*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88000c12c1c, Address of the instruction which caused the bugcheck
Arg3: fffff88003a69920, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
fltmgr!FltReadFile+cdc
fffff880`00c12c1c 0000 add byte ptr [rax],al
CONTEXT: fffff88003a69920 -- (.cxr 0xfffff88003a69920)
rax=0000000000000001 rbx=fffffa8007551000 rcx=fffffa8007161640
rdx=0000000000000011 rsi=fffffa80070171d0 rdi=fffffa8006fc9a10
rip=fffff88000c12c1c rsp=fffff88003a6a300 rbp=0000000000000000
r8=0000000000000000 r9=fffff88003a6a388 r10=fffffa80070171d8
r11=fffff88003a6a360 r12=fffffa80070171d0 r13=0000000000000000
r14=0000000000000011 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
fltmgr!FltReadFile+0xcdc:
fffff880`00c12c1c 0000 add byte ptr [rax],al ds:002b:00000000`00000001=??
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: ekrn.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff88000c12c1c
STACK_TEXT:
fffff880`03a6a300 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : fltmgr!FltReadFile+0xcdc
FOLLOWUP_IP:
fltmgr!FltReadFile+cdc
fffff880`00c12c1c 0000 add byte ptr [rax],al
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: fltmgr!FltReadFile+cdc
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: fltmgr
IMAGE_NAME: fltmgr.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce7929c
STACK_COMMAND: .cxr 0xfffff88003a69920 ; kb
FAILURE_BUCKET_ID: X64_0x3B_fltmgr!FltReadFile+cdc
BUCKET_ID: X64_0x3B_fltmgr!FltReadFile+cdc
Followup: MachineOwner