Microsoft (R) Windows Debugger Version 6.3.9600.17298 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Bitmap Dump File: Only kernel address space is available
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 9600.17668.amd64fre.winblue_r8.150127-1500
Machine Name:
Kernel base = 0xfffff801`3487d000 PsLoadedModuleList = 0xfffff801`34b56250
Debug session time: Mon Mar 23 16:38:10.644 2015 (UTC - 5:00)
System Uptime: 0 days 4:21:25.349
Loading Kernel Symbols
...............................................................
................................................................
.................................................
Loading User Symbols
Loading unloaded module list
...........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 9F, {3, ffffe001116e8b70, fffff801361c0aa0, ffffe00112d01e10}
*** ERROR: Module load completed but symbols could not be loaded for fwleaf.sys
Probably caused by : ntkrnlmp
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_POWER_STATE_FAILURE (9f)
A driver has failed to complete a power IRP within a specific time.
Arguments:
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: ffffe001116e8b70, Physical Device Object of the stack
Arg3: fffff801361c0aa0, nt!TRIAGE_9F_POWER on Win7 and higher, otherwise the Functional Device Object of the stack
Arg4: ffffe00112d01e10, The blocked IRP
Debugging Details:
------------------
DRVPOWERSTATE_SUBCODE: 3
IMAGE_NAME: ntkrnlmp
DEBUG_FLR_IMAGE_TIMESTAMP: 0
FAULTING_MODULE: fffff800c8a1e000 fwleaf
IRP_ADDRESS: ffffe00112d01e10
DEVICE_OBJECT: ffffe00114347050
DRIVER_OBJECT: ffffe001143ea670
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0x9F
PROCESS_NAME: System
CURRENT_IRQL: 2
ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre
DPC_STACK_BASE: FFFFF801361C7FB0
STACK_TEXT:
fffff801`361c0a68 fffff801`34a85e3e : 00000000`0000009f 00000000`00000003 ffffe001`116e8b70 fffff801`361c0aa0 : nt!KeBugCheckEx
fffff801`361c0a70 fffff801`34a85d5e : ffffe001`17775d50 00000000`00000001 ffffe001`15efe1f0 fffff801`34930515 : nt!PopIrpWatchdogBugcheck+0xde
fffff801`361c0ad0 fffff801`34931428 : 00000000`00000000 fffff801`361c0c20 00000000`00000001 00000000`00000001 : nt!PopIrpWatchdog+0x32
fffff801`361c0b20 fffff801`349d14ea : fffff801`34b80180 fffff801`34b80180 fffff801`34bd9a00 ffffe001`160b4080 : nt!KiRetireDpcList+0x4f8
fffff801`361c0da0 00000000`00000000 : fffff801`361c1000 fffff801`361bb000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x5a
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: ntkrnlmp
IMAGE_VERSION:
FAILURE_BUCKET_ID: 0x9F_3_POWER_DOWN_IMAGE_ntkrnlmp
BUCKET_ID: 0x9F_3_POWER_DOWN_IMAGE_ntkrnlmp
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x9f_3_power_down_image_ntkrnlmp
FAILURE_ID_HASH: {678b3384-34e9-dafc-d401-53951e725571}
Followup: MachineOwner
---------
0: kd> lmvm ntkrnlmp
start end module name