Scribd Logo
Upload

Welcome to Scribd!

  • Kdprint-Dbgprint and Unicode String-Ansi String

    Uploaded by

    Kieran Dang
    203 views1 page
    NT defines string types as UNICODE_STRING and ANSI_STRING structures containing a length, maximum length, and pointer to a buffer. KdPrint/DbgPrint support a %Z format specifier to easily print these strings. Alternatively, KdPrint supports more complex format specifiers like %*.*ws to print a specified number of characters from a UNICODE_STRING while accounting for NULL termination and string length.

    Original Description:

    Original Title

    Kdprint-dbgprint and Unicode String-Ansi String

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    DOC, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    NT defines string types as UNICODE_STRING and ANSI_STRING structures containing a length, maximum length, and pointer to a buffer. KdPrint/DbgPrint support a %Z format specifier to easily print these strings. Alternatively, KdPrint supports more complex format specifiers like %*.*ws to print a specified number of characters from a UNICODE_STRING while accounting for NULL termination and string length.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as DOC, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    203 views1 page

    Kdprint-Dbgprint and Unicode String-Ansi String

    Uploaded by

    Kieran Dang
    NT defines string types as UNICODE_STRING and ANSI_STRING structures containing a length, maximum length, and pointer to a buffer. KdPrint/DbgPrint support a %Z format specifier to easily print these strings. Alternatively, KdPrint supports more complex format specifiers like %*.*ws to print a specified number of characters from a UNICODE_STRING while accounting for NULL termination and string length.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as DOC, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 1

    KdPrint/DbgPrint and UNICODE_STRING/ANSI_STRING

    Just to remember: NT likes string of the following form:


    typedef struct _UNICODE_STRING { USHORT Length; USHORT MaximumLength; PWSTR Buffer; } UNICODE_STRING; typedef UNICODE_STRING *PUNICODE_STRING; typedef struct _STRING { USHORT Length; USHORT MaximumLength; PCHAR Buffer; } STRING; typedef STRING *PSTRING; typedef STRING ANSI_STRING; typedef PSTRING PANSI_STRING;

    To make life easier MS have extended kernel CRTL output() function with Z format specifier. This works for all kernel functions those understand formatted strings (e.g. sprintf, _vsnprintf, KdPrint/DbgPrint). For example:
    PUNICODE_STRING pUStr; PANSI_STRING pAStr; ... KdPrint(("Unicode string: %wZ\n", pUStr)); KdPrint(("ANSI string: %Z\n", pAStr));

    Though, you can use a little more complicated documented way. Btw, this form is suitable for printing byte array of strictly defined length.
    KdPrint(("Unicode string: %*.*ws\n",pUStr->Length/sizeof(WCHAR), pUStr->Length/sizeof(WCHAR), pUStr)); KdPrint(("Unicode string: %*.*S\n",pUStr->Length/sizeof(WCHAR), pUStr->Length/sizeof(WCHAR), pUStr)); KdPrint(("ANSI string: %*.*s\n", pAStr->Length/sizeof(CHAR), pAStr->Length/sizeof(CHAR), pAStr));

    Or, if you want to take into account NULL-terminator, but limit output length to specified number of characters:
    KdPrint(("Unicode string: %.*ws\n", pUStr->Length/sizeof(WCHAR), pUStr)); KdPrint(("Unicode string: %.*S\n", pUStr->Length/sizeof(WCHAR), pUStr)); KdPrint(("ANSI string: %.*s\n", pAStr->Length/sizeof(CHAR), pAStr));

    You might also like