本帖最后由 PercyDan 于 2019-3-18 02:11 编辑
视频:http://www.bilibili.com/video/av46480087windbg分析dmp(文件太大不想发):
求解
- Microsoft (R) Windows Debugger Version 10.0.18317.1001 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Loading Dump File [D:\硬件信息\MEMORY.DMP]
- Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
- Symbol search path is: srv*
- Executable search path is:
- Windows 10 Kernel Version 18356 MP (4 procs) Free x64
- Product: WinNt, suite: TerminalServer SingleUserTS Personal
- Built by: 18356.1.amd64fre.19h1_release.190308-1607
- Machine Name:
- Kernel base = 0xfffff805`19000000 PsLoadedModuleList = 0xfffff805`194432d0
- Debug session time: Sun Mar 17 21:44:22.339 2019 (UTC + 8:00)
- System Uptime: 0 days 9:03:09.669
- Loading Kernel Symbols
- ...............................................................
- ................................................................
- ................................................................
- ..................................
- Loading User Symbols
- Loading unloaded module list
- ............................................
- For analysis of this file, run !analyze -v
- nt!KeBugCheckEx:
- fffff805`191bc810 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffab02`2dca5690=000000000000010d
- 1: kd> !analyze -v
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- WDF_VIOLATION (10d)
- The Kernel-Mode Driver Framework was notified that Windows detected an error
- in a framework-based driver. In general, the dump file will yield additional
- information about the driver that caused this bug check.
- Arguments:
- Arg1: 000000000000000d, A power irp was received for the device but the irp was not
- requested by the device (the power policy owner). Possibly there
- are multiple power policy owners. Only one driver in the stack can
- be the power policy owner. A KMDF driver can change power policy
- ownership by calling the DDI WdfDeviceInitSetPowerPolicyOwnership.
- Arg2: ffff810eb0ae2df0, Device object pointer.
- Arg3: ffff810eb250e010, Power Irp.
- Arg4: ffff810eafc94dd0, Reserved.
- Debugging Details:
- ------------------
- KEY_VALUES_STRING: 1
- PROCESSES_ANALYSIS: 1
- SERVICE_ANALYSIS: 1
- STACKHASH_ANALYSIS: 1
- TIMELINE_ANALYSIS: 1
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 401
- BUILD_VERSION_STRING: 18356.1.amd64fre.19h1_release.190308-1607
- SYSTEM_MANUFACTURER: Dell Inc.
- SYSTEM_PRODUCT_NAME: Inspiron 5577
- SYSTEM_SKU: 07E1
- SYSTEM_VERSION: 1.1.1
- BIOS_VENDOR: Dell Inc.
- BIOS_VERSION: 1.1.1
- BIOS_DATE: 08/16/2018
- BASEBOARD_MANUFACTURER: Dell Inc.
- BASEBOARD_PRODUCT: 090HMC
- BASEBOARD_VERSION: A00
- DUMP_TYPE: 1
- BUGCHECK_P1: d
- BUGCHECK_P2: ffff810eb0ae2df0
- BUGCHECK_P3: ffff810eb250e010
- BUGCHECK_P4: ffff810eafc94dd0
- BUGCHECK_STR: 0x10D_d
- CPU_COUNT: 4
- CPU_MHZ: 9c0
- CPU_VENDOR: GenuineIntel
- CPU_FAMILY: 6
- CPU_MODEL: 9e
- CPU_STEPPING: 9
- CPU_MICROCODE: 6,9e,9,0 (F,M,S,R) SIG: 8E'00000000 (cache) 8E'00000000 (init)
- DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
- PROCESS_NAME: System
- CURRENT_IRQL: 0
- ANALYSIS_SESSION_HOST: PERCYDAN
- ANALYSIS_SESSION_TIME: 03-18-2019 02:07:44.0664
- ANALYSIS_VERSION: 10.0.18317.1001 amd64fre
- LAST_CONTROL_TRANSFER: from fffff8051ddfb828 to fffff805191bc810
- STACK_TEXT:
- ffffab02`2dca5688 fffff805`1ddfb828 : 00000000`0000010d 00000000`0000000d ffff810e`b0ae2df0 ffff810e`b250e010 : nt!KeBugCheckEx
- ffffab02`2dca5690 fffff805`1ddc0b4e : ffffab02`2dca5790 00000000`00000016 00000000`00000000 ffff810e`afee7060 : Wdf01000+0x5b828
- ffffab02`2dca56d0 fffff805`1dda3c54 : ffff810e`afee7060 0000256f`00000001 ffff810e`00000000 00000000`00000000 : Wdf01000+0x20b4e
- ffffab02`2dca5720 fffff805`1ddaabd3 : ffff810e`b250e010 ffff810e`b02ad9b0 ffff810e`b250e010 00000000`00000000 : Wdf01000+0x3c54
- ffffab02`2dca5790 fffff805`1916fe1e : 00000000`00000016 ffff810e`b250e010 00000000`00000300 ffff810e`b250e200 : Wdf01000+0xabd3
- ffffab02`2dca57f0 fffff805`19027dc0 : 00000000`00000000 fffff805`16e66ac6 00000000`80000000 ffff810e`b250e200 : nt!IopPoHandleIrp+0x36
- ffffab02`2dca5820 fffff805`19172279 : 00000000`00000000 00000000`00000016 fffff805`16e9ad88 ffff810e`b250e010 : nt!IofCallDriver+0x70
- ffffab02`2dca5860 fffff805`16e62149 : 00000000`00000002 00000000`00000000 00000000`00000002 00000000`0000000e : nt!IoCallDriver+0x9
- ffffab02`2dca5890 fffff805`16e61f64 : ffff9780`41d40180 ffff810e`b00a2d00 00000000`00000000 00000000`80000000 : WUDFRd!RdPnpTracker::RdPnpProcessor+0x579 [minkernel\wdf\framework\umdf\redirector\driver\pnp.cpp @ 1265]
- ffffab02`2dca5930 fffff805`16e61bb1 : 00000000`00000000 ffff810e`b00a2df0 00000000`00000000 fffff805`1958a240 : WUDFRd!RdPnpTracker::RdPnpProcessor+0x394 [minkernel\wdf\framework\umdf\redirector\driver\pnp.cpp @ 1130]
- ffffab02`2dca59d0 fffff805`190bdeff : 00000000`00000000 ffff810e`b02cc860 ffff810e`b00a2df0 fffff805`329e5020 : WUDFRd!RdPnpTracker::RdPnpCallbackAtPassiveInSystemProcess+0x11 [minkernel\wdf\framework\umdf\redirector\driver\pnp.cpp @ 2166]
- ffffab02`2dca5a00 fffff805`190ae835 : ffff810e`a56c6c30 ffff810e`c4b50040 fffff805`190bde00 00000000`0000000c : nt!IopProcessWorkItem+0xff
- ffffab02`2dca5a70 fffff805`19130925 : ffff810e`c4b50040 00000000`00000080 ffff810e`a56ca3c0 00000000`00000080 : nt!ExpWorkerThread+0x105
- ffffab02`2dca5b10 fffff805`191c3d5a : fffff805`16cae180 ffff810e`c4b50040 fffff805`191308d0 ffff810e`00000000 : nt!PspSystemThreadStartup+0x55
- ffffab02`2dca5b60 00000000`00000000 : ffffab02`2dca6000 ffffab02`2dc9f000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x2a
- THREAD_SHA1_HASH_MOD_FUNC: 20babeb0e7c5d0e12da75507c3f598057bd72e3b
- THREAD_SHA1_HASH_MOD_FUNC_OFFSET: cb866589d7d57562b2960f7294178d407684f14f
- THREAD_SHA1_HASH_MOD: 0ba795ef9a0b77c35f26da9c76f76f84449945ea
- FOLLOWUP_IP:
- WUDFRd!RdPnpTracker::RdPnpProcessor+579 [minkernel\wdf\framework\umdf\redirector\driver\pnp.cpp @ 1265]
- fffff805`16e62149 e932020000 jmp WUDFRd!RdPnpTracker::RdPnpProcessor+0x7b0 (fffff805`16e62380)
- FAULT_INSTR_CODE: 232e9
- FAULTING_SOURCE_LINE: minkernel\wdf\framework\umdf\redirector\driver\pnp.cpp
- FAULTING_SOURCE_FILE: minkernel\wdf\framework\umdf\redirector\driver\pnp.cpp
- FAULTING_SOURCE_LINE_NUMBER: 1265
- FAULTING_SOURCE_CODE:
- No source found for 'minkernel\wdf\framework\umdf\redirector\driver\pnp.cpp'
- SYMBOL_STACK_INDEX: 8
- SYMBOL_NAME: WUDFRd!RdPnpTracker::RdPnpProcessor+579
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: WUDFRd
- IMAGE_NAME: WUDFRd.sys
- DEBUG_FLR_IMAGE_TIMESTAMP: 2a40f545
- STACK_COMMAND: .thread ; .cxr ; kb
- BUCKET_ID_FUNC_OFFSET: 579
- FAILURE_BUCKET_ID: 0x10D_d_WUDFRd!RdPnpTracker::RdPnpProcessor
- BUCKET_ID: 0x10D_d_WUDFRd!RdPnpTracker::RdPnpProcessor
- PRIMARY_PROBLEM_CLASS: 0x10D_d_WUDFRd!RdPnpTracker::RdPnpProcessor
- TARGET_TIME: 2019-03-17T13:44:22.000Z
- OSBUILD: 18356
- OSSERVICEPACK: 0
- SERVICEPACK_NUMBER: 0
- OS_REVISION: 0
- SUITE_MASK: 784
- PRODUCT_TYPE: 1
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
- OS_LOCALE:
- USER_LCID: 0
- OSBUILD_TIMESTAMP: unknown_date
- BUILDDATESTAMP_STR: 190308-1607
- BUILDLAB_STR: 19h1_release
- BUILDOSVER_STR: 10.0.18356.1.amd64fre.19h1_release.190308-1607
- ANALYSIS_SESSION_ELAPSED_TIME: 4996
- ANALYSIS_SOURCE: KM
- FAILURE_ID_HASH_STRING: km:0x10d_d_wudfrd!rdpnptracker::rdpnpprocessor
- FAILURE_ID_HASH: {3a1cc6a0-0a74-96e9-56fd-8d03045111ca}
- Followup: MachineOwner
- ---------
- 1: kd> !process
- PROCESS ffff810ea56ca3c0
- SessionId: none Cid: 0004 Peb: 00000000 ParentCid: 0000
- DirBase: 001ad002 ObjectTable: ffffc806ca20aac0 HandleCount: 2836.
