Microsoft (R) Windows Debugger Version 6.2.9200.20512 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Usra\Downloads\aarontsang\SF_14-01-2014\011414-28579-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Machine Name:
Kernel base = 0xfffff800`02e60000 PsLoadedModuleList = 0xfffff800`030a36d0
Debug session time: Wed Jan 15 07:28:08.240 2014 (UTC + 6:00)
System Uptime: 0 days 20:07:51.019
Loading Kernel Symbols
...............................................................
................................................................
................................................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff880048c5883, fffff8800e5e0120, 0}
*** WARNING: Unable to verify timestamp for PctWfpFilter64.sys
*** ERROR: Module load completed but symbols could not be loaded for PctWfpFilter64.sys
Probably caused by : PctWfpFilter64.sys ( PctWfpFilter64+2883 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff880048c5883, Address of the instruction which caused the bugcheck
Arg3: fffff8800e5e0120, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
PctWfpFilter64+2883
fffff880`048c5883 f30f6f03 movdqu xmm0,xmmword ptr [rbx]
CONTEXT: fffff8800e5e0120 -- (.cxr 0xfffff8800e5e0120)
rax=992000014848e801 rbx=ffff00000b5bb191 rcx=fffff6800005add8
rdx=71f000014cd8c867 rsi=0000000000000000 rdi=fffff8800e5e1390
rip=fffff880048c5883 rsp=fffff8800e5e0b00 rbp=000000000000de6b
r8=00000000ffffffff r9=0000000000000000 r10=fffff880048fad20
r11=fffff8800e5e0be8 r12=00000000000000ff r13=0000000000000e54
r14=000000000000c30f r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202
PctWfpFilter64+0x2883:
fffff880`048c5883 f30f6f03 movdqu xmm0,xmmword ptr [rbx] ds:002b:ffff0000`0b5bb191=????????????????????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: chrome.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff8800e5e0b00 to fffff880048c5883
STACK_TEXT:
fffff880`0e5e0b00 fffff880`0e5e0b00 : fffff880`0e5e0b00 fffff880`0e5e0001 00000000`00000000 00000000`00000000 : PctWfpFilter64+0x2883
fffff880`0e5e0b08 fffff880`0e5e0b00 : fffff880`0e5e0001 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff880`0e5e0b00
fffff880`0e5e0b10 fffff880`0e5e0001 : 00000000`00000000 00000000`00000000 00000000`00000000 00000001`00000001 : 0xfffff880`0e5e0b00
fffff880`0e5e0b18 00000000`00000000 : 00000000`00000000 00000000`00000000 00000001`00000001 fffffa80`0ae32890 : 0xfffff880`0e5e0001
FOLLOWUP_IP:
PctWfpFilter64+2883
fffff880`048c5883 f30f6f03 movdqu xmm0,xmmword ptr [rbx]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: PctWfpFilter64+2883
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: PctWfpFilter64
IMAGE_NAME: PctWfpFilter64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 50906361
STACK_COMMAND: .cxr 0xfffff8800e5e0120 ; kb
FAILURE_BUCKET_ID: X64_0x3B_PctWfpFilter64+2883
BUCKET_ID: X64_0x3B_PctWfpFilter64+2883
Followup: MachineOwner
---------
0: kd> lmvm PctWfpFilter64
start end module name
fffff880`048c3000 fffff880`04906000 PctWfpFilter64 T (no symbols)
Loaded symbol image file: PctWfpFilter64.sys
Image path: \Device\Harddisk0\Partition3\Windows\system32\drivers\PctWfpFilter64.sys
Image name: PctWfpFilter64.sys
Timestamp: Wed Oct 31 05:31:45 2012 (50906361)
CheckSum: 0004DB9F
ImageSize: 00043000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4