0% found this document useful (0 votes)
419 views23 pages

Crash Archive

This document appears to be a crash dump file from a Windows system. It contains information about the system configuration, loaded modules, and details of the bugcheck/crash that occurred. The crash was caused by an attempt to access memory at too high of an IRQL level, likely due to an issue with a driver. Further debugging details and module information is provided.

Uploaded by

nkomli
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
419 views23 pages

Crash Archive

This document appears to be a crash dump file from a Windows system. It contains information about the system configuration, loaded modules, and details of the bugcheck/crash that occurred. The crash was caused by an attempt to access memory at too high of an IRQL level, likely due to an issue with a driver. Further debugging details and module information is provided.

Uploaded by

nkomli
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

Microsoft (R) Windows Debugger Version 10.0.14321.

1024 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [D:\DocumentArchive\crash\MEMORY.DMP]


Kernel Bitmap Dump File: Kernel address space is available, User address space may
not be available.

************************************************************************
WARNING: Dump file has inconsistent set-bit count. Data may be missing.
************************************************************************

************* Symbol Path validation summary **************


Response

Time (ms)

Location

OK
C:\symbols\mssmbios.pdb\09D137475CBE4BA886019EBE309BBC341
OK
C:\symbols\ntkrnlmp.pdb\D530E1D39E024EFF82EDB50767C75FBA1
Symbol search path is:
C:\symbols\mssmbios.pdb\09D137475CBE4BA886019EBE309BBC341;C:\symbols\nt
krnlmp.pdb\D530E1D39E024EFF82EDB50767C75FBA1
Executable search path is:
Windows 10 Kernel Version 14393 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 14393.206.amd64fre.rs1_release.160915-0644
Machine Name:
Kernel base = 0xfffff801`a4216000 PsLoadedModuleList = 0xfffff801`a451a080
Debug session time: Wed Oct 5 12:58:39.022 2016 (UTC - 7:00)
System Uptime: 0 days 0:20:02.738
Loading Kernel Symbols
...............................................................

................................................................
.....................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 000000e1`114f4018). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
*
*

*
Bugcheck Analysis

*
*

*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {2, ff, 4e, fffff801a42ebff2}

CompressedPageDataReader warning: failed to get _SM_PAGE_KEY symbol.


CompressedPageDataReader warning: failed to get _SM_PAGE_KEY symbol.
Probably caused by : ntkrnlmp.exe ( nt!KxWaitForLockOwnerShipWithIrql+12 )

Followup:

MachineOwner

---------

0: kd> !analyze -v
*******************************************************************************
*
*
*

*
Bugcheck Analysis

*
*

*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000002, memory referenced
Arg2: 00000000000000ff, IRQL
Arg3: 000000000000004e, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on
chips which support this level of status)
Arg4: fffff801a42ebff2, address which referenced memory

Debugging Details:
------------------

DUMP_CLASS: 1

DUMP_QUALIFIER: 401

BUILD_VERSION_STRING: 14393.206.amd64fre.rs1_release.160915-0644

SYSTEM_MANUFACTURER: Dell Inc.

SYSTEM_PRODUCT_NAME: Studio XPS 9100

SYSTEM_SKU: 0

SYSTEM_VERSION: 00

BIOS_VENDOR: Dell Computer Corporation

BIOS_VERSION: A04

BIOS_DATE: 10/21/2010

BASEBOARD_MANUFACTURER: Dell Inc.

BASEBOARD_PRODUCT: 05DN3X

BASEBOARD_VERSION: A00

DUMP_TYPE: 1

BUGCHECK_P1: 2

BUGCHECK_P2: ff

BUGCHECK_P3: 4e

BUGCHECK_P4: fffff801a42ebff2

READ_ADDRESS: *** WARNING: Unable to verify timestamp for win32kfull.sys


*** ERROR: Module load completed but symbols could not be loaded for
win32kfull.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
*** WARNING: Unable to verify timestamp for win32kbase.sys

*** ERROR: Module load completed but symbols could not be loaded for
win32kbase.sys
*** WARNING: Unable to verify timestamp for TSDDD.dll
*** ERROR: Module load completed but symbols could not be loaded for TSDDD.dll
*** WARNING: Unable to verify timestamp for ATMFD.DLL
*** ERROR: Module load completed but symbols could not be loaded for ATMFD.DLL
*** WARNING: Unable to verify timestamp for cdd.dll
*** ERROR: Module load completed but symbols could not be loaded for cdd.dll
*** WARNING: Unable to verify timestamp for kd.dll
*** ERROR: Module load completed but symbols could not be loaded for kd.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for hal.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for
BOOTVID.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for
FLTMGR.SYS *** ERROR: Symbol file could not be found. Defaulted to export symbols for
msrpc.sys *** ERROR: Symbol file could not be found. Defaulted to export symbols for
ksecdd.sys *** ERROR: Symbol file could not be found. Defaulted to export symbols for
clipsp.sys *** ERROR: Symbol file could not be found. Defaulted to export symbols for
cmimcext.sys *** ERROR: Symbol file could not be found. Defaulted to export symbols for
ntosext.sys *** ERROR: Symbol file could not be found. Defaulted to export symbols for CI.dll *** ERROR: Module load completed but symbols could not be loaded for
Wdf01000.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
WDFLDR.SYS *** ERROR: Module load completed but symbols could not be loaded for acpiex.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
WppRecorder.sys -

*** ERROR: Symbol file could not be found. Defaulted to export symbols for cng.sys
*** WARNING: Unable to verify timestamp for mcupdate_GenuineIntel.dll
*** ERROR: Module load completed but symbols could not be loaded for
mcupdate_GenuineIntel.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
werkernel.sys *** ERROR: Symbol file could not be found. Defaulted to export symbols for
CLFS.SYS *** ERROR: Symbol file could not be found. Defaulted to export symbols for tm.sys *** ERROR: Symbol file could not be found. Defaulted to export symbols for
PSHED.dll *** ERROR: Module load completed but symbols could not be loaded for intelpep.sys
*** ERROR: Module load completed but symbols could not be loaded for
WindowsTrustedRT.sys
*** ERROR: Module load completed but symbols could not be loaded for
WindowsTrustedRTProxy.sys
*** ERROR: Module load completed but symbols could not be loaded for pcw.sys
*** ERROR: Module load completed but symbols could not be loaded for
msisadrv.sys
*** ERROR: Module load completed but symbols could not be loaded for pci.sys
*** ERROR: Module load completed but symbols could not be loaded for
vdrvroot.sys
*** ERROR: Module load completed but symbols could not be loaded for pdc.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for CEA.sys
*** ERROR: Module load completed but symbols could not be loaded for partmgr.sys
*** ERROR: Module load completed but symbols could not be loaded for
spaceport.sys
*** ERROR: Module load completed but symbols could not be loaded for volmgr.sys
CompressedPageDataReader warning: failed to get _SM_PAGE_KEY symbol.
CompressedPageDataReader warning: failed to get _SM_PAGE_KEY symbol.
CompressedPageDataReader warning: failed to get _SM_PAGE_KEY symbol.
*** WARNING: Unable to verify timestamp for volmgrx.sys

*** ERROR: Module load completed but symbols could not be loaded for volmgrx.sys
*** ERROR: Module load completed but symbols could not be loaded for
mountmgr.sys
*** ERROR: Module load completed but symbols could not be loaded for storahci.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
storport.sys *** ERROR: Module load completed but symbols could not be loaded for
EhStorClass.sys
*** ERROR: Module load completed but symbols could not be loaded for fileinfo.sys
*** ERROR: Module load completed but symbols could not be loaded for Wof.sys
*** ERROR: Module load completed but symbols could not be loaded for
PxHlpa64.sys
*** ERROR: Module load completed but symbols could not be loaded for NTFS.sys
*** ERROR: Module load completed but symbols could not be loaded for Fs_Rec.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ndis.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
NETIO.SYS *** ERROR: Module load completed but symbols could not be loaded for ksecpkg.sys
*** ERROR: Module load completed but symbols could not be loaded for peauth.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
ACPI.sys *** ERROR: Symbol file could not be found. Defaulted to export symbols for
WMILIB.SYS *** ERROR: Module load completed but symbols could not be loaded for wfplwfs.sys
*** ERROR: Module load completed but symbols could not be loaded for fvevol.sys
*** ERROR: Module load completed but symbols could not be loaded for volume.sys
*** ERROR: Module load completed but symbols could not be loaded for volsnap.sys
*** ERROR: Module load completed but symbols could not be loaded for
rdyboost.sys
*** ERROR: Module load completed but symbols could not be loaded for pwdrvio.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
mup.sys -

*** ERROR: Module load completed but symbols could not be loaded for iorate.sys
*** ERROR: Module load completed but symbols could not be loaded for disk.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
CLASSPNP.SYS *** ERROR: Symbol file could not be found. Defaulted to export symbols for
crashdmp.sys *** ERROR: Symbol file could not be found. Defaulted to export symbols for
srvnet.sys *** ERROR: Module load completed but symbols could not be loaded for tcpipreg.sys
*** ERROR: Module load completed but symbols could not be loaded for cdrom.sys
*** ERROR: Module load completed but symbols could not be loaded for filecrypt.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for tbs.sys
*** ERROR: Module load completed but symbols could not be loaded for
savonaccess.sys
*** ERROR: Module load completed but symbols could not be loaded for Null.SYS
*** ERROR: Module load completed but symbols could not be loaded for Beep.SYS
*** ERROR: Module load completed but symbols could not be loaded for
BasicDisplay.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
watchdog.sys *** ERROR: Symbol file could not be found. Defaulted to export symbols for
dxgkrnl.sys *** ERROR: Module load completed but symbols could not be loaded for
BasicRender.sys
*** ERROR: Module load completed but symbols could not be loaded for Npfs.SYS
*** ERROR: Module load completed but symbols could not be loaded for Msfs.SYS
*** ERROR: Module load completed but symbols could not be loaded for tdx.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for TDI.SYS
*** ERROR: Module load completed but symbols could not be loaded for netbt.sys
*** ERROR: Module load completed but symbols could not be loaded for afd.sys
Page 101de2 not present in the dump file. Type ".hh dbgerr004" for details

Page 101de2 not present in the dump file. Type ".hh dbgerr004" for details
*** ERROR: Module load completed but symbols could not be loaded for vwififlt.sys
*** ERROR: Module load completed but symbols could not be loaded for pacer.sys
*** ERROR: Module load completed but symbols could not be loaded for netbios.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
rdbss.sys *** ERROR: Module load completed but symbols could not be loaded for
swi_callout.sys
*** ERROR: Module load completed but symbols could not be loaded for nsiproxy.sys
*** ERROR: Module load completed but symbols could not be loaded for
npsvctrig.sys
*** ERROR: Module load completed but symbols could not be loaded for
gpuenergydrv.sys
*** ERROR: Module load completed but symbols could not be loaded for dfsc.sys
*** ERROR: Module load completed but symbols could not be loaded for ahcache.sys
*** ERROR: Module load completed but symbols could not be loaded for
CompositeBus.sys
Page 11a15d not present in the dump file. Type ".hh dbgerr004" for details
Page 11a15d not present in the dump file. Type ".hh dbgerr004" for details
*** ERROR: Module load completed but symbols could not be loaded for kdnic.sys
*** ERROR: Module load completed but symbols could not be loaded for umbus.sys
*** ERROR: Module load completed but symbols could not be loaded for
intelppm.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
mrxsmb.sys *** ERROR: Module load completed but symbols could not be loaded for
dump_storahci.sys
*** ERROR: Module load completed but symbols could not be loaded for
dump_dumpfve.sys
*** ERROR: Module load completed but symbols could not be loaded for mpsdrv.sys
*** ERROR: Module load completed but symbols could not be loaded for mmcss.sys
*** ERROR: Module load completed but symbols could not be loaded for Ndu.sys
*** ERROR: Module load completed but symbols could not be loaded for Sftvollh.sys

*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
fwpkclnt.sys *** ERROR: Module load completed but symbols could not be loaded for srv2.sys
*** ERROR: Module load completed but symbols could not be loaded for srv.sys
*** ERROR: Module load completed but symbols could not be loaded for tunnel.sys
*** ERROR: Module load completed but symbols could not be loaded for
Sftredirlh.sys
*** ERROR: Module load completed but symbols could not be loaded for fastfat.SYS
*** ERROR: Module load completed but symbols could not be loaded for Sftfslh.sys
*** ERROR: Module load completed but symbols could not be loaded for condrv.sys
*** ERROR: Module load completed but symbols could not be loaded for
mrxsmb10.sys
*** ERROR: Module load completed but symbols could not be loaded for mqac.sys
*** ERROR: Module load completed but symbols could not be loaded for
Sftplaylh.sys
*** ERROR: Module load completed but symbols could not be loaded for usbehci.sys
*** ERROR: Module load completed but symbols could not be loaded for
rt640x64.sys
*** ERROR: Module load completed but symbols could not be loaded for
1394ohci.sys
*** ERROR: Module load completed but symbols could not be loaded for
NdisVirtualBus.sys
*** ERROR: Module load completed but symbols could not be loaded for swenum.sys
*** ERROR: Module load completed but symbols could not be loaded for circlass.sys
*** ERROR: Module load completed but symbols could not be loaded for rdpbus.sys
*** ERROR: Module load completed but symbols could not be loaded for usbhub.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
USBD.SYS *** ERROR: Module load completed but symbols could not be loaded for
nvhda64v.sys
*** ERROR: Module load completed but symbols could not be loaded for ksthunk.sys

*** ERROR: Module load completed but symbols could not be loaded for
RTKVHD64.sys
*** ERROR: Module load completed but symbols could not be loaded for usbcir.sys
*** ERROR: Module load completed but symbols could not be loaded for hidusb.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
HIDCLASS.SYS *** ERROR: Symbol file could not be found. Defaulted to export symbols for
HIDPARSE.SYS *** ERROR: Module load completed but symbols could not be loaded for usbccgp.sys
*** ERROR: Module load completed but symbols could not be loaded for
RtsUStor.sys
*** ERROR: Module load completed but symbols could not be loaded for mouhid.sys
*** ERROR: Module load completed but symbols could not be loaded for
mouclass.sys
*** ERROR: Module load completed but symbols could not be loaded for usbprint.sys
*** ERROR: Module load completed but symbols could not be loaded for kbdhid.sys
*** ERROR: Module load completed but symbols could not be loaded for
kbdclass.sys
*** ERROR: Module load completed but symbols could not be loaded for hidir.sys
*** ERROR: Module load completed but symbols could not be loaded for HTTP.sys
*** ERROR: Module load completed but symbols could not be loaded for WudfPf.sys
*** ERROR: Module load completed but symbols could not be loaded for bowser.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
dxgmms1.sys *** ERROR: Module load completed but symbols could not be loaded for monitor.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
dxgmms2.sys *** ERROR: Module load completed but symbols could not be loaded for luafv.sys
*** ERROR: Module load completed but symbols could not be loaded for wcifs.sys
*** ERROR: Module load completed but symbols could not be loaded for
storqosflt.sys
*** ERROR: Module load completed but symbols could not be loaded for wcnfs.sys
*** ERROR: Module load completed but symbols could not be loaded for registry.sys

*** ERROR: Module load completed but symbols could not be loaded for rspndr.sys
*** ERROR: Module load completed but symbols could not be loaded for lltdio.sys
*** ERROR: Module load completed but symbols could not be loaded for mslldp.sys
*** ERROR: Module load completed but symbols could not be loaded for
mrxsmb20.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
dump_diskdump.sys Page 11cecd not present in the dump file. Type ".hh dbgerr004" for details
Page 11cecd not present in the dump file. Type ".hh dbgerr004" for details
*** ERROR: Module load completed but symbols could not be loaded for
nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for
HDAudBus.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
portcls.sys *** ERROR: Symbol file could not be found. Defaulted to export symbols for
drmk.sys Page 11c1d8 not present in the dump file. Type ".hh dbgerr004" for details
*** ERROR: Module load completed but symbols could not be loaded for ks.sys
*** ERROR: Module load completed but symbols could not be loaded for usbuhci.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
USBPORT.SYS *************************************************************************
***

***

***

***

***
***

Your debugger is not using the correct symbols

***

***

***

In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

work.

***
***

***

***
***

Type referenced: AssignedRegionNonPagedPool

***

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionNonPagedPool].BaseAddress'
*************************************************************************
***

***

***

***

***

Your debugger is not using the correct symbols

***

***

***

***

In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

work.

***
***
***

***

***
***

Type referenced: AssignedRegionNonPagedPool

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionNonPagedPool].NumberOfBytes'
*************************************************************************
***

***

***

***

***
***
***

Your debugger is not using the correct symbols

***

***
In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

work.

***

***

***

***

***

Type referenced: AssignedRegionPagedPool

***

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionPagedPool].BaseAddress'
*************************************************************************
***

***

***

***

***

Your debugger is not using the correct symbols

***

***

***

***

In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

work.

***

***

***

***

***

Type referenced: AssignedRegionPagedPool

***

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionPagedPool].NumberOfBytes'
*************************************************************************
***

***

***
***

***
Your debugger is not using the correct symbols

***

***

***

***

In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

work.

***
***

***

***
***

Type referenced: AssignedRegionSystemCache

***

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionSystemCache].BaseAddress'
*************************************************************************
***

***

***

***

***

Your debugger is not using the correct symbols

***

***

***

***

In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

work.

***
***
***

***
***

Type referenced: AssignedRegionSystemCache


***

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionSystemCache].NumberOfBytes'
*************************************************************************
***

***

***

***

***

Your debugger is not using the correct symbols

***

***

***

***

In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

work.

***
***
***

***

***
***

Type referenced: AssignedRegionSpecialPool

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionSpecialPool].BaseAddress'
*************************************************************************
***

***

***

***

***
***

Your debugger is not using the correct symbols

***

***

***

In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

***

work.

***
***

***
***

Type referenced: AssignedRegionSpecialPool

***

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionSpecialPool].NumberOfBytes'
*************************************************************************
***

***

***

***

***

Your debugger is not using the correct symbols

***

***

***

***

In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

work.

***
***
***

***

***
***

Type referenced: AssignedRegionSession

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionSession].BaseAddress'
*************************************************************************
***

***

***

***

***
***

Your debugger is not using the correct symbols

***

***

***

In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

work.

***
***

***

***
***

Type referenced: AssignedRegionSession

***

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionSession].NumberOfBytes'
*************************************************************************
***

***

***

***

***

Your debugger is not using the correct symbols

***

***

***

***

In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

work.

***
***
***

***

***
***

Type referenced: AssignedRegionSystemPtes

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionSystemPtes].BaseAddress'
*************************************************************************
***

***

***

***

***

Your debugger is not using the correct symbols

***

***

***

***

In order for this command to work properly, your symbol path ***

***

must point to .pdb files that have full type information.

***

***

***

***

Certain .pdb files (such as the public OS symbols) do not

***

***

contain the required information. Contact the group that

***

***

provided you with these symbols if you need this command to

***

work.

***

***
***

***

***
Type referenced: AssignedRegionSystemPtes

***

***

***

*************************************************************************
Couldn't resolve error at 'AssignedRegionSystemPtes].NumberOfBytes'
0000000000000002

CURRENT_IRQL: 0

FAULTING_IP:
nt!KxWaitForLockOwnerShipWithIrql+12
fffff801`a42ebff2 48890a

CPU_COUNT: 8

CPU_MHZ: af0

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

mov

qword ptr [rdx],rcx

CPU_MODEL: 1a

CPU_STEPPING: 5

CPU_MICROCODE: 6,1a,5,0 (F,M,S,R) SIG: 19'00000000 (cache) 19'00000000 (init)

BUGCHECK_STR: AV

PROCESS_NAME: dwm.exe

ANALYSIS_SESSION_HOST: DESKTOP-ASPA0RB

ANALYSIS_SESSION_TIME: 10-06-2016 11:56:48.0805

ANALYSIS_VERSION: 10.0.14321.1024 amd64fre

LAST_CONTROL_TRANSFER: from 0000000000000000 to 00007ff9378e0614

STACK_TEXT:
000000e1`1187fa60 00000000`00000000 : 00000000`00000000
00000000`00000000 00000000`00000000 00000000`00000000 :
0x00007ff9`378e0614

STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KxWaitForLockOwnerShipWithIrql+12
fffff801`a42ebff2 48890a

mov

qword ptr [rdx],rcx

FAULT_INSTR_CODE: 4d0a8948

SYMBOL_NAME: nt!KxWaitForLockOwnerShipWithIrql+12

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 57dacaa7

BUCKET_ID: INVALID_KERNEL_CONTEXT_AV

DEFAULT_BUCKET_ID: INVALID_KERNEL_CONTEXT_AV

PRIMARY_PROBLEM_CLASS: INVALID_KERNEL_CONTEXT

FAILURE_BUCKET_ID: INVALID_KERNEL_CONTEXT_AV

TARGET_TIME: 2016-10-05T19:58:39.000Z

OSBUILD: 14393

OSSERVICEPACK: 0

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 784

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal

OS_LOCALE:

USER_LCID: 0

OSBUILD_TIMESTAMP: 2016-09-15 09:21:59

BUILDDATESTAMP_STR: 160915-0644

BUILDLAB_STR: rs1_release

BUILDOSVER_STR: 10.0.14393.206.amd64fre.rs1_release.160915-0644

ANALYSIS_SESSION_ELAPSED_TIME: 5de

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:invalid_kernel_context_av

FAILURE_ID_HASH: {7e792b8a-7d2f-072b-8652-0370ce71ee71}

Followup:
---------

MachineOwner

You might also like