| 1 | Microsoft (R) Windows Debugger Version 6.10.0003.233 X86
|
|---|
| 2 | Copyright (c) Microsoft Corporation. All rights reserved.
|
|---|
| 3 |
|
|---|
| 4 | <...skipped...>
|
|---|
| 5 |
|
|---|
| 6 | 1: kd> !process 0 0
|
|---|
| 7 | **** NT ACTIVE PROCESS DUMP ****
|
|---|
| 8 |
|
|---|
| 9 | <...skipped...>
|
|---|
| 10 |
|
|---|
| 11 | PROCESS 89912690 SessionId: 0 Cid: 0e9c Peb: 7ffdf000 ParentCid: 043c
|
|---|
| 12 | DirBase: 0ae00680 ObjectTable: e1396768 HandleCount: 342.
|
|---|
| 13 | Image: VirtualBox.exe
|
|---|
| 14 |
|
|---|
| 15 | <...skipped...>
|
|---|
| 16 |
|
|---|
| 17 | 1: kd> !process 89912690 6
|
|---|
| 18 | PROCESS 89912690 SessionId: 0 Cid: 0e9c Peb: 7ffdf000 ParentCid: 043c
|
|---|
| 19 | DirBase: 0ae00680 ObjectTable: e1396768 HandleCount: 342.
|
|---|
| 20 | Image: VirtualBox.exe
|
|---|
| 21 |
|
|---|
| 22 | <...skipped...>
|
|---|
| 23 |
|
|---|
| 24 | THREAD 89993cd0 Cid 0e9c.03b8 Teb: 7ffd6000 Win32Thread: 00000000 WAIT: (Executive) KernelMode Alertable
|
|---|
| 25 | 8a361094 NotificationEvent
|
|---|
| 26 | 89993dc0 NotificationTimer
|
|---|
| 27 | IRP List:
|
|---|
| 28 | 893f9f00: (0006,0094) Flags: 00000070 Mdl: 00000000
|
|---|
| 29 | Not impersonating
|
|---|
| 30 | DeviceMap e2348e10
|
|---|
| 31 | Owning Process 89912690 Image: VirtualBox.exe
|
|---|
| 32 | Attached Process N/A Image: N/A
|
|---|
| 33 | Wait Start TickCount 7347883
|
|---|
| 34 | Context Switch Count 39970
|
|---|
| 35 | UserTime 00:00:07.984
|
|---|
| 36 | KernelTime 00:00:02.218
|
|---|
| 37 | Win32 Start Address 0x7c3494f6
|
|---|
| 38 | Start Address 0x7c8106e9
|
|---|
| 39 | Stack Init ac3f0000 Current ac3efac8 Base ac3f0000 Limit ac3ed000 Call 0
|
|---|
| 40 | Priority 10 BasePriority 8 PriorityDecrement 2 DecrementCount 16
|
|---|
| 41 | *** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxDrv.sys -
|
|---|
| 42 | ChildEBP RetAddr Args to Child
|
|---|
| 43 | ac3efae0 80503846 89993d40 89993cd0 804fb078 nt!KiSwapContext+0x2f (FPO: [Uses EBP] [0,0,4])
|
|---|
| 44 | ac3efaec 804fb078 00000001 8a361090 adbbd729 nt!KiSwapThread+0x8a (FPO: [0,0,0])
|
|---|
| 45 | ac3efb14 ad98707a 00000000 00000000 00000000 nt!KeWaitForSingleObject+0x1c2 (FPO: [5,5,4])
|
|---|
| 46 | WARNING: Stack unwind information not available. Following frames may be wrong.
|
|---|
| 47 | ac3efb3c ad987111 00000001 896cdd68 ac3efb80 VBoxDrv!RTSemEventMultiReset+0xaa
|
|---|
| 48 | ac3efbbc 804fc4f7 893f9f40 893f9f00 00000000 VBoxDrv!RTSemEventMultiWaitNoResume+0x11
|
|---|
| 49 | ac3efc40 804ef19f 8a21ad18 893d2758 806e6410 nt!KeInsertQueueApc+0x6d (FPO: [4,3,4])
|
|---|
| 50 | ac3efc98 804ffc17 00000002 00000009 89993cd0 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
|
|---|
| 51 | ac3efd34 8054162c 00003784 00000000 00000000 nt!KiIpiSend+0x27 (FPO: [0,2,0])
|
|---|
| 52 | ac3efd34 8a21ad18 00003784 00000000 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ ac3efc64)
|
|---|
| 53 | ac3efcd4 806e6f01 899f1028 00000000 806e6106 0x8a21ad18
|
|---|
| 54 | ac3efcd4 00000000 899f1028 00000000 806e6106 hal!HalpApcInterrupt+0xd5 (FPO: [0,2] TrapFrame @ 893f9f70)
|
|---|
| 55 | 893f9fe0 00000000 00000100 00000000 8962bff0 0x0
|
|---|
| 56 |
|
|---|
| 57 | <...skipped...>
|
|---|
| 58 |
|
|---|
| 59 | 1: kd> !irp 893f9f00
|
|---|
| 60 | Irp is active with 1 stacks 1 is current (= 0x893f9f70)
|
|---|
| 61 | No Mdl: System buffer=8a2e5da8: Thread 89993cd0: Irp stack trace.
|
|---|
| 62 | cmd flg cl Device File Completion-Context
|
|---|
| 63 | >[ e, 0] 5 0 8a21ad18 899f1028 00000000-00000000
|
|---|
| 64 | \Driver\VBoxDrv
|
|---|
| 65 | Args: 00000028 00000028 00228024 00000000
|
|---|
| 66 |
|
|---|