kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0a11001b, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: f103293a, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: 0a11001b
CURRENT_IRQL: 2
FAULTING_IP:
tcpip!MdpFree+1a
f103293a 0fb6461b movzx eax,byte ptr [esi+1Bh]
CUSTOMER_CRASH_COUNT: 5
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: themida.exe
LAST_CONTROL_TRANSFER: from f1032808 to f103293a
STACK_TEXT:
f0d7ea70 f1032808 82138a88 81ee40f8 8206bdc0 tcpip!MdpFree+0x1a
f0d7ea8c f957ac1c 8210f008 82138a88 00000000 tcpip!ARPSendComplete+0xdc
f0d7eab0 f9417b69 81c98338 8206bdc0 00000000 NDIS!ndisMSendCompleteX+0x8d
f0d7ead0 f957ac1c 81e72628 0106bdc0 00000000 psched!ClSendComplete+0x67
f0d7eaf4 f9afce28 81ce42e0 8206bdc0 00000000 NDIS!ndisMSendCompleteX+0x8d
WARNING: Stack unwind information not available. Following frames may be wrong.
f0d7eb0c f9aff01f 81c33000 00000037 00000000 vmxnet+0xe28
f0d7eb28 f9aff893 0fef0000 8206bda0 00000103 vmxnet+0x301f
f0d7eb40 f9567f86 81c3300c f0d7eb74 00000001 vmxnet+0x3893
f0d7eb68 f9418528 81cebe60 8206bdc0 81c98338 NDIS!ndisMSendX+0x1bd
f0d7eba4 f957d424 81e72628 8206bdc0 00000000 psched!MpSend+0x706
f0d7ebd8 f04a6e96 81ee40f8 00000000 00000001 NDIS!ndisMSendPacketsX+0x1d5
f0d7ebfc f04a5862 81cba190 81ee40f8 f0d7ec58 Firewall!HookProtocolSendPackets+0xd6 [d:\firewallterminal\firewallterminal\func.c @ 793]
f0d7ec60 804eedf9 81e1ea48 81eb0f68 806d12d0 Firewall!FirewallWrite+0x1f2 [d:\firewallterminal\firewallterminal\firewall.c @ 300]
f0d7ec70 80574b42 81eb0fd8 00000000 81eb0f68 nt!IopfCallDriver+0x31
f0d7ec84 805726b8 81e1ea48 81eb0f68 81d3f648 nt!IopSynchronousServiceTail+0x60
f0d7ed38 8053d808 00000010 00000000 00000000 nt!NtWriteFile+0x602
f0d7ed38 7c92eb94 00000010 00000000 00000000 nt!KiFastCallEntry+0xf8
0012feac 00000000 00000000 00000000 00000000 0x7c92eb94
STACK_COMMAND: kb
FOLLOWUP_IP:
vmxnet+e28
f9afce28 ?? ???
SYMBOL_STACK_INDEX: 5
SYMBOL_NAME: vmxnet+e28
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: vmxnet
IMAGE_NAME: vmxnet.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 497928ac
FAILURE_BUCKET_ID: 0xD1_vmxnet+e28
BUCKET_ID: 0xD1_vmxnet+e28
Followup: MachineOwner
---------
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
