API tools faq
paste
Advertisement
Guest User

BSOD

a guest
Jul 25th, 2019
130
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.89 KB | None | 0 0
raw download clone embed print report
  1.  
  2. Microsoft (R) Windows Debugger Version 10.0.18914.1001 AMD64
  3. Copyright (c) Microsoft Corporation. All rights reserved.
  4.  
  5.  
  6. Loading Dump File [C:\Users\xxxx\Desktop\072519-51859-01.dmp]
  7. Mini Kernel Dump File: Only registers and stack trace are available
  8.  
  9. Symbol search path is: srv*
  10. Executable search path is:
  11. Windows 10 Kernel Version 17763 MP (8 procs) Free x64
  12. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  13. Built by: 17763.1.amd64fre.rs5_release.180914-1434
  14. Machine Name:
  15. Kernel base = 0xfffff801`6e8a9000 PsLoadedModuleList = 0xfffff801`6ecc4670
  16. Debug session time: Thu Jul 25 17:54:38.114 2019 (UTC - 4:00)
  17. System Uptime: 14 days 1:22:51.902
  18. Loading Kernel Symbols
  19. ...............................................................
  20. ................................................................
  21. ................................................................
  22. ............................
  23. Loading User Symbols
  24. Loading unloaded module list
  25. ..................................................
  26. For analysis of this file, run !analyze -v
  27. nt!KeBugCheckEx:
  28. fffff801`6ea5cf50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff801`717e71c0=000000000000000a
  29. 0: kd> !analyze -v
  30. *******************************************************************************
  31. * *
  32. * Bugcheck Analysis *
  33. * *
  34. *******************************************************************************
  35.  
  36. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  37. An attempt was made to access a pageable (or completely invalid) address at an
  38. interrupt request level (IRQL) that is too high. This is usually
  39. caused by drivers using improper addresses.
  40. If kernel debugger is available get stack backtrace.
  41. Arguments:
  42. Arg1: ffff8901cd7ce002, memory referenced
  43. Arg2: 0000000000000002, IRQL
  44. Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
  45. Arg4: fffff80189f52018, address which referenced memory
  46.  
  47. Debugging Details:
  48. ------------------
  49.  
  50.  
  51. KEY_VALUES_STRING: 1
  52.  
  53. Key : Analysis.CPU.Sec
  54. Value: 18
  55.  
  56. Key : Analysis.Elapsed.Sec
  57. Value: 43
  58.  
  59. Key : Analysis.Memory.CommitPeak.Mb
  60. Value: 71
  61.  
  62.  
  63. PROCESSES_ANALYSIS: 1
  64.  
  65. SERVICE_ANALYSIS: 1
  66.  
  67. STACKHASH_ANALYSIS: 1
  68.  
  69. TIMELINE_ANALYSIS: 1
  70.  
  71.  
  72. DUMP_CLASS: 1
  73.  
  74. DUMP_QUALIFIER: 400
  75.  
  76. BUILD_VERSION_STRING: 17763.1.amd64fre.rs5_release.180914-1434
  77.  
  78. DUMP_TYPE: 2
  79.  
  80. BUGCHECK_P1: ffff8901cd7ce002
  81.  
  82. BUGCHECK_P2: 2
  83.  
  84. BUGCHECK_P3: 0
  85.  
  86. BUGCHECK_P4: fffff80189f52018
  87.  
  88. READ_ADDRESS: GetUlongFromAddress: unable to read from fffff8016ed70440
  89. fffff8016edeb390: Unable to get MiVisibleState
  90. Unable to get NonPagedPoolStart
  91. Unable to get NonPagedPoolEnd
  92. Unable to get PagedPoolStart
  93. Unable to get PagedPoolEnd
  94. ffff8901cd7ce002
  95.  
  96. CURRENT_IRQL: 2
  97.  
  98. FAULTING_IP:
  99. Qcamain10x64+f2018
  100. fffff801`89f52018 0fb64602 movzx eax,byte ptr [rsi+2]
  101.  
  102. CPU_COUNT: 8
  103.  
  104. CPU_MHZ: d50
  105.  
  106. CPU_VENDOR: GenuineIntel
  107.  
  108. CPU_FAMILY: 6
  109.  
  110. CPU_MODEL: 5e
  111.  
  112. CPU_STEPPING: 3
  113.  
  114. CUSTOMER_CRASH_COUNT: 1
  115.  
  116. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  117.  
  118. BUGCHECK_STR: AV
  119.  
  120. PROCESS_NAME: steamwebhelper.exe
  121.  
  122. ANALYSIS_SESSION_HOST: DESKTOP-G54RMMH
  123.  
  124. ANALYSIS_SESSION_TIME: 07-25-2019 18:23:45.0024
  125.  
  126. ANALYSIS_VERSION: 10.0.18914.1001 amd64fre
  127.  
  128. DPC_STACK_BASE: FFFFF801717E7FB0
  129.  
  130. TRAP_FRAME: fffff801717e7300 -- (.trap 0xfffff801717e7300)
  131. NOTE: The trap frame does not contain all registers.
  132. Some register values may be zeroed or incorrect.
  133. rax=00000000305a5eab rbx=0000000000000000 rcx=00000000e259b6c0
  134. rdx=00000000000026be rsi=0000000000000000 rdi=0000000000000000
  135. rip=fffff80189f52018 rsp=fffff801717e7490 rbp=fffff801717e74d0
  136. r8=0000000000000004 r9=0000000000ff00ff r10=000000000000fffc
  137. r11=fffff801717e74be r12=0000000000000000 r13=0000000000000000
  138. r14=0000000000000000 r15=0000000000000000
  139. iopl=0 nv up ei pl nz na po nc
  140. Qcamain10x64+0xf2018:
  141. fffff801`89f52018 0fb64602 movzx eax,byte ptr [rsi+2] ds:00000000`00000002=??
  142. Resetting default scope
  143.  
  144. LAST_CONTROL_TRANSFER: from fffff8016ea6e7e9 to fffff8016ea5cf50
  145.  
  146. STACK_TEXT:
  147. fffff801`717e71b8 fffff801`6ea6e7e9 : 00000000`0000000a ffff8901`cd7ce002 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
  148. fffff801`717e71c0 fffff801`6ea6abd4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  149. fffff801`717e7300 fffff801`89f52018 : fffff801`717e75b8 00000000`00000008 ffffaba1`0f20b0e8 ffffca80`0d7c0ad0 : nt!KiPageFault+0x454
  150. fffff801`717e7490 fffff801`717e75b8 : 00000000`00000008 ffffaba1`0f20b0e8 ffffca80`0d7c0ad0 ffffca80`10370018 : Qcamain10x64+0xf2018
  151. fffff801`717e7498 00000000`00000008 : ffffaba1`0f20b0e8 ffffca80`0d7c0ad0 ffffca80`10370018 c0c28bd8`b49ab841 : 0xfffff801`717e75b8
  152. fffff801`717e74a0 ffffaba1`0f20b0e8 : ffffca80`0d7c0ad0 ffffca80`10370018 c0c28bd8`b49ab841 00000000`c0c23ab0 : 0x8
  153. fffff801`717e74a8 ffffca80`0d7c0ad0 : ffffca80`10370018 c0c28bd8`b49ab841 00000000`c0c23ab0 ffffaba1`0f20b618 : 0xffffaba1`0f20b0e8
  154. fffff801`717e74b0 ffffca80`10370018 : c0c28bd8`b49ab841 00000000`c0c23ab0 ffffaba1`0f20b618 ffffca80`10376310 : 0xffffca80`0d7c0ad0
  155. fffff801`717e74b8 c0c28bd8`b49ab841 : 00000000`c0c23ab0 ffffaba1`0f20b618 ffffca80`10376310 00000000`00000000 : 0xffffca80`10370018
  156. fffff801`717e74c0 00000000`c0c23ab0 : ffffaba1`0f20b618 ffffca80`10376310 00000000`00000000 ffffca80`0cc0ee80 : 0xc0c28bd8`b49ab841
  157. fffff801`717e74c8 ffffaba1`0f20b618 : ffffca80`10376310 00000000`00000000 ffffca80`0cc0ee80 00000000`00000018 : 0xc0c23ab0
  158. fffff801`717e74d0 ffffca80`10376310 : 00000000`00000000 ffffca80`0cc0ee80 00000000`00000018 ffffca80`12f04cd0 : 0xffffaba1`0f20b618
  159. fffff801`717e74d8 00000000`00000000 : ffffca80`0cc0ee80 00000000`00000018 ffffca80`12f04cd0 fffff801`89f529ed : 0xffffca80`10376310
  160.  
  161.  
  162. THREAD_SHA1_HASH_MOD_FUNC: f9984675d98b35b052cf87489b7e7e32f901817c
  163.  
  164. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 9b0432f1a96ae4a32b0426bd9034801d927cc957
  165.  
  166. THREAD_SHA1_HASH_MOD: 7472fd63d5f67a2537c280bf0c0b27a13092ea6c
  167.  
  168. FOLLOWUP_IP:
  169. Qcamain10x64+f2018
  170. fffff801`89f52018 0fb64602 movzx eax,byte ptr [rsi+2]
  171.  
  172. FAULT_INSTR_CODE: 246b60f
  173.  
  174. SYMBOL_STACK_INDEX: 3
  175.  
  176. SYMBOL_NAME: Qcamain10x64+f2018
  177.  
  178. FOLLOWUP_NAME: MachineOwner
  179.  
  180. MODULE_NAME: Qcamain10x64
  181.  
  182. IMAGE_NAME: Qcamain10x64.sys
  183.  
  184. DEBUG_FLR_IMAGE_TIMESTAMP: 5b30610c
  185.  
  186. STACK_COMMAND: .thread ; .cxr ; kb
  187.  
  188. BUCKET_ID_FUNC_OFFSET: f2018
  189.  
  190. FAILURE_BUCKET_ID: AV_Qcamain10x64!unknown_function
  191.  
  192. BUCKET_ID: AV_Qcamain10x64!unknown_function
  193.  
  194. PRIMARY_PROBLEM_CLASS: AV_Qcamain10x64!unknown_function
  195.  
  196. TARGET_TIME: 2019-07-25T21:54:38.000Z
  197.  
  198. OSBUILD: 17763
  199.  
  200. OSSERVICEPACK: 615
  201.  
  202. SERVICEPACK_NUMBER: 0
  203.  
  204. OS_REVISION: 0
  205.  
  206. SUITE_MASK: 784
  207.  
  208. PRODUCT_TYPE: 1
  209.  
  210. OSPLATFORM_TYPE: x64
  211.  
  212. OSNAME: Windows 10
  213.  
  214. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
  215.  
  216. OS_LOCALE:
  217.  
  218. USER_LCID: 0
  219.  
  220. OSBUILD_TIMESTAMP: 2020-05-15 12:13:35
  221.  
  222. BUILDDATESTAMP_STR: 180914-1434
  223.  
  224. BUILDLAB_STR: rs5_release
  225.  
  226. BUILDOSVER_STR: 10.0.17763.1.amd64fre.rs5_release.180914-1434
  227.  
  228. ANALYSIS_SESSION_ELAPSED_TIME: a7fb
  229.  
  230. ANALYSIS_SOURCE: KM
  231.  
  232. FAILURE_ID_HASH_STRING: km:av_qcamain10x64!unknown_function
  233.  
  234. FAILURE_ID_HASH: {f52cafb4-1320-aedf-2a5d-ab5464b9e487}
  235.  
  236. Followup: MachineOwner
  237. ---------
  238.  
  239. 0: kd> lmvm Qcamain10x64
  240. Browse full module list
  241. start end module name
  242. fffff801`89e60000 fffff801`8a0e8000 Qcamain10x64 T (no symbols)
  243. Loaded symbol image file: Qcamain10x64.sys
  244. Image path: \SystemRoot\System32\drivers\Qcamain10x64.sys
  245. Image name: Qcamain10x64.sys
  246. Browse all global symbols functions data
  247. Timestamp: Sun Jun 24 20:27:08 2018 (5B30610C)
  248. CheckSum: 00244958
  249. ImageSize: 00288000
  250. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  251. Information from resource tables:
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!