Instant Online Crash Analysis, brought to you by OSR Open Systems Resources, Inc.

Show DivPrimary Analysis

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
Online Crash Dump Analysis Service
See http://www.osronline.com for more information
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Machine Name:
Kernel base = 0xfffff800`03454000 PsLoadedModuleList = 0xfffff800`03697890
Debug session time: Tue Jan 27 17:52:53.817 2015 (UTC - 5:00)
System Uptime: 1 days 11:38:44.122
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000010, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880014ab566, address which referenced memory

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003701100
GetUlongFromAddress: unable to read from fffff800037011c0
 0000000000000010 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP:
ndis!NdisFreeTimerObject+16
fffff880`014ab566 488b5310        mov     rdx,qword ptr [rbx+10h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff8800318c770 -- (.trap 0xfffff8800318c770)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff880014e1ac8
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880014ab566 rsp=fffff8800318c900 rbp=fffff8000366f280
 r8=0000000000011120  r9=0000000000000000 r10=fffff80003454000
r11=fffffa800e563b60 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
ndis!NdisFreeTimerObject+0x16:
fffff880`014ab566 488b5310        mov     rdx,qword ptr [rbx+10h] ds:00000000`00000010=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800034c9169 to fffff800034c9bc0

STACK_TEXT:
fffff880`0318c628 fffff800`034c9169 : 00000000`0000000a 00000000`00000010 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`0318c630 fffff800`034c7de0 : fffffa80`09786b50 fffffa80`09786b50 fffffa80`0d546000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`0318c770 fffff880`014ab566 : fffffa80`09786b50 00000000`000007ff fffffa80`0e563ea8 00000000`00000000 : nt!KiPageFault+0x260
fffff880`0318c900 fffff880`072e7677 : fffffa80`0e563ea8 fffff880`072e034f fffff880`073ce588 fffff880`073ce578 : ndis!NdisFreeTimerObject+0x16
fffff880`0318c930 fffffa80`0e563ea8 : fffff880`072e034f fffff880`073ce588 fffff880`073ce578 00000000`00011120 : athrx+0x47677
fffff880`0318c938 fffff880`072e034f : fffff880`073ce588 fffff880`073ce578 00000000`00011120 fffff880`072ccb83 : 0xfffffa80`0e563ea8
fffff880`0318c940 fffff880`073ce588 : fffff880`073ce578 00000000`00011120 fffff880`072ccb83 fffffa80`0e563dd8 : athrx+0x4034f
fffff880`0318c948 fffff880`073ce578 : 00000000`00011120 fffff880`072ccb83 fffffa80`0e563dd8 fffffa80`0fb90000 : athrx+0x12e588
fffff880`0318c950 00000000`00011120 : fffff880`072ccb83 fffffa80`0e563dd8 fffffa80`0fb90000 fffffa80`0fb98050 : athrx+0x12e578
fffff880`0318c958 fffff880`072ccb83 : fffffa80`0e563dd8 fffffa80`0fb90000 fffffa80`0fb98050 fffff880`072cfd88 : 0x11120
fffff880`0318c960 fffffa80`0e563dd8 : fffffa80`0fb90000 fffffa80`0fb98050 fffff880`072cfd88 fffffa80`0fb90030 : athrx+0x2cb83
fffff880`0318c968 fffffa80`0fb90000 : fffffa80`0fb98050 fffff880`072cfd88 fffffa80`0fb90030 fffff880`072cf5e9 : 0xfffffa80`0e563dd8
fffff880`0318c970 fffffa80`0fb98050 : fffff880`072cfd88 fffffa80`0fb90030 fffff880`072cf5e9 fffffa80`0e563b60 : 0xfffffa80`0fb90000
fffff880`0318c978 fffff880`072cfd88 : fffffa80`0fb90030 fffff880`072cf5e9 fffffa80`0e563b60 00000000`00000000 : 0xfffffa80`0fb98050
fffff880`0318c980 fffffa80`0fb90030 : fffff880`072cf5e9 fffffa80`0e563b60 00000000`00000000 00000000`00000000 : athrx+0x2fd88
fffff880`0318c988 fffff880`072cf5e9 : fffffa80`0e563b60 00000000`00000000 00000000`00000000 fffffa80`0e563b30 : 0xfffffa80`0fb90030
fffff880`0318c990 fffffa80`0e563b60 : 00000000`00000000 00000000`00000000 fffffa80`0e563b30 fffffa80`0c8be300 : athrx+0x2f5e9
fffff880`0318c998 00000000`00000000 : 00000000`00000000 fffffa80`0e563b30 fffffa80`0c8be300 fffff880`072cf589 : 0xfffffa80`0e563b60


STACK_COMMAND:  kb

FOLLOWUP_IP:
athrx+47677
fffff880`072e7677 ??              ???

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  athrx+47677

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: athrx

IMAGE_NAME:  athrx.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a2ea4b9

FAILURE_BUCKET_ID:  X64_0xD1_athrx+47677

BUCKET_ID:  X64_0xD1_athrx+47677

Followup: MachineOwner
---------


This free analysis is provided by OSR Open Systems Resources, Inc.
Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)
Hide DivCrash Code Links

View the MSDN page for DRIVER_IRQL_NOT_LESS_OR_EQUAL
Search Google for DRIVER_IRQL_NOT_LESS_OR_EQUAL

Hide DivInformation About Address 0x10

Address appears to be NULL!
The specified bad address is zero plus a small amount. This is usually a NULL pointer deref (i.e. NULL+offset)

Supplied dump is a mini-dump. Memory analysis commands unavailable.

Show DivLoaded Module List

Show DivRaw Stack Contents

Show DivDump Header Information

Show DivStrings