PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffb404b5004092, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff8004e0f0ad3, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for EasyAntiCheat.sys
Could not read faulting driver name
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: Micro-Star International Co., Ltd.
SYSTEM_PRODUCT_NAME: MS-7B78
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 1.82
BIOS_DATE: 03/04/2019
BASEBOARD_MANUFACTURER: Micro-Star International Co., Ltd.
BASEBOARD_PRODUCT: X470 GAMING PRO CARBON AC (MS-7B78)
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: ffffb404b5004092
BUGCHECK_P2: 0
BUGCHECK_P3: fffff8004e0f0ad3
BUGCHECK_P4: 2
READ_ADDRESS: fffff800397733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffffb404b5004092
FAULTING_IP:
EasyAntiCheat+10ad3
fffff800`4e0f0ad3 498b040f mov rax,qword ptr [r15+rcx]
MM_INTERNAL_CODE: 2
CPU_COUNT: c
CPU_MHZ: e10
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: AV
PROCESS_NAME: System
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-BKJR0DQ
ANALYSIS_SESSION_TIME: 03-05-2020 01:06:16.0940
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
TRAP_FRAME: ffff958bb1ed1530 -- (.trap 0xffff958bb1ed1530)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffb404b080ca9e rbx=0000000000000000 rcx=ffffb404b4f80010
rdx=ffffb404b0790108 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8004e0f0ad3 rsp=ffff958bb1ed16c0 rbp=ffffb404b081664c
r8=ffffb404b07902b0 r9=0000000000000004 r10=0000000000084082
r11=0000000000000008 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
EasyAntiCheat+0x10ad3:
fffff800`4e0f0ad3 498b040f mov rax,qword ptr [r15+rcx] ds:ffffb404`b4f80010=0000000300905a4d
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800393e36d6 to fffff800393c1510
STACK_TEXT:
ffff958b`b1ed1288 fffff800`393e36d6 : 00000000`00000050 ffffb404`b5004092 00000000`00000000 ffff958b`b1ed1530 : nt!KeBugCheckEx
ffff958b`b1ed1290 fffff800`39272eef : 89000004`1a555121 00000000`00000000 00000000`00000000 ffffb404`b5004092 : nt!MiSystemFault+0x1d6966
ffff958b`b1ed1390 fffff800`393cf620 : 00000000`00000200 00000000`00001010 ffffb404`b080ca92 00000000`6d4d6956 : nt!MmAccessFault+0x34f
ffff958b`b1ed1530 fffff800`4e0f0ad3 : ffffb404`b0816640 ffff958b`b1ed1790 ffffb404`c04c5010 fffff800`4e0e1786 : nt!KiPageFault+0x360
ffff958b`b1ed16c0 ffffb404`b0816640 : ffff958b`b1ed1790 ffffb404`c04c5010 fffff800`4e0e1786 e9000000`00158b4c : EasyAntiCheat+0x10ad3
ffff958b`b1ed16c8 ffff958b`b1ed1790 : ffffb404`c04c5010 fffff800`4e0e1786 e9000000`00158b4c 00000000`00000000 : 0xffffb404`b0816640
ffff958b`b1ed16d0 ffffb404`c04c5010 : fffff800`4e0e1786 e9000000`00158b4c 00000000`00000000 fffff800`46f80000 : 0xffff958b`b1ed1790
ffff958b`b1ed16d8 fffff800`4e0e1786 : e9000000`00158b4c 00000000`00000000 fffff800`46f80000 ffffb404`b0790108 : 0xffffb404`c04c5010
ffff958b`b1ed16e0 e9000000`00158b4c : 00000000`00000000 fffff800`46f80000 ffffb404`b0790108 ffffb404`b4f80010 : EasyAntiCheat+0x1786
ffff958b`b1ed16e8 00000000`00000000 : fffff800`46f80000 ffffb404`b0790108 ffffb404`b4f80010 00000000`0008f300 : 0xe9000000`00158b4c
THREAD_SHA1_HASH_MOD_FUNC: 2ad2d9537c0d2da15a6d5bc902acd8c21ab45880
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 5f6d1416beebe2b4734d962d9bae96589c4f8744
THREAD_SHA1_HASH_MOD: 723373285e12aec1ab30a3b0fa87ccfc4713fa18
FOLLOWUP_IP:
EasyAntiCheat+10ad3
fffff800`4e0f0ad3 498b040f mov rax,qword ptr [r15+rcx]
FAULT_INSTR_CODE: f048b49
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: EasyAntiCheat+10ad3
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: EasyAntiCheat
IMAGE_NAME: EasyAntiCheat.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5e4fb0f2
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 10ad3
FAILURE_BUCKET_ID: AV_R_INVALID_EasyAntiCheat!unknown_function
BUCKET_ID: AV_R_INVALID_EasyAntiCheat!unknown_function
PRIMARY_PROBLEM_CLASS: AV_R_INVALID_EasyAntiCheat!unknown_function
TARGET_TIME: 2020-03-04T21:34:55.000Z
OSBUILD: 18362
OSSERVICEPACK: 657
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2005-04-23 04:40:32
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: c8c9
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:av_r_invalid_easyanticheat!unknown_function
FAILURE_ID_HASH: {f6ede2b0-861b-18d9-fc1e-6b7045c30fcc}
Followup: MachineOwner
---------