*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8020bb654af, Address of the instruction which caused the bugcheck
Arg3: fffffa03228df040, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 17763.1.amd64fre.rs5_release.180914-1434
SYSTEM_MANUFACTURER: Gigabyte Technology Co., Ltd.
SYSTEM_PRODUCT_NAME: GA-890GPA-UD3H
BIOS_VENDOR: Award Software International, Inc.
BIOS_VERSION: F9
BIOS_DATE: 09/09/2011
BASEBOARD_MANUFACTURER: Gigabyte Technology Co., Ltd.
BASEBOARD_PRODUCT: GA-890GPA-UD3H
BASEBOARD_VERSION: x.x
DUMP_TYPE: 2
BUGCHECK_P1: c0000005
BUGCHECK_P2: fffff8020bb654af
BUGCHECK_P3: fffffa03228df040
BUGCHECK_P4: 0
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!KiSwapThread+10f
fffff802`0bb654af 498b0cc0 mov rcx,qword ptr [r8+rax*8]
CONTEXT: fffffa03228df040 -- (.cxr 0xfffffa03228df040)
rax=0000000000000006 rbx=ffffe08ed19c3080 rcx=0000000000000064
rdx=0000000000000003 rsi=0000000000000020 rdi=ffffba01cb200180
rip=fffff8020bb654af rsp=fffffa03228dfa30 rbp=000000000000662f
r8=00ffe08ed19c3890 r9=0000000000000003 r10=0000000000000000
r11=fffff8020babd000 r12=0000000000000001 r13=ffffe08ed19c3180
r14=0000000000000002 r15=0000000000000000
iopl=0 nv up di pl nz ac pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010012
nt!KiSwapThread+0x10f:
fffff802`0bb654af 498b0cc0 mov rcx,qword ptr [r8+rax*8] ds:002b:00ffe08e`d19c38c0=????????????????
Resetting default scope
BUGCHECK_STR: 0x3B_c0000005
CPU_COUNT: 4
CPU_MHZ: c8e
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 10
CPU_MODEL: 4
CPU_STEPPING: 3
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXPNP: 1 (!blackboxpnp)
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: KnightOnline.exe
CURRENT_IRQL: 2
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 11-24-2019 17:50:46.0715
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff8020bb65168 to fffff8020bb654af
STACK_TEXT:
fffffa03`228dfa30 fffff802`0bb65168 : ffffe08e`d19c3080 fffff802`00000000 00000000`004a3cec 00000000`00da7a00 : nt!KiSwapThread+0x10f
fffffa03`228dfaf0 fffff802`0bb5c9b0 : ffffe08e`d19c3001 ffffe08e`00000000 fffffa03`00000002 00000008`7c6c954c : nt!KiCommitThreadWait+0x508
fffffa03`228dfb90 fffff802`0c109d8f : ffffe08e`d19c3080 00000000`00314000 fffffa03`228dfc50 00000000`00000002 : nt!KeDelayExecutionThread+0x530
fffffa03`228dfc10 fffff802`0bc84c05 : ffffe08e`d19c3080 fffffa03`228dfcc0 ffffffff`fffe7960 ffffe08e`d4da2fe0 : nt!NtDelayExecution+0x5f
fffffa03`228dfc40 00000000`77dc1cbc : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
00000000`0da1f308 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77dc1cbc
THREAD_SHA1_HASH_MOD_FUNC: ce6339189036975630907fea39abceb5905af8d5
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: aa0df8a731601ca7401d8dadb2bfb433ab6e634d
THREAD_SHA1_HASH_MOD: f08ac56120cad14894587db086f77ce277bfae84
FOLLOWUP_IP:
nt!KiSwapThread+10f
fffff802`0bb654af 498b0cc0 mov rcx,qword ptr [r8+rax*8]
FAULT_INSTR_CODE: c00c8b49
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!KiSwapThread+10f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
IMAGE_VERSION: 10.0.17763.864
STACK_COMMAND: .cxr 0xfffffa03228df040 ; kb
BUCKET_ID_FUNC_OFFSET: 10f
FAILURE_BUCKET_ID: 0x3B_c0000005_nt!KiSwapThread
BUCKET_ID: 0x3B_c0000005_nt!KiSwapThread
PRIMARY_PROBLEM_CLASS: 0x3B_c0000005_nt!KiSwapThread
TARGET_TIME: 2019-11-24T12:46:03.000Z
OSBUILD: 17763
OSSERVICEPACK: 864
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: unknown_date
BUILDDATESTAMP_STR: 180914-1434
BUILDLAB_STR: rs5_release
BUILDOSVER_STR: 10.0.17763.1.amd64fre.rs5_release.180914-1434
ANALYSIS_SESSION_ELAPSED_TIME: 72e4
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x3b_c0000005_nt!kiswapthread
FAILURE_ID_HASH: {84555688-391b-94c0-6e71-1aa9cc17aed7}
Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80374d07024, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 17763.1.amd64fre.rs5_release.180914-1434
SYSTEM_MANUFACTURER: Gigabyte Technology Co., Ltd.
SYSTEM_PRODUCT_NAME: GA-890GPA-UD3H
BIOS_VENDOR: Award Software International, Inc.
BIOS_VERSION: F9
BIOS_DATE: 09/09/2011
BASEBOARD_MANUFACTURER: Gigabyte Technology Co., Ltd.
