Jump to content

Recommended Posts

Posted
最近出现aida64打开正常,关闭aida64瞬间蓝屏,以下是windbg分析的错误代码,请帮帮我吧!

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffe18000000000, memory referenced.
Arg2: 0000000000000000, X64: bit 0 set if the fault was due to a not-present PTE.
	bit 1 is set if the fault was due to a write, clear if a read.
	bit 3 is set if the processor decided the fault was due to a corrupted PTE.
	bit 4 is set if the fault was due to attempted execute of a no-execute PTE.
	- ARM64: bit 1 is set if the fault was due to a write, clear if a read.
	bit 3 is set if the fault was due to attempted execute of a no-execute PTE.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000006, (reserved)

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for kerneld.x64

KEY_VALUES_STRING: 1

    Key  : AV.Type
    Value: Read

    Key  : Analysis.CPU.mSec
    Value: 2562

    Key  : Analysis.Elapsed.mSec
    Value: 4437

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 374

    Key  : Analysis.Init.Elapsed.mSec
    Value: 12577

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 92

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0x50

    Key  : Failure.Bucket
    Value: AV_R_(null)_kerneld!unknown_function

    Key  : Failure.Hash
    Value: {435933fa-e1a1-d4c8-2943-9fa8d1acf89d}

    Key  : WER.OS.Branch
    Value: ni_release

    Key  : WER.OS.Version
    Value: 10.0.22621.1


BUGCHECK_CODE:  50

BUGCHECK_P1: ffffe18000000000

BUGCHECK_P2: 0

BUGCHECK_P3: 0

BUGCHECK_P4: 6

FILE_IN_CAB:  012824-28390-01.dmp

READ_ADDRESS: fffff80506d1c470: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
 ffffe18000000000 

MM_INTERNAL_CODE:  6

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

TRAP_FRAME:  ffffb88f78ad86b0 -- (.trap 0xffffb88f78ad86b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffffe18000000000
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8050629f5b0 rsp=ffffb88f78ad8848 rbp=0000000000000000
 r8=0000007ffffffff8  r9=ffffe1f0c0000000 r10=0000000000000001
r11=ffffe1f0f87c3000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!MI_READ_PTE_LOCK_FREE:
fffff805`0629f5b0 488b01          mov     rax,qword ptr [rcx] ds:ffffe180`00000000=????????????????
Resetting default scope

STACK_TEXT:  
ffffb88f`78ad83f8 fffff805`0644223f     : 00000000`00000050 ffffe180`00000000 00000000`00000000 ffffe1f0`c0000000 : nt!KeBugCheckEx
ffffb88f`78ad8400 fffff805`06262732     : ffffb88f`78ad85d0 ffffb88f`78ad8590 ffffb88f`78ad85a0 ffffb88f`78ad8528 : nt!MiZeroFault+0x1c5c8f
ffffb88f`78ad8500 fffff805`06261fbb     : 00000000`00000001 00000000`00000000 00000000`00000000 ffffe180`00000000 : nt!MiUserFault+0x392
ffffb88f`78ad8590 fffff805`06427929     : 00000000`00000000 00000000`00000000 ffffbb00`0d6b3600 00100b55`000018da : nt!MmAccessFault+0x13b
ffffb88f`78ad86b0 fffff805`0629f5b0     : fffff805`062c91a8 0000007f`fffffff8 ffffe180`00000000 00000000`00000001 : nt!KiPageFault+0x369
ffffb88f`78ad8848 fffff805`062c91a8     : 0000007f`fffffff8 ffffe180`00000000 00000000`00000001 ffffe1ca`00805ab0 : nt!MI_READ_PTE_LOCK_FREE
ffffb88f`78ad8850 fffff805`062c90b5     : 00000000`00000001 ffffa889`2a6efcf0 ffffa889`2a6efcf0 00000000`00000001 : nt!MiMappingHasIoTracker+0x44
ffffb88f`78ad8880 fffff805`6cd7bb12     : 00000000`00000000 41c64e6d`a3bc4145 fffff805`6cd7e2a8 fffff805`0627a1d5 : nt!MmUnmapIoSpace+0x65
ffffb88f`78ad89c0 00000000`00000000     : 41c64e6d`a3bc4145 fffff805`6cd7e2a8 fffff805`0627a1d5 00000000`00320030 : kerneld+0xbb12


SYMBOL_NAME:  kerneld+bb12

MODULE_NAME: kerneld

IMAGE_NAME:  kerneld.x64

STACK_COMMAND:  .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  bb12

FAILURE_BUCKET_ID:  AV_R_(null)_kerneld!unknown_function

OS_VERSION:  10.0.22621.1

BUILDLAB_STR:  ni_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {435933fa-e1a1-d4c8-2943-9fa8d1acf89d}

Followup:     MachineOwner
---------

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...