*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {ffffffffc0000005, fffff8800951264c, 0, ffffffffffffffff}
*** WARNING: Unable to verify timestamp for netr28ux.sys
*** ERROR: Module load completed but symbols could not be loaded for netr28ux.sys
Probably caused by : netr28ux.sys ( netr28ux+cb64c )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8800951264c, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80005114100
GetUlongFromAddress: unable to read from fffff800051141c0
0000000000000000 Nonpaged pool
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
netr28ux+cb64c
fffff880`0951264c 8b80a0be3200 mov eax,dword ptr [rax+32BEA0h]
BUGCHECK_STR: 0x1E_c0000005_R
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
LAST_CONTROL_TRANSFER: from fffff80004f27738 to fffff80004edcbc0
STACK_TEXT:
fffff880`07fa9ba8 fffff800`04f27738 : 00000000`0000001e ffffffff`c0000005 fffff880`0951264c 00000000`00000000 : nt!KeBugCheckEx
fffff880`07fa9bb0 fffff800`04edc242 : fffff880`07faa388 fffffa80`0cb2fb50 fffff880`07faa430 00000000`000000db : nt! ?? ::FNODOBFM::`string'+0x487ed
fffff880`07faa250 fffff800`04edab4a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000013 : nt!KiExceptionDispatch+0xc2
fffff880`07faa430 fffff880`0951264c : fa800000`000fffff f8000506`c588ffff 00000000`0000ffff f8800955`309e0000 : nt!KiGeneralProtectionFault+0x10a
fffff880`07faa5ce fa800000`000fffff : f8000506`c588ffff 00000000`0000ffff f8800955`309e0000 fa800bd6`8000ffff : netr28ux+0xcb64c
fffff880`07faa5d6 f8000506`c588ffff : 00000000`0000ffff f8800955`309e0000 fa800bd6`8000ffff f8800966`7c2cffff : 0xfa800000`000fffff
fffff880`07faa5de 00000000`0000ffff : f8800955`309e0000 fa800bd6`8000ffff f8800966`7c2cffff f8800000`0003ffff : 0xf8000506`c588ffff
fffff880`07faa5e6 f8800955`309e0000 : fa800bd6`8000ffff f8800966`7c2cffff f8800000`0003ffff f88007fa`00000000 : 0xffff
fffff880`07faa5ee fa800bd6`8000ffff : f8800966`7c2cffff f8800000`0003ffff f88007fa`00000000 f88007fa`a8f6ffff : 0xf8800955`309e0000
fffff880`07faa5f6 f8800966`7c2cffff : f8800000`0003ffff f88007fa`00000000 f88007fa`a8f6ffff f88007fa`a9c2ffff : 0xfa800bd6`8000ffff
fffff880`07faa5fe f8800000`0003ffff : f88007fa`00000000 f88007fa`a8f6ffff f88007fa`a9c2ffff f88007fa`aa2bffff : 0xf8800966`7c2cffff
fffff880`07faa606 f88007fa`00000000 : f88007fa`a8f6ffff f88007fa`a9c2ffff f88007fa`aa2bffff ffffff67`6980ffff : 0xf8800000`0003ffff
fffff880`07faa60e f88007fa`a8f6ffff : f88007fa`a9c2ffff f88007fa`aa2bffff ffffff67`6980ffff fa800bd9`9850ffff : 0xf88007fa`00000000
fffff880`07faa616 f88007fa`a9c2ffff : f88007fa`aa2bffff ffffff67`6980ffff fa800bd9`9850ffff f88007fa`a604ffff : 0xf88007fa`a8f6ffff
fffff880`07faa61e f88007fa`aa2bffff : ffffff67`6980ffff fa800bd9`9850ffff f88007fa`a604ffff 00000000`0000ffff : 0xf88007fa`a9c2ffff
fffff880`07faa626 ffffff67`6980ffff : fa800bd9`9850ffff f88007fa`a604ffff 00000000`0000ffff 01080000`00b10000 : 0xf88007fa`aa2bffff
fffff880`07faa62e fa800bd9`9850ffff : f88007fa`a604ffff 00000000`0000ffff 01080000`00b10000 ffff0000`0e994998 : 0xffffff67`6980ffff
fffff880`07faa636 f88007fa`a604ffff : 00000000`0000ffff 01080000`00b10000 ffff0000`0e994998 fa800bd9`9874ffff : 0xfa800bd9`9850ffff
fffff880`07faa63e 00000000`0000ffff : 01080000`00b10000 ffff0000`0e994998 fa800bd9`9874ffff fa000017`0000ffff : 0xf88007fa`a604ffff
fffff880`07faa646 01080000`00b10000 : ffff0000`0e994998 fa800bd9`9874ffff fa000017`0000ffff fffff880`0950f1ab : 0xffff
fffff880`07faa64e ffff0000`0e994998 : fa800bd9`9874ffff fa000017`0000ffff fffff880`0950f1ab fa800bd6`8000ffff : 0x01080000`00b10000
fffff880`07faa656 fa800bd9`9874ffff : fa000017`0000ffff fffff880`0950f1ab fa800bd6`8000ffff 00000000`00000001 : 0xffff0000`0e994998
fffff880`07faa65e fa000017`0000ffff : fffff880`0950f1ab fa800bd6`8000ffff 00000000`00000001 00003037`383200c0 : 0xfa800bd9`9874ffff
fffff880`07faa666 fffff880`0950f1ab : fa800bd6`8000ffff 00000000`00000001 00003037`383200c0 f8000000`00040007 : 0xfa000017`0000ffff
fffff880`07faa66e fa800bd6`8000ffff : 00000000`00000001 00003037`383200c0 f8000000`00040007 fa800bd9`99010000 : netr28ux+0xc81ab
fffff880`07faa676 00000000`00000001 : 00003037`383200c0 f8000000`00040007 fa800bd9`99010000 00010000`0003ffff : 0xfa800bd6`8000ffff
fffff880`07faa67e 00003037`383200c0 : f8000000`00040007 fa800bd9`99010000 00010000`0003ffff 00000000`00000000 : 0x1
fffff880`07faa686 f8000000`00040007 : fa800bd9`99010000 00010000`0003ffff 00000000`00000000 f88007fa`abb80000 : 0x00003037`383200c0
fffff880`07faa68e fa800bd9`99010000 : 00010000`0003ffff 00000000`00000000 f88007fa`abb80000 f8000000`0000ffff : 0xf8000000`00040007
fffff880`07faa696 00010000`0003ffff : 00000000`00000000 f88007fa`abb80000 f8000000`0000ffff f8800955`3337ffff : 0xfa800bd9`99010000
fffff880`07faa69e 00000000`00000000 : f88007fa`abb80000 f8000000`0000ffff f8800955`3337ffff 008007fa`abb8ffff : 0x00010000`0003ffff
STACK_COMMAND: kb
FOLLOWUP_IP:
netr28ux+cb64c
fffff880`0951264c 8b80a0be3200 mov eax,dword ptr [rax+32BEA0h]
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: netr28ux+cb64c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: netr28ux
IMAGE_NAME: netr28ux.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 52e242d9
FAILURE_BUCKET_ID: X64_0x1E_c0000005_R_netr28ux+cb64c
BUCKET_ID: X64_0x1E_c0000005_R_netr28ux+cb64c
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0x1e_c0000005_r_netr28ux+cb64c
FAILURE_ID_HASH: {ab69c267-5f38-5269-a4f5-d60015b8651f}
Followup: MachineOwner
---------
3: kd> lmvm netr28ux
start end module name
fffff880`09447000 fffff880`09691000 netr28ux T (no symbols)
Loaded symbol image file: netr28ux.sys
Image path: netr28ux.sys
Image name: netr28ux.sys
Timestamp: Fri Jan 24 16:09:21 2014 (52E242D9)
CheckSum: 0024F054
ImageSize: 0024A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4