forked from killbug2004/CodeMachineCourse
-
Notifications
You must be signed in to change notification settings - Fork 3
Expand file tree
/
Copy pathwindbg.day10.log
More file actions
7439 lines (6965 loc) · 434 KB
/
windbg.day10.log
File metadata and controls
7439 lines (6965 loc) · 434 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Opened log file 'c:\course\windbg.day10.log'
0: kd> g
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](131) tid(1618) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](132) tid(1244) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](133) tid(1244) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](134) tid(1244) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](135) tid(1244) 80070490 Element not found.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](47) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](46) tid(260) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](48) tid(d50) 80070057 The parameter is incorrect.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](31) tid(c08) 8004B200 shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(864) 80004005 Unspecified error
CallContext:[\Startup]
Break instruction exception - code 80000003 (first chance)
*******************************************************************************
* *
* You are seeing this message because you pressed either *
* CTRL+C (if you run console kernel debugger) or, *
* CTRL+BREAK (if you run GUI kernel debugger), *
* on your debugger machine's keyboard. *
* *
* THIS IS NOT A BUG OR A SYSTEM CRASH *
* *
* If you did not intend to break into the debugger, press the "g" key, then *
* press the "Enter" key now. This message might immediately reappear. If it *
* does, press "g" and "Enter" again. *
* *
*******************************************************************************
nt!DbgBreakPointWithStatus:
fffff802`42f66eb0 cc int 3
1: kd> !ndiskd.filters
ffffe00110238700 - QoS Packet Scheduler
Filter ffffe00110b65680, Miniport ffffe00110b041a0 - Microsoft Hyper-V Network Adapter #2
ffffe00110239010 - Virtual WiFi Filter Driver
ffffe00110884510 - WFP vSwitch Layers LightWeight Filter
ffffe00110884d70 - WFP Native MAC Layer LightWeight Filter
Filter ffffe00110dc4830, Miniport ffffe00110b041a0 - Microsoft Hyper-V Network Adapter #2
ffffe00110884010 - WFP 802.3 MAC Layer LightWeight Filter
Filter ffffe00110dc8010, Miniport ffffe00110b041a0 - Microsoft Hyper-V Network Adapter #2
1: kd> g
ds\security\umstartup\usermgr\cli\usermgrcli.cxx(165)\usermgrcli.dll!00007FF8E28510FF: (caller: 00007FF8D82991DB) ReturnHr[PreRelease](33) tid(1174) 80070005 Access is denied.
base\appmodel\execmodel\modern\lifetimemanager\appxexecutionutil.cpp(40)\modernexecserver.dll!00007FF8D82992BC: (caller: 00007FF8D82ADCD5) ReturnHr[PreRelease](83) tid(1174) 80070005 Access is denied.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](136) tid(17f8) 80070490 Element not found.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](49) tid(1764) 80070057 The parameter is incorrect.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](32) tid(e04) 8004B200 shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](50) tid(1764) 80070057 The parameter is incorrect.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](33) tid(e04) 8004B200 shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(b4) 80004005 Unspecified error
CallContext:[\Startup]
shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(15f8) 80004005 Unspecified error
CallContext:[\Startup]
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](51) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](52) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](53) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](54) tid(1764) 80070057 The parameter is incorrect.
Break instruction exception - code 80000003 (first chance)
*******************************************************************************
* *
* You are seeing this message because you pressed either *
* CTRL+C (if you run console kernel debugger) or, *
* CTRL+BREAK (if you run GUI kernel debugger), *
* on your debugger machine's keyboard. *
* *
* THIS IS NOT A BUG OR A SYSTEM CRASH *
* *
* If you did not intend to break into the debugger, press the "g" key, then *
* press the "Enter" key now. This message might immediately reappear. If it *
* does, press "g" and "Enter" again. *
* *
*******************************************************************************
nt!DbgBreakPointWithStatus:
fffff802`42f66eb0 cc int 3
1: kd> .kdfile C:\course\mymap.ini
^ Syntax error in '.kdfile C:\course\mymap.ini'
1: kd> .kdfiles C:\course\mymap.ini
KD file associations loaded from 'C:\course\mymap.ini'
1: kd> .kdfiles
KD file associations loaded from 'C:\course\mymap.ini'
\systemroot\system32\drivers\ndislwf.sys -> C:\course\source\kerrkt.labs\labs\NdisLwf\x64\Debug\NdisLwf.sys
\systemroot\system32\drivers\streamscan.sys -> C:\course\source\kerrkt.labs\labs\StreamScan\x64\Debug\StreamScan.sys
\systemroot\system32\drivers\hidefile.sys -> C:\course\source\kerrkt.labs\labs\HideFile\x64\Debug\HideFile.sys
\systemroot\system32\drivers\hidereg.sys -> C:\course\source\kerrkt.labs\labs\HideReg\x64\Debug\HideReg.sys
\systemroot\system32\drivers\processblock.sys -> C:\course\source\kerrkt.labs\labs\ProcessBlock\x64\Debug\ProcessBlock.sys
\systemroot\system32\drivers\keyboardfilter.sys -> C:\course\source\kerrkt.labs\labs\KeyboardFilter\x64\Debug\KeyboardFilter.sys
\systemroot\system32\drivers\iathook.sys -> C:\course\source\kerrkt.labs\labs\IATHook\x64\Debug\IATHook.sys
\systemroot\system32\drivers\inlinehook.sys -> C:\course\source\kerrkt.labs\labs\InlineHook\x64\Debug\InlineHook.sys
\systemroot\system32\drivers\exportscan.sys -> C:\course\source\kerrkt.labs\labs\ExportScan\x64\Debug\ExportScan.sys
\systemroot\system32\drivers\drivermigrate.sys -> C:\course\source\kerrkt.labs\labs\DriverMigrate\x64\Debug\DriverMigrate.sys
\systemroot\system32\drivers\vulnerable.sys -> C:\course\source\kerrkt.labs\labs\KMCSBypass\sys\x64\Debug\Vulnerable.sys
\systemroot\system32\drivers\registry.sys -> C:\course\source\kerprg.labs\labs\Registry\x64\Debug\Registry.sys
\systemroot\system32\drivers\stacktrace.sys -> C:\course\source\kerprg.labs\labs\StackTrace\x64\Debug\StackTrace.sys
\systemroot\system32\drivers\userioctl.sys -> C:\course\source\kerprg.labs\labs\UserIoctl\x64\Debug\UserIoctl.sys
\systemroot\system32\drivers\workitem.sys -> C:\course\source\kerprg.labs\labs\WorkItem\x64\Debug\WorkItem.sys
\systemroot\system32\drivers\dpctimer.sys -> C:\course\source\kerprg.labs\labs\DpcTimer\x64\Debug\DpcTimer.sys
\systemroot\system32\drivers\buildio.sys -> C:\course\source\kerprg.labs\labs\BuildIo\x64\Debug\BuildIo.sys
\systemroot\system32\drivers\usercomm.sys -> C:\course\source\kerprg.labs\labs\UserComm\x64\Debug\UserComm.sys
\systemroot\system32\drivers\strings.sys -> C:\course\source\kerprg.labs\labs\Strings\x64\Debug\Strings.sys
\systemroot\system32\drivers\simple.sys -> C:\course\source\kerprg.labs\labs\Simple\x64\Debug\Simple.sys
1: kd> bc *
1: kd> bp NdisLwf!DriverEntry
Bp expression 'NdisLwf!DriverEntry' could not be resolved, adding deferred bp
1: kd> g
shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(4f4) 80004005 Unspecified error
CallContext:[\Startup]
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](55) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](56) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](57) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](58) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](59) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](60) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](61) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](62) tid(1764) 80070057 The parameter is incorrect.
ds\security\umstartup\usermgr\cli\usermgrcli.cxx(165)\usermgrcli.dll!00007FF8E28510FF: (caller: 00007FF8D82991DB) ReturnHr[PreRelease](34) tid(f28) 80070005 Access is denied.
base\appmodel\execmodel\modern\lifetimemanager\appxexecutionutil.cpp(40)\modernexecserver.dll!00007FF8D82992BC: (caller: 00007FF8D82ADCD5) ReturnHr[PreRelease](84) tid(f28) 80070005 Access is denied.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](63) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](64) tid(1764) 80070057 The parameter is incorrect.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](137) tid(e2c) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](138) tid(e2c) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](139) tid(e2c) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](140) tid(e2c) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](141) tid(e2c) 80070490 Element not found.
KD: Accessing 'C:\course\source\kerrkt.labs\labs\NdisLwf\x64\Debug\NdisLwf.sys' (\SystemRoot\System32\Drivers\NdisLwf.sys)
File size 9KKdPullRemoteFile(FFFFE00112551840): About to overwrite \SystemRoot\System32\Drivers\NdisLwf.sys and preallocate to 2200
KdPullRemoteFile(FFFFE00112551840): Return from ZwCreateFile with status 0
....
Breakpoint 0 hit
NdisLwf!DriverEntry:
fffff800`12331000 4889542410 mov qword ptr [rsp+10h],rdx
0: kd> bp NdisLwf!ProcessNblChain
0: kd> bp Ndislwf!NDISLWF_ReceiveNetBufferListsHandler
0: kd> g
NdisLwf!DriverEntry DriverObject=FFFFE0010FA5E720 RegistryPath=\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NdisLwf
NdisLwf!DriverEntry NdisFRegisterFilterDriver() FAIL=c0000001
shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(1550) 80004005 Unspecified error
CallContext:[\Startup]
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](65) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](66) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](67) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](68) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](69) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](70) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](71) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](72) tid(1764) 80070057 The parameter is incorrect.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](36) tid(117c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](37) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](38) tid(155c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](39) tid(d08) 8004B200 Suspending
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](40) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](41) tid(c5c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](42) tid(d3c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](43) tid(2f0) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](44) tid(1b0) 8004B200 base\appmodel\appcontracts\lib\backgroundcontractstore.cpp(32)\AppContracts.dll!00007FF8D7B07C7A: (caller: 00007FF8EA40D533) ReturnHr[PreRelease](1) tid(15c0) 80070002 The system cannot find the file specified.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](45) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](46) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](47) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](48) tid(155c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](49) tid(117c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](50) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](51) tid(1b0) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](52) tid(c5c) 8004B200 shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](142) tid(c68) 80070490 Element not found.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](53) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](54) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](55) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](56) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](57) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](58) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](59) tid(1478) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](60) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](61) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](62) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](63) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](64) tid(d08) 8004B200 Suspending
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](65) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](66) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](67) tid(d08) 8004B200 base\appmodel\appcontracts\lib\backgroundcontractstore.cpp(32)\AppContracts.dll!00007FF8D7B07C7A: (caller: 00007FF8EA40D533) ReturnHr[PreRelease](2) tid(c5c) 80070002 The system cannot find the file specified.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](143) tid(b88) 80070490 Element not found.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](68) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](69) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](70) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](71) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](72) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](73) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](74) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](75) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](76) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](77) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](78) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](79) tid(d08) 8004B200 Suspending
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](144) tid(c68) 80070490 Element not found.
base\appmodel\appcontracts\lib\backgroundcontractstore.cpp(32)\AppContracts.dll!00007FF8D7B07C7A: (caller: 00007FF8EA40D533) ReturnHr[PreRelease](3) tid(14c) 80070002 The system cannot find the file specified.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](145) tid(c68) 80070490 Element not found.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(153)\thumbcache.dll!00007FF8D6138D28: (caller: 00007FF8E79AFE2C) ReturnHr[PreRelease](34) tid(14f8) 80030002 %1 could not be found.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](35) tid(11a8) 8004B203 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](36) tid(c08) 8004B200 net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(1) tid(14f8) 80004005 Unspecified error
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(2) tid(14f8) 80004005 Unspecified error
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](146) tid(c68) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](147) tid(c68) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](148) tid(c68) 80070490 Element not found.
KD: Accessing 'C:\course\source\kerrkt.labs\labs\NdisLwf\x64\Debug\NdisLwf.sys' (\SystemRoot\system32\DRIVERS\NdisLwf.sys)
File size 9KKdPullRemoteFile(FFFFE0011053B840): About to overwrite \SystemRoot\system32\DRIVERS\NdisLwf.sys and preallocate to 2200
KdPullRemoteFile(FFFFE0011053B840): Return from ZwCreateFile with status 0
....
Breakpoint 0 hit
NdisLwf!DriverEntry:
fffff800`12341000 4889542410 mov qword ptr [rsp+10h],rdx
1: kd> g
NdisLwf!DriverEntry DriverObject=FFFFE0010FBD3E60 RegistryPath=\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NdisLwf
NdisLwf!DriverEntry NdisFRegisterFilterDriver() FilterDriverHandle=FFFFE00111E5F470
NdisLwf!NDISLWF_AttachHandler [164.104c] (FilterHandle=FFFFE00111E5F0D0 DriverContext=FFFFE0010FBD3E60 AttachParameters=FFFFD000252DAFA0)
NdisLwf!NDISLWF_StatusHandler [164.104c] (Context=FFFFE001118EC860 StatusIndication=FFFFD000252DACA0)
NdisLwf!NDISLWF_StatusHandler [164.104c] (Context=FFFFE001118EC860 StatusIndication=FFFFD000252DACA0)
NdisLwf!NDISLWF_StatusHandler [4bc.15c8] (Context=FFFFE001118EC860 StatusIndication=FFFFF80244B1A770)
NdisLwf!NDISLWF_StatusHandler [164.104c] (Context=FFFFE001118EC860 StatusIndication=FFFFD000228065A0)
NdisLwf!NDISLWF_StatusHandler [164.104c] (Context=FFFFE001118EC860 StatusIndication=FFFFD000228065A0)
NdisLwf!NDISLWF_StatusHandler [164.104c] (Context=FFFFE001118EC860 StatusIndication=FFFFD000228065A0)
NdisLwf!NDISLWF_RestartHandler [164.104c] (Context=FFFFE001118EC860 RestartParameters=FFFFD000252DB1C8)
OperState->OperationalStatus is 5OperState->OperationalStatus is 1shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](37) tid(11a8) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](38) tid(11a8) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](39) tid(11a8) 8004B200 Fail to read system\currentcontrolset\services\Lmhosts\Parameters\EnableUserMode, error=2
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](149) tid(c68) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](150) tid(c68) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](151) tid(c68) 80070490 Element not found.
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA6D10 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA6D10 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA6D10 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA6D10 BLOCKED
Break instruction exception - code 80000003 (first chance)
*******************************************************************************
* *
* You are seeing this message because you pressed either *
* CTRL+C (if you run console kernel debugger) or, *
* CTRL+BREAK (if you run GUI kernel debugger), *
* on your debugger machine's keyboard. *
* *
* THIS IS NOT A BUG OR A SYSTEM CRASH *
* *
* If you did not intend to break into the debugger, press the "g" key, then *
* press the "Enter" key now. This message might immediately reappear. If it *
* does, press "g" and "Enter" again. *
* *
*******************************************************************************
nt!DbgBreakPointWithStatus:
fffff802`42f66eb0 cc int 3
0: kd> bl
0 e fffff800`12341000 0001 (0001) NdisLwf!DriverEntry
1 e fffff800`12331630 0001 (0001) <Unloaded_NdisLwf.sys>+0x1630
2 e fffff800`12331440 0001 (0001) <Unloaded_NdisLwf.sys>+0x1440
0: kd> bc 2
0: kd> bc 1
0: kd> bp NdisLwf!ProcessNblChain
0: kd> bp Ndislwf!NDISLWF_ReceiveNetBufferListsHandler
0: kd> g
Breakpoint 2 hit
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler:
fffff800`12341440 44894c2420 mov dword ptr [rsp+20h],r9d
1: kd> p
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler+0x18:
fffff800`12341458 488b442450 mov rax,qword ptr [rsp+50h]
1: kd> p
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler+0x22:
fffff800`12341462 488b4c2458 mov rcx,qword ptr [rsp+58h]
1: kd> p
Breakpoint 1 hit
NdisLwf!ProcessNblChain:
fffff800`12341630 48894c2408 mov qword ptr [rsp+8],rcx
1: kd> g
Breakpoint 3 hit
NdisLwf!ProcessNblChain+0x7e:
fffff800`123416ae c74424782a000000 mov dword ptr [rsp+78h],2Ah
1: kd> p
NdisLwf!ProcessNblChain+0x86:
fffff800`123416b6 48c784248000000000000000 mov qword ptr [rsp+80h],0
1: kd> g
Breakpoint 1 hit
NdisLwf!ProcessNblChain+0xcb:
fffff800`123416fb 488b842480000000 mov rax,qword ptr [rsp+80h]
1: kd> p
NdisLwf!ProcessNblChain+0xdb:
fffff800`1234170b 488b842488000000 mov rax,qword ptr [rsp+88h]
1: kd> p
NdisLwf!ProcessNblChain+0x112:
fffff800`12341742 488b842488000000 mov rax,qword ptr [rsp+88h]
1: kd> p
NdisLwf!ProcessNblChain+0x123:
fffff800`12341753 488b442460 mov rax,qword ptr [rsp+60h]
1: kd> p
NdisLwf!ProcessNblChain+0x131:
fffff800`12341761 e92fffffff jmp NdisLwf!ProcessNblChain+0x65 (fffff800`12341695)
1: kd> g
Breakpoint 2 hit
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler:
fffff800`12341440 44894c2420 mov dword ptr [rsp+20h],r9d
0: kd> p
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler+0x18:
fffff800`12341458 488b442450 mov rax,qword ptr [rsp+50h]
0: kd> g
Breakpoint 1 hit
NdisLwf!ProcessNblChain+0xcb:
fffff800`123416fb 488b842480000000 mov rax,qword ptr [rsp+80h]
0: kd> g
Breakpoint 2 hit
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler:
fffff800`12341440 44894c2420 mov dword ptr [rsp+20h],r9d
1: kd> g
shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(728) 80004005 Unspecified error
CallContext:[\Startup]
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](73) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](74) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](75) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](76) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](77) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](78) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](79) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](80) tid(1764) 80070057 The parameter is incorrect.
Breakpoint 3 hit
NdisLwf!ProcessNblChain+0x136:
fffff800`12341766 488b442460 mov rax,qword ptr [rsp+60h]
0: kd> p
NdisLwf!ProcessNblChain+0x147:
fffff800`12341777 b801000000 mov eax,1
0: kd> p
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!ProcessNblChain+0x22e:
fffff800`1234185e 488b842490000000 mov rax,qword ptr [rsp+90h]
0: kd> p
NdisLwf!ProcessNblChain+0x23d:
fffff800`1234186d b001 mov al,1
0: kd> p
NdisLwf!ProcessNblChain+0x24d:
fffff800`1234187d 488b8c24c8000000 mov rcx,qword ptr [rsp+0C8h]
0: kd> bl
0 e fffff800`12341000 [c:\course\source\kerrkt.labs\labs\ndislwf\ndislwf.c @ 93] 0001 (0001) NdisLwf!DriverEntry
3 e fffff800`12341766 [c:\course\source\kerrkt.labs\labs\ndislwf\nblchain.c @ 69] 0001 (0001) NdisLwf!ProcessNblChain+0x136
0: kd> bd 3
0: kd> g
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110D943B0 BLOCKED
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](81) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](82) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](83) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](84) tid(1764) 80070057 The parameter is incorrect.
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [72c.10d4] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [72c.778] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](80) tid(117c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](81) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](82) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](83) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](84) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](85) tid(117c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](86) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](87) tid(117c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](88) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](89) tid(90) 8004B200 Suspending
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](152) tid(16fc) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](153) tid(16fc) 80070490 Element not found.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](40) tid(12d0) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(153)\thumbcache.dll!00007FF8D6138D28: (caller: 00007FF8E79AFE2C) ReturnHr[PreRelease](41) tid(12d0) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](42) tid(12b8) 8004B200 ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(3) tid(12d0) 80004005 Unspecified error
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(4) tid(12d0) 80004005 Unspecified error
base\appmodel\appcontracts\lib\backgroundcontractstore.cpp(32)\AppContracts.dll!00007FF8D7B07C7A: (caller: 00007FF8EA40D533) ReturnHr[PreRelease](4) tid(2f0) 80070002 The system cannot find the file specified.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](154) tid(16fc) 80070490 Element not found.
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
NdisLwf!NDISLWF_PauseHandler [164.154c] (Context=FFFFE001118EC860 PauseParameters=FFFFD00020EBD2C8)
OperState->OperationalStatus is 5OperState->OperationalStatus is 1shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](155) tid(16fc) 80070490 Element not found.
WER/CrashAPI:1959: ERROR ReadProcessMemory failed while trying to read PebBaseAddress
WER/CrashAPI:2068: ERROR Failed to read the peb from the process
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](156) tid(16fc) 80070490 Element not found.
base\flighting\flightsettings\broker\lib\flightsettingsonlinevalidation.cpp(330)\FlightSettings.dll!00007FF8D87469BF: (caller: 00007FF8D873A93F) ReturnHr[PreRelease](1) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsdevbroker.cpp(1065)\FlightSettings.dll!00007FF8D8739D2C: (caller: 00007FF8D873BF07) ReturnHr[PreRelease](2) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsdevbroker.cpp(1247)\FlightSettings.dll!00007FF8D873A6A4: (caller: 00007FF8D8739E04) ReturnHr[PreRelease](3) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsdevbroker.cpp(1096)\FlightSettings.dll!00007FF8D8739E8E: (caller: 00007FF8D873C11D) ReturnHr[PreRelease](4) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsdevbroker.cpp(1247)\FlightSettings.dll!00007FF8D873A6A4: (caller: 00007FF8D8739E04) ReturnHr[PreRelease](5) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsdevbroker.cpp(1096)\FlightSettings.dll!00007FF8D8739E8E: (caller: 00007FF8EA40D533) ReturnHr[PreRelease](6) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsonlinevalidation.cpp(330)\FlightSettings.dll!00007FF8D87469BF: (caller: 00007FF8D873A93F) ReturnHr[PreRelease](7) tid(1588) 80070002 The system cannot find the file specified.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](157) tid(1338) 80070490 Element not found.
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(5) tid(12d0) 80004005 Unspecified error
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(6) tid(12d0) 80004005 Unspecified error
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](158) tid(1338) 80070490 Element not found.
NdisLwf!NDISLWF_AttachHandler [164.ee8] (FilterHandle=FFFFE00111E5F0D0 DriverContext=FFFFE0010FBD3E60 AttachParameters=FFFFD00022E9BFA0)
NdisLwf!NDISLWF_StatusHandler [164.ee8] (Context=FFFFE00111E3DEB0 StatusIndication=FFFFD00022E9BCA0)
NdisLwf!NDISLWF_StatusHandler [164.ee8] (Context=FFFFE00111E3DEB0 StatusIndication=FFFFD00022E9BCA0)
OperState->OperationalStatus is 5NdisLwf!NDISLWF_RestartHandler [164.ee8] (Context=FFFFE00111E3DEB0 RestartParameters=FFFFD00022E9C1C8)
OperState->OperationalStatus is 1ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [4.64] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(7) tid(12d0) 80004005 Unspecified error
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(8) tid(12d0) 80004005 Unspecified error
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
NdisLwf!DriverUnload DriverObject=FFFFE0010FBD3E60
NdisLwf!NDISLWF_PauseHandler [4.324] (Context=FFFFE00111E3DEB0 PauseParameters=FFFFD000CA9186A8)
NdisLwf!NDISLWF_StatusHandler [4.1524] (Context=FFFFE00111E3DEB0 StatusIndication=FFFFD00020B5DC00)
NdisLwf!NDISLWF_StatusHandler [508.1768] (Context=FFFFE00111E3DEB0 StatusIndication=FFFFF80244B1A770)
NdisLwf!NDISLWF_StatusHandler [4.a48] (Context=FFFFE00111E3DEB0 StatusIndication=FFFFF80244B1A770)
***** DRIVER UNLOADED *****
OperState->OperationalStatus is 5OperState->OperationalStatus is 1Fail to read system\currentcontrolset\services\Lmhosts\Parameters\EnableUserMode, error=2
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](43) tid(79c) 8004B200 shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](159) tid(990) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](160) tid(175c) 80070490 Element not found.
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(9) tid(12d0) 80004005 Unspecified error
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(10) tid(12d0) 80004005 Unspecified error
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](161) tid(175c) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](162) tid(1704) 80070490 Element not found.
Break instruction exception - code 80000003 (first chance)
*******************************************************************************
* *
* You are seeing this message because you pressed either *
