*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {fffff8800b531000, 2, 0, fffff88007772fa0}
Unable to load image \SystemRoot\system32\DRIVERS\e22w7x64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for e22w7x64.sys
*** ERROR: Module load completed but symbols could not be loaded for e22w7x64.sys
Probably caused by : e22w7x64.sys ( e22w7x64+19fa0 )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff8800b531000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88007772fa0, address which referenced memory
Debugging Details:
------------------
OVERLAPPED_MODULE: Address regions for 'EX64' and 'ENG64.SYS' overlap
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030c1100
fffff8800b531000
CURRENT_IRQL: 2
FAULTING_IP:
e22w7x64+19fa0
fffff880`07772fa0 4c39b748020000 cmp qword ptr [rdi+248h],r14
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: LolClient.exe
TRAP_FRAME: fffff8800c7e7670 -- (.trap 0xfffff8800c7e7670)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000011 rbx=0000000000000000 rcx=fffffa800a9b06e8
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88007772fa0 rsp=fffff8800c7e7800 rbp=fffffa800a9b0630
r8=0000000000000300 r9=0000000000000000 r10=fffffa80089b4280
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
e22w7x64+0x19fa0:
fffff880`07772fa0 4c39b748020000 cmp qword ptr [rdi+248h],r14 ds:0db4:00000000`00000248=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002e89169 to fffff80002e89bc0
STACK_TEXT:
fffff880`0c7e7528 fffff800`02e89169 : 00000000`0000000a fffff880`0b531000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`0c7e7530 fffff800`02e87de0 : fffff8a0`06540124 fffff8a0`00022290 fffff880`0c7e7810 fffffa80`089a0b40 : nt!KiBugCheckDispatch+0x69
fffff880`0c7e7670 fffff880`07772fa0 : fffffa80`089a0b40 00000000`00001864 fffffa80`089a0b58 fffffa80`089a0b40 : nt!KiPageFault+0x260
fffff880`0c7e7800 fffffa80`089a0b40 : 00000000`00001864 fffffa80`089a0b58 fffffa80`089a0b40 fffffa80`0899ea38 : e22w7x64+0x19fa0
fffff880`0c7e7808 00000000`00001864 : fffffa80`089a0b58 fffffa80`089a0b40 fffffa80`0899ea38 fffff880`07771eb2 : 0xfffffa80`089a0b40
fffff880`0c7e7810 fffffa80`089a0b58 : fffffa80`089a0b40 fffffa80`0899ea38 fffff880`07771eb2 00000000`00000002 : 0x1864
fffff880`0c7e7818 fffffa80`089a0b40 : fffffa80`0899ea38 fffff880`07771eb2 00000000`00000002 00000000`00000000 : 0xfffffa80`089a0b58
fffff880`0c7e7820 fffffa80`0899ea38 : fffff880`07771eb2 00000000`00000002 00000000`00000000 fffffa80`0a26aee0 : 0xfffffa80`089a0b40
fffff880`0c7e7828 fffff880`07771eb2 : 00000000`00000002 00000000`00000000 fffffa80`0a26aee0 00000000`0000024c : 0xfffffa80`0899ea38
fffff880`0c7e7830 00000000`00000002 : 00000000`00000000 fffffa80`0a26aee0 00000000`0000024c fffffa80`08bdf7c8 : e22w7x64+0x18eb2
fffff880`0c7e7838 00000000`00000000 : fffffa80`0a26aee0 00000000`0000024c fffffa80`08bdf7c8 fffff880`0777c432 : 0x2
STACK_COMMAND: kb
FOLLOWUP_IP:
e22w7x64+19fa0
fffff880`07772fa0 4c39b748020000 cmp qword ptr [rdi+248h],r14
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: e22w7x64+19fa0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: e22w7x64
IMAGE_NAME: e22w7x64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 50bf79c4
FAILURE_BUCKET_ID: X64_0xD1_e22w7x64+19fa0
BUCKET_ID: X64_0xD1_e22w7x64+19fa0
Followup: MachineOwner
---------
3: kd> lmvm e22w7x64
start end module name
fffff880`07759000 fffff880`07783000 e22w7x64 T (no symbols)
Loaded symbol image file: e22w7x64.sys
Image path: \SystemRoot\system32\DRIVERS\e22w7x64.sys
Image name: e22w7x64.sys
Timestamp: Wed Dec 05 22:13:48 2012 (50BF79C4)
CheckSum: 00035FA2
ImageSize: 0002A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4