Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Arch\Desktop\SF_08-06-2013\060813-31418-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18113.x86fre.win7sp1_gdr.130318-1533
Machine Name:
Kernel base = 0x82e09000 PsLoadedModuleList = 0x82f524d0
Debug session time: Sat Jun 8 20:41:34.775 2013 (UTC + 5:30)
System Uptime: 0 days 0:25:08.508
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {c06063a0, 0, 0, 82e6c8e1}
Probably caused by : memory_corruption ( nt!MiIsWsleHashValid+33 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: c06063a0, memory referenced
Arg2: 00000000, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82e6c8e1, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from 82f7284c
Unable to read MiSystemVaType memory at 82f51e20
c06063a0
CURRENT_IRQL: 0
FAULTING_IP:
nt!MiIsWsleHashValid+33
82e6c8e1 8b81000000c0 mov eax,dword ptr [ecx-40000000h]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: WinSAT.exe
TRAP_FRAME: addcdbe8 -- (.trap 0xffffffffaddcdbe8)
ErrCode = 00000009
eax=00000000 ebx=00007eab ecx=006063a0 edx=c0802000 esi=c0802d08 edi=1cd3f001
eip=82e6c8e1 esp=addcdc5c ebp=addcdc64 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!MiIsWsleHashValid+0x33:
82e6c8e1 8b81000000c0 mov eax,dword ptr [ecx-40000000h] ds:0023:c06063a0=00000000
Resetting default scope
LAST_CONTROL_TRANSFER: from 82e6c8e1 to 82e49c9b
STACK_TEXT:
addcdbe8 82e6c8e1 badb0d00 c0802000 85346978 nt!KiTrap0E+0x2cf
addcdc64 82e70012 840f9b70 85f9dd48 c0600730 nt!MiIsWsleHashValid+0x33
addcdc78 82e2e47e c0c744fc 899eaf76 ffffffff nt!MiLocateWsle+0x89
addcdd1c 82e468ba ffffffff 069af898 069af89c nt!NtLockVirtualMemory+0x2bc
addcdd1c 774e7094 ffffffff 069af898 069af89c nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
069af890 00000000 00000000 00000000 00000000 0x774e7094
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiIsWsleHashValid+33
82e6c8e1 8b81000000c0 mov eax,dword ptr [ecx-40000000h]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiIsWsleHashValid+33
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 5147d331
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0xA_nt!MiIsWsleHashValid+33
BUCKET_ID: 0xA_nt!MiIsWsleHashValid+33
Followup: MachineOwner
---------