************* Preparing the environment for Debugger Extensions Gallery repositories **************
ExtensionRepository : Implicit.
UseExperimentalFeatureForNugetShare : true.
AllowNugetExeUpdate : true.
NonInteractiveNuget : true.
AllowNugetMSCredentialProviderInstall : true.
AllowParallelInitializationOfLocalRepositories : true.
EnableRedirectToV8JsProvider : false.
-- Configuring repositories.
----> Repository : LocalInstalled, Enabled: true.
----> Repository : UserExtensions, Enabled: true.
>>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds.
************* Waiting for Debugger Extensions Gallery to Initialize **************
>>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.046 seconds.
----> Repository : UserExtensions, Enabled: true, Packages count: 0
----> Repository : LocalInstalled, Enabled: true, Packages count: 41.
Microsoft (R) Windows Debugger Version 10.0.27553.1004 AMD64.
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Arif.efe\Downloads\050824-16343-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available.
************* Path validation summary **************
Response Time (ms) Location.
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 22621 MP (16 procs) Free x64.
Product: WinNt, suite: TerminalServer SingleUserTS Personal.
Kernel base = 0xfffff801`2fe00000 PsLoadedModuleList = 0xfffff801`30a13110
Debug session time: Wed May 8 22:16:06.739 2024 (UTC + 3:00)
System Uptime: 1 days 2:52:10.409
Loading Kernel Symbols.
..
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
.............................................................
................................................................
................................................................
..........
Loading User Symbols.
PEB is paged out (Peb.Ldr = 00000039`b5e15018). Type ".hh dbgerr001" for details.
Loading unloaded module list.
...............................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff801`302183e0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffba06`841be890=000000000000013a
6: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_HEAP_CORRUPTION (13a)
The kernel mode heap manager has detected corruption in a heap.
Arguments:
Arg1: 0000000000000011, Type of corruption detected.
Arg2: ffffbb8336010140, Address of the heap that reported the corruption.
Arg3: ffffbb835274b2e0, Address at which the corruption was detected.
Arg4: 0000000000000000.
Debugging Details:
------------------
fffff80130b1c4a8: Unable to get MiVisibleState.
Unable to get NonPagedPoolStart.
Unable to get NonPagedPoolEnd.
Unable to get PagedPoolStart.
Unable to get PagedPoolEnd.
HeapDbgInitExtension Failed.
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 6421.
Key : Analysis.Elapsed.mSec
Value: 8541.
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 608.
Key : Analysis.Init.Elapsed.mSec
Value: 8669.
Key : Analysis.Memory.CommitPeak.Mb
Value: 106.
Key : Bugcheck.Code.LegacyAPI
Value: 0x13a.
Key : Bugcheck.Code.TargetModel
Value: 0x13a.
Key : Dump.Attributes.AsUlong
Value: 1808.
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 0
Key : Failure.Bucket
Value: 0x13a_11_BE___BEDaisy!unknown_function
Key : Failure.Hash
Value: {6a85b8ad-f8a7-b71c-b9d1-e9d62252af2e}
Key : Hypervisor.Enlightenments.ValueHex
Value: 1417df84.
Key : Hypervisor.Flags.AnyHypervisorPresent
Value: 1
Key : Hypervisor.Flags.ApicEnlightened
Value: 0
Key : Hypervisor.Flags.ApicVirtualizationAvailable
Value: 1
Key : Hypervisor.Flags.AsyncMemoryHint
Value: 0
Key : Hypervisor.Flags.CoreSchedulerRequested
Value: 0
Key : Hypervisor.Flags.CpuManager
Value: 1
Key : Hypervisor.Flags.DeprecateAutoEoi
Value: 1
Key : Hypervisor.Flags.DynamicCpuDisabled
Value: 1
Key : Hypervisor.Flags.Epf
Value: 0
Key : Hypervisor.Flags.ExtendedProcessorMasks
Value: 1
Key : Hypervisor.Flags.HardwareMbecAvailable
Value: 1
Key : Hypervisor.Flags.MaxBankNumber
Value: 0
Key : Hypervisor.Flags.MemoryZeroingControl
Value: 0
Key : Hypervisor.Flags.NoExtendedRangeFlush
Value: 0
Key : Hypervisor.Flags.NoNonArchCoreSharing
Value: 1
Key : Hypervisor.Flags.Phase0InitDone
Value: 1
Key : Hypervisor.Flags.PowerSchedulerQos
Value: 0
Key : Hypervisor.Flags.RootScheduler
Value: 0
Key : Hypervisor.Flags.SynicAvailable
Value: 1
Key : Hypervisor.Flags.UseQpcBias
Value: 0
Key : Hypervisor.Flags.Value
Value: 21631230.
Key : Hypervisor.Flags.ValueHex
Value: 14a10fe.
Key : Hypervisor.Flags.VpAssistPage
Value: 1
Key : Hypervisor.Flags.VsmAvailable
Value: 1
Key : Hypervisor.RootFlags.AccessStats
Value: 1
Key : Hypervisor.RootFlags.CrashdumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.CreateVirtualProcessor
Value: 1
Key : Hypervisor.RootFlags.DisableHyperthreading
Value: 0
Key : Hypervisor.RootFlags.HostTimelineSync
Value: 1
Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
Value: 0
Key : Hypervisor.RootFlags.IsHyperV
Value: 1
Key : Hypervisor.RootFlags.LivedumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.MapDeviceInterrupt
Value: 1
Key : Hypervisor.RootFlags.MceEnlightened
Value: 1
Key : Hypervisor.RootFlags.Nested
Value: 0
Key : Hypervisor.RootFlags.StartLogicalProcessor
Value: 1
Key : Hypervisor.RootFlags.Value
Value: 1015.
Key : Hypervisor.RootFlags.ValueHex
Value: 3f7.
BUGCHECK_CODE: 13a.
BUGCHECK_P1: 11.
BUGCHECK_P2: ffffbb8336010140.
BUGCHECK_P3: ffffbb835274b2e0.
BUGCHECK_P4: 0
FILE_IN_CAB: 050824-16343-01.dmp
TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b.
DUMP_FILE_ATTRIBUTES: 0x1808.
Kernel Generated Triage Dump.
POOL_ADDRESS: Unable to get NonPagedPoolStart.
Unable to get NonPagedPoolEnd.
Unable to get PagedPoolStart.
Unable to get PagedPoolEnd.
unable to get nt!MmSpecialPagesInUse
ffffbb835274b2e0.
FREED_POOL_TAG: BE__.
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: RainbowSix.exe
STACK_TEXT:
ffffba06`841be888 fffff801`303b33b4 : 00000000`0000013a 00000000`00000011 ffffbb83`36010140 ffffbb83`5274b2e0 : nt!KeBugCheckEx
ffffba06`841be890 fffff801`303b3414 : 00000000`00000011 00000000`00000000 ffffbb83`36010140 00000000`000028dc : nt!RtlpHeapHandleError+0x40
ffffba06`841be8d0 fffff801`303b3031 : 00000000`00f00030 ffffffff`ffffffff 00000000`00000000 ffffbb83`5f66f080 : nt!RtlpHpHeapHandleError+0x58
ffffba06`841be900 fffff801`302a62ec : ffffba06`841beb80 ffffbb83`5f66f080 ffffba06`841beb80 00000000`00000000 : nt!RtlpLogHeapFailure+0x45
ffffba06`841be930 fffff801`3012e889 : ffffbb83`36010380 ffffba06`841bebff fffff801`57b7b000 ffffbb83`00000000 : nt!RtlpHpLfhSubsegmentFreeBlock+0x1e0dec
ffffba06`841be9c0 fffff801`308ac3a0 : ffffbb83`5274b2e0 00000000`00000002 00000000`00000000 00000000`00000001 : nt!RtlpHpFreeHeap+0x159
ffffba06`841bea60 fffff801`353e48d6 : ffffba06`00004542 ffffe104`d5599010 ffffba06`00000002 00000000`00000030 : nt!ExFreePoolWithTag+0x1a0
ffffba06`841beaf0 ffffba06`00004542 : ffffe104`d5599010 ffffba06`00000002 00000000`00000030 00000000`00000000 : BEDaisy+0x4c48d6
ffffba06`841beaf8 ffffe104`d5599010 : ffffba06`00000002 00000000`00000030 00000000`00000000 ffffbb83`4e2d90c0 : 0xffffba06`00004542
ffffba06`841beb00 ffffba06`00000002 : 00000000`00000030 00000000`00000000 ffffbb83`4e2d90c0 00000000`00000010 : 0xffffe104`d5599010
ffffba06`841beb08 00000000`00000030 : 00000000`00000000 ffffbb83`4e2d90c0 00000000`00000010 ffffbb83`5274a0c0 : 0xffffba06`00000002
ffffba06`841beb10 00000000`00000000 : ffffbb83`4e2d90c0 00000000`00000010 ffffbb83`5274a0c0 fffff801`30b0c4d0 : 0x30.
SYMBOL_NAME: BEDaisy+4c48d6
MODULE_NAME: BEDaisy.
IMAGE_NAME: BEDaisy.sys
STACK_COMMAND: .cxr; .ecxr ; kb.
BUCKET_ID_FUNC_OFFSET: 4c48d6.
FAILURE_BUCKET_ID: 0x13a_11_BE___BEDaisy!unknown_function
OSPLATFORM_TYPE: x64.
OSNAME: Windows 10.
FAILURE_ID_HASH: {6a85b8ad-f8a7-b71c-b9d1-e9d62252af2e}
Followup: MachineOwner.
---------
6: kd> lm.
start end module name.
ffff9711`ade00000 ffff9711`ae15f000 win32kbase (pdb symbols) C:\ProgramData\Dbg\sym\win32kbase.pdb\38660AD0DB8594B70E02F02E100691071\win32kbase.pdb
ffff9711`ae160000 ffff9711`ae539000 win32kfull (deferred)
ffff9711`ae630000 ffff9711`ae677000 cdd (deferred)
ffff9711`ae750000 ffff9711`ae7fb000 win32k (deferred)
fffff801`2cc90000 fffff801`2cc96000 hal (deferred)
fffff801`2cca0000 fffff801`2ccab000 kdcom (deferred)
fffff801`2ccb0000 fffff801`2ccd9000 tm (deferred)
fffff801`2cce0000 fffff801`2cd4f000 CLFS (deferred)
fffff801`2cd50000 fffff801`2cd6b000 PSHED (deferred)
fffff801`2cd70000 fffff801`2cd7d000 BOOTVID (deferred)
fffff801`2cd80000 fffff801`2ce95000 clipsp (deferred)
fffff801`2cea0000 fffff801`2cf1a000 FLTMGR (deferred)
fffff801`2cf20000 fffff801`2cf4c000 ksecdd (deferred)
fffff801`2cf50000 fffff801`2cfb2000 msrpc (deferred)
fffff801`2cfc0000 fffff801`2cfcf000 cmimcext (deferred)
fffff801`2cfd0000 fffff801`2cfe6000 werkernel (deferred)
fffff801`2cff0000 fffff801`2cffc000 ntosext (deferred)
fffff801`2d000000 fffff801`2d017000 WDFLDR (deferred)
fffff801`2d020000 fffff801`2d033000 WppRecorder (deferred)
fffff801`2d040000 fffff801`2d04e000 PRM (deferred)
fffff801`2d050000 fffff801`2d05c000 WMILIB (deferred)
fffff801`2d470000 fffff801`2d565000 CI (deferred)
fffff801`2d570000 fffff801`2d597000 acpiex (deferred)
fffff801`2d5a0000 fffff801`2d5ab000 msisadrv (deferred)
fffff801`2d5b0000 fffff801`2d5ba000 WdBoot (deferred)
fffff801`2d5c0000 fffff801`2d5d8000 WindowsTrustedRT (deferred)
fffff801`2d5e0000 fffff801`2d5f3000 IntelPMT (deferred)
fffff801`2fe00000 fffff801`30e47000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\7AF38CD76BBE27EABD51A523C93EEAAC1\ntkrnlmp.pdb
fffff801`32e00000 fffff801`32ebe000 cng (deferred)
fffff801`32ec0000 fffff801`32f87000 Wdf01000 (deferred)
fffff801`32f90000 fffff801`33048000 ACPI (deferred)
fffff801`33050000 fffff801`330dc000 pci (deferred)
fffff801`330e0000 fffff801`33137000 tpm (deferred)
fffff801`33140000 fffff801`331c6000 intelpep (deferred)
fffff801`331d0000 fffff801`331db000 WindowsTrustedRTProxy (deferred)
fffff801`331e0000 fffff801`331f6000 pcw (deferred)
fffff801`33200000 fffff801`3321c000 vdrvroot (deferred)
fffff801`33220000 fffff801`33251000 pdc (deferred)
fffff801`33260000 fffff801`33278000 CEA (deferred)
fffff801`33280000 fffff801`332b3000 partmgr (deferred)
fffff801`332c0000 fffff801`333a1000 spaceport (deferred)
fffff801`333b0000 fffff801`333cc000 volmgr (deferred)
fffff801`333d0000 fffff801`33434000 volmgrx (deferred)
fffff801`33440000 fffff801`3345f000 mountmgr (deferred)
fffff801`33460000 fffff801`3365d000 iaStorVD (deferred)
fffff801`33660000 fffff801`3377b000 storport (deferred)
fffff801`33780000 fffff801`337a4000 EhStorClass (deferred)
fffff801`337b0000 fffff801`337cc000 fileinfo (deferred)
fffff801`337d0000 fffff801`33815000 Wof (deferred)
fffff801`33820000 fffff801`338b6000 WdFilter (deferred)
fffff801`338c0000 fffff801`33bf3000 Ntfs (deferred)
fffff801`33c00000 fffff801`33c0f000 Fs_Rec (deferred)
fffff801`33c10000 fffff801`33da0000 ndis (deferred)
fffff801`33db0000 fffff801`33e50000 NETIO (deferred)
fffff801`33e60000 fffff801`33e95000 ksecpkg (deferred)
fffff801`33ea0000 fffff801`341cd000 tcpip (deferred)
fffff801`341d0000 fffff801`34253000 fwpkclnt (deferred)
fffff801`34260000 fffff801`34291000 wfplwfs (deferred)
fffff801`342a0000 fffff801`34375000 fvevol (deferred)
fffff801`34380000 fffff801`3438b000 volume (deferred)
fffff801`34390000 fffff801`34400000 volsnap (deferred)
fffff801`34410000 fffff801`34461000 rdyboost (deferred)
fffff801`34470000 fffff801`34497000 mup (deferred)
fffff801`344a0000 fffff801`344b3000 iorate (deferred)
fffff801`344e0000 fffff801`34500000 disk (deferred)
fffff801`34510000 fffff801`34587000 CLASSPNP (deferred)
fffff801`34c00000 fffff801`34f12c00 randgrid (deferred)
fffff801`34f20000 fffff801`3540b000 BEDaisy T (no symbols)
fffff801`35570000 fffff801`35597000 crashdmp (deferred)
fffff801`57200000 fffff801`5727d000 rdbss (deferred)
fffff801`57280000 fffff801`57290000 npsvctrig (deferred)
fffff801`572a0000 fffff801`572b1000 mssmbios (deferred)
fffff801`572c0000 fffff801`572ed000 dfsc (deferred)
fffff801`57330000 fffff801`5739e000 fastfat (deferred)
fffff801`573a0000 fffff801`573ba000 bam (deferred)
fffff801`573c0000 fffff801`5741c000 ahcache (deferred)
fffff801`57420000 fffff801`57437000 hvservice (deferred)
fffff801`57440000 fffff801`57454000 CompositeBus (deferred)
fffff801`57460000 fffff801`5746f000 kdnic (deferred)
fffff801`57470000 fffff801`57487000 umbus (deferred)
fffff801`57490000 fffff801`5749d000 wmiacpi (deferred)
fffff801`574a0000 fffff801`574ce000 Ndu (deferred)
fffff801`574d0000 fffff801`575a1000 peauth (deferred)
fffff801`575b0000 fffff801`575c5000 tcpipreg (deferred)
fffff801`575d0000 fffff801`575ed000 wtd (deferred)
fffff801`575f0000 fffff801`576c7000 srv2 (deferred)
fffff801`576d0000 fffff801`577ba000 xvdd (deferred)
fffff801`577c0000 fffff801`577e4000 gameflt (deferred)
fffff801`577f0000 fffff801`5780d000 WdNisDrv (deferred)
fffff801`57810000 fffff801`5782e000 rassstp (deferred)
fffff801`57830000 fffff801`5784e000 NDProxy (deferred)
fffff801`57850000 fffff801`57879000 AgileVpn (deferred)
fffff801`57880000 fffff801`578a2000 rasl2tp (deferred)
fffff801`578b0000 fffff801`578d2000 raspptp (deferred)
fffff801`578e0000 fffff801`578fe000 raspppoe (deferred)
fffff801`57900000 fffff801`57910000 ndistapi (deferred)
fffff801`57920000 fffff801`5795b000 ndiswan (deferred)
fffff801`57b40000 fffff801`57b86000 MpKslDrv (deferred)
fffff801`57b90000 fffff801`57ba5000 qwavedrv (deferred)
fffff801`57bf0000 fffff801`5c5ce000 FACEIT_AC (deferred)
fffff801`5c5d0000 fffff801`5c5f6000 winhvr (deferred)
fffff801`6da00000 fffff801`6de88000 dxgkrnl (deferred)
fffff801`6de90000 fffff801`6deb2000 watchdog (deferred)
fffff801`6dec0000 fffff801`6ded7000 BasicDisplay (deferred)
fffff801`6dee0000 fffff801`6def2000 BasicRender (deferred)
fffff801`6df00000 fffff801`6df1c000 Npfs (deferred)
fffff801`6df20000 fffff801`6df32000 Msfs (deferred)
fffff801`6df40000 fffff801`6df69000 CimFS (deferred)
fffff801`6df70000 fffff801`6df94000 tdx (deferred)
fffff801`6dfa0000 fffff801`6dfb1000 TDI (deferred)
fffff801`6dfc0000 fffff801`6e011000 netbt (deferred)
fffff801`6e020000 fffff801`6e034000 afunix (deferred)
fffff801`6e040000 fffff801`6e0e8000 afd (deferred)
fffff801`6e0f0000 fffff801`6e10b000 vwififlt (deferred)
fffff801`6e110000 fffff801`6e13b000 pacer (deferred)
fffff801`6e140000 fffff801`6e155000 ndiscap (deferred)
fffff801`6e160000 fffff801`6e175000 netbios (deferred)
fffff801`6e180000 fffff801`6e249000 Vid (deferred)
fffff801`6e250000 fffff801`6e263000 nsiproxy (deferred)
fffff801`6e270000 fffff801`6f734000 vgk (deferred)
fffff801`6f740000 fffff801`6f772000 cdrom (deferred)
fffff801`6f780000 fffff801`6f796000 filecrypt (deferred)
fffff801`6f7a0000 fffff801`6f7b0000 tbs (deferred)
fffff801`6f7c0000 fffff801`6f7d0000 UCPD (deferred)
fffff801`6f7e0000 fffff801`6f7eb000 Null (deferred)
fffff801`6f7f0000 fffff801`6f7fa000 Beep (deferred)
fffff801`87600000 fffff801`87685000 ks (deferred)
fffff801`87690000 fffff801`87733000 USBXHCI (deferred)
fffff801`87740000 fffff801`87787000 ucx01000 (deferred)
fffff801`87790000 fffff801`877c4000 iaLPSS2_I2C_ADL (deferred)
fffff801`877d0000 fffff801`877ec000 SpbCx (deferred)
fffff801`877f0000 fffff801`8783f000 TeeDriverW10x64 (deferred)
fffff801`87840000 fffff801`878e0000 rt68cx21x64 (deferred)
fffff801`878f0000 fffff801`8794f000 NetAdapterCx (deferred)
fffff801`87950000 fffff801`8796e000 serial (deferred)
fffff801`87970000 fffff801`87980000 serenum (deferred)
fffff801`87990000 fffff801`8799e000 acpitime (deferred)
fffff801`879a0000 fffff801`879c2000 iaLPSS2_GPIO2_ADL (deferred)
fffff801`879d0000 fffff801`87a03000 msgpioclx (deferred)
fffff801`87a10000 fffff801`87a5f000 intelppm (deferred)
fffff801`87a60000 fffff801`87a6c000 acpipagr (deferred)
fffff801`87a70000 fffff801`87a81000 UEFI (deferred)
fffff801`87a90000 fffff801`87a9f000 nvvad64v (deferred)
fffff801`87aa0000 fffff801`87ab0000 ksthunk (deferred)
fffff801`87ac0000 fffff801`87acd000 NvModuleTracker (deferred)
fffff801`87ad0000 fffff801`87ae0000 nvvhci (deferred)
fffff801`87af0000 fffff801`87b00000 nvrtxvad64v (deferred)
fffff801`87b10000 fffff801`87b1e000 NdisVirtualBus (deferred)
fffff801`87b20000 fffff801`87b2c000 swenum (deferred)
fffff801`87b30000 fffff801`87b40000 rdpbus (deferred)
fffff801`87b50000 fffff801`87bff000 UsbHub3 (deferred)
fffff801`87c00000 fffff801`87c0f000 USBD (deferred)
fffff801`87c10000 fffff801`87c2e000 nvhda64v (deferred)
fffff801`87c30000 fffff801`87cb1000 HdAudio (deferred)
fffff801`87cc0000 fffff801`87cf6000 usbccgp (deferred)
fffff801`87d00000 fffff801`87d13000 hidusb (deferred)
fffff801`87d20000 fffff801`87d64000 HIDCLASS (deferred)
fffff801`87d70000 fffff801`87d86000 HIDPARSE (deferred)
fffff801`87d90000 fffff801`87db8000 GamePowerExt (deferred)
fffff801`87dc0000 fffff801`87e05000 usbaudio (deferred)
fffff801`87e10000 fffff801`87e22000 kbdhid (deferred)
fffff801`87e40000 fffff801`87e55000 kbdclass (deferred)
fffff801`87e60000 fffff801`87eec000 cldflt (deferred)
fffff801`87ef0000 fffff801`87f09000 lltdio (deferred)
fffff801`87f10000 fffff801`87f2f000 wanarp (deferred)
fffff801`87f30000 fffff801`87f4d000 rspndr (deferred)
fffff801`87f50000 fffff801`87f69000 mslldp (deferred)
fffff801`87f70000 fffff801`87f89000 ndisuio (deferred)
fffff801`87f90000 fffff801`8804a000 nwifi (deferred)
fffff801`88050000 fffff801`88063000 condrv (deferred)
fffff801`88070000 fffff801`880e3000 msquic (deferred)
fffff801`880f0000 fffff801`88295000 HTTP (deferred)
fffff801`882a0000 fffff801`882b5000 vwifimp (deferred)
fffff801`882c0000 fffff801`882e6000 bowser (deferred)
fffff801`882f0000 fffff801`8830b000 mpsdrv (deferred)
fffff801`88310000 fffff801`883b4000 mrxsmb (deferred)
fffff801`883c0000 fffff801`8840e000 mrxsmb20 (deferred)
fffff801`88410000 fffff801`8846c000 srvnet (deferred)
fffff801`88480000 fffff801`8bef0000 nvlddmkm (deferred)
fffff801`8bf00000 fffff801`8bf2f000 HDAudBus (deferred)
fffff801`8bf30000 fffff801`8bfa3000 portcls (deferred)
fffff801`8bfb0000 fffff801`8bfd3000 drmk (deferred)
fffff801`8bfe0000 fffff801`8bff5000 mmcss (deferred)
fffff801`8ca00000 fffff801`8cb06000 wdiwifi (deferred)
fffff801`8cb10000 fffff801`8cb20000 vwifibus (deferred)
fffff801`8cb30000 fffff801`8cb41000 mouhid (deferred)
fffff801`8cb50000 fffff801`8cb65000 mouclass (deferred)
fffff801`8cb70000 fffff801`8cb92000 WinUSB (deferred)
fffff801`8cba0000 fffff801`8cbac000 WIN32KSGD (deferred)
fffff801`8cbd0000 fffff801`8cbe1000 dump_storport (deferred)
fffff801`8cdf0000 fffff801`8cfed000 dump_iaStorVD (deferred)
fffff801`8d010000 fffff801`8d02e000 dump_dumpfve (deferred)
fffff801`8d030000 fffff801`8d14a000 dxgmms2 (deferred)
fffff801`8d150000 fffff801`8d16e000 monitor (deferred)
fffff801`8d170000 fffff801`8d184000 bfs (deferred)
fffff801`8d190000 fffff801`8d1ba000 luafv (deferred)
fffff801`8d1c0000 fffff801`8d1fb000 wcifs (deferred)
fffff801`8d200000 fffff801`8d21b000 storqosflt (deferred)
fffff801`8d220000 fffff801`8d248000 bindflt (deferred)
fffff801`8d250000 fffff801`8d25e000 rdpvideominiport (deferred)
fffff801`8d260000 fffff801`8dbef000 rtwlanu (deferred)
fffff801`8dbf0000 fffff801`8dbfe000 kbfiltr (deferred)
Unloaded modules:
fffff801`57bd0000 fffff801`57be3000 MSKSSRV.sys
fffff801`87e30000 fffff801`87e3f000 kbfiltr.sys
fffff801`572f0000 fffff801`57302000 hiber_storpo.
fffff801`34f20000 fffff801`3511e000 hiber_iaStor.
fffff801`57310000 fffff801`5732f000 hiber_dumpfv.
fffff801`350f0000 fffff801`35404000 randgrid.sys
fffff801`57bb0000 fffff801`57bc3000 MSKSSRV.sys
fffff801`8dbf0000 fffff801`8dbfe000 MSTEE.sys
fffff801`34c00000 fffff801`350ec000 BEDaisy.sys
fffff801`34c00000 fffff801`350ec000 BEDaisy.sys
fffff801`579b0000 fffff801`579f7000 MpKslDrv.sys
fffff801`57b20000 fffff801`57b33000 MSKSSRV.sys
fffff801`57ac0000 fffff801`57ad3000 MSKSSRV.sys
fffff801`57ae0000 fffff801`57af2000 hiber_storpo.
fffff801`35240000 fffff801`3543e000 hiber_iaStor.
fffff801`57b00000 fffff801`57b1f000 hiber_dumpfv.
fffff801`57aa0000 fffff801`57ab3000 MSKSSRV.sys
fffff801`57a80000 fffff801`57a93000 MSKSSRV.sys
fffff801`57a60000 fffff801`57a73000 MSKSSRV.sys
fffff801`57a00000 fffff801`57a13000 MSKSSRV.sys
fffff801`57a20000 fffff801`57a32000 hiber_storpo.
fffff801`35040000 fffff801`3523e000 hiber_iaStor.
fffff801`57a40000 fffff801`57a5f000 hiber_dumpfv.
fffff801`57960000 fffff801`579a7000 MpKslDrv.sys
fffff801`355c0000 fffff801`355d2000 dump_storpor.
fffff801`34e00000 fffff801`34ffe000 dump_iaStorV.
fffff801`35020000 fffff801`3503f000 dump_dumpfve.
fffff801`572f0000 fffff801`57311000 dam.sys
fffff801`57320000 fffff801`57330000 KMPDC.sys
fffff801`344c0000 fffff801`344d2000 hwpolicy.sys
fffff801`2c8e0000 fffff801`2cc64000 mcupdate.dll
6: kd> k
# Child-SP RetAddr Call Site.
00 ffffba06`841be888 fffff801`303b33b4 nt!KeBugCheckEx
01 ffffba06`841be890 fffff801`303b3414 nt!RtlpHeapHandleError+0x40
02 ffffba06`841be8d0 fffff801`303b3031 nt!RtlpHpHeapHandleError+0x58
03 ffffba06`841be900 fffff801`302a62ec nt!RtlpLogHeapFailure+0x45
04 ffffba06`841be930 fffff801`3012e889 nt!RtlpHpLfhSubsegmentFreeBlock+0x1e0dec
05 ffffba06`841be9c0 fffff801`308ac3a0 nt!RtlpHpFreeHeap+0x159
06 ffffba06`841bea60 fffff801`353e48d6 nt!ExFreePoolWithTag+0x1a0
07 ffffba06`841beaf0 ffffba06`00004542 BEDaisy+0x4c48d6
08 ffffba06`841beaf8 ffffe104`d5599010 0xffffba06`00004542
09 ffffba06`841beb00 ffffba06`00000002 0xffffe104`d5599010
0a ffffba06`841beb08 00000000`00000030 0xffffba06`00000002
0b ffffba06`841beb10 00000000`00000000 0x30.
6: kd> !search BEDaisy+0x4c48d6
Unable to get NonPagedPoolStart.
Unable to get NonPagedPoolEnd.
Unable to get PagedPoolStart.
Unable to get PagedPoolEnd.
Warning: unable to dereference MmPfnDatabase at fffff80130b1db60.
!search [-l#][-s][-p] ADDRESS [DELTA [START_PFN END_PFN]]
Search the physical pages in range [START_PFN..END_PFN]
for ULONG_PTRs with values in range ADDRESS+/-DELTA or values
that differ in only one bit position from ADDRESS.
Use -s to ignore symbol check errors during search.
Use -p to interpret the address value as 32 bit, without
any sign-extension.
The default value for DELTA is 0. For START/END_PFN the default.
values are lowest physical page and highest physical page.
Examples:
!search AABBCCDD 0A
Search all physical memory for values in range AABBCCD3 -
AABBCCE8 or with only one bit different than AABBCCDD.
!search AABBCCDD 0A 13F 240
Search page frames in range 13F - 240 for values in range
AABBCCD3 - AABBCCE8 or with only one bit different
than AABBCCDD.
Note that a search through the entire physical memory may find
hits in the search engine structures. By doing a search with a
completely different value it can be deduced what hits can be
ignored.
Search done.
6: kd> !sysinfo machineid.
Machine ID Information [From Smbios 3.4, DMIVersion 0, Size=5364]
BiosMajorRelease = 30.
BiosMinorRelease = 10.
BiosVendor = American Megatrends Inc.
BiosVersion = 3010.
BiosReleaseDate = 12/11/2023
SystemManufacturer = ASUS.
SystemProductName = System Product Name.
SystemFamily = To be filled by O.E.M.
SystemVersion = System Version.
SystemSKU = SKU.
BaseBoardManufacturer = ASUSTeK COMPUTER INC.
BaseBoardProduct = PRIME H610M-E
BaseBoardVersion = Rev 1.xx
6: kd> lmvmnvlddmkm.
Browse full module list.
start end module name.
fffff801`88480000 fffff801`8bef0000 nvlddmkm (deferred)
Image path: nvlddmkm.sys
Image name: nvlddmkm.sys
Browse all global symbols functions data.
Timestamp: Thu Apr 11 23:44:07 2024 (66184B97)
CheckSum: 0394D2D0.
ImageSize: 03A70000.
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables: