Skip to content

Instantly share code, notes, and snippets.

@TrueToonation
Created March 21, 2016 17:29
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save TrueToonation/a635f5fe4795caf4f73e to your computer and use it in GitHub Desktop.
Save TrueToonation/a635f5fe4795caf4f73e to your computer and use it in GitHub Desktop.
WinDbg(x64)
Loading Dump File [C:\Windows\Minidump\032116-13010-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02e4f000 PsLoadedModuleList = 0xfffff800`03094e90
Debug session time: Mon Mar 21 02:29:58.825 2016 (UTC - 4:00)
System Uptime: 0 days 0:49:21.043
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {41790, fffffa800486cde0, ffff, 0}
Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
contains the address of the PFN for the corrupted page table page.
On a 32 bit OS, parameter 2 contains a pointer to the number of used
PTEs, and parameter 3 contains the number of used PTEs.
Arg2: fffffa800486cde0
Arg3: 000000000000ffff
Arg4: 0000000000000000
Debugging Details:
------------------
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
SYSTEM_MANUFACTURER: BIOSTAR Group
SYSTEM_PRODUCT_NAME: B75MU3B
SYSTEM_SKU: None
SYSTEM_VERSION: 5.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 4.6.5
BIOS_DATE: 04/25/2012
BASEBOARD_MANUFACTURER: BIOSTAR Group
BASEBOARD_PRODUCT: B75MU3B
BASEBOARD_VERSION: 5.0
DUMP_TYPE: 2
BUGCHECK_P1: 41790
BUGCHECK_P2: fffffa800486cde0
BUGCHECK_P3: ffff
BUGCHECK_P4: 0
BUGCHECK_STR: 0x1a_41790
CPU_COUNT: 4
CPU_MHZ: d40
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 3a
CPU_STEPPING: 9
CPU_MICROCODE: 6,3a,9,0 (F,M,S,R) SIG: 12'00000000 (cache) 12'00000000 (init)
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: mscorsvw.exe
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: CONNOR-PC
ANALYSIS_SESSION_TIME: 03-21-2016 13:22:32.0380
ANALYSIS_VERSION: 10.0.10586.567 amd64fre
BAD_STACK_POINTER: 0000000000000000
IP_IN_FREE_BLOCK: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to 0000000000000000
STACK_TEXT:
00000000`00000000 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
STACK_COMMAND: kb
SYMBOL_NAME: ANALYSIS_INCONCLUSIVE
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
IMAGE_VERSION:
BUCKET_ID: INVALID_KERNEL_CONTEXT_0x1a_41790
DEFAULT_BUCKET_ID: INVALID_KERNEL_CONTEXT_0x1a_41790
PRIMARY_PROBLEM_CLASS: INVALID_KERNEL_CONTEXT
FAILURE_BUCKET_ID: INVALID_KERNEL_CONTEXT_0x1a_41790
TARGET_TIME: 2016-03-21T06:29:58.000Z
OSBUILD: 7601
OSSERVICEPACK: 1000
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 7
OSEDITION: Windows 7 WinNt (Service Pack 1) TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2010-11-20 04:30:02
BUILDDATESTAMP_STR: 101119-1850
BUILDLAB_STR: win7sp1_rtm
BUILDOSVER_STR: 6.1.7601.17514.amd64fre.win7sp1_rtm.101119-1850
ANALYSIS_SESSION_ELAPSED_TIME: 347
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:invalid_kernel_context_0x1a_41790
FAILURE_ID_HASH: {16187b4c-53be-5103-5592-bf8b6517ebff}
Followup: MachineOwner
---------
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment