Microsoft (R) Windows Debugger Version 10.0.21306.1007 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\hazar\AppData\Local\Temp\7zO043F901F\041421-8843-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff801`50e00000 PsLoadedModuleList = 0xfffff801`51a2a490
Debug session time: Wed Apr 14 00:24:58.790 2021 (UTC + 3:00)
System Uptime: 2 days 22:02:28.014
Loading Kernel Symbols
...............................................................
................................................................
.......................................................
Loading User Symbols
Loading unloaded module list
..............................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff801`511f5c50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffff8184`33b3f140=0000000000000139
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffff818433b3f460, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffff818433b3f3b8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 4827
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 10857
Key : Analysis.Init.CPU.mSec
Value: 765
Key : Analysis.Init.Elapsed.mSec
Value: 7178
Key : Analysis.Memory.CommitPeak.Mb
Value: 75
Key : FailFast.Name
Value: CORRUPT_LIST_ENTRY
Key : FailFast.Type
Value: 3
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: 139
BUGCHECK_P1: 3
BUGCHECK_P2: ffff818433b3f460
BUGCHECK_P3: ffff818433b3f3b8
BUGCHECK_P4: 0
TRAP_FRAME: ffff818433b3f460 -- (.trap 0xffff818433b3f460)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffa10247e99398 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffa1024035f158 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80151212711 rsp=ffff818433b3f5f0 rbp=ffffc18154480180
r8=ffffa10240f3b8b8 r9=ffffa10247e99400 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po cy
nt!KiSignalThread+0x1cc041:
fffff801`51212711 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffff818433b3f3b8 -- (.exr 0xffff818433b3f3b8)
ExceptionAddress: fffff80151212711 (nt!KiSignalThread+0x00000000001cc041)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: EpicWebHelper.exe
ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
EXCEPTION_STR: 0xc0000409
STACK_TEXT:
ffff8184`33b3f138 fffff801`51207b69 : 00000000`00000139 00000000`00000003 ffff8184`33b3f460 ffff8184`33b3f3b8 : nt!KeBugCheckEx
ffff8184`33b3f140 fffff801`51207f90 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff8184`33b3f280 fffff801`51206323 : ffffa102`40384080 ffff8184`33b3f4f9 00000000`0000000b 00000000`0000003f : nt!KiFastFailDispatch+0xd0
ffff8184`33b3f460 fffff801`51212711 : ffff8184`33b3f7c0 00000000`000000c0 00000000`000000e0 fffff801`5104a891 : nt!KiRaiseSecurityCheckFailure+0x323
ffff8184`33b3f5f0 fffff801`51043a3f : ffffc181`54480180 00000000`00000000 ffffa102`4625ea88 ffffa102`47e992c0 : nt!KiSignalThread+0x1cc041
ffff8184`33b3f630 fffff801`51048fac : ffffc181`54480180 00000000`00000000 ffffa102`40f3b810 ffff8184`33b3f709 : nt!KiWakeQueueWaiter+0xbf
ffff8184`33b3f680 fffff801`51048727 : ffffa102`46b87080 00000000`00000002 ffffa102`49f4a580 ffffa102`00000000 : nt!IopfCompleteRequest+0x86c
ffff8184`33b3f770 fffff801`5760d834 : 00000000`00000000 00000293`b6ac23e8 ffffa102`41508790 ffffa102`46b87080 : nt!IofCompleteRequest+0x17
ffff8184`33b3f7a0 fffff801`51052f55 : ffffa102`3450f040 ffffa102`3450f040 00000000`00000001 ffffa102`41508790 : Npfs!NpFsdWrite+0x94
ffff8184`33b3f810 fffff801`4f834906 : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`00000005 : nt!IofCallDriver+0x55
ffff8184`33b3f850 fffff801`51052f55 : ffffa102`41508790 ffffc181`54658180 ffffa102`46b87080 fffff801`51064d7f : FLTMGR!FltpDispatch+0xd6
ffff8184`33b3f8b0 fffff801`513fd898 : ffffa102`41508790 00000000`00000000 ffffa102`41508790 00000000`00000000 : nt!IofCallDriver+0x55
ffff8184`33b3f8f0 fffff801`513e456f : ffff8b04`00000000 ffff8184`33b3fb80 000000f9`b57cea80 ffff8184`33b3fb80 : nt!IopSynchronousServiceTail+0x1a8
ffff8184`33b3f990 fffff801`512075b8 : 00000000`00000000 00000000`00000000 00000000`00000000 00000293`b5b32cc0 : nt!NtWriteFile+0x66f
ffff8184`33b3fa90 00007fff`af2ecd14 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
000000f9`b57cea08 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`af2ecd14
SYMBOL_NAME: Npfs!NpFsdWrite+94
MODULE_NAME: Npfs
IMAGE_NAME: Npfs.SYS
IMAGE_VERSION: 10.0.19041.1030
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 94
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_Npfs!NpFsdWrite
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {8d9b3bdb-f3de-4d11-c34a-a3e4d983694e}
Followup: MachineOwner
---------
1: kd> lm
start end module name
ffffd1e6`d3ed0000 ffffd1e6`d3f6a000 win32k (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
ffffd1e6`d4000000 ffffd1e6`d43b6000 win32kfull (deferred)
ffffd1e6`d4500000 ffffd1e6`d454a000 cdd (deferred)
ffffd1e6`d4850000 ffffd1e6`d4b29000 win32kbase (deferred)
fffff801`4f5f0000 fffff801`4f618000 mcupdate_AuthenticAMD (deferred)
fffff801`4f620000 fffff801`4f626000 hal (deferred)
fffff801`4f630000 fffff801`4f63b000 kd (deferred)
fffff801`4f640000 fffff801`4f667000 tm (deferred)
fffff801`4f670000 fffff801`4f6d9000 CLFS (deferred)
fffff801`4f6e0000 fffff801`4f6fa000 PSHED (deferred)
fffff801`4f700000 fffff801`4f70b000 BOOTVID (deferred)
fffff801`4f710000 fffff801`4f823000 clipsp (deferred)
fffff801`4f830000 fffff801`4f89f000 FLTMGR (pdb symbols) C:\ProgramData\Dbg\sym\fltMgr.pdb\C3CA0BC721B145FE4F45FF7F65B7C5AD1\fltMgr.pdb
fffff801`4f8a0000 fffff801`4f8c9000 ksecdd (deferred)
fffff801`4f8d0000 fffff801`4f932000 msrpc (deferred)
fffff801`4f940000 fffff801`4f94e000 cmimcext (deferred)
fffff801`4f950000 fffff801`4f961000 werkernel (deferred)
fffff801`4f970000 fffff801`4f97c000 ntosext (deferred)
fffff801`4f980000 fffff801`4f993000 WDFLDR (deferred)
fffff801`4f9a0000 fffff801`4f9af000 SleepStudyHelper (deferred)
fffff801`4f9b0000 fffff801`4f9c1000 WppRecorder (deferred)
fffff801`4f9d0000 fffff801`4f9ea000 SgrmAgent (deferred)
fffff801`50e00000 fffff801`51e46000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\27FB1171F9CEB561883B586400BCEDD21\ntkrnlmp.pdb
fffff801`52000000 fffff801`52028000 AgileVpn (deferred)
fffff801`52030000 fffff801`52051000 rasl2tp (deferred)
fffff801`52060000 fffff801`52081000 raspptp (deferred)
fffff801`52090000 fffff801`520ac000 raspppoe (deferred)
fffff801`520b0000 fffff801`520c3000 vwifimp (deferred)
fffff801`520d0000 fffff801`520df000 ndistapi (deferred)
fffff801`520e0000 fffff801`5211a000 ndiswan (deferred)
fffff801`52140000 fffff801`5214d000 rdpvideominiport (deferred)
fffff801`52150000 fffff801`521ba000 WdFilter (deferred)
fffff801`521c0000 fffff801`521d6000 WdNisDrv (deferred)
fffff801`522e0000 fffff801`522fd000 AtihdWT6 (deferred)
fffff801`524a0000 fffff801`52576000 peauth (deferred)
fffff801`52580000 fffff801`52595000 tcpipreg (deferred)
fffff801`525a0000 fffff801`525bc000 rassstp (deferred)
fffff801`525c0000 fffff801`525dd000 NDProxy (deferred)
fffff801`54e00000 fffff801`54ee3000 CI (deferred)
fffff801`54ef0000 fffff801`54fa7000 cng (deferred)
fffff801`54fb0000 fffff801`55081000 Wdf01000 (deferred)
fffff801`55090000 fffff801`550b6000 acpiex (deferred)
fffff801`550c0000 fffff801`5510c000 mssecflt (deferred)
fffff801`55110000 fffff801`551dc000 ACPI (deferred)
fffff801`551e0000 fffff801`551ec000 WMILIB (deferred)
fffff801`55210000 fffff801`5527b000 intelpep (deferred)
fffff801`55280000 fffff801`55297000 WindowsTrustedRT (deferred)
fffff801`552a0000 fffff801`552ab000 IntelTA (deferred)
fffff801`552b0000 fffff801`552bb000 WindowsTrustedRTProxy (deferred)
fffff801`552c0000 fffff801`552d4000 pcw (deferred)
fffff801`552e0000 fffff801`552eb000 msisadrv (deferred)
fffff801`552f0000 fffff801`55366000 pci (deferred)
fffff801`55370000 fffff801`55385000 vdrvroot (deferred)
fffff801`55390000 fffff801`553a7000 amdkmpfd (deferred)
fffff801`553b0000 fffff801`553df000 pdc (deferred)
fffff801`553e0000 fffff801`553f9000 CEA (deferred)
fffff801`55400000 fffff801`55431000 partmgr (deferred)
fffff801`55440000 fffff801`554ea000 spaceport (deferred)
fffff801`554f0000 fffff801`55509000 volmgr (deferred)
fffff801`55510000 fffff801`55573000 volmgrx (deferred)
fffff801`55580000 fffff801`5559e000 mountmgr (deferred)
fffff801`555a0000 fffff801`555d2000 storahci (deferred)
fffff801`555e0000 fffff801`555fc000 EhStorClass (deferred)
fffff801`55600000 fffff801`556b3000 storport (deferred)
fffff801`556c0000 fffff801`556eb000 stornvme (deferred)
fffff801`556f0000 fffff801`5570a000 fileinfo (deferred)
fffff801`55710000 fffff801`5574f000 Wof (deferred)
fffff801`557c0000 fffff801`55a99000 Ntfs (deferred)
fffff801`55aa0000 fffff801`55aad000 Fs_Rec (deferred)
fffff801`55ab0000 fffff801`55c1f000 ndis (deferred)
fffff801`55c20000 fffff801`55cb8000 NETIO (deferred)
fffff801`55cc0000 fffff801`55cf2000 ksecpkg (deferred)
fffff801`55d00000 fffff801`55d21000 amdpsp (deferred)
fffff801`55d30000 fffff801`5601b000 tcpip (deferred)
fffff801`56020000 fffff801`5609f000 fwpkclnt (deferred)
fffff801`560a0000 fffff801`560d0000 wfplwfs (deferred)
fffff801`560e0000 fffff801`561a8000 fvevol (deferred)
fffff801`561b0000 fffff801`561bb000 volume (deferred)
fffff801`561c0000 fffff801`5622d000 volsnap (deferred)
fffff801`56230000 fffff801`56280000 rdyboost (deferred)
fffff801`56290000 fffff801`562b6000 mup (deferred)
fffff801`562c0000 fffff801`562d2000 iorate (deferred)
fffff801`56300000 fffff801`5631c000 disk (deferred)
fffff801`56320000 fffff801`5638c000 CLASSPNP (deferred)
fffff801`56840000 fffff801`56e5a000 vgk (deferred)
fffff801`56e60000 fffff801`56e90000 cdrom (deferred)
fffff801`56ea0000 fffff801`56eb5000 filecrypt (deferred)
fffff801`56ec0000 fffff801`56ece000 tbs (deferred)
fffff801`56ed0000 fffff801`56eda000 Null (deferred)
fffff801`56ee0000 fffff801`56eea000 Beep (deferred)
fffff801`56ef0000 fffff801`56f0a000 vwififlt (deferred)
fffff801`56f10000 fffff801`56f3b000 pacer (deferred)
fffff801`56f40000 fffff801`56f54000 ndiscap (deferred)
fffff801`56f60000 fffff801`56f74000 netbios (deferred)
fffff801`56f80000 fffff801`57021000 Vid (deferred)
fffff801`57030000 fffff801`57051000 winhvr (deferred)
fffff801`57060000 fffff801`570dc000 rdbss (deferred)
fffff801`570e0000 fffff801`57107000 Ndu (deferred)
fffff801`57150000 fffff801`5716e000 crashdmp (deferred)
fffff801`57600000 fffff801`5761c000 Npfs # (pdb symbols) C:\ProgramData\Dbg\sym\npfs.pdb\B6BDF22083B39213E8C6DAA6F39837F41\npfs.pdb
fffff801`57620000 fffff801`57631000 Msfs (deferred)
fffff801`57640000 fffff801`5765b000 CimFS (deferred)
fffff801`57660000 fffff801`57682000 tdx (deferred)
fffff801`57690000 fffff801`576a0000 TDI (deferred)
fffff801`576b0000 fffff801`5770c000 netbt (deferred)
fffff801`57710000 fffff801`57723000 afunix (deferred)
fffff801`57730000 fffff801`577d3000 afd (deferred)
fffff801`577e0000 fffff801`57b84000 dxgkrnl (deferred)
fffff801`57b90000 fffff801`57ba8000 watchdog (deferred)
fffff801`57bb0000 fffff801`57bc6000 BasicDisplay (deferred)
fffff801`57bd0000 fffff801`57be1000 BasicRender (deferred)
fffff801`57c00000 fffff801`57c2c000 dfsc (deferred)
fffff801`57c50000 fffff801`57c67000 bam (deferred)
fffff801`57c70000 fffff801`57cbe000 ahcache (deferred)
fffff801`57cc0000 fffff801`57cd2000 CompositeBus (deferred)
fffff801`57ce0000 fffff801`57ced000 kdnic (deferred)
fffff801`57cf0000 fffff801`57d05000 umbus (deferred)
fffff801`57d10000 fffff801`57da8000 USBXHCI (deferred)
fffff801`57db0000 fffff801`57df4000 ucx01000 (deferred)
fffff801`57e00000 fffff801`57f17000 rt640x64 (deferred)
fffff801`57f20000 fffff801`57f5b000 amdppm (deferred)
fffff801`57f60000 fffff801`58003000 UsbHub3 (deferred)
fffff801`58010000 fffff801`5801e000 USBD (deferred)
fffff801`58040000 fffff801`5804f000 ksthunk (deferred)
fffff801`58050000 fffff801`581d5000 HTTP (deferred)
fffff801`581e0000 fffff801`58273000 mrxsmb (deferred)
fffff801`58280000 fffff801`582c5000 mrxsmb20 (deferred)
fffff801`582e0000 fffff801`58374000 csc (deferred)
fffff801`58380000 fffff801`58392000 nsiproxy (deferred)
fffff801`583a0000 fffff801`583ae000 npsvctrig (deferred)
fffff801`583b0000 fffff801`583c0000 mssmbios (deferred)
fffff801`583d0000 fffff801`583da000 gpuenergydrv (deferred)
fffff801`58c00000 fffff801`58c33000 usbccgp (deferred)
fffff801`58c40000 fffff801`58cda000 CMUAC (deferred)
fffff801`58ce0000 fffff801`58cf2000 hidusb (deferred)
fffff801`58d00000 fffff801`58d3f000 HIDCLASS (deferred)
fffff801`58d40000 fffff801`58d50000 mouhid (deferred)
fffff801`58d60000 fffff801`58d73000 mouclass (deferred)
fffff801`58d80000 fffff801`58d91000 kbdhid (deferred)
fffff801`58da0000 fffff801`58db4000 kbdclass (deferred)
fffff801`58dc0000 fffff801`58fe9000 netr28ux (deferred)
fffff801`58ff0000 fffff801`58ffe000 vwifibus (deferred)
fffff801`59000000 fffff801`590e2000 dxgmms2 (deferred)
fffff801`590f0000 fffff801`59119000 luafv (deferred)
fffff801`59120000 fffff801`59156000 wcifs (deferred)
fffff801`59160000 fffff801`591e1000 cldflt (deferred)
fffff801`591f0000 fffff801`5920a000 storqosflt (deferred)
fffff801`59210000 fffff801`59238000 bindflt (deferred)
fffff801`59240000 fffff801`59296000 msquic (deferred)
fffff801`592a0000 fffff801`592f3000 srvnet (deferred)
fffff801`59300000 fffff801`593c7000 srv2 (deferred)
fffff801`593d0000 fffff801`593eb000 monitor (deferred)
fffff801`593f0000 fffff801`59403000 condrv (deferred)
fffff801`59410000 fffff801`59428000 lltdio (deferred)
fffff801`59430000 fffff801`59448000 mslldp (deferred)
fffff801`59450000 fffff801`5946b000 rspndr (deferred)
fffff801`59470000 fffff801`5948d000 wanarp (deferred)
fffff801`59490000 fffff801`5954b000 nwifi (deferred)
fffff801`59550000 fffff801`59568000 ndisuio (deferred)
fffff801`59570000 fffff801`59595000 bowser (deferred)
fffff801`595a0000 fffff801`595ba000 mpsdrv (deferred)
fffff801`595c0000 fffff801`595d4000 mmcss (deferred)
fffff801`595e0000 fffff801`59d1b000 RTKVHD64 (deferred)
fffff801`59d30000 fffff801`59d3e000 dump_dumpstorport (deferred)
fffff801`59d70000 fffff801`59d9b000 dump_stornvme (deferred)
fffff801`59dc0000 fffff801`59ddd000 dump_dumpfve (deferred)
fffff801`59de0000 fffff801`59df3000 HIDPARSE (deferred)
fffff801`5d000000 fffff801`5d025000 HDAudBus (deferred)
fffff801`5d030000 fffff801`5d096000 portcls (deferred)
fffff801`5d0a0000 fffff801`5d0c1000 drmk (deferred)
fffff801`5d0d0000 fffff801`5d146000 ks (deferred)
fffff801`5d150000 fffff801`5d15a000 AMDPCIDev (deferred)
fffff801`5d160000 fffff801`5d17c000 serial (deferred)
fffff801`5d180000 fffff801`5d18f000 serenum (deferred)
fffff801`5d190000 fffff801`5d19d000 amdgpio2 (deferred)
fffff801`5d1a0000 fffff801`5d1d2000 msgpioclx (deferred)
fffff801`5d1e0000 fffff801`5d1ec000 wmiacpi (deferred)
fffff801`5d1f0000 fffff801`5d1fa000 amdgpio3 (deferred)
fffff801`5d200000 fffff801`5d20d000 NdisVirtualBus (deferred)
fffff801`5d210000 fffff801`61dbf000 amdkmdag (deferred)
fffff801`61dc0000 fffff801`61ddc000 amdfendr (deferred)
fffff801`61de0000 fffff801`61dec000 swenum (deferred)
fffff801`61df0000 fffff801`61dfe000 rdpbus (deferred)
Unloaded modules:
fffff801`52300000 fffff801`52311000 MSKSSRV.sys
fffff801`521e0000 fffff801`521ff000 MpKslDrv.sys
fffff801`52280000 fffff801`5228f000 hiber_storpo
fffff801`52290000 fffff801`522bc000 hiber_stornv
fffff801`522c0000 fffff801`522de000 hiber_dumpfv
fffff801`52260000 fffff801`5227e000 AtihdWT6.sys
fffff801`a4bc0000 fffff801`a4bc7000 RTCore64.sys
fffff801`a4880000 fffff801`a4bbc000 BEDaisy.sys
fffff801`52200000 fffff801`5220f000 hiber_storpo
fffff801`52210000 fffff801`5223c000 hiber_stornv
fffff801`52240000 fffff801`5225e000 hiber_dumpfv
fffff801`52420000 fffff801`5243e000 AtihdWT6.sys
fffff801`55750000 fffff801`557ba000 WdFilter.sys
fffff801`521d0000 fffff801`521ef000 MpKslDrv.sys
fffff801`52120000 fffff801`52137000 WdNisDrv.sys
fffff801`523c0000 fffff801`523cf000 hiber_storpo
fffff801`523d0000 fffff801`523fc000 hiber_stornv
fffff801`52400000 fffff801`5241e000 hiber_dumpfv
fffff801`521b0000 fffff801`521ce000 AtihdWT6.sys
fffff801`521f0000 fffff801`523b3000 BEDaisy.sys
fffff801`52150000 fffff801`5215f000 hiber_storpo
fffff801`52160000 fffff801`5218c000 hiber_stornv
fffff801`52190000 fffff801`521ae000 hiber_dumpfv
fffff801`58020000 fffff801`5803e000 AtihdWT6.sys
fffff801`57180000 fffff801`5718f000 dump_storpor
fffff801`571c0000 fffff801`571ec000 dump_stornvm
fffff801`56820000 fffff801`5683e000 dump_dumpfve
fffff801`57c30000 fffff801`57c4c000 dam.sys
fffff801`551f0000 fffff801`55202000 WdBoot.sys
fffff801`562e0000 fffff801`562f1000 hwpolicy.sys