Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Using CE6.6 on Halo Wars 2 causes Windows to BSOD

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
cym104
How do I cheat?
Reputation: 0

Joined: 05 Mar 2017
Posts: 3

PostPosted: Sun Mar 05, 2017 3:53 am    Post subject: Using CE6.6 on Halo Wars 2 causes Windows to BSOD Reply with quote

Simply trying to perform a basic search on Halo Wars 2's main executable(HaloWars2_WinAppDX12Final.exe) will cause Windows to BSOD with the error code IRQL_NOT_LESS_OR_EQUAL.

Crash dump analysis below:

Code:


*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
   bit 0 : value 0 = read operation, 1 = write operation
   bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80192b8d5a5, address which referenced memory

Debugging Details:
------------------

Page 1400 not present in the dump file. Type ".hh dbgerr004" for details

Page e942c not present in the dump file. Type ".hh dbgerr004" for details

Page ed661 not present in the dump file. Type ".hh dbgerr004" for details

DUMP_CLASS: 1

DUMP_QUALIFIER: 401

BUILD_VERSION_STRING:  14986.1000.amd64fre.rs_prerelease.161202-1928

SYSTEM_MANUFACTURER:  Alienware

SYSTEM_PRODUCT_NAME:  Alienware 15 R2

SYSTEM_SKU:  Alienware 15 R2

SYSTEM_VERSION:  1.2.15

BIOS_VENDOR:  Alienware

BIOS_VERSION:  1.2.15

BIOS_DATE:  07/07/2016

BASEBOARD_MANUFACTURER:  Alienware

BASEBOARD_PRODUCT:  Alienware 15 R2

BASEBOARD_VERSION:  A00

DUMP_TYPE:  1

BUGCHECK_P1: 28

BUGCHECK_P2: 2

BUGCHECK_P3: 0

BUGCHECK_P4: fffff80192b8d5a5

READ_ADDRESS: *************************************************************************
***                                                                   ***
***                                                                   ***
***    Either you specified an unqualified symbol, or your debugger   ***
***    doesn't have full symbol information.  Unqualified symbol      ***
***    resolution is turned off by default. Please either specify a   ***
***    fully qualified symbol module!symbolname, or enable resolution ***
***    of unqualified symbols by typing ".symopt- 100". Note that   ***
***    enabling unqualified symbol resolution with network symbol     ***
***    server shares in the symbol path may cause the debugger to     ***
***    appear to hang for long periods of time when an incorrect      ***
***    symbol name is typed or the network symbol server is down.     ***
***                                                                   ***
***    For some commands to work properly, your symbol path           ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: AssignedRegionNonPagedPool                    ***
***                                                                   ***
*************************************************************************
Couldn't resolve error at 'AssignedRegionNonPagedPool].BaseAddress'
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Either you specified an unqualified symbol, or your debugger   ***
***    doesn't have full symbol information.  Unqualified symbol      ***
***    resolution is turned off by default. Please either specify a   ***
***    fully qualified symbol module!symbolname, or enable resolution ***
***    of unqualified symbols by typing ".symopt- 100". Note that   ***
***    enabling unqualified symbol resolution with network symbol     ***
***    server shares in the symbol path may cause the debugger to     ***
***    appear to hang for long periods of time when an incorrect      ***
***    symbol name is typed or the network symbol server is down.     ***
***                                                                   ***
***    For some commands to work properly, your symbol path           ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: AssignedRegionNonPagedPool                    ***
***                                                                   ***
*************************************************************************
Couldn't resolve error at 'AssignedRegionNonPagedPool].NumberOfBytes'

 0000000000000028

CURRENT_IRQL:  2

FAULTING_IP:
nt!MiProbeLeafFrame+11d745
fffff801`92b8d5a5 488b4628        mov     rax,qword ptr [rsi+28h]

CPU_COUNT: 8

CPU_MHZ: a20

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 5e

CPU_STEPPING: 3

CPU_MICROCODE: 6,5e,3,0 (F,M,S,R)  SIG: 84'00000000 (cache) 84'00000000 (init)

