heroesbsod102

Kernel base = 0xfffff801`6628a000 PsLoadedModuleList = 0xfffff801`66568cd0
Debug session time: Tue May 10 20:06:46.872 2016 (UTC - 4:00)
System Uptime: 0 days 0:01:11.504
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000096, Exception code that caused the bugcheck
Arg2: fffff801663ccccc, Address of the instruction which caused the bugcheck
Arg3: ffffd000f1ca70d0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

EXCEPTION_CODE: (NTSTATUS) 0xc0000096 - {EXCEPTION}  Privileged instruction.

FAULTING_IP:
nt!KiSaveDebugRegisterState+5c
fffff801`663ccccc 0f32            rdmsr

CONTEXT:  ffffd000f1ca70d0 -- (.cxr 0xffffd000f1ca70d0)
rax=0000000000000000 rbx=ffffe00099d92500 rcx=00000000000001c9
rdx=0000000000000555 rsi=0000000006b6e148 rdi=0000000006e76160
rip=fffff801663ccccc rsp=ffffd000f1ca7af8 rbp=ffffd000f1ca7b80
 r8=00000000000001c9  r9=ffffd000f01e8000 r10=0000000003f58d38
r11=0000000000000246 r12=0000000000000020 r13=0000000000000002
r14=0000000003f58d38 r15=0000000000000000
iopl=0         nv up di pl nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010006
nt!KiSaveDebugRegisterState+0x5c:
fffff801`663ccccc 0f32            rdmsr
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  HeroesOfTheSto

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff801663d6da3 to fffff801663ccccc

STACK_TEXT:
ffffd000`f1ca7af8 fffff801`663d6da3 : ffffe000`99d92500 00000000`00000000 ffffe000`99d92500 ffffe000`992dc1d0 : nt!KiSaveDebugRegisterState+0x5c
ffffd000`f1ca7b00 00007ffb`971357c4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceUser+0x53
00000000`03f58c48 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ffb`971357c4


FOLLOWUP_IP:
nt!KiSaveDebugRegisterState+5c
fffff801`663ccccc 0f32            rdmsr

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!KiSaveDebugRegisterState+5c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  571af445

STACK_COMMAND:  .cxr 0xffffd000f1ca70d0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!KiSaveDebugRegisterState+5c

BUCKET_ID:  X64_0x3B_nt!KiSaveDebugRegisterState+5c

Followup: MachineOwner