. Currently I am using OSRLoader to start/stop the driver.
Should I be able to find the above string as it is or is it some kind of
shorthand?
As an aside, it it possible to use DbgPrint() to display unicode
strings? If
so, what is its format type? If not, are there any other fucntions which
can
be used for this purpose?
Regards FarmerJo
—
You are currently subscribed to windbg as: xxxxx@gmail.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Julián de Navascués wrote:
i have no idea about the different ControlSetXXXs but the
configuration of the driver hangs from CurrentControlSet so depending
on what you need you maybe have to search this branch.
As Don said, “CurrentControlSet” is just a symbolic link to whichever
numbered control set is currently live. For a little more exploration,
go look in HKEY_LOCAL_MACHINE\SYSTEM\Select. You’ll see the number of
the current live control set, the number of the one that will be used if
you boot to the “last known good” configuration, and the number of the
set that last failed.
–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.