PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffe107351038ff, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff8064c5f9599, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for ArcCtrl.sys
Could not read faulting driver name
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
DUMP_TYPE: 2
BUGCHECK_P1: ffffe107351038ff
BUGCHECK_P2: 0
BUGCHECK_P3: fffff8064c5f9599
BUGCHECK_P4: 2
READ_ADDRESS: fffff8063fd733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffffe107351038ff
FAULTING_IP:
ArcCtrl+9599
fffff806`4c5f9599 48833800 cmp qword ptr [rax],0
MM_INTERNAL_CODE: 2
CPU_COUNT: c
CPU_MHZ: d42
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXNTFS: 1 (!blackboxntfs)
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: AV
PROCESS_NAME: System
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-24-2020 12:33:35.0202
ANALYSIS_VERSION: 10.0.18362.1 x86fre
TRAP_FRAME: ffffca8c3a206220 -- (.trap 0xffffca8c3a206220)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffe107351038ff rbx=0000000000000000 rcx=000000005706e800
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8064c5f9599 rsp=ffffca8c3a2063b0 rbp=ffffca8c3a206a30
r8=ffffe106dd60010c r9=ffffa3f0836f2b80 r10=ffffe106de5707a7
r11=ffffa3d1e8f47000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
ArcCtrl+0x9599:
fffff806`4c5f9599 48833800 cmp qword ptr [rax],0 ds:ffffe107`351038ff=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff8063f9e36d6 to fffff8063f9c1510
STACK_TEXT:
ffffca8c`3a205f78 fffff806`3f9e36d6 : 00000000`00000050 ffffe107`351038ff 00000000`00000000 ffffca8c`3a206220 : nt!KeBugCheckEx
ffffca8c`3a205f80 fffff806`3f872eef : 00000000`00ab6000 00000000`00000000 00000000`00000000 ffffe107`351038ff : nt!MiSystemFault+0x1d6966
ffffca8c`3a206080 fffff806`3f9cf620 : 00000000`00000000 00000000`00000000 ffffffff`8000016c ffffe106`d6e00000 : nt!MmAccessFault+0x34f
ffffca8c`3a206220 fffff806`4c5f9599 : 00000000`00000001 00000000`00000002 ffffffff`0000022b ffffe106`de000108 : nt!KiPageFault+0x360
ffffca8c`3a2063b0 00000000`00000001 : 00000000`00000002 ffffffff`0000022b ffffe106`de000108 ffffe106`de000108 : ArcCtrl+0x9599
ffffca8c`3a2063b8 00000000`00000002 : ffffffff`0000022b ffffe106`de000108 ffffe106`de000108 ffffe106`de000198 : 0x1
ffffca8c`3a2063c0 ffffffff`0000022b : ffffe106`de000108 ffffe106`de000108 ffffe106`de000198 ffffe106`00000001 : 0x2
ffffca8c`3a2063c8 ffffe106`de000108 : ffffe106`de000108 ffffe106`de000198 ffffe106`00000001 ffffe106`de5707a7 : 0xffffffff`0000022b
ffffca8c`3a2063d0 ffffe106`de000108 : ffffe106`de000198 ffffe106`00000001 ffffe106`de5707a7 ffffe107`3506e800 : 0xffffe106`de000108
ffffca8c`3a2063d8 ffffe106`de000198 : ffffe106`00000001 ffffe106`de5707a7 ffffe107`3506e800 ffffe107`351038ff : 0xffffe106`de000108
ffffca8c`3a2063e0 ffffe106`00000001 : ffffe106`de5707a7 ffffe107`3506e800 ffffe107`351038ff ffffe106`00000000 : 0xffffe106`de000198
ffffca8c`3a2063e8 ffffe106`de5707a7 : ffffe107`3506e800 ffffe107`351038ff ffffe106`00000000 fffff804`ff800000 : 0xffffe106`00000001
ffffca8c`3a2063f0 ffffe107`3506e800 : ffffe107`351038ff ffffe106`00000000 fffff804`ff800000 ffffe106`de00000c : 0xffffe106`de5707a7
ffffca8c`3a2063f8 ffffe107`351038ff : ffffe106`00000000 fffff804`ff800000 ffffe106`de00000c 65da0000`00000000 : 0xffffe107`3506e800
ffffca8c`3a206400 ffffe106`00000000 : fffff804`ff800000 ffffe106`de00000c 65da0000`00000000 ffffe106`00000000 : 0xffffe107`351038ff
ffffca8c`3a206408 fffff804`ff800000 : ffffe106`de00000c 65da0000`00000000 ffffe106`00000000 ffffe106`de000001 : 0xffffe106`00000000
ffffca8c`3a206410 ffffe106`de00000c : 65da0000`00000000 ffffe106`00000000 ffffe106`de000001 fffff805`f8a7007f : 0xfffff804`ff800000
ffffca8c`3a206418 65da0000`00000000 : ffffe106`00000000 ffffe106`de000001 fffff805`f8a7007f ffffe106`dd600648 : 0xffffe106`de00000c
ffffca8c`3a206420 ffffe106`00000000 : ffffe106`de000001 fffff805`f8a7007f ffffe106`dd600648 ffffe106`de000000 : 0x65da0000`00000000
ffffca8c`3a206428 ffffe106`de000001 : fffff805`f8a7007f ffffe106`dd600648 ffffe106`de000000 ffffe106`de000648 : 0xffffe106`00000000
ffffca8c`3a206430 fffff805`f8a7007f : ffffe106`dd600648 ffffe106`de000000 ffffe106`de000648 ffffe106`dd600648 : 0xffffe106`de000001
ffffca8c`3a206438 ffffe106`dd600648 : ffffe106`de000000 ffffe106`de000648 ffffe106`dd600648 fffff806`4c5f7cb3 : 0xfffff805`f8a7007f
ffffca8c`3a206440 ffffe106`de000000 : ffffe106`de000648 ffffe106`dd600648 fffff806`4c5f7cb3 ffffe106`de000000 : 0xffffe106`dd600648
ffffca8c`3a206448 ffffe106`de000648 : ffffe106`dd600648 fffff806`4c5f7cb3 ffffe106`de000000 fffff804`ff800000 : 0xffffe106`de000000
ffffca8c`3a206450 ffffe106`dd600648 : fffff806`4c5f7cb3 ffffe106`de000000 fffff804`ff800000 ffffe106`dd60010c : 0xffffe106`de000648
ffffca8c`3a206458 fffff806`4c5f7cb3 : ffffe106`de000000 fffff804`ff800000 ffffe106`dd60010c ffffe106`dd600120 : 0xffffe106`dd600648
ffffca8c`3a206460 ffffe106`de000000 : fffff804`ff800000 ffffe106`dd60010c ffffe106`dd600120 ffffe106`dd600210 : ArcCtrl+0x7cb3
ffffca8c`3a206468 fffff804`ff800000 : ffffe106`dd60010c ffffe106`dd600120 ffffe106`dd600210 ffffe106`d6d6af80 : 0xffffe106`de000000
ffffca8c`3a206470 ffffe106`dd60010c : ffffe106`dd600120 ffffe106`dd600210 ffffe106`d6d6af80 000000e8`00000074 : 0xfffff804`ff800000
ffffca8c`3a206478 ffffe106`dd600120 : ffffe106`dd600210 ffffe106`d6d6af80 000000e8`00000074 fffff806`00000074 : 0xffffe106`dd60010c
ffffca8c`3a206480 ffffe106`dd600210 : ffffe106`d6d6af80 000000e8`00000074 fffff806`00000074 00000000`00000000 : 0xffffe106`dd600120
ffffca8c`3a206488 ffffe106`d6d6af80 : 000000e8`00000074 fffff806`00000074 00000000`00000000 00000000`00000000 : 0xffffe106`dd600210
ffffca8c`3a206490 000000e8`00000074 : fffff806`00000074 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffffe106`d6d6af80
ffffca8c`3a206498 fffff806`00000074 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000000e8`00000074
ffffca8c`3a2064a0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffe106`dd60010c : 0xfffff806`00000074
THREAD_SHA1_HASH_MOD_FUNC: cead369e8f528b3bd290a9304ec720dd5545d95d
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: d2d5cbb9106eeefb7497cc6e5b420fed8c8aeb98
THREAD_SHA1_HASH_MOD: 94446152aa936f5afd745fec05a71354656754e6
FOLLOWUP_IP:
ArcCtrl+9599
fffff806`4c5f9599 48833800 cmp qword ptr [rax],0
FAULT_INSTR_CODE: 388348
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: ArcCtrl+9599
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: ArcCtrl
IMAGE_NAME: ArcCtrl.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 521460b2
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 9599
FAILURE_BUCKET_ID: AV_R_INVALID_ArcCtrl!unknown_function
BUCKET_ID: AV_R_INVALID_ArcCtrl!unknown_function
PRIMARY_PROBLEM_CLASS: AV_R_INVALID_ArcCtrl!unknown_function
TARGET_TIME: 2020-02-23T19:11:52.000Z
OSBUILD: 18362
OSSERVICEPACK: 657
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2005-04-23 04:40:32
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 5700
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:av_r_invalid_arcctrl!unknown_function
FAILURE_ID_HASH: {aead8557-8f52-afb1-5a9c-58d66f53feb2}
Followup: MachineOwner
---------
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8024169bdd5, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 000000000000850f, Parameter 1 of the exception
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for ArcCtrl.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
DUMP_TYPE: 2
BUGCHECK_P1: ffffffffc0000005
BUGCHECK_P2: fffff8024169bdd5
BUGCHECK_P3: 0
BUGCHECK_P4: 850f
READ_ADDRESS: fffff80241b733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
000000000000850f
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!RtlInitAnsiString+15
fffff802`4169bdd5 803c0200 cmp byte ptr [rdx+rax],0
EXCEPTION_PARAMETER2: 000000000000850f
BUGCHECK_STR: 0x1E_c0000005_R
CPU_COUNT: c
CPU_MHZ: d42
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXNTFS: 1 (!blackboxntfs)
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-24-2020 12:33:30.0957
ANALYSIS_VERSION: 10.0.18362.1 x86fre
EXCEPTION_RECORD: fffffdfeff7fb000 -- (.exr 0xfffffdfeff7fb000)
ExceptionAddress: 0000000000000000
ExceptionCode: 04104867
ExceptionFlags: 8a000002
NumberParameters: 0
TRAP_FRAME: ffff800000000000 -- (.trap 0xffff800000000000)
Unable to read trap frame at ffff8000`00000000
LAST_CONTROL_TRANSFER: from fffff8024182fea7 to fffff802417c1510
STACK_TEXT:
ffff810f`c2205978 fffff802`4182fea7 : 00000000`0000001e ffffffff`c0000005 fffff802`4169bdd5 00000000`00000000 : nt!KeBugCheckEx
ffff810f`c2205980 fffff802`417d351d : fffffdfe`ff7fb000 ffff810f`c2206210 ffff8000`00000000 00000000`0000850f : nt!KiDispatchException+0x168b67
ffff810f`c2206030 fffff802`417cf705 : ffff8984`b0cf4490 00000000`00000002 ffffffff`8000016c ffffc708`ec7c9cd0 : nt!KiExceptionDispatch+0x11d
ffff810f`c2206210 fffff802`4169bdd5 : fffff802`4f1895d7 00000000`00000001 00000000`00000002 ffffffff`0000022b : nt!KiPageFault+0x445
ffff810f`c22063a8 fffff802`4f1895d7 : 00000000`00000001 00000000`00000002 ffffffff`0000022b ffffc708`ec600108 : nt!RtlInitAnsiString+0x15
ffff810f`c22063b0 00000000`00000001 : 00000000`00000002 ffffffff`0000022b ffffc708`ec600108 ffffc708`ec600108 : ArcCtrl+0x95d7
ffff810f`c22063b8 00000000`00000002 : ffffffff`0000022b ffffc708`ec600108 ffffc708`ec600108 ffffc708`ec600198 : 0x1
ffff810f`c22063c0 ffffffff`0000022b : ffffc708`ec600108 ffffc708`ec600108 ffffc708`ec600198 ffffc708`00000001 : 0x2
ffff810f`c22063c8 ffffc708`ec600108 : ffffc708`ec600108 ffffc708`ec600198 ffffc708`00000001 ffffc708`ecb707a9 : 0xffffffff`0000022b
