Advertisement
jzef

Untitled

Sep 7th, 2024
23
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.89 KB | None | 0 0
  1. ADDITIONAL_DEBUG_TEXT:
  2. Use '!findthebuild' command to search for the target build information.
  3. If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
  4.  
  5. MODULE_NAME: tpm
  6.  
  7. FAULTING_MODULE: fffff80001000000 nt
  8.  
  9. DEBUG_FLR_IMAGE_TIMESTAMP: 5fed967c
  10.  
  11. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  12.  
  13. FAULTING_IP:
  14. tpm+17d58
  15. fffffadf`e21dfd58 8a5008 mov dl,byte ptr [rax+8]
  16.  
  17. EXCEPTION_RECORD: fffffadfe4a62e50 -- (.exr 0xfffffadfe4a62e50)
  18. ExceptionAddress: fffffadfe21dfd58 (tpm+0x0000000000017d58)
  19. ExceptionCode: c0000005 (Access violation)
  20. ExceptionFlags: 00000000
  21. NumberParameters: 2
  22. Parameter[0]: 0000000000000000
  23. Parameter[1]: 00000000c00000c3
  24. Attempt to read from address 00000000c00000c3
  25.  
  26. CONTEXT: fffffadfe4a62860 -- (.cxr 0xfffffadfe4a62860)
  27. rax=00000000c00000bb rbx=0000000000000002 rcx=00000000324d5054
  28. rdx=0000000000000000 rsi=fffffadfe72a1000 rdi=0000000000000003
  29. rip=fffffadfe21dfd58 rsp=fffffadfe4a63070 rbp=0000000000000000
  30. r8=0000000000000000 r9=0000000000000000 r10=fffff80001000000
  31. r11=fffffadfe4a63080 r12=0000000000000000 r13=fffff8000103fe40
  32. r14=fffffadfe72c75e0 r15=fffffadfe4a63508
  33. iopl=0 nv up ei pl nz na po nc
  34. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
  35. tpm+0x17d58:
  36. fffffadf`e21dfd58 8a5008 mov dl,byte ptr [rax+8] ds:002b:00000000`c00000c3=??
  37. Resetting default scope
  38.  
  39. DEFAULT_BUCKET_ID: DRIVER_FAULT
  40.  
  41. BUGCHECK_STR: 0x7E
  42.  
  43. CURRENT_IRQL: 0
  44.  
  45. LAST_CONTROL_TRANSFER: from fffffadfe21e91b4 to fffffadfe21dfd58
  46.  
  47. STACK_TEXT:
  48. fffffadf`e4a63070 fffffadf`e21e91b4 : 00000000`00000000 00000000`00000020 fffffadf`e72a1000 fffffadf`e72a1000 : tpm+0x17d58
  49. fffffadf`e4a630b0 fffffadf`e21e61d3 : 00000000`00000000 fffffadf`e72a1000 fffffadf`e21cb520 fffffadf`e72a76e0 : tpm+0x211b4
  50. fffffadf`e4a63120 fffff800`0131a51e : fffffadf`e691de70 fffffadf`e72a1000 00000000`0000001c 00000000`00000000 : tpm+0x1e1d3
  51. fffffadf`e4a63150 fffff800`01334503 : 00000000`00000004 ffffffff`80000550 00000000`00000003 ffffffff`80000550 : nt!NtSetVolumeInformationFile+0x37ae
  52. fffffadf`e4a63310 fffff800`0127a643 : fffffadf`e4a63c70 fffff800`00000000 fffffadf`e4a63730 fffffadf`00020019 : nt!IoReportResourceUsage+0xa7b3
  53. fffffadf`e4a63500 fffff800`01250a84 : fffffadf`00000001 00000000`00000001 fffffadf`e4a635e0 fffffadf`e4a63770 : nt!RtlQueryRegistryValues+0x5b3
  54. fffffadf`e4a635b0 fffff800`01333a5c : 00000000`00000000 00000000`00000001 fffffadf`e7089010 00000000`00000001 : nt!NtAllocateLocallyUniqueId+0x524
  55. fffffadf`e4a636b0 fffff800`0133595f : fffffadf`e7918310 00000000`00000000 00000000`00000000 00000000`00000001 : nt!IoReportResourceUsage+0x9d0c
  56. fffffadf`e4a63890 fffff800`0133488f : 00000000`00000000 fffffadf`e7341bd0 00000000`00000000 00000000`00000000 : nt!IoReportResourceUsage+0xbc0f
  57. fffffadf`e4a63c20 fffff800`010cca20 : fffff800`00000003 fffff800`010cc670 00000000`00000000 fffff800`011ce900 : nt!IoReportResourceUsage+0xab3f
  58. fffffadf`e4a63c70 fffff800`0103768a : 00000000`00000000 fffff800`011ddd00 fffff800`010cc670 fffffadf`e7af77a0 : nt!IoTranslateBusAddress+0x1770
  59. fffffadf`e4a63d00 fffff800`0124b972 : fffffadf`e7af77a0 00000000`00000080 fffffadf`e7af77a0 fffffadf`e46b3680 : nt!ExAllocatePoolWithTagPriority+0x18a
  60. fffffadf`e4a63d70 fffff800`010202d6 : fffffadf`e46ab180 fffffadf`e7af77a0 fffffadf`e46b3680 00000000`00000000 : nt!PsCreateSystemThread+0xa2
  61. fffffadf`e4a63dd0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeQueryPriorityThread+0xa56
  62.  
  63.  
  64. FOLLOWUP_IP:
  65. tpm+17d58
  66. fffffadf`e21dfd58 8a5008 mov dl,byte ptr [rax+8]
  67.  
  68. SYMBOL_STACK_INDEX: 0
  69.  
  70. SYMBOL_NAME: tpm+17d58
  71.  
  72. FOLLOWUP_NAME: MachineOwner
  73.  
  74. IMAGE_NAME: tpm.sys
  75.  
  76. STACK_COMMAND: .cxr 0xfffffadfe4a62860 ; kb
  77.  
  78. BUCKET_ID: WRONG_SYMBOLS
  79.  
  80. Followup: MachineOwner
  81.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement