ACPI!gReadyQueue中的plistCtxtQ和ACPI!GetOpRegionScopeWorker函数中的赋值*state->PciObj = state->Parent

1: kd> g
Breakpoint 3 hit
eax=00000800 ebx=00000000 ecx=89d7f270 edx=89db4e50 esi=89db3410 edi=00000800
eip=f740d4fa esp=f791ac5c ebp=f791ac68 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
ACPI!GetOpRegionScopeWorker+0xb0:
f740d4fa 8b461c mov eax,dword ptr [esi+1Ch] ds:0023:89db342c=89d7f5ec
1: kd> kc
#
00 ACPI!GetOpRegionScopeWorker
01 ACPI!IsPciDeviceWorker
02 ACPI!IsPciDeviceWorker
03 ACPI!ACPIGetWorkerForString
04 ACPI!AsyncCallBack
05 ACPI!RunContext
06 ACPI!DispatchCtxtQueue
07 ACPI!StartTimeSlicePassive
08 ACPI!ACPIWorker
09 nt!PspSystemThreadStartup
0a nt!KiThreadStartup

1: kd> kv
# ChildEBP RetAddr Args to Child
00 f791ac68 f740d307 89d7f270 00000000 00000000 ACPI!GetOpRegionScopeWorker+0xb0 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\nt\pciopregion.c @ 2123]
01 f791ac8c f740d307 89da3fac 00000000 00000000 ACPI!IsPciDeviceWorker+0x1c1 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\nt\pciopregion.c @ 1519]
02 f791acb0 f74075dc 89da4024 00000000 00000000 ACPI!IsPciDeviceWorker+0x1c1 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\nt\pciopregion.c @ 1519]
03 f791acd8 f741f89b 89da4024 00000000 89db30d4 ACPI!ACPIGetWorkerForString+0x12e (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\nt\get.c @ 5184]
04 f791ad10 f741d905 f74074ae 00000000 f743a934 ACPI!AsyncCallBack+0xe7 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\sync.c @ 81]
05 f791ad34 f742042d 00000000 f7433d3c f743a928 ACPI!RunContext+0x1f5 (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\ctxt.c @ 649]
06 f791ad4c f74204ec f743a950 f743b318 f743a9b8 ACPI!DispatchCtxtQueue+0xaf (FPO: [Non-Fpo]) (CONV: cdecl) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\sched.c @ 150]
07 f791ad64 f74133c5 f743a928 00000000 89df38e0 ACPI!StartTimeSlicePassive+0x57 (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\busdrv\acpi\driver\amlinew\sched.c @ 107]
08 f791adac 80d391f0 00000000 00000000 00000000 ACPI!ACPIWorker+0xbf (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\busdrv\acpi\driver\nt\worker.c @ 302]
09 f791addc 80b00d52 f7413306 00000000 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [Non-Fpo]) (CONV: stdcall) [d:\srv03rtm\base\ntos\ps\create.c @ 2213]
0a 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16 [d:\srv03rtm\base\ntos\ke\i386\threadbg.asm @ 81]
1: kd> dv
AcpiObject = 0x89d7f270
Status = 0n0
Result = 0x00000000
Context = 0x89db3410
1: kd> dt OP_REGION_SCOPE_STATE 0x89db3410
ACPI!OP_REGION_SCOPE_STATE
+0x000 OpRegion : 0x89d7f5bc _NSObj
+0x004 Parent : 0x89d7f270 _NSObj
+0x008 Flags : 0
+0x00c IsPciDeviceResult : 0x1 ''
+0x010 RunCompletion : 0n1
+0x014 CompletionHandler : 0xf740d62c void ACPI!PciConfigSpaceHandlerWorker+0
+0x018 CompletionContext : 0x89db3060 Void
+0x01c PciObj : 0x89d7f5ec -> (null)
1: kd> dx -id 0,0,89dd5240 -r1 ((ACPI!_NSObj * *)0x89d7f5ec)
((ACPI!_NSObj * *)0x89d7f5ec) : 0x89d7f5ec [Type: _NSObj * *]
0x0 [Type: _NSObj *]
1: kd> gu
eax=00000000 ebx=00000000 ecx=89c45f48 edx=80bf6160 esi=89db33e0 edi=00000103
eip=f740d307 esp=f791ac70 ebp=f791ac8c iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000206
ACPI!IsPciDeviceWorker+0x1c1:
f740d307 83c410 add esp,10h
1: kd> dt OP_REGION_SCOPE_STATE 0x89db3410
ACPI!OP_REGION_SCOPE_STATE
+0x000 OpRegion : 0x89c45f48 _NSObj
+0x004 Parent : 0x89d7f270 _NSObj
+0x008 Flags : 0
+0x00c IsPciDeviceResult : 0x1 ''
+0x010 RunCompletion : 0n1
+0x014 CompletionHandler : 0xf740d62c void ACPI!PciConfigSpaceHandlerWorker+0
+0x018 CompletionContext : 0x89db3060 Void
+0x01c PciObj : 0x89d7f5ec -> 0x89d7f270 _NSObj
1: kd> dx -id 0,0,89dd5240 -r1 ((ACPI!_NSObj * *)0x89d7f5ec)
((ACPI!_NSObj * *)0x89d7f5ec) : 0x89d7f5ec [Type: _NSObj * *]
0x89d7f270 [Type: _NSObj *]

第二部分：

NTSTATUS
EXPORT
GetOpRegionScopeWorker(
IN PNSOBJ AcpiObject,
IN NTSTATUS Status,
IN POBJDATA Result,
IN PVOID Context
)
{

if (found) {

*state->PciObj = state->Parent;
status = STATUS_SUCCESS;

} else {

status = STATUS_NOT_FOUND;
}

第三部分：

1: kd> p
Breakpoint 3 hit
eax=00000800 ebx=00000000 ecx=89d7bdf0 edx=89db4e50 esi=89df9500 edi=00000800
eip=f740d4fa esp=f791ac5c ebp=f791ac68 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
ACPI!GetOpRegionScopeWorker+0xb0:
f740d4fa 8b461c mov eax,dword ptr [esi+1Ch] ds:0023:89df951c=89d7c16c
1: kd> bp f7420428
1: kd> g
Breakpoint 10 hit
eax=00008004 ebx=89d20000 ecx=89df0000 edx=00002707 esi=f743a928 edi=f743a934
eip=f742042d esp=f791ad3c ebp=f791ad4c iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
ACPI!DispatchCtxtQueue+0xaf:
f742042d 57 push edi
1: kd> g
Breakpoint 11 hit
eax=89c2f010 ebx=89c2f000 ecx=00008004 edx=00002707 esi=f743a928 edi=f743a934
eip=f7420428 esp=f791ad3c ebp=f791ad4c iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000206
ACPI!DispatchCtxtQueue+0xaa:
f7420428 e8e3d2ffff call ACPI!RunContext (f741d710)
1: kd> g
Breakpoint 3 hit
eax=00000800 ebx=00000000 ecx=89d7c6c0 edx=89db4e50 esi=89db9ed8 edi=00000800
eip=f740d4fa esp=f791ac5c ebp=f791ac68 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
ACPI!GetOpRegionScopeWorker+0xb0:
f740d4fa 8b461c mov eax,dword ptr [esi+1Ch] ds:0023:89db9ef4=89d7ca3c
1: kd> g
Breakpoint 10 hit
eax=00008004 ebx=89c2f000 ecx=89df0000 edx=00002707 esi=f743a928 edi=f743a934
eip=f742042d esp=f791ad3c ebp=f791ad4c iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
ACPI!DispatchCtxtQueue+0xaf:
f742042d 57 push edi
1: kd> g
Breakpoint 11 hit
eax=89c2d010 ebx=89c2d000 ecx=00008004 edx=00002707 esi=f743a928 edi=f743a934
eip=f7420428 esp=f791ad3c ebp=f791ad4c iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000206
ACPI!DispatchCtxtQueue+0xaa:
f7420428 e8e3d2ffff call ACPI!RunContext (f741d710)
1: kd> x ACPI!gReadyQueue
f743a928 ACPI!gReadyQueue = struct _ctxtq
1: kd> dx -r1 (*((ACPI!_ctxtq *)0xf743a928))
(*((ACPI!_ctxtq *)0xf743a928)) [Type: _ctxtq]
[+0x000] dwfCtxtQ : 0x1 [Type: unsigned long]
[+0x004] pkthCurrent : 0x0 [Type: _KTHREAD *]
[+0x008] pctxtCurrent : 0x0 [Type: _ctxt *]
[+0x00c] plistCtxtQ : 0x89c2b010 [Type: _List *]
[+0x010] dwmsTimeSliceLength : 0x64 [Type: unsigned long]
[+0x014] dwmsTimeSliceInterval : 0x64 [Type: unsigned long]
[+0x018] pfnPauseCallback : 0x0 [Type: void (__cdecl*)(void *)]
[+0x01c] PauseCBContext : 0x0 [Type: void *]
[+0x020] mutCtxtQ [Type: _mutex]
[+0x028] Timer [Type: _KTIMER]
[+0x050] DpcStartTimeSlice [Type: _KDPC]
[+0x070] DpcExpireTimeSlice [Type: _KDPC]
[+0x090] WorkItem [Type: _WORK_QUEUE_ITEM]
1: kd> dx -r1 ((ACPI!_List *)0x89c2b010)
((ACPI!_List *)0x89c2b010) : 0x89c2b010 [Type: _List *]
[+0x000] plistPrev : 0x89d20010 [Type: _List *]
[+0x004] plistNext : 0x89c29010 [Type: _List *]
1: kd> dx -r1 ((ACPI!_List *)0x89c29010)
((ACPI!_List *)0x89c29010) : 0x89c29010 [Type: _List *]
[+0x000] plistPrev : 0x89c2b010 [Type: _List *]
[+0x004] plistNext : 0x89c27010 [Type: _List *]
1: kd> dx -r1 ((ACPI!_List *)0x89c27010)
((ACPI!_List *)0x89c27010) : 0x89c27010 [Type: _List *]
[+0x000] plistPrev : 0x89c29010 [Type: _List *]
[+0x004] plistNext : 0x89c25010 [Type: _List *]
1: kd> dx -r1 ((ACPI!_List *)0x89c25010)
((ACPI!_List *)0x89c25010) : 0x89c25010 [Type: _List *]
[+0x000] plistPrev : 0x89c27010 [Type: _List *]
[+0x004] plistNext : 0x89c23010 [Type: _List *]
1: kd> dx -r1 ((ACPI!_List *)0x89c23010)
((ACPI!_List *)0x89c23010) : 0x89c23010 [Type: _List *]
[+0x000] plistPrev : 0x89c25010 [Type: _List *]
[+0x004] plistNext : 0x89c21010 [Type: _List *]
1: kd> dx -r1 ((ACPI!_List *)0x89c21010)
((ACPI!_List *)0x89c21010) : 0x89c21010 [Type: _List *]
[+0x000] plistPrev : 0x89c23010 [Type: _List *]
[+0x004] plistNext : 0x89c1f010 [Type: _List *]
1: kd> dx -r1 ((ACPI!_List *)0x89c1f010)
((ACPI!_List *)0x89c1f010) : 0x89c1f010 [Type: _List *]
[+0x000] plistPrev : 0x89c21010 [Type: _List *]
[+0x004] plistNext : 0x89c1d010 [Type: _List *]

1: kd> g
Breakpoint 11 hit
eax=89c2b010 ebx=89c2b000 ecx=00008004 edx=00002707 esi=f743a928 edi=f743a934
eip=f7420428 esp=f791ad3c ebp=f791ad4c iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000206
ACPI!DispatchCtxtQueue+0xaa:
f7420428 e8e3d2ffff call ACPI!RunContext (f741d710)
1: kd> g
Breakpoint 3 hit
eax=00000800 ebx=00000000 ecx=89d7d840 edx=89db4e50 esi=89df5598 edi=00000800
eip=f740d4fa esp=f791ac5c ebp=f791ac68 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
ACPI!GetOpRegionScopeWorker+0xb0:
f740d4fa 8b461c mov eax,dword ptr [esi+1Ch] ds:0023:89df55b4=89d7dbbc
1: kd> dv
AcpiObject = 0x89d7d840
Status = 0n0
Result = 0x00000000
Context = 0x89df5598
1: kd> dt OP_REGION_SCOPE_STATE 0x89df5598
ACPI!OP_REGION_SCOPE_STATE
+0x000 OpRegion : 0x89d7db8c _NSObj
+0x004 Parent : 0x89d7d840 _NSObj
+0x008 Flags : 0
+0x00c IsPciDeviceResult : 0x1 ''
+0x010 RunCompletion : 0n1
+0x014 CompletionHandler : 0xf740d62c void ACPI!PciConfigSpaceHandlerWorker+0
+0x018 CompletionContext : 0x89dc7ac0 Void
+0x01c PciObj : 0x89d7dbbc -> (null)
1: kd> dx -id 0,0,89dd5240 -r1 ((ACPI!_NSObj *)0x89d7db8c)
((ACPI!_NSObj *)0x89d7db8c) : 0x89d7db8c [Type: _NSObj *]
[+0x000] list [Type: _List]
[+0x008] pnsParent : 0x89d7d840 [Type: _NSObj *]
[+0x00c] pnsFirstChild : 0x0 [Type: _NSObj *]
[+0x010] dwNameSeg : 0x53474552 [Type: unsigned long]
[+0x014] hOwner : 0x89da3330 [Type: void *]
[+0x018] pnsOwnedNext : 0x89d7dac0 [Type: _NSObj *]
[+0x01c] ObjData [Type: _ObjData]
[+0x030] Context : 0x0 [Type: void *]
[+0x034] dwRefCount : 0x0 [Type: unsigned long]
1: kd> db 0x89d7d840
89d7d840 70 cf d7 89 f0 e0 d7 89-ac 3f da 89 84 d8 d7 89 p........?......
89d7d850 50 45 43 30 30 33 da 89-fc d7 d7 89 00 00 06 00 PEC003..........
89d7d860 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
89d7d870 28 14 d7 89 00 00 00 00-48 4e 53 4f 44 00 00 00 (.......HNSOD...
89d7d880 00 50 d7 89 0c dd d7 89-28 d9 d7 89 40 d8 d7 89 .P......(...@...
89d7d890 00 00 00 00 5f 41 44 52-30 33 da 89 40 d8 d7 89 ...._ADR03..@...
89d7d8a0 00 00 01 00 00 00 00 00-00 00 1d 00 00 00 00 00 ................
89d7d8b0 00 00 00 00 00 00 00 00-00 00 00 00 48 50 4b 47 ............HPKG
1: kd> db 0x89d7db8c
89d7db8c c0 da d7 89 d0 db d7 89-40 d8 d7 89 00 00 00 00 ........@.......
89d7db9c 52 45 47 53 30 33 da 89-c0 da d7 89 00 00 0a 00 REGS03..........
89d7dbac 00 00 00 00 00 00 00 00-18 00 00 00 3c d5 d7 89 ............<...
89d7dbbc 00 00 00 00 00 00 00 00-48 4e 53 4f 44 00 00 00 ........HNSOD...
89d7dbcc 00 50 d7 89 8c db d7 89-14 dc d7 89 40 d8 d7 89 .P..........@...
89d7dbdc 00 00 00 00 00 00 00 00-30 33 da 89 8c db d7 89 ........03......
89d7dbec 00 00 83 00 00 00 00 00-00 00 00 00 04 00 00 00 ................
89d7dbfc d0 cb d7 89 00 00 00 00-00 00 00 00 48 4e 53 4f ............HNSO
1: kd> g
Breakpoint 10 hit
eax=00008004 ebx=89c2b000 ecx=89df0000 edx=00002707 esi=f743a928 edi=f743a934
eip=f742042d esp=f791ad3c ebp=f791ad4c iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
ACPI!DispatchCtxtQueue+0xaf:
f742042d 57 push edi
1: kd> dt OP_REGION_SCOPE_STATE 0x89df5598
ACPI!OP_REGION_SCOPE_STATE
+0x000 OpRegion : 0x89c45fd8 _NSObj
+0x004 Parent : 0x89d7d840 _NSObj
+0x008 Flags : 0
+0x00c IsPciDeviceResult : 0x1 ''
+0x010 RunCompletion : 0n1
+0x014 CompletionHandler : 0xf740d62c void ACPI!PciConfigSpaceHandlerWorker+0
+0x018 CompletionContext : 0x89dc7ac0 Void
+0x01c PciObj : 0x89d7dbbc -> 0x89d7d840 _NSObj