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  AV

PROCESS_NAME:  HaloWars2_WinAppDX12Final.exe

ANALYSIS_SESSION_HOST:  COMMANDER-AW15

ANALYSIS_SESSION_TIME:  03-05-2017 17:56:54.0699

ANALYSIS_VERSION: 10.0.14321.1024 amd64fre

TRAP_FRAME:  ffff8281cfa820e0 -- (.trap 0xffff8281cfa820e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff978000000028 rbx=0000000000000000 rcx=0000000000000000
rdx=ffff978000000028 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80192b8d5a5 rsp=ffff8281cfa82270 rbp=0000000000000000
 r8=ffffe40e7d48b460  r9=0000000000000001 r10=0000000fffffffff
r11=ffff978000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
nt!MiProbeLeafFrame+0x11d745:
fffff801`92b8d5a5 488b4628        mov     rax,qword ptr [rsi+28h] ds:00000000`00000028=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80192b6f929 to fffff80192b64240

STACK_TEXT: 
ffff8281`cfa81f98 fffff801`92b6f929 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffff8281`cfa81fa0 fffff801`92b6dc7e : 80000000`0000084f fffff801`92b51423 00000000`00000000 fffff801`92a641d4 : nt!KiBugCheckDispatch+0x69
ffff8281`cfa820e0 fffff801`92b8d5a5 : 00000000`00000000 fffff801`92b51423 00000000`00000000 001d95ca`010c93b6 : nt!KiPageFault+0x23e
ffff8281`cfa82270 fffff801`92a6f597 : 00000000`00000000 00000000`00000002 ffffe40e`9b224c08 00000401`d5c20000 : nt!MiProbeLeafFrame+0x11d745
ffff8281`cfa82370 fffff801`92e74e32 : 00000401`d5c20000 00000000`0000e000 00000000`00000003 00000000`00000000 : nt!MmProbeAndLockPages+0x267
ffff8281`cfa82480 fffff801`92e749ef : ffffe40e`9a0ce080 00000000`00000010 ffffe40e`7d4b9f20 00000000`00000001 : nt!MmCopyVirtualMemory+0x3d2
ffff8281`cfa82950 fffff801`92e74883 : ffffe40e`8b783740 00000000`3406fd18 ffff8281`cfa82a28 00000000`00000000 : nt!MiReadWriteVirtualMemory+0x15f
ffff8281`cfa829d0 fffff801`92b6f493 : 00000000`00000000 fffff801`92b51423 ffffe40e`7d4e6e00 ffff8281`c9543180 : nt!NtReadVirtualMemory+0x1b
ffff8281`cfa82a10 00007ff8`61fa63a4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`3406fcf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`61fa63a4


