*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {fffff8800c8410d0, 2, 0, fffff8800426013e}
*** WARNING: Unable to verify timestamp for eamonm.sys
*** ERROR: Module load completed but symbols could not be loaded for eamonm.sys
Probably caused by : eamonm.sys ( eamonm+313e )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff8800c8410d0, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800426013e, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034b9100
GetUlongFromAddress: unable to read from fffff800034b91c0
fffff8800c8410d0 Nonpaged pool
CURRENT_IRQL: 2
FAULTING_IP:
eamonm+313e
fffff880`0426013e 483933 cmp qword ptr [rbx],rsi
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: svchost.exe
TRAP_FRAME: fffff88006c14260 -- (.trap 0xfffff88006c14260)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800426013e rsp=fffff88006c143f0 rbp=fffffa8007e8d0c0
r8=fffff88006c14510 r9=0000000000000000 r10=fffffa800420f010
r11=fffff88006c14578 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
eamonm+0x313e:
fffff880`0426013e 483933 cmp qword ptr [rbx],rsi ds:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800032801e9 to fffff80003280c40
STACK_TEXT:
fffff880`06c14118 fffff800`032801e9 : 00000000`0000000a fffff880`0c8410d0 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`06c14120 fffff800`0327ee60 : fffffa80`009e82c0 fffff800`03270d34 00000000`00000000 fffff880`0c8410d0 : nt!KiBugCheckDispatch+0x69
fffff880`06c14260 fffff880`0426013e : 00000000`00000000 fffffa80`04c36880 00000000`000007bc fffff880`01dffff8 : nt!KiPageFault+0x260
fffff880`06c143f0 00000000`00000000 : fffffa80`04c36880 00000000`000007bc fffff880`01dffff8 ffffffff`ffffffd6 : eamonm+0x313e
STACK_COMMAND: kb
FOLLOWUP_IP:
eamonm+313e
fffff880`0426013e 483933 cmp qword ptr [rbx],rsi
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: eamonm+313e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: eamonm
IMAGE_NAME: eamonm.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 50a4f5d2
FAILURE_BUCKET_ID: X64_0xD1_eamonm+313e
BUCKET_ID: X64_0xD1_eamonm+313e
Followup: MachineOwner
---------
rb:
