3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8014117b4d0, The address that the exception occurred at
Arg3: ffffd0002f19a2b8, Parameter 0 of the exception
Arg4: ffffd0002f199ac0, Parameter 1 of the exception
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff803b65eb138
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
ffffd0002f199ac0
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
NETIO!WfpNblInfoGet+0
fffff801`4117b4d0 488b81e0000000 mov rax,qword ptr [rcx+0E0h]
EXCEPTION_PARAMETER1: ffffd0002f19a2b8
EXCEPTION_PARAMETER2: ffffd0002f199ac0
BUGCHECK_STR: 0x1E_c0000005
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre
EXCEPTION_RECORD: ffffe0006ebd6880 -- (.exr 0xffffe0006ebd6880)
ExceptionAddress: ffffe0006ebd6888
ExceptionCode: 00000006
ExceptionFlags: 00000000
NumberParameters: 0
LAST_CONTROL_TRANSFER: from fffff803b6469fbb to fffff803b63d8ca0
STACK_TEXT:
ffffd000`2f199298 fffff803`b6469fbb : 00000000`0000001e ffffffff`c0000005 fffff801`4117b4d0 ffffd000`2f19a2b8 : nt!KeBugCheckEx
ffffd000`2f1992a0 fffff803`b63e9816 : ffffe000`6ebd6880 00000000`00000001 00000000`0000000e fffff803`b62c04c0 : nt!KiFatalFilter+0x1f
ffffd000`2f1992e0 fffff803`b63c7dd6 : ffffc001`842fe452 ffffc001`740e4360 00000000`00000004 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x656
ffffd000`2f199320 fffff803`b63e01ed : 00000000`00000000 ffffd000`2f1994c0 ffffd000`2f19a2b8 ffffd000`2f1994c0 : nt!_C_specific_handler+0x86
ffffd000`2f199390 fffff803`b63510a5 : 00000000`00000001 fffff803`b6288000 ffffd000`2f19a200 ffffc001`00000000 : nt!RtlpExecuteHandlerForException+0xd
ffffd000`2f1993c0 fffff803`b635545e : ffffd000`2f19a2b8 ffffd000`2f199fc0 ffffd000`2f19a2b8 00000000`00000000 : nt!RtlDispatchException+0x1a5
ffffd000`2f199a90 fffff803`b63e48c2 : ffffe000`6ebd6880 ffffd000`2f19a200 00000000`00000000 fffff803`b62db3a7 : nt!KiDispatchException+0x646
ffffd000`2f19a180 fffff803`b63e3014 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffe000`6f425d20 : nt!KiExceptionDispatch+0xc2
ffffd000`2f19a360 fffff801`4117b4d0 : fffff801`41481135 ffffe000`65bd4002 00000000`00000801 00000000`00000000 : nt!KiPageFault+0x214
ffffd000`2f19a4f8 fffff801`41481135 : ffffe000`65bd4002 00000000`00000801 00000000`00000000 ffffe000`6ebd6880 : NETIO!WfpNblInfoGet
ffffd000`2f19a500 fffff801`414ed196 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff801`4496ae43 : fwpkclnt!FwppNetBufferListEventNotify+0x35
ffffd000`2f19a5d0 fffff801`41071971 : 00000000`00000000 00000000`00000000 ffffe000`6ebd6880 00000000`00000003 : wfplwfs!LwfLowerReturnNetBufferLists+0x56
ffffd000`2f19a620 fffff803`b62fa703 : 00000000`00000000 ffffe000`6eff6bc0 00000000`00000000 00000000`00000000 : ndis!ndisDataPathExpandStackCallback+0x31
ffffd000`2f19a660 fffff801`41071d99 : fffff801`41071940 ffffd000`2f19a7b0 00000000`00000100 00000000`00000001 : nt!KeExpandKernelStackAndCalloutInternal+0xf3
ffffd000`2f19a750 fffff801`41071d6a : fffff803`b6541d40 00000000`00000000 ffffc001`7f023860 ffffc001`824c1000 : ndis!ndisExpandStack+0x19
ffffd000`2f19a790 fffff801`41065fae : 00000000`00000001 ffffe000`00000001 ffffe000`6da3c400 00000000`00000000 : ndis!ndisExpandDataPathStack+0x4a
ffffd000`2f19a7f0 fffff801`410823ee : 00000000`00000001 00000000`00000012 00000000`00000000 fffff801`440408b7 : ndis!ndisInvokeNextReceiveCompleteHandler+0x24e
ffffd000`2f19a880 fffff801`440432ab : ffffe000`68ba15f0 ffffe000`6cebe400 00000000`c0000001 00000000`00000000 : ndis!NdisFReturnNetBufferLists+0xe09e
[COLOR=#ff0000]ffffd000`2f19a900 ffffe000`68ba15f0 : ffffe000`6cebe400 00000000`c0000001 00000000`00000000 00000000`00000000 : avgfwd6a+0x42ab[/COLOR]
ffffd000`2f19a908 ffffe000`6cebe400 : 00000000`c0000001 00000000`00000000 00000000`00000000 ffffe000`70677641 : 0xffffe000`68ba15f0
ffffd000`2f19a910 00000000`c0000001 : 00000000`00000000 00000000`00000000 ffffe000`70677641 00000000`00000ff4 : 0xffffe000`6cebe400
ffffd000`2f19a918 00000000`00000000 : 00000000`00000000 ffffe000`70677641 00000000`00000ff4 ffffd000`2f19a960 : 0xc0000001
STACK_COMMAND: kb
FOLLOWUP_IP:
NETIO!WfpNblInfoGet+0
fffff801`4117b4d0 488b81e0000000 mov rax,qword ptr [rcx+0E0h]
SYMBOL_STACK_INDEX: 9
SYMBOL_NAME: NETIO!WfpNblInfoGet+0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: NETIO
IMAGE_NAME: NETIO.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 546029c5
IMAGE_VERSION: 6.3.9600.17485
BUCKET_ID_FUNC_OFFSET: 0
FAILURE_BUCKET_ID: 0x1E_c0000005_NETIO!WfpNblInfoGet
BUCKET_ID: 0x1E_c0000005_NETIO!WfpNblInfoGet
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x1e_c0000005_netio!wfpnblinfoget
FAILURE_ID_HASH: {1735c053-8c3c-72d0-9016-7612a27a855c}
Followup: MachineOwner
---------
3: kd> lm
start end module name
fffff801`4060d000 fffff801`4068a000 mcupdate_GenuineIntel (deferred)
fffff801`4068a000 fffff801`40698000 werkernel (deferred)
fffff801`40698000 fffff801`406fa000 CLFS (deferred)
fffff801`406fa000 fffff801`4071c000 tm (deferred)
fffff801`4071c000 fffff801`40731000 PSHED (deferred)
fffff801`40731000 fffff801`4073b000 BOOTVID (deferred)
fffff801`4073b000 fffff801`407c3000 CI (deferred)
fffff801`40800000 fffff801`40869000 spaceport (deferred)
fffff801`4086b000 fffff801`408c8000 msrpc (deferred)
fffff801`408c8000 fffff801`40997000 Wdf01000 (deferred)
fffff801`40997000 fffff801`409a8000 WDFLDR (deferred)
fffff801`409a8000 fffff801`409c0000 acpiex (deferred)
fffff801`409c0000 fffff801`409cb000 WppRecorder (deferred)
fffff801`40a09000 fffff801`40a91000 ACPI (deferred)
fffff801`40a91000 fffff801`40a9b000 WMILIB (deferred)
fffff801`40a9b000 fffff801`40b27000 cng (deferred)
fffff801`40b35000 fffff801`40b3f000 msisadrv (deferred)
fffff801`40b3f000 fffff801`40b87000 pci (deferred)
fffff801`40b87000 fffff801`40b94000 vdrvroot (deferred)
fffff801`40b94000 fffff801`40bb0000 pdc (deferred)
fffff801`40bb0000 fffff801`40bc8000 partmgr (deferred)
fffff801`40bc8000 fffff801`40bdd000 volmgr (deferred)
fffff801`40c1a000 fffff801`40c76000 fltmgr (deferred)
fffff801`40c76000 fffff801`40c8c000 fileinfo (deferred)
fffff801`40c8c000 fffff801`40cb7000 Wof (deferred)
fffff801`40cb7000 fffff801`40cfa000 WdFilter (deferred)
fffff801`40cfd000 fffff801`40d5c000 volmgrx (deferred)
fffff801`40d5c000 fffff801`40d77000 mountmgr (deferred)
fffff801`40d77000 fffff801`40d94000 storahci (deferred)
fffff801`40d94000 fffff801`40df2000 storport (deferred)
fffff801`40e00000 fffff801`40e31000 ksecpkg (deferred)
fffff801`40e32000 fffff801`4102c000 Ntfs (deferred)
fffff801`4102c000 fffff801`41048000 ksecdd (deferred)
fffff801`41048000 fffff801`41058000 pcw (deferred)
fffff801`41058000 fffff801`41063000 Fs_Rec (deferred)
fffff801`41063000 fffff801`4117a000 ndis (pdb symbols) d:\symbols\ndis.pdb\0A2B1C2CFB6F40AC8473FF364A434C802\ndis.pdb
fffff801`4117a000 fffff801`411f2000 NETIO (pdb symbols) d:\symbols\netio.pdb\873BD5E25CFD43A2A47494662C917A872\netio.pdb
fffff801`41214000 fffff801`41480000 tcpip (deferred)
fffff801`41480000 fffff801`414ec000 fwpkclnt (pdb symbols) d:\symbols\fwpkclnt.pdb\036A669EC9D3426596BEBAC315546E022\fwpkclnt.pdb
fffff801`414ec000 fffff801`41511000 wfplwfs (pdb symbols) d:\symbols\wfplwfs.pdb\5BDBEEAF2013480685D2C275CA0DEF792\wfplwfs.pdb
fffff801`41511000 fffff801`41529000 asstor64 (deferred)
fffff801`41529000 fffff801`415be000 fvevol (deferred)
fffff801`41619000 fffff801`41668000 volsnap (deferred)
fffff801`41668000 fffff801`416ae000 rdyboost (deferred)
fffff801`416ae000 fffff801`416c5000 mup (deferred)
fffff801`416c5000 fffff801`416d4000 intelpep (deferred)
fffff801`416e0000 fffff801`416fc000 disk (deferred)
fffff801`416fc000 fffff801`41752000 CLASSPNP (deferred)
fffff801`41752000 fffff801`41767000 crashdmp (deferred)
fffff801`417a6000 fffff801`417d4000 cdrom (deferred)
fffff801`417d4000 fffff801`417dd000 Null (deferred)
fffff801`417dd000 fffff801`417e5000 Beep (deferred)
fffff801`417e5000 fffff801`417f3000 BasicRender (deferred)
fffff801`41a00000 fffff801`41a23000 avgmfx64 (deferred)
fffff801`41a29000 fffff801`41ba9000 dxgkrnl (deferred)
fffff801`41ba9000 fffff801`41bbb000 watchdog (deferred)
fffff801`41bbb000 fffff801`41bfc000 avgldx64 (deferred)
fffff801`41c00000 fffff801`41c54000 avgloga (deferred)
fffff801`41c61000 fffff801`41cc4000 dxgmms1 (deferred)
fffff801`41cc4000 fffff801`41cd6000 BasicDisplay (deferred)
fffff801`41cd6000 fffff801`41cea000 Npfs (deferred)
fffff801`41cea000 fffff801`41cf6000 Msfs (deferred)
fffff801`41cf6000 fffff801`41d16000 tdx (deferred)
fffff801`41d16000 fffff801`41d24000 TDI (deferred)
fffff801`41d24000 fffff801`41d2f000 ws2ifsl (deferred)
fffff801`41d2f000 fffff801`41d7b000 netbt (deferred)
fffff801`41d7b000 fffff801`41de5000 usbhub (deferred)
fffff801`41e00000 fffff801`41e1f000 WdNisDrv (deferred)
fffff801`41e35000 fffff801`41ec7000 afd (deferred)
fffff801`41ec7000 fffff801`41ef1000 pacer (deferred)
fffff801`41ef1000 fffff801`41f09000 vwififlt (deferred)
fffff801`41f09000 fffff801`41f1a000 netbios (deferred)
fffff801`41f1a000 fffff801`41f8a000 rdbss (deferred)
fffff801`41f8a000 fffff801`41f97000 vbaudio_cable64_win7 (deferred)
fffff801`41f97000 fffff801`41fa3000 USBD (deferred)
fffff801`41fa3000 fffff801`41fca000 usbccgp (deferred)
fffff801`41fca000 fffff801`41ffe000 nvhda64v (deferred)
fffff801`42000000 fffff801`4204e000 ks (deferred)
fffff801`4204e000 fffff801`42077000 SteelBus64 (deferred)
fffff801`42077000 fffff801`42082000 rdpbus (deferred)
fffff801`4208d000 fffff801`4211b000 csc (deferred)
fffff801`4211b000 fffff801`42129000 nsiproxy (deferred)
fffff801`42129000 fffff801`42135000 npsvctrig (deferred)
fffff801`42135000 fffff801`42141000 mssmbios (deferred)
fffff801`42141000 fffff801`42167000 dfsc (deferred)
fffff801`42167000 fffff801`42175000 ScreamingBAudio64 (deferred)
fffff801`42178000 fffff801`42191000 ahcache (deferred)
fffff801`42191000 fffff801`421a0000 CompositeBus (deferred)
fffff801`421a0000 fffff801`421ab000 kdnic (deferred)
fffff801`421ab000 fffff801`421bc000 umbus (deferred)
fffff801`421bc000 fffff801`421e9000 AMPPAL (deferred)
fffff801`421e9000 fffff801`421f5000 mcaudrv_x64 (deferred)
fffff801`42200000 fffff801`4226f000 USBPORT (deferred)
fffff801`4226f000 fffff801`4229c000 e22w8x64 (deferred)
fffff801`4229c000 fffff801`422ac000 ISCTD (deferred)
fffff801`422ac000 fffff801`422b7000 UEFI (deferred)
fffff801`422b7000 fffff801`422c2000 NdisVirtualBus (deferred)
fffff801`422c3000 fffff801`42cfb000 nvlddmkm (deferred)
fffff801`42cfb000 fffff801`42d14000 HDAudBus (deferred)
fffff801`42d14000 fffff801`42d69000 USBXHCI (deferred)
fffff801`42d69000 fffff801`42d9b000 ucx01000 (deferred)
fffff801`42d9b000 fffff801`42db7000 TeeDriverx64 (deferred)
fffff801`42db7000 fffff801`42dcf000 usbehci (deferred)
fffff801`42dcf000 fffff801`42ddf000 mcvidrv (deferred)
fffff801`42ddf000 fffff801`42def800 STREAM (deferred)
fffff801`42df0000 fffff801`42dfd000 nvvad64v (deferred)
fffff801`42e00000 fffff801`42e47000 portcls (deferred)
fffff801`42e47000 fffff801`42e63000 drmk (deferred)
fffff801`42e68000 fffff801`431af000 NETwew00 (deferred)
fffff801`431af000 fffff801`431bc000 vwifibus (deferred)
fffff801`431bc000 fffff801`431c8000 cthdb (deferred)
fffff801`431c8000 fffff801`431cd300 ksthunk (deferred)
fffff801`431ce000 fffff801`431d4c00 GEARAspiWDM (deferred)
fffff801`431d5000 fffff801`431df000 wmiacpi (deferred)
fffff801`431df000 fffff801`431fd000 intelppm (deferred)
fffff801`431fd000 fffff801`431fe600 swenum (deferred)
fffff801`43200000 fffff801`43214000 ndisuio (deferred)
fffff801`43214000 fffff801`4322c000 rspndr (deferred)
fffff801`4322c000 fffff801`4323c000 condrv (deferred)
fffff801`43250000 fffff801`432c8000 UsbHub3 (deferred)
fffff801`432c8000 fffff801`432d6000 hidusb (deferred)
fffff801`432d6000 fffff801`432f5000 HIDCLASS (deferred)
fffff801`432f5000 fffff801`432fcf00 HIDPARSE (deferred)
fffff801`432fd000 fffff801`43323000 USBSTOR (deferred)
fffff801`43323000 fffff801`43340900 usbaudio (deferred)
fffff801`43341000 fffff801`43365000 luafv (deferred)
fffff801`43365000 fffff801`43379000 lltdio (deferred)
fffff801`43379000 fffff801`433ed000 nwifi (deferred)
fffff801`43400000 fffff801`43412000 kbdclass (deferred)
fffff801`43412000 fffff801`4341f000 mouhid (deferred)
fffff801`4341f000 fffff801`43428000 imsevent (deferred)
fffff801`43428000 fffff801`43438000 mouclass (deferred)
fffff801`43438000 fffff801`43471000 fastfat (deferred)
fffff801`43471000 fffff801`43486000 iBtFltCoex (deferred)
fffff801`43494000 fffff801`438cbd00 RTKVHD64 (deferred)
fffff801`438cc000 fffff801`438da000 MBfilt64 (deferred)
fffff801`438da000 fffff801`439e1000 cthda (deferred)
fffff801`439e1000 fffff801`439ef000 kbdhid (deferred)
fffff801`439ef000 fffff801`439f8000 ikbevent (deferred)
fffff801`43a00000 fffff801`43a0e000 monitor (deferred)
fffff801`43a16000 fffff801`43b76000 btmhsf (deferred)
fffff801`43b76000 fffff801`43b8f000 BTHUSB (deferred)
fffff801`43b8f000 fffff801`43ba1000 BthEnum (deferred)
fffff801`43ba1000 fffff801`43bc2000 bthpan (deferred)
fffff801`43bc2000 fffff801`43bdf000 dump_storahci (deferred)
fffff801`43bdf000 fffff801`43bf5000 dump_dumpfve (deferred)
fffff801`43c00000 fffff801`43c1b000 xusb22 (deferred)
fffff801`43c1b000 fffff801`43c24900 SAlpham64 (deferred)
fffff801`43c25000 fffff801`43c53000 rfcomm (deferred)
fffff801`43c53000 fffff801`43c5f000 dump_diskdump (deferred)
fffff801`43c5f000 fffff801`43d8a000 bthport (deferred)
fffff801`43d8a000 fffff801`43dc7000 BthLEEnum (deferred)
fffff801`43dc7000 fffff801`43dd7000 sshid (deferred)
fffff801`43dd8000 fffff801`43de9000 usbscan (deferred)
fffff801`43de9000 fffff801`43df6000 usbprint (deferred)
fffff801`43df6000 fffff801`43dff000 mshidkmdf (deferred)
fffff801`44000000 fffff801`44038000 mrxsmb20 (deferred)
fffff801`44038000 fffff801`4403f000 NTIOLib_X64_fffff80144038000 (deferred)
fffff801`4403f000 fffff801`44050000 avgfwd6a T (no symbols)
fffff801`44053000 fffff801`4414d000 HTTP (deferred)
fffff801`4414d000 fffff801`4416d000 bowser (deferred)
fffff801`4416d000 fffff801`44184000 mpsdrv (deferred)
fffff801`44184000 fffff801`441f1000 mrxsmb (deferred)
fffff801`44200000 fffff801`442a9000 peauth (deferred)
fffff801`442a9000 fffff801`442b4000 secdrv (deferred)
fffff801`442b4000 fffff801`442c2000 vwifimp (deferred)
fffff801`442c2000 fffff801`442cc000 NvStreamKms (deferred)
fffff801`442d1000 fffff801`4491b000 rikvm_38F51D56 (deferred)
fffff801`4491b000 fffff801`44966000 mrxsmb10 (deferred)
fffff801`44966000 fffff801`44983000 Ndu (deferred)
fffff801`44983000 fffff801`4498f000 npf (deferred)
fffff801`4498f000 fffff801`449d2000 srvnet (deferred)
fffff801`449d2000 fffff801`449e4000 tcpipreg (deferred)
fffff801`449e4000 fffff801`449eb000 NTIOLib_X64_fffff801449e4000 (deferred)
fffff801`449eb000 fffff801`449f5000 INETMON (deferred)
fffff801`449f5000 fffff801`449ff000 avgrkx64 (deferred)
fffff801`44a00000 fffff801`44a3d000 WUDFRd (deferred)
fffff801`44a3d000 fffff801`44a48000 WpdUpFltr (deferred)
fffff801`44a48000 fffff801`44a4f000 NTIOLib_X64_fffff80144a48000 (deferred)
fffff801`44a55000 fffff801`44b02000 srv2 (deferred)
fffff801`44b02000 fffff801`44b90000 srv (deferred)
fffff801`44b90000 fffff801`44bbd000 tunnel (deferred)
fffff801`44bbd000 fffff801`44bc4000 NTIOLib_X64 (deferred)
fffff801`44bc4000 fffff801`44bda000 mslldp (deferred)
fffff801`44bda000 fffff801`44bfb000 WudfPf (deferred)
fffff801`44ce1000 fffff801`44d2a000 avgwfpa (deferred)
fffff801`44d2a000 fffff801`44d60000 avgidsha (deferred)
fffff801`44d60000 fffff801`44daa000 avgidsdrivera (deferred)
fffff801`44daa000 fffff801`44dd3000 avgdiska (deferred)
fffff801`44dd3000 fffff801`44ddd000 umpass (deferred)
fffff803`b53b6000 fffff803`b53bf000 kd (deferred)
fffff803`b6218000 fffff803`b6288000 hal (deferred)
fffff803`b6288000 fffff803`b6a1c000 nt (pdb symbols) d:\symbols\ntkrnlmp.pdb\3BAEE2762F6442089EF8B926DDC8DBA61\ntkrnlmp.pdb
fffff960`000b6000 fffff960`004cc000 win32k (deferred)
fffff960`006ac000 fffff960`006b5000 TSDDD (deferred)
fffff960`0090a000 fffff960`00944000 cdd (deferred)
fffff960`00a8e000 fffff960`00aed000 ATMFD (deferred)
Unloaded modules:
fffff801`449f5000 fffff801`449ff000 umpass.sys
fffff801`449f5000 fffff801`449ff000 umpass.sys
fffff801`449f5000 fffff801`449ff000 umpass.sys
fffff801`441f8000 fffff801`441ff000 magdrvamd64.
fffff801`441f1000 fffff801`441f8000 magdrvamd64.
fffff801`44046000 fffff801`4404d000 amifldrv64.s
fffff801`4403f000 fffff801`44046000 amifldrv64.s
fffff801`442c2000 fffff801`442cc000 umpass.sys
fffff801`44a00000 fffff801`44a3d000 WUDFRd.sys
fffff801`44a00000 fffff801`44a3d000 WUDFRd.sys
fffff801`44a00000 fffff801`44a3d000 WUDFRd.sys
fffff801`44a00000 fffff801`44a3d000 WUDFRd.sys
fffff801`44b90000 fffff801`44bbd000 tunnel.sys
fffff801`41767000 fffff801`41773000 dump_storpor
fffff801`41773000 fffff801`41790000 dump_storahc
fffff801`41790000 fffff801`417a6000 dump_dumpfve
fffff801`43dbe000 fffff801`43dd8000 EhStorClass.
fffff801`43da4000 fffff801`43dbe000 EhStorClass.
fffff801`43d8a000 fffff801`43da4000 EhStorClass.
fffff801`40c00000 fffff801`40c1a000 EhStorClass.
fffff801`42167000 fffff801`42178000 dam.sys
fffff801`42040000 fffff801`42194000 bwcW8x64.sys
fffff801`40b27000 fffff801`40b35000 WdBoot.sys
fffff801`416d4000 fffff801`416e0000 hwpolicy.sys