-
-
[求助]windbg+wmware调试在windows启动时出现错误
-
发表于: 2011-7-3 02:01
-
不调试时，windows运行正常。调试时，在启动过程中出现错误了。
求帮助。。。
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 805a41ad, The address that the exception occurred at
Arg3: f9d942ec, Exception Record Address
Arg4: f9d93fe8, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - "0x%08lx"
FAULTING_IP:
nt!MiEnablePagingOfDriver+27
805a41ad 0fb74314 movzx eax,word ptr [ebx+14h]
EXCEPTION_RECORD: f9d942ec -- (.exr 0xfffffffff9d942ec)
ExceptionAddress: 805a41ad (nt!MiEnablePagingOfDriver+0x00000027)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000014
Attempt to read from address 00000014
CONTEXT: f9d93fe8 -- (.cxr 0xfffffffff9d93fe8)
eax=00000000 ebx=00000000 ecx=f9d94430 edx=f813d000 esi=00000000 edi=f9d945d0
eip=805a41ad esp=f9d943b4 ebp=f9d943c4 iopl=0 nv up ei pl nz ac po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010212
nt!MiEnablePagingOfDriver+0x27:
805a41ad 0fb74314 movzx eax,word ptr [ebx+14h] ds:0023:00000014=????
Resetting default scope
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000005 - "0x%08lx"
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 00000014
READ_ADDRESS: 00000014
FOLLOWUP_IP:
nt!MiEnablePagingOfDriver+27
805a41ad 0fb74314 movzx eax,word ptr [ebx+14h]
BUGCHECK_STR: 0x7E
DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE
LAST_CONTROL_TRANSFER: from 805a52a2 to 805a41ad
STACK_TEXT:
f9d943c4 805a52a2 f813d000 80555040 80555060 nt!MiEnablePagingOfDriver+0x27
f9d94560 80577503 f9d945e4 00000000 00000000 nt!MmLoadSystemImage+0xaae
f9d94640 8068b8f4 000000e4 00000001 00000000 nt!IopLoadDriver+0x371
f9d9469c 80688c59 00043000 00000000 00000000 nt!IopInitializeSystemDrivers+0x16c
f9d9483c 8068705d 80087000 00000000 817bd548 nt!IoInitSystem+0x7a3
f9d94dac 805c71ec 80087000 00000000 00000000 nt!Phase1Initialization+0x9b5
f9d94ddc 80542de2 806866a8 80087000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiEnablePagingOfDriver+27
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 48a3fbd8
STACK_COMMAND: .cxr 0xfffffffff9d93fe8 ; kb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0x7E_nt!MiEnablePagingOfDriver+27
BUCKET_ID: 0x7E_nt!MiEnablePagingOfDriver+27
Followup: MachineOwner
---------
求帮助。。。
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 805a41ad, The address that the exception occurred at
Arg3: f9d942ec, Exception Record Address
Arg4: f9d93fe8, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - "0x%08lx"
FAULTING_IP:
nt!MiEnablePagingOfDriver+27
805a41ad 0fb74314 movzx eax,word ptr [ebx+14h]
EXCEPTION_RECORD: f9d942ec -- (.exr 0xfffffffff9d942ec)
ExceptionAddress: 805a41ad (nt!MiEnablePagingOfDriver+0x00000027)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000014
Attempt to read from address 00000014
CONTEXT: f9d93fe8 -- (.cxr 0xfffffffff9d93fe8)
eax=00000000 ebx=00000000 ecx=f9d94430 edx=f813d000 esi=00000000 edi=f9d945d0
eip=805a41ad esp=f9d943b4 ebp=f9d943c4 iopl=0 nv up ei pl nz ac po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010212
nt!MiEnablePagingOfDriver+0x27:
805a41ad 0fb74314 movzx eax,word ptr [ebx+14h] ds:0023:00000014=????
Resetting default scope
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000005 - "0x%08lx"
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 00000014
READ_ADDRESS: 00000014
FOLLOWUP_IP:
nt!MiEnablePagingOfDriver+27
805a41ad 0fb74314 movzx eax,word ptr [ebx+14h]
BUGCHECK_STR: 0x7E
DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE
LAST_CONTROL_TRANSFER: from 805a52a2 to 805a41ad
STACK_TEXT:
f9d943c4 805a52a2 f813d000 80555040 80555060 nt!MiEnablePagingOfDriver+0x27
f9d94560 80577503 f9d945e4 00000000 00000000 nt!MmLoadSystemImage+0xaae
f9d94640 8068b8f4 000000e4 00000001 00000000 nt!IopLoadDriver+0x371
f9d9469c 80688c59 00043000 00000000 00000000 nt!IopInitializeSystemDrivers+0x16c
f9d9483c 8068705d 80087000 00000000 817bd548 nt!IoInitSystem+0x7a3
f9d94dac 805c71ec 80087000 00000000 00000000 nt!Phase1Initialization+0x9b5
f9d94ddc 80542de2 806866a8 80087000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiEnablePagingOfDriver+27
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 48a3fbd8
STACK_COMMAND: .cxr 0xfffffffff9d93fe8 ; kb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0x7E_nt!MiEnablePagingOfDriver+27
BUCKET_ID: 0x7E_nt!MiEnablePagingOfDriver+27
Followup: MachineOwner
---------
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
