Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- Use !analyze -v to get detailed debugging information.
- BugCheck 3B, {c0000005, fffff88001f26a1d, fffff880092e9790, 0}
- Map fwpkclnt.sys:
- Image region 2f200:10a00 does not fit in mapping
- *** WARNING: Unable to verify timestamp for fwpkclnt.sys
- *** ERROR: Module load completed but symbols could not be loaded for fwpkclnt.sys
- Probably caused by : fwpkclnt.sys ( fwpkclnt+a066 )
- Followup: MachineOwner
- ---------
- 1: kd> !analyze -v
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- SYSTEM_SERVICE_EXCEPTION (3b)
- An exception happened while executing a system service routine.
- Arguments:
- Arg1: 00000000c0000005, Exception code that caused the bugcheck
- Arg2: fffff88001f26a1d, Address of the instruction which caused the bugcheck
- Arg3: fffff880092e9790, Address of the context record for the exception that caused the bugcheck
- Arg4: 0000000000000000, zero.
- Debugging Details:
- ------------------
- EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
- FAULTING_IP:
- tcpip!IppInspectBuildHeaders+54d
- fffff880`01f26a1d 8b4128 mov eax,dword ptr [rcx+28h]
- CONTEXT: fffff880092e9790 -- (.cxr 0xfffff880092e9790;r)
- rax=fffffa800c96ce00 rbx=fffffa800c96cf30 rcx=0000000000000000
- rdx=0000000000000000 rsi=0000000000000010 rdi=0000000000000010
- rip=fffff88001f26a1d rsp=fffff880092ea160 rbp=fffff88001f6aa20
- r8=0000000000000006 r9=fffff880092ea2b0 r10=fffffa8009f94020
- r11=fffff880092ea010 r12=0000000000000012 r13=fffffa800772db40
- r14=0000000000000000 r15=0000000000000002
- iopl=0 nv up ei ng nz na po nc
- cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
- tcpip!IppInspectBuildHeaders+0x54d:
- fffff880`01f26a1d 8b4128 mov eax,dword ptr [rcx+28h] ds:002b:00000000`00000028=????????
- Last set context:
- rax=fffffa800c96ce00 rbx=fffffa800c96cf30 rcx=0000000000000000
- rdx=0000000000000000 rsi=0000000000000010 rdi=0000000000000010
- rip=fffff88001f26a1d rsp=fffff880092ea160 rbp=fffff88001f6aa20
- r8=0000000000000006 r9=fffff880092ea2b0 r10=fffffa8009f94020
- r11=fffff880092ea010 r12=0000000000000012 r13=fffffa800772db40
- r14=0000000000000000 r15=0000000000000002
- iopl=0 nv up ei ng nz na po nc
- cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
- tcpip!IppInspectBuildHeaders+0x54d:
- fffff880`01f26a1d 8b4128 mov eax,dword ptr [rcx+28h] ds:002b:00000000`00000028=????????
- Resetting default scope
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
- BUGCHECK_STR: 0x3B
- PROCESS_NAME: avp.exe
- CURRENT_IRQL: 0
- ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
- LAST_CONTROL_TRANSFER: from fffff88001c0a066 to fffff88001f26a1d
- STACK_TEXT:
- fffff880`092ea160 fffff880`01c0a066 : 00000000`00000000 fffff880`092ea4a8 00000000`00000000 00000000`00000000 : tcpip!IppInspectBuildHeaders+0x54d
- fffff880`092ea440 00000000`00000000 : fffff880`092ea4a8 00000000`00000000 00000000`00000000 fffff880`092ea554 : fwpkclnt+0xa066
- FOLLOWUP_IP:
- fwpkclnt+a066
- fffff880`01c0a066 ?? ???
- SYMBOL_STACK_INDEX: 1
- SYMBOL_NAME: fwpkclnt+a066
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: fwpkclnt
- IMAGE_NAME: fwpkclnt.sys
- DEBUG_FLR_IMAGE_TIMESTAMP: 5b708e73
- STACK_COMMAND: .cxr 0xfffff880092e9790 ; kb
- FAILURE_BUCKET_ID: X64_0x3B_fwpkclnt+a066
- BUCKET_ID: X64_0x3B_fwpkclnt+a066
- ANALYSIS_SOURCE: KM
- FAILURE_ID_HASH_STRING: km:x64_0x3b_fwpkclnt+a066
- FAILURE_ID_HASH: {bb09511d-649d-b05d-0688-c045572e2939}
- Followup: MachineOwner
- ---------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement