Kernel Power and BugCheck (Network Steve Forum)

Kernel Power and BugCheck

My PC has been restarting randomly often in normal situations and logging-in in the past 2 weeks. I post the error message and dump file here in hopes of finding the source of error and a working solution.

The computer has rebooted from a bugcheck. The bugcheck was: 0x000000c2 (0x0000000000000007, 0x0000000000001205, 0x0000000000000000, 0xffffc0000103b010). A dump was saved in: C:\Windows\Minidump\101313-21453-01.dmp. Report Id: 101313-21453-01.

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System> <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" /> <EventID Qualifiers="16384">1001</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2013-10-12T23:56:45.000000000Z" /> <EventRecordID>9530</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>System</Channel> <Computer>KEN-PC</Computer> <Security /> </System> - <EventData> <Data Name="param1">0x000000c2 (0x0000000000000007, 0x0000000000001205, 0x0000000000000000, 0xffffc0000103b010)</Data> <Data Name="param2">C:\Windows\Minidump\101313-21453-01.dmp</Data> <Data Name="param3">101313-21453-01</Data> </EventData>

</Event>

The dump file is uploaded to SkyDrive: http://sdrv.ms/GUqbDt

Thanks a lot!

October 12th, 2013 8:48pm

I use http://www.osronline.com which analyzed my dump file and produced this report:

Instant Online Crash Analysis, brought to you by OSR Open Systems Resources, Inc.

Primary Analysis

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
Online Crash Dump Analysis Service
See http://www.osronline.com for more information
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9600.16384.amd64fre.winblue_rtm.130821-1623
Machine Name:
Kernel base = 0xfffff801`64217000 PsLoadedModuleList = 0xfffff801`644de9b0
Debug session time: Sat Oct 12 19:56:01.044 2013 (UTC - 4:00)
System Uptime: 0 days 7:14:08.746
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 0000000000001205, (reserved)
Arg3: 0000000000000000, Memory contents of the pool block
Arg4: ffffc0000103b010, Address of the block of pool being deallocated

Debugging Details:
------------------

GetUlongFromAddress: unable to read from fffff801644bf398
GetUlongFromAddress: unable to read from fffff801644bf398
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

POOL_ADDRESS:  ffffc0000103b010 

BUGCHECK_STR:  0xc2_7

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff801644ac338 to fffff801643670a0

STACK_TEXT:  
ffffd000`2490f918 fffff801`644ac338 : 00000000`000000c2 00000000`00000007 00000000`00001205 00000000`00000000 : nt!KeBugCheckEx
ffffd000`2490f920 fffff801`645e2859 : ffffe000`04099df0 00000000`c0000043 00000000`00000000 00000000`20707249 : nt!ExDeferredFreePool+0xbb8
ffffd000`2490f9f0 fffff801`645de07f : ffffc000`00014c38 ffffc000`00014c38 ffffc000`002f00c0 ffffe000`02ee7030 : nt!IopParseDevice+0xb29
ffffd000`2490fbf0 fffff801`645dba83 : 00000000`00000000 ffffd000`2490fde8 00000000`00000640 ffffe000`003648c0 : nt!ObpLookupObjectName+0x6ef
ffffd000`2490fd70 fffff801`645d8e72 : 00000000`00000001 ffffe000`00bfe0a8 ffffd000`24910278 00000000`00000020 : nt!ObOpenObjectByName+0x1e3
ffffd000`2490fea0 fffff801`645d6c4c : ffffd000`24910240 00000000`00020003 ffffd000`24910298 fffff801`643728b3 : nt!IopCreateFile+0x372
ffffd000`2490ff40 fffff801`643728b3 : ffffe000`00000001 ffffd000`249101d0 00000000`00000000 ffffd000`24910080 : nt!NtCreateFile+0x78
ffffd000`2490ffd0 fffff801`6436ad00 : fffff801`6464bbfc 00000000`00000000 00000000`00000040 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
ffffd000`249101d8 fffff801`6464bbfc : 00000000`00000000 00000000`00000040 00000000`00000000 ffffe000`00ea4c90 : nt!KiServiceLinkage
ffffd000`249101e0 fffff801`6464c450 : 00000000`00000001 ffffe000`04099df0 00000000`00000000 ffffe000`00e4c070 : nt!CmpOpenHiveFile+0x150
ffffd000`24910360 fffff801`6464d5d3 : 00000000`00000000 ffffd000`249108c8 ffffd000`00000001 fffff801`6464aab1 : nt!CmpInitHiveFromFile+0xbc
ffffd000`249104e0 fffff801`646b8ab3 : 00000000`00000000 ffffd000`249108c8 00000000`00000020 00000000`00000001 : nt!CmpCmdHiveOpen+0x8b
ffffd000`249106f0 fffff801`646b7fa9 : ffffd000`24910900 ffffd000`249108c8 00000000`00000010 00000000`00000000 : nt!CmLoadAppKey+0x227
ffffd000`24910830 fffff801`643728b3 : 00000000`00000000 000000e6`115acf80 fffff6fb`00000010 00000000`00000000 : nt!NtLoadKeyEx+0x6bd
ffffd000`24910a90 00007ffa`e4628a2a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
000000e6`115acec8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ffa`e4628a2a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!IopParseDevice+b29
fffff801`645e2859 33c0            xor     eax,eax

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!IopParseDevice+b29

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  5215d156

FAILURE_BUCKET_ID:  X64_0xc2_7_nt!IopParseDevice+b29

BUCKET_ID:  X64_0xc2_7_nt!IopParseDevice+b29

Followup: MachineOwner
---------

This free analysis is provided by OSR Open Systems Resources, Inc.
Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)

Crash Code Links

View the MSDN page for BAD_POOL_CALLER
Search Google for BAD_POOL_CALLER

Loaded Module List

start             end                 module name
fffff800`00000000 fffff800`00088000   CI       CI.dll      
fffff800`00099000 fffff800`000ff000   mcupdate mcupdate.dll
fffff800`000ff000 fffff800`0010d000   werkernel werkernel.sys
fffff800`0010d000 fffff800`0016f000   CLFS     CLFS.SYS    
fffff800`0016f000 fffff800`00191000   tm       tm.sys      
fffff800`00191000 fffff800`001a6000   PSHED    PSHED.dll   
fffff800`001a6000 fffff800`001b0000   BOOTVID  BOOTVID.dll 
fffff800`00251000 fffff800`002ae000   msrpc    msrpc.sys   
fffff800`002ae000 fffff800`0037d000   Wdf01000 Wdf01000.sys
fffff800`0037d000 fffff800`0038e000   WDFLDR   WDFLDR.SYS  
fffff800`0038e000 fffff800`003a6000   acpiex   acpiex.sys  
fffff800`003a6000 fffff800`003b1000   WppRecorder WppRecorder.sys
fffff800`00400000 fffff800`00449000   pci      pci.sys     
fffff800`00449000 fffff800`00456000   vdrvroot vdrvroot.sys
fffff800`00456000 fffff800`00472000   pdc      pdc.sys     
fffff800`00472000 fffff800`0048a000   partmgr  partmgr.sys 
fffff800`004a6000 fffff800`0052b000   ACPI     ACPI.sys    
fffff800`0052b000 fffff800`00535000   WMILIB   WMILIB.SYS  
fffff800`00535000 fffff800`005c0000   cng      cng.sys     
fffff800`005cb000 fffff800`005d5000   msisadrv msisadrv.sys
fffff800`00600000 fffff800`00644000   WdFilter WdFilter.sys
fffff800`00644000 fffff800`00689000   rdyboost rdyboost.sys
fffff800`00689000 fffff800`006a5000   disk     disk.sys    
fffff800`006e5000 fffff800`00742000   spaceport spaceport.sys
fffff800`00742000 fffff800`00757000   volmgr   volmgr.sys  
fffff800`00757000 fffff800`007b6000   volmgrx  volmgrx.sys 
fffff800`007b6000 fffff800`007d1000   mountmgr mountmgr.sys
fffff800`00800000 fffff800`00834000   ksecpkg  ksecpkg.sys 
fffff800`00834000 fffff800`00aee000   iaStorA  iaStorA.sys 
fffff800`00aee000 fffff800`00b4d000   storport storport.sys
fffff800`00b4d000 fffff800`00b67000   EhStorClass EhStorClass.sys
fffff800`00b67000 fffff800`00bc3000   fltmgr   fltmgr.sys  
fffff800`00bc3000 fffff800`00bd9000   fileinfo fileinfo.sys
fffff800`00bd9000 fffff800`00be51a0   PxHlpa64 PxHlpa64.sys
fffff800`00c00000 fffff800`00c17000   mup      mup.sys     
fffff800`00c17000 fffff800`00c25000   LhdX64   LhdX64.sys  
fffff800`00c31000 fffff800`00e27000   Ntfs     Ntfs.sys    
fffff800`00e27000 fffff800`00e42000   ksecdd   ksecdd.sys  
fffff800`00e42000 fffff800`00e52000   pcw      pcw.sys     
fffff800`00e52000 fffff800`00e5d000   Fs_Rec   Fs_Rec.sys  
fffff800`00e5d000 fffff800`00f75000   ndis     ndis.sys    
fffff800`00f75000 fffff800`00fee000   NETIO    NETIO.SYS   
fffff800`00fee000 fffff800`00ffd000   intelpep intelpep.sys
fffff800`01000000 fffff800`01093000   fvevol   fvevol.sys  
fffff800`01093000 fffff800`010e3000   volsnap  volsnap.sys 
fffff800`010e8000 fffff800`01366000   tcpip    tcpip.sys   
fffff800`01366000 fffff800`013d2000   fwpkclnt fwpkclnt.sys
fffff800`013d2000 fffff800`013f7000   wfplwfs  wfplwfs.sys 
fffff800`01400000 fffff800`01493000   afd      afd.sys     
fffff800`01493000 fffff800`014ab000   vwififlt vwififlt.sys
fffff800`014b5000 fffff800`0150b000   CLASSPNP CLASSPNP.SYS
fffff800`0150b000 fffff800`01520000   crashdmp crashdmp.sys
fffff800`0152c000 fffff800`01578000   netbt    netbt.sys   
fffff800`01578000 fffff800`01589000   netbios  netbios.sys 
fffff800`01589000 fffff800`015f9000   rdbss    rdbss.sys   
fffff800`01800000 fffff800`01808000   Beep     Beep.SYS    
fffff800`01808000 fffff800`01816000   BasicRender BasicRender.sys
fffff800`01816000 fffff800`01877000   dxgmms1  dxgmms1.sys 
fffff800`01877000 fffff800`018a1000   pacer    pacer.sys   
fffff800`018a1000 fffff800`01b5b000   dump_iaStorA dump_iaStorA.sys
fffff800`01b7c000 fffff800`01bc5000   dtsoftbus01 dtsoftbus01.sys
fffff800`01bc5000 fffff800`01bf3000   cdrom    cdrom.sys   
fffff800`01bf3000 fffff800`01bfc000   Null     Null.SYS    
fffff800`01c00000 fffff800`01c0e000   TDI      TDI.SYS     
fffff800`01c0e000 fffff800`01c19000   ws2ifsl  ws2ifsl.sys 
fffff800`01c1c000 fffff800`01d97000   dxgkrnl  dxgkrnl.sys 
fffff800`01d97000 fffff800`01da9000   watchdog watchdog.sys
fffff800`01da9000 fffff800`01dbb000   BasicDisplay BasicDisplay.sys
fffff800`01dbb000 fffff800`01dcf000   Npfs     Npfs.SYS    
fffff800`01dcf000 fffff800`01ddb000   Msfs     Msfs.SYS    
fffff800`01ddb000 fffff800`01dfb000   tdx      tdx.sys     
fffff800`01e00000 fffff800`01e17000   ahcache  ahcache.sys 
fffff800`01e17000 fffff800`01e26000   CompositeBus CompositeBus.sys
fffff800`01e26000 fffff800`01e31000   kdnic    kdnic.sys   
fffff800`01e31000 fffff800`01e42000   umbus    umbus.sys   
fffff800`01e42000 fffff800`01e8e000   ks       ks.sys      
fffff800`01eeb000 fffff800`01f79000   csc      csc.sys     
fffff800`01f79000 fffff800`01f92000   wanarp   wanarp.sys  
fffff800`01f92000 fffff800`01fa0000   nsiproxy nsiproxy.sys
fffff800`01fa0000 fffff800`01fac000   npsvctrig npsvctrig.sys
fffff800`01fac000 fffff800`01fb8000   mssmbios mssmbios.sys
fffff800`01fb8000 fffff800`01fde000   dfsc     dfsc.sys    
fffff800`02000000 fffff800`02019000   HDAudBus HDAudBus.sys
fffff800`02019000 fffff800`02037000   L1C63x64 L1C63x64.sys
fffff800`0203b000 fffff800`02558100   igdkmd64 igdkmd64.sys
fffff800`02559000 fffff800`0256c000   HECIx64  HECIx64.sys 
fffff800`0256c000 fffff800`02584000   usbehci  usbehci.sys 
fffff800`02584000 fffff800`025f3000   USBPORT  USBPORT.SYS 
fffff800`0263e000 fffff800`02649000   NdisVirtualBus NdisVirtualBus.sys
fffff800`02687000 fffff800`02688600   swenum   swenum.sys  
fffff800`0268e000 fffff800`02eba000   bcmwl63a bcmwl63a.sys
fffff800`02eba000 fffff800`02ec7000   vwifibus vwifibus.sys
fffff800`02ec7000 fffff800`02edd000   AcpiVpc  AcpiVpc.sys 
fffff800`02edd000 fffff800`02ee3380   CmBatt   CmBatt.sys  
fffff800`02ee4000 fffff800`02ef0000   BATTC    BATTC.SYS   
fffff800`02ef0000 fffff800`02f0f000   i8042prt i8042prt.sys
fffff800`02f0f000 fffff800`02f82000   SynTP    SynTP.sys   
fffff800`02f82000 fffff800`02f8e000   USBD     USBD.SYS    
fffff800`02f8e000 fffff800`02f9e000   mouclass mouclass.sys
fffff800`02f9e000 fffff800`02fae000   kbdclass kbdclass.sys
fffff800`02fae000 fffff800`02fb4c00   GEARAspiWDM GEARAspiWDM.sys
fffff800`02fb5000 fffff800`02fd3000   intelppm intelppm.sys
fffff800`02fd3000 fffff800`02fde000   rdpbus   rdpbus.sys  
fffff800`03000000 fffff800`0304b000   mrxsmb10 mrxsmb10.sys
fffff800`03075000 fffff800`030e0000   usbhub   usbhub.sys  
fffff800`030e0000 fffff800`031ca980   vm332avs vm332avs.sys
fffff800`03200000 fffff800`03272000   nwifi    nwifi.sys   
fffff800`03272000 fffff800`03286000   ndisuio  ndisuio.sys 
fffff800`0328a000 fffff800`03420000   CHDRT64  CHDRT64.sys 
fffff800`03420000 fffff800`03467000   portcls  portcls.sys 
fffff800`03467000 fffff800`03483000   drmk     drmk.sys    
fffff800`03483000 fffff800`03488300   ksthunk  ksthunk.sys 
fffff800`03489000 fffff800`034e1000   IntcDAud IntcDAud.sys
fffff800`034e1000 fffff800`034ed000   dump_storport dump_storport.sys
fffff800`034ed000 fffff800`03503000   dump_dumpfve dump_dumpfve.sys
fffff800`03503000 fffff800`0352d000   usbccgp  usbccgp.sys 
fffff800`0352d000 fffff800`0353b000   hidusb   hidusb.sys  
fffff800`0353b000 fffff800`0355a000   HIDCLASS HIDCLASS.SYS
fffff800`0355a000 fffff800`03561f00   HIDPARSE HIDPARSE.SYS
fffff800`03562000 fffff800`03570000   kbdhid   kbdhid.sys  
fffff800`03570000 fffff800`0357d000   mouhid   mouhid.sys  
fffff800`0357d000 fffff800`0358b000   monitor  monitor.sys 
fffff800`0358b000 fffff800`035af000   luafv    luafv.sys   
fffff800`035af000 fffff800`035c3000   lltdio   lltdio.sys  
fffff800`035c3000 fffff800`035db000   rspndr   rspndr.sys  
fffff800`035db000 fffff800`035f8000   Ndu      Ndu.sys     
fffff800`03600000 fffff800`0366c000   mrxsmb   mrxsmb.sys  
fffff800`0366c000 fffff800`0367a000   vwifimp  vwifimp.sys 
fffff800`03694000 fffff800`0378e000   HTTP     HTTP.sys    
fffff800`0378e000 fffff800`037ae000   bowser   bowser.sys  
fffff800`037ae000 fffff800`037c5000   mpsdrv   mpsdrv.sys  
fffff800`037c5000 fffff800`037fe000   mrxsmb20 mrxsmb20.sys
fffff800`03800000 fffff800`038ad000   srv2     srv2.sys    
fffff800`038f0000 fffff800`03999000   peauth   peauth.sys  
fffff800`03999000 fffff800`039a4000   secdrv   secdrv.SYS  
fffff800`039a4000 fffff800`039e7000   srvnet   srvnet.sys  
fffff800`039e7000 fffff800`039f9000   tcpipreg tcpipreg.sys
fffff800`03a54000 fffff800`03aec000   srv      srv.sys     
fffff800`03aec000 fffff800`03afc000   condrv   condrv.sys  
fffff800`03afc000 fffff800`03b1d000   WudfPf   WudfPf.sys  
fffff800`03b1d000 fffff800`03b28000   rdpvideominiport rdpvideominiport.sys
fffff800`03b28000 fffff800`03b5c000   rdpdr    rdpdr.sys   
fffff800`03b5c000 fffff800`03b9a000   WUDFRd   WUDFRd.sys  
fffff800`03b9a000 fffff800`03ba3000   mshidumdf mshidumdf.sys
fffff800`03ba3000 fffff800`03bc4000   WdNisDrv WdNisDrv.sys
fffff801`63456000 fffff801`6345f000   kdcom    kdcom.dll   
fffff801`64217000 fffff801`6499a000   nt       ntkrnlmp.exe
fffff801`6499a000 fffff801`64a09000   hal      hal.dll     
fffff960`000de000 fffff960`004f7000   win32k   win32k.sys  
fffff960`0079d000 fffff960`007a6000   TSDDD    TSDDD.dll   
fffff960`0088a000 fffff960`008c5000   cdd      cdd.dll     
fffff960`00b4c000 fffff960`00bab000   ATMFD    ATMFD.DLL   

Unloaded modules:
fffff800`03a00000 fffff800`03a50000   RtsUVStor.sy
fffff800`01520000 fffff800`0152c000   dump_storpor
fffff800`018ac000 fffff800`01b66000   dump_iaStorA
fffff800`01b66000 fffff800`01b7c000   dump_dumpfve
fffff800`02649000 fffff800`02687000   WUDFRd.sys
fffff800`02600000 fffff800`0263e000   WUDFRd.sys
fffff800`01fde000 fffff800`01fee000   dam.sys 
fffff800`005c0000 fffff800`005cb000   WdBoot.sys
fffff800`00c25000 fffff800`00c31000   hwpolicy.sys

Raw Stack Contents

Dump Header Information

----- 64 bit Kernel Mini Dump Analysis

DUMP_HEADER64:
MajorVersion        0000000f
MinorVersion        00002580
KdSecondaryVersion  00000000
DirectoryTableBase  00000001`22624000
PfnDataBase         fffffa80`00000000
PsLoadedModuleList  fffff801`644de9b0
PsActiveProcessHead fffff801`644c4700
MachineImageType    00008664
NumberProcessors    00000004
BugCheckCode        000000c2
BugCheckParameter1  00000000`00000007
BugCheckParameter2  00000000`00001205
BugCheckParameter3  00000000`00000000
BugCheckParameter4  ffffc000`0103b010
KdDebuggerDataBlock fffff801`644ada30
SecondaryDataState  00000000
ProductType         00000001
SuiteMask           00000110
MiniDumpFields      00000dff 

TRIAGE_DUMP64:
ServicePackBuild      00000000 
SizeOfDump            00019200 
ValidOffset           000191fc 
ContextOffset         00000348 
ExceptionOffset       00000f00 
MmOffset              00002080 
UnloadedDriversOffset 0000a508 
PrcbOffset            000020d0 
ProcessOffset         00007c90 
ThreadOffset          00008348 
CallStackOffset       00008ac0 
SizeOfCallStack       000016e8 
DriverListOffset      0000b000 
DriverCount           00000098 
StringPoolOffset      00010580 
StringPoolSize        00001570 
BrokenDriverOffset    00000000 
TriageOptions         00000041 
TopOfStack            ffffd000`2490f918 
BStoreOffset          00000000 
SizeOfBStore          00000000 
LimitOfBStore         00000000`00000000 
DebuggerDataOffset    0000a1a8 
DebuggerDataSize      00000360 
DataBlocksOffset      00011af0 
DataBlocksCount       0000001d 
  fffff801`644c54e0 - fffff801`644c54ef at offset 00011cc0
  fffff801`64567030 - fffff801`64567033 at offset 00011cd0
  fffff801`645673a8 - fffff801`645673ab at offset 00011cd4
  ffffe000`0163aa88 - ffffe000`0163ca87 at offset 00011cd8
  fffff801`644e5ce0 - fffff801`644e5ce7 at offset 00013cd8
  fffff801`644e5ce8 - fffff801`644e5cef at offset 00013ce0
  fffff801`644bb480 - fffff801`644bb4df at offset 00013ce8
  fffff6fb`7da00000 - fffff6fb`7da00007 at offset 00013d48
  fffff6fb`7dbed000 - fffff6fb`7dbed007 at offset 00013d50
  fffff6e0`000081d8 - fffff6e0`000081df at offset 00013d58
  fffff6fb`70000040 - fffff6fb`70000047 at offset 00013d60
  fffff6fb`7db80000 - fffff6fb`7db80007 at offset 00013d68
  fffff6fb`7dbedc00 - fffff6fb`7dbedc07 at offset 00013d70
  fffff6fb`78000038 - fffff6fb`7800003f at offset 00013d78
  fffff6fb`7dbc0000 - fffff6fb`7dbc0007 at offset 00013d80
  fffff6fb`7dbede00 - fffff6fb`7dbede07 at offset 00013d88
  fffff6fb`7e005908 - fffff6fb`7e00590f at offset 00013d90
  fffff6fb`7dbf0028 - fffff6fb`7dbf002f at offset 00013d98
  fffff6fb`7dbedf80 - fffff6fb`7dbedf87 at offset 00013da0
  fffff6fb`78000008 - fffff6fb`7800000f at offset 00013da8
  fffff6fb`78000100 - fffff6fb`78000107 at offset 00013db0
  fffff801`644de880 - fffff801`644de8a7 at offset 00013db8
  ffffc000`0103b000 - ffffc000`0103bfff at offset 00013de0
  ffffe000`007e34f0 - ffffe000`007e36df at offset 00014de0
  fffff801`64366fa0 - fffff801`6436719f at offset 00014fd0
  ffffe000`00e80000 - ffffe000`00e80fff at offset 000151d0
  fffff801`643671a0 - fffff801`64367fff at offset 000161d0
  ffffe000`0027a000 - ffffe000`0027afff at offset 00017030
  ffffe000`04099000 - ffffe000`04099fff at offset 00018030
  Max offset 19030, 9002 from end of file

Strings

PAGEDU64 
PAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGE 
at\Progr\AppComp 
PAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGE 
PAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGE 
PAGE2  
PAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGE 
PAGEPAGE 
PAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGEPAGE 
GenuineIntel 
svchost.exe 
RtsUVStor.sy 
dump_storpor 
dump_iaStorA 
dump_dumpfve 
WUDFRd.sys 
WUDFRd.sys 
dam.sys 
WdBoot.sys 
hwpolicy.sys 
drLLer 
+ysZZm3 
com 80 
AdNNte 
wsJJys 
ATAVAWH 
ntoskrnl.exe 
hal.dll 
kdcom.dll 
mcupdate.dll 
werkernel.sys 
CLFS.SYS 
tm.sys 
PSHED.dll 
BOOTVID.dll 
CI.dll 
msrpc.sys 
Wdf01000.sys 
WDFLDR.SYS 
acpiex.sys 
WppRecorder.sys 
ACPI.sys 
WMILIB.SYS 
cng.sys 
msisadrv.sys 
pci.sys 
vdrvroot.sys 
pdc.sys 
partmgr.sys 
spaceport.sys 
volmgr.sys 
volmgrx.sys 
mountmgr.sys 
iaStorA.sys 
storport.sys 
EhStorClass.sys 
fltmgr.sys 
fileinfo.sys 
WdFilter.sys 
PxHlpa64.sys 
Ntfs.sys 
ksecdd.sys 
pcw.sys 
Fs_Rec.sys 
ndis.sys 
NETIO.SYS 
ksecpkg.sys 
tcpip.sys 
fwpkclnt.sys 
wfplwfs.sys 
fvevol.sys 
volsnap.sys 
rdyboost.sys 
mup.sys 
LhdX64.sys 
intelpep.sys 
disk.sys 
CLASSPNP.SYS 
crashdmp.sys 
dtsoftbus01.sys 
cdrom.sys 
Null.SYS 
Beep.SYS 
BasicRender.sys 
dxgkrnl.sys 
watchdog.sys 
dxgmms1.sys 
BasicDisplay.sys 
Npfs.SYS 
Msfs.SYS 
tdx.sys 
TDI.SYS 
ws2ifsl.sys 
netbt.sys 
afd.sys 
pacer.sys 
vwififlt.sys 
netbios.sys 
rdbss.sys 
csc.sys 
wanarp.sys 
nsiproxy.sys 
npsvctrig.sys 
mssmbios.sys 
dfsc.sys 
ahcache.sys 
CompositeBus.sys 
kdnic.sys 
umbus.sys 
igdkmd64.sys 
HECIx64.sys 
usbehci.sys 
USBPORT.SYS 
HDAudBus.sys 
L1C63x64.sys 
bcmwl63a.sys 
vwifibus.sys 
AcpiVpc.sys 
CmBatt.sys 
BATTC.SYS 
i8042prt.sys 
SynTP.sys 
USBD.SYS 
mouclass.sys 
kbdclass.sys 
GEARAspiWDM.sys 
intelppm.sys 
NdisVirtualBus.sys 
swenum.sys 
ks.sys 
rdpbus.sys 
usbhub.sys 
CHDRT64.sys 
portcls.sys 
drmk.sys 
ksthunk.sys 
IntcDAud.sys 
dump_storport.sys 
dump_iaStorA.sys 
dump_dumpfve.sys 
usbccgp.sys 
hidusb.sys 
HIDCLASS.SYS 
HIDPARSE.SYS 
win32k.sys 
kbdhid.sys 
mouhid.sys 
vm332avs.sys 
monitor.sys 
TSDDD.dll 
cdd.dll 
ATMFD.DLL 
luafv.sys 
lltdio.sys 
nwifi.sys 
ndisuio.sys 
rspndr.sys 
HTTP.sys 
bowser.sys 
mpsdrv.sys 
mrxsmb.sys 
mrxsmb20.sys 
vwifimp.sys 
mrxsmb10.sys 
Ndu.sys 
peauth.sys 
secdrv.SYS 
srvnet.sys 
tcpipreg.sys 
srv2.sys 
srv.sys 
condrv.sys 
WudfPf.sys 
rdpvideominiport.sys 
rdpdr.sys 
WUDFRd.sys 
mshidumdf.sys 
WdNisDrv.sys 
\Device\HarddiskVolume2\Windows\System32\ntasn1.dll 
\Device\HarddiskVolume2\Windows\System32\ncrypt.dll 
\Device\HarddiskVolume2\Windows\System32\bcrypt.dll 
