Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Microsoft (R) Windows Debugger Version 10.0.20153.1000 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Loading Dump File [C:\WINDOWS\MEMORY.DMP]
- Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
- ************* Path validation summary **************
- Response Time (ms) Location
- Deferred srv*
- Symbol search path is: srv*
- Executable search path is:
- Windows 10 Kernel Version 18362 MP (20 procs) Free x64
- Product: WinNt, suite: TerminalServer SingleUserTS Personal
- Edition build lab: 18362.1.amd64fre.19h1_release.190318-1202
- Machine Name:
- Kernel base = 0xfffff807`20800000 PsLoadedModuleList = 0xfffff807`20c48190
- Debug session time: Sat Jul 18 17:30:46.184 2020 (UTC - 7:00)
- System Uptime: 0 days 2:20:35.828
- Loading Kernel Symbols
- ...............................................................
- ................................................................
- ................................................................
- ....
- Loading User Symbols
- Loading unloaded module list
- .........
- For analysis of this file, run !analyze -v
- nt!KeBugCheckEx:
- fffff807`209c23c0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffff858d`5160f030=0000000000000109
- 18: kd> !analyze -v
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- CRITICAL_STRUCTURE_CORRUPTION (109)
- This bugcheck is generated when the kernel detects that critical kernel code or
- data have been corrupted. There are generally three causes for a corruption:
- 1) A driver has inadvertently or deliberately modified critical kernel code
- or data. See http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx
- 2) A developer attempted to set a normal kernel breakpoint using a kernel
- debugger that was not attached when the system was booted. Normal breakpoints,
- "bp", can only be set if the debugger is attached at boot time. Hardware
- breakpoints, "ba", can be set at any time.
- 3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
- Arguments:
- Arg1: a39fc6dc3ed02607, Reserved
- Arg2: b3b6d362915121f9, Reserved
- Arg3: fffff80721f02260, Failure type dependent information
- Arg4: 0000000000000001, Type of corrupted region, can be
- 0 : A generic data region
- 1 : Modification of a function or .pdata
- 2 : A processor IDT
- 3 : A processor GDT
- 4 : Type 1 process list corruption
- 5 : Type 2 process list corruption
- 6 : Debug routine modification
- 7 : Critical MSR modification
- 8 : Object type
- 9 : A processor IVT
- a : Modification of a system service function
- b : A generic session data region
- c : Modification of a session function or .pdata
- d : Modification of an import table
- e : Modification of a session import table
- f : Ps Win32 callout modification
- 10 : Debug switch routine modification
- 11 : IRP allocator modification
- 12 : Driver call dispatcher modification
- 13 : IRP completion dispatcher modification
- 14 : IRP deallocator modification
- 15 : A processor control register
- 16 : Critical floating point control register modification
- 17 : Local APIC modification
- 18 : Kernel notification callout modification
- 19 : Loaded module list modification
- 1a : Type 3 process list corruption
- 1b : Type 4 process list corruption
- 1c : Driver object corruption
- 1d : Executive callback object modification
- 1e : Modification of module padding
- 1f : Modification of a protected process
- 20 : A generic data region
- 21 : A page hash mismatch
- 22 : A session page hash mismatch
- 23 : Load config directory modification
- 24 : Inverted function table modification
- 25 : Session configuration modification
- 26 : An extended processor control register
- 27 : Type 1 pool corruption
- 28 : Type 2 pool corruption
- 29 : Type 3 pool corruption
- 2a : Type 4 pool corruption
- 2b : Modification of a function or .pdata
- 2c : Image integrity corruption
- 2d : Processor misconfiguration
- 2e : Type 5 process list corruption
- 2f : Process shadow corruption
- 30 : Retpoline code page corruption
- 101 : General pool corruption
- 102 : Modification of win32k.sys
- Debugging Details:
- ------------------
- KEY_VALUES_STRING: 1
- Key : Analysis.CPU.mSec
- Value: 4046
- Key : Analysis.DebugAnalysisProvider.CPP
- Value: Create: 8007007e on DESKTOP-DE7JLKL
- Key : Analysis.DebugData
- Value: CreateObject
- Key : Analysis.DebugModel
- Value: CreateObject
- Key : Analysis.Elapsed.mSec
- Value: 4048
- Key : Analysis.Memory.CommitPeak.Mb
- Value: 78
- Key : Analysis.System
- Value: CreateObject
- Key : WER.OS.Branch
- Value: 19h1_release
- Key : WER.OS.Timestamp
- Value: 2019-03-18T12:02:00Z
- Key : WER.OS.Version
- Value: 10.0.18362.1
- ADDITIONAL_XML: 1
- OS_BUILD_LAYERS: 1
- BUGCHECK_CODE: 109
- BUGCHECK_P1: a39fc6dc3ed02607
- BUGCHECK_P2: b3b6d362915121f9
- BUGCHECK_P3: fffff80721f02260
- BUGCHECK_P4: 1
- MEMORY_CORRUPTOR: ONE_BIT
- BLACKBOXBSD: 1 (!blackboxbsd)
- BLACKBOXNTFS: 1 (!blackboxntfs)
- BLACKBOXWINLOGON: 1
- PROCESS_NAME: System
- STACK_TEXT:
- ffff858d`5160f028 00000000`00000000 : 00000000`00000109 a39fc6dc`3ed02607 b3b6d362`915121f9 fffff807`21f02260 : nt!KeBugCheckEx
- CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
- fffff8072080100a-fffff8072080100f 6 bytes - nt!SeConvertSecurityDescriptorToStringSecurityDescriptor+fffffffffffffffa
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080109a-fffff8072080109f 6 bytes - nt!SeConvertSecurityDescriptorToStringSecurityDescriptor+8a (+0x90)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720801416-fffff8072080141b 6 bytes - nt!SeConvertSecurityDescriptorToStringSecurityDescriptor+406 (+0x37c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080146a-fffff8072080146f 6 bytes - nt!PspIoRateControlInfoIsAnySet+4e (+0x54)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720801572-fffff80720801577 6 bytes - nt!IoStartIoRateControl+102 (+0x108)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807208016d6-fffff807208016db 6 bytes - nt!IopIoRateStartRateControl+15e (+0x164)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080171a-fffff8072080171f 6 bytes - nt!IoStopIoRateControl+3e (+0x44)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080178a-fffff8072080178f 6 bytes - nt!ApplyRelocations+6a (+0x70)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720801872-fffff80720801877 6 bytes - nt!ExpTimerApcRoutine+e2 (+0xe8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080189a-fffff8072080189f 6 bytes - nt!KeUpdateTotalCyclesCurrentThread+22 (+0x28)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807208018da-fffff807208018df 6 bytes - nt!IoReleaseIoRateControl+3a (+0x40)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080190a-fffff8072080190f 6 bytes - nt!IoUpdateIrpIoAttributionHandle+2a (+0x30)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807208019d2-fffff807208019d7 6 bytes - nt!IoNotifyQuotaState+c2 (+0xc8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720801aa2-fffff80720801aa7 6 bytes - nt!PsIoRateControlOverQuotaNotify+ca (+0xd0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720801aea-fffff80720801aef 6 bytes - nt!MiProcessCommitIntact+42 (+0x48)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720801b7e-fffff80720801b83 6 bytes - nt!SMKM_STORE_MGR<SM_TRAITS>::SmStoreMgrCallback+8e (+0x94)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720801eca-fffff80720801ecf 6 bytes - nt!SMKM_STORE_MGR<SM_TRAITS>::SmFeStoreDelete+346 (+0x34c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720801eea-fffff80720801eef 6 bytes - nt!SMKM_STORE<SM_TRAITS>::SmStWorkerThread+1a (+0x20)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080279e-fffff807208027a3 6 bytes - nt!SMKM_STORE<SM_TRAITS>::SmStWorker+8ae (+0x8b4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720802832-fffff80720802837 6 bytes - nt!SMKM_STORE<SM_TRAITS>::SmStAcquireStoreLockExclusive+8e (+0x94)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080286a-fffff8072080286f 6 bytes - nt!SmSetThreadPagePriority+32 (+0x38)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720802a42-fffff80720802a47 6 bytes - nt!SMKM_STORE<SM_TRAITS>::SmStReadThread+1d2 (+0x1d8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720802b62-fffff80720802b67 6 bytes - nt!ST_STORE<SM_TRAITS>::StAcquireReadContext+11a (+0x120)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720802c12-fffff80720802c17 6 bytes - nt!ST_STORE<SM_TRAITS>::StCleanup+aa (+0xb0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720802e5e-fffff80720802e63 6 bytes - nt!ST_STORE<SM_TRAITS>::StDmCleanup+246 (+0x24c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720802eaa-fffff80720802eaf 6 bytes - nt!NP_CONTEXT::NpCleanup+46 (+0x4c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720802f52-fffff80720802f57 6 bytes - nt!B_TREE<unsigned long,ST_STORE<SM_TRAITS>::_ST_HASH_ENTRY,4096,NP_CONTEXT,ST_STORE<SM_TRAITS>::ST_HASH_ENTRY_COMPARATOR>::BTreeSearchResultDeref+a2 (+0xa8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720802f8a-fffff80720802f8f 6 bytes - nt!B_TREE<_SM_PAGE_KEY,ST_STORE<SM_TRAITS>::_ST_PAGE_ENTRY,4096,NP_CONTEXT,B_TREE_KEY_COMPARATOR<_SM_PAGE_KEY> >::BTreeSearchResultCleanup+32 (+0x38)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720802fe2-fffff80720802fe7 6 bytes - nt!ST_STORE<SM_TRAITS>::StReleaseReadContext+52 (+0x58)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720803026-fffff8072080302b 6 bytes - nt!B_TREE<unsigned long,ST_STORE<SM_TRAITS>::_ST_REGION_ENTRY,4096,NP_CONTEXT,ST_STORE<SM_TRAITS>::ST_REGION_ENTRY_COMPARATOR>::BTreeSearchResultCleanup+3e (+0x44)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807208030ce-fffff807208030d3 6 bytes - nt!B_TREE<unsigned long,ST_STORE<SM_TRAITS>::_ST_REGION_ENTRY,4096,NP_CONTEXT,ST_STORE<SM_TRAITS>::ST_REGION_ENTRY_COMPARATOR>::BTreeSearchResultDeref+a2 (+0xa8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720803176-fffff8072080317b 6 bytes - nt!B_TREE<_SM_PAGE_KEY,ST_STORE<SM_TRAITS>::_ST_PAGE_ENTRY,4096,NP_CONTEXT,B_TREE_KEY_COMPARATOR<_SM_PAGE_KEY> >::BTreeSearchResultDeref+a2 (+0xa8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807208031c6-fffff807208031cb 6 bytes - nt!SmHpChunkHeapCleanup+4a (+0x50)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080323e-fffff80720803243 6 bytes - nt!SmHpChunkHeapProtect+72 (+0x78)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080328e-fffff80720803293 6 bytes - nt!ST_STORE<SM_TRAITS>::StDmInvalidateCurrentRegions+4a (+0x50)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807208033d6-fffff807208033db 6 bytes - nt!ST_STORE<SM_TRAITS>::StDmCurrentRegionSet+142 (+0x148)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080340e-fffff80720803413 6 bytes - nt!ST_STORE<SM_TRAITS>::StDrainReadContextList+32 (+0x38)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080344e-fffff80720803453 6 bytes - nt!StEtaCleanup+3a (+0x40)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080365a-fffff8072080365f 6 bytes - nt!SMKM_STORE<SM_TRAITS>::SmStReleaseStoreLockExclusive+206 (+0x20c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807208036ae-fffff807208036b3 6 bytes - nt!SmFpCleanup+4e (+0x54)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807208038b2-fffff807208038b7 6 bytes - nt!SMKM_STORE<SM_TRAITS>::SmStCleanup+1fe (+0x204)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720803902-fffff80720803907 6 bytes - nt!SmKmStoreHelperCleanup+4a (+0x50)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072080397e-fffff80720803983 6 bytes - nt!SmKmStoreHelperSendCommand+76 (+0x7c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807208039aa-fffff807208039af 6 bytes - nt!SmKmStoreHelperCheckWaitCommand+26 (+0x2c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807208039ca-fffff807208039cf 6 bytes - nt!SmFreeWrapper+1a (+0x20)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720803a16-fffff80720803a1b 6 bytes - nt!SmKmStoreDeleteWhenEmptyWorker+46 (+0x4c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720803bda-fffff80720803bdf 6 bytes - nt!MmInSwapWorkingSet+1be (+0x1c4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720803c9e-fffff80720803ca3 6 bytes - nt!MiProcessWsInSwapSupport+be (+0xc4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720803d22-fffff80720803d27 6 bytes - nt!MiProcessWsInSwapRanges+7e (+0x84)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720803de6-fffff80720803deb 6 bytes - nt!MiReleaseOutSwapReservations+be (+0xc4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
- fffff80720b510fa-fffff80720b510ff 6 bytes - nt!UartpSetAccess <PERF> (nt+0x3510fa)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720b5117a-fffff80720b5117b 2 bytes - nt!KiDivideErrorFaultShadow+7a (+0x80)
- [ 84 00:4c 87 ]
- fffff80720b5117d-fffff80720b5117f 3 bytes - nt!KiDivideErrorFaultShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b511fa-fffff80720b511fb 2 bytes - nt!KiDebugTrapOrFaultShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b511fd-fffff80720b511ff 3 bytes - nt!KiDebugTrapOrFaultShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b5127a-fffff80720b5127b 2 bytes - nt!KiNmiInterruptShadowEnd+5 (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b5127d-fffff80720b5127f 3 bytes - nt!KiNmiInterruptShadowEnd+8 (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b512fa-fffff80720b512fb 2 bytes - nt!KiBreakpointTrapShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b512fd-fffff80720b512ff 3 bytes - nt!KiBreakpointTrapShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b5137a-fffff80720b5137b 2 bytes - nt!KiOverflowTrapShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b5137d-fffff80720b5137f 3 bytes - nt!KiOverflowTrapShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b513fa-fffff80720b513fb 2 bytes - nt!KiBoundFaultShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b513fd-fffff80720b513ff 3 bytes - nt!KiBoundFaultShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b5147a-fffff80720b5147b 2 bytes - nt!KiInvalidOpcodeFaultShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b5147d-fffff80720b5147f 3 bytes - nt!KiInvalidOpcodeFaultShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b514fa-fffff80720b514fb 2 bytes - nt!KiNpxNotAvailableFaultShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b514fd-fffff80720b514ff 3 bytes - nt!KiNpxNotAvailableFaultShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b5157a-fffff80720b5157b 2 bytes - nt!KiDoubleFaultAbortShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b5157d-fffff80720b5157f 3 bytes - nt!KiDoubleFaultAbortShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b515fa-fffff80720b515fb 2 bytes - nt!KiNpxSegmentOverrunAbortShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b515fd-fffff80720b515ff 3 bytes - nt!KiNpxSegmentOverrunAbortShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b5167a-fffff80720b5167f 6 bytes - nt!KiInvalidTssFaultShadow+7a (+0x7d)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b516fa-fffff80720b516ff 6 bytes - nt!KiSegmentNotPresentFaultShadow+7a (+0x80)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5177a-fffff80720b5177f 6 bytes - nt!KiStackFaultShadow+7a (+0x80)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b517fa-fffff80720b517ff 6 bytes - nt!KiGeneralProtectionFaultShadow+7a (+0x80)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5187a-fffff80720b5187f 6 bytes - nt!KiPageFaultShadow+7a (+0x80)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b518fa-fffff80720b518fb 2 bytes - nt!KiFloatingErrorFaultShadow+7a (+0x80)
- [ 84 00:4c 87 ]
- fffff80720b518fd-fffff80720b518ff 3 bytes - nt!KiFloatingErrorFaultShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b5197a-fffff80720b5197f 6 bytes - nt!KiAlignmentFaultShadow+7a (+0x7d)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b519fa-fffff80720b519fb 2 bytes - nt!KiMcheckAbortShadow+7a (+0x80)
- [ 84 00:4c 87 ]
- fffff80720b519fd-fffff80720b519ff 3 bytes - nt!KiMcheckAbortShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b51a7a-fffff80720b51a7b 2 bytes - nt!KxMcheckAlternateReturnShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b51a7d-fffff80720b51a7f 3 bytes - nt!KxMcheckAlternateReturnShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b51afa-fffff80720b51afb 2 bytes - nt!KiXmmExceptionShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b51afd-fffff80720b51aff 3 bytes - nt!KiXmmExceptionShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b51b7a-fffff80720b51b7b 2 bytes - nt!KiVirtualizationExceptionShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b51b7d-fffff80720b51b7f 3 bytes - nt!KiVirtualizationExceptionShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b51bfa-fffff80720b51bff 6 bytes - nt!KiControlProtectionFaultShadow+7a (+0x7d)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b51c7a-fffff80720b51c7b 2 bytes - nt!KiApcInterruptShadow+7a (+0x80)
- [ 84 00:4c 87 ]
- fffff80720b51c7d-fffff80720b51c7f 3 bytes - nt!KiApcInterruptShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b51cfa-fffff80720b51cfb 2 bytes - nt!KiSwInterruptShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b51cfd-fffff80720b51cff 3 bytes - nt!KiSwInterruptShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b51d7a-fffff80720b51d7b 2 bytes - nt!KiRaiseSecurityCheckFailureShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b51d7d-fffff80720b51d7f 3 bytes - nt!KiRaiseSecurityCheckFailureShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b51dfa-fffff80720b51dfb 2 bytes - nt!KiRaiseAssertionShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b51dfd-fffff80720b51dff 3 bytes - nt!KiRaiseAssertionShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b51e7a-fffff80720b51e7b 2 bytes - nt!KiDebugServiceTrapShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b51e7d-fffff80720b51e7f 3 bytes - nt!KiDebugServiceTrapShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b51efa-fffff80720b51efb 2 bytes - nt!KiSystemServiceShadow+7a (+0x7d)
- [ 84 00:4c 87 ]
- fffff80720b51efd-fffff80720b51eff 3 bytes - nt!KiSystemServiceShadow+7d (+0x03)
- [ 00 00 00:98 c3 90 ]
- WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
- fffff80720b5405a-fffff80720b5405b 2 bytes - nt!KiSystemCall64Shadow <PERF> (nt+0x35405a)
- [ 84 00:4c 87 ]
- fffff80720b5405d-fffff80720b5405f 3 bytes - nt!KiSystemCall64Shadow <PERF> (nt+0x35405d) (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b5409a-fffff80720b5409f 6 bytes - nt!_guard_retpoline_icall_handler+3a (+0x3d)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b540ba-fffff80720b540bf 6 bytes - nt!_guard_retpoline_switchtable_jump_rax+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b540da-fffff80720b540df 6 bytes - nt!_guard_retpoline_switchtable_jump_rcx+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b540fa-fffff80720b540ff 6 bytes - nt!_guard_retpoline_switchtable_jump_rdx+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5411a-fffff80720b5411f 6 bytes - nt!_guard_retpoline_switchtable_jump_rbx+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5413a-fffff80720b5413f 6 bytes - nt!_guard_retpoline_switchtable_jump_rsp+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5415a-fffff80720b5415f 6 bytes - nt!_guard_retpoline_switchtable_jump_rbp+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5417a-fffff80720b5417f 6 bytes - nt!_guard_retpoline_switchtable_jump_rsi+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5419a-fffff80720b5419f 6 bytes - nt!_guard_retpoline_switchtable_jump_rdi+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b541ba-fffff80720b541bf 6 bytes - nt!_guard_retpoline_switchtable_jump_r8+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b541da-fffff80720b541df 6 bytes - nt!_guard_retpoline_switchtable_jump_r9+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b541fa-fffff80720b541ff 6 bytes - nt!_guard_retpoline_switchtable_jump_r10+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5421a-fffff80720b5421f 6 bytes - nt!_guard_retpoline_switchtable_jump_r11+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5423a-fffff80720b5423f 6 bytes - nt!_guard_retpoline_switchtable_jump_r12+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5425a-fffff80720b5425f 6 bytes - nt!_guard_retpoline_switchtable_jump_r13+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5427a-fffff80720b5427f 6 bytes - nt!_guard_retpoline_switchtable_jump_r14+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5429a-fffff80720b5429f 6 bytes - nt!_guard_retpoline_switchtable_jump_r15+1a (+0x20)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5439a-fffff80720b5439f 6 bytes - nt!_guard_retpoline_indirect_rax+ba (+0x100)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b544ba-fffff80720b544bb 2 bytes - nt!_guard_retpoline_import_r10+9a (+0x120)
- [ 84 00:4c 87 ]
- fffff80720b544bd-fffff80720b544bf 3 bytes - nt!_guard_retpoline_import_r10+9d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b544fa-fffff80720b544ff 6 bytes - nt!_guard_retpoline_import_r10_do_retpoline+3a (+0x3d)
- [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
- fffff80720b5455a-fffff80720b5455f 6 bytes - nt!_guard_retpoline_import_r10_log_event+5a (+0x60)
- [ cc cc cc 0f 1f 00:4c 87 00 98 c3 90 ]
- fffff80720b545fa-fffff80720b545fb 2 bytes - nt!_guard_retpoline_exit+9a (+0xa0)
- [ 84 00:4c 87 ]
- fffff80720b545fd-fffff80720b545ff 3 bytes - nt!_guard_retpoline_exit+9d (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720b6f00a-fffff80720b6f00f 6 bytes - nt!RtlMinimalBarrier <PERF> (nt+0x36f00a)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720b6f09a-fffff80720b6f09f 6 bytes - nt!ExAllocatePoolWithTag+8a (+0x90)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d70798-fffff80720d7079a 3 bytes - nt!_guard_check_icall_fptr
- [ 50 60 97:40 ae 9c ]
- fffff80720d707a0-fffff80720d707a2 3 bytes - nt!_guard_dispatch_icall_fptr (+0x08)
- [ 70 e6 9b:90 ae 9c ]
- fffff80720d9700a-fffff80720d9700b 2 bytes - nt!SeILSigningPolicy <PERF> (nt+0x59700a)
- [ 84 00:4c 87 ]
- fffff80720d9700d-fffff80720d9700f 3 bytes - nt!SeILSigningPolicy <PERF> (nt+0x59700d) (+0x03)
- [ 00 00 00:98 c3 90 ]
- fffff80720d9729a-fffff80720d9729f 6 bytes - nt!KiSystemStartup+28a (+0x28d)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d972da-fffff80720d972df 6 bytes - nt!KiDetectFpuLeakage+3a (+0x40)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9758a-fffff80720d9758f 6 bytes - nt!KeInitThread+2aa (+0x2b0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9772a-fffff80720d9772f 6 bytes - nt!LZNT1FindMatchStandard+19a (+0x1a0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9781a-fffff80720d9781f 6 bytes - nt!RtlCompressBufferLZNT1+ea (+0xf0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97a8a-fffff80720d97a8f 6 bytes - nt!LZNT1CompressChunk+26a (+0x270)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97aaa-fffff80720d97aaf 6 bytes - nt!RtlCompressWorkSpaceSizeLZNT1+1a (+0x20)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97aea-fffff80720d97aef 6 bytes - nt!PopReleasePolicyLock+3a (+0x40)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97bda-fffff80720d97bdf 6 bytes - nt!EmClientQueryRuleState+ea (+0xf0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97ce2-fffff80720d97ce7 6 bytes - nt!EmClientRuleEvaluate+102 (+0x108)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97d52-fffff80720d97d57 6 bytes - nt!EmpAcquirePagingReference+6a (+0x70)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97dca-fffff80720d97dcf 6 bytes - nt!EmpReleasePagingReference+72 (+0x78)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97e1a-fffff80720d97e1f 6 bytes - nt!PopAcquirePolicyLock+4a (+0x50)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97e2a-fffff80720d97e2f 6 bytes - nt!MmMapUserAddressesToPage+a (+0x10)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97e3a-fffff80720d97e3f 6 bytes - nt!xHalDpReplaceTarget+a (+0x10)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97e4a-fffff80720d97e4f 6 bytes - nt!PopStartMirroring+a (+0x10)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97e5a-fffff80720d97e5f 6 bytes - nt!xHalPciMultiStageResumeCapable+a (+0x10)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d97f22-fffff80720d97f27 6 bytes - nt!PopCompressHiberBlocks+c2 (+0xc8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d98046-fffff80720d9804b 6 bytes - nt!PopAddPagesToCompressedPageSet+11e (+0x124)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d98142-fffff80720d98147 6 bytes - nt!PopCountDataAsProduced+f6 (+0xfc)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d981d2-fffff80720d981d7 6 bytes - nt!ProducerConsumerCopyToContextBuffer+8a (+0x90)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9829a-fffff80720d9829f 6 bytes - nt!ProducerConsumerBufferComplete+c2 (+0xc8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9833e-fffff80720d98343 6 bytes - nt!ProducerGetBuffer+9e (+0xa4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9845a-fffff80720d9845f 6 bytes - nt!PopWriteHiberImage+116 (+0x11c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9847e-fffff80720d98483 6 bytes - nt!PopCompressCallback+1e (+0x24)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d987ba-fffff80720d987bf 6 bytes - nt!PopRequestWrite+336 (+0x33c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9880e-fffff80720d98813 6 bytes - nt!PopGetIoLocation+4e (+0x54)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d988c2-fffff80720d988c7 6 bytes - nt!ConsumerGetBuffer+ae (+0xb4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9890a-fffff80720d9890f 6 bytes - nt!PopHiberCheckForDebugBreak+42 (+0x48)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d98a36-fffff80720d98a3b 6 bytes - nt!PopHiberChecksumHiberFileData+126 (+0x12c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d98afa-fffff80720d98aff 6 bytes - nt!PopCreateDumpMdl+be (+0xc4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d98d3a-fffff80720d98d3f 6 bytes - nt!PopEndMirroring+23a (+0x240)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d98ffa-fffff80720d98fff 6 bytes - nt!PopRestoreHiberContext+2ba (+0x2c0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9940e-fffff80720d99413 6 bytes - nt!PopSaveHiberContext+40e (+0x414)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9992e-fffff80720d99933 6 bytes - nt!PoBroadcastSystemState+51a (+0x520)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d99a0e-fffff80720d99a13 6 bytes - nt!PopDiagTraceDevicesLevel+da (+0xe0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d99b5e-fffff80720d99b63 6 bytes - nt!PopNotifyDevice+14a (+0x150)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9a12a-fffff80720d9a12f 6 bytes - nt!PopInvokeSystemStateHandler+5c6 (+0x5cc)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9a16a-fffff80720d9a16f 6 bytes - nt!PopIssueNextState+3a (+0x40)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9a1ea-fffff80720d9a1ef 6 bytes - nt!PopInvokeStateHandlerTargetProcessor+7a (+0x80)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9a4ee-fffff80720d9a4f3 6 bytes - nt!PopHandleNextState+2fe (+0x304)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9a552-fffff80720d9a557 6 bytes - nt!PopCheckpointSystemSleep+5e (+0x64)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9a566-fffff80720d9a56b 6 bytes - nt!KiRestoreXSaveSupport+e (+0x14)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9b79a-fffff80720d9b79f 6 bytes - nt!PopTransitionSystemPowerStateEx+122e (+0x1234)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9b81e-fffff80720d9b823 6 bytes - nt!PopSetDevicesSystemState+7e (+0x84)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9b962-fffff80720d9b967 6 bytes - nt!PopDecompressHiberBlocks+13e (+0x144)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9ba26-fffff80720d9ba2b 6 bytes - nt!ConsumerPeekAndConsumeBuffer+be (+0xc4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720d9bc6a-fffff80720d9bc6f 6 bytes - nt!PfPowerActionNotify+23e (+0x244)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
- fffff80720db200a-fffff80720db200f 6 bytes - nt!LZNT1Formats <PERF> (nt+0x5b200a)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db237a-fffff80720db237f 6 bytes - nt!LZNT1Formats <PERF> (nt+0x5b237a) (+0x370)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db23aa-fffff80720db23af 6 bytes - nt!PsQueryThreadTerminationPort+2a (+0x30)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db254e-fffff80720db2553 6 bytes - nt!NtLoadKey3+19e (+0x1a4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db265e-fffff80720db2663 6 bytes - nt!CmpCheckExeOwnerForPca+10a (+0x110)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db26b2-fffff80720db26b7 6 bytes - nt!CmpCheckKeyOwnerForPca+4e (+0x54)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db272a-fffff80720db272f 6 bytes - nt!FsRtlpPrepareExtraCreateParametersForCreate+72 (+0x78)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db276e-fffff80720db2773 6 bytes - nt!PipCslStateChangeCallback+3e (+0x44)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db2792-fffff80720db2797 6 bytes - nt!PnpWinlogonExternalDmaNotification+1e (+0x24)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db27c6-fffff80720db27cb 6 bytes - nt!KeInitializeVelocity+2e (+0x34)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db285e-fffff80720db2863 6 bytes - nt!KiTpIsSupportedKernelTracepointLocation+92 (+0x98)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db287e-fffff80720db2883 6 bytes - nt!AlpcpAvailableBufferSize+1a (+0x20)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db297e-fffff80720db2983 6 bytes - nt!AlpcpPortQueryServerSessionInfo+fa (+0x100)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db2b66-fffff80720db2b6b 6 bytes - nt!MiRegQueryDWORD+1e2 (+0x1e8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db2bd2-fffff80720db2bd7 6 bytes - nt!MiAllocateSecureImageActivePatch+66 (+0x6c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db2bfa-fffff80720db2bff 6 bytes - nt!MiCompareHotPatchNodes+22 (+0x28)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db2c92-fffff80720db2c97 6 bytes - nt!MiFillActivePatchesQueryBuffer+92 (+0x98)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db2d3e-fffff80720db2d43 6 bytes - nt!MiInsertSecureImageActivePatch+a6 (+0xac)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db2d6e-fffff80720db2d73 6 bytes - nt!MiIsActiveSystemHotPatch+2a (+0x30)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db360a-fffff80720db360f 6 bytes - nt!MiLogHotPatchRundown+896 (+0x89c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db362e-fffff80720db3633 6 bytes - nt!MiTracingEnabledCallback+1e (+0x24)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db369e-fffff80720db36a3 6 bytes - nt!PopDirectedDripsInitializeStartedDevices+6a (+0x70)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db36e6-fffff80720db36eb 6 bytes - nt!PopDirectedDripsQueryEmPS4DisableSetting+42 (+0x48)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db37a2-fffff80720db37a7 6 bytes - nt!PopDirectedDripsSendSuspendResumeNotification+b6 (+0xbc)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db398a-fffff80720db398f 6 bytes - nt!PpmParkInitSoftCoreParkingSupport+1e2 (+0x1e8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db39aa-fffff80720db39af 6 bytes - nt!SepGetSystemSigningLevel+1a (+0x20)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db3a36-fffff80720db3a3b 6 bytes - nt!SeCreateAccessStateFromSubjectContext+86 (+0x8c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db3b7e-fffff80720db3b83 6 bytes - nt!EtwpApplyContainerFilter+142 (+0x148)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db3c1e-fffff80720db3c23 6 bytes - nt!SiOpenDevice+9a (+0xa0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db3cda-fffff80720db3cdf 6 bytes - nt!AdtpBuildSecurityDescriptorChangeString+b6 (+0xbc)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db3e26-fffff80720db3e2b 6 bytes - nt!AdtpBuildSecurityDescriptorUnicodeString+146 (+0x14c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db41aa-fffff80720db41af 6 bytes - nt!LocalConvertSDToStringSD_Rev1+37e (+0x384)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db42d2-fffff80720db42d7 6 bytes - nt!LocalGetStringForControl+122 (+0x128)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db4416-fffff80720db441b 6 bytes - nt!SddlFilterSacl+13e (+0x144)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db4a96-fffff80720db4a9b 6 bytes - nt!LocalConvertAclToString+67a (+0x680)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db4ab2-fffff80720db4ab7 6 bytes - nt!SddlpFree+16 (+0x1c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db4b62-fffff80720db4b67 6 bytes - nt!LookupAceFlagsInTable+aa (+0xb0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db4bea-fffff80720db4bef 6 bytes - nt!LocalGetAceCondition+82 (+0x88)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db4e2e-fffff80720db4e33 6 bytes - nt!PspSetJobIoRateControl+23e (+0x244)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db4f3a-fffff80720db4f3f 6 bytes - nt!PspIoRateEntryActivate+106 (+0x10c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db4f76-fffff80720db4f7b 6 bytes - nt!PspIoRateEntryDeactivate+36 (+0x3c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db50a2-fffff80720db50a7 6 bytes - nt!WbAddWarbirdEncryptionSegment+126 (+0x12c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db5136-fffff80720db513b 6 bytes - nt!WbAddWarbirdEncryptionSegment+1ba (+0x94)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db5206-fffff80720db520b 6 bytes - nt!WbDecryptEncryptionSegment+ca (+0xd0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db52d6-fffff80720db52db 6 bytes - nt!WbReEncryptEncryptionSegment+ca (+0xd0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db5456-fffff80720db545b 6 bytes - nt!WbReEncryptEncryptionSegment+24a (+0x180)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db558e-fffff80720db5593 6 bytes - nt!WbGetWarbirdEncryptionSegment+132 (+0x138)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db55c2-fffff80720db55c7 6 bytes - nt!WbGetWarbirdEncryptionSegment+166 (+0x34)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db561a-fffff80720db561f 6 bytes - nt!WbGetWarbirdEncryptionSegment+1be (+0x58)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80720db57e2-fffff80720db57e7 6 bytes - nt!WbValidateEncryptionSegmentArguments+1c2 (+0x1c8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
- fffff8072118dada-fffff8072118dadf 6 bytes - nt! ?? ::CIFEBFPJ::`string'+6a
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118dd22-fffff8072118dd27 6 bytes - nt!HdlspAddLogEntry+242 (+0x248)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118de5a-fffff8072118de5f 6 bytes - nt!HdlspBugCheckProcessing+132 (+0x138)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118e4c6-fffff8072118e4cb 6 bytes - nt!HdlspDispatch+666 (+0x66c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118e58e-fffff8072118e593 6 bytes - nt!HdlspEnableTerminal+c2 (+0xc8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118e90e-fffff8072118e913 6 bytes - nt!HdlspGetLine+37a (+0x380)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118eb7a-fffff8072118eb7f 6 bytes - nt!HdlspKernelAddLogEntry+266 (+0x26c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118eece-fffff8072118eed3 6 bytes - nt!HdlspProcessDumpCommand+34e (+0x354)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118ef1e-fffff8072118ef23 6 bytes - nt!HdlspPutData+4a (+0x50)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118efbe-fffff8072118efc3 6 bytes - nt!HdlspPutMore+9a (+0xa0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118f0e6-fffff8072118f0eb 6 bytes - nt!HdlspPutString+122 (+0x128)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118f1aa-fffff8072118f1af 6 bytes - nt!HdlspPutWideString+be (+0xc4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118f24e-fffff8072118f253 6 bytes - nt!HdlspSendBlueScreenInfo+9e (+0xa4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072118f282-fffff8072118f287 6 bytes - nt!HdlspSendStringAtBaud+2e (+0x34)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721190002-fffff80721190007 6 bytes - nt!HdlspSetBlueScreenInformation <PERF> (nt+0x990002)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119001e-fffff80721190023 6 bytes - nt!BgSetFrameBufferAccess+16 (+0x1c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119002e-fffff80721190033 6 bytes - nt!BgGetDisplayContext+a (+0x10)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119007a-fffff8072119007f 6 bytes - nt!BgGetContext+46 (+0x4c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211901ce-fffff807211901d3 6 bytes - nt!ResFwGetContext+14e (+0x154)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721190212-fffff80721190217 6 bytes - nt!BgFreeContext+3e (+0x44)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119033a-fffff8072119033f 6 bytes - nt!ResFwFreeContext+122 (+0x128)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211903da-fffff807211903df 6 bytes - nt!BgpFwReservePoolSwap+9a (+0xa0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119045a-fffff8072119045f 6 bytes - nt!BgkpUnlockBgfxCodeSection+7a (+0x80)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119050e-fffff80721190513 6 bytes - nt!ResFwpPageOutBackground+ae (+0xb4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721190602-fffff80721190607 6 bytes - nt!LogFwReport+ee (+0xf4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119064a-fffff8072119064f 6 bytes - nt!BgDisplayFade+42 (+0x48)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211906de-fffff807211906e3 6 bytes - nt!ResFwConfigureDisplayStringResources+8e (+0x94)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211907c6-fffff807211907cb 6 bytes - nt!AnFwConfigureProgressResources+e2 (+0xe8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211907e6-fffff807211907eb 6 bytes - nt!BgpGxReservePoolRectangleSize+1a (+0x20)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119082a-fffff8072119082f 6 bytes - nt!BgConsoleGetInterface+3e (+0x44)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721190856-fffff8072119085b 6 bytes - nt!BgLibraryInitialize+26 (+0x2c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211908fe-fffff80721190903 6 bytes - nt!BgpGxParseBitmap+a2 (+0xa8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119099e-fffff807211909a3 6 bytes - nt!BgpGxCopyBitmapToRectangle+9a (+0xa0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721190a0e-fffff80721190a13 6 bytes - nt!BgpGxReadRectangle+6a (+0x70)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721190bd2-fffff80721190bd7 6 bytes - nt!GxpReadFrameBufferPixels+1be (+0x1c4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721191172-fffff80721191177 6 bytes - nt!AnFwDisplayFade+59a (+0x5a0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119124e-fffff80721191253 6 bytes - nt!AnFwFadeCompletion+d6 (+0xdc)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721191272-fffff80721191277 6 bytes - nt!BgpGxRectangleDestroy+1e (+0x24)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119144e-fffff80721191453 6 bytes - nt!BgpGxFindSubRectangle+1d6 (+0x1dc)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119147a-fffff8072119147f 6 bytes - nt!BgkQueryBootGraphicsInformation+26 (+0x2c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721191796-fffff8072119179b 6 bytes - nt!AnFwpFadeAnimationTimer+316 (+0x31c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721191902-fffff80721191907 6 bytes - nt!LogFwStat+166 (+0x16c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211919a2-fffff807211919a7 6 bytes - nt!BgpTxtGetRegionContext+9a (+0xa0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721192082-fffff80721192087 6 bytes - nt!BgpFwLibraryInitialize+6da (+0x6e0)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721192266-fffff8072119226b 6 bytes - nt!BgpTxtCreateRegion+1de (+0x1e4)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211922ee-fffff807211922f3 6 bytes - nt!BgpGxRectangleCreate+82 (+0x88)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211923aa-fffff807211923af 6 bytes - nt!BgpFoGetFontHandle+b6 (+0xbc)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211923ee-fffff807211923f3 6 bytes - nt!ResFwBackgroundTransition+3e (+0x44)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119246e-fffff80721192473 6 bytes - nt!ResFwpPageInBackground+7a (+0x80)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119248a-fffff8072119248f 6 bytes - nt!AnFwDisableBackgroundUpdateTimer+16 (+0x1c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721192552-fffff80721192557 6 bytes - nt!AnFwpDisableProgressTimer+c2 (+0xc8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721192596-fffff8072119259b 6 bytes - nt!BgpFwInitializeReservePool+3e (+0x44)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211925ee-fffff807211925f3 6 bytes - nt!RaspClearCache+52 (+0x58)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff807211926ca-fffff807211926cf 6 bytes - nt!LogFwInitialize+d6 (+0xdc)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119275a-fffff8072119275f 6 bytes - nt!BgkpLockBgfxCodeSection+8a (+0x90)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721192e6a-fffff80721192e6f 6 bytes - nt!LogFwpRegisterWorker+70a (+0x710)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721192ea6-fffff80721192eab 6 bytes - nt!BgLibraryDisable+36 (+0x3c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721192ef6-fffff80721192efb 6 bytes - nt!BgpFwLibraryDestroy+4a (+0x50)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721192f52-fffff80721192f57 6 bytes - nt!BgConsoleDestroyInterface+56 (+0x5c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721192f7e-fffff80721192f83 6 bytes - nt!BgpDisplayCharacterDestroyContext+26 (+0x2c)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721193076-fffff8072119307b 6 bytes - nt!BgpFwLibraryDisable+f2 (+0xf8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff80721193152-fffff80721193157 6 bytes - nt!BgpTxtDestroyRegion+d6 (+0xdc)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119321a-fffff8072119321f 6 bytes - nt!BgpFoDestroy+c2 (+0xc8)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- fffff8072119328e-fffff80721193293 6 bytes - nt!FopFreeFontData+6e (+0x74)
- [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
- WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
- 19055 errors : !nt (fffff8072080100a-fffff8072119691f)
- SYMBOL_NAME: cng!McGenControlCallbackV2+0
- MODULE_NAME: cng
- IMAGE_NAME: cng.sys
- STACK_COMMAND: .thread ; .cxr ; kb
- FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
- OS_VERSION: 10.0.18362.1
- BUILDLAB_STR: 19h1_release
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
- Followup: MachineOwner
- ---------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement