repeatedly getting this after 5 mins of playing ... was ok last night, this morning it's impossible (happened about a month ago and went away after uninstalling AV... now it's back ************* Path validation summary ************** Response Time (ms) Location Deferred srv* Symbol search path is: srv* Executable search path is: Windows 10 Kernel Version 18362 MP (24 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Machine Name: Kernel base = 0xfffff802`37800000 PsLoadedModuleList = 0xfffff802`37c48170 Debug session time: Sun Dec 1 09:52:16.792 2019 (UTC + 0:00) System Uptime: 0 days 0:05:14.441 Loading Kernel Symbols ............................................................... ................................................................ ................................................................ ..................................... Loading User Symbols Loading unloaded module list ......... For analysis of this file, run !analyze -v nt!KeBugCheckEx: fffff802`379c14e0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff604`c126c0b0=0000000000000139 16: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_SECURITY_CHECK_FAILURE (139) A kernel component has corrupted a critical data structure. The corruption could potentially allow a malicious user to gain control of this machine. Arguments: Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove). Arg2: fffff604c126c3d0, Address of the trap frame for the exception that caused the bugcheck Arg3: fffff604c126c328, Address of the exception record for the exception that caused the bugcheck Arg4: 0000000000000000, Reserved Debugging Details: ------------------ *** WARNING: Unable to verify timestamp for BEDaisy.sys KEY_VALUES_STRING: 1 Key : Analysis.CPU.Sec Value: 2 Key : Analysis.DebugAnalysisProvider.CPP Value: Create: 8007007e on WIN10AMD Key : Analysis.DebugData Value: CreateObject Key : Analysis.DebugModel Value: CreateObject Key : Analysis.Elapsed.Sec Value: 2 Key : Analysis.Memory.CommitPeak.Mb Value: 71 Key : Analysis.System Value: CreateObject DUMP_FILE_ATTRIBUTES: 0x8 Kernel Generated Triage Dump BUGCHECK_CODE: 139 BUGCHECK_P1: 3 BUGCHECK_P2: fffff604c126c3d0 BUGCHECK_P3: fffff604c126c328 BUGCHECK_P4: 0 TRAP_FRAME: fffff604c126c3d0 -- (.trap 0xfffff604c126c3d0) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=ffffa7839d2d1620 rbx=0000000000000000 rcx=0000000000000003 rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000 rip=fffff80237848b10 rsp=fffff604c126c560 rbp=ffffa7839d25e040 r8=0000000000000001 r9=0000000000000002 r10=ffffa783848efa00 r11=ffff95007f18d180 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz na pe cy nt!KiExitDispatcher+0x160: fffff802`37848b10 cd29 int 29h Resetting default scope EXCEPTION_RECORD: fffff604c126c328 -- (.exr 0xfffff604c126c328) ExceptionAddress: fffff80237848b10 (nt!KiExitDispatcher+0x0000000000000160) ExceptionCode: c0000409 (Security check failure or stack buffer overrun) ExceptionFlags: 00000001 NumberParameters: 1 Parameter[0]: 0000000000000003 Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY CUSTOMER_CRASH_COUNT: 1 PROCESS_NAME: System ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application. EXCEPTION_CODE_STR: c0000409 EXCEPTION_PARAMETER1: 0000000000000003 EXCEPTION_STR: 0xc0000409 STACK_TEXT: fffff604`c126c0a8 fffff802`379d32e9 : 00000000`00000139 00000000`00000003 fffff604`c126c3d0 fffff604`c126c328 : nt!KeBugCheckEx fffff604`c126c0b0 fffff802`379d3710 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69 fffff604`c126c1f0 fffff802`379d1aa5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00ffffff : nt!KiFastFailDispatch+0xd0 fffff604`c126c3d0 fffff802`37848b10 : 00000000`00000000 fffff604`c126c601 ffff9500`7f18d180 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x325 fffff604`c126c560 fffff802`378a597d : ffffa783`9d2d1618 00000000`00000200 ffff9500`7f18d101 fffff802`37b6f06d : nt!KiExitDispatcher+0x160 fffff604`c126c5c0 fffff802`878b07f8 : 00000000`00003600 ffffa783`9da42068 00000000`00000100 00000000`00000002 : nt!KeInsertQueueApc+0x14d fffff604`c126c660 00000000`00003600 : ffffa783`9da42068 00000000`00000100 00000000`00000002 00000000`00000000 : BEDaisy+0x2b07f8 fffff604`c126c668 ffffa783`9da42068 : 00000000`00000100 00000000`00000002 00000000`00000000 00000000`00000000 : 0x3600 fffff604`c126c670 00000000`00000100 : 00000000`00000002 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffffa783`9da42068 fffff604`c126c678 00000000`00000002 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x100 fffff604`c126c680 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x2 SYMBOL_NAME: BEDaisy+2b07f8 MODULE_NAME: BEDaisy IMAGE_NAME: BEDaisy.sys STACK_COMMAND: .thread ; .cxr ; kb BUCKET_ID_FUNC_OFFSET: 2b07f8 FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_BEDaisy!unknown_function OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {59d8eb10-b2e4-7df6-f6a5-49968226dbb8} Followup: MachineOwner ---------
It's BatllEye (another link). You can try to: 1) Validate your files through game launcher. 2) Completely uninstall and install game. 3) Roll back or update your Windows 10. 4) Contact support. 5) Turn off your programs one by one until you find the cause.
