Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Kyle\Downloads\Yehovah\041416-26083-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.23392.amd64fre.win7sp1_ldr.160317-0600
Machine Name:
Kernel base = 0xfffff800`02a1c000 PsLoadedModuleList = 0xfffff800`02c5e730
Debug session time: Fri Apr 15 00:07:15.635 2016 (UTC + 1:00)
System Uptime: 1 days 10:35:56.321
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff9600010d7ad, fffff88008e42140, 0}
Probably caused by : win32k.sys ( win32k!HMFreeObject+69 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff9600010d7ad, Address of the instruction which caused the bugcheck
Arg3: fffff88008e42140, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
win32k!HMFreeObject+69
fffff960`0010d7ad ff4844 dec dword ptr [rax+44h]
CONTEXT: fffff88008e42140 -- (.cxr 0xfffff88008e42140)
rax=fdfff900c1f20310 rbx=fffff900c0402ce8 rcx=fffff960002fd35c
rdx=fffff900c062f330 rsi=fffff900c205c1b0 rdi=0000000000000000
rip=fffff9600010d7ad rsp=fffff88008e42b20 rbp=fffff900c205c202
r8=0000000000000000 r9=0000000000000001 r10=fffffa8011f8beb0
r11=fffff900c1f20310 r12=fffff96000335650 r13=0000000000000001
r14=0000000000000000 r15=0000000000000001
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
win32k!HMFreeObject+0x69:
fffff960`0010d7ad ff4844 dec dword ptr [rax+44h] ds:002b:fdfff900`c1f20354=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: GWXUX.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff960000c6df0 to fffff9600010d7ad
STACK_TEXT:
fffff880`08e42b20 fffff960`000c6df0 : fffff900`c205c1b0 fffff900`c205c220 00000000`00000000 00000000`001a0018 : win32k!HMFreeObject+0x69
fffff880`08e42b60 fffff960`000fac07 : 00000000`00000000 00000000`0003026e 00000000`000f9182 fffff960`0010e47b : win32k!FreeTimer+0x88
fffff880`08e42b90 fffff960`000c6d46 : 00000000`00000000 00000000`000f9182 fffff880`08e42ca0 00000000`000f9182 : win32k!FindTimer+0xb7
fffff880`08e42be0 fffff800`02a8b613 : fffffa80`0eb15060 00000000`02e1c0e0 00000000`00000020 00000001`3f751040 : win32k!NtUserKillTimer+0x62
fffff880`08e42c20 00000000`76e9916a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`000bf668 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76e9916a
FOLLOWUP_IP:
win32k!HMFreeObject+69
fffff960`0010d7ad ff4844 dec dword ptr [rax+44h]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!HMFreeObject+69
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 56fac120
STACK_COMMAND: .cxr 0xfffff88008e42140 ; kb
FAILURE_BUCKET_ID: X64_0x3B_win32k!HMFreeObject+69
BUCKET_ID: X64_0x3B_win32k!HMFreeObject+69
Followup: MachineOwner
---------
1: kd> lmvm win32k
start end module name
fffff960`00040000 fffff960`00366000 win32k (pdb symbols) c:\symbols\win32k.pdb\ECAB262A42A246B2BCA0667C1C74E93E2\win32k.pdb
Loaded symbol image file: win32k.sys
Mapped memory image file: c:\symbols\win32k.sys\56FAC120326000\win32k.sys
Image path: \SystemRoot\System32\win32k.sys
Image name: win32k.sys
Timestamp: Tue Mar 29 18:53:36 2016 (56FAC120)
CheckSum: 0031707E
ImageSize: 00326000
File version: 6.1.7601.23407
Product version: 6.1.7601.23407
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32k.sys
OriginalFilename: win32k.sys
ProductVersion: 6.1.7601.23407
FileVersion: 6.1.7601.23407 (win7sp1_ldr.160329-0600)
FileDescription: Multi-User Win32 Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.