bei windbg kommt folgendes raus:
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 00000020, The address that the exception occurred at
Arg3: ba991a98, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
MODULE_NAME: nt
FAULTING_MODULE: 804d0000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 3b7de38f
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in "0x%08lx" verweist auf Speicher in "0x%08lx". Der Vorgang "%s" konnte nicht auf dem Speicher durchgef hrt werden.
FAULTING_IP:
+20
00000020 ?? ???
TRAP_FRAME: ba991a98 -- (.trap ffffffffba991a98)
ErrCode = 00000000
eax=00000000 ebx=e138efb8 ecx=00000000 edx=f88861a0 esi=e138efb8 edi=ba991c24
eip=00000020 esp=ba991b0c ebp=00000000 iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
00000020 ?? ???
Resetting default scope
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
LAST_CONTROL_TRANSFER: from ba991b5c to 00000020
STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
ba991b08 ba991b5c ba991c00 ba991b5c ba991b2c 0x20
00010246 81c60146 f8888b1a 93818d01 8bf8888b 0xba991b5c
8905e883 00000000 00000000 00000000 00000000 0x81c60146
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_NAME: MachineOwner
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
Archiv Windows XP 25.916 Themen, 128.567 Beiträge
kd> .bugcheck ; kb
Bugcheck code 0000008E
Arguments c0000005 00000030 ba8a4a98 00000000
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
ba8a466c 80514d65 0000008e c0000005 00000030 nt!KeBugCheckEx+0x19
ba8a4a28 804d5897 ba8a4a44 00000000 ba8a4a98 nt!ExRaiseStatus+0x4b38
ba8a4a98 002c0033 006f0050 00690073 00690074 nt!Kei386EoiHelper+0x1dd
006d006f 00000000 00000000 00000000 00000000 0x2c0033