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
Page 1400 not present in the dump file. Type ".hh dbgerr004" for details
Page 1400 not present in the dump file. Type ".hh dbgerr004" for details
Page e942c not present in the dump file. Type ".hh dbgerr004" for details
Page e942c not present in the dump file. Type ".hh dbgerr004" for details
    fffff80192a17d98 - nt!MiMarkPfnVerified+20
   [ fa:97 ]
    fffff80192a20821 - nt!MiIsPfn+21 (+0x8a89)
   [ fa:97 ]
    fffff80192a20926 - nt!MiIdentifyPfn+46 (+0x105)
   [ fa:97 ]
    fffff80192a20bfe-fffff80192a20bff  2 bytes - nt!MiIdentifyPfn+31e (+0x2d8)
   [ 80 f6:00 f9 ]
    fffff80192a20ca7 - nt!MiIdentifyPfn+3c7 (+0xa9)
   [ fa:97 ]
    fffff80192a20ec6-fffff80192a20ec7  2 bytes - nt!MiIdentifyPfn+5e6 (+0x21f)
   [ ff f6:7f f9 ]
    fffff80192a20ed0-fffff80192a20ed1  2 bytes - nt!MiIdentifyPfn+5f0 (+0x0a)
   [ 80 f6:00 f9 ]
    fffff80192a20fd3-fffff80192a20fd4  2 bytes - nt!MiIdentifyPfn+6f3 (+0x103)
   [ ff f6:7f f9 ]
    fffff80192a20fe2-fffff80192a20fe6  5 bytes - nt!MiIdentifyPfn+702 (+0x0f)
   [ d0 be 7d fb f6:20 5f be 7c f9 ]
    fffff80192a21047-fffff80192a21048  2 bytes - nt!MiIdentifyPfn+767 (+0x65)
   [ ff f6:7f f9 ]
    fffff80192a21080-fffff80192a21081  2 bytes - nt!MiIdentifyPfn+7a0 (+0x39)
   [ ff f6:7f f9 ]
    fffff80192a21322-fffff80192a21323  2 bytes - nt!MiIdentifyPfn+a42 (+0x2a2)
   [ 80 f6:00 f9 ]
    fffff80192a2142f-fffff80192a21430  2 bytes - nt!MiIdentifyPfn+b4f (+0x10d)
   [ 80 f6:00 f9 ]
    fffff80192a2162e-fffff80192a21630  3 bytes - nt!ExFreeLargePool+6e (+0x1ff)
   [ 40 fb f6:80 7c f9 ]
    fffff80192a21b6b-fffff80192a21b6c  2 bytes - nt!ExFreeLargePool+5ab (+0x53d)
   [ 80 f6:00 f9 ]
    fffff80192a21eeb-fffff80192a21eec  2 bytes - nt!MiInsertNonPagedPoolOnSlist+4b (+0x380)
   [ 80 f6:00 f9 ]
    fffff80192a21f1a-fffff80192a21f1c  3 bytes - nt!MiInsertNonPagedPoolOnSlist+7a (+0x2f)
   [ 40 fb f6:80 7c f9 ]
    fffff80192a21f87 - nt!MiInsertNonPagedPoolOnSlist+e7 (+0x6d)
   [ fa:97 ]
    fffff80192a220f0 - nt!MiInsertNonPagedPoolOnSlist+250 (+0x169)
   [ fa:97 ]
    fffff80192a22270 - nt!MiInsertNonPagedPoolOnSlist+3d0 (+0x180)
   [ fa:97 ]
    fffff80192a22305 - nt!MiInsertNonPagedPoolOnSlist+465 (+0x95)
   [ fa:97 ]
    fffff80192a223c8-fffff80192a223c9  2 bytes - nt!MiInsertNonPagedPoolOnSlist+528 (+0xc3)
   [ 80 f6:00 f9 ]
    fffff80192a22bf8-fffff80192a22bfa  3 bytes - nt!ExpAllocateBigPool+738 (+0x830)
   [ 40 fb f6:80 7c f9 ]
Page 1400 not present in the dump file. Type ".hh dbgerr004" for details
    fffff80192a22c2c-fffff80192a22c2d  2 bytes - nt!ExpAllocateBigPool+76c (+0x34)
   [ 80 f6:00 f9 ]
    fffff80192a35bef-fffff80192a35bf0  2 bytes - nt!MmMapLockedPagesSpecifyCache+ff (+0x12fc3)
   [ 80 f6:00 f9 ]
    fffff80192a35c7e-fffff80192a35c80  3 bytes - nt!MmMapLockedPagesSpecifyCache+18e (+0x8f)
   [ 40 fb f6:80 7c f9 ]
    fffff80192a35cb8-fffff80192a35cbb  4 bytes - nt!MmMapLockedPagesSpecifyCache+1c8 (+0x3a)
   [ a0 7d fb f6:40 be 7c f9 ]
    fffff80192a35cca-fffff80192a35cce  5 bytes - nt!MmMapLockedPagesSpecifyCache+1da (+0x12)
   [ d0 be 7d fb f6:20 5f be 7c f9 ]
    fffff80192a35d80 - nt!MmMapLockedPagesSpecifyCache+290 (+0xb6)
   [ fa:97 ]
    fffff80192a35db6 - nt!MmMapLockedPagesSpecifyCache+2c6 (+0x36)
   [ fa:97 ]
    fffff80192a35ddd - nt!MmMapLockedPagesSpecifyCache+2ed (+0x27)
   [ fa:97 ]
    fffff80192a35e5a - nt!MmMapLockedPagesSpecifyCache+36a (+0x7d)
   [ fa:97 ]
    fffff80192a35f27-fffff80192a35f28  2 bytes - nt!MmMapLockedPagesSpecifyCache+437 (+0xcd)
   [ ff f6:7f f9 ]
    fffff80192a35f49-fffff80192a35f4d  5 bytes - nt!MmMapLockedPagesSpecifyCache+459 (+0x22)
   [ d7 be 7d fb f6:27 5f be 7c f9 ]
    fffff80192a35f63-fffff80192a35f65  3 bytes - nt!MmMapLockedPagesSpecifyCache+473 (+0x1a)
   [ 7f fb f6:bf 7c f9 ]
    fffff80192a35f7b-fffff80192a35f7d  3 bytes - nt!MmMapLockedPagesSpecifyCache+48b (+0x18)
   [ 5f fb f6:9f 7c f9 ]
    fffff80192a35f92-fffff80192a35f95  4 bytes - nt!MmMapLockedPagesSpecifyCache+4a2 (+0x17)
   [ af 7d fb f6:4f be 7c f9 ]
    fffff80192a3addc-fffff80192a3addd  2 bytes - nt!MiAllocatePagedPoolPages+36c (+0x4e4a)
   [ 80 f6:00 f9 ]
    fffff80192a3b617-fffff80192a3b618  2 bytes - nt!MiSetReadOnlyOnSectionView+a7 (+0x83b)
   [ 80 f6:00 f9 ]
    fffff80192a3b697 - nt!MiSetReadOnlyOnSectionView+127 (+0x80)
   [ fa:97 ]
    fffff80192a3b705-fffff80192a3b706  2 bytes - nt!MiSetReadOnlyOnSectionView+195 (+0x6e)
   [ 80 f6:00 f9 ]
    fffff80192a3b7d1 - nt!MiSetReadOnlyOnSectionView+261 (+0xcc)
   [ fa:97 ]
    fffff80192a3b8b6 - nt!MiSetReadOnlyOnSectionView+346 (+0xe5)
   [ fa:97 ]
Page 1400 not present in the dump file. Type ".hh dbgerr004" for details
    fffff80192a3bad4-fffff80192a3bad5  2 bytes - nt!MiFlushTbAsNeeded+64 (+0x21e)
   [ 80 f6:00 f9 ]
    fffff80192a3c983-fffff80192a3c984  2 bytes - nt!MiProtectPrivateMemory+b3 (+0xeaf)
   [ 80 f6:00 f9 ]
    fffff80192a3ca85 - nt!MiProtectPrivateMemory+1b5 (+0x102)
   [ fa:97 ]
    fffff80192a3ca97-fffff80192a3ca99  3 bytes - nt!MiProtectPrivateMemory+1c7 (+0x12)
   [ 40 fb f6:80 7c f9 ]
    fffff80192a3cbbf - nt!MiProtectPrivateMemory+2ef (+0x128)
   [ fa:97 ]
    fffff80192a3cbd1-fffff80192a3cbd3  3 bytes - nt!MiProtectPrivateMemory+301 (+0x12)
   [ 40 fb f6:80 7c f9 ]
    fffff80192a3cc7a - nt!MiProtectPrivateMemory+3aa (+0xa9)
   [ fa:97 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view  entire output.
Page e942c not present in the dump file. Type ".hh dbgerr004" for details
Page 1400 not present in the dump file. Type ".hh dbgerr004" for details

Page e9492 not present in the dump file. Type ".hh dbgerr004" for details


3864 errors : !nt (fffff80192a17d98-fffff8019307cc25)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE

FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_LARGE

BUCKET_ID:  MEMORY_CORRUPTION_LARGE

PRIMARY_PROBLEM_CLASS:  MEMORY_CORRUPTION_LARGE

TARGET_TIME:  2017-03-05T09:18:20.000Z

OSBUILD:  14986

OSSERVICEPACK:  0

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE: 

USER_LCID:  0

OSBUILD_TIMESTAMP:  2016-12-03 15:21:45

BUILDDATESTAMP_STR:  161202-1928

BUILDLAB_STR:  rs_prerelease

BUILDOSVER_STR:  10.0.14986.1000.amd64fre.rs_prerelease.161202-1928

ANALYSIS_SESSION_ELAPSED_TIME: 1d1d

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:memory_corruption_large

FAILURE_ID_HASH:  {e29154ac-69a4-0eb8-172a-a860f73c0a3c}

Followup:     memory_corruption
---------
Back to top
View user's profile Send private message
STN
I post too much
Reputation: 42

Joined: 09 Nov 2005
Posts: 2672

PostPosted: Sun Mar 05, 2017 9:15 am    Post subject: Reply with quote

Something's the problem with your system. I trained halo wars 2 and it doesn't have any protection at all.

Which debugger are you using?

_________________
Cheat Requests/Tables- Fearless Cheat Engine
https://fearlessrevolution.com
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 458

Joined: 09 May 2003
Posts: 25296
Location: The netherlands

PostPosted: Sun Mar 05, 2017 9:23 am    Post subject: Reply with quote

don't overclock your system, or lower the overclock at least.
while normal benchmarks won't get affected by overclocks ce scans are known to expose issues

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
cym104
How do I cheat?
Reputation: 0

Joined: 05 Mar 2017
Posts: 3

PostPosted: Sun Mar 05, 2017 7:37 pm    Post subject: Reply with quote

Dark Byte wrote:
don't overclock your system, or lower the overclock at least.
while normal benchmarks won't get affected by overclocks ce scans are known to expose issues

I'm not overclocking at all. Do you think it could have something to do with EMET?
STN wrote:
Something's the problem with your system. I trained halo wars 2 and it doesn't have any protection at all.

Which debugger are you using?

It's currently set to use windows debugger. All options are at default values.


Last edited by cym104 on Sun Mar 05, 2017 7:47 pm; edited 1 time in total
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 458

Joined: 09 May 2003
Posts: 25296
Location: The netherlands

PostPosted: Sun Mar 05, 2017 7:45 pm    Post subject: Reply with quote

See if it crashes if you use a non dx12 version of the game.

Also, is this an AMD gpu? In the past they where known to be crappy when it came to memory access. In settings->scan settings make sure mem_mapped is disabled, and enable "don't scan memory that is protected with the No Cache option"

And to be sure it's no ce driver issue, disable the options in settings->extra (if they aren't already disabled)

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
cym104
How do I cheat?
Reputation: 0

Joined: 05 Mar 2017
Posts: 3

PostPosted: Sun Mar 05, 2017 7:57 pm    Post subject: Reply with quote

Dark Byte wrote:
See if it crashes if you use a non dx12 version of the game.

Also, is this an AMD gpu? In the past they where known to be crappy when it came to memory access. In settings->scan settings make sure mem_mapped is disabled, and enable "don't scan memory that is protected with the No Cache option"

And to be sure it's no ce driver issue, disable the options in settings->extra (if they aren't already disabled)

Game seems to be DX12 exclusive, can't find any option to run it in non-DX12 mode.

I use a NV 970M

The 2 options you mentioned are already set to you recommended value.

These are my current CE config:



2017-03-06 (2).png
 Description:
 Filesize:  36.33 KB
 Viewed:  14839 Time(s)

2017-03-06 (2).png



2017-03-06 (1).png
 Description:
 Filesize:  21.46 KB
 Viewed:  14848 Time(s)

2017-03-06 (1).png



2017-03-06.png
 Description:
 Filesize:  37.22 KB
 Viewed:  14850 Time(s)

2017-03-06.png


Back to top
View user's profile Send private message
XxRaPiD4K3LLERxX
Newbie cheater
Reputation: 1

Joined: 08 Jan 2017
Posts: 11

PostPosted: Sun Mar 05, 2017 8:15 pm    Post subject: Reply with quote

I know this may be stupid but it could be some kind of anti-cheat. Actually it is stupid Neutral

Download Bluescreenviewer, then it will display recent BSOD, click the latest one and the details should show you, can you attach a pic of it?

_________________
Working on: WWE 2K16 Cheat Table v1.0.2
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites