*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {fffffa8009433000, 0, fffffa8002ab9393, 0}
Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+42877 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffa8009433000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffffa8002ab9393, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000000, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ebe0e0
fffffa8009433000
FAULTING_IP:
+0
fffffa80`02ab9393 66f2af repne scas word ptr [rdi]
MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: ekrn.exe
CURRENT_IRQL: 0
TRAP_FRAME: fffff8800293e610 -- (.trap 0xfffff8800293e610)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffffffffffff77ff
rdx=0000000000000104 rsi=0000000000000000 rdi=0000000000000000
rip=fffffa8002ab9393 rsp=fffff8800293e7a0 rbp=fffffa8009422000
r8=fffffa8009422000 r9=0000000000000050 r10=fffff880009e7b80
r11=fffffa80084c6af0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe cy
fffffa80`02ab9393 66f2af repne scas word ptr [rdi]
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002d06e54 to fffff80002c86600
STACK_TEXT:
fffff880`0293e4a8 fffff800`02d06e54 : 00000000`00000050 fffffa80`09433000 00000000`00000000 fffff880`0293e610 : nt!KeBugCheckEx
fffff880`0293e4b0 fffff800`02c846ee : 00000000`00000000 00000000`04e6f37c fffff800`02e15a00 fffff880`009e7180 : nt! ?? ::FNODOBFM::`string'+0x42877
fffff880`0293e610 fffffa80`02ab9393 : 00000000`04e6f37c 00000000`00000104 fffffa80`09422000 00000000`00000014 : nt!KiPageFault+0x16e
fffff880`0293e7a0 00000000`04e6f37c : 00000000`00000104 fffffa80`09422000 00000000`00000014 00000000`00000104 : 0xfffffa80`02ab9393
fffff880`0293e7a8 00000000`00000104 : fffffa80`09422000 00000000`00000014 00000000`00000104 fffffa80`02aadd0b : 0x4e6f37c
fffff880`0293e7b0 fffffa80`09422000 : 00000000`00000014 00000000`00000104 fffffa80`02aadd0b 00000000`04e6f37c : 0x104
fffff880`0293e7b8 00000000`00000014 : 00000000`00000104 fffffa80`02aadd0b 00000000`04e6f37c 00000000`00000051 : 0xfffffa80`09422000
fffff880`0293e7c0 00000000`00000104 : fffffa80`02aadd0b 00000000`04e6f37c 00000000`00000051 00000000`000080e8 : 0x14
fffff880`0293e7c8 fffffa80`02aadd0b : 00000000`04e6f37c 00000000`00000051 00000000`000080e8 00000000`00000000 : 0x104
fffff880`0293e7d0 00000000`04e6f37c : 00000000`00000051 00000000`000080e8 00000000`00000000 fffffa80`0366e060 : 0xfffffa80`02aadd0b
fffff880`0293e7d8 00000000`00000051 : 00000000`000080e8 00000000`00000000 fffffa80`0366e060 fffffa80`02abf787 : 0x4e6f37c
fffff880`0293e7e0 00000000`000080e8 : 00000000`00000000 fffffa80`0366e060 fffffa80`02abf787 fffffa80`0366e060 : 0x51
fffff880`0293e7e8 00000000`00000000 : fffffa80`0366e060 fffffa80`02abf787 fffffa80`0366e060 00000000`00000001 : 0x80e8
STACK_COMMAND: kb
FOLLOWUP_IP:
nt! ?? ::FNODOBFM::`string'+42877
fffff800`02d06e54 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+42877
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4b88cfeb
FAILURE_BUCKET_ID: X64_0x50_nt!_??_::FNODOBFM::_string_+42877
BUCKET_ID: X64_0x50_nt!_??_::FNODOBFM::_string_+42877
Followup: MachineOwner
---------
