CodeMachineCourse/windbg.day10.log at master · ApplesWish/CodeMachineCourse · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Opened log file 'c:\course\windbg.day10.log'
0: kd> g
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](131) tid(1618) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](132) tid(1244) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](133) tid(1244) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](134) tid(1244) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](135) tid(1244) 80070490 Element not found.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](47) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](46) tid(260) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](48) tid(d50) 80070057 The parameter is incorrect.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](31) tid(c08) 8004B200 shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(864) 80004005 Unspecified error
    CallContext:[\Startup]
Break instruction exception - code 80000003 (first chance)
*******************************************************************************
*                                                                             *
*   You are seeing this message because you pressed either                    *
*       CTRL+C (if you run console kernel debugger) or,                       *
*       CTRL+BREAK (if you run GUI kernel debugger),                          *
*   on your debugger machine's keyboard.                                      *
*                                                                             *
*                   THIS IS NOT A BUG OR A SYSTEM CRASH                       *
*                                                                             *
* If you did not intend to break into the debugger, press the "g" key, then   *
* press the "Enter" key now.  This message might immediately reappear.  If it *
* does, press "g" and "Enter" again.                                          *
*                                                                             *
*******************************************************************************
nt!DbgBreakPointWithStatus:
fffff802`42f66eb0 cc              int     3
1: kd> !ndiskd.filters
ffffe00110238700 - QoS Packet Scheduler
  Filter ffffe00110b65680, Miniport ffffe00110b041a0 - Microsoft Hyper-V Network Adapter #2
ffffe00110239010 - Virtual WiFi Filter Driver
ffffe00110884510 - WFP vSwitch Layers LightWeight Filter
ffffe00110884d70 - WFP Native MAC Layer LightWeight Filter
  Filter ffffe00110dc4830, Miniport ffffe00110b041a0 - Microsoft Hyper-V Network Adapter #2
ffffe00110884010 - WFP 802.3 MAC Layer LightWeight Filter
  Filter ffffe00110dc8010, Miniport ffffe00110b041a0 - Microsoft Hyper-V Network Adapter #2
1: kd> g
ds\security\umstartup\usermgr\cli\usermgrcli.cxx(165)\usermgrcli.dll!00007FF8E28510FF: (caller: 00007FF8D82991DB) ReturnHr[PreRelease](33) tid(1174) 80070005 Access is denied.
base\appmodel\execmodel\modern\lifetimemanager\appxexecutionutil.cpp(40)\modernexecserver.dll!00007FF8D82992BC: (caller: 00007FF8D82ADCD5) ReturnHr[PreRelease](83) tid(1174) 80070005 Access is denied.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](136) tid(17f8) 80070490 Element not found.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](49) tid(1764) 80070057 The parameter is incorrect.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](32) tid(e04) 8004B200 shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](50) tid(1764) 80070057 The parameter is incorrect.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](33) tid(e04) 8004B200 shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(b4) 80004005 Unspecified error
    CallContext:[\Startup]
shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(15f8) 80004005 Unspecified error
    CallContext:[\Startup]
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](51) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](52) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](53) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](54) tid(1764) 80070057 The parameter is incorrect.
Break instruction exception - code 80000003 (first chance)
*******************************************************************************
*                                                                             *
*   You are seeing this message because you pressed either                    *
*       CTRL+C (if you run console kernel debugger) or,                       *
*       CTRL+BREAK (if you run GUI kernel debugger),                          *
*   on your debugger machine's keyboard.                                      *
*                                                                             *
*                   THIS IS NOT A BUG OR A SYSTEM CRASH                       *
*                                                                             *
* If you did not intend to break into the debugger, press the "g" key, then   *
* press the "Enter" key now.  This message might immediately reappear.  If it *
* does, press "g" and "Enter" again.                                          *
*                                                                             *
*******************************************************************************
nt!DbgBreakPointWithStatus:
fffff802`42f66eb0 cc              int     3
1: kd> .kdfile C:\course\mymap.ini
                                 ^ Syntax error in '.kdfile C:\course\mymap.ini'
1: kd> .kdfiles C:\course\mymap.ini
KD file associations loaded from 'C:\course\mymap.ini'
1: kd> .kdfiles
KD file associations loaded from 'C:\course\mymap.ini'
\systemroot\system32\drivers\ndislwf.sys -> C:\course\source\kerrkt.labs\labs\NdisLwf\x64\Debug\NdisLwf.sys
\systemroot\system32\drivers\streamscan.sys -> C:\course\source\kerrkt.labs\labs\StreamScan\x64\Debug\StreamScan.sys
\systemroot\system32\drivers\hidefile.sys -> C:\course\source\kerrkt.labs\labs\HideFile\x64\Debug\HideFile.sys
\systemroot\system32\drivers\hidereg.sys -> C:\course\source\kerrkt.labs\labs\HideReg\x64\Debug\HideReg.sys
\systemroot\system32\drivers\processblock.sys -> C:\course\source\kerrkt.labs\labs\ProcessBlock\x64\Debug\ProcessBlock.sys
\systemroot\system32\drivers\keyboardfilter.sys -> C:\course\source\kerrkt.labs\labs\KeyboardFilter\x64\Debug\KeyboardFilter.sys
\systemroot\system32\drivers\iathook.sys -> C:\course\source\kerrkt.labs\labs\IATHook\x64\Debug\IATHook.sys
\systemroot\system32\drivers\inlinehook.sys -> C:\course\source\kerrkt.labs\labs\InlineHook\x64\Debug\InlineHook.sys
\systemroot\system32\drivers\exportscan.sys -> C:\course\source\kerrkt.labs\labs\ExportScan\x64\Debug\ExportScan.sys
\systemroot\system32\drivers\drivermigrate.sys -> C:\course\source\kerrkt.labs\labs\DriverMigrate\x64\Debug\DriverMigrate.sys
\systemroot\system32\drivers\vulnerable.sys -> C:\course\source\kerrkt.labs\labs\KMCSBypass\sys\x64\Debug\Vulnerable.sys
\systemroot\system32\drivers\registry.sys -> C:\course\source\kerprg.labs\labs\Registry\x64\Debug\Registry.sys
\systemroot\system32\drivers\stacktrace.sys -> C:\course\source\kerprg.labs\labs\StackTrace\x64\Debug\StackTrace.sys
\systemroot\system32\drivers\userioctl.sys -> C:\course\source\kerprg.labs\labs\UserIoctl\x64\Debug\UserIoctl.sys
\systemroot\system32\drivers\workitem.sys -> C:\course\source\kerprg.labs\labs\WorkItem\x64\Debug\WorkItem.sys
\systemroot\system32\drivers\dpctimer.sys -> C:\course\source\kerprg.labs\labs\DpcTimer\x64\Debug\DpcTimer.sys
\systemroot\system32\drivers\buildio.sys -> C:\course\source\kerprg.labs\labs\BuildIo\x64\Debug\BuildIo.sys
\systemroot\system32\drivers\usercomm.sys -> C:\course\source\kerprg.labs\labs\UserComm\x64\Debug\UserComm.sys
\systemroot\system32\drivers\strings.sys -> C:\course\source\kerprg.labs\labs\Strings\x64\Debug\Strings.sys
\systemroot\system32\drivers\simple.sys -> C:\course\source\kerprg.labs\labs\Simple\x64\Debug\Simple.sys
1: kd> bc *
1: kd> bp NdisLwf!DriverEntry
Bp expression 'NdisLwf!DriverEntry' could not be resolved, adding deferred bp
1: kd> g
shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(4f4) 80004005 Unspecified error
    CallContext:[\Startup]
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](55) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](56) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](57) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](58) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](59) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](60) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](61) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](62) tid(1764) 80070057 The parameter is incorrect.
ds\security\umstartup\usermgr\cli\usermgrcli.cxx(165)\usermgrcli.dll!00007FF8E28510FF: (caller: 00007FF8D82991DB) ReturnHr[PreRelease](34) tid(f28) 80070005 Access is denied.
base\appmodel\execmodel\modern\lifetimemanager\appxexecutionutil.cpp(40)\modernexecserver.dll!00007FF8D82992BC: (caller: 00007FF8D82ADCD5) ReturnHr[PreRelease](84) tid(f28) 80070005 Access is denied.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](63) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](64) tid(1764) 80070057 The parameter is incorrect.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](137) tid(e2c) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](138) tid(e2c) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](139) tid(e2c) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](140) tid(e2c) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](141) tid(e2c) 80070490 Element not found.
KD: Accessing 'C:\course\source\kerrkt.labs\labs\NdisLwf\x64\Debug\NdisLwf.sys' (\SystemRoot\System32\Drivers\NdisLwf.sys)
  File size 9KKdPullRemoteFile(FFFFE00112551840): About to overwrite \SystemRoot\System32\Drivers\NdisLwf.sys and preallocate to 2200
KdPullRemoteFile(FFFFE00112551840): Return from ZwCreateFile with status 0
....
Breakpoint 0 hit
NdisLwf!DriverEntry:
fffff800`12331000 4889542410      mov     qword ptr [rsp+10h],rdx
0: kd> bp NdisLwf!ProcessNblChain
0: kd> bp Ndislwf!NDISLWF_ReceiveNetBufferListsHandler
0: kd> g
NdisLwf!DriverEntry DriverObject=FFFFE0010FA5E720 RegistryPath=\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NdisLwf
NdisLwf!DriverEntry NdisFRegisterFilterDriver() FAIL=c0000001
shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(1550) 80004005 Unspecified error
    CallContext:[\Startup]
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](65) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](66) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](67) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](68) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](69) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](70) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](71) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](72) tid(1764) 80070057 The parameter is incorrect.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](36) tid(117c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](37) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](38) tid(155c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](39) tid(d08) 8004B200 Suspending
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](40) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](41) tid(c5c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](42) tid(d3c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](43) tid(2f0) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](44) tid(1b0) 8004B200 base\appmodel\appcontracts\lib\backgroundcontractstore.cpp(32)\AppContracts.dll!00007FF8D7B07C7A: (caller: 00007FF8EA40D533) ReturnHr[PreRelease](1) tid(15c0) 80070002 The system cannot find the file specified.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](45) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](46) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](47) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](48) tid(155c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](49) tid(117c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](50) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](51) tid(1b0) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](52) tid(c5c) 8004B200 shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](142) tid(c68) 80070490 Element not found.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](53) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](54) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](55) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](56) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](57) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](58) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](59) tid(1478) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](60) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](61) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](62) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](63) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](64) tid(d08) 8004B200 Suspending
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](65) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](66) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](67) tid(d08) 8004B200 base\appmodel\appcontracts\lib\backgroundcontractstore.cpp(32)\AppContracts.dll!00007FF8D7B07C7A: (caller: 00007FF8EA40D533) ReturnHr[PreRelease](2) tid(c5c) 80070002 The system cannot find the file specified.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](143) tid(b88) 80070490 Element not found.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](68) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](69) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](70) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](71) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](72) tid(858) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](73) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](74) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](75) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](76) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](77) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](78) tid(d08) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](79) tid(d08) 8004B200 Suspending
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](144) tid(c68) 80070490 Element not found.
base\appmodel\appcontracts\lib\backgroundcontractstore.cpp(32)\AppContracts.dll!00007FF8D7B07C7A: (caller: 00007FF8EA40D533) ReturnHr[PreRelease](3) tid(14c) 80070002 The system cannot find the file specified.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](145) tid(c68) 80070490 Element not found.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(153)\thumbcache.dll!00007FF8D6138D28: (caller: 00007FF8E79AFE2C) ReturnHr[PreRelease](34) tid(14f8) 80030002 %1 could not be found.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](35) tid(11a8) 8004B203 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](36) tid(c08) 8004B200 net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(1) tid(14f8) 80004005 Unspecified error
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(2) tid(14f8) 80004005 Unspecified error
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](146) tid(c68) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](147) tid(c68) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](148) tid(c68) 80070490 Element not found.
KD: Accessing 'C:\course\source\kerrkt.labs\labs\NdisLwf\x64\Debug\NdisLwf.sys' (\SystemRoot\system32\DRIVERS\NdisLwf.sys)
  File size 9KKdPullRemoteFile(FFFFE0011053B840): About to overwrite \SystemRoot\system32\DRIVERS\NdisLwf.sys and preallocate to 2200
KdPullRemoteFile(FFFFE0011053B840): Return from ZwCreateFile with status 0
....
Breakpoint 0 hit
NdisLwf!DriverEntry:
fffff800`12341000 4889542410      mov     qword ptr [rsp+10h],rdx
1: kd> g
NdisLwf!DriverEntry DriverObject=FFFFE0010FBD3E60 RegistryPath=\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NdisLwf
NdisLwf!DriverEntry NdisFRegisterFilterDriver() FilterDriverHandle=FFFFE00111E5F470
NdisLwf!NDISLWF_AttachHandler [164.104c] (FilterHandle=FFFFE00111E5F0D0 DriverContext=FFFFE0010FBD3E60 AttachParameters=FFFFD000252DAFA0)
NdisLwf!NDISLWF_StatusHandler [164.104c] (Context=FFFFE001118EC860 StatusIndication=FFFFD000252DACA0)
NdisLwf!NDISLWF_StatusHandler [164.104c] (Context=FFFFE001118EC860 StatusIndication=FFFFD000252DACA0)
NdisLwf!NDISLWF_StatusHandler [4bc.15c8] (Context=FFFFE001118EC860 StatusIndication=FFFFF80244B1A770)
NdisLwf!NDISLWF_StatusHandler [164.104c] (Context=FFFFE001118EC860 StatusIndication=FFFFD000228065A0)
NdisLwf!NDISLWF_StatusHandler [164.104c] (Context=FFFFE001118EC860 StatusIndication=FFFFD000228065A0)
NdisLwf!NDISLWF_StatusHandler [164.104c] (Context=FFFFE001118EC860 StatusIndication=FFFFD000228065A0)
NdisLwf!NDISLWF_RestartHandler [164.104c] (Context=FFFFE001118EC860 RestartParameters=FFFFD000252DB1C8)
OperState->OperationalStatus is 5OperState->OperationalStatus is 1shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](37) tid(11a8) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](38) tid(11a8) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](39) tid(11a8) 8004B200 Fail to read system\currentcontrolset\services\Lmhosts\Parameters\EnableUserMode, error=2
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](149) tid(c68) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](150) tid(c68) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](151) tid(c68) 80070490 Element not found.
