Guest User

Untitled

a guest
May 20th, 2019
76
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. *******************************************************************************
  2. * *
  3. * Bugcheck Analysis *
  4. * *
  5. *******************************************************************************
  6.  
  7. Use !analyze -v to get detailed debugging information.
  8.  
  9. BugCheck 3B, {c0000005, fffff88001f26a1d, fffff880092e9790, 0}
  10.  
  11. Map fwpkclnt.sys:
  12. Image region 2f200:10a00 does not fit in mapping
  13. *** WARNING: Unable to verify timestamp for fwpkclnt.sys
  14. *** ERROR: Module load completed but symbols could not be loaded for fwpkclnt.sys
  15. Probably caused by : fwpkclnt.sys ( fwpkclnt+a066 )
  16.  
  17. Followup: MachineOwner
  18. ---------
  19.  
  20. 1: kd> !analyze -v
  21. *******************************************************************************
  22. * *
  23. * Bugcheck Analysis *
  24. * *
  25. *******************************************************************************
  26.  
  27. SYSTEM_SERVICE_EXCEPTION (3b)
  28. An exception happened while executing a system service routine.
  29. Arguments:
  30. Arg1: 00000000c0000005, Exception code that caused the bugcheck
  31. Arg2: fffff88001f26a1d, Address of the instruction which caused the bugcheck
  32. Arg3: fffff880092e9790, Address of the context record for the exception that caused the bugcheck
  33. Arg4: 0000000000000000, zero.
  34.  
  35. Debugging Details:
  36. ------------------
  37.  
  38.  
  39. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
  40.  
  41. FAULTING_IP:
  42. tcpip!IppInspectBuildHeaders+54d
  43. fffff880`01f26a1d 8b4128 mov eax,dword ptr [rcx+28h]
  44.  
  45. CONTEXT: fffff880092e9790 -- (.cxr 0xfffff880092e9790;r)
  46. rax=fffffa800c96ce00 rbx=fffffa800c96cf30 rcx=0000000000000000
  47. rdx=0000000000000000 rsi=0000000000000010 rdi=0000000000000010
  48. rip=fffff88001f26a1d rsp=fffff880092ea160 rbp=fffff88001f6aa20
  49. r8=0000000000000006 r9=fffff880092ea2b0 r10=fffffa8009f94020
  50. r11=fffff880092ea010 r12=0000000000000012 r13=fffffa800772db40
  51. r14=0000000000000000 r15=0000000000000002
  52. iopl=0 nv up ei ng nz na po nc
  53. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
  54. tcpip!IppInspectBuildHeaders+0x54d:
  55. fffff880`01f26a1d 8b4128 mov eax,dword ptr [rcx+28h] ds:002b:00000000`00000028=????????
  56. Last set context:
  57. rax=fffffa800c96ce00 rbx=fffffa800c96cf30 rcx=0000000000000000
  58. rdx=0000000000000000 rsi=0000000000000010 rdi=0000000000000010
  59. rip=fffff88001f26a1d rsp=fffff880092ea160 rbp=fffff88001f6aa20
  60. r8=0000000000000006 r9=fffff880092ea2b0 r10=fffffa8009f94020
  61. r11=fffff880092ea010 r12=0000000000000012 r13=fffffa800772db40
  62. r14=0000000000000000 r15=0000000000000002
  63. iopl=0 nv up ei ng nz na po nc
  64. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
  65. tcpip!IppInspectBuildHeaders+0x54d:
  66. fffff880`01f26a1d 8b4128 mov eax,dword ptr [rcx+28h] ds:002b:00000000`00000028=????????
  67. Resetting default scope
  68.  
  69. CUSTOMER_CRASH_COUNT: 1
  70.  
  71. DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
  72.  
  73. BUGCHECK_STR: 0x3B
  74.  
  75. PROCESS_NAME: avp.exe
  76.  
  77. CURRENT_IRQL: 0
  78.  
  79. ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
  80.  
  81. LAST_CONTROL_TRANSFER: from fffff88001c0a066 to fffff88001f26a1d
  82.  
  83. STACK_TEXT:
  84. fffff880`092ea160 fffff880`01c0a066 : 00000000`00000000 fffff880`092ea4a8 00000000`00000000 00000000`00000000 : tcpip!IppInspectBuildHeaders+0x54d
  85. fffff880`092ea440 00000000`00000000 : fffff880`092ea4a8 00000000`00000000 00000000`00000000 fffff880`092ea554 : fwpkclnt+0xa066
  86.  
  87.  
  88. FOLLOWUP_IP:
  89. fwpkclnt+a066
  90. fffff880`01c0a066 ?? ???
  91.  
  92. SYMBOL_STACK_INDEX: 1
  93.  
  94. SYMBOL_NAME: fwpkclnt+a066
  95.  
  96. FOLLOWUP_NAME: MachineOwner
  97.  
  98. MODULE_NAME: fwpkclnt
  99.  
  100. IMAGE_NAME: fwpkclnt.sys
  101.  
  102. DEBUG_FLR_IMAGE_TIMESTAMP: 5b708e73
  103.  
  104. STACK_COMMAND: .cxr 0xfffff880092e9790 ; kb
  105.  
  106. FAILURE_BUCKET_ID: X64_0x3B_fwpkclnt+a066
  107.  
  108. BUCKET_ID: X64_0x3B_fwpkclnt+a066
  109.  
  110. ANALYSIS_SOURCE: KM
  111.  
  112. FAILURE_ID_HASH_STRING: km:x64_0x3b_fwpkclnt+a066
  113.  
  114. FAILURE_ID_HASH: {bb09511d-649d-b05d-0688-c045572e2939}
  115.  
  116. Followup: MachineOwner
  117. ---------
RAW Paste Data