*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 000000000000001d, An RTL_BALANCED_NODE RBTree entry has been corrupted.
Arg2: ffff848e72e5f530, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffff848e72e5f488, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
*** WARNING: Unable to verify checksum for win32k.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 8296
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 19379
Key : Analysis.Init.CPU.mSec
Value: 875
Key : Analysis.Init.Elapsed.mSec
Value: 2530
Key : Analysis.Memory.CommitPeak.Mb
Value: 89
Key : FailFast.Name
Value: INVALID_BALANCED_TREE
Key : FailFast.Type
Value: 29
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
FILE_IN_CAB: 052322-11093-01.dmp
BUGCHECK_CODE: 139
BUGCHECK_P1: 1d
BUGCHECK_P2: ffff848e72e5f530
BUGCHECK_P3: ffff848e72e5f488
BUGCHECK_P4: 0
TRAP_FRAME: ffff848e72e5f530 -- (.trap 0xffff848e72e5f530)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=000000000000001d
rdx=fffff8052c8316c0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8052c02d70f rsp=ffff848e72e5f6c0 rbp=0000000000000000
r8=fffff8052c812568 r9=fffff8052c812568 r10=fffff8052c8ec040
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe cy
nt!RtlRbInsertNodeEx+0x1e2d3f:
fffff805`2c02d70f cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffff848e72e5f488 -- (.exr 0xffff848e72e5f488)
ExceptionAddress: fffff8052c02d70f (nt!RtlRbInsertNodeEx+0x00000000001e2d3f)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 000000000000001d
Subcode: 0x1d FAST_FAIL_INVALID_BALANCED_TREE
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 000000000000001d
EXCEPTION_STR: 0xc0000409
STACK_TEXT:
ffff848e`72e5f208 fffff805`2c009c69 : 00000000`00000139 00000000`0000001d ffff848e`72e5f530 ffff848e`72e5f488 : nt!KeBugCheckEx
ffff848e`72e5f210 fffff805`2c00a090 : 00000000`00000010 00000000`00000000 ffff848e`72e5f658 00000000`00000010 : nt!KiBugCheckDispatch+0x69
ffff848e`72e5f350 fffff805`2c008423 : ffffa981`af692180 00000000`00000000 00000000`00000000 ffffa981`af69a1c8 : nt!KiFastFailDispatch+0xd0
ffff848e`72e5f530 fffff805`2c02d70f : fffff805`2c831ec0 fffff805`2bf41ccf fffff805`2c812568 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x323
ffff848e`72e5f6c0 fffff805`2bf41ccf : fffff805`2c812568 00000000`00000000 fffff805`2c8ec040 00000000`00002710 : nt!RtlRbInsertNodeEx+0x1e2d3f
ffff848e`72e5f6d0 fffff805`2c11bada : 00000000`00000002 00000000`0000000f ffff848e`72e5fa20 00000000`00000000 : nt!KiSetClockInterval+0xa3
ffff848e`72e5f700 fffff805`2c11bb64 : ffffa981`af695240 ffff848e`72e5f860 00000000`00000000 00000000`00000000 : nt!KiSetVirtualHeteroClockIntervalRequest+0xc6
ffff848e`72e5f730 fffff805`2bea181e : 00000000`00000000 00000000`00000000 00000000`00000004 ffffa981`af692180 : nt!KiSetVirtualHeteroClockIntervalRequestDpcRoutine+0x14
ffff848e`72e5f760 fffff805`2bea0b04 : 00000000`00000000 00000000`00000000 00000000`00140001 00000000`00000000 : nt!KiExecuteAllDpcs+0x30e
ffff848e`72e5f8d0 fffff805`2bffb8ce : ffffffff`00000000 ffffa981`af692180 ffffa981`af69d240 ffff8d8f`30139080 : nt!KiRetireDpcList+0x1f4
ffff848e`72e5fb60 00000000`00000000 : ffff848e`72e60000 ffff848e`72e59000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x9e
SYMBOL_NAME: nt!KiFastFailDispatch+d0
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.19041.1706
STACK_COMMAND: .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET: d0
FAILURE_BUCKET_ID: 0x139_1d_INVALID_BALANCED_TREE_nt!KiFastFailDispatch
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {67ec97ad-ad0b-071e-ab87-6dc661e22d1b}
Followup: MachineOwner
---------
PnpActivityId : {00000000-0000-0000-0000-000000000000}
PnpActivityTime : 132977649314095658
PnpEventInformation: 3
PnpEventInProgress : 0
PnpProblemCode : 24
PnpVetoType : 0
DeviceId : SW\{96E080C7-143C-11D1-B40F-00A0C9223196}\{3C0D501A-140B-11D1-B40F-00A0C9223196}
VetoString :
start end module name
ffff81b0`56800000 ffff81b0`56ad3000 win32kbase (deferred)
ffff81b0`56ae0000 ffff81b0`56e96000 win32kfull (deferred)
ffff81b0`56ea0000 ffff81b0`56ee9000 cdd (deferred)
ffff81b0`57520000 ffff81b0`575ba000 win32k C (pdb symbols) c:\symbols\win32k.pdb\48D900D36D061D26B056B74A830DF0DE1\win32k.pdb
fffff805`2ac60000 fffff805`2aeef000 mcupdate_GenuineIntel (deferred)
fffff805`2aef0000 fffff805`2aef6000 hal (deferred)
fffff805`2af00000 fffff805`2af0b000 kd (deferred)
fffff805`2af10000 fffff805`2af37000 tm (deferred)
fffff805`2af40000 fffff805`2afab000 CLFS (deferred)
fffff805`2afb0000 fffff805`2afca000 PSHED (deferred)
fffff805`2afd0000 fffff805`2afdb000 BOOTVID (deferred)
fffff805`2afe0000 fffff805`2b050000 FLTMGR (deferred)
fffff805`2bc00000 fffff805`2cc46000 nt (pdb symbols) c:\symbols\ntkrnlmp.pdb\84A84F4D2218BC053913B1204942618D1\ntkrnlmp.pdb
fffff805`30600000 fffff805`30715000 clipsp (deferred)
fffff805`30720000 fffff805`30749000 ksecdd (deferred)
fffff805`30750000 fffff805`307b1000 msrpc (deferred)
fffff805`307c0000 fffff805`307ce000 cmimcext (deferred)
fffff805`307d0000 fffff805`307e1000 werkernel (deferred)
fffff805`307f0000 fffff805`307fc000 ntosext (deferred)
fffff805`30800000 fffff805`308e6000 CI (deferred)
fffff805`308f0000 fffff805`309ab000 cng (deferred)
fffff805`309b0000 fffff805`30a81000 Wdf01000 (deferred)
fffff805`30a90000 fffff805`30aa3000 WDFLDR (deferred)
fffff805`30ab0000 fffff805`30abf000 SleepStudyHelper (deferred)
fffff805`30ac0000 fffff805`30ad1000 WppRecorder (deferred)
fffff805`30ae0000 fffff805`30b06000 acpiex (deferred)
fffff805`30b10000 fffff805`30b2a000 SgrmAgent (deferred)
fffff805`30b30000 fffff805`30bfc000 ACPI (deferred)
fffff805`30c00000 fffff805`30c0c000 WMILIB (deferred)
fffff805`30c10000 fffff805`30c1b000 msisadrv (deferred)
fffff805`30c20000 fffff805`30c97000 pci (deferred)
fffff805`30ca0000 fffff805`30ce4000 tpm (deferred)
fffff805`30d10000 fffff805`30d7b000 intelpep (deferred)
fffff805`30d80000 fffff805`30d97000 WindowsTrustedRT (deferred)
fffff805`30da0000 fffff805`30dab000 IntelTA (deferred)
fffff805`30db0000 fffff805`30dbb000 WindowsTrustedRTProxy (deferred)
fffff805`30dc0000 fffff805`30dd4000 pcw (deferred)
fffff805`30de0000 fffff805`30df5000 vdrvroot (deferred)
fffff805`30e00000 fffff805`30e2f000 pdc (deferred)
fffff805`30e30000 fffff805`30e49000 CEA (deferred)
fffff805`30e50000 fffff805`30e81000 partmgr (deferred)
fffff805`30e90000 fffff805`30f3a000 spaceport (deferred)
fffff805`30f40000 fffff805`30f59000 volmgr (deferred)
fffff805`30f60000 fffff805`30fc3000 volmgrx (deferred)
fffff805`30fd0000 fffff805`30fee000 mountmgr (deferred)
fffff805`30ff0000 fffff805`31022000 storahci (deferred)
fffff805`31030000 fffff805`310e3000 storport (deferred)
fffff805`310f0000 fffff805`3111d000 stornvme (deferred)
fffff805`31120000 fffff805`3113c000 EhStorClass (deferred)
fffff805`31140000 fffff805`3115a000 fileinfo (deferred)
fffff805`31160000 fffff805`311a0000 Wof (deferred)
fffff805`311b0000 fffff805`3121f000 WdFilter (deferred)
fffff805`31220000 fffff805`314f9000 Ntfs (deferred)
fffff805`31500000 fffff805`3150d000 Fs_Rec (deferred)
fffff805`31510000 fffff805`315a8000 NETIO (deferred)
fffff805`315b0000 fffff805`315e2000 ksecpkg (deferred)
fffff805`315f0000 fffff805`315fb000 volume (deferred)
fffff805`31600000 fffff805`3176f000 ndis (deferred)
fffff805`31770000 fffff805`31a5c000 tcpip (deferred)
fffff805`31a60000 fffff805`31adf000 fwpkclnt (deferred)
fffff805`31ae0000 fffff805`31b10000 wfplwfs (deferred)
fffff805`31b20000 fffff805`31be8000 fvevol (deferred)
fffff805`31bf0000 fffff805`31c01000 hpdskflt (deferred)
fffff805`31c10000 fffff805`31c7d000 volsnap (deferred)
fffff805`31c80000 fffff805`31cd0000 rdyboost (deferred)
fffff805`31ce0000 fffff805`31d06000 mup (deferred)
fffff805`31d10000 fffff805`31d22000 iorate (deferred)
fffff805`31d50000 fffff805`31d6c000 disk (deferred)
fffff805`31d70000 fffff805`31ddc000 CLASSPNP (deferred)
fffff805`44830000 fffff805`4484e000 crashdmp (deferred)
fffff805`456e0000 fffff805`45efe000 vgk (deferred)
fffff805`45f00000 fffff805`45f30000 cdrom (deferred)
fffff805`45f40000 fffff805`45f55000 filecrypt (deferred)
fffff805`45f60000 fffff805`45f6e000 tbs (deferred)
fffff805`45f70000 fffff805`45f7a000 Null (deferred)
fffff805`45f80000 fffff805`45f8a000 Beep (deferred)
fffff805`46000000 fffff805`46022000 tdx (deferred)
fffff805`46030000 fffff805`46040000 TDI (deferred)
fffff805`46050000 fffff805`460ac000 netbt (deferred)
fffff805`460b0000 fffff805`460c5000 afunix (deferred)
fffff805`460d0000 fffff805`46175000 afd (deferred)
fffff805`46180000 fffff805`4619a000 vwififlt (deferred)
fffff805`461a0000 fffff805`461cb000 pacer (deferred)
fffff805`461d0000 fffff805`461e4000 ndiscap (deferred)
fffff805`461f0000 fffff805`46204000 netbios (deferred)
fffff805`46210000 fffff805`462b1000 Vid (deferred)
fffff805`462c0000 fffff805`462e1000 winhvr (deferred)
fffff805`462f0000 fffff805`4636c000 rdbss (deferred)
fffff805`46370000 fffff805`46382000 nsiproxy (deferred)
fffff805`46390000 fffff805`4639e000 npsvctrig (deferred)
fffff805`463a0000 fffff805`463b0000 mssmbios (deferred)
fffff805`463c0000 fffff805`463ca000 gpuenergydrv (deferred)
fffff805`463d0000 fffff805`463fc000 dfsc (deferred)
fffff805`46420000 fffff805`4648c000 fastfat (deferred)
fffff805`46490000 fffff805`464a7000 bam (deferred)
fffff805`464b0000 fffff805`464fe000 ahcache (deferred)
fffff805`46500000 fffff805`46512000 CompositeBus (deferred)
fffff805`46520000 fffff805`4652d000 kdnic (deferred)
fffff805`46530000 fffff805`46545000 umbus (deferred)
fffff805`46550000 fffff805`46565000 CAD (deferred)
fffff805`46570000 fffff805`466f7000 HTTP (deferred)
fffff805`46700000 fffff805`467c7000 srv2 (deferred)
fffff805`467d0000 fffff805`468a7000 peauth (deferred)
fffff805`468b0000 fffff805`468d7000 AgileVpn (deferred)
fffff805`46900000 fffff805`46921000 rasl2tp (deferred)
fffff805`46930000 fffff805`46951000 raspptp (deferred)
fffff805`46980000 fffff805`4699c000 raspppoe (deferred)
fffff805`469a0000 fffff805`469da000 ndiswan (deferred)
fffff805`46a70000 fffff805`46a8b000 WdNisDrv (deferred)
fffff805`46ab0000 fffff805`46ac0000 RzDev_024e (deferred)
fffff805`46ad0000 fffff805`46af8000 MpKslDrv (deferred)
fffff805`46f70000 fffff805`47319000 dxgkrnl (deferred)
fffff805`47320000 fffff805`47338000 watchdog (deferred)
fffff805`47340000 fffff805`47356000 BasicDisplay (deferred)
fffff805`47360000 fffff805`47371000 BasicRender (deferred)
fffff805`47380000 fffff805`4739c000 Npfs (deferred)
fffff805`473a0000 fffff805`473b1000 Msfs (deferred)
fffff805`473c0000 fffff805`473dc000 CimFS (deferred)
fffff805`49e00000 fffff805`49f84000 BTHport (deferred)
fffff805`49f90000 fffff805`49fc6000 wcifs (deferred)
fffff805`49fd0000 fffff805`4a051000 cldflt (deferred)
fffff805`4a060000 fffff805`4a087000 bindflt (deferred)
fffff805`4a090000 fffff805`4a0e6000 WUDFRd (deferred)
fffff805`4a0f0000 fffff805`4a108000 mslldp (deferred)
fffff805`4a110000 fffff805`4a12b000 rspndr (deferred)
fffff805`4a130000 fffff805`4a14d000 wanarp (deferred)
fffff805`4a150000 fffff805`4a18d000 rfcomm (deferred)
fffff805`4a190000 fffff805`4a24f000 nwifi (deferred)
fffff805`4a250000 fffff805`4a272000 BthEnum (deferred)
fffff805`4a280000 fffff805`4a298000 ndisuio (deferred)
fffff805`4a2a0000 fffff805`4a2c6000 bthpan (deferred)
fffff805`4a2d0000 fffff805`4a2f1000 Microsoft_Bluetooth_Legacy_LEEnumerator (deferred)
fffff805`4a300000 fffff805`4a30b000 semav6msr64 (deferred)
fffff805`4a320000 fffff805`4a330000 RzDev_0085 (deferred)
fffff805`4a340000 fffff805`4a350000 mouhid (deferred)
fffff805`4a360000 fffff805`4a371000 kbdhid (deferred)
fffff805`4a380000 fffff805`4a390000 RzCommon (deferred)
fffff805`4a3a0000 fffff805`4a3fa000 esif_lf (deferred)
fffff805`4a400000 fffff805`4a456000 msquic (deferred)
fffff805`4a460000 fffff805`4a47a000 mpsdrv (deferred)
fffff805`4a480000 fffff805`4a4a5000 bowser (deferred)
fffff805`4a4b0000 fffff805`4a544000 mrxsmb (deferred)
fffff805`4a550000 fffff805`4a596000 mrxsmb20 (deferred)
fffff805`4a5a0000 fffff805`4cecb000 nvlddmkm (deferred)
fffff805`4ced0000 fffff805`4ceed000 NDProxy (deferred)
fffff805`4cef0000 fffff805`4cf03000 vwifimp (deferred)
fffff805`4cf10000 fffff805`4cf67000 srvnet (deferred)
fffff805`4cf70000 fffff805`4cf97000 Ndu (deferred)
fffff805`4cfa0000 fffff805`4cfb5000 tcpipreg (deferred)
fffff805`4cfc0000 fffff805`4cfd2000 condrv (deferred)
fffff805`4cfe0000 fffff805`4cffc000 rassstp (deferred)
fffff805`4d000000 fffff805`4d09e000 USBXHCI (deferred)
fffff805`4d0a0000 fffff805`4d0e4000 ucx01000 (deferred)
fffff805`4d0f0000 fffff805`4d13c000 TeeDriverW10x64 (deferred)
fffff805`4d140000 fffff805`4d195000 usbvideo (deferred)
fffff805`4d1a0000 fffff805`4d1bb000 monitor (deferred)
fffff805`4d1c0000 fffff805`4d214000 ibtusb (deferred)
fffff805`4d220000 fffff805`4d238000 lltdio (deferred)
fffff805`4d240000 fffff805`4d5c2000 Netwbw02 (deferred)
fffff805`4d5d0000 fffff805`4d5de000 vwifibus (deferred)
fffff805`4d5e0000 fffff805`4d68d000 rt640x64 (deferred)
fffff805`4d690000 fffff805`4d6b1000 i8042prt (deferred)
fffff805`4d6c0000 fffff805`4d783000 SynTP (deferred)
fffff805`4d790000 fffff805`4d79e000 USBD (deferred)
fffff805`4d7a0000 fffff805`4d7b3000 HIDPARSE (deferred)
fffff805`4d7c0000 fffff805`4d7d4000 kbdclass (deferred)
fffff805`4d7e0000 fffff805`4d7f3000 mouclass (deferred)
fffff805`4d800000 fffff805`4d825000 HDAudBus (deferred)
fffff805`4d830000 fffff805`4d896000 portcls (deferred)
fffff805`4d8a0000 fffff805`4d8c1000 drmk (deferred)
fffff805`4d8d0000 fffff805`4d946000 ks (deferred)
fffff805`4d950000 fffff805`4d95f000 Smb_driver_Intel (deferred)
fffff805`4d960000 fffff805`4d96e000 Accelerometer (deferred)
fffff805`4d970000 fffff805`4d97a000 WirelessButtonDriver64 (deferred)
fffff805`4d980000 fffff805`4d98b000 mshidkmdf (deferred)
fffff805`4d990000 fffff805`4d9cf000 HIDCLASS (deferred)
fffff805`4d9d0000 fffff805`4d9dc000 wmiacpi (deferred)
fffff805`4d9e0000 fffff805`4d9ef000 CmBatt (deferred)
fffff805`4d9f0000 fffff805`4da00000 BATTC (deferred)
fffff805`4da10000 fffff805`4da52000 intelppm (deferred)
fffff805`4da60000 fffff805`4da6b000 acpipagr (deferred)
fffff805`4da70000 fffff805`4da91000 BTHUSB (deferred)
fffff805`4daa0000 fffff805`4dad8000 usbaudio (deferred)
fffff805`4dae0000 fffff805`4daf2000 hidusb (deferred)
fffff805`4db00000 fffff805`4db29000 luafv (deferred)
fffff805`4db30000 fffff805`4db3e000 UEFI (deferred)
fffff805`4db40000 fffff805`4db50000 nvvad64v (deferred)
fffff805`4db60000 fffff805`4db6f000 ksthunk (deferred)
fffff805`4db70000 fffff805`4db7d000 NvModuleTracker (deferred)
fffff805`4db80000 fffff805`4db90000 nvvhci (deferred)
fffff805`4dba0000 fffff805`4dbad000 NdisVirtualBus (deferred)
fffff805`4dbb0000 fffff805`4dbbc000 swenum (deferred)
fffff805`4dbc0000 fffff805`4dbce000 rdpbus (deferred)
fffff805`4dbd0000 fffff805`4dc73000 UsbHub3 (deferred)
fffff805`4dc80000 fffff805`4dcef000 HdAudio (deferred)
fffff805`4dcf0000 fffff805`4dd45000 IntcDAud (deferred)
fffff805`4dd50000 fffff805`4dd5b000 iocbios2 (deferred)
fffff805`4dd70000 fffff805`4dd7f000 dump_dumpstorport (deferred)
fffff805`4ddb0000 fffff805`4dddd000 dump_stornvme (deferred)
fffff805`4de00000 fffff805`4de1d000 dump_dumpfve (deferred)
fffff805`4de20000 fffff805`4de53000 usbccgp (deferred)
fffff805`4de60000 fffff805`4df41000 dxgmms2 (deferred)
fffff805`4df50000 fffff805`4df64000 mmcss (deferred)
fffff805`4df70000 fffff805`4df7f000 ndistapi (deferred)
fffff805`4df80000 fffff805`505b1000 igdkmd64 (deferred)
fffff805`505c0000 fffff805`505d3000 dptf_cpu (deferred)
fffff805`505e0000 fffff805`505fa000 storqosflt (deferred)
Unloaded modules:
fffff805`46b00000 fffff805`46b11000 MSKSSRV.sys
fffff805`4a310000 fffff805`4a31c000 bertreader.s
fffff805`46a20000 fffff805`46a49000 MpKslDrv.sys
fffff805`4a300000 fffff805`4a311000 MSKSSRV.sys
fffff805`46a90000 fffff805`46aa1000 RzDev_024e.s
fffff805`4a300000 fffff805`4a311000 RzDev_024e.s
fffff805`4a300000 fffff805`4a311000 RzDev_024e.s
fffff805`4a300000 fffff805`4a311000 MSKSSRV.sys
fffff805`46a50000 fffff805`46a61000 RzDev_024e.s
fffff805`46a00000 fffff805`46a11000 RzDev_024e.s
fffff805`469e0000 fffff805`469f1000 RzDev_024e.s
fffff805`46960000 fffff805`46971000 RzDev_024e.s
fffff805`468e0000 fffff805`468f1000 RzDev_024e.s
fffff805`4ced0000 fffff805`4cee1000 RzDev_024e.s
fffff805`4df50000 fffff805`4df5c000 WdmCompanion
fffff805`44860000 fffff805`44870000 dump_storpor
fffff805`448a0000 fffff805`448ce000 dump_stornvm
fffff805`448f0000 fffff805`4490e000 dump_dumpfve
fffff805`4d140000 fffff805`4d236000 RtsPer.sys
fffff805`4da70000 fffff805`4dacb000 esif_lf.sys
fffff805`4dad0000 fffff805`4db27000 WUDFRd.sys
fffff805`46400000 fffff805`4641c000 dam.sys
fffff805`30cf0000 fffff805`30d01000 WdBoot.sys
fffff805`31d30000 fffff805`31d41000 hwpolicy.sys
