Jump to content

Gameguard is a flaming pile of crap that causes BSODs.


Dalamar6

Recommended Posts

And it also seems to clash with Defiance. It has closed Defiance on me before and it has made my screen bug out as well.

 

Loading Dump File [D:\MEMORY.DMP]
Kernel Bitmap Dump File: Only kernel address space is available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*d:\localsymbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*d:\localsymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 8 Kernel Version 10240 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 10240.16644.amd64fre.th1.160104-1507
Machine Name:
Kernel base = 0xfffff802`81090000 PsLoadedModuleList = 0xfffff802`813b5070
Debug session time: Fri Jan 29 22:59:07.099 2016 (UTC - 6:00)
System Uptime: 9 days 18:43:04.756
Loading Kernel Symbols
...............................................................
................................................................
...............................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`7ffdf018).  Type ".hh dbgerr001" for details
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff802810d8b5b, ffffd0002755b490, 0}

Probably caused by : ntkrnlmp.exe ( nt!ObReferenceObjectSafeWithTag+b )

Followup: MachineOwner
---------

5: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff802810d8b5b, Address of the instruction which caused the bugcheck
Arg3: ffffd0002755b490, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

FAULTING_IP:
nt!ObReferenceObjectSafeWithTag+b
fffff802`810d8b5b 488b01          mov     rax,qword ptr [rcx]

CONTEXT:  ffffd0002755b490 -- (.cxr 0xffffd0002755b490;r)
rax=ffffe001ddb82080 rbx=5c6600005c640000 rcx=5c6600005c63f940
rdx=000000006e457350 rsi=ffffe001e2f92080 rdi=5c6600005c63f970
rip=fffff802810d8b5b rsp=ffffd0002755beb0 rbp=ffffd0002755cb80
 r8=0000000000000000  r9=0000000000000000 r10=7fffe001d4625358
r11=7ffffffffffffffc r12=ffffe001d4625500 r13=0000000000000000
r14=ffffe001d4625358 r15=0000000000000000
iopl=0         nv up ei pl nz na pe cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010203
nt!ObReferenceObjectSafeWithTag+0xb:
fffff802`810d8b5b 488b01          mov     rax,qword ptr [rcx] ds:002b:5c660000`5c63f940=????????????????
Last set context:
rax=ffffe001ddb82080 rbx=5c6600005c640000 rcx=5c6600005c63f940
rdx=000000006e457350 rsi=ffffe001e2f92080 rdi=5c6600005c63f970
rip=fffff802810d8b5b rsp=ffffd0002755beb0 rbp=ffffd0002755cb80
 r8=0000000000000000  r9=0000000000000000 r10=7fffe001d4625358
r11=7ffffffffffffffc r12=ffffe001d4625500 r13=0000000000000000
r14=ffffe001d4625358 r15=0000000000000000
iopl=0         nv up ei pl nz na pe cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010203
nt!ObReferenceObjectSafeWithTag+0xb:
fffff802`810d8b5b 488b01          mov     rax,qword ptr [rcx] ds:002b:5c660000`5c63f940=????????????????
Resetting default scope

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  GameMon.des

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre

LAST_CONTROL_TRANSFER:  from fffff802814c534e to fffff802810d8b5b

STACK_TEXT:  
ffffd000`2755beb0 fffff802`814c534e : 00000000`00000000 ffffd000`2755cb80 ffffd000`2755cb80 00000000`00000000 : nt!ObReferenceObjectSafeWithTag+0xb
ffffd000`2755bee0 fffff802`814f7fc1 : e001d462`50505b39 00000000`00010400 e001d462`50505b37 00000000`00000000 : nt!ExpGetProcessInformation+0x66e
ffffd000`2755c350 fffff802`814f7c5b : ffffd000`2755cb80 fffff802`815167dc ffffe001`e2f92080 00000000`00000000 : nt!ExpQuerySystemInformation+0x271
ffffd000`2755cac0 fffff802`811e9b63 : ffffe001`e2f92080 00000000`00000000 00000000`00000000 ffffe001`db55cb00 : nt!NtQuerySystemInformation+0x2b
ffffd000`2755cb00 00007ffd`ca3438da : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`056ce6c8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`ca3438da


FOLLOWUP_IP:
nt!ObReferenceObjectSafeWithTag+b
fffff802`810d8b5b 488b01          mov     rax,qword ptr [rcx]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ObReferenceObjectSafeWithTag+b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  568b25f7

STACK_COMMAND:  .cxr 0xffffd0002755b490 ; kb

BUCKET_ID_FUNC_OFFSET:  b

FAILURE_BUCKET_ID:  0x3B_nt!ObReferenceObjectSafeWithTag

BUCKET_ID:  0x3B_nt!ObReferenceObjectSafeWithTag

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x3b_nt!obreferenceobjectsafewithtag

FAILURE_ID_HASH:  {8f7baeb1-7cd1-60e5-1548-f8cc2b78c039}

Followup: MachineOwner
---------

 

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...