Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- : kd> .symfix
- 0: kd> !analyze -v
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- INACCESSIBLE_BOOT_DEVICE (7b)
- During the initialization of the I/O system, it is possible that the driver
- for the boot device failed to initialize the device that the system is
- attempting to boot from, or it is possible for the file system that is
- supposed to read that device to either fail its initialization or to simply
- not recognize the data on the boot device as a file system structure that
- it recognizes. In the former case, the argument (#1) is the address of a
- Unicode string data structure that is the ARC name of the device from which
- the boot was being attempted. In the latter case, the argument (#1) is the
- address of the device object that could not be mounted.
- If this is the initial setup of the system, then this error can occur if
- the system was installed on an unsupported disk or SCSI controller. Note
- that some controllers are supported only by drivers which are in the Windows
- Driver Library (WDL) which requires the user to do a custom install. See
- the Windows Driver Library for more information.
- This error can also be caused by the installation of a new SCSI adapter or
- disk controller or repartitioning the disk with the system partition. If
- this is the case, on x86 systems the boot.ini file must be edited or on ARC
- systems setup must be run. See the "Advanced Server System Administrator's
- User Guide" for information on changing boot.ini.
- If the argument is a pointer to an ARC name string, then the format of the
- first two (and in this case only) longwords will be:
- USHORT Length;
- USHORT MaximumLength;
- PWSTR Buffer;
- That is, the first longword will contain something like 00800020 where 20
- is the actual length of the Unicode string, and the next longword will
- contain the address of buffer. This address will be in system space, so
- the high order bit will be set.
- If the argument is a pointer to a device object, then the format of the first
- word will be:
- USHORT Type;
- That is, the first word will contain a 0003, where the Type code will ALWAYS
- be 0003.
- Note that this makes it immediately obvious whether the argument is a pointer
- to an ARC name string or a device object, since a Unicode string can never
- have an odd number of bytes, and a device object will always have a Type
- code of 3.
- Arguments:
- Arg1: f78a6524, Pointer to the device object or Unicode string of ARC name
- Arg2: c0000034, (reserved)
- Arg3: 00000000, (reserved)
- Arg4: 00000000, (reserved)
- Debugging Details:
- ------------------
- *** WARNING: Check Image - Checksum mismatch - Dump: 0x21a293, File: 0x213e75 - C:\ProgramData\Dbg\sym\ntkrnlmp.exe\48025DE7228000\ntkrnlmp.exe
- *** WARNING: Check Image - Checksum mismatch - Dump: 0x21a293, File: 0x213e75 - C:\ProgramData\Dbg\sym\ntkrnlmp.exe\48025DE7228000\ntkrnlmp.exe
- *** WARNING: Check Image - Checksum mismatch - Dump: 0x21a293, File: 0x213e75 - C:\ProgramData\Dbg\sym\ntoskrnl.exe\48025DE7228000\ntoskrnl.exe
- *** WARNING: Check Image - Checksum mismatch - Dump: 0x21a293, File: 0x213e75 - C:\ProgramData\Dbg\sym\ntoskrnl.exe\48025DE7228000\ntoskrnl.exe
- KEY_VALUES_STRING: 1
- Key : Analysis.CPU.mSec
- Value: 6328
- Key : Analysis.Elapsed.mSec
- Value: 59016
- Key : Analysis.IO.Other.Mb
- Value: 0
- Key : Analysis.IO.Read.Mb
- Value: 2
- Key : Analysis.IO.Write.Mb
- Value: 5
- Key : Analysis.Init.CPU.mSec
- Value: 5718
- Key : Analysis.Init.Elapsed.mSec
- Value: 199295
- Key : Analysis.Memory.CommitPeak.Mb
- Value: 49
- Key : Analysis.Version.DbgEng
- Value: 10.0.27871.1001
- Key : Analysis.Version.Description
- Value: 10.2505.01.02 amd64fre
- Key : Analysis.Version.Ext
- Value: 1.2505.1.2
- Key : Bugcheck.Code.KiBugCheckData
- Value: 0x7b
- Key : Bugcheck.Code.LegacyAPI
- Value: 0x7b
- Key : Bugcheck.Code.TargetModel
- Value: 0x7b
- Key : Failure.Bucket
- Value: 0x7B_nt!IopMarkBootPartition
- Key : Failure.Hash
- Value: {cf75d120-86c2-18b8-109d-7593c484a95c}
- BUGCHECK_CODE: 7b
- BUGCHECK_P1: fffffffff78a6524
- BUGCHECK_P2: ffffffffc0000034
- BUGCHECK_P3: 0
- BUGCHECK_P4: 0
- FAULTING_THREAD: ffffffff89bfe750
- PROCESS_NAME: System
- STACK_TEXT:
- f78a608c 8053658b 00000003 f78a63e8 00000000 nt!RtlpBreakWithStatusInstruction
- f78a60d8 8053705e 00000003 00000000 80087000 nt!KiBugCheckDebugBreak+0x19
- f78a64b8 80537672 0000007b f78a6524 c0000034 nt!KeBugCheck2+0x574
- f78a64d8 806cc59f 0000007b f78a6524 c0000034 nt!KeBugCheckEx+0x1b
- f78a6640 806ba1dc 80087000 00000000 80087000 nt!IopMarkBootPartition+0x113
- f78a6690 806affa1 80087000 f78a66ac 00034000 nt!IopInitializeBootDrivers+0x4ba
- f78a6838 806b1012 80087000 00000000 89bfe750 nt!IoInitSystem+0x712
- f78a6dac 8057572b 80087000 00000000 00000000 nt!Phase1Initialization+0xac7
- f78a6ddc 804ec6c9 806b07bf 80087000 00000000 nt!PspSystemThreadStartup+0x34
- 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
- STACK_COMMAND: .thread /r /p 0xffffffff89bfe750 ; kb
- SYMBOL_NAME: nt!IopMarkBootPartition+113
- MODULE_NAME: nt
- IMAGE_NAME: ntkrnlmp.exe
- IMAGE_VERSION: 5.1.2600.5512
- BUCKET_ID_FUNC_OFFSET: 113
- FAILURE_BUCKET_ID: 0x7B_nt!IopMarkBootPartition
- OSPLATFORM_TYPE: x86
- OSNAME: Windows XP
- FAILURE_ID_HASH: {cf75d120-86c2-18b8-109d-7593c484a95c}
- Followup: MachineOwner
- ---------
- 0: kd> dt _DEVICE_OBJECT f78a6524
- nt!_DEVICE_OBJECT
- +0x000 Type : 0n88
- +0x002 Size : 0x5a
- +0x004 ReferenceCount : 0n-516224816
- +0x008 DriverObject : 0x89be2730 _DRIVER_OBJECT
- +0x00c NextDevice : 0x6372415c _DEVICE_OBJECT
- +0x010 AttachedDevice : 0x656d614e _DEVICE_OBJECT
- +0x014 CurrentIrp : 0x6c756d5c _IRP
- +0x018 Timer : 0x30286974 _IO_TIMER
- +0x01c Flags : 0x73696429
- +0x020 Characteristics : 0x2930286b
- +0x024 Vpb : 0x73696472 _VPB
- +0x028 DeviceExtension : 0x2930286b Void
- +0x02c DeviceType : 0x74726170
- +0x030 StackSize : 105 'i'
- +0x034 Queue : __unnamed
- +0x05c AlignmentRequirement : 0x6b736964
- +0x060 DeviceQueue : _KDEVICE_QUEUE
- +0x074 Dpc : _KDPC
- +0x094 ActiveThreadCount : 0x89be2250
- +0x098 SecurityDescriptor : 0x6372415c Void
- +0x09c DeviceLock : _KEVENT
- +0x0ac SectorSize : 0x286b
- +0x0ae Spare1 : 0x2930
- +0x0b0 DeviceObjectExtension : 0x73696472 _DEVOBJ_EXTENSION
- +0x0b4 Reserved : 0x2930286b Void
- 0: kd> du f78a6524
- ReadVirtual: f78a6524 not properly sign extended
- f78a6524 "XZ.✰覾䅜捲慎敭浜汵楴〨搩獩⡫⤰摲獩⡫⤰慰瑲瑩潩⡮⤱ff聖¨"
- 0: kd> !devobj f78a6524
- f78a6524: is not a device object
- 0: kd> ed nt!Kd_Default_Mask 8
- Couldn't resolve error at 'nt!Kd_Default_Mask 8'
- 0: kd> lm t n
- start end module name
- 804d7000 806ff000 nt ntkrnlmp.exe Sun Apr 13 21:24:23 2008 (48025DE7)
- 806ff000 8071fd00 hal halmacpi.dll Sun Apr 13 20:31:27 2008 (4802517F)
- f7410000 f7457000 VBoxGuest VBoxGuest.sys Tue Jan 21 13:52:02 2025 (678F9872)
- f7457000 f7468f00 sr sr.sys Sun Apr 13 20:36:50 2008 (480252C2)
- f7469000 f7488b00 fltMgr fltMgr.sys Sun Apr 13 20:32:58 2008 (480251DA)
- f7489000 f749a000 disk disk.sys Sat Apr 11 06:39:14 2009 (49E01EF2)
- f749a000 f74b1900 atapi atapi.sys Sun Apr 13 20:40:29 2008 (4802539D)
- f74b2000 f74d7700 dmio dmio.sys Sun Apr 13 20:44:45 2008 (4802549D)
- f74d8000 f74f6880 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
- f7597000 f75a7a80 pci pci.sys Sun Apr 13 20:36:43 2008 (480252BB)
- f75a8000 f75d5d80 ACPI ACPI.sys Sun Apr 13 20:36:33 2008 (480252B1)
- f75f7000 f7600180 isapnp isapnp.sys Sun Apr 13 20:36:40 2008 (480252B8)
- f7607000 f7611580 MountMgr MountMgr.sys Sun Apr 13 20:39:45 2008 (48025371)
- f7617000 f7623c80 VolSnap VolSnap.sys Sun Apr 13 20:41:00 2008 (480253BC)
- f7627000 f7633180 CLASSPNP CLASSPNP.SYS Sun Apr 13 21:16:21 2008 (48025C05)
- f7707000 f770d180 PCIIDEX PCIIDEX.SYS Sun Apr 13 20:40:29 2008 (4802539D)
- f770f000 f7713d00 PartMgr PartMgr.sys Sun Apr 13 20:40:48 2008 (480253B0)
- f7839000 f7852b80 Mup Mup.sys Sun Apr 13 21:17:05 2008 (48025C31)
- f7853000 f787f980 NDIS NDIS.sys Sun Apr 13 21:20:35 2008 (48025D03)
- f7880000 f7896880 KSecDD KSecDD.sys Sun Apr 13 20:31:40 2008 (4802518C)
- f7897000 f789a000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
- f789b000 f789d800 compbatt compbatt.sys Sun Apr 13 20:36:36 2008 (480252B4)
- f789f000 f78a2780 BATTC BATTC.SYS Sun Apr 13 20:36:32 2008 (480252B0)
- f7987000 f7988b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
- f7989000 f798a100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
- f798b000 f798c580 intelide intelide.sys Sun Apr 13 20:40:29 2008 (4802539D)
- f798d000 f798e700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
- f7b52000 f7bde600 Ntfs Ntfs.sys Sun Apr 13 21:15:49 2008 (48025BE5)
- 0: kd> !devstack disk
- !DevObj !DrvObj !DevExt ObjectName
- Invalid type for DeviceObject 0xf7489000
- 0: kd> dt _DRIVER_OBJECT 0x89be2730
- nt!_DRIVER_OBJECT
- +0x000 Type : 0n3
- +0x002 Size : 0n456
- +0x004 DeviceObject : (null)
- +0x008 Flags : 0x89c15cb0
- +0x00c DriverStart : (null)
- +0x010 DriverSize : 0
- +0x014 DriverSection : (null)
- +0x018 DriverExtension : (null)
- +0x01c DriverName : _UNICODE_STRING "--- memory read error at address 0x00000100 ---"
- +0x024 HardwareDatabase : 0x89bd0008 _UNICODE_STRING ""
- +0x028 FastIoDispatch : 0x89be27e8 _FAST_IO_DISPATCH
- +0x02c DriverInit : 0x00000007 long +7
- +0x030 DriverStartIo : 0x00000003 void +3
- +0x034 DriverUnload : (null)
- +0x038 MajorFunction : [28] (null)
- ^ ^ ^
- | | |
- ^ ^ ^
- | | |
- ^ ^
- | look
- ^ ^ ^
- | | |
- ^ ^ ^
- | | |
- ^ ^
- |
- 0: kd> bp disk!DriverEntry
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- 0: kd> .sympath
- Symbol search path is: srv*
- Expanded Symbol search path is: cache*;SRV*https://msdl.microsoft.com/download/symbols
- ************* Path validation summary **************
- Response Time (ms) Location
- Deferred srv*
- 0: kd> lm
- start end module name
- 804d7000 806ff000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\FB6BF595C0344379B369466C1ED25FCB2\ntkrnlmp.pdb
- 806ff000 8071fd00 hal (deferred)
- f7410000 f7457000 VBoxGuest (deferred)
- f7457000 f7468f00 sr (deferred)
- f7469000 f7488b00 fltMgr (deferred)
- f7489000 f749a000 disk (pdb symbols) C:\ProgramData\Dbg\sym\disk.pdb\2E7F70987CE14F4AAABF78257859D2491\disk.pdb
- f749a000 f74b1900 atapi (deferred)
- f74b2000 f74d7700 dmio (deferred)
- f74d8000 f74f6880 ftdisk (deferred)
- f7597000 f75a7a80 pci (deferred)
- f75a8000 f75d5d80 ACPI (deferred)
- f75f7000 f7600180 isapnp (deferred)
- f7607000 f7611580 MountMgr (deferred)
- f7617000 f7623c80 VolSnap (deferred)
- f7627000 f7633180 CLASSPNP (deferred)
- f7707000 f770d180 PCIIDEX (deferred)
- f770f000 f7713d00 PartMgr (deferred)
- f7839000 f7852b80 Mup (deferred)
- f7853000 f787f980 NDIS (deferred)
- f7880000 f7896880 KSecDD (deferred)
- f7897000 f789a000 BOOTVID (deferred)
- f789b000 f789d800 compbatt (deferred)
- f789f000 f78a2780 BATTC (deferred)
- f7987000 f7988b80 kdcom (deferred)
- f7989000 f798a100 WMILIB (deferred)
- f798b000 f798c580 intelide (deferred)
- f798d000 f798e700 dmload (deferred)
- f7b52000 f7bde600 Ntfs (deferred)
- 0: kd> lmDvmdisk
- Browse full module list
- start end module name
- f7489000 f749a000 disk (pdb symbols) C:\ProgramData\Dbg\sym\disk.pdb\2E7F70987CE14F4AAABF78257859D2491\disk.pdb
- Loaded symbol image file: disk.sys
- Image path: disk.sys
- Image name: disk.sys
- Browse all global symbols functions data Symbol Reload
- Timestamp: Sat Apr 11 06:39:14 2009 (49E01EF2)
- CheckSum: 000124F0
- ImageSize: 00011000
- File version: 6.0.6002.18005
- Product version: 6.0.6002.18005
- File flags: 0 (Mask 3F)
- File OS: 40004 NT Win32
- File type: 3.7 Driver
- File date: 00000000.00000000
- Translations: 0000.04b0
- Information from resource tables:
- CompanyName: Microsoft Corporation
- ProductName: Microsoft® Windows® Operating System
- InternalName: disk.sys
- OriginalFilename: disk.sys
- ProductVersion: 6.0.6002.18005
- FileVersion: 6.0.6002.18005 (lh_sp2rtm.090410-1830)
- FileDescription: PnP Disk Driver
- LegalCopyright: © Microsoft Corporation. All rights reserved.
- 0: kd> x /D /f disk!a*
- A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
- 0: kd> x /D /f disk!d*
- A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
- f7493630 disk!DiskUpdateGeometry (_DiskUpdateGeometry@4)
- f74913fe disk!DiskIoctlSmartSendDriveCommand (_DiskIoctlSmartSendDriveCommand@8)
- f74969de disk!DiskSaveDetectInfo (_DiskSaveDetectInfo@4)
- f74938c2 disk!DiskUpdateRemovableGeometry (_DiskUpdateRemovableGeometry@4)
- f749215a disk!DiskSendFailurePredictIoctl (_DiskSendFailurePredictIoctl@8)
- f7490580 disk!DiskIoctlGetMediaTypesEx (_DiskIoctlGetMediaTypesEx@8)
- f749098a disk!DiskIoctlReassignBlocks (_DiskIoctlReassignBlocks@8)
- f748f87e disk!DiskIoctlVerifyThread (_DiskIoctlVerifyThread@8)
- f748abca disk!DiskIoctlClearVerify (_DiskIoctlClearVerify@8)
- f7492e5a disk!DiskFdoExecuteWmiMethod (_DiskFdoExecuteWmiMethod@28)
- f748a994 disk!DiskIoctlReassignBlocksEx (_DiskIoctlReassignBlocksEx@8)
- f748fce4 disk!DiskSetInfoExceptionInformation (_DiskSetInfoExceptionInformation@8)
- f7493ff4 disk!DiskDeleteSymbolicLinks (_DiskDeleteSymbolicLinks@4)
- f7492b04 disk!DiskEnableDisableFailurePredictPolling (_DiskEnableDisableFailurePredictPolling@12)
- f748b3da disk!DiskPostReregisterRequest (_DiskPostReregisterRequest@8)
- f748ac86 disk!DiskDeviceControl (_DiskDeviceControl@8)
- f748f726 disk!DiskModeSelect (_DiskModeSelect@16)
- f74963ce disk!DiskSaveBusDetectInfo (_DiskSaveBusDetectInfo@12)
- f748f340 disk!DiskUnload (_DiskUnload@4)
- f749109c disk!DiskIoctlSmartReceiveDriveData (_DiskIoctlSmartReceiveDriveData@8)
- f7490f0e disk!DiskIoctlSmartGetVersion (_DiskIoctlSmartGetVersion@8)
- f74922a2 disk!DiskReadFailurePredictData (_DiskReadFailurePredictData@8)
- f7493902 disk!DiskAddDevice (_DiskAddDevice@8)
- f7492358 disk!DiskReadFailurePredictThresholds (_DiskReadFailurePredictThresholds@8)
- f7490e06 disk!DiskIoctlGetVolumeDiskExtents (_DiskIoctlGetVolumeDiskExtents@8)
- f748f358 disk!DiskDetermineMediaTypes (_DiskDetermineMediaTypes@24)
- f748fbac disk!DiskGetInfoExceptionInformation (_DiskGetInfoExceptionInformation@8)
- f74921f0 disk!DiskReadFailurePredictStatus (_DiskReadFailurePredictStatus@8)
- f7496006 disk!DriverEntry (_DriverEntry@8)
- f7490b40 disk!DiskIoctlIsWritable (_DiskIoctlIsWritable@8)
- f74941a2 disk!DiskInitFdo (_DiskInitFdo@4)
- f748bc52 disk!DiskDriverReinitialization (_DiskDriverReinitialization@12)
- f748b70a disk!DiskInfoExceptionCheck (_DiskInfoExceptionCheck@4)
- f7492a48 disk!DiskWriteSmartLog (_DiskWriteSmartLog@16)
- f7491bf0 disk!DisableWriteCache (_DisableWriteCache@8)
- f74907e6 disk!DiskIoctlPredictFailure (_DiskIoctlPredictFailure@8)
- f74934ac disk!DiskGetDetectInfo (_DiskGetDetectInfo@8)
- f7491ed0 disk!DiskPerformSmartCommand (_DiskPerformSmartCommand@32)
- f748aef4 disk!DiskFdoProcessError (_DiskFdoProcessError@16)
- f74902a4 disk!DiskIoctlGetDriveGeometryEx (_DiskIoctlGetDriveGeometryEx@8)
- f74903e0 disk!DiskIoctlGetCacheInformation (_DiskIoctlGetCacheInformation@8)
- f749291e disk!DiskFdoSetWmiDataItem (_DiskFdoSetWmiDataItem@24)
- f7492cd0 disk!DiskWmiFunctionControl (_DiskWmiFunctionControl@20)
- f748a680 disk!DiskIoctlGetCacheSetting (_DiskIoctlGetCacheSetting@8)
- f7490158 disk!DiskIoctlGetLengthInfo (_DiskIoctlGetLengthInfo@8)
- f748a3fc disk!DiskDriverReinit (_DiskDriverReinit@12)
- f74923e8 disk!DiskReregWorker (_DiskReregWorker@8)
- f748ba16 disk!DiskFdoQueryWmiRegInfoEx (_DiskFdoQueryWmiRegInfoEx@16)
- f7493382 disk!DiskIsNT4Geometry (_DiskIsNT4Geometry@4)
- f748fd50 disk!DiskGetCacheInformation (_DiskGetCacheInformation@8)
- f7492486 disk!DiskInitializeReregistration (_DiskInitializeReregistration@0)
- f7493aec disk!DiskStartFdo (_DiskStartFdo@4)
- f7492064 disk!DiskGetIdentifyInfo (_DiskGetIdentifyInfo@8)
- f748fb1e disk!DiskLogCacheInformation (_DiskLogCacheInformation@12)
- f7490498 disk!DiskIoctlSetCacheInformation (_DiskIoctlSetCacheInformation@8)
- f748a7a0 disk!DiskIoctlVerify (_DiskIoctlVerify@8)
- f7492496 disk!DiskFdoQueryWmiRegInfo (_DiskFdoQueryWmiRegInfo@12)
- f74917bc disk!DiskCreateFdo (_DiskCreateFdo@16)
- f7492ac2 disk!DiskEnableDisableFailurePrediction (_DiskEnableDisableFailurePrediction@8)
- f748ab70 disk!DiskIoctlSetVerify (_DiskIoctlSetVerify@8)
- f74935bc disk!DiskReadSignature (_DiskReadSignature@4)
- f748a42c disk!DiskReadWriteVerification (_DiskReadWriteVerification@8)
- f748ba32 disk!DiskEnableSmart (_DiskEnableSmart@4)
- f74940ec disk!DiskRemoveDevice (_DiskRemoveDevice@8)
- f748a6f0 disk!DiskIoctlSetCacheSetting (_DiskIoctlSetCacheSetting@8)
- f748b492 disk!DiskInfoExceptionComplete (_DiskInfoExceptionComplete@12)
- f748bc30 disk!DiskCleanupDetectInfo (_DiskCleanupDetectInfo@4)
- f74927b6 disk!DiskFdoSetWmiDataBlock (_DiskFdoSetWmiDataBlock@20)
- f7490cbe disk!DiskIoctlUpdateDriveSize (_DiskIoctlUpdateDriveSize@8)
- f74929bc disk!DiskReadSmartLog (_DiskReadSmartLog@16)
- f7492b4e disk!DiskDetectFailurePrediction (_DiskDetectFailurePrediction@8)
- f7491b2c disk!DiskFlushDispatch (_DiskFlushDispatch@8)
- f74965f6 disk!DiskScanBusDetectInfo (_DiskScanBusDetectInfo@8)
- f7491c48 disk!DiskShutdownFlush (_DiskShutdownFlush@8)
- f748a40c disk!DiskBootDriverReinit (_DiskBootDriverReinit@12)
- f748c0a6 disk!DiskStopDevice (_DiskStopDevice@8)
- f7492536 disk!DiskFdoQueryWmiDataBlock (_DiskFdoQueryWmiDataBlock@20)
- f748ba98 disk!DiskDisableSmart (_DiskDisableSmart@4)
- f74961e8 disk!DiskSaveGeometryDetectInfo (_DiskSaveGeometryDetectInfo@8)
- f74932e4 disk!DiskGetPortGeometry (_DiskGetPortGeometry@8)
- f748ff3e disk!DiskSetCacheInformation (_DiskSetCacheInformation@8)
- f748bafe disk!DiskExecuteSmartDiagnostics (_DiskExecuteSmartDiagnostics@8)
- f7493e7a disk!DiskCreateSymbolicLinks (_DiskCreateSymbolicLinks@4)
- f7493d1e disk!DiskGenerateDeviceName (_DiskGenerateDeviceName@8)
- f74901e4 disk!DiskIoctlGetDriveGeometry (_DiskIoctlGetDriveGeometry@8)
- f748a500 disk!DiskFlushComplete (_DiskFlushComplete@12)
- f748fa3a disk!DiskSetSpecialHacks (_DiskSetSpecialHacks@8)
- f748bf9c disk!DiskReadDriveCapacity (_DiskReadDriveCapacity@4)
- 0: kd> x /D /f disk!e*
- A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
- 0: kd> bp disk!DriverEntry
- breakpoint 7 redefined
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\atlmfc.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\concurrency.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\cpp_rest.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Kernel.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\ObjectiveC.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\stl.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Usb4Kd.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Data.Json.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Geolocation.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Sensors.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Media.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\windows.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\winrt.natvis'
- ************* Preparing the environment for Debugger Extensions Gallery repositories **************
- ExtensionRepository : Implicit
- UseExperimentalFeatureForNugetShare : true
- AllowNugetExeUpdate : true
- NonInteractiveNuget : true
- AllowNugetMSCredentialProviderInstall : true
- AllowParallelInitializationOfLocalRepositories : true
- EnableRedirectToChakraJsProvider : false
- -- Configuring repositories
- ----> Repository : LocalInstalled, Enabled: true
- ----> Repository : UserExtensions, Enabled: true
- >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
- ************* Waiting for Debugger Extensions Gallery to Initialize **************
- >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.016 seconds
- ----> Repository : UserExtensions, Enabled: true, Packages count: 0
- ----> Repository : LocalInstalled, Enabled: true, Packages count: 45
- Microsoft (R) Windows Debugger Version 10.0.27871.1001 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Opened \\.\pipe\com_1
- Waiting to reconnect...
- Connected to Windows XP 2600 x86 compatible target at (Sun Aug 24 13:11:13.696 2025 (UTC + 2:00)), ptr64 FALSE
- Kernel Debugger connection established.
- ************* Path validation summary **************
- Response Time (ms) Location
- Deferred srv*
- Symbol search path is: srv*
- Executable search path is:
- Windows XP Kernel Version 2600 MP (1 procs) Free x86 compatible
- Edition build lab: 2600.xpsp.080413-2111
- Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
- System Uptime: not available
- nt!DebugService2+0x10:
- 80505e56 cc int 3
- kd> g
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'halmacpi.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'halmacpi.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'halmacpi.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'halmacpi.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'halmacpi.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'kdcom.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'kdcom.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'kdcom.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'kdcom.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'kdcom.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'BOOTVID.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'BOOTVID.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BOOTVID.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BOOTVID.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BOOTVID.dll'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'ACPI.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'ACPI.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ACPI.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ACPI.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ACPI.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'WMILIB.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'WMILIB.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'WMILIB.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'WMILIB.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'WMILIB.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'pci.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'pci.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'pci.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'pci.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'pci.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'isapnp.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'isapnp.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'isapnp.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'isapnp.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'isapnp.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'compbatt.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'compbatt.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'compbatt.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'compbatt.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'compbatt.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'BATTC.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'BATTC.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BATTC.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BATTC.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BATTC.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'intelide.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'intelide.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'intelide.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'intelide.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'intelide.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'PCIIDEX.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'PCIIDEX.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PCIIDEX.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PCIIDEX.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PCIIDEX.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'MountMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'MountMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'MountMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'MountMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'MountMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'ftdisk.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'ftdisk.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ftdisk.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ftdisk.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ftdisk.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'dmload.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'dmload.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmload.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmload.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmload.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'dmio.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'dmio.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmio.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmio.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmio.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'PartMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'PartMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PartMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PartMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PartMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'VolSnap.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'VolSnap.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VolSnap.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VolSnap.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VolSnap.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'atapi.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'atapi.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'atapi.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'atapi.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'atapi.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'disk.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'disk.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'disk.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'disk.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'disk.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'CLASSPNP.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'CLASSPNP.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'CLASSPNP.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'CLASSPNP.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'CLASSPNP.SYS'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'fltMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'fltMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'fltMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'fltMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'fltMgr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'sr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'sr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'sr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'sr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'sr.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'VBoxGuest.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'VBoxGuest.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VBoxGuest.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VBoxGuest.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VBoxGuest.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'KSecDD.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'KSecDD.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'KSecDD.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'KSecDD.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'KSecDD.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'Ntfs.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'Ntfs.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Ntfs.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Ntfs.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Ntfs.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'NDIS.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'NDIS.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'NDIS.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'NDIS.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'NDIS.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'Mup.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'Mup.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Mup.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Mup.sys'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Mup.sys'.
- Breakpoint 7 hit
- disk!DriverEntry:
- f7496006 8bff mov edi,edi
- 0: kd> bp disk!IoCreateDevice
- Couldn't resolve error at 'disk!IoCreateDevice'
- 0: kd> bp disk!IoRegisterDeviceInterface
- Couldn't resolve error at 'disk!IoRegisterDeviceInterface'
- 0: kd> bp disk!IoSetDeviceInterfaceState
- Couldn't resolve error at 'disk!IoSetDeviceInterfaceState'
- 0: kd> bp disk!IoAttachDeviceToDeviceStack
- Couldn't resolve error at 'disk!IoAttachDeviceToDeviceStack'
- 0: kd> bp disk!RtlInitUnicodeString
- Couldn't resolve error at 'disk!RtlInitUnicodeString'
- 0: kd> bp nt!IopLoadDriver
- 0: kd> t
- disk!DriverEntry+0x2:
- f7496008 55 push ebp
- 0: kd> r
- eax=08b71f78 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496008 esp=f78a65f0 ebp=f78a662c iopl=0 nv up ei ng nz na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
- disk!DriverEntry+0x2:
- f7496008 55 push ebp
- 0: kd> t
- disk!DriverEntry+0x3:
- f7496009 8bec mov ebp,esp
- 0: kd> r
- eax=08b71f78 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496009 esp=f78a65ec ebp=f78a662c iopl=0 nv up ei ng nz na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
- disk!DriverEntry+0x3:
- f7496009 8bec mov ebp,esp
- 0: kd> t
- disk!DriverEntry+0x5:
- f749600b 81ecf8000000 sub esp,0F8h
- 0: kd> r
- eax=08b71f78 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f749600b esp=f78a65ec ebp=f78a65ec iopl=0 nv up ei ng nz na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
- disk!DriverEntry+0x5:
- f749600b 81ecf8000000 sub esp,0F8h
- 0: kd> t
- disk!DriverEntry+0xb:
- f7496011 a1c0e048f7 mov eax,dword ptr [disk!__security_cookie (f748e0c0)]
- 0: kd> r
- eax=08b71f78 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496011 esp=f78a64f4 ebp=f78a65ec iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- disk!DriverEntry+0xb:
- f7496011 a1c0e048f7 mov eax,dword ptr [disk!__security_cookie (f748e0c0)] ds:0023:f748e0c0=f748e087
- 0: kd> t
- disk!DriverEntry+0x10:
- f7496016 33c5 xor eax,ebp
- 0: kd> r
- eax=f748e087 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496016 esp=f78a64f4 ebp=f78a65ec iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- disk!DriverEntry+0x10:
- f7496016 33c5 xor eax,ebp
- 0: kd> t
- disk!DriverEntry+0x12:
- f7496018 8945fc mov dword ptr [ebp-4],eax
- 0: kd> r
- eax=00c2856b ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496018 esp=f78a64f4 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
- disk!DriverEntry+0x12:
- f7496018 8945fc mov dword ptr [ebp-4],eax ss:0010:f78a65e8=00000386
- 0: kd> t
- disk!DriverEntry+0x15:
- f749601b 8b450c mov eax,dword ptr [ebp+0Ch]
- 0: kd> r
- eax=00c2856b ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f749601b esp=f78a64f4 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
- disk!DriverEntry+0x15:
- f749601b 8b450c mov eax,dword ptr [ebp+0Ch] ss:0010:f78a65f8=80092ef8
- 0: kd> t
- disk!DriverEntry+0x18:
- f749601e 53 push ebx
- 0: kd> r
- eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f749601e esp=f78a64f4 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
- disk!DriverEntry+0x18:
- f749601e 53 push ebx
- 0: kd> t
- disk!DriverEntry+0x19:
- f749601f 8b5d08 mov ebx,dword ptr [ebp+8]
- 0: kd> r
- eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f749601f esp=f78a64f0 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
- disk!DriverEntry+0x19:
- f749601f 8b5d08 mov ebx,dword ptr [ebp+8] ss:0010:f78a65f4=89ba0a08
- 0: kd> t
- disk!DriverEntry+0x1c:
- f7496022 56 push esi
- 0: kd> r
- eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496022 esp=f78a64f0 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
- disk!DriverEntry+0x1c:
- f7496022 56 push esi
- 0: kd> t
- disk!DriverEntry+0x1d:
- f7496023 57 push edi
- 0: kd> r
- eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496023 esp=f78a64ec ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
- disk!DriverEntry+0x1d:
- f7496023 57 push edi
- 0: kd> t
- disk!DriverEntry+0x1e:
- f7496024 33f6 xor esi,esi
- 0: kd> r
- eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496024 esp=f78a64e8 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
- disk!DriverEntry+0x1e:
- f7496024 33f6 xor esi,esi
- 0: kd> t
- disk!DriverEntry+0x20:
- f7496026 68d0000000 push 0D0h
- 0: kd> r
- eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496026 esp=f78a64e8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk!DriverEntry+0x20:
- f7496026 68d0000000 push 0D0h
- 0: kd> t
- disk!DriverEntry+0x25:
- f749602b 8945e8 mov dword ptr [ebp-18h],eax
- 0: kd> r
- eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f749602b esp=f78a64e4 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk!DriverEntry+0x25:
- f749602b 8945e8 mov dword ptr [ebp-18h],eax ss:0010:f78a65d4=89ba0a08
- 0: kd> t
- disk!DriverEntry+0x28:
- f749602e 8d850cffffff lea eax,[ebp-0F4h]
- 0: kd> r
- eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f749602e esp=f78a64e4 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk!DriverEntry+0x28:
- f749602e 8d850cffffff lea eax,[ebp-0F4h]
- 0: kd> t
- disk!DriverEntry+0x2e:
- f7496034 56 push esi
- 0: kd> r
- eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496034 esp=f78a64e4 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk!DriverEntry+0x2e:
- f7496034 56 push esi
- 0: kd> t
- disk!DriverEntry+0x2f:
- f7496035 50 push eax
- 0: kd> r
- eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496035 esp=f78a64e0 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk!DriverEntry+0x2f:
- f7496035 50 push eax
- 0: kd> t
- disk!DriverEntry+0x30:
- f7496036 89b508ffffff mov dword ptr [ebp-0F8h],esi
- 0: kd> r
- eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f7496036 esp=f78a64dc ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk!DriverEntry+0x30:
- f7496036 89b508ffffff mov dword ptr [ebp-0F8h],esi ss:0010:f78a64f4=f78a6160
- 0: kd> t
- disk!DriverEntry+0x36:
- f749603c e88161ffff call disk!memset (f748c1c2)
- 0: kd> r
- eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f749603c esp=f78a64dc ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk!DriverEntry+0x36:
- f749603c e88161ffff call disk!memset (f748c1c2)
- 0: kd> t
- disk!memset:
- f748c1c2 ff2560d148f7 jmp dword ptr [disk!_imp__memset (f748d160)]
- 0: kd> r
- eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=f748c1c2 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk!memset:
- f748c1c2 ff2560d148f7 jmp dword ptr [disk!_imp__memset (f748d160)] ds:0023:f748d160={nt!memset (804db0f5)}
- 0: kd> t
- nt!memset:
- 804db0f5 8b54240c mov edx,dword ptr [esp+0Ch]
- 0: kd> r
- eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
- eip=804db0f5 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!memset:
- 804db0f5 8b54240c mov edx,dword ptr [esp+0Ch] ss:0010:f78a64e4=000000d0
- 0: kd> t
- nt!memset+0x4:
- 804db0f9 8b4c2404 mov ecx,dword ptr [esp+4]
- 0: kd> r
- eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=000000d0 esi=00000000 edi=89be7570
- eip=804db0f9 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!memset+0x4:
- 804db0f9 8b4c2404 mov ecx,dword ptr [esp+4] ss:0010:f78a64dc=f78a64f8
- 0: kd> t
- nt!memset+0x8:
- 804db0fd 85d2 test edx,edx
- 0: kd> r
- eax=f78a64f8 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
- eip=804db0fd esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!memset+0x8:
- 804db0fd 85d2 test edx,edx
- 0: kd> t
- nt!memset+0xa:
- 804db0ff 7447 je nt!memset+0x53 (804db148)
- 0: kd> r
- eax=f78a64f8 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
- eip=804db0ff esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
- nt!memset+0xa:
- 804db0ff 7447 je nt!memset+0x53 (804db148) [br=0]
- 0: kd> t
- nt!memset+0xc:
- 804db101 33c0 xor eax,eax
- 0: kd> r
- eax=f78a64f8 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
- eip=804db101 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
- nt!memset+0xc:
- 804db101 33c0 xor eax,eax
- 0: kd> t
- nt!memset+0xe:
- 804db103 8a442408 mov al,byte ptr [esp+8]
- 0: kd> r
- eax=00000000 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
- eip=804db103 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!memset+0xe:
- 804db103 8a442408 mov al,byte ptr [esp+8] ss:0010:f78a64e0=00
- 0: kd> t
- nt!memset+0x12:
- 804db107 57 push edi
- 0: kd> r
- eax=00000000 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
- eip=804db107 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!memset+0x12:
- 804db107 57 push edi
- 0: kd> t
- nt!memset+0x13:
- 804db108 8bf9 mov edi,ecx
- 0: kd> r
- eax=00000000 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
- eip=804db108 esp=f78a64d4 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!memset+0x13:
- 804db108 8bf9 mov edi,ecx
- 0: kd> t
- nt!memset+0x15:
- 804db10a 83fa04 cmp edx,4
- 0: kd> r
- eax=00000000 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=f78a64f8
- eip=804db10a esp=f78a64d4 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!memset+0x15:
- 804db10a 83fa04 cmp edx,4
- 0: kd> t
- nt!memset+0x18:
- 804db10d 722d jb nt!memset+0x47 (804db13c)
- 0: kd> bp nt!IoCreateDevice
- 0: kd> bp nt!IoAttachDeviceToDeviceStack
- 0: kd> bp nt!IoRegisterDeviceInterface
- 0: kd> bp nt!IoSetDeviceInterfaceState
- 0: kd> u @eip L20
- nt!memset+0x18:
- 804db10d 722d jb nt!memset+0x47 (804db13c)
- 804db10f f7d9 neg ecx
- 804db111 83e103 and ecx,3
- 804db114 7408 je nt!memset+0x29 (804db11e)
- 804db116 2bd1 sub edx,ecx
- 804db118 8807 mov byte ptr [edi],al
- 804db11a 47 inc edi
- 804db11b 49 dec ecx
- 804db11c 75fa jne nt!memset+0x23 (804db118)
- 804db11e 8bc8 mov ecx,eax
- 804db120 c1e008 shl eax,8
- 804db123 03c1 add eax,ecx
- 804db125 8bc8 mov ecx,eax
- 804db127 c1e010 shl eax,10h
- 804db12a 03c1 add eax,ecx
- 804db12c 8bca mov ecx,edx
- 804db12e 83e203 and edx,3
- 804db131 c1e902 shr ecx,2
- 804db134 7406 je nt!memset+0x47 (804db13c)
- 804db136 f3ab rep stos dword ptr es:[edi]
- 804db138 85d2 test edx,edx
- 804db13a 7406 je nt!memset+0x4d (804db142)
- 804db13c 8807 mov byte ptr [edi],al
- 804db13e 47 inc edi
- 804db13f 4a dec edx
- 804db140 75fa jne nt!memset+0x47 (804db13c)
- 804db142 8b442408 mov eax,dword ptr [esp+8]
- 804db146 5f pop edi
- 804db147 c3 ret
- 804db148 8b442404 mov eax,dword ptr [esp+4]
- 804db14c c3 ret
- nt!strcpy:
- 804db14d 57 push edi
- 0: kd> g
- Breakpoint 9 hit
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- nt!IoCreateDevice:
- 8059b8bf 8bff mov edi,edi
- 0: kd> !devobj
- Device object not found
- 0: kd> pt
- nt!IoCreateDevice+0x336:
- 8059bb59 c21c00 ret 1Ch
- 0: kd> r eax
- eax=00000000
- 0: kd> dd esp+10 L1
- f78a62e4 00000007
- 0: kd> uf
- Address expression missing from '<EOL>'
- 0: kd> uf nt!IoCreateDevice+0x336
- nt!PiRegSzToString:
- 8059bbd8 8bff mov edi,edi
- 8059bbda 55 push ebp
- 8059bbdb 8bec mov ebp,esp
- 8059bbdd 8b450c mov eax,dword ptr [ebp+0Ch]
- 8059bbe0 53 push ebx
- 8059bbe1 56 push esi
- 8059bbe2 8b7508 mov esi,dword ptr [ebp+8]
- 8059bbe5 d1e8 shr eax,1
- 8059bbe7 8d0446 lea eax,[esi+eax*2]
- 8059bbea 3bf0 cmp esi,eax
- 8059bbec 57 push edi
- 8059bbed 8bde mov ebx,esi
- 8059bbef 730c jae nt!PiRegSzToString+0x25 (8059bbfd) Branch
- nt!PiRegSzToString+0x19:
- 8059bbf1 66833b00 cmp word ptr [ebx],0
- 8059bbf5 7406 je nt!PiRegSzToString+0x25 (8059bbfd) Branch
- nt!PiRegSzToString+0x1f:
- 8059bbf7 43 inc ebx
- 8059bbf8 43 inc ebx
- 8059bbf9 3bd8 cmp ebx,eax
- 8059bbfb 72f4 jb nt!PiRegSzToString+0x19 (8059bbf1) Branch
- nt!PiRegSzToString+0x25:
- 8059bbfd 8b4510 mov eax,dword ptr [ebp+10h]
- 8059bc00 2bde sub ebx,esi
- 8059bc02 85c0 test eax,eax
- 8059bc04 7402 je nt!PiRegSzToString+0x30 (8059bc08) Branch
- nt!PiRegSzToString+0x2e:
- 8059bc06 8918 mov dword ptr [eax],ebx
- nt!PiRegSzToString+0x30:
- 8059bc08 8b7d14 mov edi,dword ptr [ebp+14h]
- 8059bc0b 85ff test edi,edi
- 8059bc0d 0f857e850500 jne nt!PiRegSzToString+0x37 (805f4191) Branch
- nt!PiRegSzToString+0x71:
- 8059bc13 b001 mov al,1
- nt!PiRegSzToString+0x73:
- 8059bc15 5f pop edi
- 8059bc16 5e pop esi
- 8059bc17 5b pop ebx
- 8059bc18 5d pop ebp
- 8059bc19 c21000 ret 10h
- nt!PiRegSzToString+0x37:
- 805f4191 6850707375 push 75737050h
- 805f4196 8d4302 lea eax,[ebx+2]
- 805f4199 50 push eax
- 805f419a 6a01 push 1
- 805f419c e864cef5ff call nt!ExAllocatePoolWithTag (80551005)
- 805f41a1 85c0 test eax,eax
- 805f41a3 8907 mov dword ptr [edi],eax
- 805f41a5 7507 jne nt!PiRegSzToString+0x51 (805f41ae) Branch
- nt!PiRegSzToString+0x4d:
- 805f41a7 32c0 xor al,al
- 805f41a9 e9677afaff jmp nt!PiRegSzToString+0x73 (8059bc15) Branch
- nt!PiRegSzToString+0x51:
- 805f41ae 85db test ebx,ebx
- 805f41b0 7415 je nt!PiRegSzToString+0x6a (805f41c7) Branch
- nt!PiRegSzToString+0x55:
- 805f41b2 8bcb mov ecx,ebx
- 805f41b4 8bf8 mov edi,eax
- 805f41b6 8bc1 mov eax,ecx
- 805f41b8 c1e902 shr ecx,2
- 805f41bb f3a5 rep movs dword ptr es:[edi],dword ptr [esi]
- 805f41bd 8bc8 mov ecx,eax
- 805f41bf 83e103 and ecx,3
- 805f41c2 f3a4 rep movs byte ptr es:[edi],byte ptr [esi]
- 805f41c4 8b7d14 mov edi,dword ptr [ebp+14h]
- nt!PiRegSzToString+0x6a:
- 805f41c7 8b07 mov eax,dword ptr [edi]
- 805f41c9 6683240300 and word ptr [ebx+eax],0
- 805f41ce e9407afaff jmp nt!PiRegSzToString+0x71 (8059bc13) Branch
- 0: kd> uf nt!IoCreateDevice
- nt!IoCreateDevice:
- 8059b8bf 8bff mov edi,edi
- 8059b8c1 55 push ebp
- 8059b8c2 8bec mov ebp,esp
- 8059b8c4 81ec90000000 sub esp,90h
- 8059b8ca a160a35580 mov eax,dword ptr [nt!__security_cookie (8055a360)]
- 8059b8cf 8945fc mov dword ptr [ebp-4],eax
- 8059b8d2 8b4508 mov eax,dword ptr [ebp+8]
- 8059b8d5 89459c mov dword ptr [ebp-64h],eax
- 8059b8d8 8b4520 mov eax,dword ptr [ebp+20h]
- 8059b8db 8945a8 mov dword ptr [ebp-58h],eax
- 8059b8de 8b450c mov eax,dword ptr [ebp+0Ch]
- 8059b8e1 83e007 and eax,7
- 8059b8e4 53 push ebx
- 8059b8e5 33db xor ebx,ebx
- 8059b8e7 894594 mov dword ptr [ebp-6Ch],eax
- 8059b8ea 8b4518 mov eax,dword ptr [ebp+18h]
- 8059b8ed 56 push esi
- 8059b8ee 2580000000 and eax,80h
- 8059b8f3 57 push edi
- 8059b8f4 8b7d10 mov edi,dword ptr [ebp+10h]
- 8059b8f7 895db0 mov dword ptr [ebp-50h],ebx
- 8059b8fa 885dbf mov byte ptr [ebp-41h],bl
- 8059b8fd 895db8 mov dword ptr [ebp-48h],ebx
- 8059b900 8945a4 mov dword ptr [ebp-5Ch],eax
- nt!IoCreateDevice+0x44:
- 8059b903 395da4 cmp dword ptr [ebp-5Ch],ebx
- 8059b906 0f85c26e0300 jne nt!IoCreateDevice+0x49 (805d27ce) Branch
- nt!IoCreateDevice+0x88:
- 8059b90c 53 push ebx
- 8059b90d 8d45b8 lea eax,[ebp-48h]
- 8059b910 50 push eax
- 8059b911 8d45c4 lea eax,[ebp-3Ch]
- 8059b914 50 push eax
- 8059b915 3bfb cmp edi,ebx
- 8059b917 0f9545ac setne byte ptr [ebp-54h]
- 8059b91b ff75ac push dword ptr [ebp-54h]
- 8059b91e ff7518 push dword ptr [ebp+18h]
- 8059b921 ff7514 push dword ptr [ebp+14h]
- 8059b924 e8f7feffff call nt!IopCreateDefaultDeviceSecurityDescriptor (8059b820)
- 8059b929 8945a0 mov dword ptr [ebp-60h],eax
- 8059b92c 8b4514 mov eax,dword ptr [ebp+14h]
- 8059b92f 83e803 sub eax,3
- 8059b932 0f8418da0000 je nt!IoCreateDevice+0xc6 (805a9350) Branch
- nt!IoCreateDevice+0xb0:
- 8059b938 83e804 sub eax,4
- 8059b93b 0f84bb980000 je nt!IoCreateDevice+0xbd (805a51fc) Branch
- nt!IoCreateDevice+0xb5:
- 8059b941 48 dec eax
- 8059b942 0f84b4980000 je nt!IoCreateDevice+0xbd (805a51fc) Branch
- nt!IoCreateDevice+0xb8:
- 8059b948 83e81c sub eax,1Ch
- 8059b94b 0f84ab980000 je nt!IoCreateDevice+0xbd (805a51fc) Branch
- nt!IoCreateDevice+0xcd:
- 8059b951 385d1c cmp byte ptr [ebp+1Ch],bl
- 8059b954 8b45a0 mov eax,dword ptr [ebp-60h]
- 8059b957 c78578ffffff18000000 mov dword ptr [ebp-88h],18h
- 8059b961 899d7cffffff mov dword ptr [ebp-84h],ebx
- 8059b967 c7458400020000 mov dword ptr [ebp-7Ch],200h
- 8059b96e 897d80 mov dword ptr [ebp-80h],edi
- 8059b971 894588 mov dword ptr [ebp-78h],eax
- 8059b974 895d8c mov dword ptr [ebp-74h],ebx
- 8059b977 0f85cca90100 jne nt!IoCreateDevice+0xf5 (805b6349) Branch
- nt!IoCreateDevice+0xfc:
- 8059b97d 385dac cmp byte ptr [ebp-54h],bl
- 8059b980 7404 je nt!IoCreateDevice+0x105 (8059b986) Branch
- nt!IoCreateDevice+0x101:
- 8059b982 834d8410 or dword ptr [ebp-7Ch],10h
- nt!IoCreateDevice+0x105:
- 8059b986 8b7594 mov esi,dword ptr [ebp-6Ch]
- 8059b989 3bf3 cmp esi,ebx
- 8059b98b 0f85c3440000 jne nt!IoCreateDevice+0x10c (8059fe54) Branch
- nt!IoCreateDevice+0x113:
- 8059b991 03750c add esi,dword ptr [ebp+0Ch]
- 8059b994 8d4598 lea eax,[ebp-68h]
- 8059b997 50 push eax
- 8059b998 53 push ebx
- 8059b999 53 push ebx
- 8059b99a 8d86e4000000 lea eax,[esi+0E4h]
- 8059b9a0 50 push eax
- 8059b9a1 53 push ebx
- 8059b9a2 53 push ebx
- 8059b9a3 8d8578ffffff lea eax,[ebp-88h]
- 8059b9a9 50 push eax
- 8059b9aa ff35640d5680 push dword ptr [nt!IoDeviceObjectType (80560d64)]
- 8059b9b0 53 push ebx
- 8059b9b1 e86f1bfdff call nt!ObCreateObject (8056d525)
- 8059b9b6 3d350000c0 cmp eax,0C0000035h
- 8059b9bb 8b5598 mov edx,dword ptr [ebp-68h]
- 8059b9be 8955c0 mov dword ptr [ebp-40h],edx
- 8059b9c1 8945b4 mov dword ptr [ebp-4Ch],eax
- 8059b9c4 0f8414300500 je nt!IoCreateDevice+0x148 (805ee9de) Branch
- nt!IoCreateDevice+0x151:
- 8059b9ca 385dbf cmp byte ptr [ebp-41h],bl
- 8059b9cd 0f8530ffffff jne nt!IoCreateDevice+0x44 (8059b903) Branch
- nt!IoCreateDevice+0x15a:
- 8059b9d3 3bc3 cmp eax,ebx
- 8059b9d5 0f8c89aa0100 jl nt!IoCreateDevice+0x30e (805b6464) Branch
- nt!IoCreateDevice+0x162:
- 8059b9db 8bfa mov edi,edx
- 8059b9dd 8d8ee4000000 lea ecx,[esi+0E4h]
- 8059b9e3 8bd1 mov edx,ecx
- 8059b9e5 c1e902 shr ecx,2
- 8059b9e8 33c0 xor eax,eax
- 8059b9ea f3ab rep stos dword ptr es:[edi]
- 8059b9ec 8bca mov ecx,edx
- 8059b9ee 83e103 and ecx,3
- 8059b9f1 f3aa rep stos byte ptr es:[edi]
- 8059b9f3 8b4dc0 mov ecx,dword ptr [ebp-40h]
- 8059b9f6 8d8431b8000000 lea eax,[ecx+esi+0B8h]
- 8059b9fd 894804 mov dword ptr [eax+4],ecx
- 8059ba00 8b4dc0 mov ecx,dword ptr [ebp-40h]
- 8059ba03 8981b0000000 mov dword ptr [ecx+0B0h],eax
- 8059ba09 50 push eax
- 8059ba0a 66c7000d00 mov word ptr [eax],0Dh
- 8059ba0f 66895802 mov word ptr [eax+2],bx
- 8059ba13 e884feffff call nt!PoInitializeDeviceObject (8059b89c)
- 8059ba18 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059ba1b 8b7d0c mov edi,dword ptr [ebp+0Ch]
- 8059ba1e 8b7514 mov esi,dword ptr [ebp+14h]
- 8059ba21 83fe07 cmp esi,7
- 8059ba24 66c7000300 mov word ptr [eax],3
- 8059ba29 8b4dc0 mov ecx,dword ptr [ebp-40h]
- 8059ba2c 8d87b8000000 lea eax,[edi+0B8h]
- 8059ba32 66894102 mov word ptr [ecx+2],ax
- 8059ba36 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059ba39 8b4d18 mov ecx,dword ptr [ebp+18h]
- 8059ba3c 89702c mov dword ptr [eax+2Ch],esi
- 8059ba3f 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059ba42 894820 mov dword ptr [eax+20h],ecx
- 8059ba45 0f84ac2c0200 je nt!IoCreateDevice+0x1dd (805be6f7) Branch
- nt!IoCreateDevice+0x1ce:
- 8059ba4b 83fe1f cmp esi,1Fh
- 8059ba4e 0f84a32c0200 je nt!IoCreateDevice+0x1dd (805be6f7) Branch
- nt!IoCreateDevice+0x1d3:
- 8059ba54 83fe02 cmp esi,2
- 8059ba57 0f849a2c0200 je nt!IoCreateDevice+0x1dd (805be6f7) Branch
- nt!IoCreateDevice+0x1d8:
- 8059ba5d 83fe24 cmp esi,24h
- 8059ba60 0f84912c0200 je nt!IoCreateDevice+0x1dd (805be6f7) Branch
- nt!IoCreateDevice+0x23a:
- 8059ba66 385d1c cmp byte ptr [ebp+1Ch],bl
- 8059ba69 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059ba6c 668b4db0 mov cx,word ptr [ebp-50h]
- 8059ba70 89585c mov dword ptr [eax+5Ch],ebx
- 8059ba73 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059ba76 668988ac000000 mov word ptr [eax+0ACh],cx
- 8059ba7d 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059ba80 c7401c80000000 mov dword ptr [eax+1Ch],80h
- 8059ba87 0f85c8a80100 jne nt!IoCreateDevice+0x25d (805b6355) Branch
- nt!IoCreateDevice+0x264:
- 8059ba8d 385dac cmp byte ptr [ebp-54h],bl
- 8059ba90 7407 je nt!IoCreateDevice+0x270 (8059ba99) Branch
- nt!IoCreateDevice+0x269:
- 8059ba92 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059ba95 83481c40 or dword ptr [eax+1Ch],40h
- nt!IoCreateDevice+0x270:
- 8059ba99 3bfb cmp edi,ebx
- 8059ba9b 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059ba9e 0f8464d60000 je nt!IoCreateDevice+0x282 (805a9108) Branch
- nt!IoCreateDevice+0x277:
- 8059baa4 8d88b8000000 lea ecx,[eax+0B8h]
- 8059baaa 894828 mov dword ptr [eax+28h],ecx
- nt!IoCreateDevice+0x285:
- 8059baad 83fe03 cmp esi,3
- 8059bab0 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059bab3 c6403001 mov byte ptr [eax+30h],1
- 8059bab7 0f846fab0400 je nt!IoCreateDevice+0x2b3 (805e662c) Branch
- nt!IoCreateDevice+0x291:
- 8059babd 83fe07 cmp esi,7
- 8059bac0 761b jbe nt!IoCreateDevice+0x2a5 (8059badd) Branch
- nt!IoCreateDevice+0x296:
- 8059bac2 83fe09 cmp esi,9
- 8059bac5 0f8661ab0400 jbe nt!IoCreateDevice+0x2b3 (805e662c) Branch
- nt!IoCreateDevice+0x29b:
- 8059bacb 83fe14 cmp esi,14h
- 8059bace 0f8458ab0400 je nt!IoCreateDevice+0x2b3 (805e662c) Branch
- nt!IoCreateDevice+0x2a0:
- 8059bad4 83fe20 cmp esi,20h
- 8059bad7 0f844fab0400 je nt!IoCreateDevice+0x2b3 (805e662c) Branch
- nt!IoCreateDevice+0x2a5:
- 8059badd 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059bae0 83c060 add eax,60h
- 8059bae3 50 push eax
- 8059bae4 e838abf6ff call nt!KeInitializeDeviceQueue (80506621)
- nt!IoCreateDevice+0x2be:
- 8059bae9 8d4590 lea eax,[ebp-70h]
- 8059baec 50 push eax
- 8059baed 8d45c0 lea eax,[ebp-40h]
- 8059baf0 50 push eax
- 8059baf1 6a01 push 1
- 8059baf3 6a03 push 3
- 8059baf5 53 push ebx
- 8059baf6 ff75c0 push dword ptr [ebp-40h]
- 8059baf9 e8661ffdff call nt!ObInsertObject (8056da64)
- 8059bafe 3bc3 cmp eax,ebx
- 8059bb00 8945b4 mov dword ptr [ebp-4Ch],eax
- 8059bb03 0f8c5ba90100 jl nt!IoCreateDevice+0x30e (805b6464) Branch
- nt!IoCreateDevice+0x2da:
- 8059bb09 8b759c mov esi,dword ptr [ebp-64h]
- 8059bb0c 8bce mov ecx,esi
- 8059bb0e e850e5f3ff call nt!ObfReferenceObject (804da063)
- 8059bb13 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059bb16 6a01 push 1
- 8059bb18 897008 mov dword ptr [eax+8],esi
- 8059bb1b ff75c0 push dword ptr [ebp-40h]
- 8059bb1e 56 push esi
- 8059bb1f e83ddaf7ff call nt!IopInsertRemoveDevice (80519561)
- 8059bb24 8b45c0 mov eax,dword ptr [ebp-40h]
- 8059bb27 395824 cmp dword ptr [eax+24h],ebx
- 8059bb2a 0f850d2c0200 jne nt!IoCreateDevice+0x2fd (805be73d) Branch
- nt!IoCreateDevice+0x303:
- 8059bb30 53 push ebx
- 8059bb31 ff7590 push dword ptr [ebp-70h]
- 8059bb34 e867a3fdff call nt!ObCloseHandle (80575ea0)
- nt!IoCreateDevice+0x311:
- 8059bb39 395db8 cmp dword ptr [ebp-48h],ebx
- 8059bb3c 0f85a0d60000 jne nt!IoCreateDevice+0x316 (805a91e2) Branch
- nt!IoCreateDevice+0x31f:
- 8059bb42 8b45a8 mov eax,dword ptr [ebp-58h]
- 8059bb45 8b4dc0 mov ecx,dword ptr [ebp-40h]
- 8059bb48 8908 mov dword ptr [eax],ecx
- nt!IoCreateDevice+0x327:
- 8059bb4a 8b4dfc mov ecx,dword ptr [ebp-4]
- 8059bb4d 8b45b4 mov eax,dword ptr [ebp-4Ch]
- 8059bb50 5f pop edi
- 8059bb51 5e pop esi
- 8059bb52 5b pop ebx
- 8059bb53 e80ae1f3ff call nt!KeInsertQueue (804d9c62)
- 8059bb58 c9 leave
- 8059bb59 c21c00 ret 1Ch
- nt!IoCreateDevice+0x10c:
- 8059fe54 6a08 push 8
- 8059fe56 58 pop eax
- 8059fe57 2bc6 sub eax,esi
- 8059fe59 8bf0 mov esi,eax
- 8059fe5b e931bbffff jmp nt!IoCreateDevice+0x113 (8059b991) Branch
- nt!IoCreateDevice+0xbd:
- 805a51fc c745b000020000 mov dword ptr [ebp-50h],200h
- 805a5203 e94967ffff jmp nt!IoCreateDevice+0xcd (8059b951) Branch
- nt!IoCreateDevice+0x282:
- 805a9108 895828 mov dword ptr [eax+28h],ebx
- 805a910b e99d29ffff jmp nt!IoCreateDevice+0x285 (8059baad) Branch
- nt!IoCreateDevice+0x316:
- 805a91e2 53 push ebx
- 805a91e3 ff75b8 push dword ptr [ebp-48h]
- 805a91e6 e8fb7ffaff call nt!ExFreePoolWithTag (805511e6)
- 805a91eb e95229ffff jmp nt!IoCreateDevice+0x31f (8059bb42) Branch
- nt!IoCreateDevice+0xc6:
- 805a9350 c745b000080000 mov dword ptr [ebp-50h],800h
- 805a9357 e9f525ffff jmp nt!IoCreateDevice+0xcd (8059b951) Branch
- nt!IoCreateDevice+0xf5:
- 805b6349 c7458420020000 mov dword ptr [ebp-7Ch],220h
- 805b6350 e92856feff jmp nt!IoCreateDevice+0xfc (8059b97d) Branch
- nt!IoCreateDevice+0x25d:
- 805b6355 8b45c0 mov eax,dword ptr [ebp-40h]
- 805b6358 83481c08 or dword ptr [eax+1Ch],8
- 805b635c e92c57feff jmp nt!IoCreateDevice+0x264 (8059ba8d) Branch
- nt!IoCreateDevice+0x30e:
- 805b6464 895dc0 mov dword ptr [ebp-40h],ebx
- 805b6467 e9cd56feff jmp nt!IoCreateDevice+0x311 (8059bb39) Branch
- nt!IoCreateDevice+0x1dd:
- 805be6f7 ff75c0 push dword ptr [ebp-40h]
- 805be6fa e8b6ffffff call nt!IopCreateVpb (805be6b5)
- 805be6ff 3bc3 cmp eax,ebx
- 805be701 8945b4 mov dword ptr [ebp-4Ch],eax
- 805be704 0f8ce6020300 jl nt!IoCreateDevice+0x1ec (805ee9f0) Branch
- nt!IoCreateDevice+0x20c:
- 805be70a 8b45c0 mov eax,dword ptr [ebp-40h]
- 805be70d c6809c00000001 mov byte ptr [eax+9Ch],1
- 805be714 8b45c0 mov eax,dword ptr [ebp-40h]
- 805be717 c6809e00000004 mov byte ptr [eax+9Eh],4
- 805be71e 8b45c0 mov eax,dword ptr [ebp-40h]
- 805be721 c780a000000001000000 mov dword ptr [eax+0A0h],1
- 805be72b 8b45c0 mov eax,dword ptr [ebp-40h]
- 805be72e 05a4000000 add eax,0A4h
- 805be733 894004 mov dword ptr [eax+4],eax
- 805be736 8900 mov dword ptr [eax],eax
- 805be738 e929d3fdff jmp nt!IoCreateDevice+0x23a (8059ba66) Branch
- nt!IoCreateDevice+0x2fd:
- 805be73d 50 push eax
- 805be73e e80a000000 call nt!PoVolumeDevice (805be74d)
- 805be743 e9e8d3fdff jmp nt!IoCreateDevice+0x303 (8059bb30) Branch
- nt!IoCreateDevice+0x49:
- 805d27ce 33c0 xor eax,eax
- 805d27d0 b9240d5680 mov ecx,offset nt!IopUniqueDeviceObjectNumber (80560d24)
- 805d27d5 40 inc eax
- 805d27d6 f00fc101 lock xadd dword ptr [ecx],eax
- 805d27da 40 inc eax
- 805d27db 50 push eax
- 805d27dc 8d45d8 lea eax,[ebp-28h]
- 805d27df 6812285d80 push offset nt!IoConnectInterrupt+0x154 (805d2812)
- 805d27e4 50 push eax
- 805d27e5 e817a2f2ff call nt!swprintf (804fca01)
- 805d27ea 83c40c add esp,0Ch
- 805d27ed 385dbf cmp byte ptr [ebp-41h],bl
- 805d27f0 0f85e0c10100 jne nt!IoCreateDevice+0x6d (805ee9d6) Branch
- nt!IoCreateDevice+0x72:
- 805d27f6 8d45d8 lea eax,[ebp-28h]
- 805d27f9 50 push eax
- 805d27fa 8d8570ffffff lea eax,[ebp-90h]
- 805d2800 50 push eax
- 805d2801 e8977af0ff call nt!RtlInitUnicodeString (804da29d)
- 805d2806 8dbd70ffffff lea edi,[ebp-90h]
- 805d280c e9fb90fcff jmp nt!IoCreateDevice+0x88 (8059b90c) Branch
- nt!IoCreateDevice+0x2b3:
- 805e662c 8b45c0 mov eax,dword ptr [ebp-40h]
- 805e662f 83c034 add eax,34h
- 805e6632 894004 mov dword ptr [eax+4],eax
- 805e6635 8900 mov dword ptr [eax],eax
- 805e6637 e9ad54fbff jmp nt!IoCreateDevice+0x2be (8059bae9) Branch
- nt!IoCreateDevice+0x6d:
- 805ee9d6 885dbf mov byte ptr [ebp-41h],bl
- 805ee9d9 e973cffaff jmp nt!IoCreateDevice+0xcd (8059b951) Branch
- nt!IoCreateDevice+0x148:
- 805ee9de 395da4 cmp dword ptr [ebp-5Ch],ebx
- 805ee9e1 0f84e3cffaff je nt!IoCreateDevice+0x151 (8059b9ca) Branch
- nt!IoCreateDevice+0x14d:
- 805ee9e7 c645bf01 mov byte ptr [ebp-41h],1
- 805ee9eb e9dacffaff jmp nt!IoCreateDevice+0x151 (8059b9ca) Branch
- nt!IoCreateDevice+0x1ec:
- 805ee9f0 8b4dc0 mov ecx,dword ptr [ebp-40h]
- 805ee9f3 e8082fefff call nt!ObfDereferenceObject (804e1900)
- 805ee9f8 395db8 cmp dword ptr [ebp-48h],ebx
- 805ee9fb 7409 je nt!IoCreateDevice+0x202 (805eea06) Branch
- nt!IoCreateDevice+0x1f9:
- 805ee9fd 53 push ebx
- 805ee9fe ff75b8 push dword ptr [ebp-48h]
- 805eea01 e8e027f6ff call nt!ExFreePoolWithTag (805511e6)
- nt!IoCreateDevice+0x202:
- 805eea06 8b45a8 mov eax,dword ptr [ebp-58h]
- 805eea09 8918 mov dword ptr [eax],ebx
- 805eea0b e93ad1faff jmp nt!IoCreateDevice+0x327 (8059bb4a) Branch
- 0: kd> g
- Breakpoint 10 hit
- nt!IoAttachDeviceToDeviceStack:
- 80506ba6 8bff mov edi,edi
- 0: kd> bp disk!DriverEntry
- breakpoint 7 redefined
- 0: kd> bm disk!*DiskAddDevice*
- 13: f7493902 @!"disk!DiskAddDevice"
- 0: kd> bm disk!*DiskCreateFdo*
- 14: f74917bc @!"disk!DiskCreateFdo"
- 0: kd> bm disk!*DiskStartFdo*
- 15: f7493aec @!"disk!DiskStartFdo"
- 0: kd> bm disk!*DiskInitFdo*
- 16: f74941a2 @!"disk!DiskInitFdo"
- 0: kd> bm classpnp!*Class*
- 17: f762809e @!"CLASSPNP!ClassSendSrbSynchronous"
- 18: f762fe55 @!"CLASSPNP!ClassClaimDevice"
- 19: f762fce9 @!"CLASSPNP!ClasspInitializePolling"
- 20: f762fc37 @!"CLASSPNP!ClasspMediaChangeRegistryCallBack"
- 21: f7631288 @!"CLASSPNP!ClassRemoveDevice"
- 22: f762829d @!"CLASSPNP!ClasspSendSynchronousCompletion"
- 23: f762c45f @!"CLASSPNP!ClassSendSrbAsynchronous"
- 24: f76284d4 @!"CLASSPNP!ClassDeviceControl"
- 25: f762d0fc @!"CLASSPNP!ClasspPerfIncrementErrorCount"
- 26: f762e338 @!"CLASSPNP!ClassInitialize"
- 27: f762c72f @!"CLASSPNP!ClassMinimalPowerHandler"
- 28: f763120e @!"CLASSPNP!ClassMarkChildMissing"
- 29: f762fe36 @!"CLASSPNP!ClassAddDevice"
- 30: f763053e @!"CLASSPNP!ClassInitializeEx"
- 31: f762df82 @!"CLASSPNP!ClassRetrieveDeviceRelations"
- 32: f76293b9 @!"CLASSPNP!ClassReleaseQueueCompletion"
- 33: f762ded6 @!"CLASSPNP!ClasspRegisterMountedDeviceInterface"
- 34: f76310df @!"CLASSPNP!ClasspDisableTimer"
- 35: f7628ea9 @!"CLASSPNP!ClassInterpretSenseInfo"
- 36: f76273c0 @!"CLASSPNP!ClassReleaseRemoveLock"
- 37: f762c66d @!"CLASSPNP!ClassWmiFireEvent"
- 38: f762f437 @!"CLASSPNP!ClassGetDescriptor"
- 39: f76284b4 @!"CLASSPNP!ClassSignalCompletion"
- *******************************************************************************
- * You have attempted to enable 33 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 40: f7631251 @!"CLASSPNP!ClassMarkChildrenMissing"
- *******************************************************************************
- * You have attempted to enable 34 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 41: f762be78 @!"CLASSPNP!ClassNotifyFailurePredicted"
- *******************************************************************************
- * You have attempted to enable 35 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 42: f7629c82 @!"CLASSPNP!ClassDispatchPower"
- *******************************************************************************
- * You have attempted to enable 36 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 43: f763105a @!"CLASSPNP!ClassDisableMediaChangeDetection"
- *******************************************************************************
- * You have attempted to enable 37 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 44: f7627d1f @!"CLASSPNP!ClassReadWrite"
- *******************************************************************************
- * You have attempted to enable 38 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 45: f762bdc0 @!"CLASSPNP!ClasspMcnControl"
- *******************************************************************************
- * You have attempted to enable 39 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 46: f762f09d @!"CLASSPNP!ClasspInitializeHotplugInfo"
- *******************************************************************************
- * You have attempted to enable 40 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 47: f7627be3 @!"CLASSPNP!ClassCompleteRequest"
- *******************************************************************************
- * You have attempted to enable 41 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 48: f7629dd6 @!"CLASSPNP!ClasspStartNextPowerIrpCompletion"
- *******************************************************************************
- * You have attempted to enable 42 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 49: f7629fd4 @!"CLASSPNP!ClassGetDriverExtension"
- *******************************************************************************
- * You have attempted to enable 43 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 50: f762df21 @!"CLASSPNP!ClassPnpQueryFdoRelations"
- *******************************************************************************
- * You have attempted to enable 44 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 51: f762bf28 @!"CLASSPNP!ClassInternalIoControl"
- *******************************************************************************
- * You have attempted to enable 45 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 52: f762d167 @!"CLASSPNP!ClassSplitRequest"
- *******************************************************************************
