Indicates that there is a mismatch in the APC state index.
The address of the system call.
The value of the following: Thread->ApcStateIndex << 8 | Previous ApcStateIndex
The value of Thread->KernelApcDisable
The value of the previous KernelApcDisable
Indicates that kernel-mode code accessed paged memory at DISPATCH_LEVEL or above.
Memory referenced.
IRQL at the time.
0: Read, 1: Write.
Address which referenced memory.
Indicates that the current thread exceeded the permitted number of wait objects.
Indicates that a request for a spin lock was initiated when the spin lock was already owned.
Indicates that an unknown exception has occurred.
The unexcepted interrupt.
The unknown floating-point exception.
The enabled and asserted status bits.
Reserved.
Indicates that the reference count of an object is illegal for the current state of the object.
Object type of the object whose reference count is being lowered.
Object whose reference count is being lowered.
Reserved.
Reserved.
Indicates that a pool header is corrupt.
Indicates that a severe memory management error occurred.
Indicates that invalid system memory has been referenced.
Memory address referenced.
0: Read, 1: Write.
Address that referenced memory.
Reserved.
Indicates that the computer is attempting to run Windows on an unsupported processor.
Indicates that an invalid or protected handle was passed to NtClose.
The handle that was passed to NtClose.
0: The caller tried to close a protected handle, 1: The caller tried to close an invalid handle.
Indicates that the trial period for Windows has ended.
The low 32-bits of the expiration date.
The high 32-bits of the expiration date.
Reserved.
Reserved.
Indicates that the Windows EULA has been violated.
0x0: Offline product type changes have been attempted.
0x1: Offline changes to the Windows evaluation time period have been attempted.
0x2: The setup key could not be opened.
0x3: The setup mode could not be detected.
0x4: The SystemPrefix value from the setup key is missing.
0x5: Offline changes to the number of licensed processors have been attempted.
0x6: The ProductOptions key could not be opened.
0x7: The ProductType value could not be read.
0x8: Change Notify on ProductOptions failed.
0x9: Change Notify on SystemPrefix failed.
0xa: An NTW system was converted to an NTS system.
0xb: The reference of the setup key failed.
0xc: The reference of the product options key failed.
0xd: The attempt to open ProductOptions in the worker thread failed.
0xf: The attempt to open the setup key failed.
0x10: A failure occurred in the setup key worker thread.
0x11: A failure occurred in the product options key worker thread.
0x12: Unable to open the LicenseInfoSuites key for the suite.
0x13: Unable to query the LicenseInfoSuites key for the suite.
0x14: Unable to allocate memory.
0x15: Unable to reset the ConcurrentLimit value for the suite key.
0x16: Unable to open the license key for a suite product.
0x17: Unable to reset the ConcurrentLimit value for a suite product.
0x18: Unable to start the Change Notify for the LicenseInfoSuites.
0x19: A suite is running on a system that must be PDC.
0x1a: A failure occurred when enumerating the suites.
0x1b: Changes to the policy cache were attempted.
Indicates that an attempt was made to execute non-executable memory.
The address whose execution was attempted.
The contents of the page table entry (PTE).
Reserved.
Reserved.
Indicates that there are no free pages available to continue basic system operations.
Total number of dirty pages.
Number of non-writeable dirty pages.
Reserved.
Most recently modified write-error status.
Indicates that the user deliberately initiated a crash dump.