0: kd> .fnent [COLOR=#FF0000]fffff802`791391bc[/COLOR]
Debugger function entry 00000093`a0769bf8 for:
(fffff802`790e2d50) nt! ?? ::FNODOBFM::`string'+0x338a2 | (fffff802`790e2d90) nt!CcCopyWriteEx
BeginAddress = 00000000`001eba55
EndAddress = 00000000`001ebe80
UnwindInfoAddress = 00000000`0022766c
Unwind info at fffff802`7924566c, 20 bytes
version 2, flags 4, prolog 0, codes 8
00: offs 0, unwind op 4, op info c UWOP_SAVE_NONVOL FrameOffset: 60 reg: r12.
02: offs 0, unwind op 4, op info 6 UWOP_SAVE_NONVOL FrameOffset: 68 reg: rsi.
04: offs 0, unwind op 4, op info 5 UWOP_SAVE_NONVOL FrameOffset: 70 reg: rbp.
06: offs 0, unwind op 4, op info 3 UWOP_SAVE_NONVOL FrameOffset: b0 reg: rbx.
Chained info:
BeginAddress = 00000000`001eb938
EndAddress = 00000000`001eb97d
UnwindInfoAddress = 00000000`00227628
Unwind info at fffff802`79245628, 10 bytes
version 2, flags 4, prolog 0, codes 0
Chained info:
BeginAddress = 00000000`000bf8c0
EndAddress = 00000000`000bf96d
UnwindInfoAddress = 00000000`0020e588
Unwind info at fffff802`7922c588, e bytes
version 2, flags 0, prolog 15, codes 5
00: offs 15, unwind op 2, op info e UWOP_ALLOC_SMALL.
01: offs 11, unwind op 0, op info f UWOP_PUSH_NONVOL reg: r15.
02: offs f, unwind op 0, op info e UWOP_PUSH_NONVOL reg: r14.
03: offs d, unwind op 0, op info d UWOP_PUSH_NONVOL reg: r13.
04: offs b, unwind op 0, op info 7 UWOP_PUSH_NONVOL reg: rdi.
0: kd> ln nt+00000000`001eb938
(fffff802`790e2d50) nt! ?? ::FNODOBFM::`string'+0x32ea4 | (fffff802`790e2d90) nt!CcCopyWriteEx
0: kd> ln nt+00000000`000bf8c0
(fffff802`790dd8c0) nt!MiSystemFault | (fffff802`790de3b0) nt!CcInitializeCacheMap
Exact matches:
[B]nt!MiSystemFault[/B] (<no parameter info>)