Guest User

Untitled

a guest
Aug 24th, 2025
63
1
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 271.12 KB | None | 1 0
  1. : kd> .symfix
  2. 0: kd> !analyze -v
  3. *******************************************************************************
  4. * *
  5. * Bugcheck Analysis *
  6. * *
  7. *******************************************************************************
  8.  
  9. INACCESSIBLE_BOOT_DEVICE (7b)
  10. During the initialization of the I/O system, it is possible that the driver
  11. for the boot device failed to initialize the device that the system is
  12. attempting to boot from, or it is possible for the file system that is
  13. supposed to read that device to either fail its initialization or to simply
  14. not recognize the data on the boot device as a file system structure that
  15. it recognizes. In the former case, the argument (#1) is the address of a
  16. Unicode string data structure that is the ARC name of the device from which
  17. the boot was being attempted. In the latter case, the argument (#1) is the
  18. address of the device object that could not be mounted.
  19. If this is the initial setup of the system, then this error can occur if
  20. the system was installed on an unsupported disk or SCSI controller. Note
  21. that some controllers are supported only by drivers which are in the Windows
  22. Driver Library (WDL) which requires the user to do a custom install. See
  23. the Windows Driver Library for more information.
  24. This error can also be caused by the installation of a new SCSI adapter or
  25. disk controller or repartitioning the disk with the system partition. If
  26. this is the case, on x86 systems the boot.ini file must be edited or on ARC
  27. systems setup must be run. See the "Advanced Server System Administrator's
  28. User Guide" for information on changing boot.ini.
  29. If the argument is a pointer to an ARC name string, then the format of the
  30. first two (and in this case only) longwords will be:
  31. USHORT Length;
  32. USHORT MaximumLength;
  33. PWSTR Buffer;
  34. That is, the first longword will contain something like 00800020 where 20
  35. is the actual length of the Unicode string, and the next longword will
  36. contain the address of buffer. This address will be in system space, so
  37. the high order bit will be set.
  38. If the argument is a pointer to a device object, then the format of the first
  39. word will be:
  40. USHORT Type;
  41. That is, the first word will contain a 0003, where the Type code will ALWAYS
  42. be 0003.
  43. Note that this makes it immediately obvious whether the argument is a pointer
  44. to an ARC name string or a device object, since a Unicode string can never
  45. have an odd number of bytes, and a device object will always have a Type
  46. code of 3.
  47. Arguments:
  48. Arg1: f78a6524, Pointer to the device object or Unicode string of ARC name
  49. Arg2: c0000034, (reserved)
  50. Arg3: 00000000, (reserved)
  51. Arg4: 00000000, (reserved)
  52.  
  53. Debugging Details:
  54. ------------------
  55.  
  56. *** WARNING: Check Image - Checksum mismatch - Dump: 0x21a293, File: 0x213e75 - C:\ProgramData\Dbg\sym\ntkrnlmp.exe\48025DE7228000\ntkrnlmp.exe
  57. *** WARNING: Check Image - Checksum mismatch - Dump: 0x21a293, File: 0x213e75 - C:\ProgramData\Dbg\sym\ntkrnlmp.exe\48025DE7228000\ntkrnlmp.exe
  58. *** WARNING: Check Image - Checksum mismatch - Dump: 0x21a293, File: 0x213e75 - C:\ProgramData\Dbg\sym\ntoskrnl.exe\48025DE7228000\ntoskrnl.exe
  59. *** WARNING: Check Image - Checksum mismatch - Dump: 0x21a293, File: 0x213e75 - C:\ProgramData\Dbg\sym\ntoskrnl.exe\48025DE7228000\ntoskrnl.exe
  60.  
  61. KEY_VALUES_STRING: 1
  62.  
  63. Key : Analysis.CPU.mSec
  64. Value: 6328
  65.  
  66. Key : Analysis.Elapsed.mSec
  67. Value: 59016
  68.  
  69. Key : Analysis.IO.Other.Mb
  70. Value: 0
  71.  
  72. Key : Analysis.IO.Read.Mb
  73. Value: 2
  74.  
  75. Key : Analysis.IO.Write.Mb
  76. Value: 5
  77.  
  78. Key : Analysis.Init.CPU.mSec
  79. Value: 5718
  80.  
  81. Key : Analysis.Init.Elapsed.mSec
  82. Value: 199295
  83.  
  84. Key : Analysis.Memory.CommitPeak.Mb
  85. Value: 49
  86.  
  87. Key : Analysis.Version.DbgEng
  88. Value: 10.0.27871.1001
  89.  
  90. Key : Analysis.Version.Description
  91. Value: 10.2505.01.02 amd64fre
  92.  
  93. Key : Analysis.Version.Ext
  94. Value: 1.2505.1.2
  95.  
  96. Key : Bugcheck.Code.KiBugCheckData
  97. Value: 0x7b
  98.  
  99. Key : Bugcheck.Code.LegacyAPI
  100. Value: 0x7b
  101.  
  102. Key : Bugcheck.Code.TargetModel
  103. Value: 0x7b
  104.  
  105. Key : Failure.Bucket
  106. Value: 0x7B_nt!IopMarkBootPartition
  107.  
  108. Key : Failure.Hash
  109. Value: {cf75d120-86c2-18b8-109d-7593c484a95c}
  110.  
  111.  
  112. BUGCHECK_CODE: 7b
  113.  
  114. BUGCHECK_P1: fffffffff78a6524
  115.  
  116. BUGCHECK_P2: ffffffffc0000034
  117.  
  118. BUGCHECK_P3: 0
  119.  
  120. BUGCHECK_P4: 0
  121.  
  122. FAULTING_THREAD: ffffffff89bfe750
  123.  
  124. PROCESS_NAME: System
  125.  
  126. STACK_TEXT:
  127. f78a608c 8053658b 00000003 f78a63e8 00000000 nt!RtlpBreakWithStatusInstruction
  128. f78a60d8 8053705e 00000003 00000000 80087000 nt!KiBugCheckDebugBreak+0x19
  129. f78a64b8 80537672 0000007b f78a6524 c0000034 nt!KeBugCheck2+0x574
  130. f78a64d8 806cc59f 0000007b f78a6524 c0000034 nt!KeBugCheckEx+0x1b
  131. f78a6640 806ba1dc 80087000 00000000 80087000 nt!IopMarkBootPartition+0x113
  132. f78a6690 806affa1 80087000 f78a66ac 00034000 nt!IopInitializeBootDrivers+0x4ba
  133. f78a6838 806b1012 80087000 00000000 89bfe750 nt!IoInitSystem+0x712
  134. f78a6dac 8057572b 80087000 00000000 00000000 nt!Phase1Initialization+0xac7
  135. f78a6ddc 804ec6c9 806b07bf 80087000 00000000 nt!PspSystemThreadStartup+0x34
  136. 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
  137.  
  138.  
  139. STACK_COMMAND: .thread /r /p 0xffffffff89bfe750 ; kb
  140.  
  141. SYMBOL_NAME: nt!IopMarkBootPartition+113
  142.  
  143. MODULE_NAME: nt
  144.  
  145. IMAGE_NAME: ntkrnlmp.exe
  146.  
  147. IMAGE_VERSION: 5.1.2600.5512
  148.  
  149. BUCKET_ID_FUNC_OFFSET: 113
  150.  
  151. FAILURE_BUCKET_ID: 0x7B_nt!IopMarkBootPartition
  152.  
  153. OSPLATFORM_TYPE: x86
  154.  
  155. OSNAME: Windows XP
  156.  
  157. FAILURE_ID_HASH: {cf75d120-86c2-18b8-109d-7593c484a95c}
  158.  
  159. Followup: MachineOwner
  160. ---------
  161.  
  162. 0: kd> dt _DEVICE_OBJECT f78a6524
  163. nt!_DEVICE_OBJECT
  164. +0x000 Type : 0n88
  165. +0x002 Size : 0x5a
  166. +0x004 ReferenceCount : 0n-516224816
  167. +0x008 DriverObject : 0x89be2730 _DRIVER_OBJECT
  168. +0x00c NextDevice : 0x6372415c _DEVICE_OBJECT
  169. +0x010 AttachedDevice : 0x656d614e _DEVICE_OBJECT
  170. +0x014 CurrentIrp : 0x6c756d5c _IRP
  171. +0x018 Timer : 0x30286974 _IO_TIMER
  172. +0x01c Flags : 0x73696429
  173. +0x020 Characteristics : 0x2930286b
  174. +0x024 Vpb : 0x73696472 _VPB
  175. +0x028 DeviceExtension : 0x2930286b Void
  176. +0x02c DeviceType : 0x74726170
  177. +0x030 StackSize : 105 'i'
  178. +0x034 Queue : __unnamed
  179. +0x05c AlignmentRequirement : 0x6b736964
  180. +0x060 DeviceQueue : _KDEVICE_QUEUE
  181. +0x074 Dpc : _KDPC
  182. +0x094 ActiveThreadCount : 0x89be2250
  183. +0x098 SecurityDescriptor : 0x6372415c Void
  184. +0x09c DeviceLock : _KEVENT
  185. +0x0ac SectorSize : 0x286b
  186. +0x0ae Spare1 : 0x2930
  187. +0x0b0 DeviceObjectExtension : 0x73696472 _DEVOBJ_EXTENSION
  188. +0x0b4 Reserved : 0x2930286b Void
  189. 0: kd> du f78a6524
  190. ReadVirtual: f78a6524 not properly sign extended
  191. f78a6524 "XZ.✰覾䅜捲慎敭浜汵楴〨搩獩⡫⤰摲獩⡫⤰慰瑲瑩潩⡮⤱ff聖¨"
  192. 0: kd> !devobj f78a6524
  193. f78a6524: is not a device object
  194. 0: kd> ed nt!Kd_Default_Mask 8
  195. Couldn't resolve error at 'nt!Kd_Default_Mask 8'
  196. 0: kd> lm t n
  197. start end module name
  198. 804d7000 806ff000 nt ntkrnlmp.exe Sun Apr 13 21:24:23 2008 (48025DE7)
  199. 806ff000 8071fd00 hal halmacpi.dll Sun Apr 13 20:31:27 2008 (4802517F)
  200. f7410000 f7457000 VBoxGuest VBoxGuest.sys Tue Jan 21 13:52:02 2025 (678F9872)
  201. f7457000 f7468f00 sr sr.sys Sun Apr 13 20:36:50 2008 (480252C2)
  202. f7469000 f7488b00 fltMgr fltMgr.sys Sun Apr 13 20:32:58 2008 (480251DA)
  203. f7489000 f749a000 disk disk.sys Sat Apr 11 06:39:14 2009 (49E01EF2)
  204. f749a000 f74b1900 atapi atapi.sys Sun Apr 13 20:40:29 2008 (4802539D)
  205. f74b2000 f74d7700 dmio dmio.sys Sun Apr 13 20:44:45 2008 (4802549D)
  206. f74d8000 f74f6880 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
  207. f7597000 f75a7a80 pci pci.sys Sun Apr 13 20:36:43 2008 (480252BB)
  208. f75a8000 f75d5d80 ACPI ACPI.sys Sun Apr 13 20:36:33 2008 (480252B1)
  209. f75f7000 f7600180 isapnp isapnp.sys Sun Apr 13 20:36:40 2008 (480252B8)
  210. f7607000 f7611580 MountMgr MountMgr.sys Sun Apr 13 20:39:45 2008 (48025371)
  211. f7617000 f7623c80 VolSnap VolSnap.sys Sun Apr 13 20:41:00 2008 (480253BC)
  212. f7627000 f7633180 CLASSPNP CLASSPNP.SYS Sun Apr 13 21:16:21 2008 (48025C05)
  213. f7707000 f770d180 PCIIDEX PCIIDEX.SYS Sun Apr 13 20:40:29 2008 (4802539D)
  214. f770f000 f7713d00 PartMgr PartMgr.sys Sun Apr 13 20:40:48 2008 (480253B0)
  215. f7839000 f7852b80 Mup Mup.sys Sun Apr 13 21:17:05 2008 (48025C31)
  216. f7853000 f787f980 NDIS NDIS.sys Sun Apr 13 21:20:35 2008 (48025D03)
  217. f7880000 f7896880 KSecDD KSecDD.sys Sun Apr 13 20:31:40 2008 (4802518C)
  218. f7897000 f789a000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
  219. f789b000 f789d800 compbatt compbatt.sys Sun Apr 13 20:36:36 2008 (480252B4)
  220. f789f000 f78a2780 BATTC BATTC.SYS Sun Apr 13 20:36:32 2008 (480252B0)
  221. f7987000 f7988b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
  222. f7989000 f798a100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
  223. f798b000 f798c580 intelide intelide.sys Sun Apr 13 20:40:29 2008 (4802539D)
  224. f798d000 f798e700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
  225. f7b52000 f7bde600 Ntfs Ntfs.sys Sun Apr 13 21:15:49 2008 (48025BE5)
  226. 0: kd> !devstack disk
  227. !DevObj !DrvObj !DevExt ObjectName
  228. Invalid type for DeviceObject 0xf7489000
  229. 0: kd> dt _DRIVER_OBJECT 0x89be2730
  230. nt!_DRIVER_OBJECT
  231. +0x000 Type : 0n3
  232. +0x002 Size : 0n456
  233. +0x004 DeviceObject : (null)
  234. +0x008 Flags : 0x89c15cb0
  235. +0x00c DriverStart : (null)
  236. +0x010 DriverSize : 0
  237. +0x014 DriverSection : (null)
  238. +0x018 DriverExtension : (null)
  239. +0x01c DriverName : _UNICODE_STRING "--- memory read error at address 0x00000100 ---"
  240. +0x024 HardwareDatabase : 0x89bd0008 _UNICODE_STRING ""
  241. +0x028 FastIoDispatch : 0x89be27e8 _FAST_IO_DISPATCH
  242. +0x02c DriverInit : 0x00000007 long +7
  243. +0x030 DriverStartIo : 0x00000003 void +3
  244. +0x034 DriverUnload : (null)
  245. +0x038 MajorFunction : [28] (null)
  246.  
  247.  
  248.  
  249. ^ ^ ^
  250. | | |
  251.  
  252.  
  253. ^ ^ ^
  254. | | |
  255.  
  256.  
  257. ^ ^
  258. | look
  259.  
  260.  
  261. ^ ^ ^
  262. | | |
  263.  
  264. ^ ^ ^
  265. | | |
  266.  
  267.  
  268. ^ ^
  269. |
  270.  
  271.  
  272.  
  273.  
  274.  
  275.  
  276.  
  277.  
  278.  
  279.  
  280.  
  281.  
  282.  
  283. 0: kd> bp disk!DriverEntry
  284. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
  285. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
  286. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  287. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  288. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  289. 0: kd> .sympath
  290. Symbol search path is: srv*
  291. Expanded Symbol search path is: cache*;SRV*https://msdl.microsoft.com/download/symbols
  292.  
  293. ************* Path validation summary **************
  294. Response Time (ms) Location
  295. Deferred srv*
  296. 0: kd> lm
  297. start end module name
  298. 804d7000 806ff000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\FB6BF595C0344379B369466C1ED25FCB2\ntkrnlmp.pdb
  299. 806ff000 8071fd00 hal (deferred)
  300. f7410000 f7457000 VBoxGuest (deferred)
  301. f7457000 f7468f00 sr (deferred)
  302. f7469000 f7488b00 fltMgr (deferred)
  303. f7489000 f749a000 disk (pdb symbols) C:\ProgramData\Dbg\sym\disk.pdb\2E7F70987CE14F4AAABF78257859D2491\disk.pdb
  304. f749a000 f74b1900 atapi (deferred)
  305. f74b2000 f74d7700 dmio (deferred)
  306. f74d8000 f74f6880 ftdisk (deferred)
  307. f7597000 f75a7a80 pci (deferred)
  308. f75a8000 f75d5d80 ACPI (deferred)
  309. f75f7000 f7600180 isapnp (deferred)
  310. f7607000 f7611580 MountMgr (deferred)
  311. f7617000 f7623c80 VolSnap (deferred)
  312. f7627000 f7633180 CLASSPNP (deferred)
  313. f7707000 f770d180 PCIIDEX (deferred)
  314. f770f000 f7713d00 PartMgr (deferred)
  315. f7839000 f7852b80 Mup (deferred)
  316. f7853000 f787f980 NDIS (deferred)
  317. f7880000 f7896880 KSecDD (deferred)
  318. f7897000 f789a000 BOOTVID (deferred)
  319. f789b000 f789d800 compbatt (deferred)
  320. f789f000 f78a2780 BATTC (deferred)
  321. f7987000 f7988b80 kdcom (deferred)
  322. f7989000 f798a100 WMILIB (deferred)
  323. f798b000 f798c580 intelide (deferred)
  324. f798d000 f798e700 dmload (deferred)
  325. f7b52000 f7bde600 Ntfs (deferred)
  326. 0: kd> lmDvmdisk
  327. Browse full module list
  328. start end module name
  329. f7489000 f749a000 disk (pdb symbols) C:\ProgramData\Dbg\sym\disk.pdb\2E7F70987CE14F4AAABF78257859D2491\disk.pdb
  330. Loaded symbol image file: disk.sys
  331. Image path: disk.sys
  332. Image name: disk.sys
  333. Browse all global symbols functions data Symbol Reload
  334. Timestamp: Sat Apr 11 06:39:14 2009 (49E01EF2)
  335. CheckSum: 000124F0
  336. ImageSize: 00011000
  337. File version: 6.0.6002.18005
  338. Product version: 6.0.6002.18005
  339. File flags: 0 (Mask 3F)
  340. File OS: 40004 NT Win32
  341. File type: 3.7 Driver
  342. File date: 00000000.00000000
  343. Translations: 0000.04b0
  344. Information from resource tables:
  345. CompanyName: Microsoft Corporation
  346. ProductName: Microsoft® Windows® Operating System
  347. InternalName: disk.sys
  348. OriginalFilename: disk.sys
  349. ProductVersion: 6.0.6002.18005
  350. FileVersion: 6.0.6002.18005 (lh_sp2rtm.090410-1830)
  351. FileDescription: PnP Disk Driver
  352. LegalCopyright: © Microsoft Corporation. All rights reserved.
  353. 0: kd> x /D /f disk!a*
  354. A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
  355.  
  356. 0: kd> x /D /f disk!d*
  357. A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
  358.  
  359. f7493630 disk!DiskUpdateGeometry (_DiskUpdateGeometry@4)
  360. f74913fe disk!DiskIoctlSmartSendDriveCommand (_DiskIoctlSmartSendDriveCommand@8)
  361. f74969de disk!DiskSaveDetectInfo (_DiskSaveDetectInfo@4)
  362. f74938c2 disk!DiskUpdateRemovableGeometry (_DiskUpdateRemovableGeometry@4)
  363. f749215a disk!DiskSendFailurePredictIoctl (_DiskSendFailurePredictIoctl@8)
  364. f7490580 disk!DiskIoctlGetMediaTypesEx (_DiskIoctlGetMediaTypesEx@8)
  365. f749098a disk!DiskIoctlReassignBlocks (_DiskIoctlReassignBlocks@8)
  366. f748f87e disk!DiskIoctlVerifyThread (_DiskIoctlVerifyThread@8)
  367. f748abca disk!DiskIoctlClearVerify (_DiskIoctlClearVerify@8)
  368. f7492e5a disk!DiskFdoExecuteWmiMethod (_DiskFdoExecuteWmiMethod@28)
  369. f748a994 disk!DiskIoctlReassignBlocksEx (_DiskIoctlReassignBlocksEx@8)
  370. f748fce4 disk!DiskSetInfoExceptionInformation (_DiskSetInfoExceptionInformation@8)
  371. f7493ff4 disk!DiskDeleteSymbolicLinks (_DiskDeleteSymbolicLinks@4)
  372. f7492b04 disk!DiskEnableDisableFailurePredictPolling (_DiskEnableDisableFailurePredictPolling@12)
  373. f748b3da disk!DiskPostReregisterRequest (_DiskPostReregisterRequest@8)
  374. f748ac86 disk!DiskDeviceControl (_DiskDeviceControl@8)
  375. f748f726 disk!DiskModeSelect (_DiskModeSelect@16)
  376. f74963ce disk!DiskSaveBusDetectInfo (_DiskSaveBusDetectInfo@12)
  377. f748f340 disk!DiskUnload (_DiskUnload@4)
  378. f749109c disk!DiskIoctlSmartReceiveDriveData (_DiskIoctlSmartReceiveDriveData@8)
  379. f7490f0e disk!DiskIoctlSmartGetVersion (_DiskIoctlSmartGetVersion@8)
  380. f74922a2 disk!DiskReadFailurePredictData (_DiskReadFailurePredictData@8)
  381. f7493902 disk!DiskAddDevice (_DiskAddDevice@8)
  382. f7492358 disk!DiskReadFailurePredictThresholds (_DiskReadFailurePredictThresholds@8)
  383. f7490e06 disk!DiskIoctlGetVolumeDiskExtents (_DiskIoctlGetVolumeDiskExtents@8)
  384. f748f358 disk!DiskDetermineMediaTypes (_DiskDetermineMediaTypes@24)
  385. f748fbac disk!DiskGetInfoExceptionInformation (_DiskGetInfoExceptionInformation@8)
  386. f74921f0 disk!DiskReadFailurePredictStatus (_DiskReadFailurePredictStatus@8)
  387. f7496006 disk!DriverEntry (_DriverEntry@8)
  388. f7490b40 disk!DiskIoctlIsWritable (_DiskIoctlIsWritable@8)
  389. f74941a2 disk!DiskInitFdo (_DiskInitFdo@4)
  390. f748bc52 disk!DiskDriverReinitialization (_DiskDriverReinitialization@12)
  391. f748b70a disk!DiskInfoExceptionCheck (_DiskInfoExceptionCheck@4)
  392. f7492a48 disk!DiskWriteSmartLog (_DiskWriteSmartLog@16)
  393. f7491bf0 disk!DisableWriteCache (_DisableWriteCache@8)
  394. f74907e6 disk!DiskIoctlPredictFailure (_DiskIoctlPredictFailure@8)
  395. f74934ac disk!DiskGetDetectInfo (_DiskGetDetectInfo@8)
  396. f7491ed0 disk!DiskPerformSmartCommand (_DiskPerformSmartCommand@32)
  397. f748aef4 disk!DiskFdoProcessError (_DiskFdoProcessError@16)
  398. f74902a4 disk!DiskIoctlGetDriveGeometryEx (_DiskIoctlGetDriveGeometryEx@8)
  399. f74903e0 disk!DiskIoctlGetCacheInformation (_DiskIoctlGetCacheInformation@8)
  400. f749291e disk!DiskFdoSetWmiDataItem (_DiskFdoSetWmiDataItem@24)
  401. f7492cd0 disk!DiskWmiFunctionControl (_DiskWmiFunctionControl@20)
  402. f748a680 disk!DiskIoctlGetCacheSetting (_DiskIoctlGetCacheSetting@8)
  403. f7490158 disk!DiskIoctlGetLengthInfo (_DiskIoctlGetLengthInfo@8)
  404. f748a3fc disk!DiskDriverReinit (_DiskDriverReinit@12)
  405. f74923e8 disk!DiskReregWorker (_DiskReregWorker@8)
  406. f748ba16 disk!DiskFdoQueryWmiRegInfoEx (_DiskFdoQueryWmiRegInfoEx@16)
  407. f7493382 disk!DiskIsNT4Geometry (_DiskIsNT4Geometry@4)
  408. f748fd50 disk!DiskGetCacheInformation (_DiskGetCacheInformation@8)
  409. f7492486 disk!DiskInitializeReregistration (_DiskInitializeReregistration@0)
  410. f7493aec disk!DiskStartFdo (_DiskStartFdo@4)
  411. f7492064 disk!DiskGetIdentifyInfo (_DiskGetIdentifyInfo@8)
  412. f748fb1e disk!DiskLogCacheInformation (_DiskLogCacheInformation@12)
  413. f7490498 disk!DiskIoctlSetCacheInformation (_DiskIoctlSetCacheInformation@8)
  414. f748a7a0 disk!DiskIoctlVerify (_DiskIoctlVerify@8)
  415. f7492496 disk!DiskFdoQueryWmiRegInfo (_DiskFdoQueryWmiRegInfo@12)
  416. f74917bc disk!DiskCreateFdo (_DiskCreateFdo@16)
  417. f7492ac2 disk!DiskEnableDisableFailurePrediction (_DiskEnableDisableFailurePrediction@8)
  418. f748ab70 disk!DiskIoctlSetVerify (_DiskIoctlSetVerify@8)
  419. f74935bc disk!DiskReadSignature (_DiskReadSignature@4)
  420. f748a42c disk!DiskReadWriteVerification (_DiskReadWriteVerification@8)
  421. f748ba32 disk!DiskEnableSmart (_DiskEnableSmart@4)
  422. f74940ec disk!DiskRemoveDevice (_DiskRemoveDevice@8)
  423. f748a6f0 disk!DiskIoctlSetCacheSetting (_DiskIoctlSetCacheSetting@8)
  424. f748b492 disk!DiskInfoExceptionComplete (_DiskInfoExceptionComplete@12)
  425. f748bc30 disk!DiskCleanupDetectInfo (_DiskCleanupDetectInfo@4)
  426. f74927b6 disk!DiskFdoSetWmiDataBlock (_DiskFdoSetWmiDataBlock@20)
  427. f7490cbe disk!DiskIoctlUpdateDriveSize (_DiskIoctlUpdateDriveSize@8)
  428. f74929bc disk!DiskReadSmartLog (_DiskReadSmartLog@16)
  429. f7492b4e disk!DiskDetectFailurePrediction (_DiskDetectFailurePrediction@8)
  430. f7491b2c disk!DiskFlushDispatch (_DiskFlushDispatch@8)
  431. f74965f6 disk!DiskScanBusDetectInfo (_DiskScanBusDetectInfo@8)
  432. f7491c48 disk!DiskShutdownFlush (_DiskShutdownFlush@8)
  433. f748a40c disk!DiskBootDriverReinit (_DiskBootDriverReinit@12)
  434. f748c0a6 disk!DiskStopDevice (_DiskStopDevice@8)
  435. f7492536 disk!DiskFdoQueryWmiDataBlock (_DiskFdoQueryWmiDataBlock@20)
  436. f748ba98 disk!DiskDisableSmart (_DiskDisableSmart@4)
  437. f74961e8 disk!DiskSaveGeometryDetectInfo (_DiskSaveGeometryDetectInfo@8)
  438. f74932e4 disk!DiskGetPortGeometry (_DiskGetPortGeometry@8)
  439. f748ff3e disk!DiskSetCacheInformation (_DiskSetCacheInformation@8)
  440. f748bafe disk!DiskExecuteSmartDiagnostics (_DiskExecuteSmartDiagnostics@8)
  441. f7493e7a disk!DiskCreateSymbolicLinks (_DiskCreateSymbolicLinks@4)
  442. f7493d1e disk!DiskGenerateDeviceName (_DiskGenerateDeviceName@8)
  443. f74901e4 disk!DiskIoctlGetDriveGeometry (_DiskIoctlGetDriveGeometry@8)
  444. f748a500 disk!DiskFlushComplete (_DiskFlushComplete@12)
  445. f748fa3a disk!DiskSetSpecialHacks (_DiskSetSpecialHacks@8)
  446. f748bf9c disk!DiskReadDriveCapacity (_DiskReadDriveCapacity@4)
  447. 0: kd> x /D /f disk!e*
  448. A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
  449.  
  450. 0: kd> bp disk!DriverEntry
  451. breakpoint 7 redefined
  452. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\atlmfc.natvis'
  453. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\concurrency.natvis'
  454. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\cpp_rest.natvis'
  455. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Kernel.natvis'
  456. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\ObjectiveC.natvis'
  457. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\stl.natvis'
  458. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Usb4Kd.natvis'
  459. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Data.Json.natvis'
  460. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Geolocation.natvis'
  461. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Sensors.natvis'
  462. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Media.natvis'
  463. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\windows.natvis'
  464. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\winrt.natvis'
  465.  
  466. ************* Preparing the environment for Debugger Extensions Gallery repositories **************
  467. ExtensionRepository : Implicit
  468. UseExperimentalFeatureForNugetShare : true
  469. AllowNugetExeUpdate : true
  470. NonInteractiveNuget : true
  471. AllowNugetMSCredentialProviderInstall : true
  472. AllowParallelInitializationOfLocalRepositories : true
  473. EnableRedirectToChakraJsProvider : false
  474.  
  475. -- Configuring repositories
  476. ----> Repository : LocalInstalled, Enabled: true
  477. ----> Repository : UserExtensions, Enabled: true
  478.  
  479. >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
  480.  
  481. ************* Waiting for Debugger Extensions Gallery to Initialize **************
  482.  
  483. >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.016 seconds
  484. ----> Repository : UserExtensions, Enabled: true, Packages count: 0
  485. ----> Repository : LocalInstalled, Enabled: true, Packages count: 45
  486.  
  487. Microsoft (R) Windows Debugger Version 10.0.27871.1001 AMD64
  488. Copyright (c) Microsoft Corporation. All rights reserved.
  489.  
  490. Opened \\.\pipe\com_1
  491. Waiting to reconnect...
  492. Connected to Windows XP 2600 x86 compatible target at (Sun Aug 24 13:11:13.696 2025 (UTC + 2:00)), ptr64 FALSE
  493. Kernel Debugger connection established.
  494.  
  495. ************* Path validation summary **************
  496. Response Time (ms) Location
  497. Deferred srv*
  498. Symbol search path is: srv*
  499. Executable search path is:
  500. Windows XP Kernel Version 2600 MP (1 procs) Free x86 compatible
  501. Edition build lab: 2600.xpsp.080413-2111
  502. Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
  503. System Uptime: not available
  504. nt!DebugService2+0x10:
  505. 80505e56 cc int 3
  506. kd> g
  507. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'halmacpi.dll'.
  508. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'halmacpi.dll'.
  509. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'halmacpi.dll'.
  510. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'halmacpi.dll'.
  511. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'halmacpi.dll'.
  512. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'kdcom.dll'.
  513. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'kdcom.dll'.
  514. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'kdcom.dll'.
  515. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'kdcom.dll'.
  516. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'kdcom.dll'.
  517. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'BOOTVID.dll'.
  518. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'BOOTVID.dll'.
  519. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BOOTVID.dll'.
  520. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BOOTVID.dll'.
  521. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BOOTVID.dll'.
  522. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'ACPI.sys'.
  523. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'ACPI.sys'.
  524. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ACPI.sys'.
  525. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ACPI.sys'.
  526. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ACPI.sys'.
  527. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'WMILIB.SYS'.
  528. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'WMILIB.SYS'.
  529. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'WMILIB.SYS'.
  530. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'WMILIB.SYS'.
  531. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'WMILIB.SYS'.
  532. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'pci.sys'.
  533. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'pci.sys'.
  534. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'pci.sys'.
  535. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'pci.sys'.
  536. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'pci.sys'.
  537. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'isapnp.sys'.
  538. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'isapnp.sys'.
  539. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'isapnp.sys'.
  540. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'isapnp.sys'.
  541. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'isapnp.sys'.
  542. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'compbatt.sys'.
  543. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'compbatt.sys'.
  544. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'compbatt.sys'.
  545. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'compbatt.sys'.
  546. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'compbatt.sys'.
  547. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'BATTC.SYS'.
  548. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'BATTC.SYS'.
  549. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BATTC.SYS'.
  550. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BATTC.SYS'.
  551. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'BATTC.SYS'.
  552. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'intelide.sys'.
  553. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'intelide.sys'.
  554. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'intelide.sys'.
  555. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'intelide.sys'.
  556. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'intelide.sys'.
  557. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'PCIIDEX.SYS'.
  558. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'PCIIDEX.SYS'.
  559. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PCIIDEX.SYS'.
  560. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PCIIDEX.SYS'.
  561. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PCIIDEX.SYS'.
  562. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'MountMgr.sys'.
  563. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'MountMgr.sys'.
  564. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'MountMgr.sys'.
  565. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'MountMgr.sys'.
  566. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'MountMgr.sys'.
  567. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'ftdisk.sys'.
  568. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'ftdisk.sys'.
  569. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ftdisk.sys'.
  570. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ftdisk.sys'.
  571. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'ftdisk.sys'.
  572. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'dmload.sys'.
  573. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'dmload.sys'.
  574. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmload.sys'.
  575. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmload.sys'.
  576. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmload.sys'.
  577. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'dmio.sys'.
  578. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'dmio.sys'.
  579. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmio.sys'.
  580. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmio.sys'.
  581. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'dmio.sys'.
  582. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'PartMgr.sys'.
  583. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'PartMgr.sys'.
  584. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PartMgr.sys'.
  585. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PartMgr.sys'.
  586. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'PartMgr.sys'.
  587. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'VolSnap.sys'.
  588. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'VolSnap.sys'.
  589. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VolSnap.sys'.
  590. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VolSnap.sys'.
  591. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VolSnap.sys'.
  592. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'atapi.sys'.
  593. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'atapi.sys'.
  594. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'atapi.sys'.
  595. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'atapi.sys'.
  596. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'atapi.sys'.
  597. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'disk.sys'.
  598. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'disk.sys'.
  599. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'disk.sys'.
  600. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'disk.sys'.
  601. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'disk.sys'.
  602. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'CLASSPNP.SYS'.
  603. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'CLASSPNP.SYS'.
  604. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'CLASSPNP.SYS'.
  605. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'CLASSPNP.SYS'.
  606. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'CLASSPNP.SYS'.
  607. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'fltMgr.sys'.
  608. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'fltMgr.sys'.
  609. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'fltMgr.sys'.
  610. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'fltMgr.sys'.
  611. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'fltMgr.sys'.
  612. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'sr.sys'.
  613. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'sr.sys'.
  614. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'sr.sys'.
  615. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'sr.sys'.
  616. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'sr.sys'.
  617. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'VBoxGuest.sys'.
  618. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'VBoxGuest.sys'.
  619. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VBoxGuest.sys'.
  620. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VBoxGuest.sys'.
  621. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'VBoxGuest.sys'.
  622. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'KSecDD.sys'.
  623. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'KSecDD.sys'.
  624. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'KSecDD.sys'.
  625. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'KSecDD.sys'.
  626. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'KSecDD.sys'.
  627. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'Ntfs.sys'.
  628. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'Ntfs.sys'.
  629. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Ntfs.sys'.
  630. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Ntfs.sys'.
  631. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Ntfs.sys'.
  632. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'NDIS.sys'.
  633. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'NDIS.sys'.
  634. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'NDIS.sys'.
  635. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'NDIS.sys'.
  636. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'NDIS.sys'.
  637. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'Mup.sys'.
  638. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates' from module 'Mup.sys'.
  639. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Mup.sys'.
  640. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Mup.sys'.
  641. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers' from module 'Mup.sys'.
  642. Breakpoint 7 hit
  643. disk!DriverEntry:
  644. f7496006 8bff mov edi,edi
  645. 0: kd> bp disk!IoCreateDevice
  646. Couldn't resolve error at 'disk!IoCreateDevice'
  647. 0: kd> bp disk!IoRegisterDeviceInterface
  648. Couldn't resolve error at 'disk!IoRegisterDeviceInterface'
  649. 0: kd> bp disk!IoSetDeviceInterfaceState
  650. Couldn't resolve error at 'disk!IoSetDeviceInterfaceState'
  651. 0: kd> bp disk!IoAttachDeviceToDeviceStack
  652. Couldn't resolve error at 'disk!IoAttachDeviceToDeviceStack'
  653. 0: kd> bp disk!RtlInitUnicodeString
  654. Couldn't resolve error at 'disk!RtlInitUnicodeString'
  655. 0: kd> bp nt!IopLoadDriver
  656. 0: kd> t
  657. disk!DriverEntry+0x2:
  658. f7496008 55 push ebp
  659. 0: kd> r
  660. eax=08b71f78 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  661. eip=f7496008 esp=f78a65f0 ebp=f78a662c iopl=0 nv up ei ng nz na pe nc
  662. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
  663. disk!DriverEntry+0x2:
  664. f7496008 55 push ebp
  665. 0: kd> t
  666. disk!DriverEntry+0x3:
  667. f7496009 8bec mov ebp,esp
  668. 0: kd> r
  669. eax=08b71f78 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  670. eip=f7496009 esp=f78a65ec ebp=f78a662c iopl=0 nv up ei ng nz na pe nc
  671. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
  672. disk!DriverEntry+0x3:
  673. f7496009 8bec mov ebp,esp
  674. 0: kd> t
  675. disk!DriverEntry+0x5:
  676. f749600b 81ecf8000000 sub esp,0F8h
  677. 0: kd> r
  678. eax=08b71f78 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  679. eip=f749600b esp=f78a65ec ebp=f78a65ec iopl=0 nv up ei ng nz na pe nc
  680. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
  681. disk!DriverEntry+0x5:
  682. f749600b 81ecf8000000 sub esp,0F8h
  683. 0: kd> t
  684. disk!DriverEntry+0xb:
  685. f7496011 a1c0e048f7 mov eax,dword ptr [disk!__security_cookie (f748e0c0)]
  686. 0: kd> r
  687. eax=08b71f78 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  688. eip=f7496011 esp=f78a64f4 ebp=f78a65ec iopl=0 nv up ei ng nz na po nc
  689. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  690. disk!DriverEntry+0xb:
  691. f7496011 a1c0e048f7 mov eax,dword ptr [disk!__security_cookie (f748e0c0)] ds:0023:f748e0c0=f748e087
  692. 0: kd> t
  693. disk!DriverEntry+0x10:
  694. f7496016 33c5 xor eax,ebp
  695. 0: kd> r
  696. eax=f748e087 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  697. eip=f7496016 esp=f78a64f4 ebp=f78a65ec iopl=0 nv up ei ng nz na po nc
  698. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  699. disk!DriverEntry+0x10:
  700. f7496016 33c5 xor eax,ebp
  701. 0: kd> t
  702. disk!DriverEntry+0x12:
  703. f7496018 8945fc mov dword ptr [ebp-4],eax
  704. 0: kd> r
  705. eax=00c2856b ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  706. eip=f7496018 esp=f78a64f4 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
  707. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
  708. disk!DriverEntry+0x12:
  709. f7496018 8945fc mov dword ptr [ebp-4],eax ss:0010:f78a65e8=00000386
  710. 0: kd> t
  711. disk!DriverEntry+0x15:
  712. f749601b 8b450c mov eax,dword ptr [ebp+0Ch]
  713. 0: kd> r
  714. eax=00c2856b ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  715. eip=f749601b esp=f78a64f4 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
  716. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
  717. disk!DriverEntry+0x15:
  718. f749601b 8b450c mov eax,dword ptr [ebp+0Ch] ss:0010:f78a65f8=80092ef8
  719. 0: kd> t
  720. disk!DriverEntry+0x18:
  721. f749601e 53 push ebx
  722. 0: kd> r
  723. eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  724. eip=f749601e esp=f78a64f4 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
  725. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
  726. disk!DriverEntry+0x18:
  727. f749601e 53 push ebx
  728. 0: kd> t
  729. disk!DriverEntry+0x19:
  730. f749601f 8b5d08 mov ebx,dword ptr [ebp+8]
  731. 0: kd> r
  732. eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  733. eip=f749601f esp=f78a64f0 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
  734. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
  735. disk!DriverEntry+0x19:
  736. f749601f 8b5d08 mov ebx,dword ptr [ebp+8] ss:0010:f78a65f4=89ba0a08
  737. 0: kd> t
  738. disk!DriverEntry+0x1c:
  739. f7496022 56 push esi
  740. 0: kd> r
  741. eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  742. eip=f7496022 esp=f78a64f0 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
  743. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
  744. disk!DriverEntry+0x1c:
  745. f7496022 56 push esi
  746. 0: kd> t
  747. disk!DriverEntry+0x1d:
  748. f7496023 57 push edi
  749. 0: kd> r
  750. eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  751. eip=f7496023 esp=f78a64ec ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
  752. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
  753. disk!DriverEntry+0x1d:
  754. f7496023 57 push edi
  755. 0: kd> t
  756. disk!DriverEntry+0x1e:
  757. f7496024 33f6 xor esi,esi
  758. 0: kd> r
  759. eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  760. eip=f7496024 esp=f78a64e8 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
  761. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
  762. disk!DriverEntry+0x1e:
  763. f7496024 33f6 xor esi,esi
  764. 0: kd> t
  765. disk!DriverEntry+0x20:
  766. f7496026 68d0000000 push 0D0h
  767. 0: kd> r
  768. eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  769. eip=f7496026 esp=f78a64e8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  770. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  771. disk!DriverEntry+0x20:
  772. f7496026 68d0000000 push 0D0h
  773. 0: kd> t
  774. disk!DriverEntry+0x25:
  775. f749602b 8945e8 mov dword ptr [ebp-18h],eax
  776. 0: kd> r
  777. eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  778. eip=f749602b esp=f78a64e4 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  779. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  780. disk!DriverEntry+0x25:
  781. f749602b 8945e8 mov dword ptr [ebp-18h],eax ss:0010:f78a65d4=89ba0a08
  782. 0: kd> t
  783. disk!DriverEntry+0x28:
  784. f749602e 8d850cffffff lea eax,[ebp-0F4h]
  785. 0: kd> r
  786. eax=80092ef8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  787. eip=f749602e esp=f78a64e4 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  788. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  789. disk!DriverEntry+0x28:
  790. f749602e 8d850cffffff lea eax,[ebp-0F4h]
  791. 0: kd> t
  792. disk!DriverEntry+0x2e:
  793. f7496034 56 push esi
  794. 0: kd> r
  795. eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  796. eip=f7496034 esp=f78a64e4 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  797. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  798. disk!DriverEntry+0x2e:
  799. f7496034 56 push esi
  800. 0: kd> t
  801. disk!DriverEntry+0x2f:
  802. f7496035 50 push eax
  803. 0: kd> r
  804. eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  805. eip=f7496035 esp=f78a64e0 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  806. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  807. disk!DriverEntry+0x2f:
  808. f7496035 50 push eax
  809. 0: kd> t
  810. disk!DriverEntry+0x30:
  811. f7496036 89b508ffffff mov dword ptr [ebp-0F8h],esi
  812. 0: kd> r
  813. eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  814. eip=f7496036 esp=f78a64dc ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  815. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  816. disk!DriverEntry+0x30:
  817. f7496036 89b508ffffff mov dword ptr [ebp-0F8h],esi ss:0010:f78a64f4=f78a6160
  818. 0: kd> t
  819. disk!DriverEntry+0x36:
  820. f749603c e88161ffff call disk!memset (f748c1c2)
  821. 0: kd> r
  822. eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  823. eip=f749603c esp=f78a64dc ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  824. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  825. disk!DriverEntry+0x36:
  826. f749603c e88161ffff call disk!memset (f748c1c2)
  827. 0: kd> t
  828. disk!memset:
  829. f748c1c2 ff2560d148f7 jmp dword ptr [disk!_imp__memset (f748d160)]
  830. 0: kd> r
  831. eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  832. eip=f748c1c2 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  833. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  834. disk!memset:
  835. f748c1c2 ff2560d148f7 jmp dword ptr [disk!_imp__memset (f748d160)] ds:0023:f748d160={nt!memset (804db0f5)}
  836. 0: kd> t
  837. nt!memset:
  838. 804db0f5 8b54240c mov edx,dword ptr [esp+0Ch]
  839. 0: kd> r
  840. eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=0e8b0001 esi=00000000 edi=89be7570
  841. eip=804db0f5 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  842. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  843. nt!memset:
  844. 804db0f5 8b54240c mov edx,dword ptr [esp+0Ch] ss:0010:f78a64e4=000000d0
  845. 0: kd> t
  846. nt!memset+0x4:
  847. 804db0f9 8b4c2404 mov ecx,dword ptr [esp+4]
  848. 0: kd> r
  849. eax=f78a64f8 ebx=89ba0a08 ecx=bb40e64e edx=000000d0 esi=00000000 edi=89be7570
  850. eip=804db0f9 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  851. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  852. nt!memset+0x4:
  853. 804db0f9 8b4c2404 mov ecx,dword ptr [esp+4] ss:0010:f78a64dc=f78a64f8
  854. 0: kd> t
  855. nt!memset+0x8:
  856. 804db0fd 85d2 test edx,edx
  857. 0: kd> r
  858. eax=f78a64f8 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
  859. eip=804db0fd esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  860. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  861. nt!memset+0x8:
  862. 804db0fd 85d2 test edx,edx
  863. 0: kd> t
  864. nt!memset+0xa:
  865. 804db0ff 7447 je nt!memset+0x53 (804db148)
  866. 0: kd> r
  867. eax=f78a64f8 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
  868. eip=804db0ff esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
  869. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
  870. nt!memset+0xa:
  871. 804db0ff 7447 je nt!memset+0x53 (804db148) [br=0]
  872. 0: kd> t
  873. nt!memset+0xc:
  874. 804db101 33c0 xor eax,eax
  875. 0: kd> r
  876. eax=f78a64f8 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
  877. eip=804db101 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl nz na po nc
  878. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
  879. nt!memset+0xc:
  880. 804db101 33c0 xor eax,eax
  881. 0: kd> t
  882. nt!memset+0xe:
  883. 804db103 8a442408 mov al,byte ptr [esp+8]
  884. 0: kd> r
  885. eax=00000000 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
  886. eip=804db103 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  887. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  888. nt!memset+0xe:
  889. 804db103 8a442408 mov al,byte ptr [esp+8] ss:0010:f78a64e0=00
  890. 0: kd> t
  891. nt!memset+0x12:
  892. 804db107 57 push edi
  893. 0: kd> r
  894. eax=00000000 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
  895. eip=804db107 esp=f78a64d8 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  896. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  897. nt!memset+0x12:
  898. 804db107 57 push edi
  899. 0: kd> t
  900. nt!memset+0x13:
  901. 804db108 8bf9 mov edi,ecx
  902. 0: kd> r
  903. eax=00000000 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=89be7570
  904. eip=804db108 esp=f78a64d4 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  905. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  906. nt!memset+0x13:
  907. 804db108 8bf9 mov edi,ecx
  908. 0: kd> t
  909. nt!memset+0x15:
  910. 804db10a 83fa04 cmp edx,4
  911. 0: kd> r
  912. eax=00000000 ebx=89ba0a08 ecx=f78a64f8 edx=000000d0 esi=00000000 edi=f78a64f8
  913. eip=804db10a esp=f78a64d4 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  914. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  915. nt!memset+0x15:
  916. 804db10a 83fa04 cmp edx,4
  917. 0: kd> t
  918. nt!memset+0x18:
  919. 804db10d 722d jb nt!memset+0x47 (804db13c)
  920. 0: kd> bp nt!IoCreateDevice
  921. 0: kd> bp nt!IoAttachDeviceToDeviceStack
  922. 0: kd> bp nt!IoRegisterDeviceInterface
  923. 0: kd> bp nt!IoSetDeviceInterfaceState
  924. 0: kd> u @eip L20
  925. nt!memset+0x18:
  926. 804db10d 722d jb nt!memset+0x47 (804db13c)
  927. 804db10f f7d9 neg ecx
  928. 804db111 83e103 and ecx,3
  929. 804db114 7408 je nt!memset+0x29 (804db11e)
  930. 804db116 2bd1 sub edx,ecx
  931. 804db118 8807 mov byte ptr [edi],al
  932. 804db11a 47 inc edi
  933. 804db11b 49 dec ecx
  934. 804db11c 75fa jne nt!memset+0x23 (804db118)
  935. 804db11e 8bc8 mov ecx,eax
  936. 804db120 c1e008 shl eax,8
  937. 804db123 03c1 add eax,ecx
  938. 804db125 8bc8 mov ecx,eax
  939. 804db127 c1e010 shl eax,10h
  940. 804db12a 03c1 add eax,ecx
  941. 804db12c 8bca mov ecx,edx
  942. 804db12e 83e203 and edx,3
  943. 804db131 c1e902 shr ecx,2
  944. 804db134 7406 je nt!memset+0x47 (804db13c)
  945. 804db136 f3ab rep stos dword ptr es:[edi]
  946. 804db138 85d2 test edx,edx
  947. 804db13a 7406 je nt!memset+0x4d (804db142)
  948. 804db13c 8807 mov byte ptr [edi],al
  949. 804db13e 47 inc edi
  950. 804db13f 4a dec edx
  951. 804db140 75fa jne nt!memset+0x47 (804db13c)
  952. 804db142 8b442408 mov eax,dword ptr [esp+8]
  953. 804db146 5f pop edi
  954. 804db147 c3 ret
  955. 804db148 8b442404 mov eax,dword ptr [esp+4]
  956. 804db14c c3 ret
  957. nt!strcpy:
  958. 804db14d 57 push edi
  959. 0: kd> g
  960. Breakpoint 9 hit
  961. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
  962. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
  963. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  964. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  965. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  966. nt!IoCreateDevice:
  967. 8059b8bf 8bff mov edi,edi
  968. 0: kd> !devobj
  969. Device object not found
  970. 0: kd> pt
  971. nt!IoCreateDevice+0x336:
  972. 8059bb59 c21c00 ret 1Ch
  973. 0: kd> r eax
  974. eax=00000000
  975. 0: kd> dd esp+10 L1
  976. f78a62e4 00000007
  977. 0: kd> uf
  978. Address expression missing from '<EOL>'
  979. 0: kd> uf nt!IoCreateDevice+0x336
  980. nt!PiRegSzToString:
  981. 8059bbd8 8bff mov edi,edi
  982. 8059bbda 55 push ebp
  983. 8059bbdb 8bec mov ebp,esp
  984. 8059bbdd 8b450c mov eax,dword ptr [ebp+0Ch]
  985. 8059bbe0 53 push ebx
  986. 8059bbe1 56 push esi
  987. 8059bbe2 8b7508 mov esi,dword ptr [ebp+8]
  988. 8059bbe5 d1e8 shr eax,1
  989. 8059bbe7 8d0446 lea eax,[esi+eax*2]
  990. 8059bbea 3bf0 cmp esi,eax
  991. 8059bbec 57 push edi
  992. 8059bbed 8bde mov ebx,esi
  993. 8059bbef 730c jae nt!PiRegSzToString+0x25 (8059bbfd) Branch
  994.  
  995. nt!PiRegSzToString+0x19:
  996. 8059bbf1 66833b00 cmp word ptr [ebx],0
  997. 8059bbf5 7406 je nt!PiRegSzToString+0x25 (8059bbfd) Branch
  998.  
  999. nt!PiRegSzToString+0x1f:
  1000. 8059bbf7 43 inc ebx
  1001. 8059bbf8 43 inc ebx
  1002. 8059bbf9 3bd8 cmp ebx,eax
  1003. 8059bbfb 72f4 jb nt!PiRegSzToString+0x19 (8059bbf1) Branch
  1004.  
  1005. nt!PiRegSzToString+0x25:
  1006. 8059bbfd 8b4510 mov eax,dword ptr [ebp+10h]
  1007. 8059bc00 2bde sub ebx,esi
  1008. 8059bc02 85c0 test eax,eax
  1009. 8059bc04 7402 je nt!PiRegSzToString+0x30 (8059bc08) Branch
  1010.  
  1011. nt!PiRegSzToString+0x2e:
  1012. 8059bc06 8918 mov dword ptr [eax],ebx
  1013.  
  1014. nt!PiRegSzToString+0x30:
  1015. 8059bc08 8b7d14 mov edi,dword ptr [ebp+14h]
  1016. 8059bc0b 85ff test edi,edi
  1017. 8059bc0d 0f857e850500 jne nt!PiRegSzToString+0x37 (805f4191) Branch
  1018.  
  1019. nt!PiRegSzToString+0x71:
  1020. 8059bc13 b001 mov al,1
  1021.  
  1022. nt!PiRegSzToString+0x73:
  1023. 8059bc15 5f pop edi
  1024. 8059bc16 5e pop esi
  1025. 8059bc17 5b pop ebx
  1026. 8059bc18 5d pop ebp
  1027. 8059bc19 c21000 ret 10h
  1028.  
  1029. nt!PiRegSzToString+0x37:
  1030. 805f4191 6850707375 push 75737050h
  1031. 805f4196 8d4302 lea eax,[ebx+2]
  1032. 805f4199 50 push eax
  1033. 805f419a 6a01 push 1
  1034. 805f419c e864cef5ff call nt!ExAllocatePoolWithTag (80551005)
  1035. 805f41a1 85c0 test eax,eax
  1036. 805f41a3 8907 mov dword ptr [edi],eax
  1037. 805f41a5 7507 jne nt!PiRegSzToString+0x51 (805f41ae) Branch
  1038.  
  1039. nt!PiRegSzToString+0x4d:
  1040. 805f41a7 32c0 xor al,al
  1041. 805f41a9 e9677afaff jmp nt!PiRegSzToString+0x73 (8059bc15) Branch
  1042.  
  1043. nt!PiRegSzToString+0x51:
  1044. 805f41ae 85db test ebx,ebx
  1045. 805f41b0 7415 je nt!PiRegSzToString+0x6a (805f41c7) Branch
  1046.  
  1047. nt!PiRegSzToString+0x55:
  1048. 805f41b2 8bcb mov ecx,ebx
  1049. 805f41b4 8bf8 mov edi,eax
  1050. 805f41b6 8bc1 mov eax,ecx
  1051. 805f41b8 c1e902 shr ecx,2
  1052. 805f41bb f3a5 rep movs dword ptr es:[edi],dword ptr [esi]
  1053. 805f41bd 8bc8 mov ecx,eax
  1054. 805f41bf 83e103 and ecx,3
  1055. 805f41c2 f3a4 rep movs byte ptr es:[edi],byte ptr [esi]
  1056. 805f41c4 8b7d14 mov edi,dword ptr [ebp+14h]
  1057.  
  1058. nt!PiRegSzToString+0x6a:
  1059. 805f41c7 8b07 mov eax,dword ptr [edi]
  1060. 805f41c9 6683240300 and word ptr [ebx+eax],0
  1061. 805f41ce e9407afaff jmp nt!PiRegSzToString+0x71 (8059bc13) Branch
  1062. 0: kd> uf nt!IoCreateDevice
  1063. nt!IoCreateDevice:
  1064. 8059b8bf 8bff mov edi,edi
  1065. 8059b8c1 55 push ebp
  1066. 8059b8c2 8bec mov ebp,esp
  1067. 8059b8c4 81ec90000000 sub esp,90h
  1068. 8059b8ca a160a35580 mov eax,dword ptr [nt!__security_cookie (8055a360)]
  1069. 8059b8cf 8945fc mov dword ptr [ebp-4],eax
  1070. 8059b8d2 8b4508 mov eax,dword ptr [ebp+8]
  1071. 8059b8d5 89459c mov dword ptr [ebp-64h],eax
  1072. 8059b8d8 8b4520 mov eax,dword ptr [ebp+20h]
  1073. 8059b8db 8945a8 mov dword ptr [ebp-58h],eax
  1074. 8059b8de 8b450c mov eax,dword ptr [ebp+0Ch]
  1075. 8059b8e1 83e007 and eax,7
  1076. 8059b8e4 53 push ebx
  1077. 8059b8e5 33db xor ebx,ebx
  1078. 8059b8e7 894594 mov dword ptr [ebp-6Ch],eax
  1079. 8059b8ea 8b4518 mov eax,dword ptr [ebp+18h]
  1080. 8059b8ed 56 push esi
  1081. 8059b8ee 2580000000 and eax,80h
  1082. 8059b8f3 57 push edi
  1083. 8059b8f4 8b7d10 mov edi,dword ptr [ebp+10h]
  1084. 8059b8f7 895db0 mov dword ptr [ebp-50h],ebx
  1085. 8059b8fa 885dbf mov byte ptr [ebp-41h],bl
  1086. 8059b8fd 895db8 mov dword ptr [ebp-48h],ebx
  1087. 8059b900 8945a4 mov dword ptr [ebp-5Ch],eax
  1088.  
  1089. nt!IoCreateDevice+0x44:
  1090. 8059b903 395da4 cmp dword ptr [ebp-5Ch],ebx
  1091. 8059b906 0f85c26e0300 jne nt!IoCreateDevice+0x49 (805d27ce) Branch
  1092.  
  1093. nt!IoCreateDevice+0x88:
  1094. 8059b90c 53 push ebx
  1095. 8059b90d 8d45b8 lea eax,[ebp-48h]
  1096. 8059b910 50 push eax
  1097. 8059b911 8d45c4 lea eax,[ebp-3Ch]
  1098. 8059b914 50 push eax
  1099. 8059b915 3bfb cmp edi,ebx
  1100. 8059b917 0f9545ac setne byte ptr [ebp-54h]
  1101. 8059b91b ff75ac push dword ptr [ebp-54h]
  1102. 8059b91e ff7518 push dword ptr [ebp+18h]
  1103. 8059b921 ff7514 push dword ptr [ebp+14h]
  1104. 8059b924 e8f7feffff call nt!IopCreateDefaultDeviceSecurityDescriptor (8059b820)
  1105. 8059b929 8945a0 mov dword ptr [ebp-60h],eax
  1106. 8059b92c 8b4514 mov eax,dword ptr [ebp+14h]
  1107. 8059b92f 83e803 sub eax,3
  1108. 8059b932 0f8418da0000 je nt!IoCreateDevice+0xc6 (805a9350) Branch
  1109.  
