Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ADDITIONAL_DEBUG_TEXT:
- Use '!findthebuild' command to search for the target build information.
- If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
- MODULE_NAME: tpm
- FAULTING_MODULE: fffff80001000000 nt
- DEBUG_FLR_IMAGE_TIMESTAMP: 5fed967c
- EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
- FAULTING_IP:
- tpm+17d58
- fffffadf`e21dfd58 8a5008 mov dl,byte ptr [rax+8]
- EXCEPTION_RECORD: fffffadfe4a62e50 -- (.exr 0xfffffadfe4a62e50)
- ExceptionAddress: fffffadfe21dfd58 (tpm+0x0000000000017d58)
- ExceptionCode: c0000005 (Access violation)
- ExceptionFlags: 00000000
- NumberParameters: 2
- Parameter[0]: 0000000000000000
- Parameter[1]: 00000000c00000c3
- Attempt to read from address 00000000c00000c3
- CONTEXT: fffffadfe4a62860 -- (.cxr 0xfffffadfe4a62860)
- rax=00000000c00000bb rbx=0000000000000002 rcx=00000000324d5054
- rdx=0000000000000000 rsi=fffffadfe72a1000 rdi=0000000000000003
- rip=fffffadfe21dfd58 rsp=fffffadfe4a63070 rbp=0000000000000000
- r8=0000000000000000 r9=0000000000000000 r10=fffff80001000000
- r11=fffffadfe4a63080 r12=0000000000000000 r13=fffff8000103fe40
- r14=fffffadfe72c75e0 r15=fffffadfe4a63508
- iopl=0 nv up ei pl nz na po nc
- cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
- tpm+0x17d58:
- fffffadf`e21dfd58 8a5008 mov dl,byte ptr [rax+8] ds:002b:00000000`c00000c3=??
- Resetting default scope
- DEFAULT_BUCKET_ID: DRIVER_FAULT
- BUGCHECK_STR: 0x7E
- CURRENT_IRQL: 0
- LAST_CONTROL_TRANSFER: from fffffadfe21e91b4 to fffffadfe21dfd58
- STACK_TEXT:
- fffffadf`e4a63070 fffffadf`e21e91b4 : 00000000`00000000 00000000`00000020 fffffadf`e72a1000 fffffadf`e72a1000 : tpm+0x17d58
- fffffadf`e4a630b0 fffffadf`e21e61d3 : 00000000`00000000 fffffadf`e72a1000 fffffadf`e21cb520 fffffadf`e72a76e0 : tpm+0x211b4
- fffffadf`e4a63120 fffff800`0131a51e : fffffadf`e691de70 fffffadf`e72a1000 00000000`0000001c 00000000`00000000 : tpm+0x1e1d3
- fffffadf`e4a63150 fffff800`01334503 : 00000000`00000004 ffffffff`80000550 00000000`00000003 ffffffff`80000550 : nt!NtSetVolumeInformationFile+0x37ae
- fffffadf`e4a63310 fffff800`0127a643 : fffffadf`e4a63c70 fffff800`00000000 fffffadf`e4a63730 fffffadf`00020019 : nt!IoReportResourceUsage+0xa7b3
- fffffadf`e4a63500 fffff800`01250a84 : fffffadf`00000001 00000000`00000001 fffffadf`e4a635e0 fffffadf`e4a63770 : nt!RtlQueryRegistryValues+0x5b3
- fffffadf`e4a635b0 fffff800`01333a5c : 00000000`00000000 00000000`00000001 fffffadf`e7089010 00000000`00000001 : nt!NtAllocateLocallyUniqueId+0x524
- fffffadf`e4a636b0 fffff800`0133595f : fffffadf`e7918310 00000000`00000000 00000000`00000000 00000000`00000001 : nt!IoReportResourceUsage+0x9d0c
- fffffadf`e4a63890 fffff800`0133488f : 00000000`00000000 fffffadf`e7341bd0 00000000`00000000 00000000`00000000 : nt!IoReportResourceUsage+0xbc0f
- fffffadf`e4a63c20 fffff800`010cca20 : fffff800`00000003 fffff800`010cc670 00000000`00000000 fffff800`011ce900 : nt!IoReportResourceUsage+0xab3f
- fffffadf`e4a63c70 fffff800`0103768a : 00000000`00000000 fffff800`011ddd00 fffff800`010cc670 fffffadf`e7af77a0 : nt!IoTranslateBusAddress+0x1770
- fffffadf`e4a63d00 fffff800`0124b972 : fffffadf`e7af77a0 00000000`00000080 fffffadf`e7af77a0 fffffadf`e46b3680 : nt!ExAllocatePoolWithTagPriority+0x18a
- fffffadf`e4a63d70 fffff800`010202d6 : fffffadf`e46ab180 fffffadf`e7af77a0 fffffadf`e46b3680 00000000`00000000 : nt!PsCreateSystemThread+0xa2
- fffffadf`e4a63dd0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeQueryPriorityThread+0xa56
- FOLLOWUP_IP:
- tpm+17d58
- fffffadf`e21dfd58 8a5008 mov dl,byte ptr [rax+8]
- SYMBOL_STACK_INDEX: 0
- SYMBOL_NAME: tpm+17d58
- FOLLOWUP_NAME: MachineOwner
- IMAGE_NAME: tpm.sys
- STACK_COMMAND: .cxr 0xfffffadfe4a62860 ; kb
- BUCKET_ID: WRONG_SYMBOLS
- Followup: MachineOwner
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement