*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff80002dbd617, fffff880054c1670, 0}
Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+537 )
Followup: MachineOwner
---------
4: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002dbd617, Address of the instruction which caused the bugcheck
Arg3: fffff880054c1670, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExAllocatePoolWithTag+537
fffff800`02dbd617 48895808 mov qword ptr [rax+8],rbx
CONTEXT: fffff880054c1670 -- (.cxr 0xfffff880054c1670)
rax=7ffff8a007bed560 rbx=fffffa800365d1c0 rcx=fffff8a007e4e480
rdx=0000000000000050 rsi=0000000000000006 rdi=0000000080000001
rip=fffff80002dbd617 rsp=fffff880054c2050 rbp=0000000000001000
r8=0000000000000001 r9=fffffa800365d1c0 r10=fffffa800365d008
r11=fffff880054c2130 r12=fffffa800365d000 r13=0000000000000000
r14=fffffa8006b2ab60 r15=0000000074536d4d
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
nt!ExAllocatePoolWithTag+0x537:
fffff800`02dbd617 48895808 mov qword ptr [rax+8],rbx ds:002b:7ffff8a0`07bed568=????????????????
Resetting default scope
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: sidebar.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002dbd617
STACK_TEXT:
fffff880`054c2050 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExAllocatePoolWithTag+0x537
FOLLOWUP_IP:
nt!ExAllocatePoolWithTag+537
fffff800`02dbd617 48895808 mov qword ptr [rax+8],rbx
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExAllocatePoolWithTag+537
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02aaa3
STACK_COMMAND: .cxr 0xfffff880054c1670 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!ExAllocatePoolWithTag+537
BUCKET_ID: X64_0x3B_nt!ExAllocatePoolWithTag+537
Followup: MachineOwner
---------