nt!IoInitSystem函数之前的nt!PsLoadedModuleList
0: kd> g
Breakpoint 19 hit
eax=00001d4c ebx=00000000 ecx=80077008 edx=00c84958 esi=00000000 edi=00034000
eip=80e64ebc esp=f789a83c ebp=f789adac iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
nt!IoInitSystem:
80e64ebc 55 push ebp
1: kd> kc
00 nt!IoInitSystem
01 nt!Phase1Initialization
02 nt!PspSystemThreadStartup
03 nt!KiThreadStartup
1: kd> x nt!PsLoadedModuleList
80be38d0 nt!PsLoadedModuleList = struct _LIST_ENTRY [ 0x8a0181b0 - 0x89dfb560 ]
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 (*((ntkrnlmp!_LIST_ENTRY *)0xffffffff80be38d0))
(*((ntkrnlmp!_LIST_ENTRY *)0xffffffff80be38d0)) [Type: _LIST_ENTRY]
+0x000\] Flink : 0x8a0181b0 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfb560 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x8a0181b0)
((ntkrnlmp!_LIST_ENTRY *)0x8a0181b0) : 0x8a0181b0 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x8a018148 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x80be38d0 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x8a018148)
((ntkrnlmp!_LIST_ENTRY *)0x8a018148) : 0x8a018148 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x8a0180e0 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x8a0181b0 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x8a0180e0)
((ntkrnlmp!_LIST_ENTRY *)0x8a0180e0) : 0x8a0180e0 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x8a018070 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x8a018148 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x8a018070)
((ntkrnlmp!_LIST_ENTRY *)0x8a018070) : 0x8a018070 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb008 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x8a0180e0 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfb008)
((ntkrnlmp!_LIST_ENTRY *)0x89dfb008) : 0x89dfb008 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbf98 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x8a018070 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbf98)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbf98) : 0x89dfbf98 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbf30 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfb008 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbf30)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbf30) : 0x89dfbf30 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbec0 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbf98 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbec0)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbec0) : 0x89dfbec0 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbe50 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbf30 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbe50)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbe50) : 0x89dfbe50 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbde8 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbec0 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbde8)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbde8) : 0x89dfbde8 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbd78 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbe50 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbd78)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbd78) : 0x89dfbd78 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbd08 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbde8 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbd08)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbd08) : 0x89dfbd08 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbc98 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbd78 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbc98)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbc98) : 0x89dfbc98 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbc28 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbd08 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbc28)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbc28) : 0x89dfbc28 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbbb8 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbc98 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbbb8)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbbb8) : 0x89dfbbb8 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbb50 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbc28 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbb50)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbb50) : 0x89dfbb50 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfbae0 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbbb8 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfbae0)
((ntkrnlmp!_LIST_ENTRY *)0x89dfbae0) : 0x89dfbae0 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfba70 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbb50 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfba70)
((ntkrnlmp!_LIST_ENTRY *)0x89dfba70) : 0x89dfba70 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfba08 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfbae0 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfba08)
((ntkrnlmp!_LIST_ENTRY *)0x89dfba08) : 0x89dfba08 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb998 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfba70 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfb998)
((ntkrnlmp!_LIST_ENTRY *)0x89dfb998) : 0x89dfb998 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb928 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfba08 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfb928)
((ntkrnlmp!_LIST_ENTRY *)0x89dfb928) : 0x89dfb928 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb8c0 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfb998 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfb8c0)
((ntkrnlmp!_LIST_ENTRY *)0x89dfb8c0) : 0x89dfb8c0 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb850 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfb928 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfb850)
((ntkrnlmp!_LIST_ENTRY *)0x89dfb850) : 0x89dfb850 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb7e8 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfb8c0 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfb7e8)
((ntkrnlmp!_LIST_ENTRY *)0x89dfb7e8) : 0x89dfb7e8 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb778 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfb850 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfb778)
((ntkrnlmp!_LIST_ENTRY *)0x89dfb778) : 0x89dfb778 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb710 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfb7e8 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfb710)
((ntkrnlmp!_LIST_ENTRY *)0x89dfb710) : 0x89dfb710 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb6a8 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfb778 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfb6a8)
((ntkrnlmp!_LIST_ENTRY *)0x89dfb6a8) : 0x89dfb6a8 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb640 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfb710 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfb640)
((ntkrnlmp!_LIST_ENTRY *)0x89dfb640) : 0x89dfb640 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb5d0 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfb6a8 \[Type: _LIST_ENTRY \*
1: kd> dx -id 0,0,ffffffff89dd5240 -r1 ((ntkrnlmp!_LIST_ENTRY *)0x89dfb5d0)
((ntkrnlmp!_LIST_ENTRY *)0x89dfb5d0) : 0x89dfb5d0 [Type: _LIST_ENTRY *]
+0x000\] Flink : 0x89dfb560 \[Type: _LIST_ENTRY \*
+0x004\] Blink : 0x89dfb640 \[Type: _LIST_ENTRY \*
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x8a0181b0
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x8a018148 - 0x80be38d0 ]
+0x008 ExceptionTable : 0x80a10e50 Void
+0x00c ExceptionTableSize : 0x13
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0x80a02000 Void
+0x01c EntryPoint : 0x80e703c0 Void
+0x020 SizeOfImage : 0x4d9000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\ntoskrnl.exe"
+0x02c BaseDllName : _UNICODE_STRING "ntoskrnl.exe"
+0x034 Flags : 0xc004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x3fba05
+0x044 LoadedImports : (null)
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x8a018148
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x8a0180e0 - 0x8a0181b0 ]
+0x008 ExceptionTable : 0x804eb390 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0x804ea000 Void
+0x01c EntryPoint : 0x80513dcc Void
+0x020 SizeOfImage : 0x30000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\hal.dll"
+0x02c BaseDllName : _UNICODE_STRING "hal.dll"
+0x034 Flags : 0xc004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x2facf
+0x044 LoadedImports : (null)
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x8a0180e0
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x8a018070 - 0x8a018148 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf7707000 Void
+0x01c EntryPoint : 0xf77089f0 Void
+0x020 SizeOfImage : 0x8000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\KDCOM.DLL"
+0x02c BaseDllName : _UNICODE_STRING "kdcom.dll"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 3
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x93db
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x8a018070
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb008 - 0x8a0180e0 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf770f000 Void
+0x01c EntryPoint : 0xf77116e0 Void
+0x020 SizeOfImage : 0x8000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\BOOTVID.dll"
+0x02c BaseDllName : _UNICODE_STRING "BOOTVID.dll"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 2
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x3a87
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb008
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbf98 - 0x8a018070 ]
+0x008 ExceptionTable : 0xf74373f0 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf73f9000 Void
+0x01c EntryPoint : 0xf745c42f Void
+0x020 SizeOfImage : 0x6d000
+0x024 FullDllName : _UNICODE_STRING "ACPI.sys"
+0x02c BaseDllName : _UNICODE_STRING "ACPI.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x6a03b
+0x044 LoadedImports : 0x89dfbf99 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbf98
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbf30 - 0x89dfb008 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf7487000 Void
+0x01c EntryPoint : 0xf748d005 Void
+0x020 SizeOfImage : 0x9000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\DRIVERS\WMILIB.SYS"
+0x02c BaseDllName : _UNICODE_STRING "WMILIB.SYS"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 8
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x8bab
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbf30
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbec0 - 0x89dfbf98 ]
+0x008 ExceptionTable : 0xf73d8ac0 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf73cc000 Void
+0x01c EntryPoint : 0xf73f377d Void
+0x020 SizeOfImage : 0x2d000
