利用windbg得到如下结果。
Microsoft (R) Windows Debugger Version 6.10.0003.233 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Opened \\.\com1
Waiting to reconnect...
Connected to Windows XP 2600 x86 compatible target at (Sun Dec 7 18:24:31.078 2008 (GMT+8)), ptr64 FALSE
Kernel Debugger connection established.
Symbol search path is: C:\WINDOWS\Symbols
Executable search path is:
Windows XP Kernel Version 2600 MP (1 procs) Free x86 compatible
Built by: 2600.xpsp.080413-2111
Machine Name:
Kernel base = 0x804d8000 PsLoadedModuleList = 0x805644c0
System Uptime: not available
ntdisk: Build Time: Nov 5 2007 19:27:28
ntdisk:add device.
ntdisk: Attach to device 86f92bd0,my device 86fc18f0,return 86fc1ab8,disknumber 0
*** Fatal System Error: 0x0000007b
(0xF79FB524,0xC0000034,0x00000000,0x00000000)
Break instruction exception - code 80000003 (first chance)
A fatal system error has occurred.
Debugger entered on first try; Bugcheck callbacks have not been invoked.
A fatal system error has occurred.
Connected to Windows XP 2600 x86 compatible target at (Sun Dec 7 18:24:41.125 2008 (GMT+8)), ptr64 FALSE
Loading Kernel Symbols
..........................
Loading User Symbols
Loading unloaded module list
.
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7B, {f79fb524, c0000034, 0, 0}
Probably caused by : ntkrnlmp.exe ( nt!IopMarkBootPartition+113 )
Followup: MachineOwner
---------
nt!RtlpBreakWithStatusInstruction:
804e3a42 cc int 3
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
INACCESSIBLE_BOOT_DEVICE (7b)
During the initialization of the I/O system, it is possible that the driver
for the boot device failed to initialize the device that the system is
attempting to boot from, or it is possible for the file system that is
supposed to read that device to either fail its initialization or to simply
not recognize the data on the boot device as a file system structure that
it recognizes. In the former case, the argument (#1) is the address of a
Unicode string data structure that is the ARC name of the device from which
the boot was being attempted. In the latter case, the argument (#1) is the
address of the device object that could not be mounted.
If this is the initial setup of the system, then this error can occur if
the system was installed on an unsupported disk or SCSI controller. Note
that some controllers are supported only by drivers which are in the Windows
Driver Library (WDL) which requires the user to do a custom install. See
the Windows Driver Library for more information.
This error can also be caused by the installation of a new SCSI adapter or
disk controller or repartitioning the disk with the system partition. If
this is the case, on x86 systems the boot.ini file must be edited or on ARC
systems setup must be run. See the "Advanced Server System Administrator's
User Guide" for information on changing boot.ini.
If the argument is a pointer to an ARC name string, then the format of the
first two (and in this case only) longwords will be:
USHORT Length;
USHORT MaximumLength;
PWSTR Buffer;
That is, the first longword will contain something like 00800020 where 20
is the actual length of the Unicode string, and the next longword will
contain the address of buffer. This address will be in system space, so
the high order bit will be set.
If the argument is a pointer to a device object, then the format of the first
word will be:
USHORT Type;
That is, the first word will contain a 0003, where the Type code will ALWAYS
be 0003.
Note that this makes it immediately obvious whether the argument is a pointer
to an ARC name string or a device object, since a Unicode string can never
have an odd number of bytes, and a device object will always have a Type
code of 3.
Arguments:
Arg1: f79fb524, Pointer to the device object or Unicode string of ARC name
Arg2: c0000034
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO
BUGCHECK_STR: 0x7B
PROCESS_NAME: System
LAST_CONTROL_TRANSFER: from 8053758b to 804e3a42
STACK_TEXT:
f79fb08c 8053758b 00000003 f79fb3e8 00000000 nt!RtlpBreakWithStatusInstruction
f79fb0d8 8053805e 00000003 00000000 80086000 nt!KiBugCheckDebugBreak+0x19
f79fb4b8 80538672 0000007b f79fb524 c0000034 nt!KeBugCheck2+0x574
f79fb4d8 806cd59f 0000007b f79fb524 c0000034 nt!KeBugCheckEx+0x1b
f79fb640 806bb1dc 80086000 00000000 80086000 nt!IopMarkBootPartition+0x113
f79fb690 806b0fa1 80086000 f79fb6ac 00043000 nt!IopInitializeBootDrivers+0x4ba
f79fb838 806b2012 80086000 00000000 86fb5750 nt!IoInitSystem+0x712
f79fbdac 8057672b 80086000 00000000 00000000 nt!Phase1Initialization+0xac7
f79fbddc 804ed6c9 806b17bf 80086000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!IopMarkBootPartition+113
806cd59f 8d85e4feffff lea eax,[ebp-11Ch]
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nt!IopMarkBootPartition+113
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 48025de7
FAILURE_BUCKET_ID: 0x7B_nt!IopMarkBootPartition+113
BUCKET_ID: 0x7B_nt!IopMarkBootPartition+113
Followup: MachineOwner
---------
0: kd> lmvm nt
start end module name
804d8000 80700000 nt (pdb symbols) C:\WINDOWS\Symbols\exe\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Timestamp: Mon Apr 14 03:24:23 2008 (48025DE7)
CheckSum: 002193E7
ImageSize: 00228000
File version: 5.1.2600.5512
Product version: 5.1.2600.5512
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0804.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft(R) Windows(R) Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 5.1.2600.5512
FileVersion: 5.1.2600.5512 (xpsp.080413-2111)
FileDescription: NT Kernel & System
LegalCopyright: (C) Microsoft Corporation. All rights reserved.
百思不得其解！烦请指点！
minidump文件在这
http://www.live-share.com/files/370516/lenovo.dmp.html个地址
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
