Microsoft (R) Windows Debugger Version 10.0.20153.1000 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\WINDOWS\MEMORY.DMP] Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available. ************* Path validation summary ************** Response Time (ms) Location Deferred srv* Symbol search path is: srv* Executable search path is: Windows 10 Kernel Version 18362 MP (20 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Personal Edition build lab: 18362.1.amd64fre.19h1_release.190318-1202 Machine Name: Kernel base = 0xfffff807`20800000 PsLoadedModuleList = 0xfffff807`20c48190 Debug session time: Sat Jul 18 17:30:46.184 2020 (UTC - 7:00) System Uptime: 0 days 2:20:35.828 Loading Kernel Symbols ............................................................... ................................................................ ................................................................ .... Loading User Symbols Loading unloaded module list ......... For analysis of this file, run !analyze -v nt!KeBugCheckEx: fffff807`209c23c0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffff858d`5160f030=0000000000000109 18: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* CRITICAL_STRUCTURE_CORRUPTION (109) This bugcheck is generated when the kernel detects that critical kernel code or data have been corrupted. There are generally three causes for a corruption: 1) A driver has inadvertently or deliberately modified critical kernel code or data. See http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx 2) A developer attempted to set a normal kernel breakpoint using a kernel debugger that was not attached when the system was booted. Normal breakpoints, "bp", can only be set if the debugger is attached at boot time. Hardware breakpoints, "ba", can be set at any time. 3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data. Arguments: Arg1: a39fc6dc3ed02607, Reserved Arg2: b3b6d362915121f9, Reserved Arg3: fffff80721f02260, Failure type dependent information Arg4: 0000000000000001, Type of corrupted region, can be 0 : A generic data region 1 : Modification of a function or .pdata 2 : A processor IDT 3 : A processor GDT 4 : Type 1 process list corruption 5 : Type 2 process list corruption 6 : Debug routine modification 7 : Critical MSR modification 8 : Object type 9 : A processor IVT a : Modification of a system service function b : A generic session data region c : Modification of a session function or .pdata d : Modification of an import table e : Modification of a session import table f : Ps Win32 callout modification 10 : Debug switch routine modification 11 : IRP allocator modification 12 : Driver call dispatcher modification 13 : IRP completion dispatcher modification 14 : IRP deallocator modification 15 : A processor control register 16 : Critical floating point control register modification 17 : Local APIC modification 18 : Kernel notification callout modification 19 : Loaded module list modification 1a : Type 3 process list corruption 1b : Type 4 process list corruption 1c : Driver object corruption 1d : Executive callback object modification 1e : Modification of module padding 1f : Modification of a protected process 20 : A generic data region 21 : A page hash mismatch 22 : A session page hash mismatch 23 : Load config directory modification 24 : Inverted function table modification 25 : Session configuration modification 26 : An extended processor control register 27 : Type 1 pool corruption 28 : Type 2 pool corruption 29 : Type 3 pool corruption 2a : Type 4 pool corruption 2b : Modification of a function or .pdata 2c : Image integrity corruption 2d : Processor misconfiguration 2e : Type 5 process list corruption 2f : Process shadow corruption 30 : Retpoline code page corruption 101 : General pool corruption 102 : Modification of win32k.sys Debugging Details: ------------------ KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 4046 Key : Analysis.DebugAnalysisProvider.CPP Value: Create: 8007007e on DESKTOP-DE7JLKL Key : Analysis.DebugData Value: CreateObject Key : Analysis.DebugModel Value: CreateObject Key : Analysis.Elapsed.mSec Value: 4048 Key : Analysis.Memory.CommitPeak.Mb Value: 78 Key : Analysis.System Value: CreateObject Key : WER.OS.Branch Value: 19h1_release Key : WER.OS.Timestamp Value: 2019-03-18T12:02:00Z Key : WER.OS.Version Value: 10.0.18362.1 ADDITIONAL_XML: 1 OS_BUILD_LAYERS: 1 BUGCHECK_CODE: 109 BUGCHECK_P1: a39fc6dc3ed02607 BUGCHECK_P2: b3b6d362915121f9 BUGCHECK_P3: fffff80721f02260 BUGCHECK_P4: 1 MEMORY_CORRUPTOR: ONE_BIT BLACKBOXBSD: 1 (!blackboxbsd) BLACKBOXNTFS: 1 (!blackboxntfs) BLACKBOXWINLOGON: 1 PROCESS_NAME: System STACK_TEXT: ffff858d`5160f028 00000000`00000000 : 00000000`00000109 a39fc6dc`3ed02607 b3b6d362`915121f9 fffff807`21f02260 : nt!KeBugCheckEx CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt fffff8072080100a-fffff8072080100f 6 bytes - nt!SeConvertSecurityDescriptorToStringSecurityDescriptor+fffffffffffffffa [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080109a-fffff8072080109f 6 bytes - nt!SeConvertSecurityDescriptorToStringSecurityDescriptor+8a (+0x90) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720801416-fffff8072080141b 6 bytes - nt!SeConvertSecurityDescriptorToStringSecurityDescriptor+406 (+0x37c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080146a-fffff8072080146f 6 bytes - nt!PspIoRateControlInfoIsAnySet+4e (+0x54) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720801572-fffff80720801577 6 bytes - nt!IoStartIoRateControl+102 (+0x108) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807208016d6-fffff807208016db 6 bytes - nt!IopIoRateStartRateControl+15e (+0x164) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080171a-fffff8072080171f 6 bytes - nt!IoStopIoRateControl+3e (+0x44) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080178a-fffff8072080178f 6 bytes - nt!ApplyRelocations+6a (+0x70) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720801872-fffff80720801877 6 bytes - nt!ExpTimerApcRoutine+e2 (+0xe8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080189a-fffff8072080189f 6 bytes - nt!KeUpdateTotalCyclesCurrentThread+22 (+0x28) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807208018da-fffff807208018df 6 bytes - nt!IoReleaseIoRateControl+3a (+0x40) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080190a-fffff8072080190f 6 bytes - nt!IoUpdateIrpIoAttributionHandle+2a (+0x30) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807208019d2-fffff807208019d7 6 bytes - nt!IoNotifyQuotaState+c2 (+0xc8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720801aa2-fffff80720801aa7 6 bytes - nt!PsIoRateControlOverQuotaNotify+ca (+0xd0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720801aea-fffff80720801aef 6 bytes - nt!MiProcessCommitIntact+42 (+0x48) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720801b7e-fffff80720801b83 6 bytes - nt!SMKM_STORE_MGR::SmStoreMgrCallback+8e (+0x94) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720801eca-fffff80720801ecf 6 bytes - nt!SMKM_STORE_MGR::SmFeStoreDelete+346 (+0x34c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720801eea-fffff80720801eef 6 bytes - nt!SMKM_STORE::SmStWorkerThread+1a (+0x20) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080279e-fffff807208027a3 6 bytes - nt!SMKM_STORE::SmStWorker+8ae (+0x8b4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720802832-fffff80720802837 6 bytes - nt!SMKM_STORE::SmStAcquireStoreLockExclusive+8e (+0x94) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080286a-fffff8072080286f 6 bytes - nt!SmSetThreadPagePriority+32 (+0x38) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720802a42-fffff80720802a47 6 bytes - nt!SMKM_STORE::SmStReadThread+1d2 (+0x1d8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720802b62-fffff80720802b67 6 bytes - nt!ST_STORE::StAcquireReadContext+11a (+0x120) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720802c12-fffff80720802c17 6 bytes - nt!ST_STORE::StCleanup+aa (+0xb0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720802e5e-fffff80720802e63 6 bytes - nt!ST_STORE::StDmCleanup+246 (+0x24c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720802eaa-fffff80720802eaf 6 bytes - nt!NP_CONTEXT::NpCleanup+46 (+0x4c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720802f52-fffff80720802f57 6 bytes - nt!B_TREE::_ST_HASH_ENTRY,4096,NP_CONTEXT,ST_STORE::ST_HASH_ENTRY_COMPARATOR>::BTreeSearchResultDeref+a2 (+0xa8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720802f8a-fffff80720802f8f 6 bytes - nt!B_TREE<_SM_PAGE_KEY,ST_STORE::_ST_PAGE_ENTRY,4096,NP_CONTEXT,B_TREE_KEY_COMPARATOR<_SM_PAGE_KEY> >::BTreeSearchResultCleanup+32 (+0x38) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720802fe2-fffff80720802fe7 6 bytes - nt!ST_STORE::StReleaseReadContext+52 (+0x58) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720803026-fffff8072080302b 6 bytes - nt!B_TREE::_ST_REGION_ENTRY,4096,NP_CONTEXT,ST_STORE::ST_REGION_ENTRY_COMPARATOR>::BTreeSearchResultCleanup+3e (+0x44) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807208030ce-fffff807208030d3 6 bytes - nt!B_TREE::_ST_REGION_ENTRY,4096,NP_CONTEXT,ST_STORE::ST_REGION_ENTRY_COMPARATOR>::BTreeSearchResultDeref+a2 (+0xa8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720803176-fffff8072080317b 6 bytes - nt!B_TREE<_SM_PAGE_KEY,ST_STORE::_ST_PAGE_ENTRY,4096,NP_CONTEXT,B_TREE_KEY_COMPARATOR<_SM_PAGE_KEY> >::BTreeSearchResultDeref+a2 (+0xa8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807208031c6-fffff807208031cb 6 bytes - nt!SmHpChunkHeapCleanup+4a (+0x50) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080323e-fffff80720803243 6 bytes - nt!SmHpChunkHeapProtect+72 (+0x78) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080328e-fffff80720803293 6 bytes - nt!ST_STORE::StDmInvalidateCurrentRegions+4a (+0x50) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807208033d6-fffff807208033db 6 bytes - nt!ST_STORE::StDmCurrentRegionSet+142 (+0x148) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080340e-fffff80720803413 6 bytes - nt!ST_STORE::StDrainReadContextList+32 (+0x38) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080344e-fffff80720803453 6 bytes - nt!StEtaCleanup+3a (+0x40) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080365a-fffff8072080365f 6 bytes - nt!SMKM_STORE::SmStReleaseStoreLockExclusive+206 (+0x20c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807208036ae-fffff807208036b3 6 bytes - nt!SmFpCleanup+4e (+0x54) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807208038b2-fffff807208038b7 6 bytes - nt!SMKM_STORE::SmStCleanup+1fe (+0x204) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720803902-fffff80720803907 6 bytes - nt!SmKmStoreHelperCleanup+4a (+0x50) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072080397e-fffff80720803983 6 bytes - nt!SmKmStoreHelperSendCommand+76 (+0x7c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807208039aa-fffff807208039af 6 bytes - nt!SmKmStoreHelperCheckWaitCommand+26 (+0x2c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807208039ca-fffff807208039cf 6 bytes - nt!SmFreeWrapper+1a (+0x20) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720803a16-fffff80720803a1b 6 bytes - nt!SmKmStoreDeleteWhenEmptyWorker+46 (+0x4c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720803bda-fffff80720803bdf 6 bytes - nt!MmInSwapWorkingSet+1be (+0x1c4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720803c9e-fffff80720803ca3 6 bytes - nt!MiProcessWsInSwapSupport+be (+0xc4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720803d22-fffff80720803d27 6 bytes - nt!MiProcessWsInSwapRanges+7e (+0x84) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720803de6-fffff80720803deb 6 bytes - nt!MiReleaseOutSwapReservations+be (+0xc4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output. fffff80720b510fa-fffff80720b510ff 6 bytes - nt!UartpSetAccess (nt+0x3510fa) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720b5117a-fffff80720b5117b 2 bytes - nt!KiDivideErrorFaultShadow+7a (+0x80) [ 84 00:4c 87 ] fffff80720b5117d-fffff80720b5117f 3 bytes - nt!KiDivideErrorFaultShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b511fa-fffff80720b511fb 2 bytes - nt!KiDebugTrapOrFaultShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b511fd-fffff80720b511ff 3 bytes - nt!KiDebugTrapOrFaultShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b5127a-fffff80720b5127b 2 bytes - nt!KiNmiInterruptShadowEnd+5 (+0x7d) [ 84 00:4c 87 ] fffff80720b5127d-fffff80720b5127f 3 bytes - nt!KiNmiInterruptShadowEnd+8 (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b512fa-fffff80720b512fb 2 bytes - nt!KiBreakpointTrapShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b512fd-fffff80720b512ff 3 bytes - nt!KiBreakpointTrapShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b5137a-fffff80720b5137b 2 bytes - nt!KiOverflowTrapShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b5137d-fffff80720b5137f 3 bytes - nt!KiOverflowTrapShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b513fa-fffff80720b513fb 2 bytes - nt!KiBoundFaultShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b513fd-fffff80720b513ff 3 bytes - nt!KiBoundFaultShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b5147a-fffff80720b5147b 2 bytes - nt!KiInvalidOpcodeFaultShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b5147d-fffff80720b5147f 3 bytes - nt!KiInvalidOpcodeFaultShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b514fa-fffff80720b514fb 2 bytes - nt!KiNpxNotAvailableFaultShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b514fd-fffff80720b514ff 3 bytes - nt!KiNpxNotAvailableFaultShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b5157a-fffff80720b5157b 2 bytes - nt!KiDoubleFaultAbortShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b5157d-fffff80720b5157f 3 bytes - nt!KiDoubleFaultAbortShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b515fa-fffff80720b515fb 2 bytes - nt!KiNpxSegmentOverrunAbortShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b515fd-fffff80720b515ff 3 bytes - nt!KiNpxSegmentOverrunAbortShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b5167a-fffff80720b5167f 6 bytes - nt!KiInvalidTssFaultShadow+7a (+0x7d) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b516fa-fffff80720b516ff 6 bytes - nt!KiSegmentNotPresentFaultShadow+7a (+0x80) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5177a-fffff80720b5177f 6 bytes - nt!KiStackFaultShadow+7a (+0x80) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b517fa-fffff80720b517ff 6 bytes - nt!KiGeneralProtectionFaultShadow+7a (+0x80) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5187a-fffff80720b5187f 6 bytes - nt!KiPageFaultShadow+7a (+0x80) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b518fa-fffff80720b518fb 2 bytes - nt!KiFloatingErrorFaultShadow+7a (+0x80) [ 84 00:4c 87 ] fffff80720b518fd-fffff80720b518ff 3 bytes - nt!KiFloatingErrorFaultShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b5197a-fffff80720b5197f 6 bytes - nt!KiAlignmentFaultShadow+7a (+0x7d) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b519fa-fffff80720b519fb 2 bytes - nt!KiMcheckAbortShadow+7a (+0x80) [ 84 00:4c 87 ] fffff80720b519fd-fffff80720b519ff 3 bytes - nt!KiMcheckAbortShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b51a7a-fffff80720b51a7b 2 bytes - nt!KxMcheckAlternateReturnShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b51a7d-fffff80720b51a7f 3 bytes - nt!KxMcheckAlternateReturnShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b51afa-fffff80720b51afb 2 bytes - nt!KiXmmExceptionShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b51afd-fffff80720b51aff 3 bytes - nt!KiXmmExceptionShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b51b7a-fffff80720b51b7b 2 bytes - nt!KiVirtualizationExceptionShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b51b7d-fffff80720b51b7f 3 bytes - nt!KiVirtualizationExceptionShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b51bfa-fffff80720b51bff 6 bytes - nt!KiControlProtectionFaultShadow+7a (+0x7d) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b51c7a-fffff80720b51c7b 2 bytes - nt!KiApcInterruptShadow+7a (+0x80) [ 84 00:4c 87 ] fffff80720b51c7d-fffff80720b51c7f 3 bytes - nt!KiApcInterruptShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b51cfa-fffff80720b51cfb 2 bytes - nt!KiSwInterruptShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b51cfd-fffff80720b51cff 3 bytes - nt!KiSwInterruptShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b51d7a-fffff80720b51d7b 2 bytes - nt!KiRaiseSecurityCheckFailureShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b51d7d-fffff80720b51d7f 3 bytes - nt!KiRaiseSecurityCheckFailureShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b51dfa-fffff80720b51dfb 2 bytes - nt!KiRaiseAssertionShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b51dfd-fffff80720b51dff 3 bytes - nt!KiRaiseAssertionShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b51e7a-fffff80720b51e7b 2 bytes - nt!KiDebugServiceTrapShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b51e7d-fffff80720b51e7f 3 bytes - nt!KiDebugServiceTrapShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b51efa-fffff80720b51efb 2 bytes - nt!KiSystemServiceShadow+7a (+0x7d) [ 84 00:4c 87 ] fffff80720b51efd-fffff80720b51eff 3 bytes - nt!KiSystemServiceShadow+7d (+0x03) [ 00 00 00:98 c3 90 ] WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output. fffff80720b5405a-fffff80720b5405b 2 bytes - nt!KiSystemCall64Shadow (nt+0x35405a) [ 84 00:4c 87 ] fffff80720b5405d-fffff80720b5405f 3 bytes - nt!KiSystemCall64Shadow (nt+0x35405d) (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b5409a-fffff80720b5409f 6 bytes - nt!_guard_retpoline_icall_handler+3a (+0x3d) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b540ba-fffff80720b540bf 6 bytes - nt!_guard_retpoline_switchtable_jump_rax+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b540da-fffff80720b540df 6 bytes - nt!_guard_retpoline_switchtable_jump_rcx+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b540fa-fffff80720b540ff 6 bytes - nt!_guard_retpoline_switchtable_jump_rdx+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5411a-fffff80720b5411f 6 bytes - nt!_guard_retpoline_switchtable_jump_rbx+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5413a-fffff80720b5413f 6 bytes - nt!_guard_retpoline_switchtable_jump_rsp+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5415a-fffff80720b5415f 6 bytes - nt!_guard_retpoline_switchtable_jump_rbp+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5417a-fffff80720b5417f 6 bytes - nt!_guard_retpoline_switchtable_jump_rsi+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5419a-fffff80720b5419f 6 bytes - nt!_guard_retpoline_switchtable_jump_rdi+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b541ba-fffff80720b541bf 6 bytes - nt!_guard_retpoline_switchtable_jump_r8+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b541da-fffff80720b541df 6 bytes - nt!_guard_retpoline_switchtable_jump_r9+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b541fa-fffff80720b541ff 6 bytes - nt!_guard_retpoline_switchtable_jump_r10+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5421a-fffff80720b5421f 6 bytes - nt!_guard_retpoline_switchtable_jump_r11+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5423a-fffff80720b5423f 6 bytes - nt!_guard_retpoline_switchtable_jump_r12+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5425a-fffff80720b5425f 6 bytes - nt!_guard_retpoline_switchtable_jump_r13+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5427a-fffff80720b5427f 6 bytes - nt!_guard_retpoline_switchtable_jump_r14+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5429a-fffff80720b5429f 6 bytes - nt!_guard_retpoline_switchtable_jump_r15+1a (+0x20) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5439a-fffff80720b5439f 6 bytes - nt!_guard_retpoline_indirect_rax+ba (+0x100) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b544ba-fffff80720b544bb 2 bytes - nt!_guard_retpoline_import_r10+9a (+0x120) [ 84 00:4c 87 ] fffff80720b544bd-fffff80720b544bf 3 bytes - nt!_guard_retpoline_import_r10+9d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b544fa-fffff80720b544ff 6 bytes - nt!_guard_retpoline_import_r10_do_retpoline+3a (+0x3d) [ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ] fffff80720b5455a-fffff80720b5455f 6 bytes - nt!_guard_retpoline_import_r10_log_event+5a (+0x60) [ cc cc cc 0f 1f 00:4c 87 00 98 c3 90 ] fffff80720b545fa-fffff80720b545fb 2 bytes - nt!_guard_retpoline_exit+9a (+0xa0) [ 84 00:4c 87 ] fffff80720b545fd-fffff80720b545ff 3 bytes - nt!_guard_retpoline_exit+9d (+0x03) [ 00 00 00:98 c3 90 ] fffff80720b6f00a-fffff80720b6f00f 6 bytes - nt!RtlMinimalBarrier (nt+0x36f00a) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720b6f09a-fffff80720b6f09f 6 bytes - nt!ExAllocatePoolWithTag+8a (+0x90) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d70798-fffff80720d7079a 3 bytes - nt!_guard_check_icall_fptr [ 50 60 97:40 ae 9c ] fffff80720d707a0-fffff80720d707a2 3 bytes - nt!_guard_dispatch_icall_fptr (+0x08) [ 70 e6 9b:90 ae 9c ] fffff80720d9700a-fffff80720d9700b 2 bytes - nt!SeILSigningPolicy (nt+0x59700a) [ 84 00:4c 87 ] fffff80720d9700d-fffff80720d9700f 3 bytes - nt!SeILSigningPolicy (nt+0x59700d) (+0x03) [ 00 00 00:98 c3 90 ] fffff80720d9729a-fffff80720d9729f 6 bytes - nt!KiSystemStartup+28a (+0x28d) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d972da-fffff80720d972df 6 bytes - nt!KiDetectFpuLeakage+3a (+0x40) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9758a-fffff80720d9758f 6 bytes - nt!KeInitThread+2aa (+0x2b0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9772a-fffff80720d9772f 6 bytes - nt!LZNT1FindMatchStandard+19a (+0x1a0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9781a-fffff80720d9781f 6 bytes - nt!RtlCompressBufferLZNT1+ea (+0xf0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97a8a-fffff80720d97a8f 6 bytes - nt!LZNT1CompressChunk+26a (+0x270) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97aaa-fffff80720d97aaf 6 bytes - nt!RtlCompressWorkSpaceSizeLZNT1+1a (+0x20) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97aea-fffff80720d97aef 6 bytes - nt!PopReleasePolicyLock+3a (+0x40) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97bda-fffff80720d97bdf 6 bytes - nt!EmClientQueryRuleState+ea (+0xf0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97ce2-fffff80720d97ce7 6 bytes - nt!EmClientRuleEvaluate+102 (+0x108) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97d52-fffff80720d97d57 6 bytes - nt!EmpAcquirePagingReference+6a (+0x70) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97dca-fffff80720d97dcf 6 bytes - nt!EmpReleasePagingReference+72 (+0x78) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97e1a-fffff80720d97e1f 6 bytes - nt!PopAcquirePolicyLock+4a (+0x50) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97e2a-fffff80720d97e2f 6 bytes - nt!MmMapUserAddressesToPage+a (+0x10) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97e3a-fffff80720d97e3f 6 bytes - nt!xHalDpReplaceTarget+a (+0x10) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97e4a-fffff80720d97e4f 6 bytes - nt!PopStartMirroring+a (+0x10) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97e5a-fffff80720d97e5f 6 bytes - nt!xHalPciMultiStageResumeCapable+a (+0x10) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d97f22-fffff80720d97f27 6 bytes - nt!PopCompressHiberBlocks+c2 (+0xc8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d98046-fffff80720d9804b 6 bytes - nt!PopAddPagesToCompressedPageSet+11e (+0x124) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d98142-fffff80720d98147 6 bytes - nt!PopCountDataAsProduced+f6 (+0xfc) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d981d2-fffff80720d981d7 6 bytes - nt!ProducerConsumerCopyToContextBuffer+8a (+0x90) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9829a-fffff80720d9829f 6 bytes - nt!ProducerConsumerBufferComplete+c2 (+0xc8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9833e-fffff80720d98343 6 bytes - nt!ProducerGetBuffer+9e (+0xa4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9845a-fffff80720d9845f 6 bytes - nt!PopWriteHiberImage+116 (+0x11c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9847e-fffff80720d98483 6 bytes - nt!PopCompressCallback+1e (+0x24) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d987ba-fffff80720d987bf 6 bytes - nt!PopRequestWrite+336 (+0x33c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9880e-fffff80720d98813 6 bytes - nt!PopGetIoLocation+4e (+0x54) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d988c2-fffff80720d988c7 6 bytes - nt!ConsumerGetBuffer+ae (+0xb4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9890a-fffff80720d9890f 6 bytes - nt!PopHiberCheckForDebugBreak+42 (+0x48) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d98a36-fffff80720d98a3b 6 bytes - nt!PopHiberChecksumHiberFileData+126 (+0x12c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d98afa-fffff80720d98aff 6 bytes - nt!PopCreateDumpMdl+be (+0xc4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d98d3a-fffff80720d98d3f 6 bytes - nt!PopEndMirroring+23a (+0x240) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d98ffa-fffff80720d98fff 6 bytes - nt!PopRestoreHiberContext+2ba (+0x2c0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9940e-fffff80720d99413 6 bytes - nt!PopSaveHiberContext+40e (+0x414) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9992e-fffff80720d99933 6 bytes - nt!PoBroadcastSystemState+51a (+0x520) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d99a0e-fffff80720d99a13 6 bytes - nt!PopDiagTraceDevicesLevel+da (+0xe0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d99b5e-fffff80720d99b63 6 bytes - nt!PopNotifyDevice+14a (+0x150) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9a12a-fffff80720d9a12f 6 bytes - nt!PopInvokeSystemStateHandler+5c6 (+0x5cc) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9a16a-fffff80720d9a16f 6 bytes - nt!PopIssueNextState+3a (+0x40) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9a1ea-fffff80720d9a1ef 6 bytes - nt!PopInvokeStateHandlerTargetProcessor+7a (+0x80) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9a4ee-fffff80720d9a4f3 6 bytes - nt!PopHandleNextState+2fe (+0x304) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9a552-fffff80720d9a557 6 bytes - nt!PopCheckpointSystemSleep+5e (+0x64) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9a566-fffff80720d9a56b 6 bytes - nt!KiRestoreXSaveSupport+e (+0x14) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9b79a-fffff80720d9b79f 6 bytes - nt!PopTransitionSystemPowerStateEx+122e (+0x1234) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9b81e-fffff80720d9b823 6 bytes - nt!PopSetDevicesSystemState+7e (+0x84) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9b962-fffff80720d9b967 6 bytes - nt!PopDecompressHiberBlocks+13e (+0x144) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9ba26-fffff80720d9ba2b 6 bytes - nt!ConsumerPeekAndConsumeBuffer+be (+0xc4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720d9bc6a-fffff80720d9bc6f 6 bytes - nt!PfPowerActionNotify+23e (+0x244) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output. fffff80720db200a-fffff80720db200f 6 bytes - nt!LZNT1Formats (nt+0x5b200a) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db237a-fffff80720db237f 6 bytes - nt!LZNT1Formats (nt+0x5b237a) (+0x370) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db23aa-fffff80720db23af 6 bytes - nt!PsQueryThreadTerminationPort+2a (+0x30) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db254e-fffff80720db2553 6 bytes - nt!NtLoadKey3+19e (+0x1a4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db265e-fffff80720db2663 6 bytes - nt!CmpCheckExeOwnerForPca+10a (+0x110) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db26b2-fffff80720db26b7 6 bytes - nt!CmpCheckKeyOwnerForPca+4e (+0x54) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db272a-fffff80720db272f 6 bytes - nt!FsRtlpPrepareExtraCreateParametersForCreate+72 (+0x78) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db276e-fffff80720db2773 6 bytes - nt!PipCslStateChangeCallback+3e (+0x44) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db2792-fffff80720db2797 6 bytes - nt!PnpWinlogonExternalDmaNotification+1e (+0x24) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db27c6-fffff80720db27cb 6 bytes - nt!KeInitializeVelocity+2e (+0x34) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db285e-fffff80720db2863 6 bytes - nt!KiTpIsSupportedKernelTracepointLocation+92 (+0x98) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db287e-fffff80720db2883 6 bytes - nt!AlpcpAvailableBufferSize+1a (+0x20) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db297e-fffff80720db2983 6 bytes - nt!AlpcpPortQueryServerSessionInfo+fa (+0x100) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db2b66-fffff80720db2b6b 6 bytes - nt!MiRegQueryDWORD+1e2 (+0x1e8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db2bd2-fffff80720db2bd7 6 bytes - nt!MiAllocateSecureImageActivePatch+66 (+0x6c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db2bfa-fffff80720db2bff 6 bytes - nt!MiCompareHotPatchNodes+22 (+0x28) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db2c92-fffff80720db2c97 6 bytes - nt!MiFillActivePatchesQueryBuffer+92 (+0x98) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db2d3e-fffff80720db2d43 6 bytes - nt!MiInsertSecureImageActivePatch+a6 (+0xac) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db2d6e-fffff80720db2d73 6 bytes - nt!MiIsActiveSystemHotPatch+2a (+0x30) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db360a-fffff80720db360f 6 bytes - nt!MiLogHotPatchRundown+896 (+0x89c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db362e-fffff80720db3633 6 bytes - nt!MiTracingEnabledCallback+1e (+0x24) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db369e-fffff80720db36a3 6 bytes - nt!PopDirectedDripsInitializeStartedDevices+6a (+0x70) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db36e6-fffff80720db36eb 6 bytes - nt!PopDirectedDripsQueryEmPS4DisableSetting+42 (+0x48) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db37a2-fffff80720db37a7 6 bytes - nt!PopDirectedDripsSendSuspendResumeNotification+b6 (+0xbc) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db398a-fffff80720db398f 6 bytes - nt!PpmParkInitSoftCoreParkingSupport+1e2 (+0x1e8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db39aa-fffff80720db39af 6 bytes - nt!SepGetSystemSigningLevel+1a (+0x20) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db3a36-fffff80720db3a3b 6 bytes - nt!SeCreateAccessStateFromSubjectContext+86 (+0x8c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db3b7e-fffff80720db3b83 6 bytes - nt!EtwpApplyContainerFilter+142 (+0x148) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db3c1e-fffff80720db3c23 6 bytes - nt!SiOpenDevice+9a (+0xa0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db3cda-fffff80720db3cdf 6 bytes - nt!AdtpBuildSecurityDescriptorChangeString+b6 (+0xbc) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db3e26-fffff80720db3e2b 6 bytes - nt!AdtpBuildSecurityDescriptorUnicodeString+146 (+0x14c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db41aa-fffff80720db41af 6 bytes - nt!LocalConvertSDToStringSD_Rev1+37e (+0x384) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db42d2-fffff80720db42d7 6 bytes - nt!LocalGetStringForControl+122 (+0x128) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db4416-fffff80720db441b 6 bytes - nt!SddlFilterSacl+13e (+0x144) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db4a96-fffff80720db4a9b 6 bytes - nt!LocalConvertAclToString+67a (+0x680) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db4ab2-fffff80720db4ab7 6 bytes - nt!SddlpFree+16 (+0x1c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db4b62-fffff80720db4b67 6 bytes - nt!LookupAceFlagsInTable+aa (+0xb0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db4bea-fffff80720db4bef 6 bytes - nt!LocalGetAceCondition+82 (+0x88) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db4e2e-fffff80720db4e33 6 bytes - nt!PspSetJobIoRateControl+23e (+0x244) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db4f3a-fffff80720db4f3f 6 bytes - nt!PspIoRateEntryActivate+106 (+0x10c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db4f76-fffff80720db4f7b 6 bytes - nt!PspIoRateEntryDeactivate+36 (+0x3c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db50a2-fffff80720db50a7 6 bytes - nt!WbAddWarbirdEncryptionSegment+126 (+0x12c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db5136-fffff80720db513b 6 bytes - nt!WbAddWarbirdEncryptionSegment+1ba (+0x94) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db5206-fffff80720db520b 6 bytes - nt!WbDecryptEncryptionSegment+ca (+0xd0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db52d6-fffff80720db52db 6 bytes - nt!WbReEncryptEncryptionSegment+ca (+0xd0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db5456-fffff80720db545b 6 bytes - nt!WbReEncryptEncryptionSegment+24a (+0x180) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db558e-fffff80720db5593 6 bytes - nt!WbGetWarbirdEncryptionSegment+132 (+0x138) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db55c2-fffff80720db55c7 6 bytes - nt!WbGetWarbirdEncryptionSegment+166 (+0x34) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db561a-fffff80720db561f 6 bytes - nt!WbGetWarbirdEncryptionSegment+1be (+0x58) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80720db57e2-fffff80720db57e7 6 bytes - nt!WbValidateEncryptionSegmentArguments+1c2 (+0x1c8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output. fffff8072118dada-fffff8072118dadf 6 bytes - nt! ?? ::CIFEBFPJ::`string'+6a [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118dd22-fffff8072118dd27 6 bytes - nt!HdlspAddLogEntry+242 (+0x248) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118de5a-fffff8072118de5f 6 bytes - nt!HdlspBugCheckProcessing+132 (+0x138) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118e4c6-fffff8072118e4cb 6 bytes - nt!HdlspDispatch+666 (+0x66c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118e58e-fffff8072118e593 6 bytes - nt!HdlspEnableTerminal+c2 (+0xc8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118e90e-fffff8072118e913 6 bytes - nt!HdlspGetLine+37a (+0x380) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118eb7a-fffff8072118eb7f 6 bytes - nt!HdlspKernelAddLogEntry+266 (+0x26c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118eece-fffff8072118eed3 6 bytes - nt!HdlspProcessDumpCommand+34e (+0x354) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118ef1e-fffff8072118ef23 6 bytes - nt!HdlspPutData+4a (+0x50) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118efbe-fffff8072118efc3 6 bytes - nt!HdlspPutMore+9a (+0xa0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118f0e6-fffff8072118f0eb 6 bytes - nt!HdlspPutString+122 (+0x128) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118f1aa-fffff8072118f1af 6 bytes - nt!HdlspPutWideString+be (+0xc4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118f24e-fffff8072118f253 6 bytes - nt!HdlspSendBlueScreenInfo+9e (+0xa4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072118f282-fffff8072118f287 6 bytes - nt!HdlspSendStringAtBaud+2e (+0x34) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721190002-fffff80721190007 6 bytes - nt!HdlspSetBlueScreenInformation (nt+0x990002) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119001e-fffff80721190023 6 bytes - nt!BgSetFrameBufferAccess+16 (+0x1c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119002e-fffff80721190033 6 bytes - nt!BgGetDisplayContext+a (+0x10) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119007a-fffff8072119007f 6 bytes - nt!BgGetContext+46 (+0x4c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211901ce-fffff807211901d3 6 bytes - nt!ResFwGetContext+14e (+0x154) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721190212-fffff80721190217 6 bytes - nt!BgFreeContext+3e (+0x44) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119033a-fffff8072119033f 6 bytes - nt!ResFwFreeContext+122 (+0x128) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211903da-fffff807211903df 6 bytes - nt!BgpFwReservePoolSwap+9a (+0xa0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119045a-fffff8072119045f 6 bytes - nt!BgkpUnlockBgfxCodeSection+7a (+0x80) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119050e-fffff80721190513 6 bytes - nt!ResFwpPageOutBackground+ae (+0xb4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721190602-fffff80721190607 6 bytes - nt!LogFwReport+ee (+0xf4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119064a-fffff8072119064f 6 bytes - nt!BgDisplayFade+42 (+0x48) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211906de-fffff807211906e3 6 bytes - nt!ResFwConfigureDisplayStringResources+8e (+0x94) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211907c6-fffff807211907cb 6 bytes - nt!AnFwConfigureProgressResources+e2 (+0xe8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211907e6-fffff807211907eb 6 bytes - nt!BgpGxReservePoolRectangleSize+1a (+0x20) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119082a-fffff8072119082f 6 bytes - nt!BgConsoleGetInterface+3e (+0x44) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721190856-fffff8072119085b 6 bytes - nt!BgLibraryInitialize+26 (+0x2c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211908fe-fffff80721190903 6 bytes - nt!BgpGxParseBitmap+a2 (+0xa8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119099e-fffff807211909a3 6 bytes - nt!BgpGxCopyBitmapToRectangle+9a (+0xa0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721190a0e-fffff80721190a13 6 bytes - nt!BgpGxReadRectangle+6a (+0x70) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721190bd2-fffff80721190bd7 6 bytes - nt!GxpReadFrameBufferPixels+1be (+0x1c4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721191172-fffff80721191177 6 bytes - nt!AnFwDisplayFade+59a (+0x5a0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119124e-fffff80721191253 6 bytes - nt!AnFwFadeCompletion+d6 (+0xdc) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721191272-fffff80721191277 6 bytes - nt!BgpGxRectangleDestroy+1e (+0x24) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119144e-fffff80721191453 6 bytes - nt!BgpGxFindSubRectangle+1d6 (+0x1dc) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119147a-fffff8072119147f 6 bytes - nt!BgkQueryBootGraphicsInformation+26 (+0x2c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721191796-fffff8072119179b 6 bytes - nt!AnFwpFadeAnimationTimer+316 (+0x31c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721191902-fffff80721191907 6 bytes - nt!LogFwStat+166 (+0x16c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211919a2-fffff807211919a7 6 bytes - nt!BgpTxtGetRegionContext+9a (+0xa0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721192082-fffff80721192087 6 bytes - nt!BgpFwLibraryInitialize+6da (+0x6e0) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721192266-fffff8072119226b 6 bytes - nt!BgpTxtCreateRegion+1de (+0x1e4) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211922ee-fffff807211922f3 6 bytes - nt!BgpGxRectangleCreate+82 (+0x88) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211923aa-fffff807211923af 6 bytes - nt!BgpFoGetFontHandle+b6 (+0xbc) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211923ee-fffff807211923f3 6 bytes - nt!ResFwBackgroundTransition+3e (+0x44) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119246e-fffff80721192473 6 bytes - nt!ResFwpPageInBackground+7a (+0x80) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119248a-fffff8072119248f 6 bytes - nt!AnFwDisableBackgroundUpdateTimer+16 (+0x1c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721192552-fffff80721192557 6 bytes - nt!AnFwpDisableProgressTimer+c2 (+0xc8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721192596-fffff8072119259b 6 bytes - nt!BgpFwInitializeReservePool+3e (+0x44) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211925ee-fffff807211925f3 6 bytes - nt!RaspClearCache+52 (+0x58) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff807211926ca-fffff807211926cf 6 bytes - nt!LogFwInitialize+d6 (+0xdc) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119275a-fffff8072119275f 6 bytes - nt!BgkpLockBgfxCodeSection+8a (+0x90) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721192e6a-fffff80721192e6f 6 bytes - nt!LogFwpRegisterWorker+70a (+0x710) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721192ea6-fffff80721192eab 6 bytes - nt!BgLibraryDisable+36 (+0x3c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721192ef6-fffff80721192efb 6 bytes - nt!BgpFwLibraryDestroy+4a (+0x50) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721192f52-fffff80721192f57 6 bytes - nt!BgConsoleDestroyInterface+56 (+0x5c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721192f7e-fffff80721192f83 6 bytes - nt!BgpDisplayCharacterDestroyContext+26 (+0x2c) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721193076-fffff8072119307b 6 bytes - nt!BgpFwLibraryDisable+f2 (+0xf8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff80721193152-fffff80721193157 6 bytes - nt!BgpTxtDestroyRegion+d6 (+0xdc) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119321a-fffff8072119321f 6 bytes - nt!BgpFoDestroy+c2 (+0xc8) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] fffff8072119328e-fffff80721193293 6 bytes - nt!FopFreeFontData+6e (+0x74) [ cc cc cc cc cc cc:4c 87 00 98 c3 90 ] WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output. 19055 errors : !nt (fffff8072080100a-fffff8072119691f) SYMBOL_NAME: cng!McGenControlCallbackV2+0 MODULE_NAME: cng IMAGE_NAME: cng.sys STACK_COMMAND: .thread ; .cxr ; kb FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT OS_VERSION: 10.0.18362.1 BUILDLAB_STR: 19h1_release OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7} Followup: MachineOwner ---------