Loading Dump File [C:\Windows\Minidump\061824-8718-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 22621 MP (16 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Kernel base = 0xfffff801`70000000 PsLoadedModuleList = 0xfffff801`70c13150
Debug session time: Tue Jun 18 23:16:08.567 2024 (UTC + 8:00)
System Uptime: 0 days 0:01:04.249
Loading Kernel Symbols
...............................................................
................................................................
................................................................
......................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`00e6c018). Type ".hh dbgerr001" for details
Loading unloaded module list
......
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff801`7041a240 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffa28a`8597f0b0=0000000000000139
6: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 000000000000000a, Indirect call guard check detected invalid control transfer.
Arg2: 0000000000000000, Address of the trap frame for the exception that caused the BugCheck
Arg3: 0000000000000000, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for steamxbox.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 2733
Key : Analysis.Elapsed.mSec
Value: 55047
Key : Analysis.IO.Other.Mb
Value: 8
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 40
Key : Analysis.Init.CPU.mSec
Value: 312
Key : Analysis.Init.Elapsed.mSec
Value: 228617
Key : Analysis.Memory.CommitPeak.Mb
Value: 110
Key : Bugcheck.Code.LegacyAPI
Value: 0x139
Key : Bugcheck.Code.TargetModel
Value: 0x139
Key : Dump.Attributes.AsUlong
Value: 1008
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 0
Key : Failure.Bucket
Value: 0x139_a_GUARD_ICALL_CHECK_FAILURE_steamxbox!unknown_function
Key : Failure.Hash
Value: {0daed6c3-150d-ee60-8a02-c5e9bd84ec89}
BUGCHECK_CODE: 139
BUGCHECK_P1: a
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
FILE_IN_CAB: 061824-8718-01.dmp
DUMP_FILE_ATTRIBUTES: 0x1008
Kernel Generated Triage Dump
TRAP_FRAME: 0000000000000000 -- (.trap 0x0)
EXCEPTION_RECORD: 0000000000000000 -- (.exr 0x0)
Cannot read Exception record @ 0000000000000000
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: steam.exe
STACK_TEXT:
ffffa28a`8597f0a8 fffff801`7042537e : 00000000`00000139 00000000`0000000a 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
ffffa28a`8597f0b0 fffff801`734d62d1 : 00000000`ffffffff fffff801`734d86c3 ffffae0f`0d2f7a40 fffff801`734d60b3 : nt!guard_icall_bugcheck+0x1e
ffffa28a`8597f0e0 fffff801`734d6277 : ffffa28a`8597f1f0 00000000`00000000 00000000`00000000 ffffae0e`fe9395d0 : Wdf01000!FxObjectHandleGetPtrQI+0x49 [minkernel\wdf\framework\shared\object\handleapi.cpp @ 436]
ffffa28a`8597f150 fffff801`73503c46 : fffff801`abcc1350 fffff801`abcbdf90 00000000`00000000 fffff801`abcdd21d : Wdf01000!FxObjectHandleGetPtr+0x47 [minkernel\wdf\framework\shared\inc\private\common\fxhandle.h @ 356]
ffffa28a`8597f190 fffff801`abcaa31f : 00000000`00000000 0000e1d1`4d2cb8fc ffffa28a`8597f2a8 000051f0`e6587f88 : Wdf01000!imp_WdfMemoryGetBuffer+0x26 [minkernel\wdf\framework\shared\core\fxmemorybufferapi.cpp @ 200]
ffffa28a`8597f1c0 00000000`00000000 : 0000e1d1`4d2cb8fc ffffa28a`8597f2a8 000051f0`e6587f88 ffffae0f`20b993c0 : steamxbox+0xa31f
SYMBOL_NAME: steamxbox+a31f
MODULE_NAME: steamxbox
IMAGE_NAME: steamxbox.sys
STACK_COMMAND: .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET: a31f
FAILURE_BUCKET_ID: 0x139_a_GUARD_ICALL_CHECK_FAILURE_steamxbox!unknown_function
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {0daed6c3-150d-ee60-8a02-c5e9bd84ec89}
Followup: MachineOwner
---------

错误详细分析
错误代码及参数：
Bugcheck Code（故障检查代码）：139
参数 1 (0x0000000a)：表示“间接调用保护检查检测到无效的控制转移”，这是Windows设计的一项安全功能，旨在防止恶意软件篡改代码执行流程。
可疑模块：
文件：steamxbox.sys
无法验证 steamxbox.sys 时间戳的警告表明，这个驱动程序可能已被破坏或篡改。这个驱动程序与Steam上Xbox外设的功能相关，可能是导致系统不稳定的原因。
系统上下文：
崩溃发生时运行的进程是 steam.exe，这是Steam客户端的主执行文件。这一上下文表明，崩溃可能与游戏硬件或软件相关，特别是与由 steamxbox.sys 驱动管理的Xbox外设的交互。
堆栈跟踪分析：
堆栈跟踪显示崩溃是在 steamxbox.sys 驱动内的一个函数调用期间触发的。Wdf01000 模块（属于Windows驱动程序框架的一部分）中的 FxObjectHandleGetPtrQI 函数涉及其中，表明问题可能与Steam Xbox驱动程序如何与Windows内核APIs交互有关。 以上内容为chatgpt4分析，lz说明情况

各位谨慎安装xbox拓展驱动

没听说过这东西，干嘛用的？

我今天也遇到这个问题了，楼主是怎么解决的

我也显示steamxbox.sys出问题，一开steam就蓝屏，直接把这个文件删了还是怎么说

我也遇到这个问题了，应该怎样解决啊，怎么删除那个文件？

但这样xbox精英手柄就变得和普通手柄没区别了

大佬，请问是卸载的哪一个驱动啊，名字是什么？