cmd!FindCmd函数中的startnet.cmd

kd> g

Breakpoint 6 hit

cmd!FindCmd:

001b:4ad1a5a7 55 push ebp

kd> kc

00 cmd!FindCmd

01 cmd!FindAndFix

02 cmd!FindFixAndRun

03 cmd!Dispatch

04 cmd!main

05 cmd!mainCRTStartup

06 kernel32!BaseProcessStart

kd> kv

ChildEBP RetAddr Args to Child

00 0012fa34 4ad119b5 00000028 0012fa5c 0012fea2 cmd!FindCmd (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\cmd\ctools2.c @ 1039]

01 0012fc68 4ad12472 00137e38 0012fea2 00000001 cmd!FindAndFix+0xe6 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\cmd\cmd.c @ 1556]

02 0012fe98 4ad12dff 00137e38 00000001 00137e38 cmd!FindFixAndRun+0xd2 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\cmd\cmd.c @ 1337]

03 0012fee0 4ad12f7d 00000000 00000001 00000000 cmd!Dispatch+0x1a7 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\cmd\cmd.c @ 683]

04 0012ff44 4ad21754 00000003 003536a0 00352cc0 cmd!main+0x131 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\cmd\cmd.c @ 317]

05 0012ffc0 77e62c34 00000000 00000000 7ffdf000 cmd!mainCRTStartup+0x12f (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\crts\crtw32\dllstuff\crtexe.c @ 501]

06 0012fff0 00000000 4ad21625 00000000 0000018a kernel32!BaseProcessStart+0x23 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\win32\client\support.c @ 580]

kd> dv

entries = 0n40

sname = 0x0012fa5c

sflags = 0x0012fea2

kd> db 0x0012fa5c
0012fa5c 73 00 74 00 61 00 72 00-74 00 6e 00 65 00 74 00 s.t.a.r.t.n.e.t.
0012fa6c 2e 00 63 00 6d 00 64 00-00 00 00 00 18 3e 35 00 ..c.m.d......>5.