*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {f91200bc, 1, 0, 804e70dd}
Unable to load image \SystemRoot\system32\DRIVERS\3xHybrid.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for 3xHybrid.sys
*** ERROR: Module load completed but symbols could not be loaded for 3xHybrid.sys
Probably caused by : memory_corruption ( nt!MiLocateAndReserveWsle+52 )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: f91200bc, memory referenced
Arg2: 00000001, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 804e70dd, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: f91200bc
CURRENT_IRQL: 1
FAULTING_IP:
nt!MiLocateAndReserveWsle+52
804e70dd 8b0490 mov eax,dword ptr [eax+edx*4]
CUSTOMER_CRASH_COUNT: 2
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xA
TRAP_FRAME: f78bebcc -- (.trap 0xfffffffff78bebcc)
ErrCode = 00000000
eax=c0c0003c ebx=8055efe0 ecx=0002f756 edx=0e148020 esi=c0c00000 edi=0fffffff
eip=804e70dd esp=f78bec40 ebp=f78bec4c iopl=0 nv up ei ng nz ac pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010297
nt!MiLocateAndReserveWsle+0x52:
804e70dd 8b0490 mov eax,dword ptr [eax+edx*4] ds:0023:f91200bc=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 804e70dd to 804e187f
STACK_TEXT:
f78bebcc 804e70dd badb0d00 0e148020 00000000 nt!KiTrap0E+0x233
f78bec4c 804eda67 c0c0003c 00010000 88a9e9e0 nt!MiLocateAndReserveWsle+0x52
f78bec80 804ff911 cb191000 00000000 80556a18 nt!MmCheckCachedPageState+0x315
f78bed2c 804ff6c4 8993fd60 805618a0 89902830 nt!CcPerformReadAhead+0x1f1
f78bed74 804e426b 8993fd60 00000000 89902830 nt!CcWorkerThread+0x147
f78bedac 8057cfce 8993fd60 00000000 00000000 nt!ExpWorkerThread+0x100
f78beddc 804f88fa 804e4196 00000000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiLocateAndReserveWsle+52
804e70dd 8b0490 mov eax,dword ptr [eax+edx*4]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiLocateAndReserveWsle+52
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 45e55172
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0xA_nt!MiLocateAndReserveWsle+52
BUCKET_ID: 0xA_nt!MiLocateAndReserveWsle+52
Followup: MachineOwner
---------