ACPI!WriteFieldObj函数到ACPI!AccessFieldData函数到ACPI!AccessBaseField函数到ACPI!PushFrame函数
第一部分：
0: kd> kc
#
00 ACPI!AccessBaseField
01 ACPI!AccessFieldData
02 ACPI!WriteFieldObj
03 ACPI!RunContext
04 ACPI!InsertReadyQueue
05 ACPI!RestartContext
06 ACPI!AsyncEvalObject
07 ACPI!SyncEvalObject
08 ACPI!AMLIEvalNameSpaceObject
09 ACPI!ACPIGet
0a ACPI!ACPIDetectPdoDevices
0b ACPI!ACPIRootIrpQueryBusRelations
0c ACPI!ACPIRootIrpQueryDeviceRelations
0d ACPI!ACPIDispatchIrp
0e nt!IofCallDriver
0f nt!IopSynchronousCall
10 nt!IopQueryDeviceRelations
11 nt!PipEnumerateDevice
12 nt!PipProcessDevNodeTree
13 nt!PipDeviceActionWorker
14 nt!PipRequestDeviceAction
15 nt!IopInitializeBootDrivers
16 nt!IoInitSystem
17 nt!Phase1Initialization
18 nt!PspSystemThreadStartup
19 nt!KiThreadStartup
0: kd> kv
# ChildEBP RetAddr Args to Child
00 f789a038 f741929b 894ea000 899b0b50 00000004 ACPI!AccessBaseField+0x1d7 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\object.c @ 1281]
01 f789a064 f74193f4 894ea000 899b0b50 894ebc3c ACPI!AccessFieldData+0x179 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\object.c @ 1046]
02 f789a08c f741d832 894ea000 894ebc04 00000000 ACPI!WriteFieldObj+0x116 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\object.c @ 806]
03 f789a0b4 f7420671 00000000 4556414c 894ea000 ACPI!RunContext+0x122 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\ctxt.c @ 588]
04 f789a0dc f7420887 894ea000 00000000 f743a948 ACPI!InsertReadyQueue+0x155 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\sched.c @ 275]
05 f789a0fc f741fb55 894ea000 00000000 899ae2b8 ACPI!RestartContext+0xb3 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\sched.c @ 346]
06 f789a120 f741ff1d 8991ab50 899ae2a4 00000000 ACPI!AsyncEvalObject+0x28c (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\sync.c @ 343]
07 f789a178 f74151ee 8991ab50 899ae2a4 00000000 ACPI!SyncEvalObject+0x107 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\sync.c @ 165]
08 f789a1a0 f7407922 8991ab50 899ae2a4 00000000 ACPI!AMLIEvalNameSpaceObject+0x14d (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\amliapi.c @ 762]
09 f789a1f4 f7400300 8991ab50 4154535f 20040802 ACPI!ACPIGet+0x26a (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\busdrv\acpi\driver\nt\get.c @ 295]
0a f789a250 f744e9d7 89981b98 f789a2a4 804edc6c ACPI!ACPIDetectPdoDevices+0x122 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\busdrv\acpi\driver\nt\detect.c @ 2006]
0b f789a270 f744ee67 89981b98 899bf5b0 f789a2a4 ACPI!ACPIRootIrpQueryBusRelations+0xa1 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\busdrv\acpi\driver\nt\root.c @ 238]
0c f789a2ac f740410e 89981b98 899bf507 89981b98 ACPI!ACPIRootIrpQueryDeviceRelations+0x9d (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\busdrv\acpi\driver\nt\root.c @ 513]
0d f789a2e0 80a2675c 89981b98 899bf5b0 899bf668 ACPI!ACPIDispatchIrp+0x19e (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\busdrv\acpi\driver\nt\dispatch.c @ 690]
0e f789a2fc 80c95e00 00000000 899c1008 899c1008 nt!IofCallDriver+0x62 (FPO: [Non-Fpo]) (CONV: fastcall) [d:\srv03rtm\base\ntos\io\iomgr\iosubs.c @ 2237]
0f f789a32c 80a2e3f3 00000000 f789a348 899c10e8 nt!IopSynchronousCall+0x1aa (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\ntos\io\pnpmgr\pnpirp.c @ 258]
10 f789a36c 80c8d810 00000000 899c1de0 00000000 nt!IopQueryDeviceRelations+0x39 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\ntos\io\pnpmgr\pnpirp.c @ 1131]
11 f789a388 80c94e01 899c1008 00000000 00000000 nt!PipEnumerateDevice+0x56 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\ntos\io\pnpmgr\pnpenum.c @ 980]
12 f789a5d4 80a2dde9 899c5bc8 00000000 89987300 nt!PipProcessDevNodeTree+0x273 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\ntos\io\pnpmgr\pnpenum.c @ 4699]
13 f789a618 80a2e161 00000000 00000000 800836b0 nt!PipDeviceActionWorker+0xcd (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\ntos\io\pnpmgr\pnpenum.c @ 710]
14 f789a630 80e69358 00000000 00000005 00000000 nt!PipRequestDeviceAction+0x139 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\ntos\io\pnpmgr\pnpenum.c @ 598]
15 f789a694 80e655c7 80077000 f789a7dc 00034000 nt!IopInitializeBootDrivers+0x392 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\ntos\io\pnpmgr\pnpinit.c @ 1440]
16 f789a838 80e632fd 80077000 00000000 899a1020 nt!IoInitSystem+0x70b (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\ntos\io\iomgr\ioinit.c @ 665]
17 f789adac 80d391f0 80077000 00000000 00000000 nt!Phase1Initialization+0x9b3 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\ntos\init\init.c @ 2221]
18 f789addc 80b00d52 80e6294a 80077000 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\ntos\ps\create.c @ 2213]
19 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16 [d:\srv03rtm\base\ntos\ke\i386\threadbg.asm @ 81]
windbg> .open -a fffffffff7418fcf
0: kd> dv
pctxt = 0x894ea000
pnsBase = 0x899b0b50
pfd = 0x00000004
pdwData = 0x004ebc38
fRead = 0x00 ''
fPreserve = 0x00 ''
uipAddr = 0xd8
dwAccMask = 0xffffffff
pop = 0x899b0134
dwSize = 4
rc = 0n0
dwOldFlags = 0
pwca = 0x00000000
0: kd> dx -r1 ((ACPI!_ctxt *)0x894ea000)
((ACPI!_ctxt *)0x894ea000) : 0x894ea000 [Type: _ctxt *]
[+0x000] dwSig : 0x54585443 [Type: unsigned long]
[+0x004] pbCtxtEnd : 0x894ec000 : 0xc8 [Type: unsigned char *]
[+0x008] listCtxt [Type: _List]
[+0x010] listQueue [Type: _List]
[+0x018] pplistCtxtQueue : 0x0 [Type: _List * *]
[+0x01c] plistResources : 0x894ea1c0 [Type: _List *]
[+0x020] dwfCtxt : 0x10 [Type: unsigned long]
[+0x024] pnsObj : 0x8991ab50 [Type: _NSObj *]
[+0x028] pnsScope : 0x899b40ac [Type: _NSObj *]
[+0x02c] powner : 0x894ea1d4 [Type: _objowner *]
[+0x030] pcall : 0x894ebce4 [Type: _call *]
[+0x034] pnctxt : 0x0 [Type: _nestedctxt *]
[+0x038] dwSyncLevel : 0xf [Type: unsigned long]
[+0x03c] pbOp : 0x899b4122 : 0x0 [Type: unsigned char *]
[+0x040] Result [Type: _ObjData]
[+0x054] pfnAsyncCallBack : 0xf741eeb5 [Type: void (__cdecl*)(_NSObj *,long,_ObjData *,void *)]
[+0x058] pdataCallBack : 0x899ae2a4 [Type: _ObjData *]
[+0x05c] pvContext : 0xf789a160 [Type: void *]
[+0x060] Timer [Type: _KTIMER]
[+0x088] Dpc [Type: _KDPC]
[+0x0a8] pheapCurrent : 0x894ea0bc [Type: _heap *]
[+0x0ac] CtxtData [Type: _ctxtdata]
[+0x0bc] LocalHeap [Type: _heap]
0: kd> dx -r1 (*((ACPI!_heap *)0x894ea0bc))
(*((ACPI!_heap *)0x894ea0bc)) [Type: _heap]
[+0x000] dwSig : 0x50414548 [Type: unsigned long]
[+0x004] pbHeapEnd : 0x894ebc04 : 0x41 [Type: unsigned char *]
[+0x008] pheapHead : 0x894ea0bc [Type: _heap *]
[+0x00c] pheapNext : 0x0 [Type: _heap *]
[+0x010] pbHeapTop : 0x894ea218 : 0x0 [Type: unsigned char *]
[+0x014] plistFreeHeap : 0x0 [Type: _List *]
[+0x018] Heap [Type: _heapobjhdr]
0: kd> dt _framehdr 0x894ebc04
ACPI!_framehdr
+0x000 dwSig : 0x4f464341
+0x004 dwLen : 0x48
+0x008 dwfFrame : 2
+0x00c pfnParse : 0xf74192de long ACPI!WriteFieldObj+0
0: kd> dv
pctxt = 0x894ea000
pnsBase = 0x899b0b50
pfd = 0x00000004
pdwData = 0x004ebc38
fRead = 0x00 ''
fPreserve = 0x00 ''
uipAddr = 0xd8
dwAccMask = 0xffffffff
pop = 0x899b0134
dwSize = 4
rc = 0n0
dwOldFlags = 0
pwca = 0x00000000
0: kd> dx -r1 ((ACPI!_NSObj *)0x899b0b50)
((ACPI!_NSObj *)0x899b0b50) : 0x899b0b50 [Type: _NSObj *]
[+0x000] list [Type: _List]
[+0x008] pnsParent : 0x899affac [Type: _NSObj *]
[+0x00c] pnsFirstChild : 0x0 [Type: _NSObj *]
[+0x010] dwNameSeg : 0x30304552 [Type: unsigned long]
[+0x014] hOwner : 0x899af330 [Type: void *]
[+0x018] pnsOwnedNext : 0x899b0a90 [Type: _NSObj *]
[+0x01c] ObjData [Type: _ObjData]
[+0x030] Context : 0x899affac [Type: void *]
[+0x034] dwRefCount : 0x0 [Type: unsigned long]
0: kd> dx -r1 (*((ACPI!_ObjData *)0x899b0b6c))
(*((ACPI!_ObjData *)0x899b0b6c)) [Type: _ObjData]
[+0x000] dwfData : 0x0 [Type: unsigned short]
[+0x002] dwDataType : 0xa[Type: unsigned short]
[+0x004] dwRefCount : 0x0 [Type: unsigned long]
[+0x004] pdataBase : 0x0 [Type: _ObjData *]
[+0x008] dwDataValue : 0x0 [Type: unsigned long]
[+0x008] uipDataValue : 0x0 [Type: unsigned long]
[+0x008] pnsAlias : 0x0 [Type: _NSObj *]
[+0x008] pdataAlias : 0x0 [Type: _ObjData *]
[+0x008] powner : 0x0 [Type: void *]
[+0x00c] dwDataLen : 0x18 [Type: unsigned long]
[+0x010] pbDataBuff : 0x899b0134 : 0xd8 [Type: unsigned char *]
0: kd>dt OPREGIONOBJ 0x899b0134
ACPI!OPREGIONOBJ
+0x000 uipOffset : 0xd8
+0x004 dwLen : 4
+0x008 bRegionSpace : 0x2 ''
+0x009 reserved : [3] ""
+0x00c RegionBusy : 0n0
+0x010 listLock : 0
+0x014 plistWaiters : (null)
0: kd> x acpi!gpRSAccessHead
f743a8f0 ACPI!gpRSAccessHead = 0x899950b8
0: kd> dx -r1 ((ACPI!_rsaccess *)0x899950b8)
((ACPI!_rsaccess *)0x899950b8) : 0x899950b8 [Type: _rsaccess *]
[+0x000] prsaNext : 0x0 [Type: _rsaccess *]
[+0x004]dwRegionSpace : 0x2[Type: unsigned long]
[+0x008] pfnCookAccess : 0xf74280d6 [Type: long (__cdecl*)(unsigned long,_NSObj *,unsigned long,unsigned long,unsigned long *,unsigned long,void (__cdecl*)(void *),void *)]
[+0x00c] uipCookParam : 0x899c1228 [Type: unsigned long]
[+0x010] pfnRawAccess : 0x0 [Type: long (__cdecl*)(unsigned long,_FieldUnitObj *,_ObjData *,unsigned long,void (__cdecl*)(void *),void *)]
[+0x014] uipRawParam : 0x0 [Type: unsigned long]
第二部分：
NTSTATUS LOCAL AccessBaseField(PCTXT pctxt, PNSOBJ pnsBase, PFIELDDESC pfd,
PULONG pdwData, BOOLEAN fRead)
{
{
PWRCOOKACC pwca;
//
// Write access.
//
if ((rc = PushFrame(pctxt, SIG_WRCOOKACC, sizeof(WRCOOKACC),
WriteCookAccess, &pwca)) ==
STATUS_SUCCESS)
{
pwca->pnsBase = pnsBase;
pwca->prsa = prsa;
pwca->dwAddr = (ULONG)uipAddr;
pwca->dwSize = dwSize;
pwca->dwData = *pdwData;
pwca->dwDataMask = dwDataMask;
pwca->fPreserve = fPreserve;
}
NTSTATUS LOCAL AccessFieldData(PCTXT pctxt, POBJDATA pdataObj, PFIELDDESC pfd,
PULONG pdwData, BOOLEAN fRead)
{
else if ((rc = GetFieldUnitRegionObj(
(PFIELDUNITOBJ)pdataObj->pbDataBuff, &pnsBase)) ==
STATUS_SUCCESS && pnsBase != NULL)
{
rc = AccessBaseField(pctxt, pnsBase, pfd, pdwData, fRead); 返回到这里：
}
}
EXIT(3, ("AccessFieldData=%x (Data=%x)\n", rc, pdwData? *pdwData: 0));
return rc;
} //AccessFieldData
NTSTATUS LOCAL WriteFieldObj(PCTXT pctxt, PACCFIELDOBJ pafo, NTSTATUS rc)
{
pafo->dwData |= (dwData1 << pafo->iRBits) & pafo->dwDataMask;
rc = AccessFieldData(pctxt, pafo->pdataObj, &pafo->fd,
&pafo->dwData, FALSE); 返回到这里：
//
// Go for as long as there's work to perform.
//
while (!IsStackEmpty(pctxt))
{
CHKDEBUGGERREQ();
pfh = (PFRAMEHDR)pctxt->LocalHeap.pbHeapEnd;
ASSERT(pfh->pfnParse != NULL);
rc = pfh->pfnParse(pctxt, pfh, rc); 返回到这里：
if ((rc == AMLISTA_PENDING) || (rc == AMLISTA_DONE))
{
break;
}
}
0: kd> kc
#
00 ACPI!RunContext
01 ACPI!InsertReadyQueue
02 ACPI!RestartContext
03 ACPI!AsyncEvalObject
04 ACPI!SyncEvalObject
05 ACPI!AMLIEvalNameSpaceObject
06 ACPI!ACPIGet
07 ACPI!ACPIDetectPdoDevices
08 ACPI!ACPIRootIrpQueryBusRelations
09 ACPI!ACPIRootIrpQueryDeviceRelations
0a ACPI!ACPIDispatchIrp
0b nt!IofCallDriver
0c nt!IopSynchronousCall
0d nt!IopQueryDeviceRelations
0e nt!PipEnumerateDevice
0f nt!PipProcessDevNodeTree
10 nt!PipDeviceActionWorker
11 nt!PipRequestDeviceAction
12 nt!IopInitializeBootDrivers
13 nt!IoInitSystem
14 nt!Phase1Initialization
15 nt!PspSystemThreadStartup
16 nt!KiThreadStartup
第三部分：最后的结果
0: kd> t
eax=00000000 ebx=f743a948 ecx=894ea000 edx=894ebbd4 esi=894ea000 edi=894ebbd4
eip=f7417c1d esp=f789a090 ebp=f789a0b4 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
ACPI!WriteCookAccess:
f7417c1d 55 push ebp
0: kd> kc
#
00 ACPI!WriteCookAccess
01 ACPI!RunContext
02 ACPI!InsertReadyQueue
03 ACPI!RestartContext
04 ACPI!AsyncEvalObject
05 ACPI!SyncEvalObject
06 ACPI!AMLIEvalNameSpaceObject
07 ACPI!ACPIGet
08 ACPI!ACPIDetectPdoDevices
09 ACPI!ACPIRootIrpQueryBusRelations
0a ACPI!ACPIRootIrpQueryDeviceRelations
0b ACPI!ACPIDispatchIrp
0c nt!IofCallDriver
0d nt!IopSynchronousCall
0e nt!IopQueryDeviceRelations
0f nt!PipEnumerateDevice
10 nt!PipProcessDevNodeTree
11 nt!PipDeviceActionWorker
12 nt!PipRequestDeviceAction
13 nt!IopInitializeBootDrivers
14 nt!IoInitSystem
15 nt!Phase1Initialization
16 nt!PspSystemThreadStartup
17 nt!KiThreadStartup
0: kd> dv
pctxt = 0x894ea000
pwca = 0x894ebbd4
rc = 0n0
oldIrql = 0x00 ''
busy = 0n-1991328812
dwOldFlags = 8
0: kd> dx -r1 ((ACPI!_NSObj *)0x899b0b50)
((ACPI!_NSObj *)0x899b0b50) : 0x899b0b50 [Type: _NSObj *]
[+0x000] list [Type: _List]
[+0x008] pnsParent : 0x899affac [Type: _NSObj *]
[+0x00c] pnsFirstChild : 0x0 [Type: _NSObj *]
[+0x010] dwNameSeg : 0x30304552 [Type: unsigned long]
[+0x014] hOwner : 0x899af330 [Type: void *]
[+0x018] pnsOwnedNext : 0x899b0a90 [Type: _NSObj *]
[+0x01c] ObjData [Type: _ObjData]
[+0x030] Context : 0x899affac [Type: void *]
[+0x034] dwRefCount : 0x0 [Type: unsigned long]
0: kd> dx -r1 (*((ACPI!_ObjData *)0x899b0b6c))
(*((ACPI!_ObjData *)0x899b0b6c)) [Type: _ObjData]
[+0x000] dwfData : 0x0 [Type: unsigned short]
[+0x002] dwDataType : 0xa [Type: unsigned short]
[+0x004] dwRefCount : 0x0 [Type: unsigned long]
[+0x004] pdataBase : 0x0 [Type: _ObjData *]
[+0x008] dwDataValue : 0x0 [Type: unsigned long]
[+0x008] uipDataValue : 0x0 [Type: unsigned long]
[+0x008] pnsAlias : 0x0 [Type: _NSObj *]
[+0x008] pdataAlias : 0x0 [Type: _ObjData *]
[+0x008] powner : 0x0 [Type: void *]
[+0x00c] dwDataLen : 0x18 [Type: unsigned long]
[+0x010] pbDataBuff : 0x899b0134 : 0xd8 [Type: unsigned char *]
0: kd> dt opregionobj 0x899b0134
ACPI!OPREGIONOBJ
+0x000 uipOffset : 0xd8
+0x004 dwLen : 4
+0x008 bRegionSpace : 0x2 ''
+0x009 reserved : [3] ""
+0x00c RegionBusy : 0n0
+0x010 listLock : 0
+0x014 plistWaiters : (null)
)
)