- * You have attempted to enable 46 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 53: f76275c1 @!"CLASSPNP!ClasspMediaChangeDetectionCompletion"
- *******************************************************************************
- * You have attempted to enable 47 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 54: f762bf18 @!"CLASSPNP!ClassInitializeTestUnitPolling"
- *******************************************************************************
- * You have attempted to enable 48 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 55: f762974b @!"CLASSPNP!ClassReadDriveCapacity"
- *******************************************************************************
- * You have attempted to enable 49 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 56: f76277cd @!"CLASSPNP!ClasspPrepareMcnIrp"
- *******************************************************************************
- * You have attempted to enable 50 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 57: f762770b @!"CLASSPNP!ClasspInterpretGesnData"
- *******************************************************************************
- * You have attempted to enable 51 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 58: f762bef9 @!"CLASSPNP!ClassSendEjectionNotification"
- *******************************************************************************
- * You have attempted to enable 52 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 59: f7631010 @!"CLASSPNP!ClassEnableMediaChangeDetection"
- *******************************************************************************
- * You have attempted to enable 53 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 60: f7628487 @!"CLASSPNP!ClasspStartIo"
- *******************************************************************************
- * You have attempted to enable 54 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 61: f762f855 @!"CLASSPNP!ClasspMediaChangeDeviceInstanceOverride"
- *******************************************************************************
- * You have attempted to enable 55 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 62: f762a69a @!"CLASSPNP!ClasspFailurePredict"
- *******************************************************************************
- * You have attempted to enable 56 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 63: f76292a0 @!"CLASSPNP!ClasspReleaseQueue"
- *******************************************************************************
- * You have attempted to enable 57 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 64: f762d226 @!"CLASSPNP!ClasspBuildRequestEx"
- *******************************************************************************
- * You have attempted to enable 58 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 65: f762a033 @!"CLASSPNP!ClasspInitializeGesn"
- *******************************************************************************
- * You have attempted to enable 59 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 66: f7627406 @!"CLASSPNP!ClasspTimerTick"
- *******************************************************************************
- * You have attempted to enable 60 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 67: f7629a43 @!"CLASSPNP!ClassFreeOrReuseSrb"
- *******************************************************************************
- * You have attempted to enable 61 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 68: f76283bb @!"CLASSPNP!ClassDeviceControlDispatch"
- *******************************************************************************
- * You have attempted to enable 62 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 69: f762c2c6 @!"CLASSPNP!ClassAsynchronousCompletion"
- *******************************************************************************
- * You have attempted to enable 63 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 70: f762ed57 @!"CLASSPNP!ClassQueryTimeOutRegistryValue"
- *******************************************************************************
- * You have attempted to enable 64 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 71: f762c358 @!"CLASSPNP!ClassSendStartUnit"
- *******************************************************************************
- * You have attempted to enable 65 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 72: f7627390 @!"CLASSPNP!ClassAcquireRemoveLockEx"
- *******************************************************************************
- * You have attempted to enable 66 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 73: f76281f3 @!"CLASSPNP!ClassIoComplete"
- *******************************************************************************
- * You have attempted to enable 67 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 74: f762caf1 @!"CLASSPNP!ClasspPowerDownCompletion"
- *******************************************************************************
- * You have attempted to enable 68 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 75: f76274e6 @!"CLASSPNP!ClasspSendMediaStateIrp"
- *******************************************************************************
- * You have attempted to enable 69 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 76: f762f58d @!"CLASSPNP!ClasspIsMediaChangeDisabledForClass"
- *******************************************************************************
- * You have attempted to enable 70 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 77: f762d59a @!"CLASSPNP!ClassDebugPrint"
- *******************************************************************************
- * You have attempted to enable 71 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 78: f762e037 @!"CLASSPNP!ClassInvalidateBusRelations"
- *******************************************************************************
- * You have attempted to enable 72 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 79: f76291f2 @!"CLASSPNP!ClassSetMediaChangeState"
- *******************************************************************************
- * You have attempted to enable 73 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 80: f762cec5 @!"CLASSPNP!ClassStopUnitPowerHandler"
- *******************************************************************************
- * You have attempted to enable 74 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 81: f762f1e3 @!"CLASSPNP!ClassGetDeviceParameter"
- *******************************************************************************
- * You have attempted to enable 75 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 82: f762ea35 @!"CLASSPNP!ClassSendDeviceIoControlSynchronous"
- *******************************************************************************
- * You have attempted to enable 76 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 83: f762d35e @!"CLASSPNP!ClassIoCompleteAssociated"
- *******************************************************************************
- * You have attempted to enable 77 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 84: f7629e13 @!"CLASSPNP!ClasspAllocateReleaseQueueIrp"
- *******************************************************************************
- * You have attempted to enable 78 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 85: f762f551 @!"CLASSPNP!ClasspEnableTimer"
- *******************************************************************************
- * You have attempted to enable 79 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 86: f7629b56 @!"CLASSPNP!ClassSendIrpSynchronous"
- *******************************************************************************
- * You have attempted to enable 80 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 87: f762de20 @!"CLASSPNP!ClassPnpStartDevice"
- *******************************************************************************
- * You have attempted to enable 81 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 88: f76314bb @!"CLASSPNP!ClassFindGuid"
- *******************************************************************************
- * You have attempted to enable 82 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 89: f762bd28 @!"CLASSPNP!ClasspSendNotification"
- *******************************************************************************
- * You have attempted to enable 83 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 90: f762e99e @!"CLASSPNP!ClassSystemControl"
- *******************************************************************************
- * You have attempted to enable 84 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 91: f763112d @!"CLASSPNP!ClassQueryPnpCapabilities"
- *******************************************************************************
- * You have attempted to enable 85 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 92: f762f780 @!"CLASSPNP!ClassSetDeviceParameter"
- *******************************************************************************
- * You have attempted to enable 86 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 93: f762ee75 @!"CLASSPNP!ClassInitializeSrbLookasideList"
- *******************************************************************************
- * You have attempted to enable 87 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 94: f7629288 @!"CLASSPNP!ClassReleaseQueue"
- *******************************************************************************
- * You have attempted to enable 88 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 95: f76277aa @!"CLASSPNP!ClassResetMediaChangeTimer"
- *******************************************************************************
- * You have attempted to enable 89 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 96: f762bfed @!"CLASSPNP!ClassCheckVerifyComplete"
- *******************************************************************************
- * You have attempted to enable 90 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 97: f7629d26 @!"CLASSPNP!ClasspPowerHandler"
- *******************************************************************************
- * You have attempted to enable 91 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 98: f762c044 @!"CLASSPNP!ClassGetVpb"
- *******************************************************************************
- * You have attempted to enable 92 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 99: f762c1bf @!"CLASSPNP!ClassRetryRequest"
- *******************************************************************************
- * You have attempted to enable 93 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 100: f7629418 @!"CLASSPNP!ClasspInternalSetMediaChangeState"
- *******************************************************************************
- * You have attempted to enable 94 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 101: f762fefb @!"CLASSPNP!ClassCreateDeviceObject"
- *******************************************************************************
- * You have attempted to enable 95 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 102: f7629960 @!"CLASSPNP!ClassReleaseChildLock"
- *******************************************************************************
- * You have attempted to enable 96 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 103: f7630142 @!"CLASSPNP!ClassUpdateInformationInRegistry"
- *******************************************************************************
- * You have attempted to enable 97 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 104: f7629ceb @!"CLASSPNP!ClassSpinDownPowerHandler"
- *******************************************************************************
- * You have attempted to enable 98 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 105: f76310ff @!"CLASSPNP!ClassGetPdoId"
- *******************************************************************************
- * You have attempted to enable 99 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 106: f762da80 @!"CLASSPNP!ClasspCreateClose"
- *******************************************************************************
- * You have attempted to enable 100 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 107: f762eece @!"CLASSPNP!ClassScanForSpecial"
- *******************************************************************************
- * You have attempted to enable 101 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 108: f762c0b3 @!"CLASSPNP!ClasspRetryDpcTimer"
- *******************************************************************************
- * You have attempted to enable 102 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 109: f7629baa @!"CLASSPNP!ClassForwardIrpSynchronous"
- *******************************************************************************
- * You have attempted to enable 103 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 110: f7629ea7 @!"CLASSPNP!ClasspMyStringMatches"
- *******************************************************************************
- * You have attempted to enable 104 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 111: f7629210 @!"CLASSPNP!ClasspSetMediaChangeStateEx"
- *******************************************************************************
- * You have attempted to enable 105 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 112: f762e08e @!"CLASSPNP!ClasspEjectionControl"
- *******************************************************************************
- * You have attempted to enable 106 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 113: f7631544 @!"CLASSPNP!ClassDeleteSrbLookasideList"
- *******************************************************************************
- * You have attempted to enable 107 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 114: f762db76 @!"CLASSPNP!ClasspCleanupDisableMcn"
- *******************************************************************************
- * You have attempted to enable 108 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 115: f762dc93 @!"CLASSPNP!ClassDispatchPnp"
- *******************************************************************************
- * You have attempted to enable 109 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 116: f76311ee @!"CLASSPNP!ClasspScanForClassHacks"
- *******************************************************************************
- * You have attempted to enable 110 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 117: f762da05 @!"CLASSPNP!ClasspCleanupProtectedLocks"
- *******************************************************************************
- * You have attempted to enable 111 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 118: f76282e2 @!"CLASSPNP!ClassShutdownFlush"
- *******************************************************************************
- * You have attempted to enable 112 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 119: f76305eb @!"CLASSPNP!ClassModeSense"
- *******************************************************************************
- * You have attempted to enable 113 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 120: f762d55f @!"CLASSPNP!ClassBuildRequest"
- *******************************************************************************
- * You have attempted to enable 114 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 121: f762a5a2 @!"CLASSPNP!ClassFindModePage"
- *******************************************************************************
- * You have attempted to enable 115 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 122: f762fc86 @!"CLASSPNP!ClassInitializeMediaChangeDetection"
- *******************************************************************************
- * You have attempted to enable 116 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 123: f762f9fb @!"CLASSPNP!ClasspIsMediaChangeDisabledDueToHardwareLimitation"
- *******************************************************************************
- * You have attempted to enable 117 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 124: f762db54 @!"CLASSPNP!ClasspGetFsContext"
- *******************************************************************************
- * You have attempted to enable 118 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 125: f7631174 @!"CLASSPNP!ClasspFreeReleaseRequest"
- *******************************************************************************
- * You have attempted to enable 119 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 126: f762c058 @!"CLASSPNP!ClassRemoveChild"
- *******************************************************************************
- * You have attempted to enable 120 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 127: f762c125 @!"CLASSPNP!ClasspRetryRequestDpc"
- *******************************************************************************
- * You have attempted to enable 121 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 128: f762c581 @!"CLASSPNP!ClassWmiCompleteRequest"
- *******************************************************************************
- * You have attempted to enable 122 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 129: f7628039 @!"CLASSPNP!ClasspPerfIncrementSuccessfulIo"
- *******************************************************************************
- * You have attempted to enable 123 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 130: f7630444 @!"CLASSPNP!ClassSetFailurePredictionPoll"
- *******************************************************************************
- * You have attempted to enable 124 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 131: f762a60d @!"CLASSPNP!ClassAddChild"
- *******************************************************************************
- * You have attempted to enable 125 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 132: f762dbb0 @!"CLASSPNP!ClassCreateClose"
- *******************************************************************************
- * You have attempted to enable 126 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 133: f76300e1 @!"CLASSPNP!ClasspAllocateReleaseRequest"
- *******************************************************************************
- * You have attempted to enable 127 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 134: f762eb4a @!"CLASSPNP!ClasspScanForSpecialInRegistry"
- *******************************************************************************
- * You have attempted to enable 128 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 135: f7631092 @!"CLASSPNP!ClassCleanupMediaChangeDetection"
- *******************************************************************************
- * You have attempted to enable 129 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 136: f762991c @!"CLASSPNP!ClassAcquireChildLock"
- *******************************************************************************
- * You have attempted to enable 130 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 137: f762e4b4 @!"CLASSPNP!ClassUnload"
- *******************************************************************************
- * You have attempted to enable 131 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 138: f762c84e @!"CLASSPNP!ClasspPowerUpCompletion"
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- 139: f762757c @!"CLASSPNP!ClassCheckMediaState"
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 9 hit
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- nt!IoCreateDevice:
- 8059b8bf 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 10 hit
- nt!IoAttachDeviceToDeviceStack:
- 80506ba6 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 38 hit
- CLASSPNP!ClassGetDescriptor:
- f762f437 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 38 hit
- CLASSPNP!ClassGetDescriptor:
- f762f437 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 16 hit
- disk!DiskInitFdo:
- f74941a2 8bff mov edi,edi
- 0: kd> r
- eax=89bb99f4 ebx=89bbab01 ecx=00000000 edx=89b9e0b8 esi=89bbab90 edi=89bb99f0
- eip=f74941a2 esp=f78a624c ebp=f78a6270 iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk!DiskInitFdo:
- f74941a2 8bff mov edi,edi
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0x2:
- f74941a4 55 push ebp
- 0: kd> r
- eax=89bb99f4 ebx=89bbab01 ecx=00000000 edx=89b9e0b8 esi=89bbab90 edi=89bb99f0
- eip=f74941a4 esp=f78a624c ebp=f78a6270 iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk!DiskInitFdo+0x2:
- f74941a4 55 push ebp
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0x3:
- f74941a5 8bec mov ebp,esp
- 0: kd>
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0x5:
- f74941a7 83ec24 sub esp,24h
- 0: kd> r
- eax=89bb99f4 ebx=89bbab01 ecx=00000000 edx=89b9e0b8 esi=89bbab90 edi=89bb99f0
- eip=f74941a7 esp=f78a6248 ebp=f78a6248 iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk!DiskInitFdo+0x5:
- f74941a7 83ec24 sub esp,24h
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0x8:
- f74941aa 53 push ebx
- 0: kd>
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0x9:
- f74941ab 56 push esi
- 0: kd> r
- eax=89bb99f4 ebx=89bbab01 ecx=00000000 edx=89b9e0b8 esi=89bbab90 edi=89bb99f0
- eip=f74941ab esp=f78a6220 ebp=f78a6248 iopl=0 nv up ei ng nz na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
- disk!DiskInitFdo+0x9:
- f74941ab 56 push esi
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0xa:
- f74941ac 57 push edi
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0xb:
- f74941ad 8b7d08 mov edi,dword ptr [ebp+8]
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0xe:
- f74941b0 8b5f28 mov ebx,dword ptr [edi+28h]
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0x11:
- f74941b3 8b7334 mov esi,dword ptr [ebx+34h]
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0x14:
- f74941b6 6a04 push 4
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0x16:
- f74941b8 53 push ebx
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0x17:
- f74941b9 8975f8 mov dword ptr [ebp-8],esi
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!DiskInitFdo+0x1a:
- f74941bc e87581ffff call disk!ClassInitializeSrbLookasideList (f748c336)
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- disk!ClassInitializeSrbLookasideList:
- f748c336 ff2574d048f7 jmp dword ptr [disk!_imp__ClassInitializeSrbLookasideList (f748d074)]
- 0: kd>
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 93 hit
- CLASSPNP!ClassInitializeSrbLookasideList:
- f762ee75 8bff mov edi,edi
- 0: kd> r
- eax=89bb99f4 ebx=89bbab90 ecx=00000000 edx=89b9e0b8 esi=89bbae58 edi=89bbaad8
- eip=f762ee75 esp=f78a620c ebp=f78a6248 iopl=0 nv up ei ng nz na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
- CLASSPNP!ClassInitializeSrbLookasideList:
- f762ee75 8bff mov edi,edi
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- CLASSPNP!ClassInitializeSrbLookasideList+0x2:
- f762ee77 55 push ebp
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- CLASSPNP!ClassInitializeSrbLookasideList+0x3:
- f762ee78 8bec mov ebp,esp
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 11 hit
- nt!IoRegisterDeviceInterface:
- 805d6dd4 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 12 hit
- nt!IoSetDeviceInterfaceState:
- 805d19d5 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 15 hit
- disk!DiskStartFdo:
- f7493aec 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 33 hit
- CLASSPNP!ClasspRegisterMountedDeviceInterface:
- f762ded6 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 11 hit
- nt!IoRegisterDeviceInterface:
- 805d6dd4 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 12 hit
- nt!IoSetDeviceInterfaceState:
- 805d19d5 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd>
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> dt _DEVICE_OBJECT
- nt!_DEVICE_OBJECT
- +0x000 Type : Int2B
- +0x002 Size : Uint2B
- +0x004 ReferenceCount : Int4B
- +0x008 DriverObject : Ptr32 _DRIVER_OBJECT
- +0x00c NextDevice : Ptr32 _DEVICE_OBJECT
- +0x010 AttachedDevice : Ptr32 _DEVICE_OBJECT
- +0x014 CurrentIrp : Ptr32 _IRP
- +0x018 Timer : Ptr32 _IO_TIMER
- +0x01c Flags : Uint4B
- +0x020 Characteristics : Uint4B
- +0x024 Vpb : Ptr32 _VPB
- +0x028 DeviceExtension : Ptr32 Void
- +0x02c DeviceType : Uint4B
- +0x030 StackSize : Char
- +0x034 Queue : __unnamed
- +0x05c AlignmentRequirement : Uint4B
- +0x060 DeviceQueue : _KDEVICE_QUEUE
- +0x074 Dpc : _KDPC
- +0x094 ActiveThreadCount : Uint4B
- +0x098 SecurityDescriptor : Ptr32 Void
- +0x09c DeviceLock : _KEVENT
- +0x0ac SectorSize : Uint2B
- +0x0ae Spare1 : Uint2B
- +0x0b0 DeviceObjectExtension : Ptr32 _DEVOBJ_EXTENSION
- +0x0b4 Reserved : Ptr32 Void
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 0: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> r
- eax=89ba2a84 ebx=89bbab90 ecx=00000000 edx=89ba29f0 esi=89ba2ac4 edi=89ba2aa0
- eip=f76273c0 esp=f78ea830 ebp=f78ea858 iopl=0 nv up ei pl nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> r eax
- eax=00000000
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd>
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 24 hit
- CLASSPNP!ClassDeviceControl:
- f76284d4 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- 1: kd> g
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 9 hit
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
- *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
- nt!IoCreateDevice:
- 8059b8bf 8bff mov edi,edi
- 0: kd> r
- eax=0000003a ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8bf esp=f78a6558 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!IoCreateDevice:
- 8059b8bf 8bff mov edi,edi
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 132 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x2:
- 8059b8c1 55 push ebp
- 0: kd> r
- eax=0000003a ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8c1 esp=f78a6558 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!IoCreateDevice+0x2:
- 8059b8c1 55 push ebp
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x3:
- 8059b8c2 8bec mov ebp,esp
- 0: kd> r
- eax=0000003a ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8c2 esp=f78a6554 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!IoCreateDevice+0x3:
- 8059b8c2 8bec mov ebp,esp
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x5:
- 8059b8c4 81ec90000000 sub esp,90h
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0xb:
- 8059b8ca a160a35580 mov eax,dword ptr [nt!__security_cookie (8055a360)]
- 0: kd> r
- eax=0000003a ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8ca esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- nt!IoCreateDevice+0xb:
- 8059b8ca a160a35580 mov eax,dword ptr [nt!__security_cookie (8055a360)] ds:0023:8055a360=0000bb40
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x10:
- 8059b8cf 8945fc mov dword ptr [ebp-4],eax
- 0: kd> r
- eax=0000bb40 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8cf esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- nt!IoCreateDevice+0x10:
- 8059b8cf 8945fc mov dword ptr [ebp-4],eax ss:0010:f78a6550=00000346
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x13:
- 8059b8d2 8b4508 mov eax,dword ptr [ebp+8]
- 0: kd> r
- eax=0000bb40 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8d2 esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- nt!IoCreateDevice+0x13:
- 8059b8d2 8b4508 mov eax,dword ptr [ebp+8] ss:0010:f78a655c=89ba8f38
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x16:
- 8059b8d5 89459c mov dword ptr [ebp-64h],eax
- 0: kd> r
- eax=89ba8f38 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8d5 esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- nt!IoCreateDevice+0x16:
- 8059b8d5 89459c mov dword ptr [ebp-64h],eax ss:0010:f78a64f0=f747390c
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x19:
- 8059b8d8 8b4520 mov eax,dword ptr [ebp+20h]
- 0: kd> r
- eax=89ba8f38 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8d8 esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- nt!IoCreateDevice+0x19:
- 8059b8d8 8b4520 mov eax,dword ptr [ebp+20h] ss:0010:f78a6574=f74738a0
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x1c:
- 8059b8db 8945a8 mov dword ptr [ebp-58h],eax
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x1f:
- 8059b8de 8b450c mov eax,dword ptr [ebp+0Ch]
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x22:
- 8059b8e1 83e007 and eax,7
- 0: kd> r
- eax=00000000 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8e1 esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- nt!IoCreateDevice+0x22:
- 8059b8e1 83e007 and eax,7
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x25:
- 8059b8e4 53 push ebx
- 0: kd> r
- eax=00000000 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8e4 esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!IoCreateDevice+0x25:
- 8059b8e4 53 push ebx
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x26:
- 8059b8e5 33db xor ebx,ebx
- 0: kd> r
- eax=00000000 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8e5 esp=f78a64c0 ebp=f78a6554 iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!IoCreateDevice+0x26:
- 8059b8e5 33db xor ebx,ebx
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x28:
- 8059b8e7 894594 mov dword ptr [ebp-6Ch],eax
- 0: kd> r
- eax=00000000 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8e7 esp=f78a64c0 ebp=f78a6554 iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!IoCreateDevice+0x28:
- 8059b8e7 894594 mov dword ptr [ebp-6Ch],eax ss:0010:f78a64e8=badb0d00
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- nt!IoCreateDevice+0x2b:
- 8059b8ea 8b4518 mov eax,dword ptr [ebp+18h]
- 0: kd> r
- eax=00000000 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8ea esp=f78a64c0 ebp=f78a6554 iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!IoCreateDevice+0x2b:
- 8059b8ea 8b4518 mov eax,dword ptr [ebp+18h] ss:0010:f78a656c=00000100
- 0: kd> t
- *******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the * ==================>>>> eax changed to 001
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. * ==================>>>> eax changed to 001
- *******************************************************************************
- nt!IoCreateDevice+0x2e:
- 8059b8ed 56 push esi
- 0: kd> r
- eax=00000100 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
- eip=8059b8ed esp=f78a64c0 ebp=f78a6554 iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- nt!IoCreateDevice+0x2e:
- 8059b8ed 56 push esi
- 0: kd> bc *
- 0: kd> bl
- 0: kd> kb 12
- # ChildEBP RetAddr Args to Child
- 00 f78a6554 f74858dd 89ba8f38 00000000 f7471bd4 nt!IoCreateDevice+0x2e
- 01 f78a65ec 806b9e71 89ba8f38 800931c0 800931c0 fltMgr!DriverEntry+0xb1
- 02 f78a662c 806b9f86 89ba8fec 800931c0 0000000c nt!IopInitializeBuiltinDriver+0x260
- 03 f78a6690 806affa1 80087000 f78a66ac 00034000 nt!IopInitializeBootDrivers+0x2d2
- 04 f78a6838 806b1012 80087000 00000000 89bfe750 nt!IoInitSystem+0x712
- 05 f78a6dac 8057572b 80087000 00000000 00000000 nt!Phase1Initialization+0xac7
- 06 f78a6ddc 804ec6c9 806b07bf 80087000 00000000 nt!PspSystemThreadStartup+0x34
- 07 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
- 0: kd> dps @ebp+8 L6
- f78a655c 89ba8f38
- f78a6560 00000000
- f78a6564 f7471bd4 fltMgr!FltMgrDeviceName
- f78a6568 00000008
- f78a656c 00000100
- f78a6570 00000000
- 0: kd> !drvobj 89ba8f38
- Driver object (89ba8f38) is for:
- \FileSystem\FltMgr
- Driver Extension List: (id , addr)
- Device Object list:
- 0: kd> dt nt!_UNICODE_STRING f7471bd4
- "\FileSystem\Filters\FltMgr"
- +0x000 Length : 0x34
- +0x002 MaximumLength : 0x36
- +0x004 Buffer : 0xf7471dac "\FileSystem\Filters\FltMgr"
- 0: kd> du poi(f7471bd4)
- ReadVirtual: f7471bd4 not properly sign extended
- 00360034 "????????????????????????????????"
- 00360074 "????????????????????????????????"
- 003600b4 "????????????????????????????????"
- 003600f4 "????????????????????????????????"
- 00360134 "????????????????????????????????"
- 00360174 "????????????????????????????????"
- 003601b4 "????????????????????????????????"
- 003601f4 "????????????????????????????????"
- 00360234 "????????????????????????????????"
- 00360274 "????????????????????????????????"
- 003602b4 "????????????????????????????????"
- 003602f4 "????????????????????????????????"
- 0: kd> dps @ebp+8 L6
- f78a655c 89ba8f38
- f78a6560 00000000
- f78a6564 f7471bd4 fltMgr!FltMgrDeviceName
- f78a6568 00000008
- f78a656c 00000100
- f78a6570 00000000
- 0: kd> dps @ebp+1C L1
- f78a6570 00000000
- 0: kd> dd 0xf78a64e0 L40
- ReadVirtual: f78a64e0 not properly sign extended
- f78a64e0 f78a6554 8059b8c4 00000000 f747390c
- f78a64f0 89ba8f38 804e0030 00000000 f74738a0
- f78a6500 00000000 00000000 00000000 00000000
- f78a6510 00000000 00000023 00000023 f747390c
- f78a6520 f7473914 0000003a 0000003a f78a65dc
- f78a6530 00000030 f7471bd4 89ba8f38 00000000
- f78a6540 f78a6554 00000000 8059b8c4 00000008
- f78a6550 0000bb40 f78a65ec f74858dd 89ba8f38
- f78a6560 00000000 f7471bd4 00000008 00000100
- f78a6570 00000000 f74738a0 89c0f25c 00000000
- f78a6580 89ba8f38 89bfe9c8 e1000e38 89bfe750
- f78a6590 89bf4870 f78a65dc 8056fac5 e1000e38
- f78a65a0 e1018240 000000b0 00000000 000f003f
- f78a65b0 00000000 89c0f25c 00000000 89ba8f38
- f78a65c0 f78a6628 000f003f f78a65cc 00000018
- f78a65d0 00000000 f78a6578 00000000 f78a6dcc
- 0: kd> du 0xf7471dac
- ReadVirtual: f7471dac not properly sign extended
- f7471dac "\FileSystem\Filters\FltMgr"
- 0: kd> dd 0xf7471dac L8
- f7471dac 0046005c 006c0069 00530065 00730079
- f7471dbc 00650074 005c006d 00690046 0074006c
- 0: kd> !drvobj 0x89ba8f38
- Driver object (89ba8f38) is for:
- \FileSystem\FltMgr
- Driver Extension List: (id , addr)
- Device Object list:
- 0: kd> dd 0xf78a64d0 L60
- ReadVirtual: f78a64d0 not properly sign extended
- ReadVirtual: f78a65e0 not properly sign extended
- f78a64d0 000001da 804e2725 804e2700 000000d1
- f78a64e0 f78a6554 8059b8c4 00000000 f747390c
- f78a64f0 89ba8f38 804e0030 00000000 f74738a0
- f78a6500 00000000 00000000 00000000 00000000
- f78a6510 00000000 00000023 00000023 f747390c
- f78a6520 f7473914 0000003a 0000003a f78a65dc
- f78a6530 00000030 f7471bd4 89ba8f38 00000000
- f78a6540 f78a6554 00000000 8059b8c4 00000008
- f78a6550 0000bb40 f78a65ec f74858dd 89ba8f38
- f78a6560 00000000 f7471bd4 00000008 00000100
- f78a6570 00000000 f74738a0 89c0f25c 00000000
- f78a6580 89ba8f38 89bfe9c8 e1000e38 89bfe750
- f78a6590 89bf4870 f78a65dc 8056fac5 e1000e38
- f78a65a0 e1018240 000000b0 00000000 000f003f
- f78a65b0 00000000 89c0f25c 00000000 89ba8f38
- f78a65c0 f78a6628 000f003f f78a65cc 00000018
- f78a65d0 00000000 f78a6578 00000000 f78a6dcc
- f78a65e0 f74710a2 f7471df8 00000000 f78a662c
- f78a65f0 806b9e71 89ba8f38 800931c0 800931c0
- f78a6600 803f3068 e139e590 00000018 00000000
- f78a6610 f78a6668 00000050 00000000 00000000
- f78a6620 f7469000 00000088 800000b0 f78a6690
- f78a6630 806b9f86 89ba8fec 800931c0 0000000c
- f78a6640 80093298 00000000 f78a6688 00000000
- 0: kd> ba w4 0xF78A64E8
- 0: kd> g
- Breakpoint 0 hit
- fltMgr!_SEH_prolog+0x1d:
- f747106d 8b45f8 mov eax,dword ptr [ebp-8]
- 0: kd> u @eip-32 L80
- fltMgr!IoGetLowerDeviceObject+0x5:
- f747103b f7 ???
- f747103c cc int 3
- f747103d cc int 3
- f747103e cc int 3
- f747103f cc int 3
- f7471040 cc int 3
- f7471041 cc int 3
- fltMgr!IoGetDeviceAttachmentBaseRef:
- f7471042 ff25b81147f7 jmp dword ptr [fltMgr!_imp__IoGetDeviceAttachmentBaseRef (f74711b8)]
- f7471048 cc int 3
- f7471049 cc int 3
- f747104a cc int 3
- f747104b cc int 3
- f747104c cc int 3
- f747104d cc int 3
- f747104e cc int 3
- f747104f cc int 3
- fltMgr!_SEH_prolog:
- f7471050 68a21047f7 push offset fltMgr!_except_handler3 (f74710a2)
- f7471055 64a100000000 mov eax,dword ptr fs:[00000000h]
- f747105b 50 push eax
- f747105c 8b442410 mov eax,dword ptr [esp+10h]
- f7471060 896c2410 mov dword ptr [esp+10h],ebp
- f7471064 8d6c2410 lea ebp,[esp+10h]
- f7471068 2be0 sub esp,eax
- f747106a 53 push ebx
- f747106b 56 push esi
- f747106c 57 push edi
- f747106d 8b45f8 mov eax,dword ptr [ebp-8]
- f7471070 8965e8 mov dword ptr [ebp-18h],esp
- f7471073 50 push eax
- f7471074 8b45fc mov eax,dword ptr [ebp-4]
- f7471077 c745fcffffffff mov dword ptr [ebp-4],0FFFFFFFFh
- f747107e 8945f8 mov dword ptr [ebp-8],eax
- f7471081 8d45f0 lea eax,[ebp-10h]
- f7471084 64a300000000 mov dword ptr fs:[00000000h],eax
- f747108a c3 ret
- fltMgr!_SEH_epilog:
- f747108b 8b4df0 mov ecx,dword ptr [ebp-10h]
- f747108e 64890d00000000 mov dword ptr fs:[0],ecx
- f7471095 59 pop ecx
- f7471096 5f pop edi
- f7471097 5e pop esi
- f7471098 5b pop ebx
- f7471099 c9 leave
- f747109a 51 push ecx
- f747109b c3 ret
- f747109c cc int 3
- f747109d cc int 3
- f747109e cc int 3
- f747109f cc int 3
- f74710a0 cc int 3
- f74710a1 cc int 3
- fltMgr!_except_handler3:
- f74710a2 ff25c41147f7 jmp dword ptr [fltMgr!_imp___except_handler3 (f74711c4)]
- f74710a8 cc int 3
- f74710a9 cc int 3
- f74710aa cc int 3
- f74710ab cc int 3
- f74710ac cc int 3
- f74710ad cc int 3
- fltMgr!IoAttachDeviceToDeviceStackSafe:
- f74710ae ff25d01147f7 jmp dword ptr [fltMgr!_imp__IoAttachDeviceToDeviceStackSafe (f74711d0)]
- f74710b4 cc int 3
- f74710b5 cc int 3
- f74710b6 cc int 3
- f74710b7 cc int 3
- f74710b8 cc int 3
- f74710b9 cc int 3
- fltMgr!IoGetDiskDeviceObject:
- f74710ba ff25d81147f7 jmp dword ptr [fltMgr!_imp__IoGetDiskDeviceObject (f74711d8)]
- f74710c0 cc int 3
- f74710c1 cc int 3
- f74710c2 cc int 3
- f74710c3 cc int 3
- f74710c4 cc int 3
- f74710c5 cc int 3
- fltMgr!IoEnumerateDeviceObjectList:
- f74710c6 ff25dc1147f7 jmp dword ptr [fltMgr!_imp__IoEnumerateDeviceObjectList (f74711dc)]
- f74710cc cc int 3
- f74710cd cc int 3
- f74710ce cc int 3
- f74710cf cc int 3
- f74710d0 cc int 3
- f74710d1 cc int 3
- fltMgr!FsRtlIsPagingFile:
- f74710d2 ff25e81147f7 jmp dword ptr [fltMgr!_imp__FsRtlIsPagingFile (f74711e8)]
- f74710d8 cc int 3
- f74710d9 cc int 3
- f74710da cc int 3
- f74710db cc int 3
- f74710dc cc int 3
- f74710dd cc int 3
- fltMgr!KeGetCurrentThread:
- f74710de ff25ec1147f7 jmp dword ptr [fltMgr!_imp__KeGetCurrentThread (f74711ec)]
- f74710e4 cc int 3
- f74710e5 cc int 3
- f74710e6 cc int 3
- f74710e7 cc int 3
- f74710e8 cc int 3
- f74710e9 cc int 3
- fltMgr!FsRtlAllocateFileLock:
- f74710ea ff25641247f7 jmp dword ptr [fltMgr!_imp__FsRtlAllocateFileLock (f7471264)]
- f74710f0 cc int 3
- f74710f1 cc int 3
- f74710f2 cc int 3
- f74710f3 cc int 3
- f74710f4 cc int 3
- f74710f5 cc int 3
- fltMgr!FsRtlFreeFileLock:
- f74710f6 ff25681247f7 jmp dword ptr [fltMgr!_imp__FsRtlFreeFileLock (f7471268)]
- f74710fc cc int 3
- f74710fd cc int 3
- f74710fe cc int 3
- f74710ff cc int 3
- f7471100 cc int 3
- f7471101 cc int 3
- fltMgr!IoCreateFileSpecifyDeviceObjectHint:
- f7471102 ff25fc1247f7 jmp dword ptr [fltMgr!_imp__IoCreateFileSpecifyDeviceObjectHint (f74712fc)]
- f7471108 cc int 3
- f7471109 cc int 3
- f747110a cc int 3
- f747110b cc int 3
- f747110c cc int 3
- f747110d cc int 3
- fltMgr!ObReferenceObjectByName:
- f747110e ff256c1347f7 jmp dword ptr [fltMgr!_imp__ObReferenceObjectByName (f747136c)]
- f7471114 cc int 3
- f7471115 cc int 3
- f7471116 cc int 3
- f7471117 cc int 3
- f7471118 cc int 3
- f7471119 cc int 3
- fltMgr!PsImpersonateClient:
- f747111a ff25ac1347f7 jmp dword ptr [fltMgr!_imp__PsImpersonateClient (f74713ac)]
- f7471120 cc int 3
- f7471121 cc int 3
- f7471122 cc int 3
- f7471123 cc int 3
- f7471124 cc int 3
- f7471125 cc int 3
- fltMgr!PsDereferencePrimaryToken:
- f7471126 ff25b01347f7 jmp dword ptr [fltMgr!_imp__PsDereferencePrimaryToken (f74713b0)]
- 0: kd> r
- eax=00000068 ebx=00000000 ecx=00000000 edx=00000038 esi=89ba8f38 edi=89bce2a8
- eip=f747106d esp=f78a64e8 ebp=f78a656c iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- fltMgr!_SEH_prolog+0x1d:
- f747106d 8b45f8 mov eax,dword ptr [ebp-8] ss:0010:f78a6564=f7485c0e
- 0: kd> t
- fltMgr!_SEH_prolog+0x20:
- f7471070 8965e8 mov dword ptr [ebp-18h],esp
- 0: kd> r
- eax=f7485c0e ebx=00000000 ecx=00000000 edx=00000038 esi=89ba8f38 edi=89bce2a8
- eip=f7471070 esp=f78a64e8 ebp=f78a656c iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- fltMgr!_SEH_prolog+0x20:
- f7471070 8965e8 mov dword ptr [ebp-18h],esp ss:0010:f78a6554=00000000
- 0: kd> u @eip-32 L40
- fltMgr!IoGetLowerDeviceObject+0x8:
- f747103e cc int 3
- f747103f cc int 3
- f7471040 cc int 3
- f7471041 cc int 3
- fltMgr!IoGetDeviceAttachmentBaseRef:
- f7471042 ff25b81147f7 jmp dword ptr [fltMgr!_imp__IoGetDeviceAttachmentBaseRef (f74711b8)]
- f7471048 cc int 3
- f7471049 cc int 3
- f747104a cc int 3
- f747104b cc int 3
- f747104c cc int 3
- f747104d cc int 3
- f747104e cc int 3
- f747104f cc int 3
- fltMgr!_SEH_prolog:
- f7471050 68a21047f7 push offset fltMgr!_except_handler3 (f74710a2)
- f7471055 64a100000000 mov eax,dword ptr fs:[00000000h]
- f747105b 50 push eax
- f747105c 8b442410 mov eax,dword ptr [esp+10h]
- f7471060 896c2410 mov dword ptr [esp+10h],ebp
- f7471064 8d6c2410 lea ebp,[esp+10h]
- f7471068 2be0 sub esp,eax
- f747106a 53 push ebx
- f747106b 56 push esi
- f747106c 57 push edi
- f747106d 8b45f8 mov eax,dword ptr [ebp-8]
- f7471070 8965e8 mov dword ptr [ebp-18h],esp
- f7471073 50 push eax
- f7471074 8b45fc mov eax,dword ptr [ebp-4]
- f7471077 c745fcffffffff mov dword ptr [ebp-4],0FFFFFFFFh
- f747107e 8945f8 mov dword ptr [ebp-8],eax
- f7471081 8d45f0 lea eax,[ebp-10h]
- f7471084 64a300000000 mov dword ptr fs:[00000000h],eax
- f747108a c3 ret
- fltMgr!_SEH_epilog:
- f747108b 8b4df0 mov ecx,dword ptr [ebp-10h]
- f747108e 64890d00000000 mov dword ptr fs:[0],ecx
- f7471095 59 pop ecx
- f7471096 5f pop edi
- f7471097 5e pop esi
- f7471098 5b pop ebx
- f7471099 c9 leave
- f747109a 51 push ecx
- f747109b c3 ret
- f747109c cc int 3
- f747109d cc int 3
- f747109e cc int 3
- f747109f cc int 3
- f74710a0 cc int 3
- f74710a1 cc int 3
- fltMgr!_except_handler3:
- f74710a2 ff25c41147f7 jmp dword ptr [fltMgr!_imp___except_handler3 (f74711c4)]
- f74710a8 cc int 3
- f74710a9 cc int 3
- f74710aa cc int 3
- f74710ab cc int 3
- f74710ac cc int 3
- f74710ad cc int 3
- fltMgr!IoAttachDeviceToDeviceStackSafe:
- f74710ae ff25d01147f7 jmp dword ptr [fltMgr!_imp__IoAttachDeviceToDeviceStackSafe (f74711d0)]
- f74710b4 cc int 3
- f74710b5 cc int 3
- f74710b6 cc int 3
- f74710b7 cc int 3
- f74710b8 cc int 3
- f74710b9 cc int 3
- fltMgr!IoGetDiskDeviceObject:
- f74710ba ff25d81147f7 jmp dword ptr [fltMgr!_imp__IoGetDiskDeviceObject (f74711d8)]
- f74710c0 cc int 3
- f74710c1 cc int 3
- 0: kd> kb 20
- # ChildEBP RetAddr Args to Child
- 00 f78a656c f7485a81 89ba8f38 89c0f25c 00000000 fltMgr!_SEH_prolog+0x20
- 01 f78a65ec 806b9e71 89ba8f38 800931c0 800931c0 fltMgr!DriverEntry+0x255
- 02 f78a662c 806b9f86 89ba8fec 800931c0 0000000c nt!IopInitializeBuiltinDriver+0x260
- 03 f78a6690 806affa1 80087000 f78a66ac 00034000 nt!IopInitializeBootDrivers+0x2d2
- 04 f78a6838 806b1012 80087000 00000000 89bfe750 nt!IoInitSystem+0x712
- 05 f78a6dac 8057572b 80087000 00000000 00000000 nt!Phase1Initialization+0xac7
- 06 f78a6ddc 804ec6c9 806b07bf 80087000 00000000 nt!PspSystemThreadStartup+0x34
- 07 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
- 0: kd> t
- fltMgr!_SEH_prolog+0x23:
- f7471073 50 push eax
- 0: kd> r
- eax=f7485c0e ebx=00000000 ecx=00000000 edx=00000038 esi=89ba8f38 edi=89bce2a8
- eip=f7471073 esp=f78a64e8 ebp=f78a656c iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- fltMgr!_SEH_prolog+0x23:
- f7471073 50 push eax
- 0: kd> u @eip-32 L40
- fltMgr!IoGetLowerDeviceObject+0xb:
- f7471041 cc int 3
- fltMgr!IoGetDeviceAttachmentBaseRef:
- f7471042 ff25b81147f7 jmp dword ptr [fltMgr!_imp__IoGetDeviceAttachmentBaseRef (f74711b8)]
- f7471048 cc int 3
- f7471049 cc int 3
- f747104a cc int 3
- f747104b cc int 3
- f747104c cc int 3
- f747104d cc int 3
- f747104e cc int 3
- f747104f cc int 3
- fltMgr!_SEH_prolog:
- f7471050 68a21047f7 push offset fltMgr!_except_handler3 (f74710a2)
- f7471055 64a100000000 mov eax,dword ptr fs:[00000000h]
- f747105b 50 push eax
- f747105c 8b442410 mov eax,dword ptr [esp+10h]
- f7471060 896c2410 mov dword ptr [esp+10h],ebp
- f7471064 8d6c2410 lea ebp,[esp+10h]
- f7471068 2be0 sub esp,eax
- f747106a 53 push ebx
- f747106b 56 push esi
- f747106c 57 push edi
- f747106d 8b45f8 mov eax,dword ptr [ebp-8]
- f7471070 8965e8 mov dword ptr [ebp-18h],esp
- f7471073 50 push eax
- f7471074 8b45fc mov eax,dword ptr [ebp-4]
- f7471077 c745fcffffffff mov dword ptr [ebp-4],0FFFFFFFFh
- f747107e 8945f8 mov dword ptr [ebp-8],eax
- f7471081 8d45f0 lea eax,[ebp-10h]
- f7471084 64a300000000 mov dword ptr fs:[00000000h],eax
- f747108a c3 ret
- fltMgr!_SEH_epilog:
- f747108b 8b4df0 mov ecx,dword ptr [ebp-10h]
- f747108e 64890d00000000 mov dword ptr fs:[0],ecx
- f7471095 59 pop ecx
- f7471096 5f pop edi
- f7471097 5e pop esi
- f7471098 5b pop ebx
- f7471099 c9 leave
- f747109a 51 push ecx
- f747109b c3 ret
- f747109c cc int 3
- f747109d cc int 3
- f747109e cc int 3
- f747109f cc int 3
- f74710a0 cc int 3
- f74710a1 cc int 3
- fltMgr!_except_handler3:
- f74710a2 ff25c41147f7 jmp dword ptr [fltMgr!_imp___except_handler3 (f74711c4)]
- f74710a8 cc int 3
- f74710a9 cc int 3
- f74710aa cc int 3
- f74710ab cc int 3
- f74710ac cc int 3
- f74710ad cc int 3
- fltMgr!IoAttachDeviceToDeviceStackSafe:
- f74710ae ff25d01147f7 jmp dword ptr [fltMgr!_imp__IoAttachDeviceToDeviceStackSafe (f74711d0)]
- f74710b4 cc int 3
- f74710b5 cc int 3
- f74710b6 cc int 3
- f74710b7 cc int 3
- f74710b8 cc int 3
- f74710b9 cc int 3
- fltMgr!IoGetDiskDeviceObject:
- f74710ba ff25d81147f7 jmp dword ptr [fltMgr!_imp__IoGetDiskDeviceObject (f74711d8)]
- f74710c0 cc int 3
- f74710c1 cc int 3
- f74710c2 cc int 3
- f74710c3 cc int 3
- f74710c4 cc int 3
- 0: kd> t
- fltMgr!_SEH_prolog+0x24:
- f7471074 8b45fc mov eax,dword ptr [ebp-4]
- 0: kd> r
- eax=f7485c0e ebx=00000000 ecx=00000000 edx=00000038 esi=89ba8f38 edi=89bce2a8
- eip=f7471074 esp=f78a64e4 ebp=f78a656c iopl=0 nv up ei ng nz na po nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
- fltMgr!_SEH_prolog+0x24:
- f7471074 8b45fc mov eax,dword ptr [ebp-4] ss:0010:f78a6568=f7472058
- 0: kd> u @eip-32 L40
- fltMgr!IoGetDeviceAttachmentBaseRef:
- f7471042 ff25b81147f7 jmp dword ptr [fltMgr!_imp__IoGetDeviceAttachmentBaseRef (f74711b8)]
- f7471048 cc int 3
- f7471049 cc int 3
- f747104a cc int 3
- f747104b cc int 3
- f747104c cc int 3
- f747104d cc int 3
- f747104e cc int 3
- f747104f cc int 3
- fltMgr!_SEH_prolog:
- f7471050 68a21047f7 push offset fltMgr!_except_handler3 (f74710a2)
- f7471055 64a100000000 mov eax,dword ptr fs:[00000000h]
- f747105b 50 push eax
- f747105c 8b442410 mov eax,dword ptr [esp+10h]
- f7471060 896c2410 mov dword ptr [esp+10h],ebp
- f7471064 8d6c2410 lea ebp,[esp+10h]
- f7471068 2be0 sub esp,eax
- f747106a 53 push ebx
- f747106b 56 push esi
- f747106c 57 push edi
- f747106d 8b45f8 mov eax,dword ptr [ebp-8]
- f7471070 8965e8 mov dword ptr [ebp-18h],esp
- f7471073 50 push eax
- f7471074 8b45fc mov eax,dword ptr [ebp-4]
- f7471077 c745fcffffffff mov dword ptr [ebp-4],0FFFFFFFFh
- f747107e 8945f8 mov dword ptr [ebp-8],eax
- f7471081 8d45f0 lea eax,[ebp-10h]
- f7471084 64a300000000 mov dword ptr fs:[00000000h],eax
- f747108a c3 ret
- fltMgr!_SEH_epilog:
- f747108b 8b4df0 mov ecx,dword ptr [ebp-10h]
- f747108e 64890d00000000 mov dword ptr fs:[0],ecx
- f7471095 59 pop ecx
- f7471096 5f pop edi
- f7471097 5e pop esi
- f7471098 5b pop ebx
- f7471099 c9 leave
- f747109a 51 push ecx
- f747109b c3 ret
- f747109c cc int 3
- f747109d cc int 3
- f747109e cc int 3
- f747109f cc int 3
- f74710a0 cc int 3
- f74710a1 cc int 3
- fltMgr!_except_handler3:
- f74710a2 ff25c41147f7 jmp dword ptr [fltMgr!_imp___except_handler3 (f74711c4)]
- f74710a8 cc int 3
- f74710a9 cc int 3
- f74710aa cc int 3
- f74710ab cc int 3
- f74710ac cc int 3
- f74710ad cc int 3
- fltMgr!IoAttachDeviceToDeviceStackSafe:
- f74710ae ff25d01147f7 jmp dword ptr [fltMgr!_imp__IoAttachDeviceToDeviceStackSafe (f74711d0)]
- f74710b4 cc int 3
- f74710b5 cc int 3
- f74710b6 cc int 3
- f74710b7 cc int 3
- f74710b8 cc int 3
- f74710b9 cc int 3
- fltMgr!IoGetDiskDeviceObject:
- f74710ba ff25d81147f7 jmp dword ptr [fltMgr!_imp__IoGetDiskDeviceObject (f74711d8)]
- f74710c0 cc int 3
- f74710c1 cc int 3
- f74710c2 cc int 3
- f74710c3 cc int 3
- f74710c4 cc int 3
- f74710c5 cc int 3
- 0: kd> bc *
- 0: kd> bl
- 0: kd> ; log IOCTLs hitting classpnp (prints IRP and IOCTL)
- ^ Syntax error in '; log IOCTLs hitting classpnp (prints IRP and IOCTL)'
- 0: kd> bu classpnp!ClassDeviceControl ".printf \"[CLASSDEVCTL] IRP=%p IOCTL=0x%08x\\n\", poi(@esp+8), poi(poi(@esp+8)+0x10); gc"
- 0: kd> ; log Disk FDO creation/start
- ^ Syntax error in '; log Disk FDO creation/start'
- 0: kd> bu disk!DiskCreateFdo ".printf \"[disk] DiskCreateFdo PDO=%p\\n\", poi(@esp+8); gc"
- 0: kd> bu disk!DiskStartFdo ".printf \"[disk] DiskStartFdo FDO=%p\\n\", poi(@esp+8); gc"
- 0: kd> ; IOCTL_STORAGE_QUERY_PROPERTY == 0x002D1400
- ^ Syntax error in '; IOCTL_STORAGE_QUERY_PROPERTY == 0x002D1400'
- 0: kd> bu classpnp!ClassDeviceControl ".if (poi(poi(@esp+8)+0x10) == 0x002d1400) { .printf \"[CLASSDEVCTL] STORAGE_QUERY_PROPERTY seen IRP=%p\\n\", poi(@esp+8); kb 12; .break } ; gc"
- breakpoint 0 redefined
- 0: kd> bu classpnp!ClassDeviceControl ".if (poi(poi(@esp+8)+0x10) == 0x002d1400) { .printf \"[CLASSDEVCTL] STORAGE_QUERY_PROPERTY seen IRP=%p\\n\", poi(@esp+8); kb 12; .break } ; .printf \"[CLASSDEVCTL] IRP=%p IOCTL=0x%08x\\n\", poi(@esp+8), poi(poi(@esp+8)+0x10); gc"
- breakpoint 0 redefined
- 0: kd> bu disk!DiskCreateFdo ".printf \"[disk] DiskCreateFdo PDO=%p\\n\", poi(@esp+8); gc"
- breakpoint 1 redefined
- 0: kd> bu disk!DiskStartFdo ".printf \"[disk] DiskStartFdo FDO=%p\\n\", poi(@esp+8); gc"
- breakpoint 2 redefined
- 0: kd> bl
- 0 e Disable Clear f76284d4 0001 (0001) CLASSPNP!ClassDeviceControl ".if (poi(poi(@esp+8)+0x10) == 0x002d1400) { .printf \"[CLASSDEVCTL] STORAGE_QUERY_PROPERTY seen IRP=%p\\n\", poi(@esp+8); kb 12; .break } ; .printf \"[CLASSDEVCTL] IRP=%p IOCTL=0x%08x\\n\", poi(@esp+8), poi(poi(@esp+8)+0x10); gc"
- 1 e Disable Clear f74917bc 0001 (0001) disk!DiskCreateFdo ".printf \"[disk] DiskCreateFdo PDO=%p\\n\", poi(@esp+8); gc"
- 2 e Disable Clear f7493aec 0001 (0001) disk!DiskStartFdo ".printf \"[disk] DiskStartFdo FDO=%p\\n\", poi(@esp+8); gc"
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\atlmfc.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\concurrency.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\cpp_rest.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Kernel.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\ObjectiveC.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\stl.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Usb4Kd.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Data.Json.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Geolocation.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Sensors.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Media.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\windows.natvis'
- NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\winrt.natvis'*******************************************************************************
- * You have attempted to enable 133 KD breakpoints, which exceeds the *
- * currently supported limit of 32 breakpoints for Windows kernel debugging. *
- * Breakpoints exceeding this limit are ignored. *
- * Please disable/clear breakpoints until you are within the supported limit. *
- *******************************************************************************
- Breakpoint 36 hit
- CLASSPNP!ClassReleaseRemoveLock:
- f76273c0 8bff mov edi,edi
- ************* Preparing the environment for Debugger Extensions Gallery repositories **************
- ExtensionRepository : Implicit
- UseExperimentalFeatureForNugetShare : true
- AllowNugetExeUpdate : true
- NonInteractiveNuget : true
- AllowNugetMSCredentialProviderInstall : true
- AllowParallelInitializationOfLocalRepositories : true
- EnableRedirectToChakraJsProvider : false
- -- Configuring repositories
- ----> Repository : LocalInstalled, Enabled: true
- ----> Repository : UserExtensions, Enabled: true
- >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
- ************* Waiting for Debugger Extensions Gallery to Initialize **************
- >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.015 seconds
- ----> Repository : UserExtensions, Enabled: true, Packages count: 0
- ----> Repository : LocalInstalled, Enabled: true, Packages count: 45
- Microsoft (R) Windows Debugger Version 10.0.27871.1001 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Opened \\.\pipe\com_1
- Waiting to reconnect...
- Connected to Windows XP 2600 x86 compatible target at (Sun Aug 24 15:09:10.488 2025 (UTC + 2:00)), ptr64 FALSE
- Kernel Debugger connection established.
- ************* Path validation summary **************
- Response Time (ms) Location
- Deferred srv*
- Symbol search path is: srv*
- Executable search path is:
- Windows XP Kernel Version 2600 MP (1 procs) Free x86 compatible
- Edition build lab: 2600.xpsp.080413-2111
- Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
- System Uptime: not available
- nt!DebugService2+0x10:
- 80505e56 cc int 3
- kd> .reload /f
- Connected to Windows XP 2600 x86 compatible target at (Sun Aug 24 15:09:24.535 2025 (UTC + 2:00)), ptr64 FALSE
- Loading Kernel Symbols
- .....
- Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
- Run !sym noisy before .reload to track down problems loading symbols.
- ..................Unable to load image VBoxGuest.sys, Win32 error 0n2
- ....
- Loading User Symbols
- ReadVirtual: 805620d0 not properly sign extended
- ReadVirtual: 8056206c not properly sign extended
- Loading unloaded module list
- Unable to enumerate kernel-mode unloaded modules, HRESULT 0x80004005
- ************* Symbol Loading Error Summary **************
- Module name Error
- kdcom The system cannot find the file specified
- BOOTVID The system cannot find the file specified
- WMILIB The system cannot find the file specified
- ftdisk The system cannot find the file specified
- dmload The system cannot find the file specified
- VBoxGuest The system cannot find the file specified
- You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
- You should also verify that your symbol search path (.sympath) is correct.
- kd> g
- Break instruction exception - code 80000003 (first chance)
- disk_fffffffff7489000!DiskCreateFdo:
- f74917bc cc int 3
- 0: kd> r
- eax=f78a6478 ebx=c0000034 ecx=00000008 edx=804e3477 esi=804e3466 edi=f748d584
- eip=f74917bc esp=f78a6400 ebp=f78a6488 iopl=0 nv up ei pl zr na pe nc
- cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
- disk_fffffffff7489000!DiskCreateFdo:
- f74917bc cc int 3
- 0: kd> u @eip L10
- disk_fffffffff7489000!DiskCreateFdo:
- f74917bc cc int 3
- f74917bd ff558b call dword ptr [ebp-75h]
- f74917c0 ec in al,dx
- f74917c1 81ecb8000000 sub esp,0B8h
- f74917c7 a1c0e048f7 mov eax,dword ptr [disk_fffffffff7489000!__security_cookie (f748e0c0)]
- f74917cc 33c5 xor eax,ebp
- f74917ce 8945fc mov dword ptr [ebp-4],eax
- f74917d1 8b4508 mov eax,dword ptr [ebp+8]
- f74917d4 53 push ebx
- f74917d5 33db xor ebx,ebx
- f74917d7 56 push esi
- f74917d8 8b7510 mov esi,dword ptr [ebp+10h]
- f74917db 898560ffffff mov dword ptr [ebp-0A0h],eax
- f74917e1 8b450c mov eax,dword ptr [ebp+0Ch]
- f74917e4 57 push edi
- f74917e5 89856cffffff mov dword ptr [ebp-94h],eax
- 0: kd> dd @esp+4 L1
- f78a6404 89baaa08
Advertisement
Add Comment
Please, Sign In to add comment