*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff80003357ea1, fffff880049da780, 0}
*** WARNING: Unable to verify timestamp for tdrpm251.sys
*** ERROR: Module load completed but symbols could not be loaded for tdrpm251.sys
Probably caused by : tdrpm251.sys ( tdrpm251+4c0c8 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80003357ea1, Address of the instruction which caused the bugcheck
Arg3: fffff880049da780, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ObpQueryNameString+51
fffff800`03357ea1 410fb64718 movzx eax,byte ptr [r15+18h]
CONTEXT: fffff880049da780 -- (.cxr 0xfffff880049da780;r)
rax=fffff880049db258 rbx=0000000000000000 rcx=0000003c00000004
rdx=fffffa800884e240 rsi=0000000000000001 rdi=0000000000000000
rip=fffff80003357ea1 rsp=fffff880049db160 rbp=0000003c00000004
r8=0000000000000080 r9=fffff880049db2c0 r10=fffff800031fba00
r11=fffff88001a133c0 r12=0000000000000000 r13=fffffa80077f8800
r14=fffffa800884e240 r15=0000003bffffffd4
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
nt!ObpQueryNameString+0x51:
fffff800`03357ea1 410fb64718 movzx eax,byte ptr [r15+18h] ds:002b:0000003b`ffffffec=??
Last set context:
rax=fffff880049db258 rbx=0000000000000000 rcx=0000003c00000004
rdx=fffffa800884e240 rsi=0000000000000001 rdi=0000000000000000
rip=fffff80003357ea1 rsp=fffff880049db160 rbp=0000003c00000004
r8=0000000000000080 r9=fffff880049db2c0 r10=fffff800031fba00
r11=fffff88001a133c0 r12=0000000000000000 r13=fffffa80077f8800
r14=fffffa800884e240 r15=0000003bffffffd4
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
nt!ObpQueryNameString+0x51:
fffff800`03357ea1 410fb64718 movzx eax,byte ptr [r15+18h] ds:002b:0000003b`ffffffec=??
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
LAST_CONTROL_TRANSFER: from fffff80003360246 to fffff80003357ea1
STACK_TEXT:
fffff880`049db160 fffff800`03360246 : 0000003c`00000004 fffffa80`0884e240 fffffa80`00000080 fffff880`049db2c0 : nt!ObpQueryNameString+0x51
fffff880`049db260 fffff880`01a580c8 : fffff880`00000009 0000003c`00000004 00000000`00000001 00000000`00000000 : nt!ObQueryNameString+0xe
fffff880`049db2a0 fffff880`00000009 : 0000003c`00000004 00000000`00000001 00000000`00000000 0000003c`00000080 : tdrpm251+0x4c0c8
fffff880`049db2a8 0000003c`00000004 : 00000000`00000001 00000000`00000000 0000003c`00000080 fffff880`049db3c0 : 0xfffff880`00000009
fffff880`049db2b0 00000000`00000001 : 00000000`00000000 0000003c`00000080 fffff880`049db3c0 fffffa80`09f4c5c0 : 0x0000003c`00000004
fffff880`049db2b8 00000000`00000000 : 0000003c`00000080 fffff880`049db3c0 fffffa80`09f4c5c0 fffff880`01a5fa0b : 0x1
FOLLOWUP_IP:
tdrpm251+4c0c8
fffff880`01a580c8 ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: tdrpm251+4c0c8
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: tdrpm251
IMAGE_NAME: tdrpm251.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a72f8d9
STACK_COMMAND: .cxr 0xfffff880049da780 ; kb
FAILURE_BUCKET_ID: X64_0x3B_tdrpm251+4c0c8
BUCKET_ID: X64_0x3B_tdrpm251+4c0c8
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0x3b_tdrpm251+4c0c8
FAILURE_ID_HASH: {45ba9117-7c47-4e78-2852-c3df256f261f}
Followup: MachineOwner
---------
0: kd> lmvm tdrpm251
start end module name
fffff880`01a0c000 fffff880`01b72000 tdrpm251 T (no symbols)
Loaded symbol image file: tdrpm251.sys
Image path: tdrpm251.sys
Image name: tdrpm251.sys
Timestamp: Fri Jul 31 19:29:53 2009 (4A72F8D9)
CheckSum: 001637B0
ImageSize: 00166000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4