* CTRL+C (if you run console kernel debugger) or, *
* CTRL+BREAK (if you run GUI kernel debugger), *
* on your debugger machine's keyboard. *
* *
* THIS IS NOT A BUG OR A SYSTEM CRASH *
* *
* If you did not intend to break into the debugger, press the "g" key, then *
* press the "Enter" key now. This message might immediately reappear. If it *
* does, press "g" and "Enter" again. *
* *
*******************************************************************************
nt!DbgBreakPointWithStatus:
fffff802`42f66eb0 cc int 3
1: kd> dt ndis*!*NDIS_
1: kd> x
1: kd> x ndis*
1: kd> x ndis
1: kd> x nt!*NDIS*
fffff802`42ef7e4c nt!CcZeroDataOnDisk (<no parameter info>)
fffff802`432e844c nt!PiPnpRtlDisableRemoveOperationDispatch (<no parameter info>)
fffff802`43581424 nt!Phase1InitializationDiscard (<no parameter info>)
fffff802`43115900 nt!PiPnpRtlRemoveOperationDispatchLock = <no type information>
fffff802`4330b788 nt!PopSessionDisconnected (<no parameter info>)
fffff802`433206a0 nt!PopSetSessionDisplayStatus (<no parameter info>)
fffff802`4319e6a8 nt!KeUserExceptionDispatcher = <no type information>
fffff802`430f7f40 nt!PspPicoRegistrationDisabled = <no type information>
fffff802`42ef7a88 nt!MiPfCoalesceAndIssueIOs (<no parameter info>)
fffff802`42f25a4c nt!PopDiagTraceSessionDisplayStateChange (<no parameter info>)
fffff802`430fb6b0 nt!PopEnergyEstimationDisabled = <no type information>
fffff802`430100b8 nt!RtlpLogExceptionDispatch (<no parameter info>)
fffff802`43317794 nt!WmipFindISinGEbyName (<no parameter info>)
fffff802`431388e4 nt!Kd_NDIS_Mask = <no type information>
fffff802`4347d40c nt!WmipFindISInDSByGuid (<no parameter info>)
fffff802`4305bd80 nt!GUID_NDIS_LAN_CLASS = <no type information>
fffff802`43138954 nt!Kd_VSSDYNDISK_Mask = <no type information>
fffff802`432fe8a4 nt!PopNotifySessionDisplayRequired (<no parameter info>)
fffff802`4319e690 nt!KeRaiseUserExceptionDispatcher = <no type information>
fffff802`42f6c300 nt!KiExceptionDispatch (<no parameter info>)
1: kd> dt nt!_NDIS*
1: kd> dt ndis!*
NDIS!LIST_ENTRY64
NDIS!LIST_ENTRY32
NDIS!_GUID
NDIS!_GUID
NDIS!SE_WS_APPX_SIGNATURE_ORIGIN
NDIS!JOB_OBJECT_NET_RATE_CONTROL_FLAGS
NDIS!JOB_OBJECT_IO_RATE_CONTROL_FLAGS
NDIS!_KSYSTEM_TIME
NDIS!_NT_PRODUCT_TYPE
NDIS!_ALTERNATIVE_ARCHITECTURE_TYPE
NDIS!_KUSER_SHARED_DATA
NDIS!_ULARGE_INTEGER
NDIS!_TP_POOL
NDIS!_TP_CLEANUP_GROUP
NDIS!_ACTIVATION_CONTEXT
NDIS!_TP_CALLBACK_INSTANCE
NDIS!_TP_CALLBACK_PRIORITY
NDIS!_TP_CALLBACK_ENVIRON_V3
NDIS!_TP_CALLBACK_ENVIRON_V3::<unnamed-type-u>
NDIS!_TP_CALLBACK_ENVIRON_V3::<unnamed-type-u>::<unnamed-type-s>
NDIS!_TEB
NDIS!_LIST_ENTRY
NDIS!_LIST_ENTRY
NDIS!_SINGLE_LIST_ENTRY
NDIS!_RTL_SPLAY_LINKS
NDIS!_RTL_DYNAMIC_HASH_TABLE_CONTEXT
NDIS!_RTL_DYNAMIC_HASH_TABLE_ENUMERATOR
NDIS!_RTL_DYNAMIC_HASH_TABLE_ENTRY
NDIS!_RTL_DYNAMIC_HASH_TABLE
NDIS!_UNICODE_STRING
NDIS!_STRING
NDIS!_LARGE_INTEGER
NDIS!_RTL_BITMAP
NDIS!_LARGE_INTEGER::<unnamed-type-u>
NDIS!_LUID
NDIS!_IMAGE_NT_HEADERS64
NDIS!_IMAGE_DOS_HEADER
NDIS!_RTL_RESOURCE_POLICY_FLAGS
NDIS!_RTL_RB_TREE
NDIS!_RTL_BALANCED_NODE
NDIS!_RTL_AVL_TREE
NDIS!_KTHREAD
NDIS!_MODE
NDIS!_KPCR
NDIS!_KNODE
NDIS!_KPRCB
NDIS!_KFLOATING_SAVE
NDIS!_EXT_SET_PARAMETERS_V0
NDIS!_EVENT_DATA_DESCRIPTOR
NDIS!_EVENT_DESCRIPTOR
NDIS!_EVENT_DESCRIPTOR
NDIS!_FAST_MUTEX
NDIS!_EVENT_TYPE
NDIS!_KEVENT
NDIS!_LOOKASIDE_LIST_EX
NDIS!_POOL_TYPE
NDIS!_GENERAL_LOOKASIDE_POOL
NDIS!_SLIST_ENTRY
NDIS!_SLIST_HEADER
NDIS!_NPAGED_LOOKASIDE_LIST
NDIS!_GENERAL_LOOKASIDE
NDIS!_PAGED_LOOKASIDE_LIST
NDIS!_LARGE_INTEGER
NDIS!_ULARGE_INTEGER
NDIS!_UNICODE_STRING
NDIS!_IO_STATUS_BLOCK
NDIS!_IO_STATUS_BLOCK
NDIS!_QUAD
NDIS!_QUAD
NDIS!_WORK_QUEUE_ITEM
NDIS!_EXT_DELETE_PARAMETERS
NDIS!_EX_PUSH_LOCK
NDIS!_ETHREAD
NDIS!_IRP
NDIS!_IRP::<unnamed-type-Tail>
NDIS!_IRP::<unnamed-type-Tail>::<unnamed-type-Overlay>
NDIS!_IO_STACK_LOCATION
NDIS!_IO_TIMER
NDIS!_DEVICE_OBJECT
NDIS!_KDPC
NDIS!_ECP_LIST
NDIS!_ESILO
NDIS!_IO_DRIVER_CREATE_CONTEXT
NDIS!_IO_PRIORITY_HINT
NDIS!_IO_PRIORITY_INFO
NDIS!_DEVICE_POWER_STATE
NDIS!_DEVICE_POWER_STATE
NDIS!_DEVICE_WAKE_DEPTH
NDIS!_DEVPROPKEY
NDIS!_DEVPROPKEY
NDIS!_DEVPROPCOMPKEY
NDIS!_DEVPROPSTORE
NDIS!_DEVPROPCOMPKEY
NDIS!_DEVPROPSTORE
NDIS!_EPROCESS
NDIS!_MDL
NDIS!_MEMORY_CACHING_TYPE
NDIS!_DMA_ADAPTER
NDIS!_IO_ALLOCATION_ACTION
NDIS!DMA_COMPLETION_STATUS
NDIS!_DMA_OPERATIONS
NDIS!_LARGE_INTEGER
NDIS!_ACCESS_STATE
NDIS!_AUX_ACCESS_DATA
NDIS!_KPROCESS
NDIS!_OBJECT_HANDLE_INFORMATION
NDIS!_OBJECT_TYPE
NDIS!_WHEA_ERROR_TYPE
NDIS!_WHEA_ERROR_SEVERITY
NDIS!_WHEA_ERROR_SOURCE_TYPE
NDIS!_WHEA_ERROR_PACKET_DATA_FORMAT
NDIS!_WHEA_ERROR_PACKET_V2
NDIS!_WHEA_ERROR_RECORD
NDIS!_WHEA_ERROR_RECORD_HEADER
NDIS!_WHEA_ERROR_RECORD_SECTION_DESCRIPTOR
NDIS!_WHEA_REVISION
NDIS!in6_addr
NDIS!in6_addr
NDIS!in6_addr::<unnamed-type-u>
NDIS!in6_addr::<unnamed-type-u>
NDIS!sockaddr_in6
NDIS!sockaddr_in6
NDIS!_NDIS_SPIN_LOCK
NDIS!_NDIS_PACKET
NDIS!_NDIS_PACKET_PRIVATE
NDIS!_NET_BUFFER_LIST
NDIS!SCOPE_LEVEL
NDIS!SCOPE_ID
NDIS!in_addr
NDIS!in_addr
NDIS!in_addr::<unnamed-type-S_un>
NDIS!in_addr::<unnamed-type-S_un>
NDIS!in_addr
NDIS!in_addr::<unnamed-type-S_un>
NDIS!sockaddr_in
NDIS!sockaddr_in
NDIS!NL_ADDRESS_TYPE
NDIS!in_addr
NDIS!in6_addr
NDIS!SCOPE_ID
NDIS!sockaddr
NDIS!sockaddr
NDIS!_DL_EUI48
NDIS!_DL_OUI
NDIS!DL_ADDRESS_TYPE
NDIS!_IPV4_HEADER
NDIS!_IPV4_HEADER
NDIS!_IPV6_FRAGMENT_HEADER
NDIS!_IPV6_FRAGMENT_HEADER
NDIS!Ipv6pGetVersionClassEcnFlow::__l2::<unnamed-type-VersionClassEcnFlow>
NDIS!Ipv6pGetVersionClassEcnFlow::__l2::<unnamed-type-VersionClassEcnFlow>::<unnamed-tag>
NDIS!_NPI_MODULEID
NDIS!_NPI_MODULEID_TYPE
NDIS!_NPI_MODULEID
NDIS!_NPI_MODULEID_TYPE
NDIS!_LUID
NDIS!_REFERENCE_OBJECT
NDIS!_NETIO_NET_BUFFER_LIST_CONTEXT
NDIS!_NET_BUFFER
NDIS!_NETIO_NET_BUFFER_CONTEXT
NDIS!_NET_BUFFER_HEADER
NDIS!_NET_BUFFER_DATA
NDIS!_NET_BUFFER_DATA_LENGTH
NDIS!_NET_BUFFER_LIST_HEADER
NDIS!_NET_BUFFER_LIST_DATA
NDIS!_NET_BUFFER_LIST
NDIS!_NET_BUFFER
NDIS!_NBL_QUEUE
NDIS!_NBL_QUEUE
NDIS!PNDIS_PER_PROCESSOR_SLOT__
NDIS!_PCW_COUNTER_DESCRIPTOR
NDIS!_PCW_COUNTER_DESCRIPTOR
NDIS!_PCW_CALLBACK_TYPE
NDIS!_UNICODE_STRING
NDIS!_PCW_REGISTRATION
NDIS!_PCW_REGISTRATION_INFORMATION
NDIS!_NDIS_PER_PROC_PERFORMANCE_COUNTERS
NDIS!_NDIS_PER_PROC_PERFORMANCE_COUNTERS
NDIS!_PCW_INSTANCE
NDIS!_PCW_DATA
NDIS!_PCW_BUFFER
NDIS!_NDIS_NDK_PERFORMANCE_COUNTERS
NDIS!_NDIS_NDK_PERFORMANCE_COUNTERS
NDIS!_NDIS_PHYSICAL_PERFORMANCE_COUNTERS
NDIS!_NDIS_PHYSICAL_PERFORMANCE_COUNTERS
NDIS!_NDIS_PD_TRANSMIT_QUEUE_COUNTER
NDIS!_NDIS_PD_TRANSMIT_QUEUE_COUNTER
NDIS!_NDIS_PD_RECEIVE_QUEUE_COUNTER
NDIS!_NDIS_PD_RECEIVE_QUEUE_COUNTER
NDIS!_NDIS_PD_FILTER_COUNTER
NDIS!_NDIS_PD_FILTER_COUNTER
NDIS!_NDIS_PD_EC_UTILIZATION_COUNTER
NDIS!_NDIS_PD_EC_UTILIZATION_COUNTER
NDIS!_NDIS_PD_QUEUE_DEPTH_COUNTER
NDIS!_NDIS_PD_QUEUE_DEPTH_COUNTER
NDIS!KRundownBase
NDIS!_EX_RUNDOWN_REF
NDIS!KRundown
NDIS!KRundownManualConstruct
NDIS!KRundownHolder
NDIS!KCriticalRegion
NDIS!KDefaultRegion
NDIS!KIrqlRegion
NDIS!KPushLockBase
NDIS!KWaitEventBase
NDIS!_KWAIT_REASON
NDIS!_LARGE_INTEGER
NDIS!KWaitEvent
NDIS!KWaitEventManualConstruct
NDIS!KLockHolder::<unnamed-type-m_State>
NDIS!KLockHolder
NDIS!KLockThisShared
NDIS!KLockThisExclusive
NDIS!CallRunMode
NDIS!NDIS_BIND_DRIVER_BASE
NDIS!KALLOCATION_TAG<1147946562,1>
NDIS!KALLOCATOR<1147946562,1>
NDIS!_NDIS_DEBUG_BLOCK<1147946562>
NDIS!_NDIS_DEBUG_BLOCK<1147946562>
NDIS!PAGED_OBJECT<1147946562>
NDIS!NDIS_BIND_FILTER_DRIVER
NDIS!Rtl::KString
NDIS!KPtr<Rtl::KString,KDeletePtr<Rtl::KString> >
NDIS!KPtr<Rtl::KString,KDeletePtr<Rtl::KString> >
NDIS!NDIS_BIND_FILTER_LINK
NDIS!KALLOCATION_TAG<1282164290,1>
NDIS!KALLOCATOR<1282164290,1>
NDIS!_NDIS_DEBUG_BLOCK<1282164290>
NDIS!_NDIS_DEBUG_BLOCK<1282164290>
NDIS!PAGED_OBJECT<1282164290>
NDIS!NDIS_BIND_LINK_BASE
NDIS!NDIS_BIND_FILTER_LINK
NDIS!KRef<NDIS_BIND_FILTER_DRIVER>
NDIS!NDIS_BIND_FILTER_DRIVER
NDIS!KRef<NDIS_BIND_FILTER_DRIVER>
NDIS!KALLOCATION_TAG<1148473410,1>
NDIS!KALLOCATOR<1148473410,1>
NDIS!_NDIS_DEBUG_BLOCK<1148473410>
NDIS!_NDIS_DEBUG_BLOCK<1148473410>
NDIS!PAGED_OBJECT<1148473410>
NDIS!NDIS_BIND_PROTOCOL_DRIVER
NDIS!NDIS_BIND_PROTOCOL_LINK
NDIS!KALLOCATION_TAG<1282691138,1>
NDIS!KALLOCATOR<1282691138,1>
NDIS!_NDIS_DEBUG_BLOCK<1282691138>
NDIS!_NDIS_DEBUG_BLOCK<1282691138>
NDIS!PAGED_OBJECT<1282691138>
NDIS!NDIS_BIND_PROTOCOL_LINK
NDIS!KRef<NDIS_BIND_PROTOCOL_DRIVER>
NDIS!NDIS_BIND_PROTOCOL_DRIVER
NDIS!KRef<NDIS_BIND_PROTOCOL_DRIVER>
NDIS!close_registry_handle
NDIS!close_registry_handle
NDIS!KPtr<void *,close_registry_handle>
NDIS!KPtr<void *,close_registry_handle>
NDIS!KRegKey::BooleanDisposition
NDIS!KRegKey
NDIS!KRegKey
NDIS!KALLOCATION_TAG<1396859982,1>
NDIS!KALLOCATOR<1396859982,1>
NDIS!_NDIS_DEBUG_BLOCK<1396859982>
NDIS!_NDIS_DEBUG_BLOCK<1396859982>
NDIS!PAGED_OBJECT<1396859982>
NDIS!Ndis::BindSource::Flags
NDIS!Ndis::BindStack
NDIS!KALLOCATION_TAG<1920090443,1>
NDIS!KALLOCATOR<1920090443,1>
NDIS!_NDIS_DEBUG_BLOCK<1920090443>
NDIS!_NDIS_DEBUG_BLOCK<1920090443>
NDIS!PAGED_OBJECT<1920090443>
NDIS!Rtl::KArray<KPtr<NDIS_BIND_PROTOCOL_LINK,KDeletePtr<NDIS_BIND_PROTOCOL_LINK> > >::iterator
NDIS!Rtl::KArray<KPtr<NDIS_BIND_PROTOCOL_LINK,KDeletePtr<NDIS_BIND_PROTOCOL_LINK> > >
NDIS!KPtr<NDIS_BIND_PROTOCOL_LINK,KDeletePtr<NDIS_BIND_PROTOCOL_LINK> >
NDIS!Rtl::KArray<KPtr<NDIS_BIND_PROTOCOL_LINK,KDeletePtr<NDIS_BIND_PROTOCOL_LINK> > >
NDIS!Rtl::KArray<KPtr<NDIS_BIND_FILTER_LINK,KDeletePtr<NDIS_BIND_FILTER_LINK> > >::iterator
NDIS!Rtl::KArray<KPtr<NDIS_BIND_FILTER_LINK,KDeletePtr<NDIS_BIND_FILTER_LINK> > >
NDIS!KPtr<NDIS_BIND_FILTER_LINK,KDeletePtr<NDIS_BIND_FILTER_LINK> >
NDIS!Rtl::KArray<KPtr<NDIS_BIND_FILTER_LINK,KDeletePtr<NDIS_BIND_FILTER_LINK> > >
NDIS!KALLOCATION_TAG<1935819854,1>
NDIS!KALLOCATOR<1935819854,1>
NDIS!_NDIS_DEBUG_BLOCK<1935819854>
NDIS!_NDIS_DEBUG_BLOCK<1935819854>
NDIS!PAGED_OBJECT<1935819854>
NDIS!BIND_SOURCE_STATE
NDIS!BINDING_ENABLED_OR_DISABLED
NDIS!NDIS_DO_NOT_BIND_REASON
NDIS!PAUSE_OR_RESTART
NDIS!NDIS_PAUSE_REASON
NDIS!Ndis::BindState
NDIS!Ndis::BindState
NDIS!_RECORDER_CONFIGURE_PARAMS
NDIS!_RECORDER_LOG_CREATE_PARAMS
NDIS!NDIS_RESTART_INFORMATION
NDIS!Rtl::KArray<unsigned char>::iterator
NDIS!Rtl::KArray<unsigned char>
NDIS!Rtl::KArray<unsigned char>
NDIS!_NDIS_RESTART_ATTRIBUTES
NDIS!_NET_IF_ACCESS_TYPE
NDIS!_NET_IF_CONNECTION_TYPE
NDIS!_NDIS_RESTART_GENERAL_ATTRIBUTES
NDIS!_NDIS_RECEIVE_SCALE_CAPABILITIES
NDIS!_NDIS_PROTOCOL_RESTART_PARAMETERS
NDIS!_NDIS_PACKET_WRAPPER
NDIS!_NDIS_PROTOCOL_BLOCK
NDIS!KWorkItemBase<_NDIS_PROTOCOL_BLOCK,KCoalescingWorkItem<_NDIS_PROTOCOL_BLOCK> >
NDIS!KCoalescingWorkItem<_NDIS_PROTOCOL_BLOCK>
NDIS!NdisStopwatch
NDIS!NdisStopwatch
NDIS!_NDIS_IPSEC_PACKET_INFO
NDIS!_NDIS_XLATE_TYPE
NDIS!_NDIS_IPSEC_OFFLOAD_V1_NET_BUFFER_LIST_INFO
NDIS!_NDIS_IPSEC_OFFLOAD_V1_NET_BUFFER_LIST_INFO::<unnamed-tag>::<unnamed-type-Transmit>
NDIS!_NDIS_IPSEC_PACKET_INFO::<unnamed-tag>::<unnamed-type-Transmit>
NDIS!_NDIS_IPSEC_OFFLOAD_V1_NET_BUFFER_LIST_INFO::<unnamed-tag>::<unnamed-type-Receive>
NDIS!_NDIS_IPSEC_PACKET_INFO::<unnamed-tag>::<unnamed-type-Receive>
NDIS!_NDIS_OBJECT_HEADER
NDIS!_NET_IF_MEDIA_CONNECT_STATE
NDIS!_NET_IF_MEDIA_DUPLEX_STATE
NDIS!_NDIS_MEDIUM
NDIS!_NDIS_INTERFACE_TYPE
NDIS!_NDIS_SUPPORTED_PAUSE_FUNCTIONS
NDIS!_SYSTEM_POWER_STATE
NDIS!_NDIS_PNP_DEVICE_STATE
NDIS!_NDIS_PHYSICAL_MEDIUM
NDIS!_NDIS_MINIPORT_STATE
NDIS!_NDIS_SEND_PATH_TYPE
NDIS!_NDIS_PORT_CONTROL_STATE
NDIS!_NDIS_PORT_AUTHORIZATION_STATE
NDIS!_INTERFACE_TYPE
NDIS!_NET_IF_ADMIN_STATUS
NDIS!_NET_IF_OPER_STATUS
NDIS!_NDIS_MINIPORT_EVENT
NDIS!_NDIS_RSS_PROFILE
NDIS!_NDIS_PM_WAKE_REASON_TYPE
NDIS!_NDIS_MINIPORT_BLOCK
NDIS!NDIS_MINIPORT_ADAPTER_HANDLE__
NDIS!_NDIS_NDIS5_DRIVER_STATE
NDIS!_NDIS_COMMON_OPEN_BLOCK
NDIS!_NDIS_OPEN_BLOCK
NDIS!_NDIS_CO_AF_BLOCK
NDIS!_NDIS_CO_VC_BLOCK
NDIS!_NDIS_CO_VC_PTR_BLOCK
NDIS!_NDIS_CO_PARTY_BLOCK
NDIS!_NDIS_CO_SAP_BLOCK
NDIS!_NDIS_PKT_POOL
NDIS!_NDIS_WRAPPER_CONFIGURATION_HANDLE
NDIS!NDIS_ADDDEVICE_PARAMETERS
NDIS!_NET_LUID_LH
NDIS!_KSGATE
NDIS!KSEVENT_SET
NDIS!KSEVENT_ITEM
NDIS!_KSEVENT_ENTRY
NDIS!_KSFILTER_DESCRIPTOR
NDIS!_KSFILTER
NDIS!_KSPIN_DESCRIPTOR_EX
NDIS!KSPIN_COMMUNICATION
NDIS!KSPIN_DATAFLOW
NDIS!KSSTATE
NDIS!KSRESET
NDIS!_KSPIN
NDIS!_FILE_OBJECT
NDIS!_KSFILTERFACTORY
NDIS!_KSDEVICE_DESCRIPTOR
NDIS!_KSDEVICE
NDIS!_EVENT_RECORD
NDIS!_EVENT_RECORD
NDIS!_EVENT_HEADER
NDIS!_EVENT_HEADER
NDIS!_ETW_BUFFER_CONTEXT
NDIS!_ETW_BUFFER_CONTEXT
NDIS!_PERFINFO_GROUPMASK
NDIS!_PPL_LOOKASIDE_LIST
NDIS!_PPL_LOOKASIDE_LIST_ARRAY
NDIS!__m64
NDIS!__m64
NDIS!__m128
NDIS!__m128
NDIS!_MCGEN_TRACE_CONTEXT
NDIS!_EVENT_FILTER_DESCRIPTOR
NDIS!COMPARTMENT_ID
NDIS!_NDIS_WDF_CX_CHARACTERISTICS
NDIS!_NET_IF_DIRECTION_TYPE
NDIS!_NDIS_NSI_INTERFACE_ENUM_ROS
NDIS!_NDIS_NSI_INTERFACE_ENUM_ROD
NDIS!NdisIfBlockSource
NDIS!_NDIS_IF_BLOCK
NDIS!_NDIS_MINIPORT_HOOK_DRIVER_TYPE
NDIS!_NDIS_PD_EXT_CLIENT_PARAM
NDIS!_NDIS_PD_EXT_CLIENT_DISPATCH
NDIS!_PD_BUFFER
NDIS!_NDIS_SWITCH_PORT_DESTINATION
NDIS!_NDIS_PD_BM_DOMAIN_PARAMETERS
NDIS!_NDIS_PD_BM_DOMAIN_MEMBER_PARAMETERS
NDIS!_NDIS_M_DRIVER_BLOCK
NDIS!_NDIS_MINIPORT_DRIVER_CHARACTERISTICS
NDIS!KPtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS,KDeletePtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS> >
NDIS!KPtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS,KDeletePtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS> >
NDIS!_NDIS_HALT_ACTION
NDIS!_VF_NDIS_DISPATCH_TABLE
NDIS!_NDIS_WDF_CX_DRIVER_STATE
NDIS!_NDIS_WDF_CX_DRIVER_BLOCK
NDIS!_DRIVER_OBJECT
NDIS!_NDIS_OID_REQUEST_RESERVED
NDIS!_NDIS_REQUEST_TYPE
NDIS!_NDIS_OID_REQUEST
NDIS!_NDIS_FILTER_STATE
NDIS!_NDIS_FILTER_BLOCK
NDIS!NDIS_PCW_CONTEXT
NDIS!_EVENT_INFO_CLASS
NDIS!_TlgProvider_t
NDIS!_TlgProvider_t
NDIS!_TlgProviderMetadata_t
NDIS!_GUID
NDIS!_SID
NDIS!_SID
NDIS!Ndis::BindEngine
NDIS!Ndis::BindEngine
NDIS!NDIS_MINIPORT_POLICY_OWNER
NDIS!NDIS_MINIPORT_POLICY_OWNER
NDIS!Rtl::KNeutralLock<enum NDIS_MINIPORT_POLICY_OWNER>
NDIS!KPushLock
NDIS!KALLOCATION_TAG<1146307662,512>
NDIS!KALLOCATOR<1146307662,512>
NDIS!NDIS_SETUP_DEVICE_EXTENSION
NDIS!KALLOCATION_TAG<1920226123,512>
NDIS!KALLOCATOR<1920226123,512>
NDIS!_NDIS_DEBUG_BLOCK<1920226123>
NDIS!_NDIS_DEBUG_BLOCK<1920226123>
NDIS!NONPAGED_OBJECT<1920226123>
NDIS!Rtl::KString
NDIS!_NDIS_SHUTDOWN_ACTION
NDIS!_NDIS_MINIPORT_DRIVER_CHARACTERISTICS
NDIS!KDeletePtr<Rtl::KString>
NDIS!KDeletePtr<Rtl::KString>
NDIS!KRef<NDIS_BIND_PROTOCOL_DRIVER>::KRefHolder
NDIS!KRef<NDIS_BIND_PROTOCOL_DRIVER>::KRefHolder
NDIS!KPtr<NDIS_BIND_PROTOCOL_LINK,KDeletePtr<NDIS_BIND_PROTOCOL_LINK> >
NDIS!KPtr<NDIS_BIND_FILTER_LINK,KDeletePtr<NDIS_BIND_FILTER_LINK> >
NDIS!KDeletePtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS>
NDIS!KDeletePtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS>
NDIS!KDeletePtr<NDIS_BIND_PROTOCOL_LINK>
NDIS!KDeletePtr<NDIS_BIND_PROTOCOL_LINK>
NDIS!KDeletePtr<NDIS_BIND_FILTER_LINK>
NDIS!KDeletePtr<NDIS_BIND_FILTER_LINK>
NDIS!KRef<NDIS_BIND_FILTER_DRIVER>::KRefHolder
NDIS!KRef<NDIS_BIND_FILTER_DRIVER>::KRefHolder
NDIS!_WNF_STATE_NAME
NDIS!_WNF_STATE_NAME
NDIS!_EJOB
NDIS!_NDIS_IF_COMPARTMENT_BLOCK
NDIS!_NDIS_WORK_ITEM_TYPE
NDIS!_DOT11_CIPHER_ALGORITHM
NDIS!DOT11_CIPHER_DEFAULT_KEY_VALUE
NDIS!_NDIS_PM_ADMIN_CONFIG
NDIS!_NDIS_PM_ADMIN_CONFIG::<unnamed-tag>
NDIS!_NDIS_PM_ADMIN_CONFIG::<unnamed-tag>::<unnamed-tag>
NDIS!_NET_PHYSICAL_LOCATION_LH
NDIS!_NDIS_PROVIDER_CHIMNEY_OFFLOAD_GENERIC_CHARACTERISTICS
NDIS!_NDIS_IF_STACK_ENTRY
NDIS!_NDIS_WWAN_SMS_READ
NDIS!NDIS_CHIMNEY_OFFLOAD_TYPE
NDIS!_NDIS_DEVICE_PNP_EVENT
NDIS!_NET_DEVICE_PNP_EVENT
NDIS!_NDIS_SHARED_MEMORY_USAGE
NDIS!_NDIS_SHARED_MEMORY_PARAMETERS
NDIS!NDIS_PD_BM_DOMAIN_HANDLE__
NDIS!_DISPATCHER_HEADER
NDIS!_DISPATCHER_HEADER::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
NDIS!_TraceLoggingMetadata_t
NDIS!_TraceLoggingMetadata_t
NDIS!_NDIS_NBL_MEDIA_MEDIA_SPECIFIC_INFORMATION
NDIS!_NDIS_MINIPORT_RESTART_PARAMETERS
NDIS!_NDIS_AF_LIST
NDIS!_NDIS_MINIPORT_ADAPTER_NDK_ATTRIBUTES
NDIS!_NDIS_OFFLOAD_HANDLE
NDIS!_NDIS_MINIPORT_STATS
NDIS!DOT11_PRIVACY_EXEMPTION_LIST
NDIS!_NDIS_REQUEST
NDIS!_NDIS_REQUEST::_DATA
NDIS!_NDIS_REQUEST::_DATA::_QUERY_INFORMATION
NDIS!_NDIS_REQUEST::_DATA::_SET_INFORMATION
NDIS!_NDIS_REQUEST::<unnamed-tag>
NDIS!_NDIS_PCI_DEVICE_CUSTOM_PROPERTIES
NDIS!_NETIO_NET_BUFFER_CONTEXT::<unnamed-tag>
NDIS!_NETIO_NET_BUFFER_CONTEXT::<unnamed-tag>::<unnamed-tag>