*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff880010da86e, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800a355b60, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
cng!DetermineFunctionInterface+407
fffff880`010da86e 488b11 mov rdx,qword ptr [rcx]
CONTEXT: fffff8800a355b60 -- (.cxr 0xfffff8800a355b60)
rax=fffffa80002eb870 rbx=fffffa80002eb870 rcx=000000000000f979
rdx=0000000000000006 rsi=00000000ffffffff rdi=0000000000000003
rip=fffff880010da86e rsp=fffff8800a356540 rbp=0000000000000001
r8=0000000000000000 r9=0000000000000000 r10=fffff80002c08000
r11=00000000ffff0000 r12=fffff8800a3566b0 r13=0000000000000001
r14=fffffa80052fd460 r15=fffffa80052dbc80
iopl=0 nv up ei pl nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202
cng!DetermineFunctionInterface+0x407:
fffff880`010da86e 488b11 mov rdx,qword ptr [rcx] ds:002b:00000000`0000f979=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff880010dc0ca to fffff880010da86e
STACK_TEXT:
fffff880`0a356540 fffff880`010dc0ca : fffff880`0113a730 fffff880`0113a6b0 00000000`00000000 fffff880`0a356640 : cng!DetermineFunctionInterface+0x407
fffff880`0a3565e0 fffff880`010dca7e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : cng!BCryptResolveProviders+0x52a
fffff880`0a356880 fffff880`013f11bb : fffffa80`052f7540 fffff880`0a356a18 00000000`00000000 00000000`00000001 : cng!CngDeviceControl+0x19e
fffff880`0a356980 fffff880`013f10aa : fffffa80`05c382c0 00000000`00390402 fffffa80`00000001 00000000`00000000 : ksecdd!KsecDeviceControl+0x5b
fffff880`0a3569d0 fffff800`02f9fa97 : fffffa80`06b5d730 fffff880`00000000 fffffa80`06b5d730 fffff880`0a356ca0 : ksecdd!KsecDispatch+0x9a
fffff880`0a356a10 fffff800`02fa02f6 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x607
fffff880`0a356b40 fffff800`02c83ed3 : 00000000`00000001 fffffa80`072f7730 00000000`00000000 fffff880`0a356c00 : nt!NtDeviceIoControlFile+0x56
fffff880`0a356bb0 00000000`7771138a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`022aee58 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7771138a
FOLLOWUP_IP:
cng!DetermineFunctionInterface+407
fffff880`010da86e 488b11 mov rdx,qword ptr [rcx]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: cng!DetermineFunctionInterface+407
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: cng
IMAGE_NAME: cng.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce79e2d
STACK_COMMAND: .cxr 0xfffff8800a355b60 ; kb
FAILURE_BUCKET_ID: X64_0x3B_cng!DetermineFunctionInterface+407
BUCKET_ID: X64_0x3B_cng!DetermineFunctionInterface+407
Followup: MachineOwner
---------
1: kd> kn
# Child-SP RetAddr Call Site
00 fffff880`0a355298 fffff800`02c841e9 nt!KeBugCheckEx
01 fffff880`0a3552a0 fffff800`02c83b3c nt!KiBugCheckDispatch+0x69
02 fffff880`0a3553e0 fffff800`02cb04fd nt!KiSystemServiceHandler+0x7c
03 fffff880`0a355420 fffff800`02caf2d5 nt!RtlpExecuteHandlerForException+0xd
04 fffff880`0a355450 fffff800`02cc0361 nt!RtlDispatchException+0x415
05 fffff880`0a355b30 fffff800`02c842c2 nt!KiDispatchException+0x135
06 fffff880`0a3561d0 fffff800`02c82e3a nt!KiExceptionDispatch+0xc2
07 fffff880`0a3563b0 fffff880`010da86e nt!KiPageFault+0x23a
08 fffff880`0a356540 fffff880`010dc0ca cng!DetermineFunctionInterface+0x407
09 fffff880`0a3565e0 fffff880`010dca7e cng!BCryptResolveProviders+0x52a
0a fffff880`0a356880 fffff880`013f11bb cng!CngDeviceControl+0x19e
0b fffff880`0a356980 fffff880`013f10aa ksecdd!KsecDeviceControl+0x5b
0c fffff880`0a3569d0 fffff800`02f9fa97 ksecdd!KsecDispatch+0x9a
0d fffff880`0a356a10 fffff800`02fa02f6 nt!IopXxxControlFile+0x607
0e fffff880`0a356b40 fffff800`02c83ed3 nt!NtDeviceIoControlFile+0x56
0f fffff880`0a356bb0 00000000`7771138a nt!KiSystemServiceCopyEnd+0x13
10 00000000`022aee58 00000000`00000000 0x7771138a