ffff810f`c22063d0 ffffc708`ec600108 : ffffc708`ec600198 ffffc708`00000001 ffffc708`ecb707a9 ffffc709`54605706 : 0xffffc708`ec600108
ffff810f`c22063d8 ffffc708`ec600198 : ffffc708`00000001 ffffc708`ecb707a9 ffffc709`54605706 ffffc708`ec605710 : 0xffffc708`ec600108
ffff810f`c22063e0 ffffc708`00000001 : ffffc708`ecb707a9 ffffc709`54605706 ffffc708`ec605710 00000000`00000010 : 0xffffc708`ec600198
ffff810f`c22063e8 ffffc708`ecb707a9 : ffffc709`54605706 ffffc708`ec605710 00000000`00000010 fffff801`01600000 : 0xffffc708`00000001
ffff810f`c22063f0 ffffc709`54605706 : ffffc708`ec605710 00000000`00000010 fffff801`01600000 00000000`00000000 : 0xffffc708`ecb707a9
ffff810f`c22063f8 ffffc708`ec605710 : 00000000`00000010 fffff801`01600000 00000000`00000000 00000000`0000850f : 0xffffc709`54605706
ffff810f`c2206400 00000000`00000010 : fffff801`01600000 00000000`00000000 00000000`0000850f ffffc708`00000000 : 0xffffc708`ec605710
ffff810f`c2206408 fffff801`01600000 : 00000000`00000000 00000000`0000850f ffffc708`00000000 ffffc708`ec600001 : 0x10
ffff810f`c2206410 00000000`00000000 : 00000000`0000850f ffffc708`00000000 ffffc708`ec600001 fffff801`9567007f : 0xfffff801`01600000
THREAD_SHA1_HASH_MOD_FUNC: a889f6a26dad1686261061dd90f5ba2f965d9356
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: c5862728e49d9710fbd831ff914f88adb62e145c
THREAD_SHA1_HASH_MOD: 29bd8403488a0f8e4f5fa3e242612f60f4c88bdc
FOLLOWUP_IP:
ArcCtrl+95d7
fffff802`4f1895d7 48837c246800 cmp qword ptr [rsp+68h],0
FAULT_INSTR_CODE: 247c8348
SYMBOL_STACK_INDEX: 5
SYMBOL_NAME: ArcCtrl+95d7
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: ArcCtrl
IMAGE_NAME: ArcCtrl.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 521460b2
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 95d7
FAILURE_BUCKET_ID: 0x1E_c0000005_R_ArcCtrl!unknown_function
BUCKET_ID: 0x1E_c0000005_R_ArcCtrl!unknown_function
PRIMARY_PROBLEM_CLASS: 0x1E_c0000005_R_ArcCtrl!unknown_function
TARGET_TIME: 2020-02-20T16:34:51.000Z
OSBUILD: 18362
OSSERVICEPACK: 657
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2005-04-23 04:40:32
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 4494
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x1e_c0000005_r_arcctrl!unknown_function
FAILURE_ID_HASH: {5ad98015-77b9-033a-a849-c8e3ead9c471}
Followup: MachineOwner
---------
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffff8d0f2fa0ffff, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff801437b9599, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for ArcCtrl.sys
Could not read faulting driver name
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
DUMP_TYPE: 2
BUGCHECK_P1: ffff8d0f2fa0ffff
BUGCHECK_P2: 0
BUGCHECK_P3: fffff801437b9599
BUGCHECK_P4: 2
READ_ADDRESS: fffff801371733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffff8d0f2fa0ffff
FAULTING_IP:
ArcCtrl+9599
fffff801`437b9599 48833800 cmp qword ptr [rax],0
MM_INTERNAL_CODE: 2
CPU_COUNT: c
CPU_MHZ: d42
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXNTFS: 1 (!blackboxntfs)
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: AV
PROCESS_NAME: System
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-24-2020 12:33:26.0605
ANALYSIS_VERSION: 10.0.18362.1 x86fre
TRAP_FRAME: ffffd48113606220 -- (.trap 0xffffd48113606220)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff8d0f2fa0ffff rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff801437b9599 rsp=ffffd481136063b0 rbp=ffffd48113606a30
r8=ffff8d0e5740010c r9=ffff8346872c1b80 r10=ffff8d0e5837079e
r11=ffff8341a0d06000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
ArcCtrl+0x9599:
fffff801`437b9599 48833800 cmp qword ptr [rax],0 ds:ffff8d0f`2fa0ffff=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80136de36d6 to fffff80136dc1510
STACK_TEXT:
ffffd481`13605f78 fffff801`36de36d6 : 00000000`00000050 ffff8d0f`2fa0ffff 00000000`00000000 ffffd481`13606220 : nt!KeBugCheckEx
ffffd481`13605f80 fffff801`36c72eef : 00000000`00ab6000 00000000`00000000 00000000`00000000 ffff8d0f`2fa0ffff : nt!MiSystemFault+0x1d6966
ffffd481`13606080 fffff801`36dcf620 : 00000000`00000000 00000000`00000000 ffffffff`8000016c ffff8d0e`50c00000 : nt!MmAccessFault+0x34f
ffffd481`13606220 fffff801`437b9599 : 00000000`00000001 00000000`00000002 ffffffff`0000022b ffff8d0e`57e00108 : nt!KiPageFault+0x360
ffffd481`136063b0 00000000`00000001 : 00000000`00000002 ffffffff`0000022b ffff8d0e`57e00108 ffff8d0e`57e00108 : ArcCtrl+0x9599
ffffd481`136063b8 00000000`00000002 : ffffffff`0000022b ffff8d0e`57e00108 ffff8d0e`57e00108 ffff8d0e`57e00198 : 0x1
ffffd481`136063c0 ffffffff`0000022b : ffff8d0e`57e00108 ffff8d0e`57e00108 ffff8d0e`57e00198 ffff8d0e`00000001 : 0x2
ffffd481`136063c8 ffff8d0e`57e00108 : ffff8d0e`57e00108 ffff8d0e`57e00198 ffff8d0e`00000001 ffff8d0e`5837079e : 0xffffffff`0000022b
ffffd481`136063d0 ffff8d0e`57e00108 : ffff8d0e`57e00198 ffff8d0e`00000001 ffff8d0e`5837079e ffff8d0e`57e00000 : 0xffff8d0e`57e00108
ffffd481`136063d8 ffff8d0e`57e00198 : ffff8d0e`00000001 ffff8d0e`5837079e ffff8d0e`57e00000 ffff8d0f`2fa0ffff : 0xffff8d0e`57e00108
ffffd481`136063e0 ffff8d0e`00000001 : ffff8d0e`5837079e ffff8d0e`57e00000 ffff8d0f`2fa0ffff ffff8d0e`00000000 : 0xffff8d0e`57e00198
ffffd481`136063e8 ffff8d0e`5837079e : ffff8d0e`57e00000 ffff8d0f`2fa0ffff ffff8d0e`00000000 fffff7ff`f6c00000 : 0xffff8d0e`00000001
ffffd481`136063f0 ffff8d0e`57e00000 : ffff8d0f`2fa0ffff ffff8d0e`00000000 fffff7ff`f6c00000 ffff8d0e`57e0000c : 0xffff8d0e`5837079e
ffffd481`136063f8 ffff8d0f`2fa0ffff : ffff8d0e`00000000 fffff7ff`f6c00000 ffff8d0e`57e0000c 7e1a0000`00000000 : 0xffff8d0e`57e00000
ffffd481`13606400 ffff8d0e`00000000 : fffff7ff`f6c00000 ffff8d0e`57e0000c 7e1a0000`00000000 ffff8d0e`00000000 : 0xffff8d0f`2fa0ffff
ffffd481`13606408 fffff7ff`f6c00000 : ffff8d0e`57e0000c 7e1a0000`00000000 ffff8d0e`00000000 ffff8d0e`57e00001 : 0xffff8d0e`00000000
ffffd481`13606410 ffff8d0e`57e0000c : 7e1a0000`00000000 ffff8d0e`00000000 ffff8d0e`57e00001 fffff800`0da7007f : 0xfffff7ff`f6c00000
ffffd481`13606418 7e1a0000`00000000 : ffff8d0e`00000000 ffff8d0e`57e00001 fffff800`0da7007f ffff8d0e`57400648 : 0xffff8d0e`57e0000c
ffffd481`13606420 ffff8d0e`00000000 : ffff8d0e`57e00001 fffff800`0da7007f ffff8d0e`57400648 ffff8d0e`57e00000 : 0x7e1a0000`00000000
ffffd481`13606428 ffff8d0e`57e00001 : fffff800`0da7007f ffff8d0e`57400648 ffff8d0e`57e00000 ffff8d0e`57e00648 : 0xffff8d0e`00000000
ffffd481`13606430 fffff800`0da7007f : ffff8d0e`57400648 ffff8d0e`57e00000 ffff8d0e`57e00648 ffff8d0e`57400648 : 0xffff8d0e`57e00001
ffffd481`13606438 ffff8d0e`57400648 : ffff8d0e`57e00000 ffff8d0e`57e00648 ffff8d0e`57400648 fffff801`437b7cb3 : 0xfffff800`0da7007f
ffffd481`13606440 ffff8d0e`57e00000 : ffff8d0e`57e00648 ffff8d0e`57400648 fffff801`437b7cb3 ffff8d0e`57e00000 : 0xffff8d0e`57400648
ffffd481`13606448 ffff8d0e`57e00648 : ffff8d0e`57400648 fffff801`437b7cb3 ffff8d0e`57e00000 fffff7ff`f6c00000 : 0xffff8d0e`57e00000
ffffd481`13606450 ffff8d0e`57400648 : fffff801`437b7cb3 ffff8d0e`57e00000 fffff7ff`f6c00000 ffff8d0e`5740010c : 0xffff8d0e`57e00648
ffffd481`13606458 fffff801`437b7cb3 : ffff8d0e`57e00000 fffff7ff`f6c00000 ffff8d0e`5740010c ffff8d0e`57400120 : 0xffff8d0e`57400648
ffffd481`13606460 ffff8d0e`57e00000 : fffff7ff`f6c00000 ffff8d0e`5740010c ffff8d0e`57400120 ffff8d0e`57400210 : ArcCtrl+0x7cb3
ffffd481`13606468 fffff7ff`f6c00000 : ffff8d0e`5740010c ffff8d0e`57400120 ffff8d0e`57400210 ffff8d0e`50b0ef80 : 0xffff8d0e`57e00000
ffffd481`13606470 ffff8d0e`5740010c : ffff8d0e`57400120 ffff8d0e`57400210 ffff8d0e`50b0ef80 000000e8`00000074 : 0xfffff7ff`f6c00000
ffffd481`13606478 ffff8d0e`57400120 : ffff8d0e`57400210 ffff8d0e`50b0ef80 000000e8`00000074 fffff801`00000074 : 0xffff8d0e`5740010c
ffffd481`13606480 ffff8d0e`57400210 : ffff8d0e`50b0ef80 000000e8`00000074 fffff801`00000074 00000000`00000000 : 0xffff8d0e`57400120
ffffd481`13606488 ffff8d0e`50b0ef80 : 000000e8`00000074 fffff801`00000074 00000000`00000000 00000000`00000000 : 0xffff8d0e`57400210
ffffd481`13606490 000000e8`00000074 : fffff801`00000074 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffff8d0e`50b0ef80
ffffd481`13606498 fffff801`00000074 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000000e8`00000074
ffffd481`136064a0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 ffff8d0e`5740010c : 0xfffff801`00000074
THREAD_SHA1_HASH_MOD_FUNC: cead369e8f528b3bd290a9304ec720dd5545d95d
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: d2d5cbb9106eeefb7497cc6e5b420fed8c8aeb98
THREAD_SHA1_HASH_MOD: 94446152aa936f5afd745fec05a71354656754e6
FOLLOWUP_IP:
ArcCtrl+9599
fffff801`437b9599 48833800 cmp qword ptr [rax],0
FAULT_INSTR_CODE: 388348
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: ArcCtrl+9599
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: ArcCtrl
IMAGE_NAME: ArcCtrl.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 521460b2
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 9599
FAILURE_BUCKET_ID: AV_R_INVALID_ArcCtrl!unknown_function
BUCKET_ID: AV_R_INVALID_ArcCtrl!unknown_function
PRIMARY_PROBLEM_CLASS: AV_R_INVALID_ArcCtrl!unknown_function
TARGET_TIME: 2020-02-20T15:19:58.000Z
OSBUILD: 18362
OSSERVICEPACK: 657
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2005-04-23 04:40:32
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 3e53
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:av_r_invalid_arcctrl!unknown_function
FAILURE_ID_HASH: {aead8557-8f52-afb1-5a9c-58d66f53feb2}
Followup: MachineOwner
---------
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff800430af187, Address of the instruction which caused the bugcheck
Arg3: ffff880f7f94e9e0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for OEMDrv.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
DUMP_TYPE: 2
BUGCHECK_P1: c0000005
BUGCHECK_P2: fffff800430af187
BUGCHECK_P3: ffff880f7f94e9e0
BUGCHECK_P4: 0
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
ks!KsPinGetFirstCloneStreamPointer+37
fffff800`430af187 488b8388000000 mov rax,qword ptr [rbx+88h]
CONTEXT: ffff880f7f94e9e0 -- (.cxr 0xffff880f7f94e9e0)
rax=fffff800430bf000 rbx=0000000000000000 rcx=fffff800430bf1e0
rdx=0000000000000000 rsi=0000000000000000 rdi=ffffcd8f0a363010
rip=fffff800430af187 rsp=ffff880f7f94f3d0 rbp=ffffcd8f1562db40
r8=0000000000000001 r9=ffff880f7f94f560 r10=0000fffff800430c
r11=ffff80fa71200000 r12=fffff800430bf000 r13=fffff800430ba4f0
r14=ffff880f7f94f560 r15=fffff800430bf000
iopl=0 nv up ei ng nz ac pe cy
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050293
ks!KsPinGetFirstCloneStreamPointer+0x37:
fffff800`430af187 488b8388000000 mov rax,qword ptr [rbx+88h] ds:002b:00000000`00000088=????????????????
Resetting default scope
BUGCHECK_STR: 0x3B_c0000005
CPU_COUNT: c
CPU_MHZ: d42
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: VirtualDub64.exe
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-24-2020 12:33:22.0194
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff8007e6e6a0d to fffff800430af187
STACK_TEXT:
ffff880f`7f94f3d0 fffff800`7e6e6a0d : ffffb708`db624ab0 fffff800`34a4c7d3 00000000`00000000 00000000`00000001 : ks!KsPinGetFirstCloneStreamPointer+0x37
ffff880f`7f94f400 ffffb708`db624ab0 : fffff800`34a4c7d3 00000000`00000000 00000000`00000001 ffffcd8f`0a363010 : OEMDrv+0x6a0d
ffff880f`7f94f408 fffff800`34a4c7d3 : 00000000`00000000 00000000`00000001 ffffcd8f`0a363010 fffff800`7e6e2680 : 0xffffb708`db624ab0
ffff880f`7f94f410 00000000`00000000 : 00000000`00000000 ffff880f`7f94f4c0 00000000`00000000 fffff800`430ec60e : nt!KeReleaseMutex+0x13
THREAD_SHA1_HASH_MOD_FUNC: 6ad82a5aef3f1a9941bb105c469d6bce9b716cb8
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 777b7530dd139e9c9603d6e2ce037b30adc82111
THREAD_SHA1_HASH_MOD: 9213df875884cc324fdc0a2ffc64e97ca295ea8c
FOLLOWUP_IP:
ks!KsPinGetFirstCloneStreamPointer+37
fffff800`430af187 488b8388000000 mov rax,qword ptr [rbx+88h]
FAULT_INSTR_CODE: 88838b48
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: ks!KsPinGetFirstCloneStreamPointer+37
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: ks
IMAGE_NAME: ks.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 1f5fe6fb
IMAGE_VERSION: 10.0.18362.207
STACK_COMMAND: .cxr 0xffff880f7f94e9e0 ; kb
BUCKET_ID_FUNC_OFFSET: 37
FAILURE_BUCKET_ID: 0x3B_c0000005_ks!KsPinGetFirstCloneStreamPointer
BUCKET_ID: 0x3B_c0000005_ks!KsPinGetFirstCloneStreamPointer
PRIMARY_PROBLEM_CLASS: 0x3B_c0000005_ks!KsPinGetFirstCloneStreamPointer
TARGET_TIME: 2020-02-14T08:34:43.000Z
OSBUILD: 18362
OSSERVICEPACK: 657
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2005-04-23 04:40:32
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 5523
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x3b_c0000005_ks!kspingetfirstclonestreampointer
FAILURE_ID_HASH: {a1363c0d-3cd8-cf2e-e65e-5f6c6c9f555e}
Followup: MachineOwner
---------
