Use !analyze -v to get detailed debugging information.
BugCheck 19, {20, 89937d90, 89937db8, a050001}
*** ERROR: Module load completed but symbols could not be loaded for BSODCheck.sys
Probably caused by : BSODCheck.sys ( BSODCheck+1179 )
Followup: MachineOwner
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 19, {20, 8960f7b0, 8960f7d8, a050007}
Probably caused by : BSODCheck.sys ( BSODCheck!DriverEntry+59 )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: 8960f7b0, The pool entry we were looking for within the page.
Arg3: 8960f7d8, The next pool entry.
Arg4: 0a050007, (reserved)
Debugging Details:
------------------
BUGCHECK_STR: 0x19_20
POOL_ADDRESS: 8960f7b0 Nonpaged pool
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: System
LAST_CONTROL_TRANSFER: from 80545a86 to 804f9cb5
STACK_TEXT:
bacfbc10 80545a86 00000019 00000020 8960f7b0 nt!KeBugCheckEx+0x1b
bacfbc60 bac69179 8960f7b8 00000000 00000004 nt!ExFreePoolWithTag+0x2a0
bacfbc7c 8057777f 895acb10 89748000 00000000 BSODCheck!DriverEntry+0x59 [e:\agptemp\temp\bsodcheck\bsodcheck.c @ 61]
bacfbd4c 8057788f 80000904 00000001 00000000 nt!IopLoadDriver+0x66d
bacfbd74 80535c02 80000904 00000000 89a328b8 nt!IopLoadUnloadDriver+0x45
bacfbdac 805c7160 b1b9dcf4 00000000 00000000 nt!ExpWorkerThread+0x100
bacfbddc 80542dd2 80535b02 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
BSODCheck!DriverEntry+59 [e:\agptemp\temp\bsodcheck\bsodcheck.c @ 61]
bac69179 6800800080 push 80008000h
FAULTING_SOURCE_CODE:
57: {
58: memcpy(pwz_buf,theRegistryPath->Buffer,theRegistryPath->Length);
59: ExFreePool(pwz_buf);
60: }
> 61: IsExitProcess(0x80008000);
62:
63: return STATUS_SUCCESS;
64: }
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: BSODCheck!DriverEntry+59
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: BSODCheck
IMAGE_NAME: BSODCheck.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 53925617
FAILURE_BUCKET_ID: 0x19_20_BSODCheck!DriverEntry+59
BUCKET_ID: 0x19_20_BSODCheck!DriverEntry+59
Followup: MachineOwner
Loading Dump File [D:\Mini061014-21.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*F:\WorkingProject\kbinject\objchk_win7_x86\i386*http://msdl.microsoft.com/download/symbols;.sympath srv*D:\WinDDK\7600.16385.1\Debuggers\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp.080413-2111
Machine Name:
Kernel base = 0x804d8000 PsLoadedModuleList = 0x8055e720
Debug session time: Tue Jun 10 17:00:57.203 2014 (UTC + 8:00)
System Uptime: 0 days 0:04:46.868
Loading Kernel Symbols
...............................................................
.............................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 100000C5, {69002e, 2, 1, 8054c10d}
Unable to load image genfs.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for genfs.sys
*** ERROR: Module load completed but symbols could not be loaded for genfs.sys
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+107 )
DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 0069002e, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 8054c10d, address which referenced memory
