Home > OS >  Ask the great spirit DMP file content analysis
Ask the great spirit DMP file content analysis

Time:09-27

This is what meaning, don't understand what the problem is

Loading the Dump File (C: \ Users \ zyyxxk \ Desktop \ 031419-11356-01 DMP]
The Mini Kernel Dump File: Only registers and stack trace are available

Invalid Symbol search path is: * * * * * *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* Symbol loading may be unreliable without a Symbol search path. *
* Use symfix and the debugger choose a symbol path. *
* After setting your symbol path, use the reload to refresh symbol locations. *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
The Executable search path is:
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* Symbols can not be the loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the x-y & lt; Symbol_path & gt; Argument the when starting the debugger. *
* using. Sympath and. Sympath + *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
Unable to load the image \ SystemRoot \ system32 \ ntkrnlpa exe, Win32 error 0 n2
* * * WARNING: Unable to verify timestamp for ntkrnlpa. Exe
* * * ERROR: Module load completed but symbols could not be the loaded for ntkrnlpa. Exe
Windows 7 the Kernel Version 7601 (Service Pack 1) MP procs (2) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17514 x86fre. Win7sp1_rtm. 101119-1850
The Machine Name:
The Kernel base=0 x85252000 PsLoadedModuleList=0 x8539c850
The Debug session time: Thu Mar 14 08:28:26. 265 2019 (GMT + 8)
The System Uptime: 404
0 days 0:00:48.* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* Symbols can not be the loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the x-y & lt; Symbol_path & gt; Argument the when starting the debugger. *
* using. Sympath and. Sympath + *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
Unable to load the image \ SystemRoot \ system32 \ ntkrnlpa exe, Win32 error 0 n2
* * * WARNING: Unable to verify timestamp for ntkrnlpa. Exe
* * * ERROR: Module load completed but symbols could not be the loaded for ntkrnlpa. Exe
Loading the Kernel Symbols
...
...
.
Loading User Symbols
Loading unloaded the module list
.
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* *
* Bugcheck Analysis *
* *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

The Use! Analyze the -v to get the detailed was debugging information.

BugCheck e, 1000008 {80000004, ffdff2a5 b49f5d48, 0}

* * * * * the Kernel symbols are WRONG. Both Please fix symbols to do analysis.

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* * * * * *
* * * * * *
* * * Your debugger is not using the correct symbols * * *
* * * * * *
* * * In order for this command to work properly, your symbol path * * *
* * * must point to.. PDB files that have full type information. * * *
* * * * * *
* * * Certain. PDB files (to the as the public OS symbols) do not * * *
* * * contain the required information. Contact the group that * * *
* * * provided you with these symbols if you need this command to * * *
* * * work. * * *
* * * * * *
* * * Type referenced: nt! _KPRCB * * *
* * * * * *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
nullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnullnull
  • Related