Code:
aswSnx+0x2c9cc:
fffff880`03e989cc 4c8bdc mov r11,rsp
fffff880`03e989cf 49895b08 mov qword ptr [r11+8],rbx
fffff880`03e989d3 49897310 mov qword ptr [r11+10h],rsi
fffff880`03e989d7 49897b20 mov qword ptr [r11+20h],rdi
fffff880`03e989db 4d894318 mov qword ptr [r11+18h],r8
fffff880`03e989df 4154 push r12
fffff880`03e989e1 4883ec60 sub rsp,60h
fffff880`03e989e5 498bf8 mov rdi,r8
fffff880`03e989e8 8bda mov ebx,edx
fffff880`03e989ea 488bf1 mov rsi,rcx
fffff880`03e989ed 488b842490000000 mov rax,qword ptr [rsp+90h]
fffff880`03e989f5 498943b8 mov qword ptr [r11-48h],rax
fffff880`03e989f9 ff1581330b00 call qword ptr [aswSnx+0xdfd80 (fffff880`03f4bd80)]
fffff880`03e989ff 448be0 mov r12d,eax
fffff880`03e98a02 89442430 mov dword ptr [rsp+30h],eax
fffff880`03e98a06 85c0 test eax,eax
fffff880`03e98a08 0f88fc010000 js aswSnx+0x2cc0a (fffff880`03e98c0a)
aswSnx+0x2ca0e:
fffff880`03e98a0e ff159caf0600 call qword ptr [aswSnx+0x979b0 (fffff880`03f039b0)]
fffff880`03e98a14 3c01 cmp al,1
fffff880`03e98a16 0f85ee010000 jne aswSnx+0x2cc0a (fffff880`03e98c0a)
aswSnx+0x2ca1c:
fffff880`03e98a1c 83fb01 cmp ebx,1
fffff880`03e98a1f 0f85e5010000 jne aswSnx+0x2cc0a (fffff880`03e98c0a)
aswSnx+0x2ca25:
fffff880`03e98a25 48c744244070020000 mov qword ptr [rsp+40h],270h
fffff880`03e98a2e 488364243800 and qword ptr [rsp+38h],0
fffff880`03e98a34 ff1576af0600 call qword ptr [aswSnx+0x979b0 (fffff880`03f039b0)]
fffff880`03e98a3a 84c0 test al,al
fffff880`03e98a3c 751a jne aswSnx+0x2ca58 (fffff880`03e98a58)
aswSnx+0x2ca3e:
fffff880`03e98a3e 41b8536e7820 mov r8d,20786E53h
fffff880`03e98a44 488b542440 mov rdx,qword ptr [rsp+40h]
fffff880`03e98a49 8bcb mov ecx,ebx
fffff880`03e98a4b ff15ffaf0600 call qword ptr [aswSnx+0x97a50 (fffff880`03f03a50)]
fffff880`03e98a51 4889442438 mov qword ptr [rsp+38h],rax
fffff880`03e98a56 eb2c jmp aswSnx+0x2ca84 (fffff880`03e98a84)
aswSnx+0x2ca58:
fffff880`03e98a58 c744242804000000 mov dword ptr [rsp+28h],4
fffff880`03e98a60 c744242000100000 mov dword ptr [rsp+20h],1000h
fffff880`03e98a68 4c8d4c2440 lea r9,[rsp+40h]
fffff880`03e98a6d 4533c0 xor r8d,r8d
fffff880`03e98a70 488d542438 lea rdx,[rsp+38h]
fffff880`03e98a75 4883c9ff or rcx,0FFFFFFFFFFFFFFFFh
fffff880`03e98a79 ff15f9aa0600 call qword ptr [aswSnx+0x97578 (fffff880`03f03578)]
fffff880`03e98a7f 488b442438 mov rax,qword ptr [rsp+38h]
aswSnx+0x2ca84:
fffff880`03e98a84 4885c0 test rax,rax
fffff880`03e98a87 0f847d010000 je aswSnx+0x2cc0a (fffff880`03e98c0a)
aswSnx+0x2ca8d:
fffff880`03e98a8d 488364242000 and qword ptr [rsp+20h],0
fffff880`03e98a93 448b4c2440 mov r9d,dword ptr [rsp+40h]
fffff880`03e98a98 4c8bc0 mov r8,rax
fffff880`03e98a9b ba02000000 mov edx,2
fffff880`03e98aa0 488bce mov rcx,rsi
fffff880`03e98aa3 ff15d7320b00 call qword ptr [aswSnx+0xdfd80 (fffff880`03f4bd80)]
fffff880`03e98aa9 8bf0 mov esi,eax
fffff880`03e98aab 85c0 test eax,eax
fffff880`03e98aad 0f881b010000 js aswSnx+0x2cbce (fffff880`03e98bce)
aswSnx+0x2cab3:
fffff880`03e98ab3 488d15464b0b00 lea rdx,[aswSnx+0xe1600 (fffff880`03f4d600)]
fffff880`03e98aba 488d4c2448 lea rcx,[rsp+48h]
fffff880`03e98abf e850670c00 call aswSnx+0xf3214 (fffff880`03f5f214)
fffff880`03e98ac4 85c0 test eax,eax
fffff880`03e98ac6 0f8802010000 js aswSnx+0x2cbce (fffff880`03e98bce)
aswSnx+0x2cacc:
fffff880`03e98acc 488b4c2438 mov rcx,qword ptr [rsp+38h]
fffff880`03e98ad1 f30f6f01 movdqu xmm0,xmmword ptr [rcx] <---- crash
fffff880`03e98ad5 f30f7f442450 movdqu xmmword ptr [rsp+50h],xmm0
fffff880`03e98adb ff15cfae0600 call qword ptr [aswSnx+0x979b0 (fffff880`03f039b0)]
fffff880`03e98ae1 3c01 cmp al,1
fffff880`03e98ae3 7426 je aswSnx+0x2cb0b (fffff880`03e98b0b)
aswSnx+0x2cae5:
fffff880`03e98ae5 488b4c2458 mov rcx,qword ptr [rsp+58h]
fffff880`03e98aea 488b05b7a90600 mov rax,qword ptr [aswSnx+0x974a8 (fffff880`03f034a8)]
fffff880`03e98af1 483b08 cmp rcx,qword ptr [rax]
fffff880`03e98af4 761a jbe aswSnx+0x2cb10 (fffff880`03e98b10)
aswSnx+0x2caf6:
fffff880`03e98af6 488d542450 lea rdx,[rsp+50h]
fffff880`03e98afb 488b5c2448 mov rbx,qword ptr [rsp+48h]
fffff880`03e98b00 488bcb mov rcx,rbx
fffff880`03e98b03 ff157fad0600 call qword ptr [aswSnx+0x97888 (fffff880`03f03888)]
fffff880`03e98b09 eb47 jmp aswSnx+0x2cb52 (fffff880`03e98b52)
aswSnx+0x2cb0b:
fffff880`03e98b0b 488b4c2458 mov rcx,qword ptr [rsp+58h]
aswSnx+0x2cb10:
fffff880`03e98b10 0fb7442450 movzx eax,word ptr [rsp+50h]
fffff880`03e98b15 6685c0 test ax,ax
fffff880`03e98b18 740f je aswSnx+0x2cb29 (fffff880`03e98b29)
aswSnx+0x2cb1a:
fffff880`03e98b1a 0fb7d0 movzx edx,ax
fffff880`03e98b1d 41b801000000 mov r8d,1
fffff880`03e98b23 ff1547a70600 call qword ptr [aswSnx+0x97270 (fffff880`03f03270)]
aswSnx+0x2cb29:
fffff880`03e98b29 488d542450 lea rdx,[rsp+50h]
fffff880`03e98b2e 488b5c2448 mov rbx,qword ptr [rsp+48h]
fffff880`03e98b33 488bcb mov rcx,rbx
fffff880`03e98b36 ff154cad0600 call qword ptr [aswSnx+0x97888 (fffff880`03f03888)]
fffff880`03e98b3c eb14 jmp aswSnx+0x2cb52 (fffff880`03e98b52)
aswSnx+0x2cb52:
fffff880`03e98b52 85f6 test esi,esi
fffff880`03e98b54 7869 js aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cb56:
fffff880`03e98b56 41b001 mov r8b,1
fffff880`03e98b59 488d15d0110b00 lea rdx,[aswSnx+0xddd30 (fffff880`03f49d30)]
fffff880`03e98b60 488bcb mov rcx,rbx
fffff880`03e98b63 ff1557ad0600 call qword ptr [aswSnx+0x978c0 (fffff880`03f038c0)]
fffff880`03e98b69 85c0 test eax,eax
fffff880`03e98b6b 751e jne aswSnx+0x2cb8b (fffff880`03e98b8b)
aswSnx+0x2cb6d:
fffff880`03e98b6d 488bcf mov rcx,rdi
fffff880`03e98b70 e89fe1fdff call aswSnx+0xad14 (fffff880`03e76d14)
fffff880`03e98b75 84c0 test al,al
fffff880`03e98b77 7446 je aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cb79:
fffff880`03e98b79 4c8bc7 mov r8,rdi
fffff880`03e98b7c 488bd7 mov rdx,rdi
fffff880`03e98b7f b902000000 mov ecx,2
fffff880`03e98b84 e88b2cfeff call aswSnx+0xf814 (fffff880`03e7b814)
fffff880`03e98b89 eb34 jmp aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cb8b:
fffff880`03e98b8b 41b001 mov r8b,1
fffff880`03e98b8e 488d158b110b00 lea rdx,[aswSnx+0xddd20 (fffff880`03f49d20)]
fffff880`03e98b95 488bcb mov rcx,rbx
fffff880`03e98b98 ff1522ad0600 call qword ptr [aswSnx+0x978c0 (fffff880`03f038c0)]
fffff880`03e98b9e 85c0 test eax,eax
fffff880`03e98ba0 751d jne aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cba2:
fffff880`03e98ba2 66833f4e cmp word ptr [rdi],4Eh
fffff880`03e98ba6 7217 jb aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cba8:
fffff880`03e98ba8 488bcf mov rcx,rdi
fffff880`03e98bab e850960300 call aswSnx+0x66200 (fffff880`03ed2200)
fffff880`03e98bb0 84c0 test al,al
fffff880`03e98bb2 740b je aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cbb4:
fffff880`03e98bb4 488bd7 mov rdx,rdi
fffff880`03e98bb7 488bcf mov rcx,rdi
fffff880`03e98bba e88d960300 call aswSnx+0x6624c (fffff880`03ed224c)
aswSnx+0x2cbbf:
fffff880`03e98bbf 488d153a4a0b00 lea rdx,[aswSnx+0xe1600 (fffff880`03f4d600)]
fffff880`03e98bc6 488bcb mov rcx,rbx
fffff880`03e98bc9 e89ec20400 call aswSnx+0x78e6c (fffff880`03ee4e6c)
aswSnx+0x2cbce:
fffff880`03e98bce ff15dcad0600 call qword ptr [aswSnx+0x979b0 (fffff880`03f039b0)]
fffff880`03e98bd4 84c0 test al,al
fffff880`03e98bd6 7512 jne aswSnx+0x2cbea (fffff880`03e98bea)
aswSnx+0x2cbd8:
fffff880`03e98bd8 ba536e7820 mov edx,20786E53h
fffff880`03e98bdd 488b4c2438 mov rcx,qword ptr [rsp+38h]
fffff880`03e98be2 ff1538ae0600 call qword ptr [aswSnx+0x97a20 (fffff880`03f03a20)]
fffff880`03e98be8 eb20 jmp aswSnx+0x2cc0a (fffff880`03e98c0a)
aswSnx+0x2cbea:
fffff880`03e98bea 488364244000 and qword ptr [rsp+40h],0
fffff880`03e98bf0 41b900800000 mov r9d,8000h
fffff880`03e98bf6 4c8d442440 lea r8,[rsp+40h]
fffff880`03e98bfb 488d542438 lea rdx,[rsp+38h]
fffff880`03e98c00 4883c9ff or rcx,0FFFFFFFFFFFFFFFFh
fffff880`03e98c04 ff15eea80600 call qword ptr [aswSnx+0x974f8 (fffff880`03f034f8)]
aswSnx+0x2cc0a:
fffff880`03e98c0a 418bc4 mov eax,r12d
fffff880`03e98c0d 4c8d5c2460 lea r11,[rsp+60h]
fffff880`03e98c12 498b5b10 mov rbx,qword ptr [r11+10h]
fffff880`03e98c16 498b7318 mov rsi,qword ptr [r11+18h]
fffff880`03e98c1a 498b7b28 mov rdi,qword ptr [r11+28h]
fffff880`03e98c1e 498be3 mov rsp,r11
fffff880`03e98c21 415c pop r12
fffff880`03e98c23 c3 ret
2: kd> dd @rcx <--- register being moved... usermode addresses (can't see what the data is without a full dump)
00000000`072c0000 ???????? ???????? ???????? ????????
00000000`072c0010 ???????? ???????? ???????? ????????
00000000`072c0020 ???????? ???????? ???????? ????????
00000000`072c0030 ???????? ???????? ???????? ????????
00000000`072c0040 ???????? ???????? ???????? ????????
00000000`072c0050 ???????? ???????? ???????? ????????
00000000`072c0060 ???????? ???????? ???????? ????????
00000000`072c0070 ???????? ???????? ???????? ????????
As for getting a full memory dump, you might need to increase your pagefile size so that it's able to capture the entire contents of physical memory? I believe there are a number of causes of why a full dump can't be captured but this is probably a good start.