BASEBOARD_PRODUCT: GA-890GPA-UD3H
BASEBOARD_VERSION: x.x
DUMP_TYPE: 2
BUGCHECK_P1: ffffffffc0000005
BUGCHECK_P2: fffff80374d07024
BUGCHECK_P3: 0
BUGCHECK_P4: ffffffffffffffff
READ_ADDRESS: GetUlongFromAddress: unable to read from fffff803750df540
fffff8037515a390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffffffffffffffff
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!KiTimerWaitTest+434
fffff803`74d07024 0fb601 movzx eax,byte ptr [rcx]
EXCEPTION_PARAMETER2: ffffffffffffffff
BUGCHECK_STR: 0x1E_c0000005_R
CPU_COUNT: 4
CPU_MHZ: c8e
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 10
CPU_MODEL: 4
CPU_STEPPING: 3
BLACKBOXBSD: 1 (!blackboxbsd)
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 2
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 11-24-2019 17:50:50.0688
ANALYSIS_VERSION: 10.0.18362.1 x86fre
EXCEPTION_RECORD: ffffc70d2af40030 -- (.exr 0xffffc70d2af40030)
ExceptionAddress: 0000000000000000
ExceptionCode: 16f80003
ExceptionFlags: 00000000
NumberParameters: 0
TRAP_FRAME: fffff80300004800 -- (.trap 0xfffff80300004800)
Unable to read trap frame at fffff803`00004800
LAST_CONTROL_TRANSFER: from fffff80374ea5cee to fffff80374dd09c0
STACK_TEXT:
fffff803`77063818 fffff803`74ea5cee : 00000000`0000001e ffffffff`c0000005 fffff803`74d07024 00000000`00000000 : nt!KeBugCheckEx
fffff803`77063820 fffff803`74dd94cf : fffff803`750fb000 fffff803`74c1a000 0005b9a4`00a6e000 00000000`0010001f : nt!KiFatalExceptionHandler+0x22
fffff803`77063860 fffff803`74d3fb40 : fffff803`77063eb0 00000000`00000000 fffff803`77063dd0 00000000`00000000 : nt!RtlpExecuteHandlerForException+0xf
fffff803`77063890 fffff803`74c5a344 : fffff803`770647c8 fffff803`77064510 fffff803`770647c8 ffffc70d`31881080 : nt!RtlDispatchException+0x430
fffff803`77063fe0 fffff803`74de22c2 : ffffc70d`2af40030 fffff803`770646d9 fffff803`00004800 00000000`0000000f : nt!KiDispatchException+0x144
fffff803`77064690 fffff803`74dde14b : ffffc70d`2a72f050 00000000`00000000 ffffffff`ffffffd1 fffff802`4514cb02 : nt!KiExceptionDispatch+0xc2
fffff803`77064870 fffff803`74d07024 : 00000000`00000000 ffffc70d`31e55000 fffff803`738a2180 fffff802`45144dd6 : nt!KiGeneralProtectionFault+0x30b
fffff803`77064a00 fffff803`74d06955 : fffff803`75178400 00000000`000000ff fffff803`77064c58 00000000`00000008 : nt!KiTimerWaitTest+0x434
fffff803`77064aa0 fffff803`74d07947 : 00000000`00000014 00000000`00da7a64 fffff803`75178400 00000000`00000019 : nt!KiProcessExpiredTimerList+0xb5
fffff803`77064b90 fffff803`74dd43ea : 00000000`00000000 fffff803`738a2180 00000000`00000000 fffff803`75178400 : nt!KiRetireDpcList+0x4a7
fffff803`77064da0 00000000`00000000 : fffff803`77065000 fffff803`7705f000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x5a
THREAD_SHA1_HASH_MOD_FUNC: fb0c6f85f4c78de1bdfcfc45b2e86ed9be95905d
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: bd8f7f76858635a055640837f9a4df56ec249e58
THREAD_SHA1_HASH_MOD: b28610981796779b4ac02f58898fde25728a775c
FOLLOWUP_IP:
nt!KiTimerWaitTest+434
fffff803`74d07024 0fb601 movzx eax,byte ptr [rcx]
FAULT_INSTR_CODE: 2401b60f
SYMBOL_STACK_INDEX: 7
SYMBOL_NAME: nt!KiTimerWaitTest+434
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
IMAGE_VERSION: 10.0.17763.864
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 434
FAILURE_BUCKET_ID: 0x1E_c0000005_R_nt!KiTimerWaitTest
BUCKET_ID: 0x1E_c0000005_R_nt!KiTimerWaitTest
PRIMARY_PROBLEM_CLASS: 0x1E_c0000005_R_nt!KiTimerWaitTest
TARGET_TIME: 2019-11-24T13:43:00.000Z
OSBUILD: 17763
OSSERVICEPACK: 864
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: unknown_date
BUILDDATESTAMP_STR: 180914-1434
BUILDLAB_STR: rs5_release
BUILDOSVER_STR: 10.0.17763.1.amd64fre.rs5_release.180914-1434
ANALYSIS_SESSION_ELAPSED_TIME: 8a72
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x1e_c0000005_r_nt!kitimerwaittest
FAILURE_ID_HASH: {60392e1e-177d-1e45-9fd7-b743dcff84fd}
Followup: MachineOwner
---------