J
joshuamur
This is what I got from opening a mindump in a debugger. The system is Windows XP SP3 and it keeps crashing. Please point me in the right direction. Thanks
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Compaq\Downloads\Mini020412-03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: C:\Windows\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b240
Debug session time: Sat Feb 4 22:56:09.765 2012 (UTC - 5:00)
System Uptime: 0 days 1:24:50.312
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
...............................
*** WARNING: Unable to verify timestamp for hal.dll
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {80000003, 806f1cd7, f0052cd8, 0}
Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: 80000003, The exception code that was not handled
Arg2: 806f1cd7, The address that the exception occurred at
Arg3: f0052cd8, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid
FAULTING_IP:
hal!IoFreeMapRegisters+73
806f1cd7 cc int 3
TRAP_FRAME: f0052cd8 -- (.trap 0xfffffffff0052cd8)
ErrCode = 00000000
eax=00000001 ebx=016cc870 ecx=00000000 edx=77f54020 esi=130910a0 edi=1104d7d8
eip=806f1cd8 esp=f0052d4c ebp=f0052d64 iopl=0 nv up di pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00040046
hal!IoFreeMapRegisters+0x74:
806f1cd8 80f902 cmp cl,2
Resetting default scope
CUSTOMER_CRASH_COUNT: 3
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: iexplore.exe
LAST_CONTROL_TRANSFER: from 1104d7d8 to 806f1cd8
STACK_TEXT:
f0052d64 1104d7d8 badb0d00 77f54020 00000000 hal!IoFreeMapRegisters+0x74
WARNING: Frame IP not in any known module. Following frames may be wrong.
f0052d74 00000000 00000000 00000000 00000000 0x1104d7d8
STACK_COMMAND: .trap 0xfffffffff0052cd8 kb
SYMBOL_NAME: ANALYSIS_INCONCLUSIVE
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
FAILURE_BUCKET_ID: 0x8E_ANALYSIS_INCONCLUSIVE
BUCKET_ID: 0x8E_ANALYSIS_INCONCLUSIVE
Followup: MachineOwner
---------
kd> .trap 0xfffffffff0052cd8
ErrCode = 00000000
eax=00000001 ebx=016cc870 ecx=00000000 edx=77f54020 esi=130910a0 edi=1104d7d8
eip=806f1cd8 esp=f0052d4c ebp=f0052d64 iopl=0 nv up di pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00040046
hal!IoFreeMapRegisters+0x74:
806f1cd8 80f902 cmp cl,2
Continue reading...
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Compaq\Downloads\Mini020412-03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: C:\Windows\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b240
Debug session time: Sat Feb 4 22:56:09.765 2012 (UTC - 5:00)
System Uptime: 0 days 1:24:50.312
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
...............................
*** WARNING: Unable to verify timestamp for hal.dll
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {80000003, 806f1cd7, f0052cd8, 0}
Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: 80000003, The exception code that was not handled
Arg2: 806f1cd7, The address that the exception occurred at
Arg3: f0052cd8, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid
FAULTING_IP:
hal!IoFreeMapRegisters+73
806f1cd7 cc int 3
TRAP_FRAME: f0052cd8 -- (.trap 0xfffffffff0052cd8)
ErrCode = 00000000
eax=00000001 ebx=016cc870 ecx=00000000 edx=77f54020 esi=130910a0 edi=1104d7d8
eip=806f1cd8 esp=f0052d4c ebp=f0052d64 iopl=0 nv up di pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00040046
hal!IoFreeMapRegisters+0x74:
806f1cd8 80f902 cmp cl,2
Resetting default scope
CUSTOMER_CRASH_COUNT: 3
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: iexplore.exe
LAST_CONTROL_TRANSFER: from 1104d7d8 to 806f1cd8
STACK_TEXT:
f0052d64 1104d7d8 badb0d00 77f54020 00000000 hal!IoFreeMapRegisters+0x74
WARNING: Frame IP not in any known module. Following frames may be wrong.
f0052d74 00000000 00000000 00000000 00000000 0x1104d7d8
STACK_COMMAND: .trap 0xfffffffff0052cd8 kb
SYMBOL_NAME: ANALYSIS_INCONCLUSIVE
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
FAILURE_BUCKET_ID: 0x8E_ANALYSIS_INCONCLUSIVE
BUCKET_ID: 0x8E_ANALYSIS_INCONCLUSIVE
Followup: MachineOwner
---------
kd> .trap 0xfffffffff0052cd8
ErrCode = 00000000
eax=00000001 ebx=016cc870 ecx=00000000 edx=77f54020 esi=130910a0 edi=1104d7d8
eip=806f1cd8 esp=f0052d4c ebp=f0052d64 iopl=0 nv up di pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00040046
hal!IoFreeMapRegisters+0x74:
806f1cd8 80f902 cmp cl,2
Continue reading...
