R
RS01RS
Here is the dmp readout
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff8018843949a, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8012fba4bd0, address which referenced memory
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 6124
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on REMAN
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.mSec
Value: 22750
Key : Analysis.Memory.CommitPeak.Mb
Value: 92
Key : Analysis.System
Value: CreateObject
Key : WER.OS.Branch
Value: 19h1_release
Key : WER.OS.Timestamp
Value: 2019-03-18T12:02:00Z
Key : WER.OS.Version
Value: 10.0.18362.1
ADDITIONAL_XML: 1
OS_BUILD_LAYERS: 1
BUGCHECK_CODE: d1
BUGCHECK_P1: fffff8018843949a
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff8012fba4bd0
READ_ADDRESS: fffff8012e3733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff8012e22a3c8: Unable to get Flags value from nt!KdVersionBlock
fffff8012e22a3c8: Unable to get Flags value from nt!KdVersionBlock
unable to get nt!MmSpecialPagesInUse
fffff8018843949a
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: faceitservice.exe
DPC_STACK_BASE: FFFFFC8D8B030FB0
TRAP_FRAME: fffffc8d8b02fc50 -- (.trap 0xfffffc8d8b02fc50)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8012fba4bd0 rbx=0000000000000000 rcx=ffffd7094036b6b0
rdx=ffffd7094035bd80 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8012fba4bd0 rsp=fffffc8d8b02fde8 rbp=fffffc8d8b02fe48
r8=ffffd7094035bd98 r9=fffffc8d8b02fe30 r10=0000fffff8012fba
r11=ffffaffdefc00000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 ov up ei pl nz na pe cy
mouclass!MouseClassServiceCallback:
fffff801`2fba4bd0 ff2500000000 jmp qword ptr [mouclass!MouseClassServiceCallback+0x6 (fffff801`2fba4bd6)] ds:fffff801`2fba4bd6=fffff8018275455c
Resetting default scope
STACK_TEXT:
fffffc8d`8b02fb08 fffff801`2dfd41e9 : 00000000`0000000a fffff801`8843949a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffffc8d`8b02fb10 fffff801`2dfd052b : ffffd709`402f6b30 ffffd709`400097a0 00000000`00000000 fffff801`2fbc225b : nt!KiBugCheckDispatch+0x69
fffffc8d`8b02fc50 fffff801`2fba4bd0 : fffff801`2fb83abc 00000000`00000000 fffffc8d`8b02fe48 ffffd709`4024d7d0 : nt!KiPageFault+0x46b
fffffc8d`8b02fde8 fffff801`2fb83abc : 00000000`00000000 fffffc8d`8b02fe48 ffffd709`4024d7d0 ffffd709`4035bc20 : mouclass!MouseClassServiceCallback
fffffc8d`8b02fdf0 fffff801`2df200a9 : 00000000`00000000 ffffc000`4f300100 00000000`00000001 00000000`00000000 : mouhid!MouHid_ReadComplete+0x75c
fffffc8d`8b02fe90 fffff801`2df1ff77 : ffffd709`403150d0 00000000`00000006 00000000`00000000 ffffd709`403091d0 : nt!IopfCompleteRequest+0x119
fffffc8d`8b02ffa0 fffff801`2faaacb1 : ffffd709`403150c0 ffffd709`40315002 fffffc8d`8b030041 00000000`00000008 : nt!IofCompleteRequest+0x17
fffffc8d`8b02ffd0 fffff801`2faaa7ba : ffffd709`403091d0 ffffd709`40309102 ffffd709`3f3c9550 ffffd709`00000008 : HIDCLASS!HidpDistributeInterruptReport+0x25d
fffffc8d`8b0300a0 fffff801`2df200a9 : ffffd709`403554c0 ffffd709`403554c0 000028f6`bfd0b901 00000000`73556f49 : HIDCLASS!HidpInterruptReadComplete+0x34a
fffffc8d`8b030140 fffff801`2df1ff77 : ffffc000`4f319000 ffffd709`4034e900 00000000`00000001 00000000`00000001 : nt!IopfCompleteRequest+0x119
fffffc8d`8b030250 fffff801`329083fd : 00000000`00000000 ffffd709`400097a0 00000000`00000002 fffff801`3290a4bf : nt!IofCompleteRequest+0x17
fffffc8d`8b030280 fffff801`32905f3c : 00000000`00000002 00000000`00000000 ffffd709`403554c0 00000000`00000000 : Wdf01000!FxRequest::CompleteInternal+0x22d [minkernel\wdf\framework\shared\core\fxrequest.cpp @ 869]
fffffc8d`8b030310 fffff801`2fbc52eb : fffffc8d`8b0303e0 ffffd709`400097a0 fffffc8d`8b030429 ffffd709`4034e900 : Wdf01000!imp_WdfRequestCompleteWithInformation+0x9c [minkernel\wdf\framework\shared\core\fxrequestapi.cpp @ 571]
fffffc8d`8b030370 fffffc8d`8b0303e0 : ffffd709`400097a0 fffffc8d`8b030429 ffffd709`4034e900 00000000`00000000 : sshid+0x52eb
fffffc8d`8b030378 ffffd709`400097a0 : fffffc8d`8b030429 ffffd709`4034e900 00000000`00000000 00000000`00000000 : 0xfffffc8d`8b0303e0
fffffc8d`8b030380 fffffc8d`8b030429 : ffffd709`4034e900 00000000`00000000 00000000`00000000 ffffd709`403083c0 : 0xffffd709`400097a0
fffffc8d`8b030388 ffffd709`4034e900 : 00000000`00000000 00000000`00000000 ffffd709`403083c0 fffff801`2fbc5426 : 0xfffffc8d`8b030429
fffffc8d`8b030390 00000000`00000000 : 00000000`00000000 ffffd709`403083c0 fffff801`2fbc5426 ffffd709`402f9d90 : 0xffffd709`4034e900
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
fffff8012de60a0a-fffff8012de60a0f 6 bytes - nt!IopInvalidDeviceRequest+2a
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de60a1a-fffff8012de60a1f 6 bytes - nt!KiFlushProcessTbWorker+a (+0x10)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de60a3e-fffff8012de60a43 6 bytes - nt!MiGetNextPageTableTail+1e (+0x24)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de60a8e-fffff8012de60a93 6 bytes - nt!MiAdjustFaultList+4a (+0x50)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de60ac6-fffff8012de60acb 6 bytes - nt!SeSetTokenTrustLink+32 (+0x38)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de70a0a-fffff8012de70a0f 6 bytes - nt!WmiTraceMessage+2a (+0xff44)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de70a6a-fffff8012de70a6f 6 bytes - nt!IoGetDriverObjectExtension+5a (+0x60)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de70a7e-fffff8012de70a83 6 bytes - nt!PsGetProcessExitProcessCalled+e (+0x14)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de70ace-fffff8012de70ad3 6 bytes - nt!MmQuerySystemMemoryInformation+4a (+0x50)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012df1ff8a-fffff8012df1ff8f 6 bytes - nt!IofCompleteRequest+2a (+0xaf4bc)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012df5b06a-fffff8012df5b06f 6 bytes - nt!PsGetVersion+4a (+0x3b0e0)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012df75ffa-fffff8012df75fff 6 bytes - nt!EmpCheckErrataList+a (+0x1af90)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012df76036-fffff8012df7603b 6 bytes - nt!IoAllocateErrorLogEntry+36 (+0x3c)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012dfc235a-fffff8012dfc235b 2 bytes - nt!ZwLoadKey3+2a (+0x4c324)
[ 84 00:4c 87 ]
fffff8012dfc235d-fffff8012dfc235f 3 bytes - nt!ZwLoadKey3+2d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc237a-fffff8012dfc237b 2 bytes - nt!KiBugCheckReturn+16 (+0x1d)
[ 84 00:4c 87 ]
