[FONT="Lucida Console"]Microsoft (R) Windows Debugger Version 6.3.9600.16384 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\YUSRA\Downloads\Compressed\05_02_2015_182649_51\020515-39998-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18700.amd64fre.win7sp1_gdr.141211-1742
Machine Name:
Kernel base = 0xfffff800`03267000 PsLoadedModuleList = 0xfffff800`034aa890
Debug session time: Thu Feb 5 22:57:30.914 2015 (UTC + 6:00)
System Uptime: 0 days 0:03:13.835
Loading Kernel Symbols
.
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
..............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {8, 2, 0, fffff88001845393}
*** WARNING: Unable to verify timestamp for e1c62x64.sys
*** ERROR: Module load completed but symbols could not be loaded for e1c62x64.sys
Probably caused by : e1c62x64.sys ( e1c62x64+25b09 )
Followup: MachineOwner
---------
7: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88001845393, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003514100
GetUlongFromAddress: unable to read from fffff800035141c0
0000000000000008 Nonpaged pool
CURRENT_IRQL: 2
FAULTING_IP:
tcpip!IpFlcReceivePreValidatedPackets+2d3
fffff880`01845393 440fb62c01 movzx r13d,byte ptr [rcx+rax]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) x86fre
TRAP_FRAME: fffff8800276ee40 -- (.trap 0xfffff8800276ee40)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000008
rdx=000000000000000c rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001845393 rsp=fffff8800276efd0 rbp=fffffa8008454140
r8=0000000000000006 r9=fffff8800196dd08 r10=fffff88001960002
r11=00000000ffffffff r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
tcpip!IpFlcReceivePreValidatedPackets+0x2d3:
fffff880`01845393 440fb62c01 movzx r13d,byte ptr [rcx+rax] ds:00000000`00000008=??
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800032dd429 to fffff800032dde80
STACK_TEXT:
fffff880`0276ecf8 fffff800`032dd429 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`0276ed00 fffff800`032dc0a0 : fffff880`0196d9a0 fffffa80`05f8cf00 fffffa80`0768f928 00000000`07318f50 : nt!KiBugCheckDispatch+0x69
fffff880`0276ee40 fffff880`01845393 : fffffa80`05e23890 00000000`0000bb01 00000000`000071c2 00000000`000071c2 : nt!KiPageFault+0x260
fffff880`0276efd0 fffff880`01856712 : fffffa80`07318f50 fffffa80`07318260 fffffa80`07310006 00000000`00000007 : tcpip!IpFlcReceivePreValidatedPackets+0x2d3
fffff880`0276f130 fffff800`032e9b68 : 00000000`00000000 00000000`00004800 fffffa80`0514db50 00000000`00000000 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xa2
fffff880`0276f180 fffff880`01856e42 : fffff880`01856670 fffff800`032fc4ad 00000000`00005102 fffff800`032efe00 : nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff880`0276f260 fffff880`016e60eb : fffffa80`07317260 00000000`00000000 fffffa80`075481a0 00000000`00000000 : tcpip!FlReceiveNetBufferListChain+0xb2
fffff880`0276f2d0 fffff880`016afad6 : fffff880`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisMIndicateNetBufferListsToOpen+0xdb
fffff880`0276f340 fffff880`01629ac1 : fffffa80`075481a0 00000000`00000002 00000000`00000001 00000000`00001164 : ndis!ndisMDispatchReceiveNetBufferLists+0x1d6
fffff880`0276f7c0 fffff880`06da6b09 : fffffa80`075f8000 fffffa80`073715e0 fffffa80`07333100 00000000`00000001 : ndis!NdisMIndicateReceiveNetBufferLists+0xc1
fffff880`0276f810 fffffa80`075f8000 : fffffa80`073715e0 fffffa80`07333100 00000000`00000001 00000000`00000801 : e1c62x64+0x25b09
fffff880`0276f818 fffffa80`073715e0 : fffffa80`07333100 00000000`00000001 00000000`00000801 00000000`00000001 : 0xfffffa80`075f8000
fffff880`0276f820 fffffa80`07333100 : 00000000`00000001 00000000`00000801 00000000`00000001 fffffa80`075fa5c0 : 0xfffffa80`073715e0
fffff880`0276f828 00000000`00000001 : 00000000`00000801 00000000`00000001 fffffa80`075fa5c0 fffff880`06da6cc0 : 0xfffffa80`07333100
fffff880`0276f830 00000000`00000801 : 00000000`00000001 fffffa80`075fa5c0 fffff880`06da6cc0 00000000`00000001 : 0x1
fffff880`0276f838 00000000`00000001 : fffffa80`075fa5c0 fffff880`06da6cc0 00000000`00000001 fffffa80`073715e0 : 0x801
fffff880`0276f840 fffffa80`075fa5c0 : fffff880`06da6cc0 00000000`00000001 fffffa80`073715e0 fffffa80`073715e0 : 0x1
fffff880`0276f848 fffff880`06da6cc0 : 00000000`00000001 fffffa80`073715e0 fffffa80`073715e0 00000000`00000001 : 0xfffffa80`075fa5c0
fffff880`0276f850 00000000`00000001 : fffffa80`073715e0 fffffa80`073715e0 00000000`00000001 fffffa80`00000000 : e1c62x64+0x25cc0
fffff880`0276f858 fffffa80`073715e0 : fffffa80`073715e0 00000000`00000001 fffffa80`00000000 fffff880`0276f8c0 : 0x1
fffff880`0276f860 fffffa80`073715e0 : 00000000`00000001 fffffa80`00000000 fffff880`0276f8c0 0000000a`00000001 : 0xfffffa80`073715e0
fffff880`0276f868 00000000`00000001 : fffffa80`00000000 fffff880`0276f8c0 0000000a`00000001 00000000`00000000 : 0xfffffa80`073715e0
fffff880`0276f870 fffffa80`00000000 : fffff880`0276f8c0 0000000a`00000001 00000000`00000000 fffff880`06d991a0 : 0x1
fffff880`0276f878 fffff880`0276f8c0 : 0000000a`00000001 00000000`00000000 fffff880`06d991a0 fffff880`0276fad8 : 0xfffffa80`00000000
fffff880`0276f880 0000000a`00000001 : 00000000`00000000 fffff880`06d991a0 fffff880`0276fad8 00000000`00000000 : 0xfffff880`0276f8c0
fffff880`0276f888 00000000`00000000 : fffff880`06d991a0 fffff880`0276fad8 00000000`00000000 00000000`00000000 : 0x0000000a`00000001
STACK_COMMAND: kb
FOLLOWUP_IP:
e1c62x64+25b09
fffff880`06da6b09 ?? ???
SYMBOL_STACK_INDEX: a
SYMBOL_NAME: e1c62x64+25b09
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: e1c62x64
IMAGE_NAME: e1c62x64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4c9924d7
FAILURE_BUCKET_ID: X64_0xD1_e1c62x64+25b09
BUCKET_ID: X64_0xD1_e1c62x64+25b09
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0xd1_e1c62x64+25b09
FAILURE_ID_HASH: {2c974ef8-2507-0b01-1f01-7342bf726993}
Followup: MachineOwner
---------
7: kd> lmvm e1c62x64
start end module name
fffff880`06d81000 fffff880`06dd0000 e1c62x64 T (no symbols)
Loaded symbol image file: e1c62x64.sys
Image path: \SystemRoot\system32\DRIVERS\e1c62x64.sys
Image name: e1c62x64.sys
Timestamp: Wed Sep 22 03:34:15 2010 (4C9924D7)
CheckSum: 00058EBD
ImageSize: 0004F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4[/FONT]