  1110. nt!IoCreateDevice+0xb0:
  1111. 8059b938 83e804 sub eax,4
  1112. 8059b93b 0f84bb980000 je nt!IoCreateDevice+0xbd (805a51fc) Branch
  1113.  
  1114. nt!IoCreateDevice+0xb5:
  1115. 8059b941 48 dec eax
  1116. 8059b942 0f84b4980000 je nt!IoCreateDevice+0xbd (805a51fc) Branch
  1117.  
  1118. nt!IoCreateDevice+0xb8:
  1119. 8059b948 83e81c sub eax,1Ch
  1120. 8059b94b 0f84ab980000 je nt!IoCreateDevice+0xbd (805a51fc) Branch
  1121.  
  1122. nt!IoCreateDevice+0xcd:
  1123. 8059b951 385d1c cmp byte ptr [ebp+1Ch],bl
  1124. 8059b954 8b45a0 mov eax,dword ptr [ebp-60h]
  1125. 8059b957 c78578ffffff18000000 mov dword ptr [ebp-88h],18h
  1126. 8059b961 899d7cffffff mov dword ptr [ebp-84h],ebx
  1127. 8059b967 c7458400020000 mov dword ptr [ebp-7Ch],200h
  1128. 8059b96e 897d80 mov dword ptr [ebp-80h],edi
  1129. 8059b971 894588 mov dword ptr [ebp-78h],eax
  1130. 8059b974 895d8c mov dword ptr [ebp-74h],ebx
  1131. 8059b977 0f85cca90100 jne nt!IoCreateDevice+0xf5 (805b6349) Branch
  1132.  
  1133. nt!IoCreateDevice+0xfc:
  1134. 8059b97d 385dac cmp byte ptr [ebp-54h],bl
  1135. 8059b980 7404 je nt!IoCreateDevice+0x105 (8059b986) Branch
  1136.  
  1137. nt!IoCreateDevice+0x101:
  1138. 8059b982 834d8410 or dword ptr [ebp-7Ch],10h
  1139.  
  1140. nt!IoCreateDevice+0x105:
  1141. 8059b986 8b7594 mov esi,dword ptr [ebp-6Ch]
  1142. 8059b989 3bf3 cmp esi,ebx
  1143. 8059b98b 0f85c3440000 jne nt!IoCreateDevice+0x10c (8059fe54) Branch
  1144.  
  1145. nt!IoCreateDevice+0x113:
  1146. 8059b991 03750c add esi,dword ptr [ebp+0Ch]
  1147. 8059b994 8d4598 lea eax,[ebp-68h]
  1148. 8059b997 50 push eax
  1149. 8059b998 53 push ebx
  1150. 8059b999 53 push ebx
  1151. 8059b99a 8d86e4000000 lea eax,[esi+0E4h]
  1152. 8059b9a0 50 push eax
  1153. 8059b9a1 53 push ebx
  1154. 8059b9a2 53 push ebx
  1155. 8059b9a3 8d8578ffffff lea eax,[ebp-88h]
  1156. 8059b9a9 50 push eax
  1157. 8059b9aa ff35640d5680 push dword ptr [nt!IoDeviceObjectType (80560d64)]
  1158. 8059b9b0 53 push ebx
  1159. 8059b9b1 e86f1bfdff call nt!ObCreateObject (8056d525)
  1160. 8059b9b6 3d350000c0 cmp eax,0C0000035h
  1161. 8059b9bb 8b5598 mov edx,dword ptr [ebp-68h]
  1162. 8059b9be 8955c0 mov dword ptr [ebp-40h],edx
  1163. 8059b9c1 8945b4 mov dword ptr [ebp-4Ch],eax
  1164. 8059b9c4 0f8414300500 je nt!IoCreateDevice+0x148 (805ee9de) Branch
  1165.  
  1166. nt!IoCreateDevice+0x151:
  1167. 8059b9ca 385dbf cmp byte ptr [ebp-41h],bl
  1168. 8059b9cd 0f8530ffffff jne nt!IoCreateDevice+0x44 (8059b903) Branch
  1169.  
  1170. nt!IoCreateDevice+0x15a:
  1171. 8059b9d3 3bc3 cmp eax,ebx
  1172. 8059b9d5 0f8c89aa0100 jl nt!IoCreateDevice+0x30e (805b6464) Branch
  1173.  
  1174. nt!IoCreateDevice+0x162:
  1175. 8059b9db 8bfa mov edi,edx
  1176. 8059b9dd 8d8ee4000000 lea ecx,[esi+0E4h]
  1177. 8059b9e3 8bd1 mov edx,ecx
  1178. 8059b9e5 c1e902 shr ecx,2
  1179. 8059b9e8 33c0 xor eax,eax
  1180. 8059b9ea f3ab rep stos dword ptr es:[edi]
  1181. 8059b9ec 8bca mov ecx,edx
  1182. 8059b9ee 83e103 and ecx,3
  1183. 8059b9f1 f3aa rep stos byte ptr es:[edi]
  1184. 8059b9f3 8b4dc0 mov ecx,dword ptr [ebp-40h]
  1185. 8059b9f6 8d8431b8000000 lea eax,[ecx+esi+0B8h]
  1186. 8059b9fd 894804 mov dword ptr [eax+4],ecx
  1187. 8059ba00 8b4dc0 mov ecx,dword ptr [ebp-40h]
  1188. 8059ba03 8981b0000000 mov dword ptr [ecx+0B0h],eax
  1189. 8059ba09 50 push eax
  1190. 8059ba0a 66c7000d00 mov word ptr [eax],0Dh
  1191. 8059ba0f 66895802 mov word ptr [eax+2],bx
  1192. 8059ba13 e884feffff call nt!PoInitializeDeviceObject (8059b89c)
  1193. 8059ba18 8b45c0 mov eax,dword ptr [ebp-40h]
  1194. 8059ba1b 8b7d0c mov edi,dword ptr [ebp+0Ch]
  1195. 8059ba1e 8b7514 mov esi,dword ptr [ebp+14h]
  1196. 8059ba21 83fe07 cmp esi,7
  1197. 8059ba24 66c7000300 mov word ptr [eax],3
  1198. 8059ba29 8b4dc0 mov ecx,dword ptr [ebp-40h]
  1199. 8059ba2c 8d87b8000000 lea eax,[edi+0B8h]
  1200. 8059ba32 66894102 mov word ptr [ecx+2],ax
  1201. 8059ba36 8b45c0 mov eax,dword ptr [ebp-40h]
  1202. 8059ba39 8b4d18 mov ecx,dword ptr [ebp+18h]
  1203. 8059ba3c 89702c mov dword ptr [eax+2Ch],esi
  1204. 8059ba3f 8b45c0 mov eax,dword ptr [ebp-40h]
  1205. 8059ba42 894820 mov dword ptr [eax+20h],ecx
  1206. 8059ba45 0f84ac2c0200 je nt!IoCreateDevice+0x1dd (805be6f7) Branch
  1207.  
  1208. nt!IoCreateDevice+0x1ce:
  1209. 8059ba4b 83fe1f cmp esi,1Fh
  1210. 8059ba4e 0f84a32c0200 je nt!IoCreateDevice+0x1dd (805be6f7) Branch
  1211.  
  1212. nt!IoCreateDevice+0x1d3:
  1213. 8059ba54 83fe02 cmp esi,2
  1214. 8059ba57 0f849a2c0200 je nt!IoCreateDevice+0x1dd (805be6f7) Branch
  1215.  
  1216. nt!IoCreateDevice+0x1d8:
  1217. 8059ba5d 83fe24 cmp esi,24h
  1218. 8059ba60 0f84912c0200 je nt!IoCreateDevice+0x1dd (805be6f7) Branch
  1219.  
  1220. nt!IoCreateDevice+0x23a:
  1221. 8059ba66 385d1c cmp byte ptr [ebp+1Ch],bl
  1222. 8059ba69 8b45c0 mov eax,dword ptr [ebp-40h]
  1223. 8059ba6c 668b4db0 mov cx,word ptr [ebp-50h]
  1224. 8059ba70 89585c mov dword ptr [eax+5Ch],ebx
  1225. 8059ba73 8b45c0 mov eax,dword ptr [ebp-40h]
  1226. 8059ba76 668988ac000000 mov word ptr [eax+0ACh],cx
  1227. 8059ba7d 8b45c0 mov eax,dword ptr [ebp-40h]
  1228. 8059ba80 c7401c80000000 mov dword ptr [eax+1Ch],80h
  1229. 8059ba87 0f85c8a80100 jne nt!IoCreateDevice+0x25d (805b6355) Branch
  1230.  
  1231. nt!IoCreateDevice+0x264:
  1232. 8059ba8d 385dac cmp byte ptr [ebp-54h],bl
  1233. 8059ba90 7407 je nt!IoCreateDevice+0x270 (8059ba99) Branch
  1234.  
  1235. nt!IoCreateDevice+0x269:
  1236. 8059ba92 8b45c0 mov eax,dword ptr [ebp-40h]
  1237. 8059ba95 83481c40 or dword ptr [eax+1Ch],40h
  1238.  
  1239. nt!IoCreateDevice+0x270:
  1240. 8059ba99 3bfb cmp edi,ebx
  1241. 8059ba9b 8b45c0 mov eax,dword ptr [ebp-40h]
  1242. 8059ba9e 0f8464d60000 je nt!IoCreateDevice+0x282 (805a9108) Branch
  1243.  
  1244. nt!IoCreateDevice+0x277:
  1245. 8059baa4 8d88b8000000 lea ecx,[eax+0B8h]
  1246. 8059baaa 894828 mov dword ptr [eax+28h],ecx
  1247.  
  1248. nt!IoCreateDevice+0x285:
  1249. 8059baad 83fe03 cmp esi,3
  1250. 8059bab0 8b45c0 mov eax,dword ptr [ebp-40h]
  1251. 8059bab3 c6403001 mov byte ptr [eax+30h],1
  1252. 8059bab7 0f846fab0400 je nt!IoCreateDevice+0x2b3 (805e662c) Branch
  1253.  
  1254. nt!IoCreateDevice+0x291:
  1255. 8059babd 83fe07 cmp esi,7
  1256. 8059bac0 761b jbe nt!IoCreateDevice+0x2a5 (8059badd) Branch
  1257.  
  1258. nt!IoCreateDevice+0x296:
  1259. 8059bac2 83fe09 cmp esi,9
  1260. 8059bac5 0f8661ab0400 jbe nt!IoCreateDevice+0x2b3 (805e662c) Branch
  1261.  
  1262. nt!IoCreateDevice+0x29b:
  1263. 8059bacb 83fe14 cmp esi,14h
  1264. 8059bace 0f8458ab0400 je nt!IoCreateDevice+0x2b3 (805e662c) Branch
  1265.  
  1266. nt!IoCreateDevice+0x2a0:
  1267. 8059bad4 83fe20 cmp esi,20h
  1268. 8059bad7 0f844fab0400 je nt!IoCreateDevice+0x2b3 (805e662c) Branch
  1269.  
  1270. nt!IoCreateDevice+0x2a5:
  1271. 8059badd 8b45c0 mov eax,dword ptr [ebp-40h]
  1272. 8059bae0 83c060 add eax,60h
  1273. 8059bae3 50 push eax
  1274. 8059bae4 e838abf6ff call nt!KeInitializeDeviceQueue (80506621)
  1275.  
  1276. nt!IoCreateDevice+0x2be:
  1277. 8059bae9 8d4590 lea eax,[ebp-70h]
  1278. 8059baec 50 push eax
  1279. 8059baed 8d45c0 lea eax,[ebp-40h]
  1280. 8059baf0 50 push eax
  1281. 8059baf1 6a01 push 1
  1282. 8059baf3 6a03 push 3
  1283. 8059baf5 53 push ebx
  1284. 8059baf6 ff75c0 push dword ptr [ebp-40h]
  1285. 8059baf9 e8661ffdff call nt!ObInsertObject (8056da64)
  1286. 8059bafe 3bc3 cmp eax,ebx
  1287. 8059bb00 8945b4 mov dword ptr [ebp-4Ch],eax
  1288. 8059bb03 0f8c5ba90100 jl nt!IoCreateDevice+0x30e (805b6464) Branch
  1289.  
  1290. nt!IoCreateDevice+0x2da:
  1291. 8059bb09 8b759c mov esi,dword ptr [ebp-64h]
  1292. 8059bb0c 8bce mov ecx,esi
  1293. 8059bb0e e850e5f3ff call nt!ObfReferenceObject (804da063)
  1294. 8059bb13 8b45c0 mov eax,dword ptr [ebp-40h]
  1295. 8059bb16 6a01 push 1
  1296. 8059bb18 897008 mov dword ptr [eax+8],esi
  1297. 8059bb1b ff75c0 push dword ptr [ebp-40h]
  1298. 8059bb1e 56 push esi
  1299. 8059bb1f e83ddaf7ff call nt!IopInsertRemoveDevice (80519561)
  1300. 8059bb24 8b45c0 mov eax,dword ptr [ebp-40h]
  1301. 8059bb27 395824 cmp dword ptr [eax+24h],ebx
  1302. 8059bb2a 0f850d2c0200 jne nt!IoCreateDevice+0x2fd (805be73d) Branch
  1303.  
  1304. nt!IoCreateDevice+0x303:
  1305. 8059bb30 53 push ebx
  1306. 8059bb31 ff7590 push dword ptr [ebp-70h]
  1307. 8059bb34 e867a3fdff call nt!ObCloseHandle (80575ea0)
  1308.  
  1309. nt!IoCreateDevice+0x311:
  1310. 8059bb39 395db8 cmp dword ptr [ebp-48h],ebx
  1311. 8059bb3c 0f85a0d60000 jne nt!IoCreateDevice+0x316 (805a91e2) Branch
  1312.  
  1313. nt!IoCreateDevice+0x31f:
  1314. 8059bb42 8b45a8 mov eax,dword ptr [ebp-58h]
  1315. 8059bb45 8b4dc0 mov ecx,dword ptr [ebp-40h]
  1316. 8059bb48 8908 mov dword ptr [eax],ecx
  1317.  
  1318. nt!IoCreateDevice+0x327:
  1319. 8059bb4a 8b4dfc mov ecx,dword ptr [ebp-4]
  1320. 8059bb4d 8b45b4 mov eax,dword ptr [ebp-4Ch]
  1321. 8059bb50 5f pop edi
  1322. 8059bb51 5e pop esi
  1323. 8059bb52 5b pop ebx
  1324. 8059bb53 e80ae1f3ff call nt!KeInsertQueue (804d9c62)
  1325. 8059bb58 c9 leave
  1326. 8059bb59 c21c00 ret 1Ch
  1327.  
  1328. nt!IoCreateDevice+0x10c:
  1329. 8059fe54 6a08 push 8
  1330. 8059fe56 58 pop eax
  1331. 8059fe57 2bc6 sub eax,esi
  1332. 8059fe59 8bf0 mov esi,eax
  1333. 8059fe5b e931bbffff jmp nt!IoCreateDevice+0x113 (8059b991) Branch
  1334.  
  1335. nt!IoCreateDevice+0xbd:
  1336. 805a51fc c745b000020000 mov dword ptr [ebp-50h],200h
  1337. 805a5203 e94967ffff jmp nt!IoCreateDevice+0xcd (8059b951) Branch
  1338.  
  1339. nt!IoCreateDevice+0x282:
  1340. 805a9108 895828 mov dword ptr [eax+28h],ebx
  1341. 805a910b e99d29ffff jmp nt!IoCreateDevice+0x285 (8059baad) Branch
  1342.  
  1343. nt!IoCreateDevice+0x316:
  1344. 805a91e2 53 push ebx
  1345. 805a91e3 ff75b8 push dword ptr [ebp-48h]
  1346. 805a91e6 e8fb7ffaff call nt!ExFreePoolWithTag (805511e6)
  1347. 805a91eb e95229ffff jmp nt!IoCreateDevice+0x31f (8059bb42) Branch
  1348.  
  1349. nt!IoCreateDevice+0xc6:
  1350. 805a9350 c745b000080000 mov dword ptr [ebp-50h],800h
  1351. 805a9357 e9f525ffff jmp nt!IoCreateDevice+0xcd (8059b951) Branch
  1352.  
  1353. nt!IoCreateDevice+0xf5:
  1354. 805b6349 c7458420020000 mov dword ptr [ebp-7Ch],220h
  1355. 805b6350 e92856feff jmp nt!IoCreateDevice+0xfc (8059b97d) Branch
  1356.  
  1357. nt!IoCreateDevice+0x25d:
  1358. 805b6355 8b45c0 mov eax,dword ptr [ebp-40h]
  1359. 805b6358 83481c08 or dword ptr [eax+1Ch],8
  1360. 805b635c e92c57feff jmp nt!IoCreateDevice+0x264 (8059ba8d) Branch
  1361.  
  1362. nt!IoCreateDevice+0x30e:
  1363. 805b6464 895dc0 mov dword ptr [ebp-40h],ebx
  1364. 805b6467 e9cd56feff jmp nt!IoCreateDevice+0x311 (8059bb39) Branch
  1365.  
  1366. nt!IoCreateDevice+0x1dd:
  1367. 805be6f7 ff75c0 push dword ptr [ebp-40h]
  1368. 805be6fa e8b6ffffff call nt!IopCreateVpb (805be6b5)
  1369. 805be6ff 3bc3 cmp eax,ebx
  1370. 805be701 8945b4 mov dword ptr [ebp-4Ch],eax
  1371. 805be704 0f8ce6020300 jl nt!IoCreateDevice+0x1ec (805ee9f0) Branch
  1372.  
  1373. nt!IoCreateDevice+0x20c:
  1374. 805be70a 8b45c0 mov eax,dword ptr [ebp-40h]
  1375. 805be70d c6809c00000001 mov byte ptr [eax+9Ch],1
  1376. 805be714 8b45c0 mov eax,dword ptr [ebp-40h]
  1377. 805be717 c6809e00000004 mov byte ptr [eax+9Eh],4
  1378. 805be71e 8b45c0 mov eax,dword ptr [ebp-40h]
  1379. 805be721 c780a000000001000000 mov dword ptr [eax+0A0h],1
  1380. 805be72b 8b45c0 mov eax,dword ptr [ebp-40h]
  1381. 805be72e 05a4000000 add eax,0A4h
  1382. 805be733 894004 mov dword ptr [eax+4],eax
  1383. 805be736 8900 mov dword ptr [eax],eax
  1384. 805be738 e929d3fdff jmp nt!IoCreateDevice+0x23a (8059ba66) Branch
  1385.  
  1386. nt!IoCreateDevice+0x2fd:
  1387. 805be73d 50 push eax
  1388. 805be73e e80a000000 call nt!PoVolumeDevice (805be74d)
  1389. 805be743 e9e8d3fdff jmp nt!IoCreateDevice+0x303 (8059bb30) Branch
  1390.  
  1391. nt!IoCreateDevice+0x49:
  1392. 805d27ce 33c0 xor eax,eax
  1393. 805d27d0 b9240d5680 mov ecx,offset nt!IopUniqueDeviceObjectNumber (80560d24)
  1394. 805d27d5 40 inc eax
  1395. 805d27d6 f00fc101 lock xadd dword ptr [ecx],eax
  1396. 805d27da 40 inc eax
  1397. 805d27db 50 push eax
  1398. 805d27dc 8d45d8 lea eax,[ebp-28h]
  1399. 805d27df 6812285d80 push offset nt!IoConnectInterrupt+0x154 (805d2812)
  1400. 805d27e4 50 push eax
  1401. 805d27e5 e817a2f2ff call nt!swprintf (804fca01)
  1402. 805d27ea 83c40c add esp,0Ch
  1403. 805d27ed 385dbf cmp byte ptr [ebp-41h],bl
  1404. 805d27f0 0f85e0c10100 jne nt!IoCreateDevice+0x6d (805ee9d6) Branch
  1405.  
  1406. nt!IoCreateDevice+0x72:
  1407. 805d27f6 8d45d8 lea eax,[ebp-28h]
  1408. 805d27f9 50 push eax
  1409. 805d27fa 8d8570ffffff lea eax,[ebp-90h]
  1410. 805d2800 50 push eax
  1411. 805d2801 e8977af0ff call nt!RtlInitUnicodeString (804da29d)
  1412. 805d2806 8dbd70ffffff lea edi,[ebp-90h]
  1413. 805d280c e9fb90fcff jmp nt!IoCreateDevice+0x88 (8059b90c) Branch
  1414.  
  1415. nt!IoCreateDevice+0x2b3:
  1416. 805e662c 8b45c0 mov eax,dword ptr [ebp-40h]
  1417. 805e662f 83c034 add eax,34h
  1418. 805e6632 894004 mov dword ptr [eax+4],eax
  1419. 805e6635 8900 mov dword ptr [eax],eax
  1420. 805e6637 e9ad54fbff jmp nt!IoCreateDevice+0x2be (8059bae9) Branch
  1421.  
  1422. nt!IoCreateDevice+0x6d:
  1423. 805ee9d6 885dbf mov byte ptr [ebp-41h],bl
  1424. 805ee9d9 e973cffaff jmp nt!IoCreateDevice+0xcd (8059b951) Branch
  1425.  
  1426. nt!IoCreateDevice+0x148:
  1427. 805ee9de 395da4 cmp dword ptr [ebp-5Ch],ebx
  1428. 805ee9e1 0f84e3cffaff je nt!IoCreateDevice+0x151 (8059b9ca) Branch
  1429.  
  1430. nt!IoCreateDevice+0x14d:
  1431. 805ee9e7 c645bf01 mov byte ptr [ebp-41h],1
  1432. 805ee9eb e9dacffaff jmp nt!IoCreateDevice+0x151 (8059b9ca) Branch
  1433.  
  1434. nt!IoCreateDevice+0x1ec:
  1435. 805ee9f0 8b4dc0 mov ecx,dword ptr [ebp-40h]
  1436. 805ee9f3 e8082fefff call nt!ObfDereferenceObject (804e1900)
  1437. 805ee9f8 395db8 cmp dword ptr [ebp-48h],ebx
  1438. 805ee9fb 7409 je nt!IoCreateDevice+0x202 (805eea06) Branch
  1439.  
  1440. nt!IoCreateDevice+0x1f9:
  1441. 805ee9fd 53 push ebx
  1442. 805ee9fe ff75b8 push dword ptr [ebp-48h]
  1443. 805eea01 e8e027f6ff call nt!ExFreePoolWithTag (805511e6)
  1444.  
  1445. nt!IoCreateDevice+0x202:
  1446. 805eea06 8b45a8 mov eax,dword ptr [ebp-58h]
  1447. 805eea09 8918 mov dword ptr [eax],ebx
  1448. 805eea0b e93ad1faff jmp nt!IoCreateDevice+0x327 (8059bb4a) Branch
  1449. 0: kd> g
  1450. Breakpoint 10 hit
  1451. nt!IoAttachDeviceToDeviceStack:
  1452. 80506ba6 8bff mov edi,edi
  1453. 0: kd> bp disk!DriverEntry
  1454. breakpoint 7 redefined
  1455. 0: kd> bm disk!*DiskAddDevice*
  1456. 13: f7493902 @!"disk!DiskAddDevice"
  1457. 0: kd> bm disk!*DiskCreateFdo*
  1458. 14: f74917bc @!"disk!DiskCreateFdo"
  1459. 0: kd> bm disk!*DiskStartFdo*
  1460. 15: f7493aec @!"disk!DiskStartFdo"
  1461. 0: kd> bm disk!*DiskInitFdo*
  1462. 16: f74941a2 @!"disk!DiskInitFdo"
  1463. 0: kd> bm classpnp!*Class*
  1464. 17: f762809e @!"CLASSPNP!ClassSendSrbSynchronous"
  1465. 18: f762fe55 @!"CLASSPNP!ClassClaimDevice"
  1466. 19: f762fce9 @!"CLASSPNP!ClasspInitializePolling"
  1467. 20: f762fc37 @!"CLASSPNP!ClasspMediaChangeRegistryCallBack"
  1468. 21: f7631288 @!"CLASSPNP!ClassRemoveDevice"
  1469. 22: f762829d @!"CLASSPNP!ClasspSendSynchronousCompletion"
  1470. 23: f762c45f @!"CLASSPNP!ClassSendSrbAsynchronous"
  1471. 24: f76284d4 @!"CLASSPNP!ClassDeviceControl"
  1472. 25: f762d0fc @!"CLASSPNP!ClasspPerfIncrementErrorCount"
  1473. 26: f762e338 @!"CLASSPNP!ClassInitialize"
  1474. 27: f762c72f @!"CLASSPNP!ClassMinimalPowerHandler"
  1475. 28: f763120e @!"CLASSPNP!ClassMarkChildMissing"
  1476. 29: f762fe36 @!"CLASSPNP!ClassAddDevice"
  1477. 30: f763053e @!"CLASSPNP!ClassInitializeEx"
  1478. 31: f762df82 @!"CLASSPNP!ClassRetrieveDeviceRelations"
  1479. 32: f76293b9 @!"CLASSPNP!ClassReleaseQueueCompletion"
  1480. 33: f762ded6 @!"CLASSPNP!ClasspRegisterMountedDeviceInterface"
  1481. 34: f76310df @!"CLASSPNP!ClasspDisableTimer"
  1482. 35: f7628ea9 @!"CLASSPNP!ClassInterpretSenseInfo"
  1483. 36: f76273c0 @!"CLASSPNP!ClassReleaseRemoveLock"
  1484. 37: f762c66d @!"CLASSPNP!ClassWmiFireEvent"
  1485. 38: f762f437 @!"CLASSPNP!ClassGetDescriptor"
  1486. 39: f76284b4 @!"CLASSPNP!ClassSignalCompletion"
  1487. *******************************************************************************
  1488. * You have attempted to enable 33 KD breakpoints, which exceeds the *
  1489. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1490. * Breakpoints exceeding this limit are ignored. *
  1491. * Please disable/clear breakpoints until you are within the supported limit. *
  1492. *******************************************************************************
  1493. 40: f7631251 @!"CLASSPNP!ClassMarkChildrenMissing"
  1494. *******************************************************************************
  1495. * You have attempted to enable 34 KD breakpoints, which exceeds the *
  1496. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1497. * Breakpoints exceeding this limit are ignored. *
  1498. * Please disable/clear breakpoints until you are within the supported limit. *
  1499. *******************************************************************************
  1500. 41: f762be78 @!"CLASSPNP!ClassNotifyFailurePredicted"
  1501. *******************************************************************************
  1502. * You have attempted to enable 35 KD breakpoints, which exceeds the *
  1503. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1504. * Breakpoints exceeding this limit are ignored. *
  1505. * Please disable/clear breakpoints until you are within the supported limit. *
  1506. *******************************************************************************
  1507. 42: f7629c82 @!"CLASSPNP!ClassDispatchPower"
  1508. *******************************************************************************
  1509. * You have attempted to enable 36 KD breakpoints, which exceeds the *
  1510. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1511. * Breakpoints exceeding this limit are ignored. *
  1512. * Please disable/clear breakpoints until you are within the supported limit. *
  1513. *******************************************************************************
  1514. 43: f763105a @!"CLASSPNP!ClassDisableMediaChangeDetection"
  1515. *******************************************************************************
  1516. * You have attempted to enable 37 KD breakpoints, which exceeds the *
  1517. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1518. * Breakpoints exceeding this limit are ignored. *
  1519. * Please disable/clear breakpoints until you are within the supported limit. *
  1520. *******************************************************************************
  1521. 44: f7627d1f @!"CLASSPNP!ClassReadWrite"
  1522. *******************************************************************************
  1523. * You have attempted to enable 38 KD breakpoints, which exceeds the *
  1524. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1525. * Breakpoints exceeding this limit are ignored. *
  1526. * Please disable/clear breakpoints until you are within the supported limit. *
  1527. *******************************************************************************
  1528. 45: f762bdc0 @!"CLASSPNP!ClasspMcnControl"
  1529. *******************************************************************************
  1530. * You have attempted to enable 39 KD breakpoints, which exceeds the *
  1531. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1532. * Breakpoints exceeding this limit are ignored. *
  1533. * Please disable/clear breakpoints until you are within the supported limit. *
  1534. *******************************************************************************
  1535. 46: f762f09d @!"CLASSPNP!ClasspInitializeHotplugInfo"
  1536. *******************************************************************************
  1537. * You have attempted to enable 40 KD breakpoints, which exceeds the *
  1538. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1539. * Breakpoints exceeding this limit are ignored. *
  1540. * Please disable/clear breakpoints until you are within the supported limit. *
  1541. *******************************************************************************
  1542. 47: f7627be3 @!"CLASSPNP!ClassCompleteRequest"
  1543. *******************************************************************************
  1544. * You have attempted to enable 41 KD breakpoints, which exceeds the *
  1545. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1546. * Breakpoints exceeding this limit are ignored. *
  1547. * Please disable/clear breakpoints until you are within the supported limit. *
  1548. *******************************************************************************
  1549. 48: f7629dd6 @!"CLASSPNP!ClasspStartNextPowerIrpCompletion"
  1550. *******************************************************************************
  1551. * You have attempted to enable 42 KD breakpoints, which exceeds the *
  1552. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1553. * Breakpoints exceeding this limit are ignored. *
  1554. * Please disable/clear breakpoints until you are within the supported limit. *
  1555. *******************************************************************************
  1556. 49: f7629fd4 @!"CLASSPNP!ClassGetDriverExtension"
  1557. *******************************************************************************
  1558. * You have attempted to enable 43 KD breakpoints, which exceeds the *
  1559. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1560. * Breakpoints exceeding this limit are ignored. *
  1561. * Please disable/clear breakpoints until you are within the supported limit. *
  1562. *******************************************************************************
  1563. 50: f762df21 @!"CLASSPNP!ClassPnpQueryFdoRelations"
  1564. *******************************************************************************
  1565. * You have attempted to enable 44 KD breakpoints, which exceeds the *
  1566. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1567. * Breakpoints exceeding this limit are ignored. *
  1568. * Please disable/clear breakpoints until you are within the supported limit. *
  1569. *******************************************************************************
  1570. 51: f762bf28 @!"CLASSPNP!ClassInternalIoControl"
  1571. *******************************************************************************
  1572. * You have attempted to enable 45 KD breakpoints, which exceeds the *
  1573. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1574. * Breakpoints exceeding this limit are ignored. *
  1575. * Please disable/clear breakpoints until you are within the supported limit. *
  1576. *******************************************************************************
  1577. 52: f762d167 @!"CLASSPNP!ClassSplitRequest"
  1578. *******************************************************************************
  1579. * You have attempted to enable 46 KD breakpoints, which exceeds the *
  1580. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1581. * Breakpoints exceeding this limit are ignored. *
  1582. * Please disable/clear breakpoints until you are within the supported limit. *
  1583. *******************************************************************************
  1584. 53: f76275c1 @!"CLASSPNP!ClasspMediaChangeDetectionCompletion"
  1585. *******************************************************************************
  1586. * You have attempted to enable 47 KD breakpoints, which exceeds the *
  1587. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1588. * Breakpoints exceeding this limit are ignored. *
  1589. * Please disable/clear breakpoints until you are within the supported limit. *
  1590. *******************************************************************************
  1591. 54: f762bf18 @!"CLASSPNP!ClassInitializeTestUnitPolling"
  1592. *******************************************************************************
  1593. * You have attempted to enable 48 KD breakpoints, which exceeds the *
  1594. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1595. * Breakpoints exceeding this limit are ignored. *
  1596. * Please disable/clear breakpoints until you are within the supported limit. *
  1597. *******************************************************************************
  1598. 55: f762974b @!"CLASSPNP!ClassReadDriveCapacity"
  1599. *******************************************************************************
  1600. * You have attempted to enable 49 KD breakpoints, which exceeds the *
  1601. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1602. * Breakpoints exceeding this limit are ignored. *
  1603. * Please disable/clear breakpoints until you are within the supported limit. *
  1604. *******************************************************************************
  1605. 56: f76277cd @!"CLASSPNP!ClasspPrepareMcnIrp"
  1606. *******************************************************************************
  1607. * You have attempted to enable 50 KD breakpoints, which exceeds the *
  1608. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1609. * Breakpoints exceeding this limit are ignored. *
  1610. * Please disable/clear breakpoints until you are within the supported limit. *
  1611. *******************************************************************************
  1612. 57: f762770b @!"CLASSPNP!ClasspInterpretGesnData"
  1613. *******************************************************************************
  1614. * You have attempted to enable 51 KD breakpoints, which exceeds the *
  1615. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1616. * Breakpoints exceeding this limit are ignored. *
  1617. * Please disable/clear breakpoints until you are within the supported limit. *
  1618. *******************************************************************************
  1619. 58: f762bef9 @!"CLASSPNP!ClassSendEjectionNotification"
  1620. *******************************************************************************
  1621. * You have attempted to enable 52 KD breakpoints, which exceeds the *
  1622. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1623. * Breakpoints exceeding this limit are ignored. *
  1624. * Please disable/clear breakpoints until you are within the supported limit. *
  1625. *******************************************************************************
  1626. 59: f7631010 @!"CLASSPNP!ClassEnableMediaChangeDetection"
  1627. *******************************************************************************
  1628. * You have attempted to enable 53 KD breakpoints, which exceeds the *
  1629. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1630. * Breakpoints exceeding this limit are ignored. *
  1631. * Please disable/clear breakpoints until you are within the supported limit. *
  1632. *******************************************************************************
  1633. 60: f7628487 @!"CLASSPNP!ClasspStartIo"
  1634. *******************************************************************************
  1635. * You have attempted to enable 54 KD breakpoints, which exceeds the *
  1636. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1637. * Breakpoints exceeding this limit are ignored. *
  1638. * Please disable/clear breakpoints until you are within the supported limit. *
  1639. *******************************************************************************
  1640. 61: f762f855 @!"CLASSPNP!ClasspMediaChangeDeviceInstanceOverride"
  1641. *******************************************************************************
  1642. * You have attempted to enable 55 KD breakpoints, which exceeds the *
  1643. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1644. * Breakpoints exceeding this limit are ignored. *
  1645. * Please disable/clear breakpoints until you are within the supported limit. *
  1646. *******************************************************************************
  1647. 62: f762a69a @!"CLASSPNP!ClasspFailurePredict"
  1648. *******************************************************************************
  1649. * You have attempted to enable 56 KD breakpoints, which exceeds the *
  1650. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1651. * Breakpoints exceeding this limit are ignored. *
  1652. * Please disable/clear breakpoints until you are within the supported limit. *
  1653. *******************************************************************************
  1654. 63: f76292a0 @!"CLASSPNP!ClasspReleaseQueue"
  1655. *******************************************************************************
  1656. * You have attempted to enable 57 KD breakpoints, which exceeds the *
  1657. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1658. * Breakpoints exceeding this limit are ignored. *
  1659. * Please disable/clear breakpoints until you are within the supported limit. *
  1660. *******************************************************************************
  1661. 64: f762d226 @!"CLASSPNP!ClasspBuildRequestEx"
  1662. *******************************************************************************
  1663. * You have attempted to enable 58 KD breakpoints, which exceeds the *
  1664. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1665. * Breakpoints exceeding this limit are ignored. *
  1666. * Please disable/clear breakpoints until you are within the supported limit. *
  1667. *******************************************************************************
  1668. 65: f762a033 @!"CLASSPNP!ClasspInitializeGesn"
  1669. *******************************************************************************
  1670. * You have attempted to enable 59 KD breakpoints, which exceeds the *
  1671. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1672. * Breakpoints exceeding this limit are ignored. *
  1673. * Please disable/clear breakpoints until you are within the supported limit. *
  1674. *******************************************************************************
  1675. 66: f7627406 @!"CLASSPNP!ClasspTimerTick"
  1676. *******************************************************************************
  1677. * You have attempted to enable 60 KD breakpoints, which exceeds the *
  1678. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1679. * Breakpoints exceeding this limit are ignored. *
  1680. * Please disable/clear breakpoints until you are within the supported limit. *
  1681. *******************************************************************************
  1682. 67: f7629a43 @!"CLASSPNP!ClassFreeOrReuseSrb"
  1683. *******************************************************************************
  1684. * You have attempted to enable 61 KD breakpoints, which exceeds the *
  1685. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1686. * Breakpoints exceeding this limit are ignored. *
  1687. * Please disable/clear breakpoints until you are within the supported limit. *
  1688. *******************************************************************************
  1689. 68: f76283bb @!"CLASSPNP!ClassDeviceControlDispatch"
  1690. *******************************************************************************
  1691. * You have attempted to enable 62 KD breakpoints, which exceeds the *
  1692. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1693. * Breakpoints exceeding this limit are ignored. *
  1694. * Please disable/clear breakpoints until you are within the supported limit. *
  1695. *******************************************************************************
  1696. 69: f762c2c6 @!"CLASSPNP!ClassAsynchronousCompletion"
  1697. *******************************************************************************
  1698. * You have attempted to enable 63 KD breakpoints, which exceeds the *
  1699. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1700. * Breakpoints exceeding this limit are ignored. *
  1701. * Please disable/clear breakpoints until you are within the supported limit. *
  1702. *******************************************************************************
  1703. 70: f762ed57 @!"CLASSPNP!ClassQueryTimeOutRegistryValue"
  1704. *******************************************************************************
  1705. * You have attempted to enable 64 KD breakpoints, which exceeds the *
  1706. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1707. * Breakpoints exceeding this limit are ignored. *
  1708. * Please disable/clear breakpoints until you are within the supported limit. *
  1709. *******************************************************************************
  1710. 71: f762c358 @!"CLASSPNP!ClassSendStartUnit"
  1711. *******************************************************************************
  1712. * You have attempted to enable 65 KD breakpoints, which exceeds the *
  1713. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1714. * Breakpoints exceeding this limit are ignored. *
  1715. * Please disable/clear breakpoints until you are within the supported limit. *
  1716. *******************************************************************************
  1717. 72: f7627390 @!"CLASSPNP!ClassAcquireRemoveLockEx"
  1718. *******************************************************************************
  1719. * You have attempted to enable 66 KD breakpoints, which exceeds the *
  1720. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1721. * Breakpoints exceeding this limit are ignored. *
  1722. * Please disable/clear breakpoints until you are within the supported limit. *
  1723. *******************************************************************************
  1724. 73: f76281f3 @!"CLASSPNP!ClassIoComplete"
  1725. *******************************************************************************
  1726. * You have attempted to enable 67 KD breakpoints, which exceeds the *
  1727. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1728. * Breakpoints exceeding this limit are ignored. *
  1729. * Please disable/clear breakpoints until you are within the supported limit. *
  1730. *******************************************************************************
  1731. 74: f762caf1 @!"CLASSPNP!ClasspPowerDownCompletion"
  1732. *******************************************************************************
  1733. * You have attempted to enable 68 KD breakpoints, which exceeds the *
  1734. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1735. * Breakpoints exceeding this limit are ignored. *
  1736. * Please disable/clear breakpoints until you are within the supported limit. *
  1737. *******************************************************************************
  1738. 75: f76274e6 @!"CLASSPNP!ClasspSendMediaStateIrp"
  1739. *******************************************************************************
  1740. * You have attempted to enable 69 KD breakpoints, which exceeds the *
  1741. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1742. * Breakpoints exceeding this limit are ignored. *
  1743. * Please disable/clear breakpoints until you are within the supported limit. *
  1744. *******************************************************************************
  1745. 76: f762f58d @!"CLASSPNP!ClasspIsMediaChangeDisabledForClass"
  1746. *******************************************************************************
  1747. * You have attempted to enable 70 KD breakpoints, which exceeds the *
  1748. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1749. * Breakpoints exceeding this limit are ignored. *
  1750. * Please disable/clear breakpoints until you are within the supported limit. *
  1751. *******************************************************************************
  1752. 77: f762d59a @!"CLASSPNP!ClassDebugPrint"
  1753. *******************************************************************************
  1754. * You have attempted to enable 71 KD breakpoints, which exceeds the *
  1755. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1756. * Breakpoints exceeding this limit are ignored. *
  1757. * Please disable/clear breakpoints until you are within the supported limit. *
  1758. *******************************************************************************
  1759. 78: f762e037 @!"CLASSPNP!ClassInvalidateBusRelations"
  1760. *******************************************************************************
  1761. * You have attempted to enable 72 KD breakpoints, which exceeds the *
  1762. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1763. * Breakpoints exceeding this limit are ignored. *
  1764. * Please disable/clear breakpoints until you are within the supported limit. *
  1765. *******************************************************************************
  1766. 79: f76291f2 @!"CLASSPNP!ClassSetMediaChangeState"
  1767. *******************************************************************************
  1768. * You have attempted to enable 73 KD breakpoints, which exceeds the *
  1769. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1770. * Breakpoints exceeding this limit are ignored. *
  1771. * Please disable/clear breakpoints until you are within the supported limit. *
  1772. *******************************************************************************
  1773. 80: f762cec5 @!"CLASSPNP!ClassStopUnitPowerHandler"
  1774. *******************************************************************************
  1775. * You have attempted to enable 74 KD breakpoints, which exceeds the *
  1776. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1777. * Breakpoints exceeding this limit are ignored. *
  1778. * Please disable/clear breakpoints until you are within the supported limit. *
  1779. *******************************************************************************
  1780. 81: f762f1e3 @!"CLASSPNP!ClassGetDeviceParameter"
  1781. *******************************************************************************
  1782. * You have attempted to enable 75 KD breakpoints, which exceeds the *
  1783. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1784. * Breakpoints exceeding this limit are ignored. *
  1785. * Please disable/clear breakpoints until you are within the supported limit. *
  1786. *******************************************************************************
  1787. 82: f762ea35 @!"CLASSPNP!ClassSendDeviceIoControlSynchronous"
  1788. *******************************************************************************
  1789. * You have attempted to enable 76 KD breakpoints, which exceeds the *
  1790. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1791. * Breakpoints exceeding this limit are ignored. *
  1792. * Please disable/clear breakpoints until you are within the supported limit. *
  1793. *******************************************************************************
  1794. 83: f762d35e @!"CLASSPNP!ClassIoCompleteAssociated"
  1795. *******************************************************************************
  1796. * You have attempted to enable 77 KD breakpoints, which exceeds the *
  1797. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1798. * Breakpoints exceeding this limit are ignored. *
  1799. * Please disable/clear breakpoints until you are within the supported limit. *
  1800. *******************************************************************************
  1801. 84: f7629e13 @!"CLASSPNP!ClasspAllocateReleaseQueueIrp"
  1802. *******************************************************************************
  1803. * You have attempted to enable 78 KD breakpoints, which exceeds the *
  1804. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1805. * Breakpoints exceeding this limit are ignored. *
  1806. * Please disable/clear breakpoints until you are within the supported limit. *
  1807. *******************************************************************************
  1808. 85: f762f551 @!"CLASSPNP!ClasspEnableTimer"
  1809. *******************************************************************************
  1810. * You have attempted to enable 79 KD breakpoints, which exceeds the *
  1811. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1812. * Breakpoints exceeding this limit are ignored. *
  1813. * Please disable/clear breakpoints until you are within the supported limit. *
  1814. *******************************************************************************
  1815. 86: f7629b56 @!"CLASSPNP!ClassSendIrpSynchronous"
  1816. *******************************************************************************
  1817. * You have attempted to enable 80 KD breakpoints, which exceeds the *
  1818. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1819. * Breakpoints exceeding this limit are ignored. *
  1820. * Please disable/clear breakpoints until you are within the supported limit. *
  1821. *******************************************************************************
  1822. 87: f762de20 @!"CLASSPNP!ClassPnpStartDevice"
  1823. *******************************************************************************
  1824. * You have attempted to enable 81 KD breakpoints, which exceeds the *
  1825. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1826. * Breakpoints exceeding this limit are ignored. *
  1827. * Please disable/clear breakpoints until you are within the supported limit. *
  1828. *******************************************************************************
  1829. 88: f76314bb @!"CLASSPNP!ClassFindGuid"
  1830. *******************************************************************************
  1831. * You have attempted to enable 82 KD breakpoints, which exceeds the *
  1832. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1833. * Breakpoints exceeding this limit are ignored. *
  1834. * Please disable/clear breakpoints until you are within the supported limit. *
  1835. *******************************************************************************
  1836. 89: f762bd28 @!"CLASSPNP!ClasspSendNotification"
  1837. *******************************************************************************
  1838. * You have attempted to enable 83 KD breakpoints, which exceeds the *
  1839. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1840. * Breakpoints exceeding this limit are ignored. *
  1841. * Please disable/clear breakpoints until you are within the supported limit. *
  1842. *******************************************************************************
  1843. 90: f762e99e @!"CLASSPNP!ClassSystemControl"
  1844. *******************************************************************************
  1845. * You have attempted to enable 84 KD breakpoints, which exceeds the *
  1846. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1847. * Breakpoints exceeding this limit are ignored. *
  1848. * Please disable/clear breakpoints until you are within the supported limit. *
  1849. *******************************************************************************
  1850. 91: f763112d @!"CLASSPNP!ClassQueryPnpCapabilities"
  1851. *******************************************************************************
  1852. * You have attempted to enable 85 KD breakpoints, which exceeds the *
  1853. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1854. * Breakpoints exceeding this limit are ignored. *
  1855. * Please disable/clear breakpoints until you are within the supported limit. *
  1856. *******************************************************************************
  1857. 92: f762f780 @!"CLASSPNP!ClassSetDeviceParameter"
  1858. *******************************************************************************
  1859. * You have attempted to enable 86 KD breakpoints, which exceeds the *
  1860. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1861. * Breakpoints exceeding this limit are ignored. *
  1862. * Please disable/clear breakpoints until you are within the supported limit. *
  1863. *******************************************************************************
  1864. 93: f762ee75 @!"CLASSPNP!ClassInitializeSrbLookasideList"
  1865. *******************************************************************************
  1866. * You have attempted to enable 87 KD breakpoints, which exceeds the *
  1867. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1868. * Breakpoints exceeding this limit are ignored. *
  1869. * Please disable/clear breakpoints until you are within the supported limit. *
  1870. *******************************************************************************
  1871. 94: f7629288 @!"CLASSPNP!ClassReleaseQueue"
  1872. *******************************************************************************
  1873. * You have attempted to enable 88 KD breakpoints, which exceeds the *
  1874. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1875. * Breakpoints exceeding this limit are ignored. *
  1876. * Please disable/clear breakpoints until you are within the supported limit. *
  1877. *******************************************************************************
  1878. 95: f76277aa @!"CLASSPNP!ClassResetMediaChangeTimer"
  1879. *******************************************************************************
  1880. * You have attempted to enable 89 KD breakpoints, which exceeds the *
  1881. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1882. * Breakpoints exceeding this limit are ignored. *
  1883. * Please disable/clear breakpoints until you are within the supported limit. *
  1884. *******************************************************************************
  1885. 96: f762bfed @!"CLASSPNP!ClassCheckVerifyComplete"
  1886. *******************************************************************************
  1887. * You have attempted to enable 90 KD breakpoints, which exceeds the *
  1888. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1889. * Breakpoints exceeding this limit are ignored. *
  1890. * Please disable/clear breakpoints until you are within the supported limit. *
  1891. *******************************************************************************
  1892. 97: f7629d26 @!"CLASSPNP!ClasspPowerHandler"
  1893. *******************************************************************************
  1894. * You have attempted to enable 91 KD breakpoints, which exceeds the *
  1895. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1896. * Breakpoints exceeding this limit are ignored. *
  1897. * Please disable/clear breakpoints until you are within the supported limit. *
  1898. *******************************************************************************
  1899. 98: f762c044 @!"CLASSPNP!ClassGetVpb"
  1900. *******************************************************************************
  1901. * You have attempted to enable 92 KD breakpoints, which exceeds the *
  1902. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1903. * Breakpoints exceeding this limit are ignored. *
  1904. * Please disable/clear breakpoints until you are within the supported limit. *
  1905. *******************************************************************************
  1906. 99: f762c1bf @!"CLASSPNP!ClassRetryRequest"
  1907. *******************************************************************************
  1908. * You have attempted to enable 93 KD breakpoints, which exceeds the *
  1909. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1910. * Breakpoints exceeding this limit are ignored. *
  1911. * Please disable/clear breakpoints until you are within the supported limit. *
  1912. *******************************************************************************
  1913. 100: f7629418 @!"CLASSPNP!ClasspInternalSetMediaChangeState"
  1914. *******************************************************************************
  1915. * You have attempted to enable 94 KD breakpoints, which exceeds the *
  1916. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1917. * Breakpoints exceeding this limit are ignored. *
  1918. * Please disable/clear breakpoints until you are within the supported limit. *
  1919. *******************************************************************************
  1920. 101: f762fefb @!"CLASSPNP!ClassCreateDeviceObject"
  1921. *******************************************************************************
  1922. * You have attempted to enable 95 KD breakpoints, which exceeds the *
  1923. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1924. * Breakpoints exceeding this limit are ignored. *
  1925. * Please disable/clear breakpoints until you are within the supported limit. *
  1926. *******************************************************************************
  1927. 102: f7629960 @!"CLASSPNP!ClassReleaseChildLock"
  1928. *******************************************************************************
  1929. * You have attempted to enable 96 KD breakpoints, which exceeds the *
  1930. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1931. * Breakpoints exceeding this limit are ignored. *
  1932. * Please disable/clear breakpoints until you are within the supported limit. *
  1933. *******************************************************************************
  1934. 103: f7630142 @!"CLASSPNP!ClassUpdateInformationInRegistry"
  1935. *******************************************************************************
  1936. * You have attempted to enable 97 KD breakpoints, which exceeds the *
  1937. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1938. * Breakpoints exceeding this limit are ignored. *
  1939. * Please disable/clear breakpoints until you are within the supported limit. *
  1940. *******************************************************************************
  1941. 104: f7629ceb @!"CLASSPNP!ClassSpinDownPowerHandler"
  1942. *******************************************************************************
  1943. * You have attempted to enable 98 KD breakpoints, which exceeds the *
  1944. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1945. * Breakpoints exceeding this limit are ignored. *
  1946. * Please disable/clear breakpoints until you are within the supported limit. *
  1947. *******************************************************************************
  1948. 105: f76310ff @!"CLASSPNP!ClassGetPdoId"
  1949. *******************************************************************************
  1950. * You have attempted to enable 99 KD breakpoints, which exceeds the *
  1951. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1952. * Breakpoints exceeding this limit are ignored. *
  1953. * Please disable/clear breakpoints until you are within the supported limit. *
  1954. *******************************************************************************
  1955. 106: f762da80 @!"CLASSPNP!ClasspCreateClose"
  1956. *******************************************************************************
  1957. * You have attempted to enable 100 KD breakpoints, which exceeds the *
  1958. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1959. * Breakpoints exceeding this limit are ignored. *
  1960. * Please disable/clear breakpoints until you are within the supported limit. *
  1961. *******************************************************************************
  1962. 107: f762eece @!"CLASSPNP!ClassScanForSpecial"
  1963. *******************************************************************************
  1964. * You have attempted to enable 101 KD breakpoints, which exceeds the *
  1965. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1966. * Breakpoints exceeding this limit are ignored. *
  1967. * Please disable/clear breakpoints until you are within the supported limit. *
  1968. *******************************************************************************
  1969. 108: f762c0b3 @!"CLASSPNP!ClasspRetryDpcTimer"
  1970. *******************************************************************************
  1971. * You have attempted to enable 102 KD breakpoints, which exceeds the *
  1972. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1973. * Breakpoints exceeding this limit are ignored. *
  1974. * Please disable/clear breakpoints until you are within the supported limit. *
  1975. *******************************************************************************
  1976. 109: f7629baa @!"CLASSPNP!ClassForwardIrpSynchronous"
  1977. *******************************************************************************
  1978. * You have attempted to enable 103 KD breakpoints, which exceeds the *
  1979. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1980. * Breakpoints exceeding this limit are ignored. *
  1981. * Please disable/clear breakpoints until you are within the supported limit. *
  1982. *******************************************************************************
  1983. 110: f7629ea7 @!"CLASSPNP!ClasspMyStringMatches"
  1984. *******************************************************************************
  1985. * You have attempted to enable 104 KD breakpoints, which exceeds the *
  1986. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1987. * Breakpoints exceeding this limit are ignored. *
  1988. * Please disable/clear breakpoints until you are within the supported limit. *
  1989. *******************************************************************************
  1990. 111: f7629210 @!"CLASSPNP!ClasspSetMediaChangeStateEx"
  1991. *******************************************************************************
  1992. * You have attempted to enable 105 KD breakpoints, which exceeds the *
  1993. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  1994. * Breakpoints exceeding this limit are ignored. *
  1995. * Please disable/clear breakpoints until you are within the supported limit. *
  1996. *******************************************************************************
  1997. 112: f762e08e @!"CLASSPNP!ClasspEjectionControl"
  1998. *******************************************************************************
  1999. * You have attempted to enable 106 KD breakpoints, which exceeds the *
  2000. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2001. * Breakpoints exceeding this limit are ignored. *
  2002. * Please disable/clear breakpoints until you are within the supported limit. *
  2003. *******************************************************************************
  2004. 113: f7631544 @!"CLASSPNP!ClassDeleteSrbLookasideList"
  2005. *******************************************************************************
  2006. * You have attempted to enable 107 KD breakpoints, which exceeds the *
  2007. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2008. * Breakpoints exceeding this limit are ignored. *
  2009. * Please disable/clear breakpoints until you are within the supported limit. *
  2010. *******************************************************************************
  2011. 114: f762db76 @!"CLASSPNP!ClasspCleanupDisableMcn"
  2012. *******************************************************************************
  2013. * You have attempted to enable 108 KD breakpoints, which exceeds the *
  2014. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2015. * Breakpoints exceeding this limit are ignored. *
  2016. * Please disable/clear breakpoints until you are within the supported limit. *
  2017. *******************************************************************************
  2018. 115: f762dc93 @!"CLASSPNP!ClassDispatchPnp"
  2019. *******************************************************************************
  2020. * You have attempted to enable 109 KD breakpoints, which exceeds the *
  2021. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2022. * Breakpoints exceeding this limit are ignored. *
  2023. * Please disable/clear breakpoints until you are within the supported limit. *
  2024. *******************************************************************************
  2025. 116: f76311ee @!"CLASSPNP!ClasspScanForClassHacks"
  2026. *******************************************************************************
  2027. * You have attempted to enable 110 KD breakpoints, which exceeds the *
  2028. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2029. * Breakpoints exceeding this limit are ignored. *
  2030. * Please disable/clear breakpoints until you are within the supported limit. *
  2031. *******************************************************************************
  2032. 117: f762da05 @!"CLASSPNP!ClasspCleanupProtectedLocks"
  2033. *******************************************************************************
  2034. * You have attempted to enable 111 KD breakpoints, which exceeds the *
  2035. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2036. * Breakpoints exceeding this limit are ignored. *
  2037. * Please disable/clear breakpoints until you are within the supported limit. *
  2038. *******************************************************************************
  2039. 118: f76282e2 @!"CLASSPNP!ClassShutdownFlush"
  2040. *******************************************************************************
  2041. * You have attempted to enable 112 KD breakpoints, which exceeds the *
  2042. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2043. * Breakpoints exceeding this limit are ignored. *
  2044. * Please disable/clear breakpoints until you are within the supported limit. *
  2045. *******************************************************************************
  2046. 119: f76305eb @!"CLASSPNP!ClassModeSense"
  2047. *******************************************************************************
  2048. * You have attempted to enable 113 KD breakpoints, which exceeds the *
  2049. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2050. * Breakpoints exceeding this limit are ignored. *
  2051. * Please disable/clear breakpoints until you are within the supported limit. *
  2052. *******************************************************************************
  2053. 120: f762d55f @!"CLASSPNP!ClassBuildRequest"
  2054. *******************************************************************************
  2055. * You have attempted to enable 114 KD breakpoints, which exceeds the *
  2056. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2057. * Breakpoints exceeding this limit are ignored. *
  2058. * Please disable/clear breakpoints until you are within the supported limit. *
  2059. *******************************************************************************
  2060. 121: f762a5a2 @!"CLASSPNP!ClassFindModePage"
  2061. *******************************************************************************
  2062. * You have attempted to enable 115 KD breakpoints, which exceeds the *
  2063. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2064. * Breakpoints exceeding this limit are ignored. *
  2065. * Please disable/clear breakpoints until you are within the supported limit. *
  2066. *******************************************************************************
  2067. 122: f762fc86 @!"CLASSPNP!ClassInitializeMediaChangeDetection"
  2068. *******************************************************************************
  2069. * You have attempted to enable 116 KD breakpoints, which exceeds the *
  2070. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2071. * Breakpoints exceeding this limit are ignored. *
  2072. * Please disable/clear breakpoints until you are within the supported limit. *
  2073. *******************************************************************************
  2074. 123: f762f9fb @!"CLASSPNP!ClasspIsMediaChangeDisabledDueToHardwareLimitation"
  2075. *******************************************************************************
  2076. * You have attempted to enable 117 KD breakpoints, which exceeds the *
  2077. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2078. * Breakpoints exceeding this limit are ignored. *
  2079. * Please disable/clear breakpoints until you are within the supported limit. *
  2080. *******************************************************************************
  2081. 124: f762db54 @!"CLASSPNP!ClasspGetFsContext"
  2082. *******************************************************************************
  2083. * You have attempted to enable 118 KD breakpoints, which exceeds the *
  2084. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2085. * Breakpoints exceeding this limit are ignored. *
  2086. * Please disable/clear breakpoints until you are within the supported limit. *
  2087. *******************************************************************************
  2088. 125: f7631174 @!"CLASSPNP!ClasspFreeReleaseRequest"
  2089. *******************************************************************************
  2090. * You have attempted to enable 119 KD breakpoints, which exceeds the *
  2091. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2092. * Breakpoints exceeding this limit are ignored. *
  2093. * Please disable/clear breakpoints until you are within the supported limit. *
  2094. *******************************************************************************
  2095. 126: f762c058 @!"CLASSPNP!ClassRemoveChild"
  2096. *******************************************************************************
  2097. * You have attempted to enable 120 KD breakpoints, which exceeds the *
  2098. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2099. * Breakpoints exceeding this limit are ignored. *
  2100. * Please disable/clear breakpoints until you are within the supported limit. *
  2101. *******************************************************************************
  2102. 127: f762c125 @!"CLASSPNP!ClasspRetryRequestDpc"
  2103. *******************************************************************************
  2104. * You have attempted to enable 121 KD breakpoints, which exceeds the *
  2105. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2106. * Breakpoints exceeding this limit are ignored. *
  2107. * Please disable/clear breakpoints until you are within the supported limit. *
  2108. *******************************************************************************
  2109. 128: f762c581 @!"CLASSPNP!ClassWmiCompleteRequest"
  2110. *******************************************************************************
  2111. * You have attempted to enable 122 KD breakpoints, which exceeds the *
  2112. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2113. * Breakpoints exceeding this limit are ignored. *
  2114. * Please disable/clear breakpoints until you are within the supported limit. *
  2115. *******************************************************************************
  2116. 129: f7628039 @!"CLASSPNP!ClasspPerfIncrementSuccessfulIo"
  2117. *******************************************************************************
  2118. * You have attempted to enable 123 KD breakpoints, which exceeds the *
  2119. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2120. * Breakpoints exceeding this limit are ignored. *
  2121. * Please disable/clear breakpoints until you are within the supported limit. *
  2122. *******************************************************************************
  2123. 130: f7630444 @!"CLASSPNP!ClassSetFailurePredictionPoll"
  2124. *******************************************************************************
  2125. * You have attempted to enable 124 KD breakpoints, which exceeds the *
  2126. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2127. * Breakpoints exceeding this limit are ignored. *
  2128. * Please disable/clear breakpoints until you are within the supported limit. *
  2129. *******************************************************************************
  2130. 131: f762a60d @!"CLASSPNP!ClassAddChild"
  2131. *******************************************************************************
  2132. * You have attempted to enable 125 KD breakpoints, which exceeds the *
  2133. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2134. * Breakpoints exceeding this limit are ignored. *
  2135. * Please disable/clear breakpoints until you are within the supported limit. *
  2136. *******************************************************************************
  2137. 132: f762dbb0 @!"CLASSPNP!ClassCreateClose"
  2138. *******************************************************************************
  2139. * You have attempted to enable 126 KD breakpoints, which exceeds the *
  2140. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2141. * Breakpoints exceeding this limit are ignored. *
  2142. * Please disable/clear breakpoints until you are within the supported limit. *
  2143. *******************************************************************************
  2144. 133: f76300e1 @!"CLASSPNP!ClasspAllocateReleaseRequest"
  2145. *******************************************************************************
  2146. * You have attempted to enable 127 KD breakpoints, which exceeds the *
  2147. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2148. * Breakpoints exceeding this limit are ignored. *
  2149. * Please disable/clear breakpoints until you are within the supported limit. *
  2150. *******************************************************************************
  2151. 134: f762eb4a @!"CLASSPNP!ClasspScanForSpecialInRegistry"
  2152. *******************************************************************************
  2153. * You have attempted to enable 128 KD breakpoints, which exceeds the *
  2154. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2155. * Breakpoints exceeding this limit are ignored. *
  2156. * Please disable/clear breakpoints until you are within the supported limit. *
  2157. *******************************************************************************
  2158. 135: f7631092 @!"CLASSPNP!ClassCleanupMediaChangeDetection"
  2159. *******************************************************************************
  2160. * You have attempted to enable 129 KD breakpoints, which exceeds the *
  2161. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2162. * Breakpoints exceeding this limit are ignored. *
  2163. * Please disable/clear breakpoints until you are within the supported limit. *
  2164. *******************************************************************************
  2165. 136: f762991c @!"CLASSPNP!ClassAcquireChildLock"
  2166. *******************************************************************************
  2167. * You have attempted to enable 130 KD breakpoints, which exceeds the *
  2168. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2169. * Breakpoints exceeding this limit are ignored. *
  2170. * Please disable/clear breakpoints until you are within the supported limit. *
  2171. *******************************************************************************
  2172. 137: f762e4b4 @!"CLASSPNP!ClassUnload"
  2173. *******************************************************************************
  2174. * You have attempted to enable 131 KD breakpoints, which exceeds the *
  2175. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2176. * Breakpoints exceeding this limit are ignored. *
  2177. * Please disable/clear breakpoints until you are within the supported limit. *
  2178. *******************************************************************************
  2179. 138: f762c84e @!"CLASSPNP!ClasspPowerUpCompletion"
  2180. *******************************************************************************
  2181. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2182. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2183. * Breakpoints exceeding this limit are ignored. *
  2184. * Please disable/clear breakpoints until you are within the supported limit. *
  2185. *******************************************************************************
  2186. 139: f762757c @!"CLASSPNP!ClassCheckMediaState"
  2187. 0: kd> g
  2188. *******************************************************************************
  2189. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2190. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2191. * Breakpoints exceeding this limit are ignored. *
  2192. * Please disable/clear breakpoints until you are within the supported limit. *
  2193. *******************************************************************************
  2194. *******************************************************************************
  2195. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2196. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2197. * Breakpoints exceeding this limit are ignored. *
  2198. * Please disable/clear breakpoints until you are within the supported limit. *
  2199. *******************************************************************************
  2200. Breakpoint 9 hit
  2201. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
  2202. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
  2203. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  2204. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  2205. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  2206. nt!IoCreateDevice:
  2207. 8059b8bf 8bff mov edi,edi
  2208. 0: kd> g
  2209. *******************************************************************************
  2210. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2211. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2212. * Breakpoints exceeding this limit are ignored. *
  2213. * Please disable/clear breakpoints until you are within the supported limit. *
  2214. *******************************************************************************
  2215. *******************************************************************************
  2216. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2217. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2218. * Breakpoints exceeding this limit are ignored. *
  2219. * Please disable/clear breakpoints until you are within the supported limit. *
  2220. *******************************************************************************
  2221. Breakpoint 10 hit
  2222. nt!IoAttachDeviceToDeviceStack:
  2223. 80506ba6 8bff mov edi,edi
  2224. 0: kd> g
  2225. *******************************************************************************
  2226. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2227. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2228. * Breakpoints exceeding this limit are ignored. *
  2229. * Please disable/clear breakpoints until you are within the supported limit. *
  2230. *******************************************************************************
  2231. *******************************************************************************
  2232. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2233. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2234. * Breakpoints exceeding this limit are ignored. *
  2235. * Please disable/clear breakpoints until you are within the supported limit. *
  2236. *******************************************************************************
  2237. Breakpoint 36 hit
  2238. CLASSPNP!ClassReleaseRemoveLock:
  2239. f76273c0 8bff mov edi,edi
  2240. 0: kd> g
  2241. *******************************************************************************
  2242. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2243. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2244. * Breakpoints exceeding this limit are ignored. *
  2245. * Please disable/clear breakpoints until you are within the supported limit. *
  2246. *******************************************************************************
  2247. *******************************************************************************
  2248. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2249. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2250. * Breakpoints exceeding this limit are ignored. *
  2251. * Please disable/clear breakpoints until you are within the supported limit. *
  2252. *******************************************************************************
  2253. Breakpoint 36 hit
  2254. CLASSPNP!ClassReleaseRemoveLock:
  2255. f76273c0 8bff mov edi,edi
  2256. 0: kd> g
  2257. *******************************************************************************
  2258. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2259. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2260. * Breakpoints exceeding this limit are ignored. *
  2261. * Please disable/clear breakpoints until you are within the supported limit. *
  2262. *******************************************************************************
  2263. *******************************************************************************
  2264. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2265. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2266. * Breakpoints exceeding this limit are ignored. *
  2267. * Please disable/clear breakpoints until you are within the supported limit. *
  2268. *******************************************************************************
  2269. Breakpoint 36 hit
  2270. CLASSPNP!ClassReleaseRemoveLock:
  2271. f76273c0 8bff mov edi,edi
  2272. 0: kd> g
  2273. *******************************************************************************
  2274. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2275. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2276. * Breakpoints exceeding this limit are ignored. *
  2277. * Please disable/clear breakpoints until you are within the supported limit. *
  2278. *******************************************************************************
  2279. *******************************************************************************
  2280. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2281. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2282. * Breakpoints exceeding this limit are ignored. *
  2283. * Please disable/clear breakpoints until you are within the supported limit. *
  2284. *******************************************************************************
  2285. Breakpoint 24 hit
  2286. CLASSPNP!ClassDeviceControl:
  2287. f76284d4 8bff mov edi,edi
  2288. 0: kd> g
  2289. *******************************************************************************
  2290. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2291. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2292. * Breakpoints exceeding this limit are ignored. *
  2293. * Please disable/clear breakpoints until you are within the supported limit. *
  2294. *******************************************************************************
  2295. *******************************************************************************
  2296. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2297. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2298. * Breakpoints exceeding this limit are ignored. *
  2299. * Please disable/clear breakpoints until you are within the supported limit. *
  2300. *******************************************************************************
  2301. Breakpoint 36 hit
  2302. CLASSPNP!ClassReleaseRemoveLock:
  2303. f76273c0 8bff mov edi,edi
  2304. 0: kd> g
  2305. *******************************************************************************
  2306. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2307. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2308. * Breakpoints exceeding this limit are ignored. *
  2309. * Please disable/clear breakpoints until you are within the supported limit. *
  2310. *******************************************************************************
  2311. *******************************************************************************
  2312. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2313. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2314. * Breakpoints exceeding this limit are ignored. *
  2315. * Please disable/clear breakpoints until you are within the supported limit. *
  2316. *******************************************************************************
  2317. Breakpoint 38 hit
  2318. CLASSPNP!ClassGetDescriptor:
  2319. f762f437 8bff mov edi,edi
  2320. 0: kd> g
  2321. *******************************************************************************
  2322. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2323. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2324. * Breakpoints exceeding this limit are ignored. *
  2325. * Please disable/clear breakpoints until you are within the supported limit. *
  2326. *******************************************************************************
  2327. *******************************************************************************
  2328. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2329. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2330. * Breakpoints exceeding this limit are ignored. *
  2331. * Please disable/clear breakpoints until you are within the supported limit. *
  2332. *******************************************************************************
  2333. Breakpoint 38 hit
  2334. CLASSPNP!ClassGetDescriptor:
  2335. f762f437 8bff mov edi,edi
  2336. 0: kd> g
  2337. *******************************************************************************
  2338. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2339. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2340. * Breakpoints exceeding this limit are ignored. *
  2341. * Please disable/clear breakpoints until you are within the supported limit. *
  2342. *******************************************************************************
  2343. *******************************************************************************
  2344. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2345. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2346. * Breakpoints exceeding this limit are ignored. *
  2347. * Please disable/clear breakpoints until you are within the supported limit. *
  2348. *******************************************************************************
  2349. Breakpoint 16 hit
  2350. disk!DiskInitFdo:
  2351. f74941a2 8bff mov edi,edi
  2352. 0: kd> r
  2353. eax=89bb99f4 ebx=89bbab01 ecx=00000000 edx=89b9e0b8 esi=89bbab90 edi=89bb99f0
  2354. eip=f74941a2 esp=f78a624c ebp=f78a6270 iopl=0 nv up ei pl zr na pe nc
  2355. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  2356. disk!DiskInitFdo:
  2357. f74941a2 8bff mov edi,edi
  2358. 0: kd> t
  2359. *******************************************************************************
  2360. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2361. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2362. * Breakpoints exceeding this limit are ignored. *
  2363. * Please disable/clear breakpoints until you are within the supported limit. *
  2364. *******************************************************************************
  2365. disk!DiskInitFdo+0x2:
  2366. f74941a4 55 push ebp
  2367. 0: kd> r
  2368. eax=89bb99f4 ebx=89bbab01 ecx=00000000 edx=89b9e0b8 esi=89bbab90 edi=89bb99f0
  2369. eip=f74941a4 esp=f78a624c ebp=f78a6270 iopl=0 nv up ei pl zr na pe nc
  2370. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  2371. disk!DiskInitFdo+0x2:
  2372. f74941a4 55 push ebp
  2373. 0: kd> t
  2374. *******************************************************************************
  2375. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2376. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2377. * Breakpoints exceeding this limit are ignored. *
  2378. * Please disable/clear breakpoints until you are within the supported limit. *
  2379. *******************************************************************************
  2380. disk!DiskInitFdo+0x3:
  2381. f74941a5 8bec mov ebp,esp
  2382. 0: kd>
  2383. *******************************************************************************
  2384. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2385. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2386. * Breakpoints exceeding this limit are ignored. *
  2387. * Please disable/clear breakpoints until you are within the supported limit. *
  2388. *******************************************************************************
  2389. disk!DiskInitFdo+0x5:
  2390. f74941a7 83ec24 sub esp,24h
  2391. 0: kd> r
  2392. eax=89bb99f4 ebx=89bbab01 ecx=00000000 edx=89b9e0b8 esi=89bbab90 edi=89bb99f0
  2393. eip=f74941a7 esp=f78a6248 ebp=f78a6248 iopl=0 nv up ei pl zr na pe nc
  2394. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  2395. disk!DiskInitFdo+0x5:
  2396. f74941a7 83ec24 sub esp,24h
  2397. 0: kd> t
  2398. *******************************************************************************
  2399. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2400. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2401. * Breakpoints exceeding this limit are ignored. *
  2402. * Please disable/clear breakpoints until you are within the supported limit. *
  2403. *******************************************************************************
  2404. disk!DiskInitFdo+0x8:
  2405. f74941aa 53 push ebx
  2406. 0: kd>
  2407. *******************************************************************************
  2408. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2409. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2410. * Breakpoints exceeding this limit are ignored. *
  2411. * Please disable/clear breakpoints until you are within the supported limit. *
  2412. *******************************************************************************
  2413. disk!DiskInitFdo+0x9:
  2414. f74941ab 56 push esi
  2415. 0: kd> r
  2416. eax=89bb99f4 ebx=89bbab01 ecx=00000000 edx=89b9e0b8 esi=89bbab90 edi=89bb99f0
  2417. eip=f74941ab esp=f78a6220 ebp=f78a6248 iopl=0 nv up ei ng nz na pe nc
  2418. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
  2419. disk!DiskInitFdo+0x9:
  2420. f74941ab 56 push esi
  2421. 0: kd> t
  2422. *******************************************************************************
  2423. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2424. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2425. * Breakpoints exceeding this limit are ignored. *
  2426. * Please disable/clear breakpoints until you are within the supported limit. *
  2427. *******************************************************************************
  2428. disk!DiskInitFdo+0xa:
  2429. f74941ac 57 push edi
  2430. 0: kd> t
  2431. *******************************************************************************
  2432. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2433. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2434. * Breakpoints exceeding this limit are ignored. *
  2435. * Please disable/clear breakpoints until you are within the supported limit. *
  2436. *******************************************************************************
  2437. disk!DiskInitFdo+0xb:
  2438. f74941ad 8b7d08 mov edi,dword ptr [ebp+8]
  2439. 0: kd> t
  2440. *******************************************************************************
  2441. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2442. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2443. * Breakpoints exceeding this limit are ignored. *
  2444. * Please disable/clear breakpoints until you are within the supported limit. *
  2445. *******************************************************************************
  2446. disk!DiskInitFdo+0xe:
  2447. f74941b0 8b5f28 mov ebx,dword ptr [edi+28h]
  2448. 0: kd> t
  2449. *******************************************************************************
  2450. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2451. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2452. * Breakpoints exceeding this limit are ignored. *
  2453. * Please disable/clear breakpoints until you are within the supported limit. *
  2454. *******************************************************************************
  2455. disk!DiskInitFdo+0x11:
  2456. f74941b3 8b7334 mov esi,dword ptr [ebx+34h]
  2457. 0: kd> t
  2458. *******************************************************************************
  2459. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2460. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2461. * Breakpoints exceeding this limit are ignored. *
  2462. * Please disable/clear breakpoints until you are within the supported limit. *
  2463. *******************************************************************************
  2464. disk!DiskInitFdo+0x14:
  2465. f74941b6 6a04 push 4
  2466. 0: kd> t
  2467. *******************************************************************************
  2468. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2469. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2470. * Breakpoints exceeding this limit are ignored. *
  2471. * Please disable/clear breakpoints until you are within the supported limit. *
  2472. *******************************************************************************
  2473. disk!DiskInitFdo+0x16:
  2474. f74941b8 53 push ebx
  2475. 0: kd> t
  2476. *******************************************************************************
  2477. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2478. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2479. * Breakpoints exceeding this limit are ignored. *
  2480. * Please disable/clear breakpoints until you are within the supported limit. *
  2481. *******************************************************************************
  2482. disk!DiskInitFdo+0x17:
  2483. f74941b9 8975f8 mov dword ptr [ebp-8],esi
  2484. 0: kd> t
  2485. *******************************************************************************
  2486. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2487. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2488. * Breakpoints exceeding this limit are ignored. *
  2489. * Please disable/clear breakpoints until you are within the supported limit. *
  2490. *******************************************************************************
  2491. disk!DiskInitFdo+0x1a:
  2492. f74941bc e87581ffff call disk!ClassInitializeSrbLookasideList (f748c336)
  2493. 0: kd> t
  2494. *******************************************************************************
  2495. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2496. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2497. * Breakpoints exceeding this limit are ignored. *
  2498. * Please disable/clear breakpoints until you are within the supported limit. *
  2499. *******************************************************************************
  2500. disk!ClassInitializeSrbLookasideList:
  2501. f748c336 ff2574d048f7 jmp dword ptr [disk!_imp__ClassInitializeSrbLookasideList (f748d074)]
  2502. 0: kd>
  2503. *******************************************************************************
  2504. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2505. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2506. * Breakpoints exceeding this limit are ignored. *
  2507. * Please disable/clear breakpoints until you are within the supported limit. *
  2508. *******************************************************************************
  2509. Breakpoint 93 hit
  2510. CLASSPNP!ClassInitializeSrbLookasideList:
  2511. f762ee75 8bff mov edi,edi
  2512. 0: kd> r
  2513. eax=89bb99f4 ebx=89bbab90 ecx=00000000 edx=89b9e0b8 esi=89bbae58 edi=89bbaad8
  2514. eip=f762ee75 esp=f78a620c ebp=f78a6248 iopl=0 nv up ei ng nz na pe nc
  2515. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
  2516. CLASSPNP!ClassInitializeSrbLookasideList:
  2517. f762ee75 8bff mov edi,edi
  2518. 0: kd> t
  2519. *******************************************************************************
  2520. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2521. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2522. * Breakpoints exceeding this limit are ignored. *
  2523. * Please disable/clear breakpoints until you are within the supported limit. *
  2524. *******************************************************************************
  2525. CLASSPNP!ClassInitializeSrbLookasideList+0x2:
  2526. f762ee77 55 push ebp
  2527. 0: kd> t
  2528. *******************************************************************************
  2529. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2530. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2531. * Breakpoints exceeding this limit are ignored. *
  2532. * Please disable/clear breakpoints until you are within the supported limit. *
  2533. *******************************************************************************
  2534. CLASSPNP!ClassInitializeSrbLookasideList+0x3:
  2535. f762ee78 8bec mov ebp,esp
  2536. 0: kd> g
  2537. *******************************************************************************
  2538. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2539. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2540. * Breakpoints exceeding this limit are ignored. *
  2541. * Please disable/clear breakpoints until you are within the supported limit. *
  2542. *******************************************************************************
  2543. Breakpoint 36 hit
  2544. CLASSPNP!ClassReleaseRemoveLock:
  2545. f76273c0 8bff mov edi,edi
  2546. 1: kd> g
  2547. *******************************************************************************
  2548. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2549. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2550. * Breakpoints exceeding this limit are ignored. *
  2551. * Please disable/clear breakpoints until you are within the supported limit. *
  2552. *******************************************************************************
  2553. *******************************************************************************
  2554. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2555. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2556. * Breakpoints exceeding this limit are ignored. *
  2557. * Please disable/clear breakpoints until you are within the supported limit. *
  2558. *******************************************************************************
  2559. Breakpoint 36 hit
  2560. CLASSPNP!ClassReleaseRemoveLock:
  2561. f76273c0 8bff mov edi,edi
  2562. 1: kd> g
  2563. *******************************************************************************
  2564. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2565. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2566. * Breakpoints exceeding this limit are ignored. *
  2567. * Please disable/clear breakpoints until you are within the supported limit. *
  2568. *******************************************************************************
  2569. *******************************************************************************
  2570. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2571. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2572. * Breakpoints exceeding this limit are ignored. *
  2573. * Please disable/clear breakpoints until you are within the supported limit. *
  2574. *******************************************************************************
  2575. Breakpoint 36 hit
  2576. CLASSPNP!ClassReleaseRemoveLock:
  2577. f76273c0 8bff mov edi,edi
  2578. 1: kd> g
  2579. *******************************************************************************
  2580. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2581. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2582. * Breakpoints exceeding this limit are ignored. *
  2583. * Please disable/clear breakpoints until you are within the supported limit. *
  2584. *******************************************************************************
  2585. *******************************************************************************
  2586. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2587. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2588. * Breakpoints exceeding this limit are ignored. *
  2589. * Please disable/clear breakpoints until you are within the supported limit. *
  2590. *******************************************************************************
  2591. Breakpoint 36 hit
  2592. CLASSPNP!ClassReleaseRemoveLock:
  2593. f76273c0 8bff mov edi,edi
  2594. 1: kd> g
  2595. *******************************************************************************
  2596. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2597. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2598. * Breakpoints exceeding this limit are ignored. *
  2599. * Please disable/clear breakpoints until you are within the supported limit. *
  2600. *******************************************************************************
  2601. *******************************************************************************
  2602. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2603. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2604. * Breakpoints exceeding this limit are ignored. *
  2605. * Please disable/clear breakpoints until you are within the supported limit. *
  2606. *******************************************************************************
  2607. Breakpoint 36 hit
  2608. CLASSPNP!ClassReleaseRemoveLock:
  2609. f76273c0 8bff mov edi,edi
  2610. 1: kd> g
  2611. *******************************************************************************
  2612. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2613. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2614. * Breakpoints exceeding this limit are ignored. *
  2615. * Please disable/clear breakpoints until you are within the supported limit. *
  2616. *******************************************************************************
  2617. *******************************************************************************
  2618. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2619. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2620. * Breakpoints exceeding this limit are ignored. *
  2621. * Please disable/clear breakpoints until you are within the supported limit. *
  2622. *******************************************************************************
  2623. Breakpoint 36 hit
  2624. CLASSPNP!ClassReleaseRemoveLock:
  2625. f76273c0 8bff mov edi,edi
  2626. 0: kd> g
  2627. *******************************************************************************
  2628. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2629. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2630. * Breakpoints exceeding this limit are ignored. *
  2631. * Please disable/clear breakpoints until you are within the supported limit. *
  2632. *******************************************************************************
  2633. *******************************************************************************
  2634. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2635. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2636. * Breakpoints exceeding this limit are ignored. *
  2637. * Please disable/clear breakpoints until you are within the supported limit. *
  2638. *******************************************************************************
  2639. Breakpoint 11 hit
  2640. nt!IoRegisterDeviceInterface:
  2641. 805d6dd4 8bff mov edi,edi
  2642. 0: kd> g
  2643. *******************************************************************************
  2644. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2645. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2646. * Breakpoints exceeding this limit are ignored. *
  2647. * Please disable/clear breakpoints until you are within the supported limit. *
  2648. *******************************************************************************
  2649. *******************************************************************************
  2650. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2651. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2652. * Breakpoints exceeding this limit are ignored. *
  2653. * Please disable/clear breakpoints until you are within the supported limit. *
  2654. *******************************************************************************
  2655. Breakpoint 12 hit
  2656. nt!IoSetDeviceInterfaceState:
  2657. 805d19d5 8bff mov edi,edi
  2658. 0: kd> g
  2659. *******************************************************************************
  2660. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2661. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2662. * Breakpoints exceeding this limit are ignored. *
  2663. * Please disable/clear breakpoints until you are within the supported limit. *
  2664. *******************************************************************************
  2665. *******************************************************************************
  2666. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2667. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2668. * Breakpoints exceeding this limit are ignored. *
  2669. * Please disable/clear breakpoints until you are within the supported limit. *
  2670. *******************************************************************************
  2671. Breakpoint 36 hit
  2672. CLASSPNP!ClassReleaseRemoveLock:
  2673. f76273c0 8bff mov edi,edi
  2674. 0: kd> g
  2675. *******************************************************************************
  2676. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2677. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2678. * Breakpoints exceeding this limit are ignored. *
  2679. * Please disable/clear breakpoints until you are within the supported limit. *
  2680. *******************************************************************************
  2681. *******************************************************************************
  2682. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2683. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2684. * Breakpoints exceeding this limit are ignored. *
  2685. * Please disable/clear breakpoints until you are within the supported limit. *
  2686. *******************************************************************************
  2687. Breakpoint 36 hit
  2688. CLASSPNP!ClassReleaseRemoveLock:
  2689. f76273c0 8bff mov edi,edi
  2690. 0: kd> g
  2691. *******************************************************************************
  2692. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2693. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2694. * Breakpoints exceeding this limit are ignored. *
  2695. * Please disable/clear breakpoints until you are within the supported limit. *
  2696. *******************************************************************************
  2697. *******************************************************************************
  2698. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2699. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2700. * Breakpoints exceeding this limit are ignored. *
  2701. * Please disable/clear breakpoints until you are within the supported limit. *
  2702. *******************************************************************************
  2703. Breakpoint 15 hit
  2704. disk!DiskStartFdo:
  2705. f7493aec 8bff mov edi,edi
  2706. 0: kd> g
  2707. *******************************************************************************
  2708. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2709. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2710. * Breakpoints exceeding this limit are ignored. *
  2711. * Please disable/clear breakpoints until you are within the supported limit. *
  2712. *******************************************************************************
  2713. *******************************************************************************
  2714. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2715. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2716. * Breakpoints exceeding this limit are ignored. *
  2717. * Please disable/clear breakpoints until you are within the supported limit. *
  2718. *******************************************************************************
  2719. Breakpoint 24 hit
  2720. CLASSPNP!ClassDeviceControl:
  2721. f76284d4 8bff mov edi,edi
  2722. 0: kd> g
  2723. *******************************************************************************
  2724. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2725. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2726. * Breakpoints exceeding this limit are ignored. *
  2727. * Please disable/clear breakpoints until you are within the supported limit. *
  2728. *******************************************************************************
  2729. *******************************************************************************
  2730. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2731. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2732. * Breakpoints exceeding this limit are ignored. *
  2733. * Please disable/clear breakpoints until you are within the supported limit. *
  2734. *******************************************************************************
  2735. Breakpoint 36 hit
  2736. CLASSPNP!ClassReleaseRemoveLock:
  2737. f76273c0 8bff mov edi,edi
  2738. 0: kd> g
  2739. *******************************************************************************
  2740. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2741. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2742. * Breakpoints exceeding this limit are ignored. *
  2743. * Please disable/clear breakpoints until you are within the supported limit. *
  2744. *******************************************************************************
  2745. *******************************************************************************
  2746. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2747. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2748. * Breakpoints exceeding this limit are ignored. *
  2749. * Please disable/clear breakpoints until you are within the supported limit. *
  2750. *******************************************************************************
  2751. Breakpoint 36 hit
  2752. CLASSPNP!ClassReleaseRemoveLock:
  2753. f76273c0 8bff mov edi,edi
  2754. 0: kd> g
  2755. *******************************************************************************
  2756. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2757. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2758. * Breakpoints exceeding this limit are ignored. *
  2759. * Please disable/clear breakpoints until you are within the supported limit. *
  2760. *******************************************************************************
  2761. *******************************************************************************
  2762. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2763. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2764. * Breakpoints exceeding this limit are ignored. *
  2765. * Please disable/clear breakpoints until you are within the supported limit. *
  2766. *******************************************************************************
  2767. Breakpoint 33 hit
  2768. CLASSPNP!ClasspRegisterMountedDeviceInterface:
  2769. f762ded6 8bff mov edi,edi
  2770. 0: kd> g
  2771. *******************************************************************************
  2772. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2773. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2774. * Breakpoints exceeding this limit are ignored. *
  2775. * Please disable/clear breakpoints until you are within the supported limit. *
  2776. *******************************************************************************
  2777. *******************************************************************************
  2778. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2779. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2780. * Breakpoints exceeding this limit are ignored. *
  2781. * Please disable/clear breakpoints until you are within the supported limit. *
  2782. *******************************************************************************
  2783. Breakpoint 11 hit
  2784. nt!IoRegisterDeviceInterface:
  2785. 805d6dd4 8bff mov edi,edi
  2786. 0: kd> g
  2787. *******************************************************************************
  2788. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2789. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2790. * Breakpoints exceeding this limit are ignored. *
  2791. * Please disable/clear breakpoints until you are within the supported limit. *
  2792. *******************************************************************************
  2793. *******************************************************************************
  2794. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2795. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2796. * Breakpoints exceeding this limit are ignored. *
  2797. * Please disable/clear breakpoints until you are within the supported limit. *
  2798. *******************************************************************************
  2799. Breakpoint 12 hit
  2800. nt!IoSetDeviceInterfaceState:
  2801. 805d19d5 8bff mov edi,edi
  2802. 0: kd> g
  2803. *******************************************************************************
  2804. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2805. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2806. * Breakpoints exceeding this limit are ignored. *
  2807. * Please disable/clear breakpoints until you are within the supported limit. *
  2808. *******************************************************************************
  2809. *******************************************************************************
  2810. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2811. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2812. * Breakpoints exceeding this limit are ignored. *
  2813. * Please disable/clear breakpoints until you are within the supported limit. *
  2814. *******************************************************************************
  2815. Breakpoint 36 hit
  2816. CLASSPNP!ClassReleaseRemoveLock:
  2817. f76273c0 8bff mov edi,edi
  2818. 0: kd> g
  2819. *******************************************************************************
  2820. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2821. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2822. * Breakpoints exceeding this limit are ignored. *
  2823. * Please disable/clear breakpoints until you are within the supported limit. *
  2824. *******************************************************************************
  2825. *******************************************************************************
  2826. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2827. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2828. * Breakpoints exceeding this limit are ignored. *
  2829. * Please disable/clear breakpoints until you are within the supported limit. *
  2830. *******************************************************************************
  2831. Breakpoint 24 hit
  2832. CLASSPNP!ClassDeviceControl:
  2833. f76284d4 8bff mov edi,edi
  2834. 0: kd> g
  2835. *******************************************************************************
  2836. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2837. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2838. * Breakpoints exceeding this limit are ignored. *
  2839. * Please disable/clear breakpoints until you are within the supported limit. *
  2840. *******************************************************************************
  2841. *******************************************************************************
  2842. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2843. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2844. * Breakpoints exceeding this limit are ignored. *
  2845. * Please disable/clear breakpoints until you are within the supported limit. *
  2846. *******************************************************************************
  2847. Breakpoint 36 hit
  2848. CLASSPNP!ClassReleaseRemoveLock:
  2849. f76273c0 8bff mov edi,edi
  2850. 0: kd> g
  2851. *******************************************************************************
  2852. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2853. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2854. * Breakpoints exceeding this limit are ignored. *
  2855. * Please disable/clear breakpoints until you are within the supported limit. *
  2856. *******************************************************************************
  2857. *******************************************************************************
  2858. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2859. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2860. * Breakpoints exceeding this limit are ignored. *
  2861. * Please disable/clear breakpoints until you are within the supported limit. *
  2862. *******************************************************************************
  2863. Breakpoint 36 hit
  2864. CLASSPNP!ClassReleaseRemoveLock:
  2865. f76273c0 8bff mov edi,edi
  2866. 0: kd> g
  2867. *******************************************************************************
  2868. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2869. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2870. * Breakpoints exceeding this limit are ignored. *
  2871. * Please disable/clear breakpoints until you are within the supported limit. *
  2872. *******************************************************************************
  2873. *******************************************************************************
  2874. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2875. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2876. * Breakpoints exceeding this limit are ignored. *
  2877. * Please disable/clear breakpoints until you are within the supported limit. *
  2878. *******************************************************************************
  2879. Breakpoint 36 hit
  2880. CLASSPNP!ClassReleaseRemoveLock:
  2881. f76273c0 8bff mov edi,edi
  2882. 1: kd> g
  2883. *******************************************************************************
  2884. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2885. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2886. * Breakpoints exceeding this limit are ignored. *
  2887. * Please disable/clear breakpoints until you are within the supported limit. *
  2888. *******************************************************************************
  2889. *******************************************************************************
  2890. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2891. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2892. * Breakpoints exceeding this limit are ignored. *
  2893. * Please disable/clear breakpoints until you are within the supported limit. *
  2894. *******************************************************************************
  2895. Breakpoint 36 hit
  2896. CLASSPNP!ClassReleaseRemoveLock:
  2897. f76273c0 8bff mov edi,edi
  2898. 1: kd>
  2899. *******************************************************************************
  2900. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2901. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2902. * Breakpoints exceeding this limit are ignored. *
  2903. * Please disable/clear breakpoints until you are within the supported limit. *
  2904. *******************************************************************************
  2905. *******************************************************************************
  2906. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2907. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2908. * Breakpoints exceeding this limit are ignored. *
  2909. * Please disable/clear breakpoints until you are within the supported limit. *
  2910. *******************************************************************************
  2911. Breakpoint 36 hit
  2912. CLASSPNP!ClassReleaseRemoveLock:
  2913. f76273c0 8bff mov edi,edi
  2914. 1: kd> g
  2915. *******************************************************************************
  2916. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2917. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2918. * Breakpoints exceeding this limit are ignored. *
  2919. * Please disable/clear breakpoints until you are within the supported limit. *
  2920. *******************************************************************************
  2921. *******************************************************************************
  2922. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2923. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2924. * Breakpoints exceeding this limit are ignored. *
  2925. * Please disable/clear breakpoints until you are within the supported limit. *
  2926. *******************************************************************************
  2927. Breakpoint 36 hit
  2928. CLASSPNP!ClassReleaseRemoveLock:
  2929. f76273c0 8bff mov edi,edi
  2930. 1: kd> g
  2931. *******************************************************************************
  2932. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2933. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2934. * Breakpoints exceeding this limit are ignored. *
  2935. * Please disable/clear breakpoints until you are within the supported limit. *
  2936. *******************************************************************************
  2937. *******************************************************************************
  2938. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2939. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2940. * Breakpoints exceeding this limit are ignored. *
  2941. * Please disable/clear breakpoints until you are within the supported limit. *
  2942. *******************************************************************************
  2943. Breakpoint 36 hit
  2944. CLASSPNP!ClassReleaseRemoveLock:
  2945. f76273c0 8bff mov edi,edi
  2946. 0: kd> g
  2947. *******************************************************************************
  2948. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2949. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2950. * Breakpoints exceeding this limit are ignored. *
  2951. * Please disable/clear breakpoints until you are within the supported limit. *
  2952. *******************************************************************************
  2953. *******************************************************************************
  2954. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2955. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2956. * Breakpoints exceeding this limit are ignored. *
  2957. * Please disable/clear breakpoints until you are within the supported limit. *
  2958. *******************************************************************************
  2959. Breakpoint 24 hit
  2960. CLASSPNP!ClassDeviceControl:
  2961. f76284d4 8bff mov edi,edi
  2962. 0: kd> g
  2963. *******************************************************************************
  2964. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2965. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2966. * Breakpoints exceeding this limit are ignored. *
  2967. * Please disable/clear breakpoints until you are within the supported limit. *
  2968. *******************************************************************************
  2969. *******************************************************************************
  2970. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2971. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2972. * Breakpoints exceeding this limit are ignored. *
  2973. * Please disable/clear breakpoints until you are within the supported limit. *
  2974. *******************************************************************************
  2975. Breakpoint 36 hit
  2976. CLASSPNP!ClassReleaseRemoveLock:
  2977. f76273c0 8bff mov edi,edi
  2978. 0: kd> g
  2979. *******************************************************************************
  2980. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2981. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2982. * Breakpoints exceeding this limit are ignored. *
  2983. * Please disable/clear breakpoints until you are within the supported limit. *
  2984. *******************************************************************************
  2985. *******************************************************************************
  2986. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  2987. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2988. * Breakpoints exceeding this limit are ignored. *
  2989. * Please disable/clear breakpoints until you are within the supported limit. *
  2990. *******************************************************************************
  2991. Breakpoint 24 hit
  2992. CLASSPNP!ClassDeviceControl:
  2993. f76284d4 8bff mov edi,edi
  2994. 0: kd> g
  2995. *******************************************************************************
  2996. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  2997. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  2998. * Breakpoints exceeding this limit are ignored. *
  2999. * Please disable/clear breakpoints until you are within the supported limit. *
  3000. *******************************************************************************
  3001. *******************************************************************************
  3002. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3003. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3004. * Breakpoints exceeding this limit are ignored. *
  3005. * Please disable/clear breakpoints until you are within the supported limit. *
  3006. *******************************************************************************
  3007. Breakpoint 36 hit
  3008. CLASSPNP!ClassReleaseRemoveLock:
  3009. f76273c0 8bff mov edi,edi
  3010. 0: kd> g
  3011. *******************************************************************************
  3012. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3013. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3014. * Breakpoints exceeding this limit are ignored. *
  3015. * Please disable/clear breakpoints until you are within the supported limit. *
  3016. *******************************************************************************
  3017. *******************************************************************************
  3018. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3019. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3020. * Breakpoints exceeding this limit are ignored. *
  3021. * Please disable/clear breakpoints until you are within the supported limit. *
  3022. *******************************************************************************
  3023. Breakpoint 36 hit
  3024. CLASSPNP!ClassReleaseRemoveLock:
  3025. f76273c0 8bff mov edi,edi
  3026. 1: kd> g
  3027. *******************************************************************************
  3028. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3029. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3030. * Breakpoints exceeding this limit are ignored. *
  3031. * Please disable/clear breakpoints until you are within the supported limit. *
  3032. *******************************************************************************
  3033. *******************************************************************************
  3034. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3035. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3036. * Breakpoints exceeding this limit are ignored. *
  3037. * Please disable/clear breakpoints until you are within the supported limit. *
  3038. *******************************************************************************
  3039. Breakpoint 24 hit
  3040. CLASSPNP!ClassDeviceControl:
  3041. f76284d4 8bff mov edi,edi
  3042. 1: kd> g
  3043. *******************************************************************************
  3044. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3045. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3046. * Breakpoints exceeding this limit are ignored. *
  3047. * Please disable/clear breakpoints until you are within the supported limit. *
  3048. *******************************************************************************
  3049. *******************************************************************************
  3050. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3051. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3052. * Breakpoints exceeding this limit are ignored. *
  3053. * Please disable/clear breakpoints until you are within the supported limit. *
  3054. *******************************************************************************
  3055. Breakpoint 36 hit
  3056. CLASSPNP!ClassReleaseRemoveLock:
  3057. f76273c0 8bff mov edi,edi
  3058. 1: kd> g
  3059. *******************************************************************************
  3060. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3061. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3062. * Breakpoints exceeding this limit are ignored. *
  3063. * Please disable/clear breakpoints until you are within the supported limit. *
  3064. *******************************************************************************
  3065. *******************************************************************************
  3066. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3067. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3068. * Breakpoints exceeding this limit are ignored. *
  3069. * Please disable/clear breakpoints until you are within the supported limit. *
  3070. *******************************************************************************
  3071. Breakpoint 24 hit
  3072. CLASSPNP!ClassDeviceControl:
  3073. f76284d4 8bff mov edi,edi
  3074. 1: kd> g
  3075. *******************************************************************************
  3076. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3077. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3078. * Breakpoints exceeding this limit are ignored. *
  3079. * Please disable/clear breakpoints until you are within the supported limit. *
  3080. *******************************************************************************
  3081. *******************************************************************************
  3082. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3083. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3084. * Breakpoints exceeding this limit are ignored. *
  3085. * Please disable/clear breakpoints until you are within the supported limit. *
  3086. *******************************************************************************
  3087. Breakpoint 36 hit
  3088. CLASSPNP!ClassReleaseRemoveLock:
  3089. f76273c0 8bff mov edi,edi
  3090. 1: kd> g
  3091. *******************************************************************************
  3092. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3093. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3094. * Breakpoints exceeding this limit are ignored. *
  3095. * Please disable/clear breakpoints until you are within the supported limit. *
  3096. *******************************************************************************
  3097. *******************************************************************************
  3098. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3099. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3100. * Breakpoints exceeding this limit are ignored. *
  3101. * Please disable/clear breakpoints until you are within the supported limit. *
  3102. *******************************************************************************
  3103. Breakpoint 24 hit
  3104. CLASSPNP!ClassDeviceControl:
  3105. f76284d4 8bff mov edi,edi
  3106. 1: kd> g
  3107. *******************************************************************************
  3108. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3109. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3110. * Breakpoints exceeding this limit are ignored. *
  3111. * Please disable/clear breakpoints until you are within the supported limit. *
  3112. *******************************************************************************
  3113. *******************************************************************************
  3114. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3115. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3116. * Breakpoints exceeding this limit are ignored. *
  3117. * Please disable/clear breakpoints until you are within the supported limit. *
  3118. *******************************************************************************
  3119. Breakpoint 36 hit
  3120. CLASSPNP!ClassReleaseRemoveLock:
  3121. f76273c0 8bff mov edi,edi
  3122. 1: kd> g
  3123. *******************************************************************************
  3124. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3125. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3126. * Breakpoints exceeding this limit are ignored. *
  3127. * Please disable/clear breakpoints until you are within the supported limit. *
  3128. *******************************************************************************
  3129. *******************************************************************************
  3130. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3131. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3132. * Breakpoints exceeding this limit are ignored. *
  3133. * Please disable/clear breakpoints until you are within the supported limit. *
  3134. *******************************************************************************
  3135. Breakpoint 24 hit
  3136. CLASSPNP!ClassDeviceControl:
  3137. f76284d4 8bff mov edi,edi
  3138. 1: kd> g
  3139. *******************************************************************************
  3140. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3141. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3142. * Breakpoints exceeding this limit are ignored. *
  3143. * Please disable/clear breakpoints until you are within the supported limit. *
  3144. *******************************************************************************
  3145. *******************************************************************************
  3146. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3147. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3148. * Breakpoints exceeding this limit are ignored. *
  3149. * Please disable/clear breakpoints until you are within the supported limit. *
  3150. *******************************************************************************
  3151. Breakpoint 36 hit
  3152. CLASSPNP!ClassReleaseRemoveLock:
  3153. f76273c0 8bff mov edi,edi
  3154. 1: kd> g
  3155. *******************************************************************************
  3156. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3157. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3158. * Breakpoints exceeding this limit are ignored. *
  3159. * Please disable/clear breakpoints until you are within the supported limit. *
  3160. *******************************************************************************
  3161. *******************************************************************************
  3162. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3163. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3164. * Breakpoints exceeding this limit are ignored. *
  3165. * Please disable/clear breakpoints until you are within the supported limit. *
  3166. *******************************************************************************
  3167. Breakpoint 24 hit
  3168. CLASSPNP!ClassDeviceControl:
  3169. f76284d4 8bff mov edi,edi
  3170. 1: kd> g
  3171. *******************************************************************************
  3172. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3173. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3174. * Breakpoints exceeding this limit are ignored. *
  3175. * Please disable/clear breakpoints until you are within the supported limit. *
  3176. *******************************************************************************
  3177. *******************************************************************************
  3178. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3179. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3180. * Breakpoints exceeding this limit are ignored. *
  3181. * Please disable/clear breakpoints until you are within the supported limit. *
  3182. *******************************************************************************
  3183. Breakpoint 36 hit
  3184. CLASSPNP!ClassReleaseRemoveLock:
  3185. f76273c0 8bff mov edi,edi
  3186. 1: kd> g
  3187. *******************************************************************************
  3188. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3189. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3190. * Breakpoints exceeding this limit are ignored. *
  3191. * Please disable/clear breakpoints until you are within the supported limit. *
  3192. *******************************************************************************
  3193. *******************************************************************************
  3194. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3195. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3196. * Breakpoints exceeding this limit are ignored. *
  3197. * Please disable/clear breakpoints until you are within the supported limit. *
  3198. *******************************************************************************
  3199. Breakpoint 24 hit
  3200. CLASSPNP!ClassDeviceControl:
  3201. f76284d4 8bff mov edi,edi
  3202. 1: kd> g
  3203. *******************************************************************************
  3204. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3205. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3206. * Breakpoints exceeding this limit are ignored. *
  3207. * Please disable/clear breakpoints until you are within the supported limit. *
  3208. *******************************************************************************
  3209. *******************************************************************************
  3210. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3211. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3212. * Breakpoints exceeding this limit are ignored. *
  3213. * Please disable/clear breakpoints until you are within the supported limit. *
  3214. *******************************************************************************
  3215. Breakpoint 36 hit
  3216. CLASSPNP!ClassReleaseRemoveLock:
  3217. f76273c0 8bff mov edi,edi
  3218. 1: kd> g
  3219. *******************************************************************************
  3220. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3221. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3222. * Breakpoints exceeding this limit are ignored. *
  3223. * Please disable/clear breakpoints until you are within the supported limit. *
  3224. *******************************************************************************
  3225. *******************************************************************************
  3226. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3227. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3228. * Breakpoints exceeding this limit are ignored. *
  3229. * Please disable/clear breakpoints until you are within the supported limit. *
  3230. *******************************************************************************
  3231. Breakpoint 24 hit
  3232. CLASSPNP!ClassDeviceControl:
  3233. f76284d4 8bff mov edi,edi
  3234. 1: kd> g
  3235. *******************************************************************************
  3236. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3237. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3238. * Breakpoints exceeding this limit are ignored. *
  3239. * Please disable/clear breakpoints until you are within the supported limit. *
  3240. *******************************************************************************
  3241. *******************************************************************************
  3242. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3243. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3244. * Breakpoints exceeding this limit are ignored. *
  3245. * Please disable/clear breakpoints until you are within the supported limit. *
  3246. *******************************************************************************
  3247. Breakpoint 36 hit
  3248. CLASSPNP!ClassReleaseRemoveLock:
  3249. f76273c0 8bff mov edi,edi
  3250. 1: kd> g
  3251. *******************************************************************************
  3252. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3253. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3254. * Breakpoints exceeding this limit are ignored. *
  3255. * Please disable/clear breakpoints until you are within the supported limit. *
  3256. *******************************************************************************
  3257. *******************************************************************************
  3258. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3259. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3260. * Breakpoints exceeding this limit are ignored. *
  3261. * Please disable/clear breakpoints until you are within the supported limit. *
  3262. *******************************************************************************
  3263. Breakpoint 36 hit
  3264. CLASSPNP!ClassReleaseRemoveLock:
  3265. f76273c0 8bff mov edi,edi
  3266. 1: kd> g
  3267. *******************************************************************************
  3268. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3269. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3270. * Breakpoints exceeding this limit are ignored. *
  3271. * Please disable/clear breakpoints until you are within the supported limit. *
  3272. *******************************************************************************
  3273. *******************************************************************************
  3274. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3275. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3276. * Breakpoints exceeding this limit are ignored. *
  3277. * Please disable/clear breakpoints until you are within the supported limit. *
  3278. *******************************************************************************
  3279. Breakpoint 36 hit
  3280. CLASSPNP!ClassReleaseRemoveLock:
  3281. f76273c0 8bff mov edi,edi
  3282. 1: kd> g
  3283. *******************************************************************************
  3284. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3285. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3286. * Breakpoints exceeding this limit are ignored. *
  3287. * Please disable/clear breakpoints until you are within the supported limit. *
  3288. *******************************************************************************
  3289. *******************************************************************************
  3290. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3291. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3292. * Breakpoints exceeding this limit are ignored. *
  3293. * Please disable/clear breakpoints until you are within the supported limit. *
  3294. *******************************************************************************
  3295. Breakpoint 24 hit
  3296. CLASSPNP!ClassDeviceControl:
  3297. f76284d4 8bff mov edi,edi
  3298. 1: kd> g
  3299. *******************************************************************************
  3300. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3301. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3302. * Breakpoints exceeding this limit are ignored. *
  3303. * Please disable/clear breakpoints until you are within the supported limit. *
  3304. *******************************************************************************
  3305. *******************************************************************************
  3306. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3307. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3308. * Breakpoints exceeding this limit are ignored. *
  3309. * Please disable/clear breakpoints until you are within the supported limit. *
  3310. *******************************************************************************
  3311. Breakpoint 36 hit
  3312. CLASSPNP!ClassReleaseRemoveLock:
  3313. f76273c0 8bff mov edi,edi
  3314. 1: kd> g
  3315. *******************************************************************************
  3316. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3317. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3318. * Breakpoints exceeding this limit are ignored. *
  3319. * Please disable/clear breakpoints until you are within the supported limit. *
  3320. *******************************************************************************
  3321. *******************************************************************************
  3322. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3323. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3324. * Breakpoints exceeding this limit are ignored. *
  3325. * Please disable/clear breakpoints until you are within the supported limit. *
  3326. *******************************************************************************
  3327. Breakpoint 36 hit
  3328. CLASSPNP!ClassReleaseRemoveLock:
  3329. f76273c0 8bff mov edi,edi
  3330. 1: kd> dt _DEVICE_OBJECT
  3331. nt!_DEVICE_OBJECT
  3332. +0x000 Type : Int2B
  3333. +0x002 Size : Uint2B
  3334. +0x004 ReferenceCount : Int4B
  3335. +0x008 DriverObject : Ptr32 _DRIVER_OBJECT
  3336. +0x00c NextDevice : Ptr32 _DEVICE_OBJECT
  3337. +0x010 AttachedDevice : Ptr32 _DEVICE_OBJECT
  3338. +0x014 CurrentIrp : Ptr32 _IRP
  3339. +0x018 Timer : Ptr32 _IO_TIMER
  3340. +0x01c Flags : Uint4B
  3341. +0x020 Characteristics : Uint4B
  3342. +0x024 Vpb : Ptr32 _VPB
  3343. +0x028 DeviceExtension : Ptr32 Void
  3344. +0x02c DeviceType : Uint4B
  3345. +0x030 StackSize : Char
  3346. +0x034 Queue : __unnamed
  3347. +0x05c AlignmentRequirement : Uint4B
  3348. +0x060 DeviceQueue : _KDEVICE_QUEUE
  3349. +0x074 Dpc : _KDPC
  3350. +0x094 ActiveThreadCount : Uint4B
  3351. +0x098 SecurityDescriptor : Ptr32 Void
  3352. +0x09c DeviceLock : _KEVENT
  3353. +0x0ac SectorSize : Uint2B
  3354. +0x0ae Spare1 : Uint2B
  3355. +0x0b0 DeviceObjectExtension : Ptr32 _DEVOBJ_EXTENSION
  3356. +0x0b4 Reserved : Ptr32 Void
  3357. 1: kd> g
  3358. *******************************************************************************
  3359. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3360. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3361. * Breakpoints exceeding this limit are ignored. *
  3362. * Please disable/clear breakpoints until you are within the supported limit. *
  3363. *******************************************************************************
  3364. *******************************************************************************
  3365. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3366. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3367. * Breakpoints exceeding this limit are ignored. *
  3368. * Please disable/clear breakpoints until you are within the supported limit. *
  3369. *******************************************************************************
  3370. Breakpoint 36 hit
  3371. CLASSPNP!ClassReleaseRemoveLock:
  3372. f76273c0 8bff mov edi,edi
  3373. 0: kd> g
  3374. *******************************************************************************
  3375. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3376. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3377. * Breakpoints exceeding this limit are ignored. *
  3378. * Please disable/clear breakpoints until you are within the supported limit. *
  3379. *******************************************************************************
  3380. *******************************************************************************
  3381. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3382. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3383. * Breakpoints exceeding this limit are ignored. *
  3384. * Please disable/clear breakpoints until you are within the supported limit. *
  3385. *******************************************************************************
  3386. Breakpoint 36 hit
  3387. CLASSPNP!ClassReleaseRemoveLock:
  3388. f76273c0 8bff mov edi,edi
  3389. 0: kd> g
  3390. *******************************************************************************
  3391. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3392. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3393. * Breakpoints exceeding this limit are ignored. *
  3394. * Please disable/clear breakpoints until you are within the supported limit. *
  3395. *******************************************************************************
  3396. *******************************************************************************
  3397. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3398. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3399. * Breakpoints exceeding this limit are ignored. *
  3400. * Please disable/clear breakpoints until you are within the supported limit. *
  3401. *******************************************************************************
  3402. Breakpoint 36 hit
  3403. CLASSPNP!ClassReleaseRemoveLock:
  3404. f76273c0 8bff mov edi,edi
  3405. 0: kd> g
  3406. *******************************************************************************
  3407. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3408. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3409. * Breakpoints exceeding this limit are ignored. *
  3410. * Please disable/clear breakpoints until you are within the supported limit. *
  3411. *******************************************************************************
  3412. *******************************************************************************
  3413. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3414. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3415. * Breakpoints exceeding this limit are ignored. *
  3416. * Please disable/clear breakpoints until you are within the supported limit. *
  3417. *******************************************************************************
  3418. Breakpoint 36 hit
  3419. CLASSPNP!ClassReleaseRemoveLock:
  3420. f76273c0 8bff mov edi,edi
  3421. 1: kd> g
  3422. *******************************************************************************
  3423. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3424. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3425. * Breakpoints exceeding this limit are ignored. *
  3426. * Please disable/clear breakpoints until you are within the supported limit. *
  3427. *******************************************************************************
  3428. *******************************************************************************
  3429. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3430. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3431. * Breakpoints exceeding this limit are ignored. *
  3432. * Please disable/clear breakpoints until you are within the supported limit. *
  3433. *******************************************************************************
  3434. Breakpoint 24 hit
  3435. CLASSPNP!ClassDeviceControl:
  3436. f76284d4 8bff mov edi,edi
  3437. 1: kd> g
  3438. *******************************************************************************
  3439. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3440. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3441. * Breakpoints exceeding this limit are ignored. *
  3442. * Please disable/clear breakpoints until you are within the supported limit. *
  3443. *******************************************************************************
  3444. *******************************************************************************
  3445. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3446. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3447. * Breakpoints exceeding this limit are ignored. *
  3448. * Please disable/clear breakpoints until you are within the supported limit. *
  3449. *******************************************************************************
  3450. Breakpoint 36 hit
  3451. CLASSPNP!ClassReleaseRemoveLock:
  3452. f76273c0 8bff mov edi,edi
  3453. 1: kd> g
  3454. *******************************************************************************
  3455. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3456. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3457. * Breakpoints exceeding this limit are ignored. *
  3458. * Please disable/clear breakpoints until you are within the supported limit. *
  3459. *******************************************************************************
  3460. *******************************************************************************
  3461. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3462. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3463. * Breakpoints exceeding this limit are ignored. *
  3464. * Please disable/clear breakpoints until you are within the supported limit. *
  3465. *******************************************************************************
  3466. Breakpoint 36 hit
  3467. CLASSPNP!ClassReleaseRemoveLock:
  3468. f76273c0 8bff mov edi,edi
  3469. 1: kd> g
  3470. *******************************************************************************
  3471. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3472. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3473. * Breakpoints exceeding this limit are ignored. *
  3474. * Please disable/clear breakpoints until you are within the supported limit. *
  3475. *******************************************************************************
  3476. *******************************************************************************
  3477. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3478. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3479. * Breakpoints exceeding this limit are ignored. *
  3480. * Please disable/clear breakpoints until you are within the supported limit. *
  3481. *******************************************************************************
  3482. Breakpoint 36 hit
  3483. CLASSPNP!ClassReleaseRemoveLock:
  3484. f76273c0 8bff mov edi,edi
  3485. 1: kd> g
  3486. *******************************************************************************
  3487. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3488. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3489. * Breakpoints exceeding this limit are ignored. *
  3490. * Please disable/clear breakpoints until you are within the supported limit. *
  3491. *******************************************************************************
  3492. *******************************************************************************
  3493. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3494. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3495. * Breakpoints exceeding this limit are ignored. *
  3496. * Please disable/clear breakpoints until you are within the supported limit. *
  3497. *******************************************************************************
  3498. Breakpoint 36 hit
  3499. CLASSPNP!ClassReleaseRemoveLock:
  3500. f76273c0 8bff mov edi,edi
  3501. 1: kd> r
  3502. eax=89ba2a84 ebx=89bbab90 ecx=00000000 edx=89ba29f0 esi=89ba2ac4 edi=89ba2aa0
  3503. eip=f76273c0 esp=f78ea830 ebp=f78ea858 iopl=0 nv up ei pl nz na po nc
  3504. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
  3505. CLASSPNP!ClassReleaseRemoveLock:
  3506. f76273c0 8bff mov edi,edi
  3507. 1: kd> g
  3508. *******************************************************************************
  3509. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3510. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3511. * Breakpoints exceeding this limit are ignored. *
  3512. * Please disable/clear breakpoints until you are within the supported limit. *
  3513. *******************************************************************************
  3514. *******************************************************************************
  3515. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3516. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3517. * Breakpoints exceeding this limit are ignored. *
  3518. * Please disable/clear breakpoints until you are within the supported limit. *
  3519. *******************************************************************************
  3520. Breakpoint 36 hit
  3521. CLASSPNP!ClassReleaseRemoveLock:
  3522. f76273c0 8bff mov edi,edi
  3523. 1: kd> r eax
  3524. eax=00000000
  3525. 1: kd> g
  3526. *******************************************************************************
  3527. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3528. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3529. * Breakpoints exceeding this limit are ignored. *
  3530. * Please disable/clear breakpoints until you are within the supported limit. *
  3531. *******************************************************************************
  3532. *******************************************************************************
  3533. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3534. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3535. * Breakpoints exceeding this limit are ignored. *
  3536. * Please disable/clear breakpoints until you are within the supported limit. *
  3537. *******************************************************************************
  3538. Breakpoint 36 hit
  3539. CLASSPNP!ClassReleaseRemoveLock:
  3540. f76273c0 8bff mov edi,edi
  3541. 1: kd> g
  3542. *******************************************************************************
  3543. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3544. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3545. * Breakpoints exceeding this limit are ignored. *
  3546. * Please disable/clear breakpoints until you are within the supported limit. *
  3547. *******************************************************************************
  3548. *******************************************************************************
  3549. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3550. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3551. * Breakpoints exceeding this limit are ignored. *
  3552. * Please disable/clear breakpoints until you are within the supported limit. *
  3553. *******************************************************************************
  3554. Breakpoint 24 hit
  3555. CLASSPNP!ClassDeviceControl:
  3556. f76284d4 8bff mov edi,edi
  3557. 1: kd> g
  3558. *******************************************************************************
  3559. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3560. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3561. * Breakpoints exceeding this limit are ignored. *
  3562. * Please disable/clear breakpoints until you are within the supported limit. *
  3563. *******************************************************************************
  3564. *******************************************************************************
  3565. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3566. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3567. * Breakpoints exceeding this limit are ignored. *
  3568. * Please disable/clear breakpoints until you are within the supported limit. *
  3569. *******************************************************************************
  3570. Breakpoint 36 hit
  3571. CLASSPNP!ClassReleaseRemoveLock:
  3572. f76273c0 8bff mov edi,edi
  3573. 1: kd>
  3574. *******************************************************************************
  3575. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3576. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3577. * Breakpoints exceeding this limit are ignored. *
  3578. * Please disable/clear breakpoints until you are within the supported limit. *
  3579. *******************************************************************************
  3580. *******************************************************************************
  3581. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3582. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3583. * Breakpoints exceeding this limit are ignored. *
  3584. * Please disable/clear breakpoints until you are within the supported limit. *
  3585. *******************************************************************************
  3586. Breakpoint 36 hit
  3587. CLASSPNP!ClassReleaseRemoveLock:
  3588. f76273c0 8bff mov edi,edi
  3589. 1: kd> g
  3590. *******************************************************************************
  3591. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3592. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3593. * Breakpoints exceeding this limit are ignored. *
  3594. * Please disable/clear breakpoints until you are within the supported limit. *
  3595. *******************************************************************************
  3596. *******************************************************************************
  3597. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3598. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3599. * Breakpoints exceeding this limit are ignored. *
  3600. * Please disable/clear breakpoints until you are within the supported limit. *
  3601. *******************************************************************************
  3602. Breakpoint 36 hit
  3603. CLASSPNP!ClassReleaseRemoveLock:
  3604. f76273c0 8bff mov edi,edi
  3605. 1: kd> g
  3606. *******************************************************************************
  3607. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3608. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3609. * Breakpoints exceeding this limit are ignored. *
  3610. * Please disable/clear breakpoints until you are within the supported limit. *
  3611. *******************************************************************************
  3612. *******************************************************************************
  3613. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3614. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3615. * Breakpoints exceeding this limit are ignored. *
  3616. * Please disable/clear breakpoints until you are within the supported limit. *
  3617. *******************************************************************************
  3618. Breakpoint 36 hit
  3619. CLASSPNP!ClassReleaseRemoveLock:
  3620. f76273c0 8bff mov edi,edi
  3621. 1: kd> g
  3622. *******************************************************************************
  3623. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3624. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3625. * Breakpoints exceeding this limit are ignored. *
  3626. * Please disable/clear breakpoints until you are within the supported limit. *
  3627. *******************************************************************************
  3628. *******************************************************************************
  3629. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3630. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3631. * Breakpoints exceeding this limit are ignored. *
  3632. * Please disable/clear breakpoints until you are within the supported limit. *
  3633. *******************************************************************************
  3634. Breakpoint 36 hit
  3635. CLASSPNP!ClassReleaseRemoveLock:
  3636. f76273c0 8bff mov edi,edi
  3637. 1: kd> g
  3638. *******************************************************************************
  3639. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3640. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3641. * Breakpoints exceeding this limit are ignored. *
  3642. * Please disable/clear breakpoints until you are within the supported limit. *
  3643. *******************************************************************************
  3644. *******************************************************************************
  3645. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3646. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3647. * Breakpoints exceeding this limit are ignored. *
  3648. * Please disable/clear breakpoints until you are within the supported limit. *
  3649. *******************************************************************************
  3650. Breakpoint 24 hit
  3651. CLASSPNP!ClassDeviceControl:
  3652. f76284d4 8bff mov edi,edi
  3653. 1: kd> g
  3654. *******************************************************************************
  3655. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3656. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3657. * Breakpoints exceeding this limit are ignored. *
  3658. * Please disable/clear breakpoints until you are within the supported limit. *
  3659. *******************************************************************************
  3660. *******************************************************************************
  3661. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3662. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3663. * Breakpoints exceeding this limit are ignored. *
  3664. * Please disable/clear breakpoints until you are within the supported limit. *
  3665. *******************************************************************************
  3666. Breakpoint 36 hit
  3667. CLASSPNP!ClassReleaseRemoveLock:
  3668. f76273c0 8bff mov edi,edi
  3669. 1: kd> g
  3670. *******************************************************************************
  3671. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3672. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3673. * Breakpoints exceeding this limit are ignored. *
  3674. * Please disable/clear breakpoints until you are within the supported limit. *
  3675. *******************************************************************************
  3676. *******************************************************************************
  3677. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3678. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3679. * Breakpoints exceeding this limit are ignored. *
  3680. * Please disable/clear breakpoints until you are within the supported limit. *
  3681. *******************************************************************************
  3682. Breakpoint 36 hit
  3683. CLASSPNP!ClassReleaseRemoveLock:
  3684. f76273c0 8bff mov edi,edi
  3685. 1: kd> g
  3686. *******************************************************************************
  3687. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3688. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3689. * Breakpoints exceeding this limit are ignored. *
  3690. * Please disable/clear breakpoints until you are within the supported limit. *
  3691. *******************************************************************************
  3692. *******************************************************************************
  3693. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3694. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3695. * Breakpoints exceeding this limit are ignored. *
  3696. * Please disable/clear breakpoints until you are within the supported limit. *
  3697. *******************************************************************************
  3698. Breakpoint 9 hit
  3699. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
  3700. *** Unable to resolve unqualified symbol in Bp expression 'InitializeAcpi2IoSpaceCstates'.
  3701. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  3702. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  3703. *** Unable to resolve unqualified symbol in Bp expression 'RegisterStateHandlers'.
  3704. nt!IoCreateDevice:
  3705. 8059b8bf 8bff mov edi,edi
  3706. 0: kd> r
  3707. eax=0000003a ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3708. eip=8059b8bf esp=f78a6558 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  3709. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  3710. nt!IoCreateDevice:
  3711. 8059b8bf 8bff mov edi,edi
  3712. 0: kd> t
  3713. *******************************************************************************
  3714. * You have attempted to enable 132 KD breakpoints, which exceeds the *
  3715. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3716. * Breakpoints exceeding this limit are ignored. *
  3717. * Please disable/clear breakpoints until you are within the supported limit. *
  3718. *******************************************************************************
  3719. nt!IoCreateDevice+0x2:
  3720. 8059b8c1 55 push ebp
  3721. 0: kd> r
  3722. eax=0000003a ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3723. eip=8059b8c1 esp=f78a6558 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  3724. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  3725. nt!IoCreateDevice+0x2:
  3726. 8059b8c1 55 push ebp
  3727. 0: kd> t
  3728. *******************************************************************************
  3729. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3730. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3731. * Breakpoints exceeding this limit are ignored. *
  3732. * Please disable/clear breakpoints until you are within the supported limit. *
  3733. *******************************************************************************
  3734. nt!IoCreateDevice+0x3:
  3735. 8059b8c2 8bec mov ebp,esp
  3736. 0: kd> r
  3737. eax=0000003a ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3738. eip=8059b8c2 esp=f78a6554 ebp=f78a65ec iopl=0 nv up ei pl zr na pe nc
  3739. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  3740. nt!IoCreateDevice+0x3:
  3741. 8059b8c2 8bec mov ebp,esp
  3742. 0: kd> t
  3743. *******************************************************************************
  3744. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3745. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3746. * Breakpoints exceeding this limit are ignored. *
  3747. * Please disable/clear breakpoints until you are within the supported limit. *
  3748. *******************************************************************************
  3749. nt!IoCreateDevice+0x5:
  3750. 8059b8c4 81ec90000000 sub esp,90h
  3751. 0: kd> t
  3752. *******************************************************************************
  3753. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3754. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3755. * Breakpoints exceeding this limit are ignored. *
  3756. * Please disable/clear breakpoints until you are within the supported limit. *
  3757. *******************************************************************************
  3758. nt!IoCreateDevice+0xb:
  3759. 8059b8ca a160a35580 mov eax,dword ptr [nt!__security_cookie (8055a360)]
  3760. 0: kd> r
  3761. eax=0000003a ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3762. eip=8059b8ca esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
  3763. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  3764. nt!IoCreateDevice+0xb:
  3765. 8059b8ca a160a35580 mov eax,dword ptr [nt!__security_cookie (8055a360)] ds:0023:8055a360=0000bb40
  3766. 0: kd> t
  3767. *******************************************************************************
  3768. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3769. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3770. * Breakpoints exceeding this limit are ignored. *
  3771. * Please disable/clear breakpoints until you are within the supported limit. *
  3772. *******************************************************************************
  3773. nt!IoCreateDevice+0x10:
  3774. 8059b8cf 8945fc mov dword ptr [ebp-4],eax
  3775. 0: kd> r
  3776. eax=0000bb40 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3777. eip=8059b8cf esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
  3778. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  3779. nt!IoCreateDevice+0x10:
  3780. 8059b8cf 8945fc mov dword ptr [ebp-4],eax ss:0010:f78a6550=00000346
  3781. 0: kd> t
  3782. *******************************************************************************
  3783. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3784. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3785. * Breakpoints exceeding this limit are ignored. *
  3786. * Please disable/clear breakpoints until you are within the supported limit. *
  3787. *******************************************************************************
  3788. nt!IoCreateDevice+0x13:
  3789. 8059b8d2 8b4508 mov eax,dword ptr [ebp+8]
  3790. 0: kd> r
  3791. eax=0000bb40 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3792. eip=8059b8d2 esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
  3793. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  3794. nt!IoCreateDevice+0x13:
  3795. 8059b8d2 8b4508 mov eax,dword ptr [ebp+8] ss:0010:f78a655c=89ba8f38
  3796. 0: kd> t
  3797. *******************************************************************************
  3798. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3799. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3800. * Breakpoints exceeding this limit are ignored. *
  3801. * Please disable/clear breakpoints until you are within the supported limit. *
  3802. *******************************************************************************
  3803. nt!IoCreateDevice+0x16:
  3804. 8059b8d5 89459c mov dword ptr [ebp-64h],eax
  3805. 0: kd> r
  3806. eax=89ba8f38 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3807. eip=8059b8d5 esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
  3808. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  3809. nt!IoCreateDevice+0x16:
  3810. 8059b8d5 89459c mov dword ptr [ebp-64h],eax ss:0010:f78a64f0=f747390c
  3811. 0: kd> t
  3812. *******************************************************************************
  3813. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3814. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3815. * Breakpoints exceeding this limit are ignored. *
  3816. * Please disable/clear breakpoints until you are within the supported limit. *
  3817. *******************************************************************************
  3818. nt!IoCreateDevice+0x19:
  3819. 8059b8d8 8b4520 mov eax,dword ptr [ebp+20h]
  3820. 0: kd> r
  3821. eax=89ba8f38 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3822. eip=8059b8d8 esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
  3823. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  3824. nt!IoCreateDevice+0x19:
  3825. 8059b8d8 8b4520 mov eax,dword ptr [ebp+20h] ss:0010:f78a6574=f74738a0
  3826. 0: kd> t
  3827. *******************************************************************************
  3828. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3829. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3830. * Breakpoints exceeding this limit are ignored. *
  3831. * Please disable/clear breakpoints until you are within the supported limit. *
  3832. *******************************************************************************
  3833. nt!IoCreateDevice+0x1c:
  3834. 8059b8db 8945a8 mov dword ptr [ebp-58h],eax
  3835. 0: kd> t
  3836. *******************************************************************************
  3837. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3838. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3839. * Breakpoints exceeding this limit are ignored. *
  3840. * Please disable/clear breakpoints until you are within the supported limit. *
  3841. *******************************************************************************
  3842. nt!IoCreateDevice+0x1f:
  3843. 8059b8de 8b450c mov eax,dword ptr [ebp+0Ch]
  3844. 0: kd> t
  3845. *******************************************************************************
  3846. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3847. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3848. * Breakpoints exceeding this limit are ignored. *
  3849. * Please disable/clear breakpoints until you are within the supported limit. *
  3850. *******************************************************************************
  3851. nt!IoCreateDevice+0x22:
  3852. 8059b8e1 83e007 and eax,7
  3853. 0: kd> r
  3854. eax=00000000 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3855. eip=8059b8e1 esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei ng nz na po nc
  3856. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  3857. nt!IoCreateDevice+0x22:
  3858. 8059b8e1 83e007 and eax,7
  3859. 0: kd> t
  3860. *******************************************************************************
  3861. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3862. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3863. * Breakpoints exceeding this limit are ignored. *
  3864. * Please disable/clear breakpoints until you are within the supported limit. *
  3865. *******************************************************************************
  3866. nt!IoCreateDevice+0x25:
  3867. 8059b8e4 53 push ebx
  3868. 0: kd> r
  3869. eax=00000000 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3870. eip=8059b8e4 esp=f78a64c4 ebp=f78a6554 iopl=0 nv up ei pl zr na pe nc
  3871. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  3872. nt!IoCreateDevice+0x25:
  3873. 8059b8e4 53 push ebx
  3874. 0: kd> t
  3875. *******************************************************************************
  3876. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3877. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3878. * Breakpoints exceeding this limit are ignored. *
  3879. * Please disable/clear breakpoints until you are within the supported limit. *
  3880. *******************************************************************************
  3881. nt!IoCreateDevice+0x26:
  3882. 8059b8e5 33db xor ebx,ebx
  3883. 0: kd> r
  3884. eax=00000000 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3885. eip=8059b8e5 esp=f78a64c0 ebp=f78a6554 iopl=0 nv up ei pl zr na pe nc
  3886. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  3887. nt!IoCreateDevice+0x26:
  3888. 8059b8e5 33db xor ebx,ebx
  3889. 0: kd> t
  3890. *******************************************************************************
  3891. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3892. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3893. * Breakpoints exceeding this limit are ignored. *
  3894. * Please disable/clear breakpoints until you are within the supported limit. *
  3895. *******************************************************************************
  3896. nt!IoCreateDevice+0x28:
  3897. 8059b8e7 894594 mov dword ptr [ebp-6Ch],eax
  3898. 0: kd> r
  3899. eax=00000000 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3900. eip=8059b8e7 esp=f78a64c0 ebp=f78a6554 iopl=0 nv up ei pl zr na pe nc
  3901. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  3902. nt!IoCreateDevice+0x28:
  3903. 8059b8e7 894594 mov dword ptr [ebp-6Ch],eax ss:0010:f78a64e8=badb0d00
  3904. 0: kd> t
  3905. *******************************************************************************
  3906. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  3907. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3908. * Breakpoints exceeding this limit are ignored. *
  3909. * Please disable/clear breakpoints until you are within the supported limit. *
  3910. *******************************************************************************
  3911. nt!IoCreateDevice+0x2b:
  3912. 8059b8ea 8b4518 mov eax,dword ptr [ebp+18h]
  3913. 0: kd> r
  3914. eax=00000000 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3915. eip=8059b8ea esp=f78a64c0 ebp=f78a6554 iopl=0 nv up ei pl zr na pe nc
  3916. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  3917. nt!IoCreateDevice+0x2b:
  3918. 8059b8ea 8b4518 mov eax,dword ptr [ebp+18h] ss:0010:f78a656c=00000100
  3919. 0: kd> t
  3920. *******************************************************************************
  3921. * You have attempted to enable 133 KD breakpoints, which exceeds the * ==================>>>> eax changed to 001
  3922. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  3923. * Breakpoints exceeding this limit are ignored. *
  3924. * Please disable/clear breakpoints until you are within the supported limit. * ==================>>>> eax changed to 001
  3925. *******************************************************************************
  3926. nt!IoCreateDevice+0x2e:
  3927. 8059b8ed 56 push esi
  3928. 0: kd> r
  3929. eax=00000100 ebx=00000000 ecx=f7473914 edx=f747390c esi=89ba8f38 edi=f7471bd4
  3930. eip=8059b8ed esp=f78a64c0 ebp=f78a6554 iopl=0 nv up ei pl zr na pe nc
  3931. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  3932. nt!IoCreateDevice+0x2e:
  3933. 8059b8ed 56 push esi
  3934. 0: kd> bc *
  3935. 0: kd> bl
  3936.  
  3937. 0: kd> kb 12
  3938. # ChildEBP RetAddr Args to Child
  3939. 00 f78a6554 f74858dd 89ba8f38 00000000 f7471bd4 nt!IoCreateDevice+0x2e
  3940. 01 f78a65ec 806b9e71 89ba8f38 800931c0 800931c0 fltMgr!DriverEntry+0xb1
  3941. 02 f78a662c 806b9f86 89ba8fec 800931c0 0000000c nt!IopInitializeBuiltinDriver+0x260
  3942. 03 f78a6690 806affa1 80087000 f78a66ac 00034000 nt!IopInitializeBootDrivers+0x2d2
  3943. 04 f78a6838 806b1012 80087000 00000000 89bfe750 nt!IoInitSystem+0x712
  3944. 05 f78a6dac 8057572b 80087000 00000000 00000000 nt!Phase1Initialization+0xac7
  3945. 06 f78a6ddc 804ec6c9 806b07bf 80087000 00000000 nt!PspSystemThreadStartup+0x34
  3946. 07 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
  3947. 0: kd> dps @ebp+8 L6
  3948. f78a655c 89ba8f38
  3949. f78a6560 00000000
  3950. f78a6564 f7471bd4 fltMgr!FltMgrDeviceName
  3951. f78a6568 00000008
  3952. f78a656c 00000100
  3953. f78a6570 00000000
  3954. 0: kd> !drvobj 89ba8f38
  3955. Driver object (89ba8f38) is for:
  3956. \FileSystem\FltMgr
  3957.  
  3958. Driver Extension List: (id , addr)
  3959.  
  3960. Device Object list:
  3961.  
  3962. 0: kd> dt nt!_UNICODE_STRING f7471bd4
  3963. "\FileSystem\Filters\FltMgr"
  3964. +0x000 Length : 0x34
  3965. +0x002 MaximumLength : 0x36
  3966. +0x004 Buffer : 0xf7471dac "\FileSystem\Filters\FltMgr"
  3967. 0: kd> du poi(f7471bd4)
  3968. ReadVirtual: f7471bd4 not properly sign extended
  3969. 00360034 "????????????????????????????????"
  3970. 00360074 "????????????????????????????????"
  3971. 003600b4 "????????????????????????????????"
  3972. 003600f4 "????????????????????????????????"
  3973. 00360134 "????????????????????????????????"
  3974. 00360174 "????????????????????????????????"
  3975. 003601b4 "????????????????????????????????"
  3976. 003601f4 "????????????????????????????????"
  3977. 00360234 "????????????????????????????????"
  3978. 00360274 "????????????????????????????????"
  3979. 003602b4 "????????????????????????????????"
  3980. 003602f4 "????????????????????????????????"
  3981. 0: kd> dps @ebp+8 L6
  3982. f78a655c 89ba8f38
  3983. f78a6560 00000000
  3984. f78a6564 f7471bd4 fltMgr!FltMgrDeviceName
  3985. f78a6568 00000008
  3986. f78a656c 00000100
  3987. f78a6570 00000000
  3988. 0: kd> dps @ebp+1C L1
  3989. f78a6570 00000000
  3990. 0: kd> dd 0xf78a64e0 L40
  3991. ReadVirtual: f78a64e0 not properly sign extended
  3992. f78a64e0 f78a6554 8059b8c4 00000000 f747390c
  3993. f78a64f0 89ba8f38 804e0030 00000000 f74738a0
  3994. f78a6500 00000000 00000000 00000000 00000000
  3995. f78a6510 00000000 00000023 00000023 f747390c
  3996. f78a6520 f7473914 0000003a 0000003a f78a65dc
  3997. f78a6530 00000030 f7471bd4 89ba8f38 00000000
  3998. f78a6540 f78a6554 00000000 8059b8c4 00000008
  3999. f78a6550 0000bb40 f78a65ec f74858dd 89ba8f38
  4000. f78a6560 00000000 f7471bd4 00000008 00000100
  4001. f78a6570 00000000 f74738a0 89c0f25c 00000000
  4002. f78a6580 89ba8f38 89bfe9c8 e1000e38 89bfe750
  4003. f78a6590 89bf4870 f78a65dc 8056fac5 e1000e38
  4004. f78a65a0 e1018240 000000b0 00000000 000f003f
  4005. f78a65b0 00000000 89c0f25c 00000000 89ba8f38
  4006. f78a65c0 f78a6628 000f003f f78a65cc 00000018
  4007. f78a65d0 00000000 f78a6578 00000000 f78a6dcc
  4008. 0: kd> du 0xf7471dac
  4009. ReadVirtual: f7471dac not properly sign extended
  4010. f7471dac "\FileSystem\Filters\FltMgr"
  4011. 0: kd> dd 0xf7471dac L8
  4012. f7471dac 0046005c 006c0069 00530065 00730079
  4013. f7471dbc 00650074 005c006d 00690046 0074006c
  4014. 0: kd> !drvobj 0x89ba8f38
  4015. Driver object (89ba8f38) is for:
  4016. \FileSystem\FltMgr
  4017.  
  4018. Driver Extension List: (id , addr)
  4019.  
  4020. Device Object list:
  4021.  
  4022. 0: kd> dd 0xf78a64d0 L60
  4023. ReadVirtual: f78a64d0 not properly sign extended
  4024. ReadVirtual: f78a65e0 not properly sign extended
  4025. f78a64d0 000001da 804e2725 804e2700 000000d1
  4026. f78a64e0 f78a6554 8059b8c4 00000000 f747390c
  4027. f78a64f0 89ba8f38 804e0030 00000000 f74738a0
  4028. f78a6500 00000000 00000000 00000000 00000000
  4029. f78a6510 00000000 00000023 00000023 f747390c
  4030. f78a6520 f7473914 0000003a 0000003a f78a65dc
  4031. f78a6530 00000030 f7471bd4 89ba8f38 00000000
  4032. f78a6540 f78a6554 00000000 8059b8c4 00000008
  4033. f78a6550 0000bb40 f78a65ec f74858dd 89ba8f38
  4034. f78a6560 00000000 f7471bd4 00000008 00000100
  4035. f78a6570 00000000 f74738a0 89c0f25c 00000000
  4036. f78a6580 89ba8f38 89bfe9c8 e1000e38 89bfe750
  4037. f78a6590 89bf4870 f78a65dc 8056fac5 e1000e38
  4038. f78a65a0 e1018240 000000b0 00000000 000f003f
  4039. f78a65b0 00000000 89c0f25c 00000000 89ba8f38
  4040. f78a65c0 f78a6628 000f003f f78a65cc 00000018
  4041. f78a65d0 00000000 f78a6578 00000000 f78a6dcc
  4042. f78a65e0 f74710a2 f7471df8 00000000 f78a662c
  4043. f78a65f0 806b9e71 89ba8f38 800931c0 800931c0
  4044. f78a6600 803f3068 e139e590 00000018 00000000
  4045. f78a6610 f78a6668 00000050 00000000 00000000
  4046. f78a6620 f7469000 00000088 800000b0 f78a6690
  4047. f78a6630 806b9f86 89ba8fec 800931c0 0000000c
  4048. f78a6640 80093298 00000000 f78a6688 00000000
  4049. 0: kd> ba w4 0xF78A64E8
  4050. 0: kd> g
  4051. Breakpoint 0 hit
  4052. fltMgr!_SEH_prolog+0x1d:
  4053. f747106d 8b45f8 mov eax,dword ptr [ebp-8]
  4054. 0: kd> u @eip-32 L80
  4055. fltMgr!IoGetLowerDeviceObject+0x5:
  4056. f747103b f7 ???
  4057. f747103c cc int 3
  4058. f747103d cc int 3
  4059. f747103e cc int 3
  4060. f747103f cc int 3
  4061. f7471040 cc int 3
  4062. f7471041 cc int 3
  4063. fltMgr!IoGetDeviceAttachmentBaseRef:
  4064. f7471042 ff25b81147f7 jmp dword ptr [fltMgr!_imp__IoGetDeviceAttachmentBaseRef (f74711b8)]
  4065. f7471048 cc int 3
  4066. f7471049 cc int 3
  4067. f747104a cc int 3
  4068. f747104b cc int 3
  4069. f747104c cc int 3
  4070. f747104d cc int 3
  4071. f747104e cc int 3
  4072. f747104f cc int 3
  4073. fltMgr!_SEH_prolog:
  4074. f7471050 68a21047f7 push offset fltMgr!_except_handler3 (f74710a2)
  4075. f7471055 64a100000000 mov eax,dword ptr fs:[00000000h]
  4076. f747105b 50 push eax
  4077. f747105c 8b442410 mov eax,dword ptr [esp+10h]
  4078. f7471060 896c2410 mov dword ptr [esp+10h],ebp
  4079. f7471064 8d6c2410 lea ebp,[esp+10h]
  4080. f7471068 2be0 sub esp,eax
  4081. f747106a 53 push ebx
  4082. f747106b 56 push esi
  4083. f747106c 57 push edi
  4084. f747106d 8b45f8 mov eax,dword ptr [ebp-8]
  4085. f7471070 8965e8 mov dword ptr [ebp-18h],esp
  4086. f7471073 50 push eax
  4087. f7471074 8b45fc mov eax,dword ptr [ebp-4]
  4088. f7471077 c745fcffffffff mov dword ptr [ebp-4],0FFFFFFFFh
  4089. f747107e 8945f8 mov dword ptr [ebp-8],eax
  4090. f7471081 8d45f0 lea eax,[ebp-10h]
  4091. f7471084 64a300000000 mov dword ptr fs:[00000000h],eax
  4092. f747108a c3 ret
  4093. fltMgr!_SEH_epilog:
  4094. f747108b 8b4df0 mov ecx,dword ptr [ebp-10h]
  4095. f747108e 64890d00000000 mov dword ptr fs:[0],ecx
  4096. f7471095 59 pop ecx
  4097. f7471096 5f pop edi
  4098. f7471097 5e pop esi
  4099. f7471098 5b pop ebx
  4100. f7471099 c9 leave
  4101. f747109a 51 push ecx
  4102. f747109b c3 ret
  4103. f747109c cc int 3
  4104. f747109d cc int 3
  4105. f747109e cc int 3
  4106. f747109f cc int 3
  4107. f74710a0 cc int 3
  4108. f74710a1 cc int 3
  4109. fltMgr!_except_handler3:
  4110. f74710a2 ff25c41147f7 jmp dword ptr [fltMgr!_imp___except_handler3 (f74711c4)]
  4111. f74710a8 cc int 3
  4112. f74710a9 cc int 3
  4113. f74710aa cc int 3
  4114. f74710ab cc int 3
  4115. f74710ac cc int 3
  4116. f74710ad cc int 3
  4117. fltMgr!IoAttachDeviceToDeviceStackSafe:
  4118. f74710ae ff25d01147f7 jmp dword ptr [fltMgr!_imp__IoAttachDeviceToDeviceStackSafe (f74711d0)]
  4119. f74710b4 cc int 3
  4120. f74710b5 cc int 3
  4121. f74710b6 cc int 3
  4122. f74710b7 cc int 3
  4123. f74710b8 cc int 3
  4124. f74710b9 cc int 3
  4125. fltMgr!IoGetDiskDeviceObject:
  4126. f74710ba ff25d81147f7 jmp dword ptr [fltMgr!_imp__IoGetDiskDeviceObject (f74711d8)]
  4127. f74710c0 cc int 3
  4128. f74710c1 cc int 3
  4129. f74710c2 cc int 3
  4130. f74710c3 cc int 3
  4131. f74710c4 cc int 3
  4132. f74710c5 cc int 3
  4133. fltMgr!IoEnumerateDeviceObjectList:
  4134. f74710c6 ff25dc1147f7 jmp dword ptr [fltMgr!_imp__IoEnumerateDeviceObjectList (f74711dc)]
  4135. f74710cc cc int 3
  4136. f74710cd cc int 3
  4137. f74710ce cc int 3
  4138. f74710cf cc int 3
  4139. f74710d0 cc int 3
  4140. f74710d1 cc int 3
  4141. fltMgr!FsRtlIsPagingFile:
  4142. f74710d2 ff25e81147f7 jmp dword ptr [fltMgr!_imp__FsRtlIsPagingFile (f74711e8)]
  4143. f74710d8 cc int 3
  4144. f74710d9 cc int 3
  4145. f74710da cc int 3
  4146. f74710db cc int 3
  4147. f74710dc cc int 3
  4148. f74710dd cc int 3
  4149. fltMgr!KeGetCurrentThread:
  4150. f74710de ff25ec1147f7 jmp dword ptr [fltMgr!_imp__KeGetCurrentThread (f74711ec)]
  4151. f74710e4 cc int 3
  4152. f74710e5 cc int 3
  4153. f74710e6 cc int 3
  4154. f74710e7 cc int 3
  4155. f74710e8 cc int 3
  4156. f74710e9 cc int 3
  4157. fltMgr!FsRtlAllocateFileLock:
  4158. f74710ea ff25641247f7 jmp dword ptr [fltMgr!_imp__FsRtlAllocateFileLock (f7471264)]
  4159. f74710f0 cc int 3
  4160. f74710f1 cc int 3
  4161. f74710f2 cc int 3
  4162. f74710f3 cc int 3
  4163. f74710f4 cc int 3
  4164. f74710f5 cc int 3
  4165. fltMgr!FsRtlFreeFileLock:
  4166. f74710f6 ff25681247f7 jmp dword ptr [fltMgr!_imp__FsRtlFreeFileLock (f7471268)]
  4167. f74710fc cc int 3
  4168. f74710fd cc int 3
  4169. f74710fe cc int 3
  4170. f74710ff cc int 3
  4171. f7471100 cc int 3
  4172. f7471101 cc int 3
  4173. fltMgr!IoCreateFileSpecifyDeviceObjectHint:
  4174. f7471102 ff25fc1247f7 jmp dword ptr [fltMgr!_imp__IoCreateFileSpecifyDeviceObjectHint (f74712fc)]
  4175. f7471108 cc int 3
  4176. f7471109 cc int 3
  4177. f747110a cc int 3
  4178. f747110b cc int 3
  4179. f747110c cc int 3
  4180. f747110d cc int 3
  4181. fltMgr!ObReferenceObjectByName:
  4182. f747110e ff256c1347f7 jmp dword ptr [fltMgr!_imp__ObReferenceObjectByName (f747136c)]
  4183. f7471114 cc int 3
  4184. f7471115 cc int 3
  4185. f7471116 cc int 3
  4186. f7471117 cc int 3
  4187. f7471118 cc int 3
  4188. f7471119 cc int 3
  4189. fltMgr!PsImpersonateClient:
  4190. f747111a ff25ac1347f7 jmp dword ptr [fltMgr!_imp__PsImpersonateClient (f74713ac)]
  4191. f7471120 cc int 3
  4192. f7471121 cc int 3
  4193. f7471122 cc int 3
  4194. f7471123 cc int 3
  4195. f7471124 cc int 3
  4196. f7471125 cc int 3
  4197. fltMgr!PsDereferencePrimaryToken:
  4198. f7471126 ff25b01347f7 jmp dword ptr [fltMgr!_imp__PsDereferencePrimaryToken (f74713b0)]
  4199. 0: kd> r
  4200. eax=00000068 ebx=00000000 ecx=00000000 edx=00000038 esi=89ba8f38 edi=89bce2a8
  4201. eip=f747106d esp=f78a64e8 ebp=f78a656c iopl=0 nv up ei ng nz na po nc
  4202. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  4203. fltMgr!_SEH_prolog+0x1d:
  4204. f747106d 8b45f8 mov eax,dword ptr [ebp-8] ss:0010:f78a6564=f7485c0e
  4205. 0: kd> t
  4206. fltMgr!_SEH_prolog+0x20:
  4207. f7471070 8965e8 mov dword ptr [ebp-18h],esp
  4208. 0: kd> r
  4209. eax=f7485c0e ebx=00000000 ecx=00000000 edx=00000038 esi=89ba8f38 edi=89bce2a8
  4210. eip=f7471070 esp=f78a64e8 ebp=f78a656c iopl=0 nv up ei ng nz na po nc
  4211. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  4212. fltMgr!_SEH_prolog+0x20:
  4213. f7471070 8965e8 mov dword ptr [ebp-18h],esp ss:0010:f78a6554=00000000
  4214. 0: kd> u @eip-32 L40
  4215. fltMgr!IoGetLowerDeviceObject+0x8:
  4216. f747103e cc int 3
  4217. f747103f cc int 3
  4218. f7471040 cc int 3
  4219. f7471041 cc int 3
  4220. fltMgr!IoGetDeviceAttachmentBaseRef:
  4221. f7471042 ff25b81147f7 jmp dword ptr [fltMgr!_imp__IoGetDeviceAttachmentBaseRef (f74711b8)]
  4222. f7471048 cc int 3
  4223. f7471049 cc int 3
  4224. f747104a cc int 3
  4225. f747104b cc int 3
  4226. f747104c cc int 3
  4227. f747104d cc int 3
  4228. f747104e cc int 3
  4229. f747104f cc int 3
  4230. fltMgr!_SEH_prolog:
  4231. f7471050 68a21047f7 push offset fltMgr!_except_handler3 (f74710a2)
  4232. f7471055 64a100000000 mov eax,dword ptr fs:[00000000h]
  4233. f747105b 50 push eax
  4234. f747105c 8b442410 mov eax,dword ptr [esp+10h]
  4235. f7471060 896c2410 mov dword ptr [esp+10h],ebp
  4236. f7471064 8d6c2410 lea ebp,[esp+10h]
  4237. f7471068 2be0 sub esp,eax
  4238. f747106a 53 push ebx
  4239. f747106b 56 push esi
  4240. f747106c 57 push edi
  4241. f747106d 8b45f8 mov eax,dword ptr [ebp-8]
  4242. f7471070 8965e8 mov dword ptr [ebp-18h],esp
  4243. f7471073 50 push eax
  4244. f7471074 8b45fc mov eax,dword ptr [ebp-4]
  4245. f7471077 c745fcffffffff mov dword ptr [ebp-4],0FFFFFFFFh
  4246. f747107e 8945f8 mov dword ptr [ebp-8],eax
  4247. f7471081 8d45f0 lea eax,[ebp-10h]
  4248. f7471084 64a300000000 mov dword ptr fs:[00000000h],eax
  4249. f747108a c3 ret
  4250. fltMgr!_SEH_epilog:
  4251. f747108b 8b4df0 mov ecx,dword ptr [ebp-10h]
  4252. f747108e 64890d00000000 mov dword ptr fs:[0],ecx
  4253. f7471095 59 pop ecx
  4254. f7471096 5f pop edi
  4255. f7471097 5e pop esi
  4256. f7471098 5b pop ebx
  4257. f7471099 c9 leave
  4258. f747109a 51 push ecx
  4259. f747109b c3 ret
  4260. f747109c cc int 3
  4261. f747109d cc int 3
  4262. f747109e cc int 3
  4263. f747109f cc int 3
  4264. f74710a0 cc int 3
  4265. f74710a1 cc int 3
  4266. fltMgr!_except_handler3:
  4267. f74710a2 ff25c41147f7 jmp dword ptr [fltMgr!_imp___except_handler3 (f74711c4)]
  4268. f74710a8 cc int 3
  4269. f74710a9 cc int 3
  4270. f74710aa cc int 3
  4271. f74710ab cc int 3
  4272. f74710ac cc int 3
  4273. f74710ad cc int 3
  4274. fltMgr!IoAttachDeviceToDeviceStackSafe:
  4275. f74710ae ff25d01147f7 jmp dword ptr [fltMgr!_imp__IoAttachDeviceToDeviceStackSafe (f74711d0)]
  4276. f74710b4 cc int 3
  4277. f74710b5 cc int 3
  4278. f74710b6 cc int 3
  4279. f74710b7 cc int 3
  4280. f74710b8 cc int 3
  4281. f74710b9 cc int 3
  4282. fltMgr!IoGetDiskDeviceObject:
  4283. f74710ba ff25d81147f7 jmp dword ptr [fltMgr!_imp__IoGetDiskDeviceObject (f74711d8)]
  4284. f74710c0 cc int 3
  4285. f74710c1 cc int 3
  4286. 0: kd> kb 20
  4287. # ChildEBP RetAddr Args to Child
  4288. 00 f78a656c f7485a81 89ba8f38 89c0f25c 00000000 fltMgr!_SEH_prolog+0x20
  4289. 01 f78a65ec 806b9e71 89ba8f38 800931c0 800931c0 fltMgr!DriverEntry+0x255
  4290. 02 f78a662c 806b9f86 89ba8fec 800931c0 0000000c nt!IopInitializeBuiltinDriver+0x260
  4291. 03 f78a6690 806affa1 80087000 f78a66ac 00034000 nt!IopInitializeBootDrivers+0x2d2
  4292. 04 f78a6838 806b1012 80087000 00000000 89bfe750 nt!IoInitSystem+0x712
  4293. 05 f78a6dac 8057572b 80087000 00000000 00000000 nt!Phase1Initialization+0xac7
  4294. 06 f78a6ddc 804ec6c9 806b07bf 80087000 00000000 nt!PspSystemThreadStartup+0x34
  4295. 07 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
  4296. 0: kd> t
  4297. fltMgr!_SEH_prolog+0x23:
  4298. f7471073 50 push eax
  4299. 0: kd> r
  4300. eax=f7485c0e ebx=00000000 ecx=00000000 edx=00000038 esi=89ba8f38 edi=89bce2a8
  4301. eip=f7471073 esp=f78a64e8 ebp=f78a656c iopl=0 nv up ei ng nz na po nc
  4302. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  4303. fltMgr!_SEH_prolog+0x23:
  4304. f7471073 50 push eax
  4305. 0: kd> u @eip-32 L40
  4306. fltMgr!IoGetLowerDeviceObject+0xb:
  4307. f7471041 cc int 3
  4308. fltMgr!IoGetDeviceAttachmentBaseRef:
  4309. f7471042 ff25b81147f7 jmp dword ptr [fltMgr!_imp__IoGetDeviceAttachmentBaseRef (f74711b8)]
  4310. f7471048 cc int 3
  4311. f7471049 cc int 3
  4312. f747104a cc int 3
  4313. f747104b cc int 3
  4314. f747104c cc int 3
  4315. f747104d cc int 3
  4316. f747104e cc int 3
  4317. f747104f cc int 3
  4318. fltMgr!_SEH_prolog:
  4319. f7471050 68a21047f7 push offset fltMgr!_except_handler3 (f74710a2)
  4320. f7471055 64a100000000 mov eax,dword ptr fs:[00000000h]
  4321. f747105b 50 push eax
  4322. f747105c 8b442410 mov eax,dword ptr [esp+10h]
  4323. f7471060 896c2410 mov dword ptr [esp+10h],ebp
  4324. f7471064 8d6c2410 lea ebp,[esp+10h]
  4325. f7471068 2be0 sub esp,eax
  4326. f747106a 53 push ebx
  4327. f747106b 56 push esi
  4328. f747106c 57 push edi
  4329. f747106d 8b45f8 mov eax,dword ptr [ebp-8]
  4330. f7471070 8965e8 mov dword ptr [ebp-18h],esp
  4331. f7471073 50 push eax
  4332. f7471074 8b45fc mov eax,dword ptr [ebp-4]
  4333. f7471077 c745fcffffffff mov dword ptr [ebp-4],0FFFFFFFFh
  4334. f747107e 8945f8 mov dword ptr [ebp-8],eax
  4335. f7471081 8d45f0 lea eax,[ebp-10h]
  4336. f7471084 64a300000000 mov dword ptr fs:[00000000h],eax
  4337. f747108a c3 ret
  4338. fltMgr!_SEH_epilog:
  4339. f747108b 8b4df0 mov ecx,dword ptr [ebp-10h]
  4340. f747108e 64890d00000000 mov dword ptr fs:[0],ecx
  4341. f7471095 59 pop ecx
  4342. f7471096 5f pop edi
  4343. f7471097 5e pop esi
  4344. f7471098 5b pop ebx
  4345. f7471099 c9 leave
  4346. f747109a 51 push ecx
  4347. f747109b c3 ret
  4348. f747109c cc int 3
  4349. f747109d cc int 3
  4350. f747109e cc int 3
  4351. f747109f cc int 3
  4352. f74710a0 cc int 3
  4353. f74710a1 cc int 3
  4354. fltMgr!_except_handler3:
  4355. f74710a2 ff25c41147f7 jmp dword ptr [fltMgr!_imp___except_handler3 (f74711c4)]
  4356. f74710a8 cc int 3
  4357. f74710a9 cc int 3
  4358. f74710aa cc int 3
  4359. f74710ab cc int 3
  4360. f74710ac cc int 3
  4361. f74710ad cc int 3
  4362. fltMgr!IoAttachDeviceToDeviceStackSafe:
  4363. f74710ae ff25d01147f7 jmp dword ptr [fltMgr!_imp__IoAttachDeviceToDeviceStackSafe (f74711d0)]
  4364. f74710b4 cc int 3
  4365. f74710b5 cc int 3
  4366. f74710b6 cc int 3
  4367. f74710b7 cc int 3
  4368. f74710b8 cc int 3
  4369. f74710b9 cc int 3
  4370. fltMgr!IoGetDiskDeviceObject:
  4371. f74710ba ff25d81147f7 jmp dword ptr [fltMgr!_imp__IoGetDiskDeviceObject (f74711d8)]
  4372. f74710c0 cc int 3
  4373. f74710c1 cc int 3
  4374. f74710c2 cc int 3
  4375. f74710c3 cc int 3
  4376. f74710c4 cc int 3
  4377. 0: kd> t
  4378. fltMgr!_SEH_prolog+0x24:
  4379. f7471074 8b45fc mov eax,dword ptr [ebp-4]
  4380. 0: kd> r
  4381. eax=f7485c0e ebx=00000000 ecx=00000000 edx=00000038 esi=89ba8f38 edi=89bce2a8
  4382. eip=f7471074 esp=f78a64e4 ebp=f78a656c iopl=0 nv up ei ng nz na po nc
  4383. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000282
  4384. fltMgr!_SEH_prolog+0x24:
  4385. f7471074 8b45fc mov eax,dword ptr [ebp-4] ss:0010:f78a6568=f7472058
  4386. 0: kd> u @eip-32 L40
  4387. fltMgr!IoGetDeviceAttachmentBaseRef:
  4388. f7471042 ff25b81147f7 jmp dword ptr [fltMgr!_imp__IoGetDeviceAttachmentBaseRef (f74711b8)]
  4389. f7471048 cc int 3
  4390. f7471049 cc int 3
  4391. f747104a cc int 3
  4392. f747104b cc int 3
  4393. f747104c cc int 3
  4394. f747104d cc int 3
  4395. f747104e cc int 3
  4396. f747104f cc int 3
  4397. fltMgr!_SEH_prolog:
  4398. f7471050 68a21047f7 push offset fltMgr!_except_handler3 (f74710a2)
  4399. f7471055 64a100000000 mov eax,dword ptr fs:[00000000h]
  4400. f747105b 50 push eax
  4401. f747105c 8b442410 mov eax,dword ptr [esp+10h]
  4402. f7471060 896c2410 mov dword ptr [esp+10h],ebp
  4403. f7471064 8d6c2410 lea ebp,[esp+10h]
  4404. f7471068 2be0 sub esp,eax
  4405. f747106a 53 push ebx
  4406. f747106b 56 push esi
  4407. f747106c 57 push edi
  4408. f747106d 8b45f8 mov eax,dword ptr [ebp-8]
  4409. f7471070 8965e8 mov dword ptr [ebp-18h],esp
  4410. f7471073 50 push eax
  4411. f7471074 8b45fc mov eax,dword ptr [ebp-4]
  4412. f7471077 c745fcffffffff mov dword ptr [ebp-4],0FFFFFFFFh
  4413. f747107e 8945f8 mov dword ptr [ebp-8],eax
  4414. f7471081 8d45f0 lea eax,[ebp-10h]
  4415. f7471084 64a300000000 mov dword ptr fs:[00000000h],eax
  4416. f747108a c3 ret
  4417. fltMgr!_SEH_epilog:
  4418. f747108b 8b4df0 mov ecx,dword ptr [ebp-10h]
  4419. f747108e 64890d00000000 mov dword ptr fs:[0],ecx
  4420. f7471095 59 pop ecx
  4421. f7471096 5f pop edi
  4422. f7471097 5e pop esi
  4423. f7471098 5b pop ebx
  4424. f7471099 c9 leave
  4425. f747109a 51 push ecx
  4426. f747109b c3 ret
  4427. f747109c cc int 3
  4428. f747109d cc int 3
  4429. f747109e cc int 3
  4430. f747109f cc int 3
  4431. f74710a0 cc int 3
  4432. f74710a1 cc int 3
  4433. fltMgr!_except_handler3:
  4434. f74710a2 ff25c41147f7 jmp dword ptr [fltMgr!_imp___except_handler3 (f74711c4)]
  4435. f74710a8 cc int 3
  4436. f74710a9 cc int 3
  4437. f74710aa cc int 3
  4438. f74710ab cc int 3
  4439. f74710ac cc int 3
  4440. f74710ad cc int 3
  4441. fltMgr!IoAttachDeviceToDeviceStackSafe:
  4442. f74710ae ff25d01147f7 jmp dword ptr [fltMgr!_imp__IoAttachDeviceToDeviceStackSafe (f74711d0)]
  4443. f74710b4 cc int 3
  4444. f74710b5 cc int 3
  4445. f74710b6 cc int 3
  4446. f74710b7 cc int 3
  4447. f74710b8 cc int 3
  4448. f74710b9 cc int 3
  4449. fltMgr!IoGetDiskDeviceObject:
  4450. f74710ba ff25d81147f7 jmp dword ptr [fltMgr!_imp__IoGetDiskDeviceObject (f74711d8)]
  4451. f74710c0 cc int 3
  4452. f74710c1 cc int 3
  4453. f74710c2 cc int 3
  4454. f74710c3 cc int 3
  4455. f74710c4 cc int 3
  4456. f74710c5 cc int 3
  4457. 0: kd> bc *
  4458. 0: kd> bl
  4459.  
  4460. 0: kd> ; log IOCTLs hitting classpnp (prints IRP and IOCTL)
  4461. ^ Syntax error in '; log IOCTLs hitting classpnp (prints IRP and IOCTL)'
  4462. 0: kd> bu classpnp!ClassDeviceControl ".printf \"[CLASSDEVCTL] IRP=%p IOCTL=0x%08x\\n\", poi(@esp+8), poi(poi(@esp+8)+0x10); gc"
  4463. 0: kd> ; log Disk FDO creation/start
  4464. ^ Syntax error in '; log Disk FDO creation/start'
  4465. 0: kd> bu disk!DiskCreateFdo ".printf \"[disk] DiskCreateFdo PDO=%p\\n\", poi(@esp+8); gc"
  4466. 0: kd> bu disk!DiskStartFdo ".printf \"[disk] DiskStartFdo FDO=%p\\n\", poi(@esp+8); gc"
  4467. 0: kd> ; IOCTL_STORAGE_QUERY_PROPERTY == 0x002D1400
  4468. ^ Syntax error in '; IOCTL_STORAGE_QUERY_PROPERTY == 0x002D1400'
  4469. 0: kd> bu classpnp!ClassDeviceControl ".if (poi(poi(@esp+8)+0x10) == 0x002d1400) { .printf \"[CLASSDEVCTL] STORAGE_QUERY_PROPERTY seen IRP=%p\\n\", poi(@esp+8); kb 12; .break } ; gc"
  4470. breakpoint 0 redefined
  4471. 0: kd> bu classpnp!ClassDeviceControl ".if (poi(poi(@esp+8)+0x10) == 0x002d1400) { .printf \"[CLASSDEVCTL] STORAGE_QUERY_PROPERTY seen IRP=%p\\n\", poi(@esp+8); kb 12; .break } ; .printf \"[CLASSDEVCTL] IRP=%p IOCTL=0x%08x\\n\", poi(@esp+8), poi(poi(@esp+8)+0x10); gc"
  4472. breakpoint 0 redefined
  4473. 0: kd> bu disk!DiskCreateFdo ".printf \"[disk] DiskCreateFdo PDO=%p\\n\", poi(@esp+8); gc"
  4474. breakpoint 1 redefined
  4475. 0: kd> bu disk!DiskStartFdo ".printf \"[disk] DiskStartFdo FDO=%p\\n\", poi(@esp+8); gc"
  4476. breakpoint 2 redefined
  4477. 0: kd> bl
  4478. 0 e Disable Clear f76284d4 0001 (0001) CLASSPNP!ClassDeviceControl ".if (poi(poi(@esp+8)+0x10) == 0x002d1400) { .printf \"[CLASSDEVCTL] STORAGE_QUERY_PROPERTY seen IRP=%p\\n\", poi(@esp+8); kb 12; .break } ; .printf \"[CLASSDEVCTL] IRP=%p IOCTL=0x%08x\\n\", poi(@esp+8), poi(poi(@esp+8)+0x10); gc"
  4479. 1 e Disable Clear f74917bc 0001 (0001) disk!DiskCreateFdo ".printf \"[disk] DiskCreateFdo PDO=%p\\n\", poi(@esp+8); gc"
  4480. 2 e Disable Clear f7493aec 0001 (0001) disk!DiskStartFdo ".printf \"[disk] DiskStartFdo FDO=%p\\n\", poi(@esp+8); gc"
  4481.  
  4482. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\atlmfc.natvis'
  4483. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\concurrency.natvis'
  4484. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\cpp_rest.natvis'
  4485. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Kernel.natvis'
  4486. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\ObjectiveC.natvis'
  4487. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\stl.natvis'
  4488. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Usb4Kd.natvis'
  4489. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Data.Json.natvis'
  4490. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Geolocation.natvis'
  4491. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Sensors.natvis'
  4492. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Media.natvis'
  4493. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\windows.natvis'
  4494. NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2506.12002.0_x64__8wekyb3d8bbwe\amd64\Visualizers\winrt.natvis'*******************************************************************************
  4495. * You have attempted to enable 133 KD breakpoints, which exceeds the *
  4496. * currently supported limit of 32 breakpoints for Windows kernel debugging. *
  4497. * Breakpoints exceeding this limit are ignored. *
  4498. * Please disable/clear breakpoints until you are within the supported limit. *
  4499. *******************************************************************************
  4500. Breakpoint 36 hit
  4501. CLASSPNP!ClassReleaseRemoveLock:
  4502. f76273c0 8bff mov edi,edi
  4503.  
  4504.  
  4505. ************* Preparing the environment for Debugger Extensions Gallery repositories **************
  4506. ExtensionRepository : Implicit
  4507. UseExperimentalFeatureForNugetShare : true
  4508. AllowNugetExeUpdate : true
  4509. NonInteractiveNuget : true
  4510. AllowNugetMSCredentialProviderInstall : true
  4511. AllowParallelInitializationOfLocalRepositories : true
  4512. EnableRedirectToChakraJsProvider : false
  4513.  
  4514. -- Configuring repositories
  4515. ----> Repository : LocalInstalled, Enabled: true
  4516. ----> Repository : UserExtensions, Enabled: true
  4517.  
  4518. >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
  4519.  
  4520. ************* Waiting for Debugger Extensions Gallery to Initialize **************
  4521.  
  4522. >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.015 seconds
  4523. ----> Repository : UserExtensions, Enabled: true, Packages count: 0
  4524. ----> Repository : LocalInstalled, Enabled: true, Packages count: 45
  4525.  
  4526. Microsoft (R) Windows Debugger Version 10.0.27871.1001 AMD64
  4527. Copyright (c) Microsoft Corporation. All rights reserved.
  4528.  
  4529. Opened \\.\pipe\com_1
  4530. Waiting to reconnect...
  4531. Connected to Windows XP 2600 x86 compatible target at (Sun Aug 24 15:09:10.488 2025 (UTC + 2:00)), ptr64 FALSE
  4532. Kernel Debugger connection established.
  4533.  
  4534. ************* Path validation summary **************
  4535. Response Time (ms) Location
  4536. Deferred srv*
  4537. Symbol search path is: srv*
  4538. Executable search path is:
  4539. Windows XP Kernel Version 2600 MP (1 procs) Free x86 compatible
  4540. Edition build lab: 2600.xpsp.080413-2111
  4541. Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
  4542. System Uptime: not available
  4543. nt!DebugService2+0x10:
  4544. 80505e56 cc int 3
  4545. kd> .reload /f
  4546. Connected to Windows XP 2600 x86 compatible target at (Sun Aug 24 15:09:24.535 2025 (UTC + 2:00)), ptr64 FALSE
  4547. Loading Kernel Symbols
  4548. .....
  4549.  
  4550. Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
  4551. Run !sym noisy before .reload to track down problems loading symbols.
  4552.  
  4553. ..................Unable to load image VBoxGuest.sys, Win32 error 0n2
  4554. ....
  4555. Loading User Symbols
  4556. ReadVirtual: 805620d0 not properly sign extended
  4557. ReadVirtual: 8056206c not properly sign extended
  4558.  
  4559. Loading unloaded module list
  4560. Unable to enumerate kernel-mode unloaded modules, HRESULT 0x80004005
  4561.  
  4562. ************* Symbol Loading Error Summary **************
  4563. Module name Error
  4564. kdcom The system cannot find the file specified
  4565. BOOTVID The system cannot find the file specified
  4566. WMILIB The system cannot find the file specified
  4567. ftdisk The system cannot find the file specified
  4568. dmload The system cannot find the file specified
  4569. VBoxGuest The system cannot find the file specified
  4570.  
  4571. You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
  4572. You should also verify that your symbol search path (.sympath) is correct.
  4573. kd> g
  4574. Break instruction exception - code 80000003 (first chance)
  4575. disk_fffffffff7489000!DiskCreateFdo:
  4576. f74917bc cc int 3
  4577. 0: kd> r
  4578. eax=f78a6478 ebx=c0000034 ecx=00000008 edx=804e3477 esi=804e3466 edi=f748d584
  4579. eip=f74917bc esp=f78a6400 ebp=f78a6488 iopl=0 nv up ei pl zr na pe nc
  4580. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
  4581. disk_fffffffff7489000!DiskCreateFdo:
  4582. f74917bc cc int 3
  4583. 0: kd> u @eip L10
  4584. disk_fffffffff7489000!DiskCreateFdo:
  4585. f74917bc cc int 3
  4586. f74917bd ff558b call dword ptr [ebp-75h]
  4587. f74917c0 ec in al,dx
  4588. f74917c1 81ecb8000000 sub esp,0B8h
  4589. f74917c7 a1c0e048f7 mov eax,dword ptr [disk_fffffffff7489000!__security_cookie (f748e0c0)]
  4590. f74917cc 33c5 xor eax,ebp
  4591. f74917ce 8945fc mov dword ptr [ebp-4],eax
  4592. f74917d1 8b4508 mov eax,dword ptr [ebp+8]
  4593. f74917d4 53 push ebx
  4594. f74917d5 33db xor ebx,ebx
  4595. f74917d7 56 push esi
  4596. f74917d8 8b7510 mov esi,dword ptr [ebp+10h]
  4597. f74917db 898560ffffff mov dword ptr [ebp-0A0h],eax
  4598. f74917e1 8b450c mov eax,dword ptr [ebp+0Ch]
  4599. f74917e4 57 push edi
  4600. f74917e5 89856cffffff mov dword ptr [ebp-94h],eax
  4601. 0: kd> dd @esp+4 L1
  4602. f78a6404 89baaa08
  4603.  
Advertisement
Add Comment
Please, Sign In to add comment