
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Tiger\Desktop\Dump\Dump\032520-5828-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: srv*c:\symbolsstore*https://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 18362 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 18362.1.amd64fre.19h1_release.190318-1202
Machine Name:
Kernel base = 0xfffff800`27c00000 PsLoadedModuleList = 0xfffff800`28048150
Debug session time: Wed Mar 25 18:23:59.138 2020 (UTC + 1:00)
System Uptime: 0 days 0:01:21.803
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {61941, ffffa7010703868d, 9, fffff8002ba67180}

*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : memory_corruption

Followup: memory_corruption
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000061941, The subtype of the bugcheck.
Arg2: ffffa7010703868d
Arg3: 0000000000000009
Arg4: fffff8002ba67180

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_61941

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  System

CURRENT_IRQL:  2

TRAP_FRAME:  fffff8002ba67180 -- (.trap 0xfffff8002ba67180)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000600 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8002adeb8b2 rsp=fffff8002ba67310 rbp=00000000000005b6
 r8=ffffa70107038680  r9=0000000000000000 r10=0000000000000001
r11=ffff96feaf200001 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
ndis!ndisSortNetBufferLists+0x112:
fffff800`2adeb8b2 410fb6480d      movzx   ecx,byte ptr [r8+0Dh] ds:2aa1:ffffa701`0703868d=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80027e0d24a to fffff80027dc14e0

STACK_TEXT:  
fffff800`2ba67310 fffff800`2adeaf33 : 00000007`00000001 00000000`00000000 00000000`00000000 ffffe48b`00000000 : ndis!ndisSortNetBufferLists+0x112
fffff800`2ba673b0 fffff800`2adf0eb0 : ffffe48b`e304a1a0 fffff800`00000000 ffffe48b`e304a1a0 00000000`00000001 : ndis!ndisMTopReceiveNetBufferLists+0x133
fffff800`2ba674b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisCallReceiveHandler+0x60


STACK_COMMAND:  .trap 0xfffff8002ba67180 ; kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !hal
    fffff80027b602ca - hal!HalPerformEndOfInterrupt+1a
	[ 00:90 ]
    fffff80027b603a7-fffff80027b603a8  2 bytes - hal!HalPutScatterGatherList+67 (+0xdd)
	[ 48 ff:4c 8b ]
    fffff80027b603ae-fffff80027b603b1  4 bytes - hal!HalPutScatterGatherList+6e (+0x07)
	[ 0f 1f 44 00:e8 ed ec 40 ]
7 errors : !hal (fffff80027b602ca-fffff80027b603b1)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE

BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE

Followup: memory_corruption
---------