- Image: System
- VadRoot ffff810eb0af9310 Vads 8 Clone 0 Private 20. Modified 4382702. Locked 0.
- DeviceMap ffffc806ca2139c0
- Token ffffc806ca2028d0
- ElapsedTime 09:03:02.732
- UserTime 00:00:00.000
- KernelTime 00:06:45.062
- QuotaPoolUsage[PagedPool] 0
- QuotaPoolUsage[NonPagedPool] 272
- Working Set Sizes (now,min,max) (50, 50, 450) (200KB, 200KB, 1800KB)
- PeakWorkingSetSize 1972
- VirtualSize 3 Mb
- PeakVirtualSize 13 Mb
- PageFaultCount 7597
- MemoryPriority BACKGROUND
- BasePriority 8
- CommitCharge 48
- THREAD ffff810ea56c6300 Cid 0004.000c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff80519435ac0 SynchronizationEvent
- THREAD ffff810ea56bf040 Cid 0004.0010 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffffab022b017050 NotificationEvent
- THREAD ffff810ea56a6180 Cid 0004.0014 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 3
- THREAD ffff810ea56ab0c0 Cid 0004.0018 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- fffff805194412a0 QueueObject
- THREAD ffff810ea5719140 Cid 0004.001c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) UserMode Non-Alertable
- ffff810ea56d5d70 SynchronizationEvent
- ffff810ea56d5d88 SynchronizationTimer
- ffff810ea56d5dc8 SynchronizationEvent
- THREAD ffff810ea5702080 Cid 0004.0024 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- fffff8051942c040 QueueObject
- THREAD ffff810ea56ac040 Cid 0004.0028 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Suspended) KernelMode Non-Alertable
- fffff80516cb3a00 Gate
- THREAD ffff810ea56a1040 Cid 0004.002c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Suspended) KernelMode Non-Alertable
- ffff978041d45a00 Gate
- THREAD ffff810ea56a2040 Cid 0004.0030 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Suspended) KernelMode Non-Alertable
- ffff978041de3a00 Gate
- THREAD ffff810ea571e040 Cid 0004.0034 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Suspended) KernelMode Non-Alertable
- ffff9780419a5a00 Gate
- THREAD ffff810ea56be380 Cid 0004.0040 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8051944a980 SynchronizationEvent
- ffff810ea5643158 SynchronizationEvent
- THREAD ffff810ea56c0300 Cid 0004.0044 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8051944a940 SynchronizationEvent
- THREAD ffff810ea571f040 Cid 0004.0060 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrFreePage) KernelMode Non-Alertable
- ffff810ea5680c80 SynchronizationEvent
- ffff810ea5680c98 SynchronizationEvent
- ffff810ea5680cb0 SynchronizationEvent
- ffff810ea5680cc8 SynchronizationEvent
- ffff810ea5680ce0 SynchronizationEvent
- ffff810ea5680ed8 NotificationEvent
- THREAD ffff810ea57ee040 Cid 0004.0064 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrFreePage) KernelMode Non-Alertable
- ffff810ea56b97e0 SynchronizationEvent
- ffff810ea5680ec0 NotificationEvent
- THREAD ffff810ea57ef040 Cid 0004.0068 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrFreePage) KernelMode Non-Alertable
- ffff810ea56b97f8 SynchronizationEvent
- ffff810ea5680ec0 NotificationEvent
- THREAD ffff810ea57f0040 Cid 0004.006c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrFreePage) KernelMode Non-Alertable
- ffff810ea56b9810 SynchronizationEvent
- ffff810ea5680ec0 NotificationEvent
- THREAD ffff810ea57f3040 Cid 0004.0078 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- fffff8051945fec0 QueueObject
- THREAD ffff810ea57f4040 Cid 0004.007c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- fffff8051945ff00 QueueObject
- THREAD ffff810ea569f040 Cid 0004.00d0 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- fffff8051945dea0 QueueObject
- THREAD ffff810ea56bc040 Cid 0004.00d4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- fffff8051945dea0 QueueObject
- THREAD ffff810ea56bd040 Cid 0004.00d8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- fffff8051945dea0 QueueObject
- THREAD ffff810ea56a7040 Cid 0004.00dc Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- fffff8051945dea0 QueueObject
- THREAD ffff810ea58d1280 Cid 0004.00e4 Teb: 0000000000000000 Win32Thread: 0000000000000000 READY on processor 80000001
- THREAD ffff810ea75e2080 Cid 0004.0100 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea73fc0f8 NotificationEvent
- THREAD ffff810ea7ac2080 Cid 0004.0108 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56ddc70 QueueObject
- THREAD ffff810ea76f1040 Cid 0004.010c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea7ad0d90 SynchronizationEvent
- ffff810ea7ad0da8 SynchronizationEvent
- ffff810ea7ad0dc0 SynchronizationEvent
- ffff810ea7ad0dd8 SynchronizationEvent
- ffff810ea7ad0df0 SynchronizationEvent
- ffff810ea7ad0e08 SynchronizationEvent
- ffff810ea7ad0e20 SynchronizationEvent
- ffff810ea7ad0e38 SynchronizationEvent
- ffff810ea7ad0e50 SynchronizationEvent
- ffff810ea7ad0e68 SynchronizationEvent
- THREAD ffff810ea7ad1040 Cid 0004.0110 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea5698a90 SynchronizationEvent
- ffff810ea5698a78 SynchronizationEvent
- THREAD ffff810ea7cd0040 Cid 0004.0114 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea73fc578 NotificationEvent
- THREAD ffff810ea75f0040 Cid 0004.0118 Teb: 0000000000000000 Win32Thread: 0000000000000000 READY on processor 80000003
- THREAD ffff810ea7bea340 Cid 0004.0128 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Alertable
- ffff810ea7beb018 NotificationEvent
- ffff810ea7beb030 SynchronizationTimer
- THREAD ffff810ea7bee080 Cid 0004.012c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Alertable
- fffff8051e451b78 NotificationEvent
- fffff8051e451ba8 Semaphore Limit 0x7fffffff
- THREAD ffff810ea7ad3080 Cid 0004.0130 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8051e539da0 NotificationEvent
- THREAD ffff810ea80e0040 Cid 0004.0148 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea563de30 Semaphore Limit 0x7fffffff
- THREAD ffff810ea80e1040 Cid 0004.014c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea563de70 Semaphore Limit 0x7fffffff
- THREAD ffff810ea80e2040 Cid 0004.0150 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea563deb0 Semaphore Limit 0x7fffffff
- THREAD ffff810ea80e3040 Cid 0004.0154 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea563def0 Semaphore Limit 0x7fffffff
- THREAD ffff810ea8eda640 Cid 0004.0180 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff80532419280 SynchronizationEvent
- THREAD ffff810ea90d2040 Cid 0004.0188 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff805327eb840 NotificationEvent
- THREAD ffff810ea90e8040 Cid 0004.018c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) UserMode Alertable
- ffff810ea8fda2e8 NotificationEvent
- THREAD ffff810ea91db040 Cid 0004.0190 Teb: 0000000000000000 Win32Thread: 0000000000000000 READY on processor 80000000
- THREAD ffff810ea95c5040 Cid 0004.0198 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5bc0 QueueObject
- THREAD ffff810ea95c7040 Cid 0004.019c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5bc0 QueueObject
- THREAD ffff810ea95c8040 Cid 0004.01a0 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5bc0 QueueObject
- THREAD ffff810ea95c9040 Cid 0004.01a4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5c18 QueueObject
- THREAD ffff810ea95ca040 Cid 0004.01a8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5c18 QueueObject
- THREAD ffff810ea95cb040 Cid 0004.01ac Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5c18 QueueObject
- THREAD ffff810ea95cc040 Cid 0004.01b0 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5c70 QueueObject
- THREAD ffff810ea95cd040 Cid 0004.01b4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5c70 QueueObject
- THREAD ffff810ea95ce040 Cid 0004.01b8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5c70 QueueObject
- THREAD ffff810ea95cf040 Cid 0004.01bc Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5cc8 QueueObject
- THREAD ffff810ea95d0040 Cid 0004.01c0 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5cc8 QueueObject
- THREAD ffff810ea95d1040 Cid 0004.01c4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea94d5cc8 QueueObject
- THREAD ffff810ea95d5640 Cid 0004.01c8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrLpcReceive) UserMode Non-Alertable
- ffff810ea95d5c98 Semaphore Limit 0x1
- THREAD ffff810ea95db600 Cid 0004.01d4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Alertable
- ffff810ea94cf790 SynchronizationEvent
- THREAD ffff810ea98ee080 Cid 0004.01e0 Teb: 0000000000000000 Win32Thread: 0000000000000000 READY on processor 80000002
- THREAD ffff810ea9d4e080 Cid 0004.01f8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea9e38828 Semaphore Limit 0xf42400
- ffff810ea9e38878 NotificationEvent
- THREAD ffff810ea9e14080 Cid 0004.01fc Teb: 0000000000000000 Win32Thread: 0000000000000000 READY on processor 80000003
- THREAD ffff810ea9f77040 Cid 0004.0240 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8053704b600 NotificationEvent
- fffff8053704b660 NotificationEvent
- THREAD ffff810ea9fd2040 Cid 0004.0244 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea93e7538 NotificationEvent
- THREAD ffff810eaefa9080 Cid 0004.0248 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea93e7bf8 NotificationEvent
- THREAD ffff810eaef5b040 Cid 0004.024c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea8fd7988 NotificationEvent
- THREAD ffff810eaf2b24c0 Cid 0004.0250 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eae86da80 NotificationEvent
- ffff810eae86da98 SynchronizationEvent
- ffff810eae86dab0 SynchronizationTimer
- THREAD ffff810eaf2ae4c0 Cid 0004.0254 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eae86e340 NotificationEvent
- ffff810eae86e358 SynchronizationEvent
- ffff810eae86e370 SynchronizationTimer
- THREAD ffff810eaf19b080 Cid 0004.0258 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eaeaf9240 SynchronizationEvent
- ffff810eaeaf9258 SynchronizationEvent
- ffff810eaeaf9270 SynchronizationEvent
- ffff810eae8fba90 NotificationEvent
- THREAD ffff810eaf4f7040 Cid 0004.025c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eaeaf90c0 SynchronizationEvent
- ffff810eaeaf90d8 SynchronizationEvent
- ffff810eaeaf90f0 SynchronizationEvent
- ffff810eae8fd590 NotificationEvent
- THREAD ffff810eaf4f9040 Cid 0004.0260 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eaeaf8fa0 SynchronizationEvent
- ffff810eaeaf8fb8 SynchronizationEvent
- ffff810eaeaf8fd0 SynchronizationEvent
- ffff810eae8fcdb0 NotificationEvent
- THREAD ffff810eaf4fb040 Cid 0004.0264 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eaeaf9300 SynchronizationEvent
- ffff810eaeaf9318 SynchronizationEvent
- ffff810eaeaf9330 SynchronizationEvent
- ffff810eae8fc4b0 NotificationEvent
- THREAD ffff810ea9f37040 Cid 0004.0268 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eaeaf9120 SynchronizationEvent
- ffff810eaeaf9138 SynchronizationEvent
- ffff810eaeaf9150 SynchronizationEvent
- ffff810eae8fd2c0 NotificationEvent
- THREAD ffff810ea9f39040 Cid 0004.026c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eaeaf9180 SynchronizationEvent
- ffff810eaeaf9198 SynchronizationEvent
- ffff810eaeaf91b0 SynchronizationEvent
- ffff810eae8fce40 NotificationEvent
- THREAD ffff810ea9f28600 Cid 0004.0270 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea9f0aca8 NotificationEvent
- ffff810ea9f0ad28 SynchronizationTimer
- ffff810ea9f0ad68 SynchronizationEvent
- THREAD ffff810ea9f32040 Cid 0004.0274 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (DelayExecution) KernelMode Non-Alertable
- ffffffffffffffff NotificationEvent
- THREAD ffff810eaf5ab5c0 Cid 0004.0278 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eaf5a3518 NotificationEvent
- ffff810eaf5a3500 SynchronizationEvent
- THREAD ffff810eaf5d5040 Cid 0004.027c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (DelayExecution) KernelMode Non-Alertable
- ffffffffffffffff NotificationEvent
- THREAD ffff810eaf5d6040 Cid 0004.0280 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eaf5294c8 SynchronizationEvent
- ffff810eaf529590 Semaphore Limit 0x7fffffff
- THREAD ffff810eaf5d7040 Cid 0004.0284 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (DelayExecution) KernelMode Non-Alertable
- ffffffffffffffff NotificationEvent
- THREAD ffff810eaf870080 Cid 0004.0304 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810eaf86a0c0 QueueObject
- THREAD ffff810eaf922680 Cid 0004.0308 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eaf903490 SynchronizationEvent
- ffff810eaf903458 SynchronizationEvent
- THREAD ffff810eaf92a680 Cid 0004.030c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb004d638 SynchronizationEvent
- ffff810eb004d620 SynchronizationEvent
- THREAD ffff810eaf847080 Cid 0004.0310 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Alertable
- ffff810eafa07328 SynchronizationEvent
- ffffab022b97f740 SynchronizationEvent
- THREAD ffff810eaf851080 Cid 0004.0314 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea9fa92e0 SynchronizationEvent
- ffff810ea9fa9360 SynchronizationEvent
- ffff810ea9fa93e0 SynchronizationEvent
- ffff810ea9fa9460 SynchronizationEvent
- ffff810ea9fa94e0 SynchronizationEvent
- ffff810ea9fa9260 SynchronizationEvent
- ffff810ea9fa9230 SynchronizationEvent
- THREAD ffff810eafa45680 Cid 0004.0318 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eafa0a490 SynchronizationEvent
- ffff810eafa0a458 SynchronizationEvent
- ffff810eafa0a500 SynchronizationEvent
- THREAD ffff810eafa4d680 Cid 0004.031c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb004d338 SynchronizationEvent
- ffff810eb004d320 SynchronizationEvent
- THREAD ffff810eaf9c4080 Cid 0004.0320 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea9cbec90 NotificationEvent
