=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2019.08.04 15:22:16 =~=~=~=~=~=~=~=~=~=~=~= bt Eip: Frames: Couldn't access memory at 0xF729AB30! kdb:> comt =  nt (ntoskrnl/ke/bug.c:636) Potentially unloaded driver! (ntoskrnl/ke/bug.c:636) Potentially unloaded driver! Entered debugger on embedded INT3 at 0x0008:0x80955de4. kdb:> bt Eip: Frames: Couldn't access memory at 0xF729AB30! kdb:> bt Eip: Frames: Couldn't access memory at 0xF729AB30! kdb:> cont Entered debugger on embedded INT3 at 0x0008:0x80955de4. kdb:> bt Eip: Frames: Couldn't access memory at 0xF729AB30! kdb:> !poolused Pool Used: NonPaged Paged Tag Allocs Used Allocs Used 'ObCI' 143 7920 0 0 'HidP' 32 7808 0 0 'HidC' 10151 776 2 32 'VPB ' 3 288 0 0 'Afdt' 9557 552 0 0 'ObSc' 0 0 63 8832 'Rqrv' 0 0 612 8312 'Gla4' 0 0 1567334 19728 'PcIl' 1 24 0 0 'FTYP' 0 0 623716 994776 'USTR' 0 0 131038205 997568 'FBUF' 0 0 4 128 'TCon' 83554 288 0 0 'Afph' 36991 72 0 0 'SCSI' 95 161392 18 272 'Time' 2 368 0 0 'Ghtb' 1 3232 0 0 'RSYM' 39 5436328 0 0 'lwIP' 52818 752 0 0 --- Press q to abort, any other key to continue --- 'Cdfd' 0 0 3 1008 'Uata' 1074 8984 1 48 'LAN ' 1 104 0 0 'UHCI' 5112 446264 0 0 'Serl' 2 48 0 0 'DOPE' 3 240 0 0 'PSDQ' 1 24 0 0 'Ushk' 0 0 23 736 'MRGN' 12689 252032 0 0 'AfdB' 24921 0 227 90112 'PcSm' 2 48 0 0 'PsIm' 0 0 6 144 'CMkb' 0 0 5883 143360 'CcWK' 6 96 0 0 'AcpD' 387 159744 0 0 'SNSF' 2 96 0 0 'Wait' 5 280 0 0 'ReTa' 54 1520 0 0 'klmo' 67 7464 0 0 'Gla5' 0 0 262 10368 'Gldv' 0 0 5 1456 --- Press q to abort, any other key to continue --- 'Gdev' 0 0 1 8192 'GDev' 0 0 2 3000 'ObjT' 29 13688 0 0 'VadS' 114212 38656 0 0 'PoSL' 0 0 1 16 'lwQu' 102 96 0 0 'IoNm' 7 0 24833 57008 'AdrF' 199 1960 0 0 'KCLF' 20 1456 0 0 'Ussy' 1 48 0 0 'CnEp' 32 736 0 0 'PcSl' 1 48 0 0 'Obtb' 0 0 70 145680 'Cdfs' 0 0 1 196608 'CcWq' 3 72 0 0 'Io ' 10216 3240 1313 12008 'Muta' 68 4384 0 0 'TdiE' 1 32768 0 0 'AcpR' 0 0 31 6352 'Vadl' 1818 22528 0 0 'Thre' 1556 123552 0 0 --- Press q to abort, any other key to continue --- 'VBE ' 0 0 2 16496 'Acpi' 29748 395304 0 0 'MouC' 1 2408 5 240 'Usqu' 110 14880 0 0 'TdiB' 15 384 0 0 'File' 96676 119816 0 0 'KDBS' 72 4432 0 0 'MmSt' 0 0 64 25624 'KbdC' 1 1208 5 240 'MmPt' 2963 1850272 0 0 'IPIF' 2 416 0 0 'MmHt' 1 520 0 0 'MmCt' 64 3936 0 0 'ObNM' 1 80 704 256 'KNMI' 1 24 0 0 'Uskt' 0 0 3 32 'Cdfn' 5 720 0 0 'CcPc' 16 1056 0 0 'CcSc' 398 75200 0 0 'PSet' 2 16384 0 0 'Gla8' 0 0 671 17280 --- Press q to abort, any other key to continue --- 'CcBc' 2 208 0 0 'EHCI' 2 352 0 0 'Call' 4 1432 0 0 'NpFD' 0 0 1 112 'klws' 68 0 82 5200 'SeSi' 0 0 56 712 'PpUs' 0 0 63 3176 'Gsem' 4 256 0 0 'ODPP' 5 312 0 0 'Gpff' 0 0 1063 99936 'Irp ' 12526 16752 0 0 'Ke ' 56 0 1 8192 'usbc' 37 1968 6 0 'Symb' 0 0 71 5456 'DatR' 9299 240 0 0 'TCrs' 2 96 0 0 'VIDP' 0 0 3 496 'Cdvp' 1 96 0 0 'ObHd' 0 0 199 160 'Cdtc' 0 0 2 1376 'MARE' 131017 922480 0 0 --- Press q to abort, any other key to continue --- 'PcNw' 2 8728 0 0 'PcSi' 0 0 92 8712 'Cdic' 2 144 0 0 'PcCi' 1 128 0 0 'PcDi' 0 0 8 384 'Uspi' 23 13944 0 0 'Usev' 24 528 0 0 'Usti' 110 29760 0 0 '0ens' 1 32768 0 0 '8042' 4 3616 1 136 'Sect' 0 0 1759 35272 'LpcM' 0 0 2 720 'Gh?@' 0 0 3211141 19584 'SYMT' 0 0 71 3096 'CcVa' 1144 2560 0 0 'Gh0@' 0 0 548 2856 'POWI' 1 48 0 0 'KsoO' 7 168 0 0 'IPDR' 1 96 0 0 'WDMD' 802709 24440 0 0 'PcCr' 27 3184 199 0 --- Press q to abort, any other key to continue --- 'HscS' 1335 432 0 0 'BATL' 712 880 0 0 '1ens' 2 8192 0 0 'Usse' 0 0 1 32 'ObDi' 0 0 443 10152 'FsRe' 1 904 0 0 'AcpL' 30 1096 0 0 'Ggdv' 0 0 2 392 'Gdca' 0 0 15 1144 'ScsC' 321 80 2 0 'MHid' 3 976 0 0 'BatM' 0 0 1 128 'UMSG' 2 224 332 880 'SeLs' 0 0 4 160 'Gh05' 0 0 176101 5969856 'Key ' 0 0 170024 21920 'RMAP' 60996 1045392 0 0 'NpFn' 0 0 29 1072 'SHUT' 4 96 0 0 'MntA' 0 0 2 136 'CMHv' 27 28872 0 0 --- Press q to abort, any other key to continue --- 'IPFG' 1 40 0 0 'FSmg' 1 64 0 0 'Devi' 232 106712 0 0 'FNTE' 0 0 3271 81296 'Dnod' 118 36816 0 0 'PcNt' 1 392 0 0 'PcSt' 0 0 82 464 'PnPR' 0 0 42 2128 'Affc' 202 3456 0 0 'MDL ' 847632 102692224 0 0 'HidU' 10 256 0 0 'AfTc' 9392 840 0 0 'NrSF' 0 0 20 288 'MHBt' 32433 503616 309097 2822768 'NpFc' 99 4160 99 7072 'Afap' 27959 312 0 0 'Pool' 4 200704 0 0 'USBL' 26 9120 4 352 'Hal ' 3 0 11 272 'KKss' 802772 4424 11 1032 'IOTM' 11 160 0 0 --- Press q to abort, any other key to continue --- 'Cdil' 2 64 0 0 'Even' 838890 17856 0 0 'DRVE' 10 848 0 0 'SeTd' 0 0 9200 1832 'SeSd' 471 112 21383 27896 'Usts' 0 0 1 24 'PcDf' 0 0 1 96 'CM ' 84 51200 12653 6773792 'NCE ' 15 352 0 0 'MmCm' 9 364560 0 0 'Gbra' 0 0 14 25152 'Keye' 0 0 2 1016 'Grga' 0 0 14 8832 'MMSS' 1277 294912 238 13760 'AtoT' 267 17976 0 0 'IPHL' 1 24 0 0 'Proc' 26 15272 0 0 'IOCT' 9 160 1 16 'KISR' 9 5616 0 0 'lwMs' 2 96 0 0 'NpFr' 327675 1360 0 0 --- Press q to abort, any other key to continue --- 'ACPI' 3 48 0 0 'Desk' 5 960 0 0 'Mm ' 9 74224 49 344 'Gfnt' 0 0 1063 136064 'Usho' 840 0 675 168 'PcSb' 0 0 82 72 'AcpI' 0 0 112 2288 'CBRe' 1 40 0 0 'Driv' 51 12288 0 0 'Toke' 0 0 9200 16376 'Gh08' 0 0 80851 1600 'SBIN' 0 0 47 7888 'SeAc' 2 0 8 488 'AfdX' 0 0 201 1344 'Port' 36 1088 65 12368 'IoCo' 9 648 0 0 'SYSB' 51384 200 0 0 'ObDm' 0 0 3 168 'ObNm' 3748 0 13998 18512 'Gla1' 0 0 411 181248 'Cdft' 0 0 3 144 --- Press q to abort, any other key to continue --- '2ens' 1 4096 0 0 'usbh' 60 1976 2 112 'Dire' 0 0 49 5400 'HiUr' 5078 80 0 0 'milk' 0 0 43 144 'FIB ' 12405 216 0 0 'WSTA' 0 0 2 48 'TIMB' 1 4096 0 0 'Gdrs' 0 0 1 48 'STR ' 2240 0 1721 144 'PsT=' 1518 2704 0 0 'IOWI' 11847 160 0 0 'Gpol' 0 0 69 3528 Anon 29063 316632 157522 16600 'Ramd' 0 0 1 128 'Wind' 3 456 0 0 'MmMl' 3 48 0 0 'PCI0' 44 12672 513 57392 'Sema' 40518 150888 0 0 'FsRc' 13 24 0 0 'ScsD' 37 136 2 0 --- Press q to abort, any other key to continue --- 'Adap' 6 816 0 0 'ARSF' 513 600 0 0 'NpFs' 0 0 63344 2376 3a306847 0 0 30377 96624 'NpFf' 0 0 29 2912 'PcPc' 0 0 2 80 'PnPN' 9294 446112 26 0 'PcTc' 1 24 0 0 'PcFp' 0 0 3 3864 'DMA ' 2 1672 0 0 'cnys' 3 120 0 0 'PcIc' 6 224 0 0 'Cdfi' 0 0 2 736 'Usac' 0 0 6 664 'Usdc' 0 0 6 384 'SePa' 342197 3136 1 16 kdb:> !poolhandel==    le Command '!poolhandle' is unknown. kdb:> !poolhandles Command '!poolhandles' is unknown. kdb:> !poolhandles444              handle Handle table at E158B518 with 55 entries in use 00000004: Object: E1549CB0 GrantedAccess: 8 Entry: E1F01008 Object: E1549CB0 Type: (b12e2048) Key ObjectHeader: E1549C98 HandleCount: 1 PointerCount: 1 Name: \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS 00000008: Object: E13E6570 GrantedAccess: 3 Entry: E1F01010 Object: E13E6570 Type: (b12eac98) Directory ObjectHeader: E13E6558 HandleCount: 21 PointerCount: 58 Name: KnownDlls 00000030: Object: B03C9028 GrantedAccess: 100020 Entry: E1F01060 Object: B03C9028 Type: (b130cc98) File ObjectHeader: B03C9010 HandleCount: 1 PointerCount: 1 Name: \Program Files\Graphical Ping\ 0000003C: Object: E158DCD8 GrantedAccess: 1f0001 Entry: E1F01078 Object: E158DCD8 Type: (b10bee70) Port ObjectHeader: E158DCC0 HandleCount: 1 PointerCount: 3 --- Press q to abort, any other key to continue --- 000000E4: Object: FFBDB300 GrantedAccess: 1f0003 Entry: E1F011C8 Object: FFBDB300 Type: (b12e6e70) Event ObjectHeader: FFBDB2E8 HandleCount: 1 PointerCount: 2 000000E8: Object: B0EB5790 GrantedAccess: f037f Entry: E1F011D0 Object: B0EB5790 Type: (b12e5e70) WindowStation ObjectHeader: B0EB5778 HandleCount: 28 PointerCount: 46 Name: WinSta0 000000EC: Object: B0CC2F78 GrantedAccess: f01ff Entry: E1F011D8 Object: B0CC2F78 Type: (b12e5c98) Desktop ObjectHeader: B0CC2F60 HandleCount: 14 PointerCount: 86 Name: Default 000000F0: Object: B0EB5790 GrantedAccess: f037f Entry: E1F011E0 Object: B0EB5790 Type: (b12e5e70) WindowStation ObjectHeader: B0EB5778 HandleCount: 28 PointerCount: 46 Name: WinSta0 0000012C: Object: B041F080 GrantedAccess: 1f0003 Entry: E1F01258 Object: B041F080 Type: (b12e6710) Semaphore --- Press q to abort, any other key to continue --- ObjectHeader: B041F068 HandleCount: 1 PointerCount: 1 00000130: Object: B0387198 GrantedAccess: 1f0003 Entry: E1F01260 Object: B0387198 Type: (b12e6e70) Event ObjectHeader: B0387180 HandleCount: 1 PointerCount: 1 00000134: Object: FFBD4020 GrantedAccess: 1f0003 Entry: E1F01268 Object: FFBD4020 Type: (b12e6e70) Event ObjectHeader: FFBD4008 HandleCount: 1 PointerCount: 1 00000138: Object: E1D15BC8 GrantedAccess: f003f Entry: E1F01270 Object: E1D15BC8 Type: (b12e2048) Key ObjectHeader: E1D15BB0 HandleCount: 1 PointerCount: 1 Name: \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS 0000013C: Object: E1F5D928 GrantedAccess: f003f Entry: E1F01278 Object: E1F5D928 Type: (b12e2048) Key ObjectHeader: E1F5D910 HandleCount: 1 PointerCount: 1 --- Press q to abort, any other key to continue --- Name: \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\DRIVERSILE EXECUTION OPTIONS 00000140: Object: E12D4118 GrantedAccess: f003f Entry: E1F01280 Object: E12D4118 Type: (b12e2048) Key ObjectHeader: E12D4100 HandleCount: 1 PointerCount: 1 Name: \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\DRIVERS32E EXECUTION OPTIONS 00000144: Object: E1C12518 GrantedAccess: 4 Entry: E1F01288 Object: E1C12518 Type: (b12e5a50) Section ObjectHeader: E1C12500 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP20127 00000148: Object: E1C21ED8 GrantedAccess: 4 Entry: E1F01290 Object: E1C21ED8 Type: (b12e5a50) Section ObjectHeader: E1C21EC0 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP1256 0000014C: Object: E1C219D8 GrantedAccess: 4 Entry: E1F01298 Object: E1C219D8 Type: (b12e5a50) Section ObjectHeader: E1C219C0 --- Press q to abort, any other key to continue --- HandleCount: 10 PointerCount: 21 Name: NlsSectionCP1251 00000150: Object: E1C270C8 GrantedAccess: 4 Entry: E1F012A0 Object: E1C270C8 Type: (b12e5a50) Section ObjectHeader: E1C270B0 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP950 00000154: Object: E1C28E70 GrantedAccess: 4 Entry: E1F012A8 Object: E1C28E70 Type: (b12e5a50) Section ObjectHeader: E1C28E58 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP1250 00000158: Object: E1C289F8 GrantedAccess: 4 Entry: E1F012B0 Object: E1C289F8 Type: (b12e5a50) Section ObjectHeader: E1C289E0 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP1253 0000015C: Object: E1C28580 GrantedAccess: 4 Entry: E1F012B8 Object: E1C28580 Type: (b12e5a50) Section ObjectHeader: E1C28568 HandleCount: 10 PointerCount: 21 --- Press q to abort, any other key to continue --- Name: NlsSectionCP1255 00000160: Object: E1C285E0 GrantedAccess: 4 Entry: E1F012C0 Object: E1C285E0 Type: (b12e5a50) Section ObjectHeader: E1C285C8 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP932 00000164: Object: E1C29A48 GrantedAccess: 4 Entry: E1F012C8 Object: E1C29A48 Type: (b12e5a50) Section ObjectHeader: E1C29A30 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP949 00000168: Object: E1C295D0 GrantedAccess: 4 Entry: E1F012D0 Object: E1C295D0 Type: (b12e5a50) Section ObjectHeader: E1C295B8 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP874 0000016C: Object: E1C29198 GrantedAccess: 4 Entry: E1F012D8 Object: E1C29198 Type: (b12e5a50) Section ObjectHeader: E1C29180 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP1254 --- Press q to abort, any other key to continue --- 00000170: Object: E1C2AED8 GrantedAccess: 4 Entry: E1F012E0 Object: E1C2AED8 Type: (b12e5a50) Section ObjectHeader: E1C2AEC0 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP1257 00000174: Object: E1C2AA60 GrantedAccess: 4 Entry: E1F012E8 Object: E1C2AA60 Type: (b12e5a50) Section ObjectHeader: E1C2AA48 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP1258 00000178: Object: E1C2A5C0 GrantedAccess: 4 Entry: E1F012F0 Object: E1C2A5C0 Type: (b12e5a50) Section ObjectHeader: E1C2A5A8 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP28593 0000017C: Object: E1C2A288 GrantedAccess: 4 Entry: E1F012F8 Object: E1C2A288 Type: (b12e5a50) Section ObjectHeader: E1C2A270 HandleCount: 10 PointerCount: 21 Name: NlsSectionCP936 000001B4: Object: B03AF118 GrantedAccess: 1f0001 Entry: E1F01368 --- Press q to abort, any other key to continue --- Object: B03AF118 Type: (b12e6ac0) Mutant ObjectHeader: B03AF100 HandleCount: 1 PointerCount: 1 000001B8: Object: B03AF0D8 GrantedAccess: 1f0001 Entry: E1F01370 Object: B03AF0D8 Type: (b12e6ac0) Mutant ObjectHeader: B03AF0C0 HandleCount: 1 PointerCount: 1 000001BC: Object: B03AF098 GrantedAccess: 1f0001 Entry: E1F01378 Object: B03AF098 Type: (b12e6ac0) Mutant ObjectHeader: B03AF080 HandleCount: 1 PointerCount: 1 000001C0: Object: B0549020 GrantedAccess: 1f0001 Entry: E1F01380 Object: B0549020 Type: (b12e6ac0) Mutant ObjectHeader: B0549008 HandleCount: 1 PointerCount: 1 000001C4: Object: B0549FE0 GrantedAccess: 1f0001 Entry: E1F01388 Object: B0549FE0 Type: (b12e6ac0) Mutant ObjectHeader: B0549FC8 HandleCount: 1 PointerCount: 1 000001C8: Object: B0549FA0 GrantedAccess: 1f0001 Entry: E1F01390 Object: B0549FA0 Type: (b12e6ac0) Mutant --- Press q to abort, any other key to continue --- ObjectHeader: B0549F88 HandleCount: 1 PointerCount: 1 000001E8: Object: B03AF638 GrantedAccess: 12019f Entry: E1F013D0 Object: B03AF638 Type: (b130cc98) File ObjectHeader: B03AF620 HandleCount: 1 PointerCount: 1 Name: \plugplay 000001EC: Object: B0411B68 GrantedAccess: 1f0003 Entry: E1F013D8 Object: B0411B68 Type: (b12e6e70) Event ObjectHeader: B0411B50 HandleCount: 1 PointerCount: 1 00000204: Object: B03B62F0 GrantedAccess: 12019f Entry: E1F01408 Object: B03B62F0 Type: (b130cc98) File ObjectHeader: B03B62D8 HandleCount: 1 PointerCount: 1 Name: \{9b365890-165f-11d0-a195-0020afd156e4} 00000244: Object: E128C088 GrantedAccess: f003f Entry: E1F01488 Object: E128C088 Type: (b12e2048) Key ObjectHeader: E128C070 HandleCount: 1 PointerCount: 1 --- Press q to abort, any other key to continue --- Name: \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\AUDIOCOMPRESSIONMANAGER\DRIVERCACHE\MSACM32.DLLOPTIONS 00000254: Object: E1FEEC50 GrantedAccess: f003f Entry: E1F014A8 Object: E1FEEC50 Type: (b12e2048) Key ObjectHeader: E1FEEC38 HandleCount: 1 PointerCount: 1 Name: \REGISTRY\USER\S-1-5-21-150408686-2026541943-232416260-500ER\DRIVERCACHE\MSACM32.DLLOPTIONS 0000037C: Object: E1BA7238 GrantedAccess: f Entry: E1F016F8 Object: E1BA7238 Type: (b12eac98) Directory ObjectHeader: E1BA7220 HandleCount: 15 PointerCount: 41 Name: BaseNamedObjects 00000380: Object: FFBAEA00 GrantedAccess: 1f0003 Entry: E1F01700 Object: FFBAEA00 Type: (b12e6e70) Event ObjectHeader: FFBAE9E8 HandleCount: 1 PointerCount: 1 00000384: Object: B040FF48 GrantedAccess: 1f0003 Entry: E1F01708 Object: B040FF48 Type: (b12e6e70) Event ObjectHeader: B040FF30 HandleCount: 1 PointerCount: 1 --- Press q to abort, any other key to continue --- 00000388: Object: B040FF18 GrantedAccess: 1f0003 Entry: E1F01710 Object: B040FF18 Type: (b12e6e70) Event ObjectHeader: B040FF00 HandleCount: 1 PointerCount: 1 000003A0: Object: B038A718 GrantedAccess: 1f0003 Entry: E1F01740 Object: B038A718 Type: (b12e6e70) Event ObjectHeader: B038A700 HandleCount: 1 PointerCount: 1 000003A4: Object: E157E220 GrantedAccess: f003f Entry: E1F01748 Object: E157E220 Type: (b12e2048) Key ObjectHeader: E157E208 HandleCount: 1 PointerCount: 1 Name: \REGISTRY\MACHINE\SYSTEM\CONTROLSET001\SERVICES\WINSOCK2\PARAMETERS\PROTOCOL_CATALOG9PTIONS 000003B8: Object: B038A6D0 GrantedAccess: 1f0003 Entry: E1F01770 Object: B038A6D0 Type: (b12e6e70) Event ObjectHeader: B038A6B8 HandleCount: 1 PointerCount: 1 000003BC: Object: E15D7080 GrantedAccess: f003f Entry: E1F01778 Object: E15D7080 Type: (b12e2048) Key ObjectHeader: E15D7068 --- Press q to abort, any other key to continue --- HandleCount: 1 PointerCount: 1 Name: \REGISTRY\MACHINE\SYSTEM\CONTROLSET001\SERVICES\WINSOCK2\PARAMETERS\NAMESPACE_CATALOG5TIONS 000003CC: Object: B03B4DB0 GrantedAccess: 1f03ff Entry: E1F01798 Object: B03B4DB0 Type: (b12ea538) Thread ObjectHeader: B03B4D98 HandleCount: 2 PointerCount: 4 000004B0: Object: B03ABAA8 GrantedAccess: 12019f Entry: E1F01960 Object: B03ABAA8 Type: (b130cc98) File ObjectHeader: B03ABA90 HandleCount: 1 PointerCount: 2 Name: \Endpoint 000004C4: Object: B03978C0 GrantedAccess: 21f0003 Entry: E1F01988 Object: B03978C0 Type: (b130ce70) IoCompletion ObjectHeader: B03978A8 HandleCount: 1 PointerCount: 3 000004C8: Object: B0641080 GrantedAccess: 1f0003 Entry: E1F01990 Object: B0641080 Type: (b12e6e70) Event ObjectHeader: B0641068 HandleCount: 1 PointerCount: 1 000004D0: Object: B03AB8C8 GrantedAccess: 12019f Entry: E1F019A0 --- Press q to abort, any other key to continue --- Object: B03AB8C8 Type: (b130cc98) File ObjectHeader: B03AB8B0 HandleCount: 1 PointerCount: 2 Name: \AsyncSelectHlp 000004DC: Object: B03ABA00 GrantedAccess: 1f01ff Entry: E1F019B8 Object: B03ABA00 Type: (b130cc98) File ObjectHeader: B03AB9E8 HandleCount: 2 PointerCount: 3 Name: \1 000004F0: Object: B0547650 GrantedAccess: 1f0003 Entry: E1F019E0 Object: B0547650 Type: (b12e6e70) Event ObjectHeader: B0547638 HandleCount: 1 PointerCount: 2 kdb:> kdb:> !pool Heap is unimplemented kdb:> !heap Command '!heap' is unknown. kdb:> !used' Command '!used'' is unknown. kdb:> !used'  Command '!used' is unknown. kdb:>