*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffff98020dc38f86, memory referenced.
Arg2: 0000000000000000, X64: bit 0 set if the fault was due to a not-present PTE.
bit 1 is set if the fault was due to a write, clear if a read.
bit 3 is set if the processor decided the fault was due to a corrupted PTE.
bit 4 is set if the fault was due to attempted execute of a no-execute PTE.
- ARM64: bit 1 is set if the fault was due to a write, clear if a read.
bit 3 is set if the fault was due to attempted execute of a no-execute PTE.
Arg3: fffff803c10f5a91, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : AV.Type
Value: Read
Key : Analysis.CPU.mSec
Value: 1140
Key : Analysis.Elapsed.mSec
Value: 5533
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 46
Key : Analysis.Init.Elapsed.mSec
Value: 5186
Key : Analysis.Memory.CommitPeak.Mb
Value: 87
Key : Bugcheck.Code.LegacyAPI
Value: 0x50
Key : Bugcheck.Code.TargetModel
Value: 0x50
Key : Dump.Attributes.AsUlong
Value: 1808
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 0
Key : Failure.Bucket
Value: AV_R_(null)_HoYoKProtect!unknown_function
Key : Failure.Hash
Value: {43be25de-a8b0-f625-93e2-06bfdea209d4}
Key : Hypervisor.Enlightenments.ValueHex
Value: 1417df84
Key : Hypervisor.Flags.AnyHypervisorPresent
Value: 1
Key : Hypervisor.Flags.ApicEnlightened
Value: 0
Key : Hypervisor.Flags.ApicVirtualizationAvailable
Value: 1
Key : Hypervisor.Flags.AsyncMemoryHint
Value: 0
Key : Hypervisor.Flags.CoreSchedulerRequested
Value: 0
Key : Hypervisor.Flags.CpuManager
Value: 1
Key : Hypervisor.Flags.DeprecateAutoEoi
Value: 1
Key : Hypervisor.Flags.DynamicCpuDisabled
Value: 1
Key : Hypervisor.Flags.Epf
Value: 0
Key : Hypervisor.Flags.ExtendedProcessorMasks
Value: 1
Key : Hypervisor.Flags.HardwareMbecAvailable
Value: 1
Key : Hypervisor.Flags.MaxBankNumber
Value: 0
Key : Hypervisor.Flags.MemoryZeroingControl
Value: 0
Key : Hypervisor.Flags.NoExtendedRangeFlush
Value: 0
Key : Hypervisor.Flags.NoNonArchCoreSharing
Value: 1
Key : Hypervisor.Flags.Phase0InitDone
Value: 1
Key : Hypervisor.Flags.PowerSchedulerQos
Value: 0
Key : Hypervisor.Flags.RootScheduler
Value: 0
Key : Hypervisor.Flags.SynicAvailable
Value: 1
Key : Hypervisor.Flags.UseQpcBias
Value: 0
Key : Hypervisor.Flags.Value
Value: 21631230
Key : Hypervisor.Flags.ValueHex
Value: 14a10fe
Key : Hypervisor.Flags.VpAssistPage
Value: 1
Key : Hypervisor.Flags.VsmAvailable
Value: 1
Key : Hypervisor.RootFlags.AccessStats
Value: 1
Key : Hypervisor.RootFlags.CrashdumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.CreateVirtualProcessor
Value: 1
Key : Hypervisor.RootFlags.DisableHyperthreading
Value: 0
Key : Hypervisor.RootFlags.HostTimelineSync
Value: 1
Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
Value: 0
Key : Hypervisor.RootFlags.IsHyperV
Value: 1
Key : Hypervisor.RootFlags.LivedumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.MapDeviceInterrupt
Value: 1
Key : Hypervisor.RootFlags.MceEnlightened
Value: 1
Key : Hypervisor.RootFlags.Nested
Value: 0
Key : Hypervisor.RootFlags.StartLogicalProcessor
Value: 1
Key : Hypervisor.RootFlags.Value
Value: 1015
Key : Hypervisor.RootFlags.ValueHex
Value: 3f7
BUGCHECK_CODE: 50
BUGCHECK_P1: ffff98020dc38f86
BUGCHECK_P2: 0
BUGCHECK_P3: fffff803c10f5a91
BUGCHECK_P4: 2
FILE_IN_CAB: 040824-6625-01.dmp
TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b
DUMP_FILE_ATTRIBUTES: 0x1808
Kernel Generated Triage Dump
READ_ADDRESS: fffff80355f1c470: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
ffff98020dc38f86
MM_INTERNAL_CODE: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: powershell.exe
TRAP_FRAME: ffff98020dc36290 -- (.trap 0xffff98020dc36290)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000000088ff rbx=0000000000000000 rcx=ffff98020dc39e44
rdx=000000000000075f rsi=0000000000000000 rdi=0000000000000000
rip=fffff803c10f5a91 rsp=ffff98020dc36420 rbp=000000f591750900
r8=0000000000008900 r9=0000000000000000 r10=000000006a874580
r11=0000000138c86e85 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
HoYoKProtect+0x345a91:
fffff803`c10f5a91 66410fb6ac0942f1ffff movzx bp,byte ptr [r9+rcx-0EBEh] ds:ffff9802`0dc38f86=??
Resetting default scope
STACK_TEXT:
ffff9802`0dc36068 fffff803`5568739c : 00000000`00000050 ffff9802`0dc38f86 00000000`00000000 ffff9802`0dc36290 : nt!KeBugCheckEx
ffff9802`0dc36070 fffff803`55415e4c : fffff803`55200000 00000000`00000000 00000000`00000000 ffff9802`0dc38f86 : nt!MiSystemFault+0x20984c
ffff9802`0dc36170 fffff803`55628729 : 00000000`00000000 ffffaa8b`e2482e88 ffff8800`12d47770 00000000`0000001f : nt!MmAccessFault+0x29c
ffff9802`0dc36290 fffff803`c10f5a91 : 00000000`000088ff 00000000`00040202 00000000`00000000 ffff9802`0dc36840 : nt!KiPageFault+0x369
ffff9802`0dc36420 00000000`000088ff : 00000000`00040202 00000000`00000000 ffff9802`0dc36840 ffff9802`0dc36602 : HoYoKProtect+0x345a91
ffff9802`0dc36428 00000000`00040202 : 00000000`00000000 ffff9802`0dc36840 ffff9802`0dc36602 00000000`00000000 : 0x88ff
ffff9802`0dc36430 00000000`00000000 : ffff9802`0dc36840 ffff9802`0dc36602 00000000`00000000 00000000`00040282 : 0x40202
SYMBOL_NAME: HoYoKProtect+345a91
MODULE_NAME: HoYoKProtect
IMAGE_NAME: HoYoKProtect.sys
STACK_COMMAND: .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET: 345a91
FAILURE_BUCKET_ID: AV_R_(null)_HoYoKProtect!unknown_function
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {43be25de-a8b0-f625-93e2-06bfdea209d4}
Followup: MachineOwner
---------
