Soms kan ik dagen spelen en komt het niet voor. Maar dan is er weer een tijd dat het dagelijks
meerdere keren voorkomt. Er komt geen foutmelding op het scherm. Alleen een zwart scherm dus.
Soms een herstart, soms blijft de computer aan maar gebeurd er verder niets.Ik heb de optie uitgeschakeld dat de computer automatisch moet herstarten bij een fout. De crashes komen bij verschillende games voor en dus niet speciaal bij 1 game.
Ik heb het volgende al uitvoerig getest.
Videokaart (asus 7900 GT) : 3dmark ---> OK
Harde schijf ---> OK
CPU - Stress test (2 X 3.4) --> OK
Intern geheugen (1gb) --> OK
Temperaturen --> OK
Het moederbord is een p5nSLI (Asus).
Ik heb een paar mini-dumps toegevoegd. Ik heb er nog maar twee.
De dumps worden namelijk niet altijd aangemaakt.
Wie kan mij helpen?
Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini032807-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.061219-0316
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Wed Mar 28 07:53:56.093 2007 (GMT+2)
System Uptime: 0 days 0:20:12.810
Loading Kernel Symbols
........................................................................................................................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000000A, {300000c4, 1c, 0, 80502583}
Probably caused by : ntkrpamp.exe ( nt!KiFindReadyThread+d7 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 300000c4, memory referenced
Arg2: 0000001c, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 80502583, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: 300000c4
CURRENT_IRQL: 1c
FAULTING_IP:
nt!KiFindReadyThread+d7
80502583 859124010000 test dword ptr [ecx+124h],edx
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: UT2004.exe
UNALIGNED_STACK_POINTER: b81b0d3f
LAST_CONTROL_TRANSFER: from 8054086c to c7ad74d5
STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
b81b0d3b 8054086c 00000003 000804bc 00000000 0xc7ad74d5
b81b0d3b 7c90eb94 00000003 000804bc 00000000 nt!KiFastCallEntry+0xfc
065eff20 77d184c6 77d19602 00000003 000804bc 0x7c90eb94
065eff70 6d329a67 00000000 00000000 ffffffff 0x77d184c6
065effb4 7c80b683 00160090 7c913288 00000000 0x6d329a67
065effec 00000000 6d3299b1 00160090 00000000 0x7c80b683
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
nt!KiFindReadyThread+d7
80502583 859124010000 test dword ptr [ecx+124h],edx
SYMBOL_NAME: nt!KiFindReadyThread+d7
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4587e148
FAILURE_BUCKET_ID: 0xA_nt!KiFindReadyThread+d7
BUCKET_ID: 0xA_nt!KiFindReadyThread+d7
Followup: MachineOwner
---------
0: kd> !thread
GetPointerFromAddress: unable to read from 80561114
THREAD 861fb4b0 Cid 05dc.09e0 Teb: 7ffd4000 Win32Thread: e2139968 RUNNING on processor 0
Not impersonating
GetUlongFromAddress: unable to read from 80561124
Owning Process 86462bd0 Image: UT2004.exe
ffdf0000: Unable to get shared data
Wait Start TickCount 77619
Context Switch Count 112668 LargeStack
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime 00:00:00.0000
KernelTime 00:00:00.0000
Win32 Start Address 0x6d3299b1
Start Address 0x7c810659
Stack Init b81b1000 Current b81b0960 Base b81b1000 Limit b81ad000 Call 0
Priority 14 BasePriority 10 PriorityDecrement 2 DecrementCount 16
ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
b81b0d3b 8054086c 00000003 000804bc 00000000 0xc7ad74d5
b81b0d3b 7c90eb94 00000003 000804bc 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ b81b0d64)
065eff20 77d184c6 77d19602 00000003 000804bc 0x7c90eb94
065eff70 6d329a67 00000000 00000000 ffffffff 0x77d184c6
065effb4 7c80b683 00160090 7c913288 00000000 0x6d329a67
065effec 00000000 6d3299b1 00160090 00000000 0x7c80b683
0: kd> kb 100
ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
b81b0d3b 8054086c 00000003 000804bc 00000000 0xc7ad74d5
b81b0d3b 7c90eb94 00000003 000804bc 00000000 nt!KiFastCallEntry+0xfc
065eff20 77d184c6 77d19602 00000003 000804bc 0x7c90eb94
065eff70 6d329a67 00000000 00000000 ffffffff 0x77d184c6
065effb4 7c80b683 00160090 7c913288 00000000 0x6d329a67
065effec 00000000 6d3299b1 00160090 00000000 0x7c80b683
0: kd> !process
GetPointerFromAddress: unable to read from 80561114
PROCESS 86462bd0 SessionId: none Cid: 05dc Peb: 7ffde000 ParentCid: 0240
DirBase: 06f00560 ObjectTable: e3113108 HandleCount: <Data Not Accessible>
Image: UT2004.exe
VadRoot 85e89378 Vads 2147 Clone 0 Private 81824. Modified 11789. Locked 37.
DeviceMap e21330b0
Token e445e998
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
ffdf0000: Unable to get shared data
ElapsedTime 00:00:00.000
UserTime 00:00:00.000
KernelTime 00:00:00.000
QuotaPoolUsage[PagedPool] 181292
QuotaPoolUsage[NonPagedPool] 89088
Working Set Sizes (now,min,max) (84035, 50, 345) (336140KB, 200KB, 1380KB)
PeakWorkingSetSize 84081
VirtualSize 451 Mb
PeakVirtualSize 452 Mb
PageFaultCount 1069419
MemoryPriority BACKGROUND
BasePriority 8
CommitCharge 92301
*** Error in reading nt!_ETHREAD @ 860a7678
---------------------------------------------------------------------------------------------------------------------------------
Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini032907-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*DownstreamStore*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.061219-0316
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Thu Mar 29 01:45:38.437 2007 (GMT+2)
System Uptime: 0 days 9:17:32.141
Loading Kernel Symbols
...........................................................................................................................
Loading User Symbols
Loading unloaded module list
.......................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, bf816599, f33bebe0, 0}
Probably caused by : win32k.sys ( win32k!xxxInternalDoPaint+18 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf816599, The address that the exception occurred at
Arg3: f33bebe0, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - De instructie op 0x%08lx verwijst naar geheugen op 0x%08lx. De lees- of schrijfbewerking ("%s") op het geheugen is mislukt.
FAULTING_IP:
win32k!xxxInternalDoPaint+18
bf816599 397e08 cmp dword ptr [esi+8],edi
TRAP_FRAME: f33bebe0 -- (.trap fffffffff33bebe0)
ErrCode = 00000000
eax=00000000 ebx=e3291860 ecx=000025ff edx=00000000 esi=4396bb20 edi=e3291860
eip=bf816599 esp=f33bec54 ebp=f33bec68 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
win32k!xxxInternalDoPaint+0x18:
bf816599 397e08 cmp dword ptr [esi+8],edi ds:0023:4396bb28=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: Steam.exe
LAST_CONTROL_TRANSFER: from bf81657a to bf816599
STACK_TEXT:
f33bec68 bf81657a bc668f00 e3291860 00000230 win32k!xxxInternalDoPaint+0x18
f33bec8c bf816679 bc6406e8 e3291860 00000230 win32k!xxxInternalDoPaint+0x68
f33beca8 bf801b4b 00000000 f33bed14 f33bed64 win32k!xxxDoPaint+0x66
f33bece8 bf80373a f33bed14 000025ff 00000000 win32k!xxxRealInternalGetMessage+0x39a
f33bed48 8054086c 0012ded8 00000000 00000000 win32k!NtUserPeekMessage+0x40
f33bed48 7c90eb94 0012ded8 00000000 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012de80 00000000 00000000 00000000 00000000 0x7c90eb94
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!xxxInternalDoPaint+18
bf816599 397e08 cmp dword ptr [esi+8],edi
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!xxxInternalDoPaint+18
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 43446a58
FAILURE_BUCKET_ID: 0x8E_win32k!xxxInternalDoPaint+18
BUCKET_ID: 0x8E_win32k!xxxInternalDoPaint+18
Followup: MachineOwner
---------
0: kd> !thread
GetPointerFromAddress: unable to read from 80561114
THREAD 862a2da8 Cid 0824.0858 Teb: 7ffdd000 Win32Thread: e3291860 RUNNING on processor 0
Not impersonating
GetUlongFromAddress: unable to read from 80561124
Owning Process 85f5ab88 Image: Steam.exe
ffdf0000: Unable to get shared data
Wait Start TickCount 2140937
Context Switch Count 14719326 LargeStack
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime 00:00:00.0000
KernelTime 00:00:00.0000
Win32 Start Address 0x0047db58
Start Address 0x7c810665
Stack Init f33bf000 Current f33becd0 Base f33bf000 Limit f33ba000 Call 0
Priority 10 BasePriority 8 PriorityDecrement 0 DecrementCount 16
ChildEBP RetAddr Args to Child
f33bec68 bf81657a bc668f00 e3291860 00000230 win32k!xxxInternalDoPaint+0x18 (FPO: [Non-Fpo])
f33bec8c bf816679 bc6406e8 e3291860 00000230 win32k!xxxInternalDoPaint+0x68 (FPO: [Non-Fpo])
f33beca8 bf801b4b 00000000 f33bed14 f33bed64 win32k!xxxDoPaint+0x66 (FPO: [Non-Fpo])
f33bece8 bf80373a f33bed14 000025ff 00000000 win32k!xxxRealInternalGetMessage+0x39a (FPO: [Non-Fpo])
f33bed48 8054086c 0012ded8 00000000 00000000 win32k!NtUserPeekMessage+0x40 (FPO: [Non-Fpo])
f33bed48 7c90eb94 0012ded8 00000000 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f33bed64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012de80 00000000 00000000 00000000 00000000 0x7c90eb94
0: kd> kb 100
ChildEBP RetAddr Args to Child
f33bec68 bf81657a bc668f00 e3291860 00000230 win32k!xxxInternalDoPaint+0x18
f33bec8c bf816679 bc6406e8 e3291860 00000230 win32k!xxxInternalDoPaint+0x68
f33beca8 bf801b4b 00000000 f33bed14 f33bed64 win32k!xxxDoPaint+0x66
f33bece8 bf80373a f33bed14 000025ff 00000000 win32k!xxxRealInternalGetMessage+0x39a
f33bed48 8054086c 0012ded8 00000000 00000000 win32k!NtUserPeekMessage+0x40
f33bed48 7c90eb94 0012ded8 00000000 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012de80 00000000 00000000 00000000 00000000 0x7c90eb94
0: kd> !process
GetPointerFromAddress: unable to read from 80561114
PROCESS 85f5ab88 SessionId: none Cid: 0824 Peb: 7ffde000 ParentCid: 00e4
DirBase: 06f004c0 ObjectTable: e3269968 HandleCount: <Data Not Accessible>
Image: Steam.exe
VadRoot 86351d20 Vads 679 Clone 0 Private 6998. Modified 6584. Locked 0.
DeviceMap e2c721e0
Token e38af030
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
ffdf0000: Unable to get shared data
ElapsedTime 00:00:00.000
UserTime 00:00:00.000
KernelTime 00:00:00.000
QuotaPoolUsage[PagedPool] 172300
QuotaPoolUsage[NonPagedPool] 31704
Working Set Sizes (now,min,max) (5896, 50, 345) (23584KB, 200KB, 1380KB)
PeakWorkingSetSize 7909
VirtualSize 352 Mb
PeakVirtualSize 361 Mb
PageFaultCount 26050
MemoryPriority BACKGROUND
BasePriority 8
CommitCharge 8667
THREAD 862a2da8 Cid 0824.0858 Teb: 7ffdd000 Win32Thread: e3291860 RUNNING on processor 0
*** Error in reading nt!_ETHREAD @ 862cfc90
meerdere keren voorkomt. Er komt geen foutmelding op het scherm. Alleen een zwart scherm dus.
Soms een herstart, soms blijft de computer aan maar gebeurd er verder niets.Ik heb de optie uitgeschakeld dat de computer automatisch moet herstarten bij een fout. De crashes komen bij verschillende games voor en dus niet speciaal bij 1 game.
Ik heb het volgende al uitvoerig getest.
Videokaart (asus 7900 GT) : 3dmark ---> OK
Harde schijf ---> OK
CPU - Stress test (2 X 3.4) --> OK
Intern geheugen (1gb) --> OK
Temperaturen --> OK
Het moederbord is een p5nSLI (Asus).
Ik heb een paar mini-dumps toegevoegd. Ik heb er nog maar twee.
De dumps worden namelijk niet altijd aangemaakt.
Wie kan mij helpen?
Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini032807-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.061219-0316
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Wed Mar 28 07:53:56.093 2007 (GMT+2)
System Uptime: 0 days 0:20:12.810
Loading Kernel Symbols
........................................................................................................................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000000A, {300000c4, 1c, 0, 80502583}
Probably caused by : ntkrpamp.exe ( nt!KiFindReadyThread+d7 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 300000c4, memory referenced
Arg2: 0000001c, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 80502583, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: 300000c4
CURRENT_IRQL: 1c
FAULTING_IP:
nt!KiFindReadyThread+d7
80502583 859124010000 test dword ptr [ecx+124h],edx
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: UT2004.exe
UNALIGNED_STACK_POINTER: b81b0d3f
LAST_CONTROL_TRANSFER: from 8054086c to c7ad74d5
STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
b81b0d3b 8054086c 00000003 000804bc 00000000 0xc7ad74d5
b81b0d3b 7c90eb94 00000003 000804bc 00000000 nt!KiFastCallEntry+0xfc
065eff20 77d184c6 77d19602 00000003 000804bc 0x7c90eb94
065eff70 6d329a67 00000000 00000000 ffffffff 0x77d184c6
065effb4 7c80b683 00160090 7c913288 00000000 0x6d329a67
065effec 00000000 6d3299b1 00160090 00000000 0x7c80b683
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
nt!KiFindReadyThread+d7
80502583 859124010000 test dword ptr [ecx+124h],edx
SYMBOL_NAME: nt!KiFindReadyThread+d7
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4587e148
FAILURE_BUCKET_ID: 0xA_nt!KiFindReadyThread+d7
BUCKET_ID: 0xA_nt!KiFindReadyThread+d7
Followup: MachineOwner
---------
0: kd> !thread
GetPointerFromAddress: unable to read from 80561114
THREAD 861fb4b0 Cid 05dc.09e0 Teb: 7ffd4000 Win32Thread: e2139968 RUNNING on processor 0
Not impersonating
GetUlongFromAddress: unable to read from 80561124
Owning Process 86462bd0 Image: UT2004.exe
ffdf0000: Unable to get shared data
Wait Start TickCount 77619
Context Switch Count 112668 LargeStack
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime 00:00:00.0000
KernelTime 00:00:00.0000
Win32 Start Address 0x6d3299b1
Start Address 0x7c810659
Stack Init b81b1000 Current b81b0960 Base b81b1000 Limit b81ad000 Call 0
Priority 14 BasePriority 10 PriorityDecrement 2 DecrementCount 16
ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
b81b0d3b 8054086c 00000003 000804bc 00000000 0xc7ad74d5
b81b0d3b 7c90eb94 00000003 000804bc 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ b81b0d64)
065eff20 77d184c6 77d19602 00000003 000804bc 0x7c90eb94
065eff70 6d329a67 00000000 00000000 ffffffff 0x77d184c6
065effb4 7c80b683 00160090 7c913288 00000000 0x6d329a67
065effec 00000000 6d3299b1 00160090 00000000 0x7c80b683
0: kd> kb 100
ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
b81b0d3b 8054086c 00000003 000804bc 00000000 0xc7ad74d5
b81b0d3b 7c90eb94 00000003 000804bc 00000000 nt!KiFastCallEntry+0xfc
065eff20 77d184c6 77d19602 00000003 000804bc 0x7c90eb94
065eff70 6d329a67 00000000 00000000 ffffffff 0x77d184c6
065effb4 7c80b683 00160090 7c913288 00000000 0x6d329a67
065effec 00000000 6d3299b1 00160090 00000000 0x7c80b683
0: kd> !process
GetPointerFromAddress: unable to read from 80561114
PROCESS 86462bd0 SessionId: none Cid: 05dc Peb: 7ffde000 ParentCid: 0240
DirBase: 06f00560 ObjectTable: e3113108 HandleCount: <Data Not Accessible>
Image: UT2004.exe
VadRoot 85e89378 Vads 2147 Clone 0 Private 81824. Modified 11789. Locked 37.
DeviceMap e21330b0
Token e445e998
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
ffdf0000: Unable to get shared data
ElapsedTime 00:00:00.000
UserTime 00:00:00.000
KernelTime 00:00:00.000
QuotaPoolUsage[PagedPool] 181292
QuotaPoolUsage[NonPagedPool] 89088
Working Set Sizes (now,min,max) (84035, 50, 345) (336140KB, 200KB, 1380KB)
PeakWorkingSetSize 84081
VirtualSize 451 Mb
PeakVirtualSize 452 Mb
PageFaultCount 1069419
MemoryPriority BACKGROUND
BasePriority 8
CommitCharge 92301
*** Error in reading nt!_ETHREAD @ 860a7678
---------------------------------------------------------------------------------------------------------------------------------
Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini032907-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*DownstreamStore*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.061219-0316
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Thu Mar 29 01:45:38.437 2007 (GMT+2)
System Uptime: 0 days 9:17:32.141
Loading Kernel Symbols
...........................................................................................................................
Loading User Symbols
Loading unloaded module list
.......................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, bf816599, f33bebe0, 0}
Probably caused by : win32k.sys ( win32k!xxxInternalDoPaint+18 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf816599, The address that the exception occurred at
Arg3: f33bebe0, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - De instructie op 0x%08lx verwijst naar geheugen op 0x%08lx. De lees- of schrijfbewerking ("%s") op het geheugen is mislukt.
FAULTING_IP:
win32k!xxxInternalDoPaint+18
bf816599 397e08 cmp dword ptr [esi+8],edi
TRAP_FRAME: f33bebe0 -- (.trap fffffffff33bebe0)
ErrCode = 00000000
eax=00000000 ebx=e3291860 ecx=000025ff edx=00000000 esi=4396bb20 edi=e3291860
eip=bf816599 esp=f33bec54 ebp=f33bec68 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
win32k!xxxInternalDoPaint+0x18:
bf816599 397e08 cmp dword ptr [esi+8],edi ds:0023:4396bb28=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: Steam.exe
LAST_CONTROL_TRANSFER: from bf81657a to bf816599
STACK_TEXT:
f33bec68 bf81657a bc668f00 e3291860 00000230 win32k!xxxInternalDoPaint+0x18
f33bec8c bf816679 bc6406e8 e3291860 00000230 win32k!xxxInternalDoPaint+0x68
f33beca8 bf801b4b 00000000 f33bed14 f33bed64 win32k!xxxDoPaint+0x66
f33bece8 bf80373a f33bed14 000025ff 00000000 win32k!xxxRealInternalGetMessage+0x39a
f33bed48 8054086c 0012ded8 00000000 00000000 win32k!NtUserPeekMessage+0x40
f33bed48 7c90eb94 0012ded8 00000000 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012de80 00000000 00000000 00000000 00000000 0x7c90eb94
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!xxxInternalDoPaint+18
bf816599 397e08 cmp dword ptr [esi+8],edi
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!xxxInternalDoPaint+18
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 43446a58
FAILURE_BUCKET_ID: 0x8E_win32k!xxxInternalDoPaint+18
BUCKET_ID: 0x8E_win32k!xxxInternalDoPaint+18
Followup: MachineOwner
---------
0: kd> !thread
GetPointerFromAddress: unable to read from 80561114
THREAD 862a2da8 Cid 0824.0858 Teb: 7ffdd000 Win32Thread: e3291860 RUNNING on processor 0
Not impersonating
GetUlongFromAddress: unable to read from 80561124
Owning Process 85f5ab88 Image: Steam.exe
ffdf0000: Unable to get shared data
Wait Start TickCount 2140937
Context Switch Count 14719326 LargeStack
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime 00:00:00.0000
KernelTime 00:00:00.0000
Win32 Start Address 0x0047db58
Start Address 0x7c810665
Stack Init f33bf000 Current f33becd0 Base f33bf000 Limit f33ba000 Call 0
Priority 10 BasePriority 8 PriorityDecrement 0 DecrementCount 16
ChildEBP RetAddr Args to Child
f33bec68 bf81657a bc668f00 e3291860 00000230 win32k!xxxInternalDoPaint+0x18 (FPO: [Non-Fpo])
f33bec8c bf816679 bc6406e8 e3291860 00000230 win32k!xxxInternalDoPaint+0x68 (FPO: [Non-Fpo])
f33beca8 bf801b4b 00000000 f33bed14 f33bed64 win32k!xxxDoPaint+0x66 (FPO: [Non-Fpo])
f33bece8 bf80373a f33bed14 000025ff 00000000 win32k!xxxRealInternalGetMessage+0x39a (FPO: [Non-Fpo])
f33bed48 8054086c 0012ded8 00000000 00000000 win32k!NtUserPeekMessage+0x40 (FPO: [Non-Fpo])
f33bed48 7c90eb94 0012ded8 00000000 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f33bed64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012de80 00000000 00000000 00000000 00000000 0x7c90eb94
0: kd> kb 100
ChildEBP RetAddr Args to Child
f33bec68 bf81657a bc668f00 e3291860 00000230 win32k!xxxInternalDoPaint+0x18
f33bec8c bf816679 bc6406e8 e3291860 00000230 win32k!xxxInternalDoPaint+0x68
f33beca8 bf801b4b 00000000 f33bed14 f33bed64 win32k!xxxDoPaint+0x66
f33bece8 bf80373a f33bed14 000025ff 00000000 win32k!xxxRealInternalGetMessage+0x39a
f33bed48 8054086c 0012ded8 00000000 00000000 win32k!NtUserPeekMessage+0x40
f33bed48 7c90eb94 0012ded8 00000000 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012de80 00000000 00000000 00000000 00000000 0x7c90eb94
0: kd> !process
GetPointerFromAddress: unable to read from 80561114
PROCESS 85f5ab88 SessionId: none Cid: 0824 Peb: 7ffde000 ParentCid: 00e4
DirBase: 06f004c0 ObjectTable: e3269968 HandleCount: <Data Not Accessible>
Image: Steam.exe
VadRoot 86351d20 Vads 679 Clone 0 Private 6998. Modified 6584. Locked 0.
DeviceMap e2c721e0
Token e38af030
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
ffdf0000: Unable to get shared data
ElapsedTime 00:00:00.000
UserTime 00:00:00.000
KernelTime 00:00:00.000
QuotaPoolUsage[PagedPool] 172300
QuotaPoolUsage[NonPagedPool] 31704
Working Set Sizes (now,min,max) (5896, 50, 345) (23584KB, 200KB, 1380KB)
PeakWorkingSetSize 7909
VirtualSize 352 Mb
PeakVirtualSize 361 Mb
PageFaultCount 26050
MemoryPriority BACKGROUND
BasePriority 8
CommitCharge 8667
THREAD 862a2da8 Cid 0824.0858 Teb: 7ffdd000 Win32Thread: e3291860 RUNNING on processor 0
*** Error in reading nt!_ETHREAD @ 862cfc90
:strip_icc():strip_exif()/u/26508/fry-aaargh%2520klein.jpg?f=community)
:strip_icc():strip_exif()/u/26736/borat.jpg?f=community)