Guest User

Untitled

a guest
Jul 25th, 2020
17
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.91
  4. Time to analyze file(s): 00 hours and 01 minutes and 04 seconds
  5.  
  6. ================================ SYSTEM ================================
  7. MANUFACTURER: Micro-Star International Co., Ltd
  8. PRODUCT_NAME: MS-7C02
  9. VERSION: 1.0
  10.  
  11. ================================= BIOS =================================
  12. VENDOR: American Megatrends Inc.
  13. VERSION: 1.E0
  14. DATE: 06/09/2020
  15.  
  16. ============================= MOTHERBOARD ==============================
  17. MANUFACTURER: Micro-Star International Co., Ltd
  18. PRODUCT: B450 TOMAHAWK (MS-7C02)
  19. VERSION: 1.0
  20.  
  21. ================================= RAM ==================================
  22. Size Speed Manufacturer Part No.
  23. -------------- -------------- ------------------- ----------------------
  24. 3200MHz Unknown Unknown
  25. 8192MB 3200MHz Unknown F4-3200C16-8GVKB
  26. 3200MHz Unknown Unknown
  27. 8192MB 3200MHz Unknown F4-3200C16-8GVKB
  28.  
  29. ================================= CPU ==================================
  30. Processor Version: AMD Ryzen 5 3600 6-Core Processor
  31. COUNT: c
  32. MHZ: 3600
  33. VENDOR: AuthenticAMD
  34. FAMILY: 17
  35. MODEL: 71
  36. STEPPING: 0
  37.  
  38. ================================== OS ==================================
  39. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  40. Built by: 19041.1.amd64fre.vb_release.191206-1406
  41. BUILD_VERSION: 19041.1.amd64fre.vb_release.191206-1406
  42. BUILD: 19041
  43. SERVICEPACK: 0
  44. PLATFORM_TYPE: x64
  45. NAME: Windows 10
  46. EDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
  47. BUILD_TIMESTAMP: unknown_date
  48. BUILDDATESTAMP: 191206-1406
  49. BUILDLAB: vb_release
  50. BUILDOSVER: 10.0.19041.1.amd64fre.vb_release.191206-1406
  51.  
  52. =============================== DEBUGGER ===============================
  53. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  54. Copyright (c) Microsoft Corporation. All rights reserved.
  55.  
  56. =============================== COMMENTS ===============================
  57. * Information gathered from different dump files may be different. If
  58. Windows updates between two dump files, two or more OS versions may
  59. be shown above.
  60. * If the user updates the BIOS between dump files, two or more versions
  61. and dates may be shown above.
  62. * More RAM information can be found below in a full BIOS section.
  63.  
  64. ========================================================================
  65. ======================= Dump #1: ANALYZE VERBOSE =======================
  66. =========================== File: MEMORY.DMP ===========================
  67. ========================================================================
  68.  
  69. Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
  70. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  71. Kernel base = 0xfffff801`3bc00000 PsLoadedModuleList = 0xfffff801`3c82a310
  72. Debug session time: Fri Jul 24 16:33:51.358 2020 (UTC - 4:00)
  73. System Uptime: 0 days 0:14:11.990
  74. ....Page db0cd not present in the dump file. Type ".hh dbgerr004" for details
  75. PEB is paged out (Peb.Ldr = 000000f7`6684a018). Type ".hh dbgerr001" for details
  76.  
  77. BugCheck A, {0, ff, 12, fffff8013be27973}
  78. Page 246250 not present in the dump file. Type ".hh dbgerr004" for details
  79. Page 246250 not present in the dump file. Type ".hh dbgerr004" for details
  80. Page 2422f5 not present in the dump file. Type ".hh dbgerr004" for details
  81. Page 2422f5 not present in the dump file. Type ".hh dbgerr004" for details
  82. Page 247b08 not present in the dump file. Type ".hh dbgerr004" for details
  83. Page 247b08 not present in the dump file. Type ".hh dbgerr004" for details
  84. Page 246081 not present in the dump file. Type ".hh dbgerr004" for details
  85. Page 246081 not present in the dump file. Type ".hh dbgerr004" for details
  86. Page db0cd not present in the dump file. Type ".hh dbgerr004" for details
  87. Page db0cd not present in the dump file. Type ".hh dbgerr004" for details
  88. Probably caused by : memory_corruption
  89. Followup: memory_corruption
  90.  
  91. IRQL_NOT_LESS_OR_EQUAL (a)
  92. An attempt was made to access a pageable (or completely invalid) address at an
  93. interrupt request level (IRQL) that is too high. This is usually
  94. caused by drivers using improper addresses.
  95. If a kernel debugger is available get the stack backtrace.
  96.  
  97. Arguments:
  98. Arg1: 0000000000000000, memory referenced
  99. Arg2: 00000000000000ff, IRQL
  100. Arg3: 0000000000000012, bitfield :
  101. bit 0 : value 0 = read operation, 1 = write operation
  102. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  103. Arg4: fffff8013be27973, address which referenced memory
  104.  
  105. Debugging Details:
  106. DUMP_CLASS: 1
  107. DUMP_QUALIFIER: 401
  108. DUMP_TYPE: 1
  109. READ_ADDRESS: Unable to get offset of nt!_MI_VISIBLE_STATE.SpecialPool
  110. Unable to get value of nt!_MI_VISIBLE_STATE.SessionSpecialPool
  111. *************************************************************************
  112. *** Either you specified an unqualified symbol, or your debugger ***
  113. *** doesn't have full symbol information. Unqualified symbol ***
  114. *** resolution is turned off by default. Please either specify a ***
  115. *** fully qualified symbol module!symbolname, or enable resolution ***
  116. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  117. *** enabling unqualified symbol resolution with network symbol ***
  118. *** server shares in the symbol path may cause the debugger to ***
  119. *** appear to hang for long periods of time when an incorrect ***
  120. *** symbol name is typed or the network symbol server is down. ***
  121. *** For some commands to work properly, your symbol path ***
  122. *** must point to .pdb files that have full type information. ***
  123. *** Certain .pdb files (such as the public OS symbols) do not ***
  124. *** contain the required information. Contact the group that ***
  125. *** provided you with these symbols if you need this command to ***
  126. *** work. ***
  127. *** Type referenced: AssignedRegionNonPagedPool ***
  128. *************************************************************************
  129. Couldn't resolve error at 'AssignedRegionNonPagedPool].BaseAddress'
  130. *************************************************************************
  131. *** Either you specified an unqualified symbol, or your debugger ***
  132. *** doesn't have full symbol information. Unqualified symbol ***
  133. *** resolution is turned off by default. Please either specify a ***
  134. *** fully qualified symbol module!symbolname, or enable resolution ***
  135. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  136. *** enabling unqualified symbol resolution with network symbol ***
  137. *** server shares in the symbol path may cause the debugger to ***
  138. *** appear to hang for long periods of time when an incorrect ***
  139. *** symbol name is typed or the network symbol server is down. ***
  140. *** For some commands to work properly, your symbol path ***
  141. *** must point to .pdb files that have full type information. ***
  142. *** Certain .pdb files (such as the public OS symbols) do not ***
  143. *** contain the required information. Contact the group that ***
  144. *** provided you with these symbols if you need this command to ***
  145. *** work. ***
  146. *** Type referenced: AssignedRegionNonPagedPool ***
  147. *************************************************************************
  148. Couldn't resolve error at 'AssignedRegionNonPagedPool].NumberOfBytes'
  149. *************************************************************************
  150. *** Either you specified an unqualified symbol, or your debugger ***
  151. *** doesn't have full symbol information. Unqualified symbol ***
  152. *** resolution is turned off by default. Please either specify a ***
  153. *** fully qualified symbol module!symbolname, or enable resolution ***
  154. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  155. *** enabling unqualified symbol resolution with network symbol ***
  156. *** server shares in the symbol path may cause the debugger to ***
  157. *** appear to hang for long periods of time when an incorrect ***
  158. *** symbol name is typed or the network symbol server is down. ***
  159. *** For some commands to work properly, your symbol path ***
  160. *** must point to .pdb files that have full type information. ***
  161. *** Certain .pdb files (such as the public OS symbols) do not ***
  162. *** contain the required information. Contact the group that ***
  163. *** provided you with these symbols if you need this command to ***
  164. *** work. ***
  165. *** Type referenced: AssignedRegionPagedPool ***
  166. *************************************************************************
  167. Couldn't resolve error at 'AssignedRegionPagedPool].BaseAddress'
  168. *************************************************************************
  169. *** Either you specified an unqualified symbol, or your debugger ***
  170. *** doesn't have full symbol information. Unqualified symbol ***
  171. *** resolution is turned off by default. Please either specify a ***
  172. *** fully qualified symbol module!symbolname, or enable resolution ***
  173. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  174. *** enabling unqualified symbol resolution with network symbol ***
  175. *** server shares in the symbol path may cause the debugger to ***
  176. *** appear to hang for long periods of time when an incorrect ***
  177. *** symbol name is typed or the network symbol server is down. ***
  178. *** For some commands to work properly, your symbol path ***
  179. *** must point to .pdb files that have full type information. ***
  180. *** Certain .pdb files (such as the public OS symbols) do not ***
  181. *** contain the required information. Contact the group that ***
  182. *** provided you with these symbols if you need this command to ***
  183. *** work. ***
  184. *** Type referenced: AssignedRegionPagedPool ***
  185. *************************************************************************
  186. Couldn't resolve error at 'AssignedRegionPagedPool].NumberOfBytes'
  187. *************************************************************************
  188. *** Either you specified an unqualified symbol, or your debugger ***
  189. *** doesn't have full symbol information. Unqualified symbol ***
  190. *** resolution is turned off by default. Please either specify a ***
  191. *** fully qualified symbol module!symbolname, or enable resolution ***
  192. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  193. *** enabling unqualified symbol resolution with network symbol ***
  194. *** server shares in the symbol path may cause the debugger to ***
  195. *** appear to hang for long periods of time when an incorrect ***
  196. *** symbol name is typed or the network symbol server is down. ***
  197. *** For some commands to work properly, your symbol path ***
  198. *** must point to .pdb files that have full type information. ***
  199. *** Certain .pdb files (such as the public OS symbols) do not ***
  200. *** contain the required information. Contact the group that ***
  201. *** provided you with these symbols if you need this command to ***
  202. *** work. ***
  203. *** Type referenced: AssignedRegionSystemCache ***
  204. *************************************************************************
  205. Couldn't resolve error at 'AssignedRegionSystemCache].BaseAddress'
  206. *************************************************************************
  207. *** Either you specified an unqualified symbol, or your debugger ***
  208. *** doesn't have full symbol information. Unqualified symbol ***
  209. *** resolution is turned off by default. Please either specify a ***
  210. *** fully qualified symbol module!symbolname, or enable resolution ***
  211. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  212. *** enabling unqualified symbol resolution with network symbol ***
  213. *** server shares in the symbol path may cause the debugger to ***
  214. *** appear to hang for long periods of time when an incorrect ***
  215. *** symbol name is typed or the network symbol server is down. ***
  216. *** For some commands to work properly, your symbol path ***
  217. *** must point to .pdb files that have full type information. ***
  218. *** Certain .pdb files (such as the public OS symbols) do not ***
  219. *** contain the required information. Contact the group that ***
  220. *** provided you with these symbols if you need this command to ***
  221. *** work. ***
  222. *** Type referenced: AssignedRegionSystemCache ***
  223. *************************************************************************
  224. Couldn't resolve error at 'AssignedRegionSystemCache].NumberOfBytes'
  225. *************************************************************************
  226. *** Either you specified an unqualified symbol, or your debugger ***
  227. *** doesn't have full symbol information. Unqualified symbol ***
  228. *** resolution is turned off by default. Please either specify a ***
  229. *** fully qualified symbol module!symbolname, or enable resolution ***
  230. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  231. *** enabling unqualified symbol resolution with network symbol ***
  232. *** server shares in the symbol path may cause the debugger to ***
  233. *** appear to hang for long periods of time when an incorrect ***
  234. *** symbol name is typed or the network symbol server is down. ***
  235. *** For some commands to work properly, your symbol path ***
  236. *** must point to .pdb files that have full type information. ***
  237. *** Certain .pdb files (such as the public OS symbols) do not ***
  238. *** contain the required information. Contact the group that ***
  239. *** provided you with these symbols if you need this command to ***
  240. *** work. ***
  241. *** Type referenced: AssignedRegionSpecialPool ***
  242. *************************************************************************
  243. Couldn't resolve error at 'AssignedRegionSpecialPool].BaseAddress'
  244. *************************************************************************
  245. *** Either you specified an unqualified symbol, or your debugger ***
  246. *** doesn't have full symbol information. Unqualified symbol ***
  247. *** resolution is turned off by default. Please either specify a ***
  248. *** fully qualified symbol module!symbolname, or enable resolution ***
  249. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  250. *** enabling unqualified symbol resolution with network symbol ***
  251. *** server shares in the symbol path may cause the debugger to ***
  252. *** appear to hang for long periods of time when an incorrect ***
  253. *** symbol name is typed or the network symbol server is down. ***
  254. *** For some commands to work properly, your symbol path ***
  255. *** must point to .pdb files that have full type information. ***
  256. *** Certain .pdb files (such as the public OS symbols) do not ***
  257. *** contain the required information. Contact the group that ***
  258. *** provided you with these symbols if you need this command to ***
  259. *** work. ***
  260. *** Type referenced: AssignedRegionSpecialPool ***
  261. *************************************************************************
  262. Couldn't resolve error at 'AssignedRegionSpecialPool].NumberOfBytes'
  263. *************************************************************************
  264. *** Either you specified an unqualified symbol, or your debugger ***
  265. *** doesn't have full symbol information. Unqualified symbol ***
  266. *** resolution is turned off by default. Please either specify a ***
  267. *** fully qualified symbol module!symbolname, or enable resolution ***
  268. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  269. *** enabling unqualified symbol resolution with network symbol ***
  270. *** server shares in the symbol path may cause the debugger to ***
  271. *** appear to hang for long periods of time when an incorrect ***
  272. *** symbol name is typed or the network symbol server is down. ***
  273. *** For some commands to work properly, your symbol path ***
  274. *** must point to .pdb files that have full type information. ***
  275. *** Certain .pdb files (such as the public OS symbols) do not ***
  276. *** contain the required information. Contact the group that ***
  277. *** provided you with these symbols if you need this command to ***
  278. *** work. ***
  279. *** Type referenced: AssignedRegionSession ***
  280. *************************************************************************
  281. Couldn't resolve error at 'AssignedRegionSession].BaseAddress'
  282. *************************************************************************
  283. *** Either you specified an unqualified symbol, or your debugger ***
  284. *** doesn't have full symbol information. Unqualified symbol ***
  285. *** resolution is turned off by default. Please either specify a ***
  286. *** fully qualified symbol module!symbolname, or enable resolution ***
  287. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  288. *** enabling unqualified symbol resolution with network symbol ***
  289. *** server shares in the symbol path may cause the debugger to ***
  290. *** appear to hang for long periods of time when an incorrect ***
  291. *** symbol name is typed or the network symbol server is down. ***
  292. *** For some commands to work properly, your symbol path ***
  293. *** must point to .pdb files that have full type information. ***
  294. *** Certain .pdb files (such as the public OS symbols) do not ***
  295. *** contain the required information. Contact the group that ***
  296. *** provided you with these symbols if you need this command to ***
  297. *** work. ***
  298. *** Type referenced: AssignedRegionSession ***
  299. *************************************************************************
  300. Couldn't resolve error at 'AssignedRegionSession].NumberOfBytes'
  301. *************************************************************************
  302. *** Either you specified an unqualified symbol, or your debugger ***
  303. *** doesn't have full symbol information. Unqualified symbol ***
  304. *** resolution is turned off by default. Please either specify a ***
  305. *** fully qualified symbol module!symbolname, or enable resolution ***
  306. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  307. *** enabling unqualified symbol resolution with network symbol ***
  308. *** server shares in the symbol path may cause the debugger to ***
  309. *** appear to hang for long periods of time when an incorrect ***
  310. *** symbol name is typed or the network symbol server is down. ***
  311. *** For some commands to work properly, your symbol path ***
  312. *** must point to .pdb files that have full type information. ***
  313. *** Certain .pdb files (such as the public OS symbols) do not ***
  314. *** contain the required information. Contact the group that ***
  315. *** provided you with these symbols if you need this command to ***
  316. *** work. ***
  317. *** Type referenced: AssignedRegionSystemPtes ***
  318. *************************************************************************
  319. Couldn't resolve error at 'AssignedRegionSystemPtes].BaseAddress'
  320. *************************************************************************
  321. *** Either you specified an unqualified symbol, or your debugger ***
  322. *** doesn't have full symbol information. Unqualified symbol ***
  323. *** resolution is turned off by default. Please either specify a ***
  324. *** fully qualified symbol module!symbolname, or enable resolution ***
  325. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  326. *** enabling unqualified symbol resolution with network symbol ***
  327. *** server shares in the symbol path may cause the debugger to ***
  328. *** appear to hang for long periods of time when an incorrect ***
  329. *** symbol name is typed or the network symbol server is down. ***
  330. *** For some commands to work properly, your symbol path ***
  331. *** must point to .pdb files that have full type information. ***
  332. *** Certain .pdb files (such as the public OS symbols) do not ***
  333. *** contain the required information. Contact the group that ***
  334. *** provided you with these symbols if you need this command to ***
  335. *** work. ***
  336. *** Type referenced: AssignedRegionSystemPtes ***
  337. *************************************************************************
  338. Couldn't resolve error at 'AssignedRegionSystemPtes].NumberOfBytes'
  339. 0000000000000000
  340. CURRENT_IRQL: 2
  341. FAULTING_IP:
  342. nt!KiSwapThread+d3
  343. fffff801`3be27973 c00f84 ror byte ptr [rdi],84h
  344. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  345. BUGCHECK_STR: AV
  346.  
  347. PROCESS_NAME: RuneLite.exe
  348.  
  349. TRAP_FRAME: ffff87004a32c690 -- (.trap 0xffff87004a32c690)
  350. NOTE: The trap frame does not contain all registers.
  351. Some register values may be zeroed or incorrect.
  352. rax=0000000000000006 rbx=0000000000000000 rcx=000000001962ca14
  353. rdx=0000000000000003 rsi=0000000000000000 rdi=0000000000000000
  354. rip=fffff8013be27973 rsp=ffff87004a32c820 rbp=0000000000000001
  355. r8=0000000000000020 r9=ffffb303c79cf918 r10=000000000000e67c
  356. r11=0000000000000003 r12=0000000000000000 r13=0000000000000000
  357. r14=0000000000000000 r15=0000000000000000
  358. iopl=0 nv up di pl nz ac pe nc
  359. nt!KiSwapThread+0xd3:
  360. fffff801`3be27973 c00f84 ror byte ptr [rdi],84h ds:00000000`00000000=??
  361. Resetting default scope
  362. MISALIGNED_IP:
  363. nt!KiSwapThread+d3
  364. fffff801`3be27973 c00f84 ror byte ptr [rdi],84h
  365. LAST_CONTROL_TRANSFER: from fffff8013bfefa29 to fffff8013bfddb60
  366. STACK_TEXT:
  367. ffff8700`4a32c548 fffff801`3bfefa29 : 00000000`0000000a 00000000`00000000 00000000`000000ff 00000000`00000012 : nt!KeBugCheckEx
  368. ffff8700`4a32c550 fffff801`3bfebd29 : ffff8e01`8ff2b180 fffff801`3bfe4d72 000f8067`b4bbbdff ffff8700`00000001 : nt!KiBugCheckDispatch+0x69
  369. ffff8700`4a32c690 fffff801`3be27973 : ffff8e01`00000008 00000000`00000000 ffff8700`00000000 ffffb303`cebf5158 : nt!KiPageFault+0x469
  370. ffff8700`4a32c820 fffff801`3be272cf : 3fffffff`00000005 00000000`0000000b ffff8700`4a32c9e0 00000000`00000000 : nt!KiSwapThread+0xd3
  371. ffff8700`4a32c8d0 fffff801`3be26b73 : ffff8e01`00000000 fffff801`00000000 000f8067`b4bbbd00 ffffb303`c79cf1c0 : nt!KiCommitThreadWait+0x14f
  372. ffff8700`4a32c970 fffff801`3c1fb311 : ffffb303`cf8235e0 00000000`00000006 00000000`00000001 00000000`00000000 : nt!KeWaitForSingleObject+0x233
  373. ffff8700`4a32ca60 fffff801`3c1fb3ba : ffffb303`c79cf080 00000000`00000000 00000000`00000000 000002f0`fcaabd10 : nt!ObWaitForSingleObject+0x91
  374. ffff8700`4a32cac0 fffff801`3bfef478 : 00000000`ec62e201 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtWaitForSingleObject+0x6a
  375. ffff8700`4a32cb00 00007ff9`cd64ae14 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
  376. 000000f7`7286f598 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`cd64ae14
  377. STACK_COMMAND: kb
  378. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  379. fffff8013bd35620-fffff8013bd35622 3 bytes - nt!_guard_check_icall_fptr
  380. [ 00 4f f8:b0 66 fe ]
  381. fffff8013bd35628-fffff8013bd3562a 3 bytes - nt!_guard_dispatch_icall_fptr (+0x08)
  382. [ 30 98 fd:00 67 fe ]
  383. fffff8013be082c8-fffff8013be082c9 2 bytes - nt!MiDeleteCachedKernelStack+3c
  384. [ 80 f6:00 f5 ]
  385. fffff8013be08394-fffff8013be08395 2 bytes - nt!MiDeleteKernelStack+a4 (+0xcc)
  386. [ 80 f6:00 f5 ]
  387. fffff8013be0856c - nt!MiDeleteKernelStack+27c (+0x1d8)
  388. [ fa:fb ]
  389. fffff8013be0b2cc-fffff8013be0b2cd 2 bytes - nt!MiUnlockVa+34 (+0x2d60)
  390. [ 80 f6:00 f5 ]
  391. fffff8013be0b37a - nt!MiUnlockVa+e2 (+0xae)
  392. [ fa:fb ]
  393. fffff8013be0b43c-fffff8013be0b43d 2 bytes - nt!MiUnlockWsle+88 (+0xc2)
  394. [ 80 f6:00 f5 ]
  395. fffff8013be0b4a1 - nt!MiUnlockWsle+ed (+0x65)
  396. [ fa:fb ]
  397. fffff8013be0b4d3-fffff8013be0b4d5 3 bytes - nt!MiUnlockWsle+11f (+0x32)
  398. [ 40 fb f6:80 7a f5 ]
  399. fffff8013be0b5d6 - nt!MiUnlockPageTableCharges+1e (+0x103)
  400. [ fa:fb ]
  401. fffff8013be0b72d - nt!MiUnlockPageTableCharges+175 (+0x157)
  402. [ fa:fb ]
  403. fffff8013be0b874-fffff8013be0b875 2 bytes - nt!MiIsLowestPageTablePage+30 (+0x147)
  404. [ 80 f6:00 f5 ]
  405. fffff8013be0b886-fffff8013be0b887 2 bytes - nt!MiIsLowestPageTablePage+42 (+0x12)
  406. [ ff f6:7f f5 ]
  407. fffff8013be0b944-fffff8013be0b945 2 bytes - nt!MiConvertAndFlushWsleVas+50 (+0xbe)
  408. [ 80 f6:00 f5 ]
  409. fffff8013be0b975-fffff8013be0b977 3 bytes - nt!MiConvertAndFlushWsleVas+81 (+0x31)
  410. [ 40 fb f6:80 7a f5 ]
  411. fffff8013be0b998-fffff8013be0b999 2 bytes - nt!MiConvertAndFlushWsleVas+a4 (+0x23)
  412. [ 80 f6:00 f5 ]
  413. fffff8013be0ba11 - nt!MiConvertAndFlushWsleVas+11d (+0x79)
  414. [ fa:fb ]
  415. fffff8013be0bba7-fffff8013be0bba8 2 bytes - nt!MiGetWsleContents+17 (+0x196)
  416. [ 80 f6:00 f5 ]
  417. fffff8013be0bbb4-fffff8013be0bbb8 5 bytes - nt!MiGetWsleContents+24 (+0x0d)
  418. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  419. fffff8013be0bbda-fffff8013be0bbde 5 bytes - nt!MiGetWsleContents+4a (+0x26)
  420. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  421. fffff8013be0bdb3-fffff8013be0bdb4 2 bytes - nt!NtLockVirtualMemory+183 (+0x1d9)
  422. [ 80 f6:00 f5 ]
  423. fffff8013be0be70-fffff8013be0be72 3 bytes - nt!NtLockVirtualMemory+240 (+0xbd)
  424. [ 40 fb f6:80 7a f5 ]
  425. fffff8013be0bf17 - nt!NtLockVirtualMemory+2e7 (+0xa7)
  426. [ fa:fb ]
  427. fffff8013be0bf9e - nt!NtLockVirtualMemory+36e (+0x87)
  428. [ fa:fb ]
  429. fffff8013be0c0cc-fffff8013be0c0ce 3 bytes - nt!NtLockVirtualMemory+49c (+0x12e)
  430. [ 40 fb f6:80 7a f5 ]
  431. fffff8013be0c153-fffff8013be0c154 2 bytes - nt!NtLockVirtualMemory+523 (+0x87)
  432. [ 80 f6:00 f5 ]
  433. fffff8013be0c4da-fffff8013be0c4db 2 bytes - nt!NtLockVirtualMemory+8aa (+0x387)
  434. [ 80 f6:00 f5 ]
  435. fffff8013be0c564-fffff8013be0c566 3 bytes - nt!NtLockVirtualMemory+934 (+0x8a)
  436. [ 40 fb f6:80 7a f5 ]
  437. fffff8013be0e1c6-fffff8013be0e1c7 2 bytes - nt!MiInitializeWalkBounds+c6 (+0x1c62)
  438. [ 80 f6:00 f5 ]
  439. fffff8013be0e1d7-fffff8013be0e1d8 2 bytes - nt!MiInitializeWalkBounds+d7 (+0x11)
  440. [ 00 f7:80 f5 ]
  441. fffff8013be0e2e8-fffff8013be0e2e9 2 bytes - nt!MiWalkPageTables+38 (+0x111)
  442. [ 80 f6:00 f5 ]
  443. fffff8013be0e308-fffff8013be0e30d 6 bytes - nt!MiWalkPageTables+58 (+0x20)
  444. [ 68 df be 7d fb f6:50 af 5e bd 7a f5 ]
  445. fffff8013be0e33d-fffff8013be0e33e 2 bytes - nt!MiWalkPageTables+8d (+0x35)
  446. [ ff f6:7f f5 ]
  447. fffff8013be0e556-fffff8013be0e55b 6 bytes - nt!MiWalkPageTables+2a6 (+0x219)
  448. [ 68 df be 7d fb f6:50 af 5e bd 7a f5 ]
  449. fffff8013be0e584-fffff8013be0e588 5 bytes - nt!MiWalkPageTables+2d4 (+0x2e)
  450. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  451. fffff8013be0e58e-fffff8013be0e592 5 bytes - nt!MiWalkPageTables+2de (+0x0a)
  452. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  453. fffff8013be0e65d-fffff8013be0e65e 2 bytes - nt!MiWalkPageTables+3ad (+0xcf)
  454. [ 80 f6:00 f5 ]
  455. fffff8013be0e79e - nt!MiLockPageTablePage+5e (+0x141)
  456. [ fa:fb ]
  457. fffff8013be0e8f7 - nt!MiLockPageTablePage+1b7 (+0x159)
  458. [ fa:fb ]
  459. fffff8013be0eab3 - nt!MiLockPageTablePage+373 (+0x1bc)
  460. [ fa:fb ]
  461. fffff8013be0eb1d - nt!MiLockPageTablePage+3dd (+0x6a)
  462. [ fa:fb ]
  463. fffff8013be0ec47-fffff8013be0ec48 2 bytes - nt!MiProbeAndLockPrepare+97 (+0x12a)
  464. [ 80 f6:00 f5 ]
  465. fffff8013be0f1b3-fffff8013be0f1b7 5 bytes - nt!MiProbeAndLockPages+93 (+0x56c)
  466. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  467. fffff8013be0f1bd-fffff8013be0f1c1 5 bytes - nt!MiProbeAndLockPages+9d (+0x0a)
  468. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  469. fffff8013be0f340 - nt!MiProbeAndLockPages+220 (+0x183)
  470. [ fa:fb ]
  471. fffff8013be0f38a-fffff8013be0f38e 5 bytes - nt!MiProbeAndLockPages+26a (+0x4a)
  472. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  473. fffff8013be0f411-fffff8013be0f415 5 bytes - nt!MiProbeAndLockPages+2f1 (+0x87)
  474. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  475. fffff8013be0f423-fffff8013be0f427 5 bytes - nt!MiProbeAndLockPages+303 (+0x12)
  476. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  477. fffff8013be0f501 - nt!MiProbeAndLockPages+3e1 (+0xde)
  478. [ fa:fb ]
  479. fffff8013be0f52d - nt!MiProbeAndLockPages+40d (+0x2c)
  480. [ fa:fb ]
  481. fffff8013be0f55e-fffff8013be0f55f 2 bytes - nt!MiProbeAndLockPages+43e (+0x31)
  482. [ 80 f6:00 f5 ]
  483. WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
  484. fffff8013c1d7deb-fffff8013c1d7def 5 bytes - nt!VrpRegistryCallback+bb
  485. [ ff e2 cc cc cc:e8 f0 d2 44 00 ]
  486. fffff8013c1d8070-fffff8013c1d8074 5 bytes - nt!VrpGetContextsForNotifyInfo+40 (+0x285)
  487. [ ff e1 cc cc cc:e8 4b d0 44 00 ]
  488. fffff8013c1df9aa-fffff8013c1df9ab 2 bytes - nt!ExpWnfGetNameStoreRegistryRoot+142 (+0x793a)
  489. [ 48 ff:4c 8b ]
  490. fffff8013c1df9b1-fffff8013c1df9b4 4 bytes - nt!ExpWnfGetNameStoreRegistryRoot+149 (+0x07)
  491. [ 0f 1f 44 00:e8 6a 5a 44 ]
  492. fffff8013c1e5a23-fffff8013c1e5a27 5 bytes - nt!NtPowerInformation+493 (+0x6072)
  493. [ ff e0 cc cc cc:e8 78 f6 43 00 ]
  494. fffff8013c1eebc0-fffff8013c1eebc4 5 bytes - nt!SeQueryInformationToken+90 (+0x919d)
  495. [ ff e1 cc cc cc:e8 fb 64 43 00 ]
  496. fffff8013c1f6fda - nt!CmpCallCallBacksEx+43a (+0x841a)
  497. [ ff:e8 ]
  498. fffff8013c1f6fdc-fffff8013c1f6fde 3 bytes - nt!CmpCallCallBacksEx+43c (+0x02)
  499. [ cc cc cc:e0 42 00 ]
  500. fffff8013c1f71b1-fffff8013c1f71b5 5 bytes - nt!CmpCallbackFillObjectContext+61 (+0x1d5)
  501. [ ff e1 cc cc cc:e8 0a df 42 00 ]
  502. fffff8013c1fb6d5-fffff8013c1fb6d9 5 bytes - nt!NtQuerySystemInformation+65 (+0x4524)
  503. [ ff e2 cc cc cc:e8 06 9a 42 00 ]
  504. fffff8013c1fb9f9-fffff8013c1fb9fd 5 bytes - nt!ExpQuerySystemInformation+209 (+0x324)
  505. [ ff e1 cc cc cc:e8 c2 96 42 00 ]
  506. fffff8013c1fba3a-fffff8013c1fba3e 5 bytes - nt!ExpQuerySystemInformation+24a (+0x41)
  507. [ ff e1 cc cc cc:e8 81 96 42 00 ]
  508. fffff8013c1fba69-fffff8013c1fba6d 5 bytes - nt!ExpQuerySystemInformation+279 (+0x2f)
  509. [ ff e1 cc cc cc:e8 52 96 42 00 ]
  510. fffff8013c1fd984-fffff8013c1fd988 5 bytes - nt!PfQuerySuperfetchInformation+354 (+0x1f1b)
  511. [ ff e1 cc cc cc:e8 37 77 42 00 ]
  512. fffff8013c1fde83 - nt!PfpPfnPrioRequest+d3 (+0x4ff)
  513. [ fa:fb ]
  514. fffff8013c1fe40b-fffff8013c1fe40f 5 bytes - nt!NtQueryInformationToken+11b (+0x588)
  515. [ ff e1 cc cc cc:e8 b0 6c 42 00 ]
  516. fffff8013c20827a-fffff8013c20827e 5 bytes - nt!NtQueryInformationThread+1aa (+0x9e6f)
  517. [ ff e1 cc cc cc:e8 41 ce 41 00 ]
  518. fffff8013c20a1ac-fffff8013c20a1b0 5 bytes - nt!NtTraceControl+32c (+0x1f32)
  519. [ ff e1 cc cc cc:e8 0f af 41 00 ]
  520. fffff8013c20cda8-fffff8013c20cdac 5 bytes - nt!NtSetInformationThread+138 (+0x2bfc)
  521. [ ff e1 cc cc cc:e8 13 83 41 00 ]
  522. fffff8013c20cf64-fffff8013c20cf68 5 bytes - nt!NtSetInformationThread+2f4 (+0x1bc)
  523. [ ff e1 cc cc cc:e8 57 81 41 00 ]
  524. fffff8013c2124ee-fffff8013c2124ef 2 bytes - nt!IopRetrieveTransactionParameters+3e (+0x558a)
  525. [ 48 ff:4c 8b ]
  526. fffff8013c2124f5-fffff8013c2124f8 4 bytes - nt!IopRetrieveTransactionParameters+45 (+0x07)
  527. [ 0f 1f 44 00:e8 26 2f 41 ]
  528. fffff8013c2162a6-fffff8013c2162aa 5 bytes - nt!RtlpCombineAcls+566 (+0x3db1)
  529. [ ff e1 cc cc cc:e8 15 ee 40 00 ]
  530. fffff8013c2162f7-fffff8013c2162fb 5 bytes - nt!RtlpCombineAcls+5b7 (+0x51)
  531. [ ff e1 cc cc cc:e8 c4 ed 40 00 ]
  532. fffff8013c229f02-fffff8013c229f06 5 bytes - nt!BuildQueryDirectoryIrp+1d2 (+0x13c0b)
  533. [ ff e1 cc cc cc:e8 b9 b1 3f 00 ]
  534. fffff8013c2450e9 - nt!MiAllocateDriverPage+10d (+0x1b1e7)
  535. [ fa:fb ]
  536. fffff8013c24f2e7-fffff8013c24f2eb 5 bytes - nt!NtSetInformationProcess+2b7 (+0xa1fe)
  537. [ ff e2 cc cc cc:e8 f4 5d 3d 00 ]
  538. fffff8013c250235-fffff8013c250239 5 bytes - nt!NtSetInformationProcess+1205 (+0xf4e)
  539. [ ff e1 cc cc cc:e8 86 4e 3d 00 ]
  540. fffff8013c26431e-fffff8013c264322 5 bytes - nt!MmHardFaultBytesRequired+5e (+0x140e9)
  541. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  542. fffff8013c264328-fffff8013c26432c 5 bytes - nt!MmHardFaultBytesRequired+68 (+0x0a)
  543. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  544. fffff8013c264555 - nt!MiRelocateImagePfn+95 (+0x22d)
  545. [ fa:fb ]
  546. fffff8013c264563-fffff8013c264564 2 bytes - nt!MiRelocateImagePfn+a3 (+0x0e)
  547. [ 80 f6:00 f5 ]
  548. fffff8013c26457e-fffff8013c26457f 2 bytes - nt!MiRelocateImagePfn+be (+0x1b)
  549. [ ff f6:7f f5 ]
  550. fffff8013c2645b6-fffff8013c2645b7 2 bytes - nt!MiRelocateImagePfn+f6 (+0x38)
  551. [ 80 f6:00 f5 ]
  552. fffff8013c265390-fffff8013c265394 5 bytes - nt!MiPfPrepareReadList+1f0 (+0xdda)
  553. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  554. fffff8013c26539a-fffff8013c26539e 5 bytes - nt!MiPfPrepareReadList+1fa (+0x0a)
  555. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  556. fffff8013c265561 - nt!MiPfPrepareReadList+3c1 (+0x1c7)
  557. [ fa:fb ]
  558. fffff8013c26565c-fffff8013c265660 5 bytes - nt!MiPfPrepareReadList+4bc (+0xfb)
  559. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  560. fffff8013c265666-fffff8013c26566a 5 bytes - nt!MiPfPrepareReadList+4c6 (+0x0a)
  561. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  562. fffff8013c2663d5-fffff8013c2663d9 5 bytes - nt!MiPfPrepareSequentialReadList+235 (+0xd6f)
  563. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  564. fffff8013c2663eb-fffff8013c2663ef 5 bytes - nt!MiPfPrepareSequentialReadList+24b (+0x16)
  565. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  566. fffff8013c26668a-fffff8013c26668e 5 bytes - nt!MiPfPrepareSequentialReadList+4ea (+0x29f)
  567. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  568. fffff8013c266764 - nt!MiPfPrepareSequentialReadList+5c4 (+0xda)
  569. [ fa:fb ]
  570. fffff8013c26a791-fffff8013c26a795 5 bytes - nt!MmQueryVirtualMemory+9f1 (+0x402d)
  571. [ ff e0 cc cc cc:e8 0a a9 3b 00 ]
  572. fffff8013c26ae5c-fffff8013c26ae60 5 bytes - nt!MiIsRangeFullyCommitted+ac (+0x6cb)
  573. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  574. fffff8013c26ae66-fffff8013c26ae6a 5 bytes - nt!MiIsRangeFullyCommitted+b6 (+0x0a)
  575. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  576. fffff8013c26e5fd-fffff8013c26e601 5 bytes - nt!NtQueryInformationProcess+2ad (+0x3797)
  577. [ ff e0 cc cc cc:e8 9e 6a 3b 00 ]
  578. fffff8013c26f148-fffff8013c26f14c 5 bytes - nt!NtQueryInformationProcess+df8 (+0xb4b)
  579. [ ff e0 cc cc cc:e8 53 5f 3b 00 ]
  580. fffff8013c27d1cc-fffff8013c27d1cd 2 bytes - nt!PiDqQuerySerializeActionQueue+c0 (+0xe084)
  581. [ 48 ff:4c 8b ]
  582. fffff8013c27d1d3-fffff8013c27d1d6 4 bytes - nt!PiDqQuerySerializeActionQueue+c7 (+0x07)
  583. [ 0f 1f 44 00:e8 48 82 3a ]
  584. WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
  585. fffff8013c59fc51-fffff8013c59fc55 5 bytes - nt!PopHandleNextState+71
  586. [ ff e2 cc cc cc:e8 8a 54 08 00 ]
  587. fffff8013c5a0315-fffff8013c5a0316 2 bytes - nt!PopSaveHiberContext+115 (+0x6c4)
  588. [ 48 ff:4c 8b ]
  589. fffff8013c5a031c-fffff8013c5a031f 4 bytes - nt!PopSaveHiberContext+11c (+0x07)
  590. [ 0f 1f 44 00:e8 ff 50 08 ]
  591. fffff8013c5a16e0-fffff8013c5a16e4 5 bytes - nt!MiUpdateUserMappings+18 (+0x13c4)
  592. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  593. fffff8013c5a170f-fffff8013c5a1713 5 bytes - nt!MiUpdateUserMappings+47 (+0x2f)
  594. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  595. fffff8013c5a186e-fffff8013c5a1872 5 bytes - nt!MiConvertHiberPhasePte+1e (+0x15f)
  596. [ d0 be 7d fb f6:a0 5e bd 7a f5 ]
  597. fffff8013c5a187d-fffff8013c5a1881 5 bytes - nt!MiConvertHiberPhasePte+2d (+0x0f)
  598. [ d7 be 7d fb f6:a7 5e bd 7a f5 ]
  599. fffff8013c5a2155-fffff8013c5a2156 2 bytes - nt!HalpMcaResumeProcessorConfig+85 (+0x8d8)
  600. [ 48 ff:4c 8b ]
  601. fffff8013c5a215c-fffff8013c5a215f 4 bytes - nt!HalpMcaResumeProcessorConfig+8c (+0x07)
  602. [ 0f 1f 44 00:e8 bf 32 08 ]
  603. fffff8013c5a645b-fffff8013c5a645c 2 bytes - nt!HalpMcaSetProcessorConfig+93 (+0x42ff)
  604. [ 48 ff:4c 8b ]
  605. fffff8013c5a6462-fffff8013c5a6465 4 bytes - nt!HalpMcaSetProcessorConfig+9a (+0x07)
  606. [ 0f 1f 44 00:e8 b9 ef 07 ]
  607. fffff8013c5ab1b5-fffff8013c5ab1b6 2 bytes - nt!MmInitializeProcessor+49 (+0x4d53)
  608. [ 80 f6:00 f5 ]
  609. fffff8013c5ac9e6-fffff8013c5ac9e7 2 bytes - nt!HalpInitializeMce+ba (+0x1831)
  610. [ 48 ff:4c 8b ]
  611. fffff8013c5ac9ed-fffff8013c5ac9f0 4 bytes - nt!HalpInitializeMce+c1 (+0x07)
  612. [ 0f 1f 44 00:e8 2e 8a 07 ]
  613. fffff8013c5ac9ff-fffff8013c5aca00 2 bytes - nt!HalpInitializeMce+d3 (+0x12)
  614. [ 48 ff:4c 8b ]
  615. fffff8013c5aca06-fffff8013c5aca09 4 bytes - nt!HalpInitializeMce+da (+0x07)
  616. [ 0f 1f 44 00:e8 15 8a 07 ]
  617. fffff8013c5b1993-fffff8013c5b1994 2 bytes - nt!HalpAcpiPostSleep+f7d7 (+0x4f8d)
  618. [ 48 ff:4c 8b ]
  619. fffff8013c5b199a-fffff8013c5b199d 4 bytes - nt!HalpAcpiPostSleep+f7de (+0x07)
  620. [ 0f 1f 44 00:e8 81 3a 07 ]
  621. fffff8013c5b1f08-fffff8013c5b1f09 2 bytes - nt!HaliLocateHiberRanges+f328 (+0x56e)
  622. [ 48 ff:4c 8b ]
  623. fffff8013c5b1f0f-fffff8013c5b1f12 4 bytes - nt!HaliLocateHiberRanges+f32f (+0x07)
  624. [ 0f 1f 44 00:e8 0c 35 07 ]
  625. fffff8013c5b3cc7-fffff8013c5b3cc8 2 bytes - nt!HalpInitializeMce+739b (+0x1db8)
  626. [ 48 ff:4c 8b ]
  627. fffff8013c5b3cce-fffff8013c5b3cd1 4 bytes - nt!HalpInitializeMce+73a2 (+0x07)
  628. [ 0f 1f 44 00:e8 4d 17 07 ]
  629. fffff8013c5b3d41-fffff8013c5b3d42 2 bytes - nt!HalpInitializeMce+7415 (+0x73)
  630. [ 48 ff:4c 8b ]
  631. fffff8013c5b3d48-fffff8013c5b3d4b 4 bytes - nt!HalpInitializeMce+741c (+0x07)
  632. [ 0f 1f 44 00:e8 d3 16 07 ]
  633. fffff8013c5bc39c-fffff8013c5bc39d 2 bytes - nt!KdMarkHiberPhase+34 (+0x8654)
  634. [ 48 ff:4c 8b ]
  635. fffff8013c5bc3a3-fffff8013c5bc3a6 4 bytes - nt!KdMarkHiberPhase+3b (+0x07)
  636. [ 0f 1f 44 00:e8 78 90 06 ]
  637. fffff8013c5bda32 - nt!MiMarkNonPagedHiberPhasePte+a2 (+0x168f)
  638. [ fa:fb ]
  639. fffff8013c5bdb02 - nt!MmMarkHiberPhase+76 (+0xd0)
  640. [ fa:fb ]
  641. fffff8013c5bdb0f - nt!MmMarkHiberPhase+83 (+0x0d)
  642. [ fa:fb ]
  643. fffff8013c5be04f-fffff8013c5be050 2 bytes - nt!MiDeleteEnclavePages+7f (+0x540)
  644. [ 80 f6:00 f5 ]
  645. fffff8013c5be1f7 - nt!MiReturnReservedEnclavePages+27 (+0x1a8)
  646. [ fa:fb ]
  647. fffff8013c5be507-fffff8013c5be508 2 bytes - nt!PopGracefulShutdown+137 (+0x310)
  648. [ 48 ff:4c 8b ]
  649. fffff8013c5be50e-fffff8013c5be511 4 bytes - nt!PopGracefulShutdown+13e (+0x07)
  650. [ 0f 1f 44 00:e8 0d 6f 06 ]
  651. fffff8013c5c3a8d-fffff8013c5c3a8e 2 bytes - nt!KdInitSystem+92d
  652. [ 48 ff:4c 8b ]
  653. fffff8013c5c3a94-fffff8013c5c3a97 4 bytes - nt!KdInitSystem+934 (+0x07)
  654. [ 0f 1f 44 00:e8 87 19 06 ]
  655. fffff8013c5c4a1d-fffff8013c5c4a1e 2 bytes - nt!KdpCloseRemoteFile+ad (+0xf89)
  656. [ 48 ff:4c 8b ]
  657. fffff8013c5c4a24-fffff8013c5c4a27 4 bytes - nt!KdpCloseRemoteFile+b4 (+0x07)
  658. [ 0f 1f 44 00:e8 f7 09 06 ]
  659. fffff8013c5c4a70-fffff8013c5c4a71 2 bytes - nt!KdpCloseRemoteFile+100 (+0x4c)
  660. [ 48 ff:4c 8b ]
  661. fffff8013c5c4a77-fffff8013c5c4a7a 4 bytes - nt!KdpCloseRemoteFile+107 (+0x07)
  662. [ 0f 1f 44 00:e8 a4 09 06 ]
  663. fffff8013c5c4d25-fffff8013c5c4d26 2 bytes - nt!KdpCreateRemoteFile+155 (+0x2ae)
  664. [ 48 ff:4c 8b ]
  665. fffff8013c5c4d2c-fffff8013c5c4d2f 4 bytes - nt!KdpCreateRemoteFile+15c (+0x07)
  666. [ 0f 1f 44 00:e8 ef 06 06 ]
  667. fffff8013c5c4d67-fffff8013c5c4d68 2 bytes - nt!KdpCreateRemoteFile+197 (+0x3b)
  668. [ 48 ff:4c 8b ]
  669. fffff8013c5c4d6e-fffff8013c5c4d71 4 bytes - nt!KdpCreateRemoteFile+19e (+0x07)
  670. [ 0f 1f 44 00:e8 ad 06 06 ]
  671. fffff8013c5c4ee3-fffff8013c5c4ee4 2 bytes - nt!KdpReadRemoteFile+e7 (+0x175)
  672. [ 48 ff:4c 8b ]
  673. fffff8013c5c4eea-fffff8013c5c4eed 4 bytes - nt!KdpReadRemoteFile+ee (+0x07)
  674. [ 0f 1f 44 00:e8 31 05 06 ]
  675. fffff8013c5c4f21-fffff8013c5c4f22 2 bytes - nt!KdpReadRemoteFile+125 (+0x37)
  676. [ 48 ff:4c 8b ]
  677. fffff8013c5c4f28-fffff8013c5c4f2b 4 bytes - nt!KdpReadRemoteFile+12c (+0x07)
  678. [ 0f 1f 44 00:e8 f3 04 06 ]
  679. fffff8013c5c53d7-fffff8013c5c53d8 2 bytes - nt!KdSendTraceData+107 (+0x4af)
  680. [ 48 ff:4c 8b ]
  681. fffff8013c5c53de-fffff8013c5c53e1 4 bytes - nt!KdSendTraceData+10e (+0x07)
  682. [ 0f 1f 44 00:e8 3d 00 06 ]
  683. fffff8013c5c5532-fffff8013c5c5533 2 bytes - nt!KdpFillMemory+102 (+0x154)
  684. [ 48 ff:4c 8b ]
  685. fffff8013c5c5539-fffff8013c5c553c 4 bytes - nt!KdpFillMemory+109 (+0x07)
  686. [ 0f 1f 44 00:e8 e2 fe 05 ]
  687. fffff8013c5c5604-fffff8013c5c5605 2 bytes - nt!KdpGetBusData+a4 (+0xcb)
  688. [ 48 ff:4c 8b ]
  689. fffff8013c5c560b-fffff8013c5c560e 4 bytes - nt!KdpGetBusData+ab (+0x07)
  690. [ 0f 1f 44 00:e8 10 fe 05 ]
  691. fffff8013c5c5796-fffff8013c5c5797 2 bytes - nt!KdpQueryMemory+7a (+0x18b)
  692. [ 48 ff:4c 8b ]
  693. fffff8013c5c579d-fffff8013c5c57a0 4 bytes - nt!KdpQueryMemory+81 (+0x07)
  694. [ 0f 1f 44 00:e8 7e fc 05 ]
  695. fffff8013c5c584d-fffff8013c5c584e 2 bytes - nt!KdpReadControlSpace+99 (+0xb0)
  696. [ 48 ff:4c 8b ]
  697. fffff8013c5c5854-fffff8013c5c5857 4 bytes - nt!KdpReadControlSpace+a0 (+0x07)
  698. [ 0f 1f 44 00:e8 c7 fb 05 ]
  699. fffff8013c5c5997-fffff8013c5c5998 2 bytes - nt!KdpReadPhysicalMemory+127 (+0x143)
  700. [ 48 ff:4c 8b ]
  701. fffff8013c5c599e-fffff8013c5c59a1 4 bytes - nt!KdpReadPhysicalMemory+12e (+0x07)
  702. [ 0f 1f 44 00:e8 7d fa 05 ]
  703. fffff8013c5c5b24-fffff8013c5c5b25 2 bytes - nt!KdpReadVirtualMemory+a0 (+0x186)
  704. [ 48 ff:4c 8b ]
  705. fffff8013c5c5b2b-fffff8013c5c5b2e 4 bytes - nt!KdpReadVirtualMemory+a7 (+0x07)
  706. [ 0f 1f 44 00:e8 f0 f8 05 ]
  707. fffff8013c5c5fe1-fffff8013c5c5fe2 2 bytes - nt!KdpRestoreBreakPointEx+d9 (+0x4b6)
  708. [ 48 ff:4c 8b ]
  709. fffff8013c5c5fe8-fffff8013c5c5feb 4 bytes - nt!KdpRestoreBreakPointEx+e0 (+0x07)
  710. [ 0f 1f 44 00:e8 33 f4 05 ]
  711. fffff8013c5c61f5-fffff8013c5c61f6 2 bytes - nt!KdpSearchMemory+1dd (+0x20d)
  712. [ 48 ff:4c 8b ]
  713. fffff8013c5c61fc - nt!KdpSearchMemory+1e4 (+0x07)
  714. [ 0f:e8 ]
  715. fffff8013c5c61fe-fffff8013c5c61ff 2 bytes - nt!KdpSearchMemory+1e6 (+0x02)
  716. [ 44 00:f2 05 ]
  717. fffff8013c5c6597-fffff8013c5c6598 2 bytes - nt!KdpSendWaitContinue+a3 (+0x399)
  718. [ 48 ff:4c 8b ]
  719. fffff8013c5c659e-fffff8013c5c65a1 4 bytes - nt!KdpSendWaitContinue+aa (+0x07)
  720. [ 0f 1f 44 00:e8 7d ee 05 ]
  721. fffff8013c5c65e1-fffff8013c5c65e2 2 bytes - nt!KdpSendWaitContinue+ed (+0x43)
  722. [ 48 ff:4c 8b ]
  723. fffff8013c5c65e8-fffff8013c5c65eb 4 bytes - nt!KdpSendWaitContinue+f4 (+0x07)
  724. [ 0f 1f 44 00:e8 33 ee 05 ]
  725. fffff8013c5c661d-fffff8013c5c6621 5 bytes - nt!KdpSendWaitContinue+129 (+0x35)
  726. [ ff e1 cc cc cc:e8 9e ea 05 00 ]
  727. fffff8013c5c6b67-fffff8013c5c6b68 2 bytes - nt!KdpSendWaitContinue+673 (+0x54a)
  728. [ 48 ff:4c 8b ]
  729. fffff8013c5c6b6e-fffff8013c5c6b71 4 bytes - nt!KdpSendWaitContinue+67a (+0x07)
  730. [ 0f 1f 44 00:e8 ad e8 05 ]
  731. fffff8013c5c6b86-fffff8013c5c6b87 2 bytes - nt!KdpSendWaitContinue+692 (+0x18)
  732. [ 48 ff:4c 8b ]
  733. fffff8013c5c6b8d-fffff8013c5c6b90 4 bytes - nt!KdpSendWaitContinue+699 (+0x07)
  734. [ 0f 1f 44 00:e8 8e e8 05 ]
  735. fffff8013c5c6d61-fffff8013c5c6d62 2 bytes - nt!KdpSetBusData+71 (+0x1d4)
  736. [ 48 ff:4c 8b ]
  737. fffff8013c5c6d68-fffff8013c5c6d6b 4 bytes - nt!KdpSetBusData+78 (+0x07)
  738. [ 0f 1f 44 00:e8 b3 e6 05 ]
  739. fffff8013c5c6e29-fffff8013c5c6e2a 2 bytes - nt!KdpSetContext+ad (+0xc1)
  740. [ 48 ff:4c 8b ]
  741. fffff8013c5c6e30-fffff8013c5c6e33 4 bytes - nt!KdpSetContext+b4 (+0x07)
  742. [ 0f 1f 44 00:e8 eb e5 05 ]
  743. fffff8013c5c71de-fffff8013c5c71df 2 bytes - nt!KdpWriteBreakPointEx+14e (+0x3ae)
  744. [ 48 ff:4c 8b ]
  745. fffff8013c5c71e5-fffff8013c5c71e8 4 bytes - nt!KdpWriteBreakPointEx+155 (+0x07)
  746. [ 0f 1f 44 00:e8 36 e2 05 ]
  747. fffff8013c5c7213-fffff8013c5c7214 2 bytes - nt!KdpWriteBreakPointEx+183 (+0x2e)
  748. [ 48 ff:4c 8b ]
  749. fffff8013c5c721a-fffff8013c5c721d 4 bytes - nt!KdpWriteBreakPointEx+18a (+0x07)
  750. [ 0f 1f 44 00:e8 01 e2 05 ]
  751. WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
  752. 9104 errors : !nt (fffff8013bd35620-fffff8013c5c89aa)
  753. MODULE_NAME: memory_corruption
  754.  
  755. IMAGE_NAME: memory_corruption
  756.  
  757. FOLLOWUP_NAME: memory_corruption
  758. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  759. MEMORY_CORRUPTOR: LARGE
  760. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  761. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  762. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  763. TARGET_TIME: 2020-07-24T20:33:51.000Z
  764. SUITE_MASK: 784
  765. PRODUCT_TYPE: 1
  766. USER_LCID: 0
  767. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  768. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  769. Followup: memory_corruption
  770.  
  771. ====================== Dump #1: 3RD PARTY DRIVERS ======================
  772.  
  773.  
  774. ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
  775.  
  776. ====================== Dump #1: MICROSOFT DRIVERS ======================
  777.  
  778. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  779.  
  780. ====================== Dump #1: UNLOADED MODULES =======================
  781.  
  782.  
  783. ====================== Dump #1: BIOS INFORMATION =======================
  784.  
  785. [SMBIOS Data Tables v2.8]
  786. [DMI Version - 0]
  787. [2.0 Calling Convention - No]
  788. [Table Size - 2513 bytes]
  789. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  790. Vendor American Megatrends Inc.
  791. BIOS Version 1.E0
  792. BIOS Starting Address Segment f000
  793. BIOS Release Date 06/09/2020
  794. BIOS ROM Size 1000000
  795. BIOS Characteristics
  796. 07: - PCI Supported
  797. 11: - Upgradeable FLASH BIOS
  798. 12: - BIOS Shadowing Supported
  799. 15: - CD-Boot Supported
  800. 16: - Selectable Boot Supported
  801. 17: - BIOS ROM Socketed
  802. 19: - EDD Supported
  803. 23: - 1.2MB Floppy Supported
  804. 24: - 720KB Floppy Supported
  805. 25: - 2.88MB Floppy Supported
  806. 26: - Print Screen Device Supported
  807. 27: - Keyboard Services Supported
  808. 28: - Serial Services Supported
  809. 29: - Printer Services Supported
  810. 32: - BIOS Vendor Reserved
  811. BIOS Characteristic Extensions
  812. 00: - ACPI Supported
  813. 01: - USB Legacy Supported
  814. 08: - BIOS Boot Specification Supported
  815. 10: - Specification Reserved
  816. 11: - Specification Reserved
  817. BIOS Major Revision 5
  818. BIOS Minor Revision 14
  819. EC Firmware Major Revision 255
  820. EC Firmware Minor Revision 255
  821. [System Information (Type 1) - Length 27 - Handle 0001h]
  822. Manufacturer Micro-Star International Co., Ltd
  823. Product Name MS-7C02
  824. Version 1.0
  825. UUID 00000000-0000-0000-0000-000000000000
  826. Wakeup Type Power Switch
  827. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  828. Manufacturer Micro-Star International Co., Ltd
  829. Product B450 TOMAHAWK (MS-7C02)
  830. Version 1.0
  831. Feature Flags 09h
  832. -775833888: - -775833840: - «
  833. ø
  834. Chassis Handle 0003h
  835. Board Type 0ah - Processor/Memory Module
  836. Number of Child Handles 0
  837. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  838. Manufacturer Micro-Star International Co., Ltd
  839. Chassis Type Desktop
  840. Version 1.0
  841. Bootup State Safe
  842. Power Supply State Safe
  843. Thermal State Safe
  844. Security Status None
  845. OEM Defined 0
  846. Height 0U
  847. Number of Power Cords 1
  848. Number of Contained Elements 0
  849. Contained Element Size 3
  850. [OEM Strings (Type 11) - Length 5 - Handle 000bh]
  851. Number of Strings 1
  852. [System Configuration Options (Type 12) - Length 5 - Handle 000ch]
  853. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000eh]
  854. [Physical Memory Array (Type 16) - Length 23 - Handle 000fh]
  855. Location 03h - SystemBoard/Motherboard
  856. Use 03h - System Memory
  857. Memory Error Correction 03h - None
  858. Maximum Capacity 134217728KB
  859. Memory Error Inf Handle 000eh
  860. Number of Memory Devices 4
  861. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0010h]
  862. Starting Address 00000000h
  863. Ending Address 0037ffffh
  864. Memory Array Handle 000fh
  865. Partition Width 02
  866. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0011h]
  867. Starting Address 00400000h
  868. Ending Address 0107ffffh
  869. Memory Array Handle 000fh
  870. Partition Width 02
  871. [Cache Information (Type 7) - Length 19 - Handle 0012h]
  872. Socket Designation L1 - Cache
  873. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  874. Maximum Cache Size 0180h - 384K
  875. Installed Size 0180h - 384K
  876. Supported SRAM Type 0010h - Pipeline-Burst
  877. Current SRAM Type 0010h - Pipeline-Burst
  878. Cache Speed 1ns
  879. Error Correction Type Specification Reserved
  880. System Cache Type Unified
  881. Associativity 8-way Set-Associative
  882. [Cache Information (Type 7) - Length 19 - Handle 0013h]
  883. Socket Designation L2 - Cache
  884. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  885. Maximum Cache Size 0c00h - 3072K
  886. Installed Size 0c00h - 3072K
  887. Supported SRAM Type 0010h - Pipeline-Burst
  888. Current SRAM Type 0010h - Pipeline-Burst
  889. Cache Speed 1ns
  890. Error Correction Type Specification Reserved
  891. System Cache Type Unified
  892. Associativity 8-way Set-Associative
  893. [Cache Information (Type 7) - Length 19 - Handle 0014h]
  894. Socket Designation L3 - Cache
  895. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  896. Maximum Cache Size 8200h - 32768K
  897. Installed Size 8200h - 32768K
  898. Supported SRAM Type 0010h - Pipeline-Burst
  899. Current SRAM Type 0010h - Pipeline-Burst
  900. Cache Speed 1ns
  901. Error Correction Type Specification Reserved
  902. System Cache Type Unified
  903. Associativity 16-way Set-Associative
  904. [Processor Information (Type 4) - Length 48 - Handle 0015h]
  905. Socket Designation AM4
  906. Processor Type Central Processor
  907. Processor Family 6bh - Specification Reserved
  908. Processor Manufacturer Advanced Micro Devices, Inc.
  909. Processor ID 100f8700fffb8b17
  910. Processor Version AMD Ryzen 5 3600 6-Core Processor
  911. Processor Voltage 8bh - 1.1V
  912. External Clock 100MHz
  913. Max Speed 4200MHz
  914. Current Speed 3600MHz
  915. Status Enabled Populated
  916. Processor Upgrade Specification Reserved
  917. L1 Cache Handle 0012h
  918. L2 Cache Handle 0013h
  919. L3 Cache Handle 0014h
  920. Part Number Unknown
  921. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0016h]
  922. [Memory Device (Type 17) - Length 40 - Handle 0017h]
  923. Physical Memory Array Handle 000fh
  924. Memory Error Info Handle 0016h
  925. Form Factor 02h - Unknown
  926. Device Locator DIMM 0
  927. Bank Locator P0 CHANNEL A
  928. Memory Type 02h - Unknown
  929. Type Detail 0004h - Unknown
  930. Speed 3200MHz
  931. Manufacturer Unknown
  932. Part Number Unknown
  933. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0018h]
  934. [Memory Device (Type 17) - Length 40 - Handle 0019h]
  935. Physical Memory Array Handle 000fh
  936. Memory Error Info Handle 0018h
  937. Total Width 64 bits
  938. Data Width 64 bits
  939. Size 8192MB
  940. Form Factor 09h - DIMM
  941. Device Locator DIMM 1
  942. Bank Locator P0 CHANNEL A
  943. Memory Type 1ah - Specification Reserved
  944. Type Detail 4080h - Synchronous
  945. Speed 3200MHz
  946. Manufacturer Unknown
  947. Part Number F4-3200C16-8GVKB
  948. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001ah]
  949. Starting Address 00000000h
  950. Ending Address 00ffffffh
  951. Memory Device Handle 0019h
  952. Mem Array Mapped Adr Handle 0011h
  953. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 001bh]
  954. [Memory Device (Type 17) - Length 40 - Handle 001ch]
  955. Physical Memory Array Handle 000fh
  956. Memory Error Info Handle 001bh
  957. Form Factor 02h - Unknown
  958. Device Locator DIMM 0
  959. Bank Locator P0 CHANNEL B
  960. Memory Type 02h - Unknown
  961. Type Detail 0004h - Unknown
  962. Speed 3200MHz
  963. Manufacturer Unknown
  964. Part Number Unknown
  965. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 001dh]
  966. [Memory Device (Type 17) - Length 40 - Handle 001eh]
  967. Physical Memory Array Handle 000fh
  968. Memory Error Info Handle 001dh
  969. Total Width 64 bits
  970. Data Width 64 bits
  971. Size 8192MB
  972. Form Factor 09h - DIMM
  973. Device Locator DIMM 1
  974. Bank Locator P0 CHANNEL B
  975. Memory Type 1ah - Specification Reserved
  976. Type Detail 4080h - Synchronous
  977. Speed 3200MHz
  978. Manufacturer Unknown
  979. Part Number F4-3200C16-8GVKB
  980. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001fh]
  981. Starting Address 00000000h
  982. Ending Address 00ffffffh
  983. Memory Device Handle 001eh
  984. Mem Array Mapped Adr Handle 0011h
  985.  
  986. ========================== Dump #1: Extra #1 ===========================
  987.  
  988. 2: kd> !verifier
  989. Verify Flags Level 0x00100610
  990. STANDARD FLAGS:
  991. [X] (0x00000000) Automatic Checks
  992. [ ] (0x00000001) Special pool
  993. [ ] (0x00000002) Force IRQL checking
  994. [ ] (0x00000008) Pool tracking
  995. [X] (0x00000010) I/O verification
  996. [ ] (0x00000020) Deadlock detection
  997. [ ] (0x00000080) DMA checking
  998. [ ] (0x00000100) Security checks
  999. [ ] (0x00000800) Miscellaneous checks
  1000. [ ] (0x00020000) DDI compliance checking
  1001. ADDITIONAL FLAGS:
  1002. [ ] (0x00000004) Randomized low resources simulation
  1003. [X] (0x00000200) Force pending I/O requests
  1004. [X] (0x00000400) IRP logging
  1005. [ ] (0x00002000) Invariant MDL checking for stack
  1006. [ ] (0x00004000) Invariant MDL checking for driver
  1007. [ ] (0x00008000) Power framework delay fuzzing
  1008. [ ] (0x00010000) Port/miniport interface checking
  1009. [ ] (0x00040000) Systematic low resources simulation
  1010. [ ] (0x00080000) DDI compliance checking (additional)
  1011. [ ] (0x00200000) NDIS/WIFI verification
  1012. [ ] (0x00800000) Kernel synchronization delay fuzzing
  1013. [ ] (0x01000000) VM switch verification
  1014. [ ] (0x02000000) Code integrity checks
  1015. RESERVED FLAGS (use of these flags is unsupported):
  1016. [X] (0x00100000) Unused or reserved flag
  1017. [X] Indicates flag is enabled
  1018. Summary of All Verifier Statistics
  1019. RaiseIrqls 0x12aff
  1020. AcquireSpinLocks 0xbfdd6
  1021. Synch Executions 0x0
  1022. Trims 0x0
  1023. Pool Allocations Attempted 0x2eba67
  1024. Pool Allocations Succeeded 0x2eba67
  1025. Pool Allocations Succeeded SpecialPool 0x2466
  1026. Pool Allocations With NO TAG 0x25
  1027. Pool Allocations Failed 0x0
  1028. Current paged pool allocations 0x0 for 00000000 bytes
  1029. Peak paged pool allocations 0x0 for 00000000 bytes
  1030. Current nonpaged pool allocations 0x0 for 00000000 bytes
  1031. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  1032.  
  1033. ========================== Dump #1: Extra #2 ===========================
  1034.  
  1035. 2: kd> !thread
  1036. THREAD ffffb303c79cf080 Cid 244c.2b5c Teb: 000000f7668c5000 Win32Thread: 0000000000000000 RUNNING on processor 2
  1037. Not impersonating
  1038. DeviceMap ffffda8e17b77c70
  1039. Owning Process ffffb303ce3df080 Image: RuneLite.exe
  1040. Attached Process N/A Image: N/A
  1041. Wait Start TickCount 54527 Ticks: 0
  1042. Context Switch Count 1302 IdealProcessor: 4
  1043. UserTime 00:00:00.125
  1044. KernelTime 00:00:00.031
  1045. Win32 Start Address 0x00007ff9cb3e1500
  1046. Stack Init ffff87004a32cc90 Current ffff87004a32c6a0
  1047. Base ffff87004a32d000 Limit ffff87004a327000 Call 0000000000000000
  1048. Priority 11 BasePriority 10 PriorityDecrement 0 IoPriority 2 PagePriority 5
  1049. Child-SP RetAddr : Args to Child : Call Site
  1050. ffff8700`4a32c548 fffff801`3bfefa29 : 00000000`0000000a 00000000`00000000 00000000`000000ff 00000000`00000012 : nt!KeBugCheckEx
  1051. ffff8700`4a32c550 fffff801`3bfebd29 : ffff8e01`8ff2b180 fffff801`3bfe4d72 000f8067`b4bbbdff ffff8700`00000001 : nt!KiBugCheckDispatch+0x69
  1052. ffff8700`4a32c690 fffff801`3be27973 : ffff8e01`00000008 00000000`00000000 ffff8700`00000000 ffffb303`cebf5158 : nt!KiPageFault+0x469 (TrapFrame @ ffff8700`4a32c690)
  1053. ffff8700`4a32c820 fffff801`3be272cf : 3fffffff`00000005 00000000`0000000b ffff8700`4a32c9e0 00000000`00000000 : nt!KiSwapThread+0xd3
  1054. ffff8700`4a32c8d0 fffff801`3be26b73 : ffff8e01`00000000 fffff801`00000000 000f8067`b4bbbd00 ffffb303`c79cf1c0 : nt!KiCommitThreadWait+0x14f
  1055. ffff8700`4a32c970 fffff801`3c1fb311 : ffffb303`cf8235e0 00000000`00000006 00000000`00000001 00000000`00000000 : nt!KeWaitForSingleObject+0x233
  1056. ffff8700`4a32ca60 fffff801`3c1fb3ba : ffffb303`c79cf080 00000000`00000000 00000000`00000000 000002f0`fcaabd10 : nt!ObWaitForSingleObject+0x91
  1057. ffff8700`4a32cac0 fffff801`3bfef478 : 00000000`ec62e201 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtWaitForSingleObject+0x6a
  1058. ffff8700`4a32cb00 00007ff9`cd64ae14 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28 (TrapFrame @ ffff8700`4a32cb00)
  1059. 000000f7`7286f598 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`cd64ae14
RAW Paste Data