fffff8012dfc237d-fffff8012dfc237f 3 bytes - nt!KiBugCheckReturn+19 (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc24aa-fffff8012dfc24ab 2 bytes - nt!KeBugCheckEx+12a (+0x12d)
[ 84 00:4c 87 ]
fffff8012dfc24ad-fffff8012dfc24af 3 bytes - nt!KeBugCheckEx+12d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc25aa-fffff8012dfc25ab 2 bytes - nt!KeContextToKframes+fa (+0xfd)
[ 84 00:4c 87 ]
fffff8012dfc25ad-fffff8012dfc25af 3 bytes - nt!KeContextToKframes+fd (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc25fa-fffff8012dfc25fb 2 bytes - nt!KiSaveInitialProcessorControlState+4a (+0x4d)
[ 84 00:4c 87 ]
fffff8012dfc25fd-fffff8012dfc25ff 3 bytes - nt!KiSaveInitialProcessorControlState+4d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc26ca-fffff8012dfc26cf 6 bytes - nt!KiRestoreProcessorControlState+ca (+0xcd)
[ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
fffff8012dfc284a-fffff8012dfc284b 2 bytes - nt!KiSaveProcessorControlState+17a (+0x180)
[ 84 00:4c 87 ]
fffff8012dfc284d-fffff8012dfc284f 3 bytes - nt!KiSaveProcessorControlState+17d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc28ca-fffff8012dfc28cf 6 bytes - nt!KiRestoreDebugRegisterState+7a (+0x7d)
[ cc 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
fffff8012dfc2a5a-fffff8012dfc2a5b 2 bytes - nt!KiSaveDebugRegisterState+18a (+0x190)
[ 84 00:4c 87 ]
fffff8012dfc2a5d-fffff8012dfc2a5f 3 bytes - nt!KiSaveDebugRegisterState+18d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc2a6a-fffff8012dfc2a6f 6 bytes - nt!KeGetCurrentStackPointer+a (+0x0d)
[ cc cc 0f 1f 40 00:4c 87 00 98 c3 90 ]
fffff8012dfc2a7a-fffff8012dfc2a7b 2 bytes - nt!KeResetLegacyFloatingPointState+a (+0x10)
[ 1f 80:4c 87 ]
fffff8012dfc2a7d-fffff8012dfc2a7f 3 bytes - nt!KeResetLegacyFloatingPointState+d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc2a8a-fffff8012dfc2a8f 6 bytes - nt!KeSaveLegacyFloatingPointControlWord+a (+0x0d)
[ cc cc 0f 1f 40 00:4c 87 00 98 c3 90 ]
fffff8012dfc2aaa-fffff8012dfc2aab 2 bytes - nt!KeRestoreLegacyFloatingPointControlWord+1a (+0x20)
[ 84 00:4c 87 ]
fffff8012dfc2aad-fffff8012dfc2aaf 3 bytes - nt!KeRestoreLegacyFloatingPointControlWord+1d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc2d7a-fffff8012dfc2d7b 2 bytes - nt!NtContinue+2ca (+0x2cd)
[ 84 00:4c 87 ]
fffff8012dfc2d7d-fffff8012dfc2d7f 3 bytes - nt!NtContinue+2cd (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfd41fa-fffff8012dfd41ff 6 bytes - nt!KiBugCheckDispatch+7a (+0x1147d)
[ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
fffff8012e16f02a-fffff8012e16f02f 6 bytes - nt!ExFreePool+1a
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012e5160ba-fffff8012e5160bf 6 bytes - nt!EtwRegisterClassicProvider+4a
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012e516126-fffff8012e51612b 6 bytes - nt!EtwRegister+66 (+0x6c)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
176 errors : !nt (fffff8012de60a0a-fffff8012e51612b)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
MEMORY_CORRUPTOR: LARGE
STACK_COMMAND: .thread ; .cxr ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
OS_VERSION: 10.0.18362.1
BUILDLAB_STR: 19h1_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
Followup: memory_corruption
---------
Continue reading...
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff8018843949a, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8012fba4bd0, address which referenced memory
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 6124
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on REMAN
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.mSec
Value: 22750
Key : Analysis.Memory.CommitPeak.Mb
Value: 92
Key : Analysis.System
Value: CreateObject
Key : WER.OS.Branch
Value: 19h1_release
Key : WER.OS.Timestamp
Value: 2019-03-18T12:02:00Z
Key : WER.OS.Version
Value: 10.0.18362.1
ADDITIONAL_XML: 1
OS_BUILD_LAYERS: 1
BUGCHECK_CODE: d1
BUGCHECK_P1: fffff8018843949a
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff8012fba4bd0
READ_ADDRESS: fffff8012e3733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff8012e22a3c8: Unable to get Flags value from nt!KdVersionBlock
fffff8012e22a3c8: Unable to get Flags value from nt!KdVersionBlock
unable to get nt!MmSpecialPagesInUse
fffff8018843949a
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: faceitservice.exe
DPC_STACK_BASE: FFFFFC8D8B030FB0
TRAP_FRAME: fffffc8d8b02fc50 -- (.trap 0xfffffc8d8b02fc50)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8012fba4bd0 rbx=0000000000000000 rcx=ffffd7094036b6b0
rdx=ffffd7094035bd80 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8012fba4bd0 rsp=fffffc8d8b02fde8 rbp=fffffc8d8b02fe48
r8=ffffd7094035bd98 r9=fffffc8d8b02fe30 r10=0000fffff8012fba
r11=ffffaffdefc00000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 ov up ei pl nz na pe cy
mouclass!MouseClassServiceCallback:
fffff801`2fba4bd0 ff2500000000 jmp qword ptr [mouclass!MouseClassServiceCallback+0x6 (fffff801`2fba4bd6)] ds:fffff801`2fba4bd6=fffff8018275455c
Resetting default scope
STACK_TEXT:
fffffc8d`8b02fb08 fffff801`2dfd41e9 : 00000000`0000000a fffff801`8843949a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffffc8d`8b02fb10 fffff801`2dfd052b : ffffd709`402f6b30 ffffd709`400097a0 00000000`00000000 fffff801`2fbc225b : nt!KiBugCheckDispatch+0x69
fffffc8d`8b02fc50 fffff801`2fba4bd0 : fffff801`2fb83abc 00000000`00000000 fffffc8d`8b02fe48 ffffd709`4024d7d0 : nt!KiPageFault+0x46b
fffffc8d`8b02fde8 fffff801`2fb83abc : 00000000`00000000 fffffc8d`8b02fe48 ffffd709`4024d7d0 ffffd709`4035bc20 : mouclass!MouseClassServiceCallback
fffffc8d`8b02fdf0 fffff801`2df200a9 : 00000000`00000000 ffffc000`4f300100 00000000`00000001 00000000`00000000 : mouhid!MouHid_ReadComplete+0x75c
fffffc8d`8b02fe90 fffff801`2df1ff77 : ffffd709`403150d0 00000000`00000006 00000000`00000000 ffffd709`403091d0 : nt!IopfCompleteRequest+0x119
fffffc8d`8b02ffa0 fffff801`2faaacb1 : ffffd709`403150c0 ffffd709`40315002 fffffc8d`8b030041 00000000`00000008 : nt!IofCompleteRequest+0x17
fffffc8d`8b02ffd0 fffff801`2faaa7ba : ffffd709`403091d0 ffffd709`40309102 ffffd709`3f3c9550 ffffd709`00000008 : HIDCLASS!HidpDistributeInterruptReport+0x25d
fffffc8d`8b0300a0 fffff801`2df200a9 : ffffd709`403554c0 ffffd709`403554c0 000028f6`bfd0b901 00000000`73556f49 : HIDCLASS!HidpInterruptReadComplete+0x34a
fffffc8d`8b030140 fffff801`2df1ff77 : ffffc000`4f319000 ffffd709`4034e900 00000000`00000001 00000000`00000001 : nt!IopfCompleteRequest+0x119
fffffc8d`8b030250 fffff801`329083fd : 00000000`00000000 ffffd709`400097a0 00000000`00000002 fffff801`3290a4bf : nt!IofCompleteRequest+0x17
fffffc8d`8b030280 fffff801`32905f3c : 00000000`00000002 00000000`00000000 ffffd709`403554c0 00000000`00000000 : Wdf01000!FxRequest::CompleteInternal+0x22d [minkernel\wdf\framework\shared\core\fxrequest.cpp @ 869]
fffffc8d`8b030310 fffff801`2fbc52eb : fffffc8d`8b0303e0 ffffd709`400097a0 fffffc8d`8b030429 ffffd709`4034e900 : Wdf01000!imp_WdfRequestCompleteWithInformation+0x9c [minkernel\wdf\framework\shared\core\fxrequestapi.cpp @ 571]
fffffc8d`8b030370 fffffc8d`8b0303e0 : ffffd709`400097a0 fffffc8d`8b030429 ffffd709`4034e900 00000000`00000000 : sshid+0x52eb
fffffc8d`8b030378 ffffd709`400097a0 : fffffc8d`8b030429 ffffd709`4034e900 00000000`00000000 00000000`00000000 : 0xfffffc8d`8b0303e0
fffffc8d`8b030380 fffffc8d`8b030429 : ffffd709`4034e900 00000000`00000000 00000000`00000000 ffffd709`403083c0 : 0xffffd709`400097a0
fffffc8d`8b030388 ffffd709`4034e900 : 00000000`00000000 00000000`00000000 ffffd709`403083c0 fffff801`2fbc5426 : 0xfffffc8d`8b030429
fffffc8d`8b030390 00000000`00000000 : 00000000`00000000 ffffd709`403083c0 fffff801`2fbc5426 ffffd709`402f9d90 : 0xffffd709`4034e900
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
fffff8012de60a0a-fffff8012de60a0f 6 bytes - nt!IopInvalidDeviceRequest+2a
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de60a1a-fffff8012de60a1f 6 bytes - nt!KiFlushProcessTbWorker+a (+0x10)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de60a3e-fffff8012de60a43 6 bytes - nt!MiGetNextPageTableTail+1e (+0x24)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de60a8e-fffff8012de60a93 6 bytes - nt!MiAdjustFaultList+4a (+0x50)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de60ac6-fffff8012de60acb 6 bytes - nt!SeSetTokenTrustLink+32 (+0x38)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de70a0a-fffff8012de70a0f 6 bytes - nt!WmiTraceMessage+2a (+0xff44)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de70a6a-fffff8012de70a6f 6 bytes - nt!IoGetDriverObjectExtension+5a (+0x60)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de70a7e-fffff8012de70a83 6 bytes - nt!PsGetProcessExitProcessCalled+e (+0x14)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012de70ace-fffff8012de70ad3 6 bytes - nt!MmQuerySystemMemoryInformation+4a (+0x50)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012df1ff8a-fffff8012df1ff8f 6 bytes - nt!IofCompleteRequest+2a (+0xaf4bc)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012df5b06a-fffff8012df5b06f 6 bytes - nt!PsGetVersion+4a (+0x3b0e0)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012df75ffa-fffff8012df75fff 6 bytes - nt!EmpCheckErrataList+a (+0x1af90)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012df76036-fffff8012df7603b 6 bytes - nt!IoAllocateErrorLogEntry+36 (+0x3c)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012dfc235a-fffff8012dfc235b 2 bytes - nt!ZwLoadKey3+2a (+0x4c324)
[ 84 00:4c 87 ]
fffff8012dfc235d-fffff8012dfc235f 3 bytes - nt!ZwLoadKey3+2d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc237a-fffff8012dfc237b 2 bytes - nt!KiBugCheckReturn+16 (+0x1d)
[ 84 00:4c 87 ]
fffff8012dfc237d-fffff8012dfc237f 3 bytes - nt!KiBugCheckReturn+19 (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc24aa-fffff8012dfc24ab 2 bytes - nt!KeBugCheckEx+12a (+0x12d)
[ 84 00:4c 87 ]
fffff8012dfc24ad-fffff8012dfc24af 3 bytes - nt!KeBugCheckEx+12d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc25aa-fffff8012dfc25ab 2 bytes - nt!KeContextToKframes+fa (+0xfd)
[ 84 00:4c 87 ]
fffff8012dfc25ad-fffff8012dfc25af 3 bytes - nt!KeContextToKframes+fd (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc25fa-fffff8012dfc25fb 2 bytes - nt!KiSaveInitialProcessorControlState+4a (+0x4d)
[ 84 00:4c 87 ]
fffff8012dfc25fd-fffff8012dfc25ff 3 bytes - nt!KiSaveInitialProcessorControlState+4d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc26ca-fffff8012dfc26cf 6 bytes - nt!KiRestoreProcessorControlState+ca (+0xcd)
[ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
fffff8012dfc284a-fffff8012dfc284b 2 bytes - nt!KiSaveProcessorControlState+17a (+0x180)
[ 84 00:4c 87 ]
fffff8012dfc284d-fffff8012dfc284f 3 bytes - nt!KiSaveProcessorControlState+17d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc28ca-fffff8012dfc28cf 6 bytes - nt!KiRestoreDebugRegisterState+7a (+0x7d)
[ cc 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
fffff8012dfc2a5a-fffff8012dfc2a5b 2 bytes - nt!KiSaveDebugRegisterState+18a (+0x190)
[ 84 00:4c 87 ]
fffff8012dfc2a5d-fffff8012dfc2a5f 3 bytes - nt!KiSaveDebugRegisterState+18d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc2a6a-fffff8012dfc2a6f 6 bytes - nt!KeGetCurrentStackPointer+a (+0x0d)
[ cc cc 0f 1f 40 00:4c 87 00 98 c3 90 ]
fffff8012dfc2a7a-fffff8012dfc2a7b 2 bytes - nt!KeResetLegacyFloatingPointState+a (+0x10)
[ 1f 80:4c 87 ]
fffff8012dfc2a7d-fffff8012dfc2a7f 3 bytes - nt!KeResetLegacyFloatingPointState+d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc2a8a-fffff8012dfc2a8f 6 bytes - nt!KeSaveLegacyFloatingPointControlWord+a (+0x0d)
[ cc cc 0f 1f 40 00:4c 87 00 98 c3 90 ]
fffff8012dfc2aaa-fffff8012dfc2aab 2 bytes - nt!KeRestoreLegacyFloatingPointControlWord+1a (+0x20)
[ 84 00:4c 87 ]
fffff8012dfc2aad-fffff8012dfc2aaf 3 bytes - nt!KeRestoreLegacyFloatingPointControlWord+1d (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfc2d7a-fffff8012dfc2d7b 2 bytes - nt!NtContinue+2ca (+0x2cd)
[ 84 00:4c 87 ]
fffff8012dfc2d7d-fffff8012dfc2d7f 3 bytes - nt!NtContinue+2cd (+0x03)
[ 00 00 00:98 c3 90 ]
fffff8012dfd41fa-fffff8012dfd41ff 6 bytes - nt!KiBugCheckDispatch+7a (+0x1147d)
[ 66 0f 1f 44 00 00:4c 87 00 98 c3 90 ]
fffff8012e16f02a-fffff8012e16f02f 6 bytes - nt!ExFreePool+1a
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012e5160ba-fffff8012e5160bf 6 bytes - nt!EtwRegisterClassicProvider+4a
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
fffff8012e516126-fffff8012e51612b 6 bytes - nt!EtwRegister+66 (+0x6c)
[ cc cc cc cc cc cc:4c 87 00 98 c3 90 ]
176 errors : !nt (fffff8012de60a0a-fffff8012e51612b)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
MEMORY_CORRUPTOR: LARGE
STACK_COMMAND: .thread ; .cxr ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
OS_VERSION: 10.0.18362.1
BUILDLAB_STR: 19h1_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
Followup: memory_corruption
---------
Continue reading...