Battlefield 6 game crash issue assistance request
对于该文件的分析,请运行 !analyze -v
NT!KeBugCheckEx:
FFFF806'EFCFB2D0 48894C2408 MOV QWORD PTR [RSP+8],RCX SS:0018:FFFF8381'BD95BDD0=000000000000000a
4: kd> !analyze -v
加载内核符号
..
按ctrl-c(cdb、kd、ntsd)或ctrl-break(windbg)可以中止耗时过长的符号加载。
在 .reload 之前运行 !sym noisey 来查找加载符号的问题。
.............................................................
................................................................
................................................................
..................................
加载用户符号
PEB被分页出(Peb.Ldr = 0000000'0020a018)。输入“.hh dbgerr001”以获取详细信息
加载未加载模块列表
..........
*******************************************************************************
* *
* Bugcheck分析 *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
曾尝试访问可分页(或完全无效)地址,地址为
中断请求级别(IRQL)过高。这通常是
原因是驱动程序使用了错误的地址。
如果有内核调试器,可以获取栈回溯。
参数:
Arg1: 00007fffffff0000,内存参考
Arg2:000000000000000ff,IRQL
Arg3: 000000000000008d, bitfield :
位0 :值0 = 读取作,1 = 写作
位3 :值0 = 非执行作,1 = 执行作(仅支持此级别状态的芯片)
Arg4: fffff806efaa7216,引用内存的地址
调试细节:
------------------
警告:无法验证eaanticheat.sys的时间戳
KEY_VALUES_STRING:1
说明:Analysis.CPU.mSec
价值:1093
说明:分析。已过.mSec
价值:11794
说明:分析.IO.其他.Mb
价值:0
说明:分析.IO.Read.Mb
价值:1
关键:分析.IO.Write.Mb
价值:1
关键:分析.初始化.CPU.mSec
价值:625
说明:分析。启动。已过。mSec
价值:25151
关键:分析。内存。提交峰值.Mb
价值:87
关键:分析.版本.DbgEng
价值:10.0.29482.1003
说明:分析。版本。描述
Value: 10.2509.29.03 amd64fre
关键:分析.版本.扩展
价值:1.2509.29.3
关键点:Bugcheck.Code.LegacyAPI
价值:0xa
说明:Bugcheck.Code.TargetModel
价值:0xa
说明:Dump.Attributes.AsUlong
价值:0x21808
关键点:Dump.Attributes.DiagDataWrittenToHeader
价值:1
关键点:dump.Attributes.ErrorCode
价值:0x0
密钥:Dump.Attributes.KernelGeneratedTriageDump
价值:1
关键:Dump.Attributes.LastLine(删除.属性.最后一行)
价值:倾倒成功完成。
说明:倾倒。属性。进度百分比
价值:0
关键:失败。桶
价值:AV_eaanticheat!unknown_function
密钥:失败。异常。IP地址
价值:0xfffff806efaa7216
关键:失败.异常.IP.模块
值:nt
关键:失败。异常。IP.偏移量
价值:0x2a7216
关键:失败。哈希
价值:{d544cf09-4735-e698-77c3-5df5924e5448}
关键:Faulting.IP.类型
价值:分页
说明:Hypervisor.Enlightenments.ValueHex(高效率)。
价值:0x7417df84
关键:Hypervisor.flags.AnyHypervisorPresent(在场)
价值:1
关键:Hypervisor.Flags.ApicEnlightened
价值:0
关键:虚拟机监控程序。旗帜。可用 ApicVirtualization
价值:1
关键点:Hypervisor.Flags.AsyncMemoryHint
价值:0
关键:请求中 Hypervisor.Flags.CoreScheduler。
价值:0
关键:Hypervisor.Flags.CpuManager
价值:1
关键:Hypervisor.Flags.DeprecateAutoEoi
价值:1
关键:虚拟机监控程序.旗帜.动态CPU禁用
价值:1
关键:Hypervisor.Flags.Epf
价值:0
关键:Hypervisor.Flags.ExtendedProcessorMasks
价值:1
关键:虚拟机监控程序。旗帜。硬件Mbec可用
价值:1
说明:Hypervisor.Flags.MaxBankNumber
价值:0
说明:Hypervisor.Flags.MemoryZeroingControl
价值:0
关键:虚拟机监控器。旗帜。无扩展范围冲洗
价值:0
关键:Hypervisor.Flags.NoNonArchCoreSharing
价值:1
关键:Hypervisor.Flags.Phase0InitDone(管理程序)。Phase0InitDone(完成)。
价值:1
关键:虚拟机监控程序。旗帜。PowerSchedulerQos
价值:0
关键:Hypervisor.Flags.RootScheduler
价值:0
说明:虚拟机监控器。旗帜。Synic可用
价值:1
说明:Hypervisor.flags.UseQpcBias
价值:0
关键:虚拟机监控程序。旗帜。值
价值:55185662
说明:Hypervisor.Flags.ValueHex(虚拟监控器.旗帜.ValueHex)
价值:0x34a10fe
关键:Hypervisor.Flags.VpAssistPage(高级监控器.Flags.VpAssistPage)
价值:1
说明:Hypervisor.Flags.VsmAvailable
价值:1
关键点:Hypervisor.RootFlags.AccessStats
价值:1
关键:Hypervisor.RootFlags.CrashdumpEnlightened
价值:1
关键:Hypervisor.RootFlags.CreateVirtualProcessor
价值:1
关键:Hypervisor.RootFlags.DisableHyperthreading
价值:0
关键:Hypervisor.RootFlags.HostTimelineSync
价值:1
关键点:Hypervisor.RootFlags.HypervisorDebuggingEnabled
价值:0
关键点:Hypervisor.RootFlags.IsHyperV
价值:1
关键:Hypervisor.RootFlags.LivedumpEnlightened
价值:1
关键点:Hypervisor.RootFlags.MapDeviceInterrupt
价值:1
说明:Hypervisor.RootFlags.MceEnlightened
价值:1
关键:Hypervisor.RootFlags.Nested
价值:0
关键点:Hypervisor.RootFlags.StartLogicalProcessor
价值:1
关键点:Hypervisor.RootFlags.Value
价值:10¹⁵
关键:Hypervisor.RootFlags.ValueHex(高管监控器.根标志.ValueHex)
价值:0x3f7
关键:Stack.Pointer
价值:PRCBException
说明:WER。System.BIOSRevision
价值:18.25.0.0
BUGCHECK_CODE:a
BUGCHECK_P1:7fffffff0000
BUGCHECK_P2:ff
BUGCHECK_P3:8D
BUGCHECK_P4:fffff806efaa7216
FILE_IN_CAB:120525-9156-01.dmp
TAG_NOT_DEFINED_202b:*** 分析列表202b中的未知TAG
DUMP_FILE_ATTRIBUTES:0x21808
内核生成的分流转储
FAULTING_THREAD:ffffb90e2C32D080
WRITE_ADDRESS: fffff806f07c44c0: 无法获得MiVisibleState
无法获得 NonPagedPoolStart
无法获得NonPagedPoolEnd
无法获得PagedPoolStart
无法获得PagedPoolEnd
无法获得NT!MmSpecialPagesInUse
00007fffffff0000
BLACKBOXBSD:1(!blackboxbsd)
黑盒(BLACKBOXNTFS):1(!blackboxntfs)
BLACKBOXPNP:1(!blackboxpnp)
BLACKBOXWINLOGON:1(!blackboxwinlogon)
CUSTOMER_CRASH_COUNT:1
PROCESS_NAME:bf6.exe
IP_IN_PAGED_CODE:
NT!RtlpxVirtualUnwind+b6
fffff806'efaa7216 0fb600 movzx eax,字节 ptr [rax]
STACK_TEXT:
ffff8381'BD95BDC8 FFFF806'EFEB5FE9 : 0000000000000000A 000007ff'ffff00000000000000000000000000000000000000008D : NT!KeBugCheckEx
FFF8381'BD95BDD0 FFF806'EFEB12A8 : 0000000000000000000 FFFF806'EF8BF588 FFF8381'BD95C790 FFFF806'EFA0CE78 : NT!KiBugCheckDispatch+0x69
FFF8381'BD95BF10 FFF806'EFAA7216 : FFFF806'A5970000 FFFF806'A8EEECEAE FFFFD909'D7076D00 FFFF806'A66250C0 : NT!KiPage故障+0x468
FFF8381'BD95C0A0 FFFF806'EFAA44EB : FFFF8381'BD95C1C0 FFF806'A5970000 000000000'00000020 000000000000000000000000000000 : NT!RtlpxVirtualUnwind+0xb6
FFFF8381'BD95C160 FFFF806'EFBdb96F : FFFF8381'BD95C8F0 FFFFF8381'BD95CDF0 FFFF8381'bd95C8F0 FFFFD909'D7076990 : NT!RtlDispatchException+0x1fb
ffff8381'bd95c8c0 fffff806'efea222 : 4858498b' 49107460 8b000eeb'e5e8D08b 0be0ca69'4918ebd8 8d4804c0'83490000 : NT!KiDispatchException+0x35f
FFFF8381'BD95CFB0 FFFF806'EFFEA21F0 : FFFFFFF806'EFeb613E FFFFB90E'20160080 FFFFFF806'A5F5529B FFFF8381'BE2E9180 : NT!KxExceptionDispatchOnExceptionStack+0x12
FFFFD909'D7076988 FFFFF806'EFeb613E : FFFFB90E'20160080 FFFFF806'A5F5529B FFFF8381'BE2E9180 FFFFD909'D7076AC0 : NT!KiExceptionDispatchOnExceptionStackContinu
ffffd909'd7076990 fffff806'efeb0e25 : 00000000000'00000028 ffd1bbaf'58d17130 ffe18faf'fdcd28c8 ffdde89c'267f60e0 : NT!KiExceptionDispatch+0x13e
FFFFD909'D7076B70 FFFFF806'A8eeCEAE : FFFFD909'D7076FB0 FFFFF806'efabb99b ffffb90e'2F841000 FFFFF806'EFAA5D79 : NT!KiGeneralProtectionFault+0x365
FFFFD909'D7076D00 FFFFD909'D7076FB0 : FFFFFFF806'EFABB99b FFFFB90E'2F841000 FFFFF806'EFAA5D79 FFFFA90C'020000000 : eaanticheat+0x357ceae
FFFFD909'D7076D08 FFFFF806'EFABB99b : FFFFB90E'2F841000 FFFFF806'EFAA5D79 FFFFA90c'020000000000000'4B677800 : 0xffffd909'D7076FB0
FFFFD909'D7076D10 FFFFF806'EFEA91AF : FFFFD909'D7077548 1fffff00'd4bb5A1a 00000000000'00000001 0000000000'00000002 : NT!KiDispatch中断+0x19b
ffffd909'd7076d40 ffffd909'd7077170 : 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000KiDpc中断+0x39f
ffffb90e'1afe1000 00000000000000 : 0000000000000000000 00 0xffffd909 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SYMBOL_NAME:eaanticheat+357ceae
MODULE_NAME:易作弊
IMAGE_NAME:eaanticheat.sys
STACK_COMMAND:.process /r /p 0xffffb90e20160080; .thread 0xffffb90e2c32d080 ;KB
BUCKET_ID_FUNC_OFFSET:357世纪
FAILURE_BUCKET_ID:AV_eaanticheat!unknown_function
OSPLATFORM_TYPE:x64
OSNAME:Windows 10
FAILURE_ID_HASH:{d544cf09-4735-e698-77c3-5df5924e5448}
后续:机械所有者
---------
这是运行《战地6》后的系统崩溃日志,还有我的个人电脑配置、NVIDIA驱动版本和Windows更新历史。EA的反作弊功能即使多次维修后仍然会崩溃。