- ffff810ea9cbecc0 NotificationEvent
- ffff810ea9cbeca8 NotificationEvent
- ffff810ea9cc2448 NotificationEvent
- ffff810ea9cc2460 NotificationEvent
- ffff810ea9cc2478 NotificationEvent
- ffff810ea9cc2490 NotificationEvent
- ffff810ea9cc24a8 NotificationEvent
- ffff810ea9cc24c0 NotificationEvent
- ffff810ea9cc2418 NotificationEvent
- ffff810ea9cc2430 NotificationEvent
- ffff810ea9cc2528 NotificationEvent
- ffff810ea9ccb148 NotificationEvent
- ffff810ea9ccb160 NotificationEvent
- ffff810ea9cc2340 NotificationEvent
- ffff810ea9cc2358 NotificationEvent
- ffff810ea9cc2390 NotificationEvent
- ffff810ea9cc24d8 NotificationEvent
- ffff810ea9cbecd8 NotificationEvent
- THREAD ffff810eafd3e340 Cid 0004.0324 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eafd36168 NotificationEvent
- THREAD ffff810eafef3680 Cid 0004.0328 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eafee8490 SynchronizationEvent
- ffff810eafee8458 SynchronizationEvent
- ffff810eafee8500 SynchronizationEvent
- THREAD ffff810eaff1a680 Cid 0004.032c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eafbf95d8 SynchronizationEvent
- ffff810eafbf95c0 SynchronizationEvent
- THREAD ffff810eb0b8f080 Cid 0004.0380 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Alertable
- ffff810eb0afe3c0 QueueObject
- THREAD ffff810eb0773040 Cid 0004.07d8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb07c4c70 NotificationEvent
- ffff810eb07c4c88 SynchronizationEvent
- ffff810eb07c4cd0 NotificationEvent
- THREAD ffff810eb0772040 Cid 0004.07dc Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Alertable
- ffff810eb0772040 Thread
- THREAD ffff810eb07d0040 Cid 0004.05e4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- fffff805175bc0c8 QueueObject
- THREAD ffff810eb1a13080 Cid 0004.09b0 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrVirtualMemory) KernelMode Non-Alertable
- fffff80519465620 NotificationEvent
- ffffab022c519a40 Timer2SynchronizationObject
- THREAD ffff810eb1ec3040 Cid 0004.0c6c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1f9e300 SynchronizationEvent
- THREAD ffff810eb2008040 Cid 0004.0c70 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1f9e740 SynchronizationEvent
- THREAD ffff810eb2007040 Cid 0004.0c74 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1f9eb80 SynchronizationEvent
- THREAD ffff810eb2006040 Cid 0004.0c78 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1f9efc0 SynchronizationEvent
- THREAD ffff810eb2005040 Cid 0004.0c7c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff805376e33a0 SynchronizationEvent
- THREAD ffff810eb21e6040 Cid 0004.0da4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1d8a790 SynchronizationEvent
- THREAD ffff810eb21e5040 Cid 0004.0da8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1d8a808 SynchronizationEvent
- THREAD ffff810eb21e4040 Cid 0004.0dac Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1d8a880 SynchronizationEvent
- THREAD ffff810eb21e3040 Cid 0004.0db0 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1d8a8f8 SynchronizationEvent
- THREAD ffff810eb21e2040 Cid 0004.0db4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1e205a0 SynchronizationEvent
- THREAD ffff810eb21e1040 Cid 0004.0db8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1e20320 SynchronizationEvent
- THREAD ffff810eb21e0040 Cid 0004.0dbc Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea56a41a0 NotificationEvent
- ffff810ea56a48a0 NotificationEvent
- fffff80535faa020 NotificationTimer
- fffff80535fa9fe0 NotificationEvent
- fffff80535faa000 SynchronizationEvent
- THREAD ffff810eb2211040 Cid 0004.0e00 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff805360b2600 SynchronizationEvent
- fffff805360b25e0 SynchronizationEvent
- THREAD ffff810eb23f5040 Cid 0004.0f9c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb23f16d0 NotificationEvent
- ffff810eb23f16e8 NotificationEvent
- THREAD ffff810eb2463040 Cid 0004.1038 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1f1a1f8 SynchronizationEvent
- ffff810eb1f1a210 SynchronizationEvent
- THREAD ffff810eb250f040 Cid 0004.1094 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1f15c68 SynchronizationEvent
- ffff810eb1f15c80 SynchronizationEvent
- THREAD ffff810eb2699040 Cid 0004.11bc Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8057b6e9a60 NotificationEvent
- THREAD ffff810eb2499040 Cid 0004.1420 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1fc5de0 SynchronizationEvent
- ffff810eb1fc5da0 NotificationEvent
- THREAD ffff810eb1280040 Cid 0004.1428 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1fc8160 SynchronizationEvent
- ffff810eb1fc8120 NotificationEvent
- THREAD ffff810eb1445040 Cid 0004.1430 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1fc7460 SynchronizationEvent
- ffff810eb1fc7420 NotificationEvent
- THREAD ffff810eb1444040 Cid 0004.1434 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1fc7448 SynchronizationEvent
- THREAD ffff810eb14f8040 Cid 0004.1588 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579d30 NotificationEvent
- THREAD ffff810eb14f7040 Cid 0004.158c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579d68 NotificationEvent
- THREAD ffff810eb15b3040 Cid 0004.1590 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579da0 NotificationEvent
- THREAD ffff810eb15b2040 Cid 0004.1594 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579dd8 NotificationEvent
- THREAD ffff810eb15b1040 Cid 0004.1598 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579e10 NotificationEvent
- THREAD ffff810eb15b0040 Cid 0004.159c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579e48 NotificationEvent
- THREAD ffff810eb15af040 Cid 0004.15a0 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579e80 NotificationEvent
- THREAD ffff810eb15ae040 Cid 0004.15a4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579eb8 NotificationEvent
- THREAD ffff810eb15ad040 Cid 0004.15a8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579ef0 NotificationEvent
- THREAD ffff810eb15ac040 Cid 0004.15ac Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579f28 NotificationEvent
- THREAD ffff810eb15ab040 Cid 0004.15b0 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579f60 NotificationEvent
- THREAD ffff810eb15aa040 Cid 0004.15b4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1579f98 NotificationEvent
- THREAD ffff810eb1c7f080 Cid 0004.1d14 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8057b6e9a20 NotificationEvent
- THREAD ffff810eb322f080 Cid 0004.1d18 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8057b6e9a00 NotificationEvent
- THREAD ffff810eb323e080 Cid 0004.1d1c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8057b6e99e0 NotificationEvent
- THREAD ffff810eb48f2040 Cid 0004.2214 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1fc8148 SynchronizationEvent
- THREAD ffff810eb1ca3040 Cid 0004.2524 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1fc5dc8 SynchronizationEvent
- THREAD ffff810ebd8e9040 Cid 0004.0ce4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810ec30ed040 Cid 0004.224c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea86deab8 SynchronizationEvent
- THREAD ffff810ec2aec040 Cid 0004.24c4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810eb09e3970 PriQueueObject
- THREAD ffff810ec17eb040 Cid 0004.0804 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810ebb4f3040 Cid 0004.0998 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810ebf7c3040 Cid 0004.1140 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810ebb3e6040 Cid 0004.23ac Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eaf0859d8 SynchronizationEvent
- THREAD ffff810ec49ea040 Cid 0004.2c4c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea9f33978 SynchronizationEvent
- THREAD ffff810ec385a040 Cid 0004.10ec Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810ea9e83040 Cid 0004.2dac Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810ec3feb040 Cid 0004.3910 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (DelayExecution) KernelMode Non-Alertable
- ffffffffffffffff NotificationEvent
- THREAD ffff810eb82e2040 Cid 0004.3148 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810eb22f9040 Cid 0004.38ac Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810eb0275040 Cid 0004.2898 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810ec24c5080 Cid 0004.0554 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810ec41fb040 Cid 0004.2740 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810ec5c4d040 Cid 0004.1380 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffffab022df0e890 SynchronizationEvent
- ffffab022df0e8c8 Semaphore Limit 0x3f
- THREAD ffff810ebacc9040 Cid 0004.1c4c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffffab022df16828 NotificationEvent
- THREAD ffff810eb3210040 Cid 0004.3878 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ebc1d4f60 SynchronizationEvent
- ffff810ebc1d4f78 SynchronizationEvent
- ffff810ebc1d4f90 SynchronizationEvent
- THREAD ffff810ec6b32040 Cid 0004.31d0 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (DelayExecution) KernelMode Non-Alertable
- ffffffffffffffff NotificationEvent
- THREAD ffff810ebf2d9040 Cid 0004.15c0 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1e208e0 SynchronizationEvent
- THREAD ffff810ec2aee040 Cid 0004.14e8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1e20b60 SynchronizationEvent
- THREAD ffff810ec4431040 Cid 0004.1afc Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1e224a0 SynchronizationEvent
- THREAD ffff810ec0be2040 Cid 0004.11f8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810eb1e22960 SynchronizationEvent
- THREAD ffff810ec08dd040 Cid 0004.38c4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea86e0ab8 SynchronizationEvent
- THREAD ffff810eb2281040 Cid 0004.0ca8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea75eea38 SynchronizationEvent
- THREAD ffff810ec4b50040 Cid 0004.3e64 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 1
- THREAD ffff810eb35e9040 Cid 0004.003c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (WrQueue) KernelMode Non-Alertable
- ffff810ea56bf9a0 PriQueueObject
- THREAD ffff810eb54e30c0 Cid 0004.0cdc Teb: 0000000000000000 Win32Thread: 0000000000000000 STANDBY
- THREAD ffff810eb2695080 Cid 0004.26f8 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea9f2b7a8 NotificationEvent
- THREAD ffff810eb73eb080 Cid 0004.31e4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffffab0230b50770 SynchronizationEvent
- THREAD ffff810eb2692080 Cid 0004.0a5c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8051943fd00 Semaphore Limit 0x7fffffff
- THREAD ffff810eb2693080 Cid 0004.1c68 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffffab022e525ea0 NotificationEvent
- THREAD ffff810eb2694080 Cid 0004.0a78 Teb: 0000000000000000 Win32Thread: 0000000000000000 READY on processor 3
- THREAD ffff810eb06e2080 Cid 0004.17e4 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ea72fa048 NotificationEvent
- THREAD ffff810ebe8d5080 Cid 0004.24ac Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffffab022fce6650 SynchronizationEvent
- THREAD ffff810eb77e1080 Cid 0004.2a2c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffffab022fcee200 SynchronizationTimer
- THREAD ffff810eb94ea080 Cid 0004.2574 Teb: 0000000000000000 Win32Thread: 0000000000000000 READY on processor 3
- THREAD ffff810eb09d2080 Cid 0004.214c Teb: 0000000000000000 Win32Thread: 0000000000000000 READY on processor 3
- THREAD ffff810eb0674080 Cid 0004.1a14 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8051943fd00 Semaphore Limit 0x7fffffff
- THREAD ffff810eb6ce5080 Cid 0004.066c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8051943fd00 Semaphore Limit 0x7fffffff
- THREAD ffff810ea590b040 Cid 0004.3d44 Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- ffff810ec4faf228 SynchronizationEvent
- 1: kd> !thread ffff810eb6ce5080
- THREAD ffff810eb6ce5080 Cid 0004.066c Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (Executive) KernelMode Non-Alertable
- fffff8051943fd00 Semaphore Limit 0x7fffffff
- Not impersonating
- DeviceMap ffffc806ca2139c0
- Owning Process ffff810ea56ca3c0 Image: System
- Attached Process N/A Image: N/A
- Wait Start TickCount 2085738 Ticks: 0
- Context Switch Count 9 IdealProcessor: 3
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address nt!PopIrpWorker (0xfffff80519176030)
- Stack Init ffffab02310fab90 Current ffffab02310fa6c0
- Base ffffab02310fb000 Limit ffffab02310f4000 Call 0000000000000000
- Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- ffffab02`310fa700 fffff805`190318c2 : ffff9780`0000000c 00000000`ffffffff ffff9780`00000000 ffff810e`c30ed118 : nt!KiSwapContext+0x76
- ffffab02`310fa840 fffff805`19030f54 : ffff810e`b6ce5080 ffff810e`00000000 fffff805`16ea0b90 fffff805`00000000 : nt!KiSwapThread+0x3f2
- ffffab02`310fa8e0 fffff805`190306f5 : ffff810e`000000ba fffff805`00000000 ffffab02`310fab00 00000000`00000000 : nt!KiCommitThreadWait+0x144
- ffffab02`310fa980 fffff805`1917612b : fffff805`1943fd00 00000000`00000000 00000000`00000000 ffff810e`00000000 : nt!KeWaitForSingleObject+0x255
- ffffab02`310faa60 fffff805`19130925 : ffffffff`fa0a1f00 ffff810e`b6ce5080 fffff805`19176030 00000000`00000001 : nt!PopIrpWorker+0xfb
- ffffab02`310fab10 fffff805`191c3d5a : ffff9780`419a0180 ffff810e`b6ce5080 fffff805`191308d0 00000000`00000246 : nt!PspSystemThreadStartup+0x55
- ffffab02`310fab60 00000000`00000000 : ffffab02`310fb000 ffffab02`310f4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x2a
复制代码 |