After setting the _NT_SYMBOL_PATH environment variable in order to solve Wrong Symbols...
Code:
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 85f09234, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: 00000000
CURRENT_IRQL: 2
FAULTING_IP:
+ffffffff85f09234
85f09234 0000 add byte ptr [eax],al
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: svchost.exe
LAST_CONTROL_TRANSFER: from 804dbbd4 to 85f09234
STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
f7c4efd0 804dbbd4 85f091f4 85f091e0 00000000 0x85f09234
f7c4eff4 804db89e f6ee2b14 00000000 00000000 nt!KiRetireDpcList+0x46
f7c4eff8 f6ee2b14 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2a
804db89e 00000000 00000009 bb835675 00000128 0xf6ee2b14
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiRetireDpcList+46
804dbbd4 837c240c00 cmp dword ptr [esp+0Ch],0
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!KiRetireDpcList+46
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntoskrnl.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 45e54711
FAILURE_BUCKET_ID: 0xD1_W_nt!KiRetireDpcList+46
BUCKET_ID: 0xD1_W_nt!KiRetireDpcList+46
Followup: MachineOwner