*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {fffff8800ba20005, 0, fffff8800adcd40c, 0}
Unable to load image BS_DEF.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for BS_DEF.sys
*** ERROR: Module load completed but symbols could not be loaded for BS_DEF.sys
Could not read faulting driver name
Probably caused by : BS_DEF.sys ( BS_DEF+240c )
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff8800ba20005, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff8800adcd40c, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000000, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800036b90e0
fffff8800ba20005
FAULTING_IP:
BS_DEF+240c
fffff880`0adcd40c 0fb7843b06000100 movzx eax,word ptr [rbx+rdi+10006h]
MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: IKernel.exe
CURRENT_IRQL: 0
TRAP_FRAME: fffff880080f4380 -- (.trap 0xfffff880080f4380)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000ffffffff rbx=0000000000000000 rcx=fffff8800ba1ffff
rdx=fffff8800ba1f790 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800adcd40c rsp=fffff880080f4510 rbp=0000000000000064
r8=00000000000119bf r9=00000000000119bf r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
BS_DEF+0x240c:
fffff880`0adcd40c 0fb7843b06000100 movzx eax,word ptr [rbx+rdi+10006h] ds:00000000`00010006=????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800035021e4 to fffff80003482f00
STACK_TEXT:
fffff880`080f4218 fffff800`035021e4 : 00000000`00000050 fffff880`0ba20005 00000000`00000000 fffff880`080f4380 : nt!KeBugCheckEx
fffff880`080f4220 fffff800`03480fee : 00000000`00000000 00000000`0000ffff fffff880`0ba00000 00000000`0001fff0 : nt! ?? ::FNODOBFM::`string'+0x42907
fffff880`080f4380 fffff880`0adcd40c : 00000000`000e0000 00000000`0001ffff 00000000`0000b93b fffff6fc`4005d0f8 : nt!KiPageFault+0x16e
fffff880`080f4510 00000000`000e0000 : 00000000`0001ffff 00000000`0000b93b fffff6fc`4005d0f8 00000000`000e0000 : BS_DEF+0x240c
fffff880`080f4518 00000000`0001ffff : 00000000`0000b93b fffff6fc`4005d0f8 00000000`000e0000 41412400`46534124 : 0xe0000
fffff880`080f4520 00000000`0000b93b : fffff6fc`4005d0f8 00000000`000e0000 41412400`46534124 24004353`46240046 : 0x1ffff
fffff880`080f4528 fffff6fc`4005d0f8 : 00000000`000e0000 41412400`46534124 24004353`46240046 00000000`00504141 : 0xb93b
fffff880`080f4530 00000000`000e0000 : 41412400`46534124 24004353`46240046 00000000`00504141 00000000`00000000 : 0xfffff6fc`4005d0f8
fffff880`080f4538 41412400`46534124 : 24004353`46240046 00000000`00504141 00000000`00000000 00000000`0000ffff : 0xe0000
fffff880`080f4540 24004353`46240046 : 00000000`00504141 00000000`00000000 00000000`0000ffff 00000000`0000fff0 : 0x41412400`46534124
fffff880`080f4548 00000000`00504141 : 00000000`00000000 00000000`0000ffff 00000000`0000fff0 fffffa80`0434d001 : 0x24004353`46240046
fffff880`080f4550 00000000`00000000 : 00000000`0000ffff 00000000`0000fff0 fffffa80`0434d001 fffffa80`043b0000 : 0x504141
STACK_COMMAND: kb
FOLLOWUP_IP:
BS_DEF+240c
fffff880`0adcd40c 0fb7843b06000100 movzx eax,word ptr [rbx+rdi+10006h]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: BS_DEF+240c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: BS_DEF
IMAGE_NAME: BS_DEF.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a41d815
FAILURE_BUCKET_ID: X64_0x50_BS_DEF+240c
BUCKET_ID: X64_0x50_BS_DEF+240c
Followup: MachineOwner
---------