\Device\HarddiskVolume2\Windows\System32\sspicli.dll 
\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll 
\Device\HarddiskVolume2\Windows\System32\cryptbase.dll 
\Device\HarddiskVolume2\Windows\System32\winsta.dll 
\Device\HarddiskVolume2\Program Files (x86)\MacType\EasyHK64.dll 
\Device\HarddiskVolume2\Windows\System32\profapi.dll 
\Device\HarddiskVolume2\Windows\System32\msasn1.dll 
\Device\HarddiskVolume2\Windows\System32\crypt32.dll 
\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll 
\Device\HarddiskVolume2\Windows\System32\KernelBase.dll 
\Device\HarddiskVolume2\Windows\System32\ole32.dll 
\Device\HarddiskVolume2\Windows\System32\shell32.dll 
\Device\HarddiskVolume2\Windows\System32\msctf.dll 
\Device\HarddiskVolume2\Windows\System32\imagehlp.dll 
\Device\HarddiskVolume2\Windows\System32\msvcrt.dll 
\Device\HarddiskVolume2\Windows\System32\imm32.dll 
\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll 
\Device\HarddiskVolume2\Windows\System32\combase.dll 
\Device\HarddiskVolume2\Windows\System32\clbcatq.dll 
\Device\HarddiskVolume2\Windows\System32\advapi32.dll 
\Device\HarddiskVolume2\Windows\System32\kernel32.dll 
\Device\HarddiskVolume2\Windows\System32\psapi.dll 
\Device\HarddiskVolume2\Windows\System32\user32.dll 
\Device\HarddiskVolume2\Windows\System32\Wldap32.dll 
\Device\HarddiskVolume2\Windows\System32\gdi32.dll 
\Device\HarddiskVolume2\Windows\System32\sechost.dll 
\Device\HarddiskVolume2\Windows\System32\shlwapi.dll 
\Device\HarddiskVolume2\Windows\System32\ntdll.dll 
consent.exe 
consent.exe 1000 406 00000080077BDA20 
\Windows\System32\IDStore.dll 
\Windows\System32\userenv.dll 
\Windows\System32\profapi.dll 
SynTPHelper.exe 
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"  
\Device\HarddiskVolume2\Windows\apppatch\apppatch64\pcamain.sdb 
\Windows\AppCompat\Programs\Amcache.hve 
s_syntp_0dc75047c8b8129f.cdf-ms 
3CC5A47696F165 
54C37EDD16B9651 
MofResource 
HDAudioBus 
PCI\VEN_8086&DEV_1C2D&SUBSYS_397517AA&REV_05\3&11583659&0&D0_ 
PortCls 
PCI\VEN_8086&DEV_1C26&SUBSYS_397517AA&REV_05\3&11583659&0&E8_ 
Capture 
\Device\HarddiskVolume2\Windows\assembly\GAC_64 
H;D$8u 
H;D$8t 
WdiContextL 
tl.003 
WDICON~1.00 
WDICON~1.002 
ffffff 
ffffff 
fffffff 
ffffff 
fffffff 
Dnodr*a 
\Device\HarddiskVolume2\$Extend\$RmMetadata\$TxfLog\$TxfLog 
SeTlb.a 
TRGDDumpBlob 
storport.sys 
Wdf01000 
acpiex 
msisadrv 
vdrvroot 
EhStorClass 
intelpep 
CompositeBus 
HDAudBus 
vwifibus 
intelppm 
NdisVirtualBus 
monitor 
PEAUTH 
 LENOVO 
40CN32WW(V2.18) 
05/11/2012 
LENOVO 
20078                            
Lenovo G470                      
              
HuronRiver_CRB 
IDEAPAD 
LENOVO 
Base Board Product Name 
Base Board Version 
           
                     
Base Board Chassis Location 
Chassis Manufacturer 
Chassis Version 
                      
                  
Chassis SKU 
String1 for Original Equipment Manufacturer 
String2 for Original Equipment Manufacturer 
String3 for Original Equipment Manufacturer 
String4 for Original Equipment Manufacturer 
String5 for Original Equipment Manufacturer 
String1 for Type12 Equipment Manufacturer 
en|US|iso8859-1 
fr|CA|iso8859-1 
ja|JP|unicode 
zh|TW|unicode 
Voltage Probe Description. 
Cooling Device Description. 
OEM_Define0 
OEM_Define1 
OEM_Define2 
            
            
OEM_Define5 
OEM_Define6 
PCIExpressx16 
Compiler Version: VC 9.0 
Hanksville Gbe Lan Connection 
-Virtual Battery 0- 
10/12/2007 
          
CRB Battery 0 
Intel_ASF 
Intel_ASF_001 
ChannelA-DIMM0 
BANK 0 
Kinston 
         
           
99U5428-040.A01LF  
ChannelA-DIMM0 
ChannelA-DIMM1 
BANK 1 
           
ChannelA-DIMM1 
ChannelB-DIMM0 
BANK 2 
Kinston 
         
           
99U5428-040.A01LF  
ChannelB-DIMM0 
ChannelB-DIMM1 
BANK 3 
           
ChannelB-DIMM1 
KHOIHGIUCCHHII 
Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz 
Intel(R) Corporation 
L1 Cache 
L1 Cache 
L2 Cache 
L3 Cache 
Component Information 
Configuration Data 
Identifier 
Intel64 Family 6 Model 42 Stepping 7 
ProcessorNameString 
Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz 
Update Status 
VendorIdentifier 
GenuineIntel 
GenuntelineI 
GenuntelineI 
       Intel(R)        Intel(R)  
Core(TM) i5-2450Core(TM) i5-2450 
M CPU @ 2.50GHz 
M CPU @ 2.50GHz 
LENOVOCB-01    
EINSYDEHR CRB   
INSYDEHR CRB   
7LENOVOCB-01    
INSYDEHR CRB   
LENOVOCB-01    
7LENOVOCB-01    
INSYDEHR CRB   
{INSYDEHR CRB   
INSYDEHR CRB   
{INSYDEHR CRB   
{INSYDEHR CRB

How can I target the source of error?

Free Windows Admin Tool Kit Click here and download it now

October 12th, 2013 8:55pm

Which crashes while accessing the Application compatibility database (Amcache.hve):

               rsp : 0xffffd0002490f918 : 0xfffff801644ac338 : nt!ExDeferredFreePool+0xbb8
               r12 : 0xffffc0000103b010 :  !du "\Windows\AppCompat\Programs\Amcache.hve"
0xffffd0002490f918 : 0xfffff801644ac338 : nt!ExDeferredFreePool+0xbb8
0xffffd0002490f940 : 0xffffc0000103b010 :  !du "\Windows\AppCompat\Programs\Amcache.hve"
0xffffd0002490f9e8 : 0xfffff801645e2859 : nt!IopParseDevice+0xb29
0xffffd0002490fb38 : 0xfffff80000b69abc : fltmgr!FltpPerformPostCallbacks+0x3ec
0xffffd0002490fbe0 : 0xfffff801645e1d30 : nt!IopParseDevice
0xffffd0002490fbe8 : 0xfffff801645de07f : nt!ObpLookupObjectName+0x6ef
0xffffd0002490fcc8 : 0xfffff801645db5a3 : nt!ObpCaptureObjectCreateInformation+0x1c3
0xffffd0002490fd68 : 0xfffff801645dba83 : nt!ObOpenObjectByName+0x1e3
0xffffd0002490fdc8 : 0xfffff80164301599 : nt!FsRtlReleaseEofLock+0x179

Maybe it is corrupted.

October 13th, 2013 2:26am

Thank you very much!

Then what can I do to avoid such errors? Is there something I can do about it?

Free Windows Admin Tool Kit Click here and download it now

October 13th, 2013 4:52am

I have no idea how to avoid it. You can try to replace the file with the default version from the Install.wim:

http://blog.nirsoft.net/2009/09/17/how-to-extract-missing-system-files-from-the-dvd-of-windows-7vista/

October 13th, 2013 12:52pm

Thanks!

Free Windows Admin Tool Kit Click here and download it now

October 14th, 2013 6:23am

This topic is archived. No further replies will be accepted.