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA6D10 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA6D10 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA6D10 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA6D10 BLOCKED
Break instruction exception - code 80000003 (first chance)
*******************************************************************************
*                                                                             *
*   You are seeing this message because you pressed either                    *
*       CTRL+C (if you run console kernel debugger) or,                       *
*       CTRL+BREAK (if you run GUI kernel debugger),                          *
*   on your debugger machine's keyboard.                                      *
*                                                                             *
*                   THIS IS NOT A BUG OR A SYSTEM CRASH                       *
*                                                                             *
* If you did not intend to break into the debugger, press the "g" key, then   *
* press the "Enter" key now.  This message might immediately reappear.  If it *
* does, press "g" and "Enter" again.                                          *
*                                                                             *
*******************************************************************************
nt!DbgBreakPointWithStatus:
fffff802`42f66eb0 cc              int     3
0: kd> bl
 0 e fffff800`12341000     0001 (0001) NdisLwf!DriverEntry
 1 e fffff800`12331630     0001 (0001) <Unloaded_NdisLwf.sys>+0x1630
 2 e fffff800`12331440     0001 (0001) <Unloaded_NdisLwf.sys>+0x1440

0: kd> bc 2
0: kd> bc 1
0: kd> bp NdisLwf!ProcessNblChain
0: kd> bp Ndislwf!NDISLWF_ReceiveNetBufferListsHandler
0: kd> g
Breakpoint 2 hit
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler:
fffff800`12341440 44894c2420      mov     dword ptr [rsp+20h],r9d
1: kd> p
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler+0x18:
fffff800`12341458 488b442450      mov     rax,qword ptr [rsp+50h]
1: kd> p
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler+0x22:
fffff800`12341462 488b4c2458      mov     rcx,qword ptr [rsp+58h]
1: kd> p
Breakpoint 1 hit
NdisLwf!ProcessNblChain:
fffff800`12341630 48894c2408      mov     qword ptr [rsp+8],rcx
1: kd> g
Breakpoint 3 hit
NdisLwf!ProcessNblChain+0x7e:
fffff800`123416ae c74424782a000000 mov     dword ptr [rsp+78h],2Ah
1: kd> p
NdisLwf!ProcessNblChain+0x86:
fffff800`123416b6 48c784248000000000000000 mov qword ptr [rsp+80h],0
1: kd> g
Breakpoint 1 hit
NdisLwf!ProcessNblChain+0xcb:
fffff800`123416fb 488b842480000000 mov     rax,qword ptr [rsp+80h]
1: kd> p
NdisLwf!ProcessNblChain+0xdb:
fffff800`1234170b 488b842488000000 mov     rax,qword ptr [rsp+88h]
1: kd> p
NdisLwf!ProcessNblChain+0x112:
fffff800`12341742 488b842488000000 mov     rax,qword ptr [rsp+88h]
1: kd> p
NdisLwf!ProcessNblChain+0x123:
fffff800`12341753 488b442460      mov     rax,qword ptr [rsp+60h]
1: kd> p
NdisLwf!ProcessNblChain+0x131:
fffff800`12341761 e92fffffff      jmp     NdisLwf!ProcessNblChain+0x65 (fffff800`12341695)
1: kd> g
Breakpoint 2 hit
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler:
fffff800`12341440 44894c2420      mov     dword ptr [rsp+20h],r9d
0: kd> p
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler+0x18:
fffff800`12341458 488b442450      mov     rax,qword ptr [rsp+50h]
0: kd> g
Breakpoint 1 hit
NdisLwf!ProcessNblChain+0xcb:
fffff800`123416fb 488b842480000000 mov     rax,qword ptr [rsp+80h]
0: kd> g
Breakpoint 2 hit
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler:
fffff800`12341440 44894c2420      mov     dword ptr [rsp+20h],r9d
1: kd> g
shell\ext\inputswitch\switch\ctfhandler.cpp(1976)\InputSwitch.dll!00007FF8E5632993: (caller: 00007FF8EA40D533) LogHr(1) tid(728) 80004005 Unspecified error
    CallContext:[\Startup]
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](73) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](74) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](75) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](76) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](77) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](78) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](79) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](80) tid(1764) 80070057 The parameter is incorrect.
Breakpoint 3 hit
NdisLwf!ProcessNblChain+0x136:
fffff800`12341766 488b442460      mov     rax,qword ptr [rsp+60h]
0: kd> p
NdisLwf!ProcessNblChain+0x147:
fffff800`12341777 b801000000      mov     eax,1
0: kd> p
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!ProcessNblChain+0x22e:
fffff800`1234185e 488b842490000000 mov     rax,qword ptr [rsp+90h]
0: kd> p
NdisLwf!ProcessNblChain+0x23d:
fffff800`1234186d b001            mov     al,1
0: kd> p
NdisLwf!ProcessNblChain+0x24d:
fffff800`1234187d 488b8c24c8000000 mov     rcx,qword ptr [rsp+0C8h]
0: kd> bl
 0 e fffff800`12341000 [c:\course\source\kerrkt.labs\labs\ndislwf\ndislwf.c @ 93]    0001 (0001) NdisLwf!DriverEntry
 3 e fffff800`12341766 [c:\course\source\kerrkt.labs\labs\ndislwf\nblchain.c @ 69]    0001 (0001) NdisLwf!ProcessNblChain+0x136

0: kd> bd 3
0: kd> g
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110D943B0 BLOCKED
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](81) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](82) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](83) tid(1764) 80070057 The parameter is incorrect.
shell\lib\bindctx.cpp(1144)\explorerframe.dll!00007FF8D6D8186D: (caller: 00007FF8D6D9DFC2) ReturnHr[PreRelease](84) tid(1764) 80070057 The parameter is incorrect.
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [72c.10d4] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [72c.778] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](80) tid(117c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](81) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](82) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](83) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](84) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](85) tid(117c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](86) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](87) tid(117c) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](88) tid(90) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(198)\thumbcache.dll!00007FF8D614341D: (caller: 00007FF8E795FE5D) ReturnHr[PreRelease](89) tid(90) 8004B200 Suspending
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](152) tid(16fc) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](153) tid(16fc) 80070490 Element not found.
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](40) tid(12d0) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(153)\thumbcache.dll!00007FF8D6138D28: (caller: 00007FF8E79AFE2C) ReturnHr[PreRelease](41) tid(12d0) 8004B200 shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](42) tid(12b8) 8004B200 ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(3) tid(12d0) 80004005 Unspecified error
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(4) tid(12d0) 80004005 Unspecified error
base\appmodel\appcontracts\lib\backgroundcontractstore.cpp(32)\AppContracts.dll!00007FF8D7B07C7A: (caller: 00007FF8EA40D533) ReturnHr[PreRelease](4) tid(2f0) 80070002 The system cannot find the file specified.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](154) tid(16fc) 80070490 Element not found.
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
NdisLwf!NDISLWF_PauseHandler [164.154c] (Context=FFFFE001118EC860 PauseParameters=FFFFD00020EBD2C8)
OperState->OperationalStatus is 5OperState->OperationalStatus is 1shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](155) tid(16fc) 80070490 Element not found.
WER/CrashAPI:1959: ERROR ReadProcessMemory failed while trying to read PebBaseAddress
WER/CrashAPI:2068: ERROR Failed to read the peb from the process
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](156) tid(16fc) 80070490 Element not found.
base\flighting\flightsettings\broker\lib\flightsettingsonlinevalidation.cpp(330)\FlightSettings.dll!00007FF8D87469BF: (caller: 00007FF8D873A93F) ReturnHr[PreRelease](1) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsdevbroker.cpp(1065)\FlightSettings.dll!00007FF8D8739D2C: (caller: 00007FF8D873BF07) ReturnHr[PreRelease](2) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsdevbroker.cpp(1247)\FlightSettings.dll!00007FF8D873A6A4: (caller: 00007FF8D8739E04) ReturnHr[PreRelease](3) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsdevbroker.cpp(1096)\FlightSettings.dll!00007FF8D8739E8E: (caller: 00007FF8D873C11D) ReturnHr[PreRelease](4) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsdevbroker.cpp(1247)\FlightSettings.dll!00007FF8D873A6A4: (caller: 00007FF8D8739E04) ReturnHr[PreRelease](5) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsdevbroker.cpp(1096)\FlightSettings.dll!00007FF8D8739E8E: (caller: 00007FF8EA40D533) ReturnHr[PreRelease](6) tid(1588) 80070002 The system cannot find the file specified.
base\flighting\flightsettings\broker\lib\flightsettingsonlinevalidation.cpp(330)\FlightSettings.dll!00007FF8D87469BF: (caller: 00007FF8D873A93F) ReturnHr[PreRelease](7) tid(1588) 80070002 The system cannot find the file specified.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](157) tid(1338) 80070490 Element not found.
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(5) tid(12d0) 80004005 Unspecified error
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(6) tid(12d0) 80004005 Unspecified error
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](158) tid(1338) 80070490 Element not found.
NdisLwf!NDISLWF_AttachHandler [164.ee8] (FilterHandle=FFFFE00111E5F0D0 DriverContext=FFFFE0010FBD3E60 AttachParameters=FFFFD00022E9BFA0)
NdisLwf!NDISLWF_StatusHandler [164.ee8] (Context=FFFFE00111E3DEB0 StatusIndication=FFFFD00022E9BCA0)
NdisLwf!NDISLWF_StatusHandler [164.ee8] (Context=FFFFE00111E3DEB0 StatusIndication=FFFFD00022E9BCA0)
OperState->OperationalStatus is 5NdisLwf!NDISLWF_RestartHandler [164.ee8] (Context=FFFFE00111E3DEB0 RestartParameters=FFFFD00022E9C1C8)
OperState->OperationalStatus is 1ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA09F0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [4.64] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(7) tid(12d0) 80004005 Unspecified error
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(8) tid(12d0) 80004005 Unspecified error
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
ProcessNblChain ICMP (0) 169.254.24.6 < 169.254.139.240
NdisLwf!NDISLWF_ReceiveNetBufferListsHandler [0.0] NBL=FFFFE00110DA06D0 BLOCKED
NdisLwf!DriverUnload DriverObject=FFFFE0010FBD3E60
NdisLwf!NDISLWF_PauseHandler [4.324] (Context=FFFFE00111E3DEB0 PauseParameters=FFFFD000CA9186A8)
NdisLwf!NDISLWF_StatusHandler [4.1524] (Context=FFFFE00111E3DEB0 StatusIndication=FFFFD00020B5DC00)
NdisLwf!NDISLWF_StatusHandler [508.1768] (Context=FFFFE00111E3DEB0 StatusIndication=FFFFF80244B1A770)
NdisLwf!NDISLWF_StatusHandler [4.a48] (Context=FFFFE00111E3DEB0 StatusIndication=FFFFF80244B1A770)
***** DRIVER UNLOADED *****
OperState->OperationalStatus is 5OperState->OperationalStatus is 1Fail to read system\currentcontrolset\services\Lmhosts\Parameters\EnableUserMode, error=2
shell\ext\thumbnailcache\lib\thumbcacheapi.cpp(243)\thumbcache.dll!00007FF8D61432DC: (caller: 00007FF8D61434FF) ReturnHr[PreRelease](43) tid(79c) 8004B200 shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](159) tid(990) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](160) tid(175c) 80070490 Element not found.
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(9) tid(12d0) 80004005 Unspecified error
net\homenet\config\dll\hncutil.cpp(1939)\hnetcfg.dll!00007FF8D1CAB66A: (caller: 00007FF8D1CAB23A) Exception(10) tid(12d0) 80004005 Unspecified error
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](161) tid(175c) 80070490 Element not found.
shell\twinui\nowplayingsessionmanager\localprovider\baseprovider\lib\baseprovider.cpp(516)\NPSMDesktopProvider.dll!00007FF8D9D1E7E8: (caller: 00007FF8D9D14A09) ReturnHr[PreRelease](162) tid(1704) 80070490 Element not found.
Break instruction exception - code 80000003 (first chance)
*******************************************************************************
*                                                                             *
*   You are seeing this message because you pressed either                    *
*       CTRL+C (if you run console kernel debugger) or,                       *
*       CTRL+BREAK (if you run GUI kernel debugger),                          *
*   on your debugger machine's keyboard.                                      *
*                                                                             *
*                   THIS IS NOT A BUG OR A SYSTEM CRASH                       *
*                                                                             *
* If you did not intend to break into the debugger, press the "g" key, then   *
* press the "Enter" key now.  This message might immediately reappear.  If it *
* does, press "g" and "Enter" again.                                          *
*                                                                             *
*******************************************************************************
nt!DbgBreakPointWithStatus:
fffff802`42f66eb0 cc              int     3
1: kd> dt ndis*!*NDIS_
1: kd> x
1: kd> x ndis*
1: kd> x ndis
1: kd> x nt!*NDIS*
fffff802`42ef7e4c nt!CcZeroDataOnDisk (<no parameter info>)
fffff802`432e844c nt!PiPnpRtlDisableRemoveOperationDispatch (<no parameter info>)
fffff802`43581424 nt!Phase1InitializationDiscard (<no parameter info>)
fffff802`43115900 nt!PiPnpRtlRemoveOperationDispatchLock = <no type information>
fffff802`4330b788 nt!PopSessionDisconnected (<no parameter info>)
fffff802`433206a0 nt!PopSetSessionDisplayStatus (<no parameter info>)
fffff802`4319e6a8 nt!KeUserExceptionDispatcher = <no type information>
fffff802`430f7f40 nt!PspPicoRegistrationDisabled = <no type information>
fffff802`42ef7a88 nt!MiPfCoalesceAndIssueIOs (<no parameter info>)
fffff802`42f25a4c nt!PopDiagTraceSessionDisplayStateChange (<no parameter info>)
fffff802`430fb6b0 nt!PopEnergyEstimationDisabled = <no type information>
fffff802`430100b8 nt!RtlpLogExceptionDispatch (<no parameter info>)
fffff802`43317794 nt!WmipFindISinGEbyName (<no parameter info>)
fffff802`431388e4 nt!Kd_NDIS_Mask = <no type information>
fffff802`4347d40c nt!WmipFindISInDSByGuid (<no parameter info>)
fffff802`4305bd80 nt!GUID_NDIS_LAN_CLASS = <no type information>
fffff802`43138954 nt!Kd_VSSDYNDISK_Mask = <no type information>
fffff802`432fe8a4 nt!PopNotifySessionDisplayRequired (<no parameter info>)
fffff802`4319e690 nt!KeRaiseUserExceptionDispatcher = <no type information>
fffff802`42f6c300 nt!KiExceptionDispatch (<no parameter info>)
1: kd> dt nt!_NDIS*
1: kd> dt ndis!*
          NDIS!LIST_ENTRY64
          NDIS!LIST_ENTRY32
          NDIS!_GUID
          NDIS!_GUID
          NDIS!SE_WS_APPX_SIGNATURE_ORIGIN
          NDIS!JOB_OBJECT_NET_RATE_CONTROL_FLAGS
          NDIS!JOB_OBJECT_IO_RATE_CONTROL_FLAGS
          NDIS!_KSYSTEM_TIME
          NDIS!_NT_PRODUCT_TYPE
          NDIS!_ALTERNATIVE_ARCHITECTURE_TYPE
          NDIS!_KUSER_SHARED_DATA
          NDIS!_ULARGE_INTEGER
          NDIS!_TP_POOL
          NDIS!_TP_CLEANUP_GROUP
          NDIS!_ACTIVATION_CONTEXT
          NDIS!_TP_CALLBACK_INSTANCE
          NDIS!_TP_CALLBACK_PRIORITY
          NDIS!_TP_CALLBACK_ENVIRON_V3
          NDIS!_TP_CALLBACK_ENVIRON_V3::<unnamed-type-u>
          NDIS!_TP_CALLBACK_ENVIRON_V3::<unnamed-type-u>::<unnamed-type-s>
          NDIS!_TEB
          NDIS!_LIST_ENTRY
          NDIS!_LIST_ENTRY
          NDIS!_SINGLE_LIST_ENTRY
          NDIS!_RTL_SPLAY_LINKS
          NDIS!_RTL_DYNAMIC_HASH_TABLE_CONTEXT
          NDIS!_RTL_DYNAMIC_HASH_TABLE_ENUMERATOR
          NDIS!_RTL_DYNAMIC_HASH_TABLE_ENTRY
          NDIS!_RTL_DYNAMIC_HASH_TABLE
          NDIS!_UNICODE_STRING
          NDIS!_STRING
          NDIS!_LARGE_INTEGER
          NDIS!_RTL_BITMAP
          NDIS!_LARGE_INTEGER::<unnamed-type-u>
          NDIS!_LUID
          NDIS!_IMAGE_NT_HEADERS64
          NDIS!_IMAGE_DOS_HEADER
          NDIS!_RTL_RESOURCE_POLICY_FLAGS
          NDIS!_RTL_RB_TREE
          NDIS!_RTL_BALANCED_NODE
          NDIS!_RTL_AVL_TREE
          NDIS!_KTHREAD
          NDIS!_MODE
          NDIS!_KPCR
          NDIS!_KNODE
          NDIS!_KPRCB
          NDIS!_KFLOATING_SAVE
          NDIS!_EXT_SET_PARAMETERS_V0
          NDIS!_EVENT_DATA_DESCRIPTOR
          NDIS!_EVENT_DESCRIPTOR
          NDIS!_EVENT_DESCRIPTOR
          NDIS!_FAST_MUTEX
          NDIS!_EVENT_TYPE
          NDIS!_KEVENT
          NDIS!_LOOKASIDE_LIST_EX
          NDIS!_POOL_TYPE
          NDIS!_GENERAL_LOOKASIDE_POOL
          NDIS!_SLIST_ENTRY
          NDIS!_SLIST_HEADER
          NDIS!_NPAGED_LOOKASIDE_LIST
          NDIS!_GENERAL_LOOKASIDE
          NDIS!_PAGED_LOOKASIDE_LIST
          NDIS!_LARGE_INTEGER
          NDIS!_ULARGE_INTEGER
          NDIS!_UNICODE_STRING
          NDIS!_IO_STATUS_BLOCK
          NDIS!_IO_STATUS_BLOCK
          NDIS!_QUAD
          NDIS!_QUAD
          NDIS!_WORK_QUEUE_ITEM
          NDIS!_EXT_DELETE_PARAMETERS
          NDIS!_EX_PUSH_LOCK
          NDIS!_ETHREAD
          NDIS!_IRP
          NDIS!_IRP::<unnamed-type-Tail>
          NDIS!_IRP::<unnamed-type-Tail>::<unnamed-type-Overlay>
          NDIS!_IO_STACK_LOCATION
          NDIS!_IO_TIMER
          NDIS!_DEVICE_OBJECT
          NDIS!_KDPC
          NDIS!_ECP_LIST
          NDIS!_ESILO
          NDIS!_IO_DRIVER_CREATE_CONTEXT
          NDIS!_IO_PRIORITY_HINT
          NDIS!_IO_PRIORITY_INFO
          NDIS!_DEVICE_POWER_STATE
          NDIS!_DEVICE_POWER_STATE
          NDIS!_DEVICE_WAKE_DEPTH
          NDIS!_DEVPROPKEY
          NDIS!_DEVPROPKEY
          NDIS!_DEVPROPCOMPKEY
          NDIS!_DEVPROPSTORE
          NDIS!_DEVPROPCOMPKEY
          NDIS!_DEVPROPSTORE
          NDIS!_EPROCESS
          NDIS!_MDL
          NDIS!_MEMORY_CACHING_TYPE
          NDIS!_DMA_ADAPTER
          NDIS!_IO_ALLOCATION_ACTION
          NDIS!DMA_COMPLETION_STATUS
          NDIS!_DMA_OPERATIONS
          NDIS!_LARGE_INTEGER
          NDIS!_ACCESS_STATE
          NDIS!_AUX_ACCESS_DATA
          NDIS!_KPROCESS
          NDIS!_OBJECT_HANDLE_INFORMATION
          NDIS!_OBJECT_TYPE
          NDIS!_WHEA_ERROR_TYPE
          NDIS!_WHEA_ERROR_SEVERITY
          NDIS!_WHEA_ERROR_SOURCE_TYPE
          NDIS!_WHEA_ERROR_PACKET_DATA_FORMAT
          NDIS!_WHEA_ERROR_PACKET_V2
          NDIS!_WHEA_ERROR_RECORD
          NDIS!_WHEA_ERROR_RECORD_HEADER
          NDIS!_WHEA_ERROR_RECORD_SECTION_DESCRIPTOR
          NDIS!_WHEA_REVISION
          NDIS!in6_addr
          NDIS!in6_addr
          NDIS!in6_addr::<unnamed-type-u>
          NDIS!in6_addr::<unnamed-type-u>
          NDIS!sockaddr_in6
          NDIS!sockaddr_in6
          NDIS!_NDIS_SPIN_LOCK
          NDIS!_NDIS_PACKET
          NDIS!_NDIS_PACKET_PRIVATE
          NDIS!_NET_BUFFER_LIST
          NDIS!SCOPE_LEVEL
          NDIS!SCOPE_ID
          NDIS!in_addr
          NDIS!in_addr
          NDIS!in_addr::<unnamed-type-S_un>
          NDIS!in_addr::<unnamed-type-S_un>
          NDIS!in_addr
          NDIS!in_addr::<unnamed-type-S_un>
          NDIS!sockaddr_in
          NDIS!sockaddr_in
          NDIS!NL_ADDRESS_TYPE
          NDIS!in_addr
          NDIS!in6_addr
          NDIS!SCOPE_ID
          NDIS!sockaddr
          NDIS!sockaddr
          NDIS!_DL_EUI48
          NDIS!_DL_OUI
          NDIS!DL_ADDRESS_TYPE
          NDIS!_IPV4_HEADER
          NDIS!_IPV4_HEADER
          NDIS!_IPV6_FRAGMENT_HEADER
          NDIS!_IPV6_FRAGMENT_HEADER
          NDIS!Ipv6pGetVersionClassEcnFlow::__l2::<unnamed-type-VersionClassEcnFlow>
          NDIS!Ipv6pGetVersionClassEcnFlow::__l2::<unnamed-type-VersionClassEcnFlow>::<unnamed-tag>
          NDIS!_NPI_MODULEID
          NDIS!_NPI_MODULEID_TYPE
          NDIS!_NPI_MODULEID
          NDIS!_NPI_MODULEID_TYPE
          NDIS!_LUID
          NDIS!_REFERENCE_OBJECT
          NDIS!_NETIO_NET_BUFFER_LIST_CONTEXT
          NDIS!_NET_BUFFER
          NDIS!_NETIO_NET_BUFFER_CONTEXT
          NDIS!_NET_BUFFER_HEADER
          NDIS!_NET_BUFFER_DATA
          NDIS!_NET_BUFFER_DATA_LENGTH
          NDIS!_NET_BUFFER_LIST_HEADER
          NDIS!_NET_BUFFER_LIST_DATA
          NDIS!_NET_BUFFER_LIST
          NDIS!_NET_BUFFER
          NDIS!_NBL_QUEUE
          NDIS!_NBL_QUEUE
          NDIS!PNDIS_PER_PROCESSOR_SLOT__
          NDIS!_PCW_COUNTER_DESCRIPTOR
          NDIS!_PCW_COUNTER_DESCRIPTOR
          NDIS!_PCW_CALLBACK_TYPE
          NDIS!_UNICODE_STRING
          NDIS!_PCW_REGISTRATION
          NDIS!_PCW_REGISTRATION_INFORMATION
          NDIS!_NDIS_PER_PROC_PERFORMANCE_COUNTERS
          NDIS!_NDIS_PER_PROC_PERFORMANCE_COUNTERS
          NDIS!_PCW_INSTANCE
          NDIS!_PCW_DATA
          NDIS!_PCW_BUFFER
          NDIS!_NDIS_NDK_PERFORMANCE_COUNTERS
          NDIS!_NDIS_NDK_PERFORMANCE_COUNTERS
          NDIS!_NDIS_PHYSICAL_PERFORMANCE_COUNTERS
          NDIS!_NDIS_PHYSICAL_PERFORMANCE_COUNTERS
          NDIS!_NDIS_PD_TRANSMIT_QUEUE_COUNTER
          NDIS!_NDIS_PD_TRANSMIT_QUEUE_COUNTER
          NDIS!_NDIS_PD_RECEIVE_QUEUE_COUNTER
          NDIS!_NDIS_PD_RECEIVE_QUEUE_COUNTER
          NDIS!_NDIS_PD_FILTER_COUNTER
          NDIS!_NDIS_PD_FILTER_COUNTER
          NDIS!_NDIS_PD_EC_UTILIZATION_COUNTER
          NDIS!_NDIS_PD_EC_UTILIZATION_COUNTER
          NDIS!_NDIS_PD_QUEUE_DEPTH_COUNTER
          NDIS!_NDIS_PD_QUEUE_DEPTH_COUNTER
          NDIS!KRundownBase
          NDIS!_EX_RUNDOWN_REF
          NDIS!KRundown
          NDIS!KRundownManualConstruct
          NDIS!KRundownHolder
          NDIS!KCriticalRegion
          NDIS!KDefaultRegion
          NDIS!KIrqlRegion
          NDIS!KPushLockBase
          NDIS!KWaitEventBase
          NDIS!_KWAIT_REASON
          NDIS!_LARGE_INTEGER
          NDIS!KWaitEvent
          NDIS!KWaitEventManualConstruct
          NDIS!KLockHolder::<unnamed-type-m_State>
          NDIS!KLockHolder
          NDIS!KLockThisShared
          NDIS!KLockThisExclusive
          NDIS!CallRunMode
          NDIS!NDIS_BIND_DRIVER_BASE
          NDIS!KALLOCATION_TAG<1147946562,1>
          NDIS!KALLOCATOR<1147946562,1>
          NDIS!_NDIS_DEBUG_BLOCK<1147946562>
          NDIS!_NDIS_DEBUG_BLOCK<1147946562>
          NDIS!PAGED_OBJECT<1147946562>
          NDIS!NDIS_BIND_FILTER_DRIVER
          NDIS!Rtl::KString
          NDIS!KPtr<Rtl::KString,KDeletePtr<Rtl::KString> >
          NDIS!KPtr<Rtl::KString,KDeletePtr<Rtl::KString> >
          NDIS!NDIS_BIND_FILTER_LINK
          NDIS!KALLOCATION_TAG<1282164290,1>
          NDIS!KALLOCATOR<1282164290,1>
          NDIS!_NDIS_DEBUG_BLOCK<1282164290>
          NDIS!_NDIS_DEBUG_BLOCK<1282164290>
          NDIS!PAGED_OBJECT<1282164290>
          NDIS!NDIS_BIND_LINK_BASE
          NDIS!NDIS_BIND_FILTER_LINK
          NDIS!KRef<NDIS_BIND_FILTER_DRIVER>
          NDIS!NDIS_BIND_FILTER_DRIVER
          NDIS!KRef<NDIS_BIND_FILTER_DRIVER>
          NDIS!KALLOCATION_TAG<1148473410,1>
          NDIS!KALLOCATOR<1148473410,1>
          NDIS!_NDIS_DEBUG_BLOCK<1148473410>
          NDIS!_NDIS_DEBUG_BLOCK<1148473410>
          NDIS!PAGED_OBJECT<1148473410>
          NDIS!NDIS_BIND_PROTOCOL_DRIVER
          NDIS!NDIS_BIND_PROTOCOL_LINK
          NDIS!KALLOCATION_TAG<1282691138,1>
          NDIS!KALLOCATOR<1282691138,1>
          NDIS!_NDIS_DEBUG_BLOCK<1282691138>
          NDIS!_NDIS_DEBUG_BLOCK<1282691138>
          NDIS!PAGED_OBJECT<1282691138>
          NDIS!NDIS_BIND_PROTOCOL_LINK
          NDIS!KRef<NDIS_BIND_PROTOCOL_DRIVER>
          NDIS!NDIS_BIND_PROTOCOL_DRIVER
          NDIS!KRef<NDIS_BIND_PROTOCOL_DRIVER>
          NDIS!close_registry_handle
          NDIS!close_registry_handle
          NDIS!KPtr<void *,close_registry_handle>
          NDIS!KPtr<void *,close_registry_handle>
          NDIS!KRegKey::BooleanDisposition
          NDIS!KRegKey
          NDIS!KRegKey
          NDIS!KALLOCATION_TAG<1396859982,1>
          NDIS!KALLOCATOR<1396859982,1>
          NDIS!_NDIS_DEBUG_BLOCK<1396859982>
          NDIS!_NDIS_DEBUG_BLOCK<1396859982>
          NDIS!PAGED_OBJECT<1396859982>
          NDIS!Ndis::BindSource::Flags
          NDIS!Ndis::BindStack
          NDIS!KALLOCATION_TAG<1920090443,1>
          NDIS!KALLOCATOR<1920090443,1>
          NDIS!_NDIS_DEBUG_BLOCK<1920090443>
          NDIS!_NDIS_DEBUG_BLOCK<1920090443>
          NDIS!PAGED_OBJECT<1920090443>
          NDIS!Rtl::KArray<KPtr<NDIS_BIND_PROTOCOL_LINK,KDeletePtr<NDIS_BIND_PROTOCOL_LINK> > >::iterator
          NDIS!Rtl::KArray<KPtr<NDIS_BIND_PROTOCOL_LINK,KDeletePtr<NDIS_BIND_PROTOCOL_LINK> > >
          NDIS!KPtr<NDIS_BIND_PROTOCOL_LINK,KDeletePtr<NDIS_BIND_PROTOCOL_LINK> >
          NDIS!Rtl::KArray<KPtr<NDIS_BIND_PROTOCOL_LINK,KDeletePtr<NDIS_BIND_PROTOCOL_LINK> > >
          NDIS!Rtl::KArray<KPtr<NDIS_BIND_FILTER_LINK,KDeletePtr<NDIS_BIND_FILTER_LINK> > >::iterator
          NDIS!Rtl::KArray<KPtr<NDIS_BIND_FILTER_LINK,KDeletePtr<NDIS_BIND_FILTER_LINK> > >
          NDIS!KPtr<NDIS_BIND_FILTER_LINK,KDeletePtr<NDIS_BIND_FILTER_LINK> >
          NDIS!Rtl::KArray<KPtr<NDIS_BIND_FILTER_LINK,KDeletePtr<NDIS_BIND_FILTER_LINK> > >
          NDIS!KALLOCATION_TAG<1935819854,1>
          NDIS!KALLOCATOR<1935819854,1>
          NDIS!_NDIS_DEBUG_BLOCK<1935819854>
          NDIS!_NDIS_DEBUG_BLOCK<1935819854>
          NDIS!PAGED_OBJECT<1935819854>
          NDIS!BIND_SOURCE_STATE
          NDIS!BINDING_ENABLED_OR_DISABLED
          NDIS!NDIS_DO_NOT_BIND_REASON
          NDIS!PAUSE_OR_RESTART
          NDIS!NDIS_PAUSE_REASON
          NDIS!Ndis::BindState
          NDIS!Ndis::BindState
          NDIS!_RECORDER_CONFIGURE_PARAMS
          NDIS!_RECORDER_LOG_CREATE_PARAMS
          NDIS!NDIS_RESTART_INFORMATION
          NDIS!Rtl::KArray<unsigned char>::iterator
          NDIS!Rtl::KArray<unsigned char>
          NDIS!Rtl::KArray<unsigned char>
          NDIS!_NDIS_RESTART_ATTRIBUTES
          NDIS!_NET_IF_ACCESS_TYPE
          NDIS!_NET_IF_CONNECTION_TYPE
          NDIS!_NDIS_RESTART_GENERAL_ATTRIBUTES
          NDIS!_NDIS_RECEIVE_SCALE_CAPABILITIES
          NDIS!_NDIS_PROTOCOL_RESTART_PARAMETERS
          NDIS!_NDIS_PACKET_WRAPPER
          NDIS!_NDIS_PROTOCOL_BLOCK
          NDIS!KWorkItemBase<_NDIS_PROTOCOL_BLOCK,KCoalescingWorkItem<_NDIS_PROTOCOL_BLOCK> >
          NDIS!KCoalescingWorkItem<_NDIS_PROTOCOL_BLOCK>
          NDIS!NdisStopwatch
          NDIS!NdisStopwatch
          NDIS!_NDIS_IPSEC_PACKET_INFO
          NDIS!_NDIS_XLATE_TYPE
          NDIS!_NDIS_IPSEC_OFFLOAD_V1_NET_BUFFER_LIST_INFO
          NDIS!_NDIS_IPSEC_OFFLOAD_V1_NET_BUFFER_LIST_INFO::<unnamed-tag>::<unnamed-type-Transmit>
          NDIS!_NDIS_IPSEC_PACKET_INFO::<unnamed-tag>::<unnamed-type-Transmit>
          NDIS!_NDIS_IPSEC_OFFLOAD_V1_NET_BUFFER_LIST_INFO::<unnamed-tag>::<unnamed-type-Receive>
          NDIS!_NDIS_IPSEC_PACKET_INFO::<unnamed-tag>::<unnamed-type-Receive>
          NDIS!_NDIS_OBJECT_HEADER
          NDIS!_NET_IF_MEDIA_CONNECT_STATE
          NDIS!_NET_IF_MEDIA_DUPLEX_STATE
          NDIS!_NDIS_MEDIUM
          NDIS!_NDIS_INTERFACE_TYPE
          NDIS!_NDIS_SUPPORTED_PAUSE_FUNCTIONS
          NDIS!_SYSTEM_POWER_STATE
          NDIS!_NDIS_PNP_DEVICE_STATE
          NDIS!_NDIS_PHYSICAL_MEDIUM
          NDIS!_NDIS_MINIPORT_STATE
          NDIS!_NDIS_SEND_PATH_TYPE
          NDIS!_NDIS_PORT_CONTROL_STATE
          NDIS!_NDIS_PORT_AUTHORIZATION_STATE
          NDIS!_INTERFACE_TYPE
          NDIS!_NET_IF_ADMIN_STATUS
          NDIS!_NET_IF_OPER_STATUS
          NDIS!_NDIS_MINIPORT_EVENT
          NDIS!_NDIS_RSS_PROFILE
          NDIS!_NDIS_PM_WAKE_REASON_TYPE
          NDIS!_NDIS_MINIPORT_BLOCK
          NDIS!NDIS_MINIPORT_ADAPTER_HANDLE__
          NDIS!_NDIS_NDIS5_DRIVER_STATE
          NDIS!_NDIS_COMMON_OPEN_BLOCK
          NDIS!_NDIS_OPEN_BLOCK
          NDIS!_NDIS_CO_AF_BLOCK
          NDIS!_NDIS_CO_VC_BLOCK
          NDIS!_NDIS_CO_VC_PTR_BLOCK
          NDIS!_NDIS_CO_PARTY_BLOCK
          NDIS!_NDIS_CO_SAP_BLOCK
          NDIS!_NDIS_PKT_POOL
          NDIS!_NDIS_WRAPPER_CONFIGURATION_HANDLE
          NDIS!NDIS_ADDDEVICE_PARAMETERS
          NDIS!_NET_LUID_LH
          NDIS!_KSGATE
          NDIS!KSEVENT_SET
          NDIS!KSEVENT_ITEM
          NDIS!_KSEVENT_ENTRY
          NDIS!_KSFILTER_DESCRIPTOR
          NDIS!_KSFILTER
          NDIS!_KSPIN_DESCRIPTOR_EX
          NDIS!KSPIN_COMMUNICATION
          NDIS!KSPIN_DATAFLOW
          NDIS!KSSTATE
          NDIS!KSRESET
          NDIS!_KSPIN
          NDIS!_FILE_OBJECT
          NDIS!_KSFILTERFACTORY
          NDIS!_KSDEVICE_DESCRIPTOR
          NDIS!_KSDEVICE
          NDIS!_EVENT_RECORD
          NDIS!_EVENT_RECORD
          NDIS!_EVENT_HEADER
          NDIS!_EVENT_HEADER
          NDIS!_ETW_BUFFER_CONTEXT
          NDIS!_ETW_BUFFER_CONTEXT
          NDIS!_PERFINFO_GROUPMASK
          NDIS!_PPL_LOOKASIDE_LIST
          NDIS!_PPL_LOOKASIDE_LIST_ARRAY
          NDIS!__m64
          NDIS!__m64
          NDIS!__m128
          NDIS!__m128
          NDIS!_MCGEN_TRACE_CONTEXT
          NDIS!_EVENT_FILTER_DESCRIPTOR
          NDIS!COMPARTMENT_ID
          NDIS!_NDIS_WDF_CX_CHARACTERISTICS
          NDIS!_NET_IF_DIRECTION_TYPE
          NDIS!_NDIS_NSI_INTERFACE_ENUM_ROS
          NDIS!_NDIS_NSI_INTERFACE_ENUM_ROD
          NDIS!NdisIfBlockSource
          NDIS!_NDIS_IF_BLOCK
          NDIS!_NDIS_MINIPORT_HOOK_DRIVER_TYPE
          NDIS!_NDIS_PD_EXT_CLIENT_PARAM
          NDIS!_NDIS_PD_EXT_CLIENT_DISPATCH
          NDIS!_PD_BUFFER
          NDIS!_NDIS_SWITCH_PORT_DESTINATION
          NDIS!_NDIS_PD_BM_DOMAIN_PARAMETERS
          NDIS!_NDIS_PD_BM_DOMAIN_MEMBER_PARAMETERS
          NDIS!_NDIS_M_DRIVER_BLOCK
          NDIS!_NDIS_MINIPORT_DRIVER_CHARACTERISTICS
          NDIS!KPtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS,KDeletePtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS> >
          NDIS!KPtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS,KDeletePtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS> >
          NDIS!_NDIS_HALT_ACTION
          NDIS!_VF_NDIS_DISPATCH_TABLE
          NDIS!_NDIS_WDF_CX_DRIVER_STATE
          NDIS!_NDIS_WDF_CX_DRIVER_BLOCK
          NDIS!_DRIVER_OBJECT
          NDIS!_NDIS_OID_REQUEST_RESERVED
          NDIS!_NDIS_REQUEST_TYPE
          NDIS!_NDIS_OID_REQUEST
          NDIS!_NDIS_FILTER_STATE
          NDIS!_NDIS_FILTER_BLOCK
          NDIS!NDIS_PCW_CONTEXT
          NDIS!_EVENT_INFO_CLASS
          NDIS!_TlgProvider_t
          NDIS!_TlgProvider_t
          NDIS!_TlgProviderMetadata_t
          NDIS!_GUID
          NDIS!_SID
          NDIS!_SID
          NDIS!Ndis::BindEngine
          NDIS!Ndis::BindEngine
          NDIS!NDIS_MINIPORT_POLICY_OWNER
          NDIS!NDIS_MINIPORT_POLICY_OWNER
          NDIS!Rtl::KNeutralLock<enum NDIS_MINIPORT_POLICY_OWNER>
          NDIS!KPushLock
          NDIS!KALLOCATION_TAG<1146307662,512>
          NDIS!KALLOCATOR<1146307662,512>
          NDIS!NDIS_SETUP_DEVICE_EXTENSION
          NDIS!KALLOCATION_TAG<1920226123,512>
          NDIS!KALLOCATOR<1920226123,512>
          NDIS!_NDIS_DEBUG_BLOCK<1920226123>
          NDIS!_NDIS_DEBUG_BLOCK<1920226123>
          NDIS!NONPAGED_OBJECT<1920226123>
          NDIS!Rtl::KString
          NDIS!_NDIS_SHUTDOWN_ACTION
          NDIS!_NDIS_MINIPORT_DRIVER_CHARACTERISTICS
          NDIS!KDeletePtr<Rtl::KString>
          NDIS!KDeletePtr<Rtl::KString>
          NDIS!KRef<NDIS_BIND_PROTOCOL_DRIVER>::KRefHolder
          NDIS!KRef<NDIS_BIND_PROTOCOL_DRIVER>::KRefHolder
          NDIS!KPtr<NDIS_BIND_PROTOCOL_LINK,KDeletePtr<NDIS_BIND_PROTOCOL_LINK> >
          NDIS!KPtr<NDIS_BIND_FILTER_LINK,KDeletePtr<NDIS_BIND_FILTER_LINK> >
          NDIS!KDeletePtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS>
          NDIS!KDeletePtr<_NDIS_MINIPORT_DRIVER_CHARACTERISTICS>
          NDIS!KDeletePtr<NDIS_BIND_PROTOCOL_LINK>
          NDIS!KDeletePtr<NDIS_BIND_PROTOCOL_LINK>
          NDIS!KDeletePtr<NDIS_BIND_FILTER_LINK>
          NDIS!KDeletePtr<NDIS_BIND_FILTER_LINK>
          NDIS!KRef<NDIS_BIND_FILTER_DRIVER>::KRefHolder
          NDIS!KRef<NDIS_BIND_FILTER_DRIVER>::KRefHolder
          NDIS!_WNF_STATE_NAME
          NDIS!_WNF_STATE_NAME
          NDIS!_EJOB
          NDIS!_NDIS_IF_COMPARTMENT_BLOCK
          NDIS!_NDIS_WORK_ITEM_TYPE
          NDIS!_DOT11_CIPHER_ALGORITHM
          NDIS!DOT11_CIPHER_DEFAULT_KEY_VALUE
          NDIS!_NDIS_PM_ADMIN_CONFIG
          NDIS!_NDIS_PM_ADMIN_CONFIG::<unnamed-tag>
          NDIS!_NDIS_PM_ADMIN_CONFIG::<unnamed-tag>::<unnamed-tag>
          NDIS!_NET_PHYSICAL_LOCATION_LH
          NDIS!_NDIS_PROVIDER_CHIMNEY_OFFLOAD_GENERIC_CHARACTERISTICS
          NDIS!_NDIS_IF_STACK_ENTRY
          NDIS!_NDIS_WWAN_SMS_READ
          NDIS!NDIS_CHIMNEY_OFFLOAD_TYPE
          NDIS!_NDIS_DEVICE_PNP_EVENT
          NDIS!_NET_DEVICE_PNP_EVENT
          NDIS!_NDIS_SHARED_MEMORY_USAGE
          NDIS!_NDIS_SHARED_MEMORY_PARAMETERS
          NDIS!NDIS_PD_BM_DOMAIN_HANDLE__
          NDIS!_DISPATCHER_HEADER
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>::<unnamed-tag>
          NDIS!_DISPATCHER_HEADER::<unnamed-tag>::<unnamed-tag>
          NDIS!_TraceLoggingMetadata_t
          NDIS!_TraceLoggingMetadata_t
          NDIS!_NDIS_NBL_MEDIA_MEDIA_SPECIFIC_INFORMATION
          NDIS!_NDIS_MINIPORT_RESTART_PARAMETERS
          NDIS!_NDIS_AF_LIST
          NDIS!_NDIS_MINIPORT_ADAPTER_NDK_ATTRIBUTES
          NDIS!_NDIS_OFFLOAD_HANDLE
          NDIS!_NDIS_MINIPORT_STATS
          NDIS!DOT11_PRIVACY_EXEMPTION_LIST
          NDIS!_NDIS_REQUEST
          NDIS!_NDIS_REQUEST::_DATA
          NDIS!_NDIS_REQUEST::_DATA::_QUERY_INFORMATION
          NDIS!_NDIS_REQUEST::_DATA::_SET_INFORMATION
          NDIS!_NDIS_REQUEST::<unnamed-tag>
          NDIS!_NDIS_PCI_DEVICE_CUSTOM_PROPERTIES
          NDIS!_NETIO_NET_BUFFER_CONTEXT::<unnamed-tag>
          NDIS!_NETIO_NET_BUFFER_CONTEXT::<unnamed-tag>::<unnamed-tag>