+0x024 FullDllName : _UNICODE_STRING "pci.sys"
+0x02c BaseDllName : _UNICODE_STRING "pci.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x2f5c0
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbec0
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbe50 - 0x89dfbf30 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf73b9000 Void
+0x01c EntryPoint : 0xf73c91c5 Void
+0x020 SizeOfImage : 0x13000
+0x024 FullDllName : _UNICODE_STRING "isapnp.sys"
+0x02c BaseDllName : _UNICODE_STRING "isapnp.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x13bb3
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbe50
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbde8 - 0x89dfbec0 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf7717000 Void
+0x01c EntryPoint : 0xf771afc6 Void
+0x020 SizeOfImage : 0x5000
+0x024 FullDllName : _UNICODE_STRING "compbatt.sys"
+0x02c BaseDllName : _UNICODE_STRING "compbatt.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xa887
+0x044 LoadedImports : 0x89dfbde9 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbde8
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbd78 - 0x89dfbe50 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf771f000 Void
+0x01c EntryPoint : 0xf7723700 Void
+0x020 SizeOfImage : 0x7000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\DRIVERS\BATTC.SYS"
+0x02c BaseDllName : _UNICODE_STRING "BATTC.SYS"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xea46
+0x044 LoadedImports : 0x89dfbf99 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbd78
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbd08 - 0x89dfbde8 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf7727000 Void
+0x01c EntryPoint : 0xf772c000 Void
+0x020 SizeOfImage : 0x8000
+0x024 FullDllName : _UNICODE_STRING "intelide.sys"
+0x02c BaseDllName : _UNICODE_STRING "intelide.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x5a96
+0x044 LoadedImports : 0x89dfbd09 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbd08
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbc98 - 0x89dfbd78 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf73a6000 Void
+0x01c EntryPoint : 0xf73b6000 Void
+0x020 SizeOfImage : 0x13000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\DRIVERS\PCIIDEX.SYS"
+0x02c BaseDllName : _UNICODE_STRING "PCIIDEX.SYS"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xe3fc
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbc98
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbc28 - 0x89dfbd08 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf7497000 Void
+0x01c EntryPoint : 0xf74a4283 Void
+0x020 SizeOfImage : 0x10000
+0x024 FullDllName : _UNICODE_STRING "MountMgr.sys"
+0x02c BaseDllName : _UNICODE_STRING "MountMgr.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x19fcd
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbc28
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbbb8 - 0x89dfbc98 ]
+0x008 ExceptionTable : 0xf737f810 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf737c000 Void
+0x01c EntryPoint : 0xf73a0370 Void
+0x020 SizeOfImage : 0x2a000
+0x024 FullDllName : _UNICODE_STRING "ftdisk.sys"
+0x02c BaseDllName : _UNICODE_STRING "ftdisk.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x2f02d
+0x044 LoadedImports : 0x89dfbf99 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbbb8
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbb50 - 0x89dfbc28 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf772f000 Void
+0x01c EntryPoint : 0xf7733000 Void
+0x020 SizeOfImage : 0x7000
+0x024 FullDllName : _UNICODE_STRING "dmload.sys"
+0x02c BaseDllName : _UNICODE_STRING "dmload.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x7005
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbb50
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfbae0 - 0x89dfbbb8 ]
+0x008 ExceptionTable : 0xf73303f0 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf72fd000 Void
+0x01c EntryPoint : 0xf7376000 Void
+0x020 SizeOfImage : 0x7f000
+0x024 FullDllName : _UNICODE_STRING "dmio.sys"
+0x02c BaseDllName : _UNICODE_STRING "dmio.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x44875
+0x044 LoadedImports : 0x89dfbf99 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfbae0
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfba70 - 0x89dfbb50 ]
+0x008 ExceptionTable : 0xf72d7500 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf72d4000 Void
+0x01c EntryPoint : 0xf72f652f Void
+0x020 SizeOfImage : 0x29000
+0x024 FullDllName : _UNICODE_STRING "volsnap.sys"
+0x02c BaseDllName : _UNICODE_STRING "volsnap.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x3079f
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfba70
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfba08 - 0x89dfbae0 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf74a7000 Void
+0x01c EntryPoint : 0xf74af436 Void
+0x020 SizeOfImage : 0xb000
+0x024 FullDllName : _UNICODE_STRING "PartMgr.sys"
+0x02c BaseDllName : _UNICODE_STRING "PartMgr.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x8f90
+0x044 LoadedImports : 0x89dfbf99 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfba08
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb998 - 0x89dfba70 ]
+0x008 ExceptionTable : 0xf72b6ea0 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf7299000 Void
+0x01c EntryPoint : 0xf72ce466 Void
+0x020 SizeOfImage : 0x3b000
+0x024 FullDllName : _UNICODE_STRING "atapi.sys"
+0x02c BaseDllName : _UNICODE_STRING "atapi.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x3f758
