PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffff92e08c51ea3c, memory referenced.
Arg2: 0000000000000002, value 0 = read operation, 1 = write operation.
Arg3: fffff803d42fdf05, If non-zero, the instruction address which referenced the bad memory address.
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

KEY_VALUES_STRING: 1


TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  17134.1.amd64fre.rs4_release.180410-1804

SYSTEM_MANUFACTURER:  LENOVO

SYSTEM_PRODUCT_NAME:  80X6

SYSTEM_SKU:  LENOVO_MT_80X6_BU_idea_FM_Lenovo YOGA 720-13IKB

SYSTEM_VERSION:  Lenovo YOGA 720-13IKB

BIOS_VENDOR:  LENOVO

BIOS_VERSION:  1YCN34WW(V1.08)

BIOS_DATE:  07/18/2017

BASEBOARD_MANUFACTURER:  LENOVO

BASEBOARD_PRODUCT:  Lenovo YOGA 720-13IKB

BASEBOARD_VERSION:  SDK0J40709 WIN

DUMP_TYPE:  2

BUGCHECK_P1: ffff92e08c51ea3c

BUGCHECK_P2: 2

BUGCHECK_P3: fffff803d42fdf05

BUGCHECK_P4: 2

READ_ADDRESS: fffff803d4460388: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
 ffff92e08c51ea3c

FAULTING_IP:
nt!ExFreePoolWithTag+2a5
fffff803`d42fdf05 ff411c          inc     dword ptr [rcx+1Ch]

MM_INTERNAL_CODE:  2

CPU_COUNT: 4

CPU_MHZ: a98

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 8e

CPU_STEPPING: 9

CPU_MICROCODE: 6,8e,9,0 (F,M,S,R)  SIG: 70'00000000 (cache) 70'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

PROCESS_NAME:  explorer.exe

CURRENT_IRQL:  0

ANALYSIS_SESSION_HOST:  DESKTOP-VCQ3COU

ANALYSIS_SESSION_TIME:  08-19-2018 22:30:25.0943

ANALYSIS_VERSION: 10.0.17134.12 amd64fre

TRAP_FRAME:  ffff8e0a6cb37420 -- (.trap 0xffff8e0a6cb37420)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000056920 rbx=0000000000000000 rcx=ffff92e08c51ea20
rdx=ffff92808c80d0e8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff803d42fdf05 rsp=ffff8e0a6cb375b0 rbp=0000000000000000
 r8=ffff92808c51e180  r9=ffff92808c800000 r10=0000000000000fff
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
nt!ExFreePoolWithTag+0x2a5:
fffff803`d42fdf05 ff411c          inc     dword ptr [rcx+1Ch] ds:ffff92e0`8c51ea3c=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff803d40852d8 to fffff803d41bbca0

STACK_TEXT:
ffff8e0a`6cb37168 fffff803`d40852d8 : 00000000`00000050 ffff92e0`8c51ea3c 00000000`00000002 ffff8e0a`6cb37420 : nt!KeBugCheckEx
ffff8e0a`6cb37170 fffff803`d407cd88 : 00000000`00000000 00000000`00000002 ffff8000`00000000 ffff8643`2190c860 : nt!MiSystemFault+0xd18
ffff8e0a`6cb372b0 fffff803`d41c93da : ffffa78b`07c56080 00000000`00000000 fffff803`d43f6900 ffffa78b`06e00010 : nt!MmAccessFault+0x1f8
ffff8e0a`6cb37420 fffff803`d42fdf05 : 00000000`00000000 ffffa78b`07c7a230 ffffa7f8`a01e4000 fffff803`d4969f45 : nt!KiPageFault+0x31a
ffff8e0a`6cb375b0 fffff803`d44e1365 : ffffa78b`06e00040 ffffa78b`06e00040 ffffa78b`000003bb ffffa78b`43504c41 : nt!ExFreePoolWithTag+0x2a5
ffff8e0a`6cb37690 fffff803`d44e1178 : ffffa78b`06e00030 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ObpFreeObject+0x195
ffff8e0a`6cb376f0 fffff803`d40271b1 : 00000000`00000000 00000000`00000000 ffffc787`37621040 ffffa78b`06e00070 : nt!ObpRemoveObjectRoutine+0x88
ffff8e0a`6cb37750 fffff803`d44b3350 : ffffc787`37621040 ffffc787`37621010 ffffa78b`07c56300 00000000`1b23f408 : nt!ObfDereferenceObject+0xa1
ffff8e0a`6cb37790 fffff803`d44b0701 : 00000000`00000001 00000000`00000000 00000000`80000000 00000000`fa000000 : nt!AlpcMessageCleanupProcedure+0x30
ffff8e0a`6cb377c0 fffff803`d44b12d5 : ffffffff`ffffffff 00000000`00000000 ffffc787`37621010 ffff8e0a`6cb37850 : nt!AlpcpDestroyBlob+0x35
ffff8e0a`6cb377f0 fffff803`d44b0a19 : 00000000`00000030 ffffa78b`07c83090 00000000`1b23f3e8 00000000`00000000 : nt!AlpcpReceiveMessage+0x715
ffff8e0a`6cb378d0 fffff803`d41cc343 : ffffa78b`07c56080 ffff8e0a`6cb37a80 00000000`1b23f3b8 ffff8e0a`6cb379a8 : nt!NtAlpcSendWaitReceivePort+0xf9
ffff8e0a`6cb37990 00007ffe`dce5afe4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`1b23f398 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`dce5afe4


THREAD_SHA1_HASH_MOD_FUNC:  c892217dc2cdfdd75414538b04b925c36220fda1

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  d9c5135225b29f727c965ebc5c07d563f574ce0e

THREAD_SHA1_HASH_MOD:  fe34192f63d13620a8987d294372ee74d699cfee

FOLLOWUP_IP:
nt!ExFreePoolWithTag+2a5
fffff803`d42fdf05 ff411c          inc     dword ptr [rcx+1Ch]

FAULT_INSTR_CODE:  f1c41ff

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!ExFreePoolWithTag+2a5

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  5b63c7b5

IMAGE_VERSION:  10.0.17134.228

STACK_COMMAND:  .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET:  2a5

FAILURE_BUCKET_ID:  AV_INVALID_nt!ExFreePoolWithTag

BUCKET_ID:  AV_INVALID_nt!ExFreePoolWithTag

PRIMARY_PROBLEM_CLASS:  AV_INVALID_nt!ExFreePoolWithTag

TARGET_TIME:  2018-08-20T03:10:05.000Z

OSBUILD:  17134

OSSERVICEPACK:  228

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  784

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS Personal

OS_LOCALE:

USER_LCID:  0

OSBUILD_TIMESTAMP:  2018-08-02 22:10:45

BUILDDATESTAMP_STR:  180410-1804

BUILDLAB_STR:  rs4_release

BUILDOSVER_STR:  10.0.17134.1.amd64fre.rs4_release.180410-1804

ANALYSIS_SESSION_ELAPSED_TIME:  10c4

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:av_invalid_nt!exfreepoolwithtag

FAILURE_ID_HASH:  {506056e7-3f31-601d-1b8c-f6b37138ff75}