+0x044 LoadedImports : 0x89dfbf99 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb998
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb928 - 0x89dfba08 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf74b7000 Void
+0x01c EntryPoint : 0xf74b9146 Void
+0x020 SizeOfImage : 0x9000
+0x024 FullDllName : _UNICODE_STRING "symmpi.sys"
+0x02c BaseDllName : _UNICODE_STRING "symmpi.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x18527
+0x044 LoadedImports : 0x89dfb929 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb928
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb8c0 - 0x89dfb998 ]
+0x008 ExceptionTable : 0xf7273ea0 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf725e000 Void
+0x01c EntryPoint : 0xf7293005 Void
+0x020 SizeOfImage : 0x3b000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\DRIVERS\SCSIPORT.SYS"
+0x02c BaseDllName : _UNICODE_STRING "SCSIPORT.SYS"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x399f2
+0x044 LoadedImports : 0x89dfbf99 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb8c0
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb850 - 0x89dfb928 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf7246000 Void
+0x01c EntryPoint : 0xf725b1c1 Void
+0x020 SizeOfImage : 0x18000
+0x024 FullDllName : _UNICODE_STRING "disk.sys"
+0x02c BaseDllName : _UNICODE_STRING "disk.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x200ad
+0x044 LoadedImports : 0x89dfb851 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb850
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb7e8 - 0x89dfb8c0 ]
+0x008 ExceptionTable : 0xf72304a0 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf7214000 Void
+0x01c EntryPoint : 0xf7242009 Void
+0x020 SizeOfImage : 0x32000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\DRIVERS\CLASSPNP.SYS"
+0x02c BaseDllName : _UNICODE_STRING "CLASSPNP.SYS"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x315a6
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb7e8
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb778 - 0x89dfb850 ]
+0x008 ExceptionTable : 0xf720b220 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf7202000 Void
+0x01c EntryPoint : 0xf72111a1 Void
+0x020 SizeOfImage : 0x12000
+0x024 FullDllName : _UNICODE_STRING "Dfs.sys"
+0x02c BaseDllName : _UNICODE_STRING "Dfs.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x1ae35
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb778
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb710 - 0x89dfb7e8 ]
+0x008 ExceptionTable : 0xf71e0f30 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf71d6000 Void
+0x01c EntryPoint : 0xf71fe16c Void
+0x020 SizeOfImage : 0x2c000
+0x024 FullDllName : _UNICODE_STRING "KSecDD.sys"
+0x02c BaseDllName : _UNICODE_STRING "KSecDD.sys"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x313d1
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb710
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb6a8 - 0x89dfb778 ]
+0x008 ExceptionTable : 0xf7128820 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf7102000 Void
+0x01c EntryPoint : 0xf71c95e4 Void
+0x020 SizeOfImage : 0xd4000
+0x024 FullDllName : _UNICODE_STRING "Ntfs.sys"
+0x02c BaseDllName : _UNICODE_STRING "Ntfs.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xd6c6d
+0x044 LoadedImports : 0x89dfb779 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb6a8
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb640 - 0x89dfb710 ]
+0x008 ExceptionTable : 0xf709c5a0 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf708f000 Void
+0x01c EntryPoint : 0xf70f8dc2 Void
+0x020 SizeOfImage : 0x73000
+0x024 FullDllName : _UNICODE_STRING "NDIS.sys"
+0x02c BaseDllName : _UNICODE_STRING "NDIS.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x6db84
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb640
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb5d0 - 0x89dfb6a8 ]
+0x008 ExceptionTable : 0xf70635c0 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf705c000 Void
+0x01c EntryPoint : 0xf7088b63 Void
+0x020 SizeOfImage : 0x33000
+0x024 FullDllName : _UNICODE_STRING "Mup.sys"
+0x02c BaseDllName : _UNICODE_STRING "Mup.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x2fd6b
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb5d0
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x89dfb560 - 0x89dfb640 ]
+0x008 ExceptionTable : 0xffffffff Void
+0x00c ExceptionTableSize : 0xffffffff
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf7049000 Void
+0x01c EntryPoint : 0xf7059000 Void
+0x020 SizeOfImage : 0x13000
+0x024 FullDllName : _UNICODE_STRING "agp440.sys"
+0x02c BaseDllName : _UNICODE_STRING "agp440.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x1a527
+0x044 LoadedImports : 0x89dfbf99 Void
+0x048 PatchInformation : (null)
1: kd> dt KLDR_DATA_TABLE_ENTRY 0x89dfb560
basesrv!KLDR_DATA_TABLE_ENTRY
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x80be38d0 - 0x89dfb5d0 ]
+0x008 ExceptionTable : 0xf74cd180 Void
+0x00c ExceptionTableSize : 1
+0x010 GpValue : (null)
+0x014 NonPagedDebugInfo : (null)
+0x018 DllBase : 0xf74c7000 Void
+0x01c EntryPoint : 0xf74d1109 Void
+0x020 SizeOfImage : 0xd000
+0x024 FullDllName : _UNICODE_STRING "crcdisk.sys"
+0x02c BaseDllName : _UNICODE_STRING "crcdisk.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a __Unused5 : 0
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x12699
+0x044 LoadedImports : 0xfffffffe Void
+0x048 PatchInformation : (null)