Windows 10: WinDpg

Discus and support WinDpg in Windows 10 Network and Sharing to solve the problem; I need help knowing whats wrong with my pc it keeps restarting and i got this in WinDpg on my dump file. Anyone plz help Microsoft R Windows... Discussion in 'Windows 10 Network and Sharing' started by MarkOBoii, Feb 18, 2020.

  1. MARKOBOII
    MarkOBoii Win User

    WinDpg


    I need help knowing whats wrong with my pc it keeps restarting and i got this in WinDpg on my dump file. Anyone plz help





    Microsoft R Windows Debugger Version 10.0.18362.1 AMD64

    Copyright c Microsoft Corporation. All rights reserved.





    Loading Dump File [C:\Windows\MEMORY.DMP]

    Kernel Bitmap Dump File: Full address space is available



    Symbol search path is: srv*

    Executable search path is:

    Windows 10 Kernel Version 18362 MP 12 procs Free x64

    Product: WinNt, suite: TerminalServer SingleUserTS Personal

    Built by: 18362.1.amd64fre.19h1_release.190318-1202

    Machine Name:

    Kernel base = 0xfffff807`16a00000 PsLoadedModuleList = 0xfffff807`16e48190

    Debug session time: Tue Feb 18 13:04:36.821 2020 UTC - 8:00

    System Uptime: 0 days 0:05:39.513

    Loading Kernel Symbols

    ...............................................................

    ................................................................

    .........................................................

    Loading User Symbols



    Loading unloaded module list

    ......

    For analysis of this file, run !analyze -v

    2: kd> !analyze -v

    *******************************************************************************

    * *

    * Bugcheck Analysis *

    * *

    *******************************************************************************



    KMODE_EXCEPTION_NOT_HANDLED 1e

    This is a very common bugcheck. Usually the exception address pinpoints

    the driver/function that caused the problem. Always note this address

    as well as the link date of the driver/image that contains this address.

    Arguments:

    Arg1: ffffffffc0000005, The exception code that was not handled

    Arg2: fffff80716a4b007, The address that the exception occurred at

    Arg3: 0000000000000000, Parameter 0 of the exception

    Arg4: ffffffffffffffff, Parameter 1 of the exception



    Debugging Details:

    ------------------





    KEY_VALUES_STRING: 1





    PROCESSES_ANALYSIS: 1



    SERVICE_ANALYSIS: 1



    STACKHASH_ANALYSIS: 1



    TIMELINE_ANALYSIS: 1





    DUMP_CLASS: 1



    DUMP_QUALIFIER: 402



    BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202



    SYSTEM_MANUFACTURER: Gigabyte Technology Co., Ltd.



    SYSTEM_PRODUCT_NAME: B450 AORUS ELITE



    SYSTEM_SKU: Default string



    SYSTEM_VERSION: Default string



    BIOS_VENDOR: American Megatrends Inc.



    BIOS_VERSION: F51



    BIOS_DATE: 12/18/2019



    BASEBOARD_MANUFACTURER: Gigabyte Technology Co., Ltd.



    BASEBOARD_PRODUCT: B450 AORUS ELITE



    BASEBOARD_VERSION: x.x



    DUMP_TYPE: 0



    BUGCHECK_P1: ffffffffc0000005



    BUGCHECK_P2: fffff80716a4b007



    BUGCHECK_P3: 0



    BUGCHECK_P4: ffffffffffffffff



    READ_ADDRESS: ffffffffffffffff



    EXCEPTION_CODE: NTSTATUS 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.



    FAULTING_IP:

    nt!KiTryUnwaitThread+187

    fffff807`16a4b007 483901 cmp qword ptr [rcx],rax



    EXCEPTION_PARAMETER2: ffffffffffffffff



    BUGCHECK_STR: 0x1E_c0000005_R



    CPU_COUNT: c



    CPU_MHZ: d42



    CPU_VENDOR: AuthenticAMD



    CPU_FAMILY: 17



    CPU_MODEL: 8



    CPU_STEPPING: 2



    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT



    PROCESS_NAME: System



    CURRENT_IRQL: 2



    ANALYSIS_SESSION_HOST: DESKTOP-OQI31UU



    ANALYSIS_SESSION_TIME: 02-18-2020 15:54:26.0173



    ANALYSIS_VERSION: 10.0.18362.1 amd64fre



    LAST_CONTROL_TRANSFER: from fffff80716ca663e to fffff80716bc1510



    STACK_TEXT:

    ffff808e`79a36648 fffff807`16ca663e : 00000000`0000001e ffffffff`c0000005 fffff807`16a4b007 00000000`00000000 : nt!KeBugCheckEx

    ffff808e`79a36650 fffff807`16bca342 : fffff807`16f11000 fffff807`16a00000 0005e530`00ab6000 00000000`0010001f : nt!KiFatalExceptionHandler+0x22

    ffff808e`79a36690 fffff807`16ac2f15 : 00000000`00000000 00000000`00000000 ffff808e`79a36c00 00007fff`ffff0000 : nt!RtlpExecuteHandlerForException+0x12

    ffff808e`79a366c0 fffff807`16ac74ae : ffff808e`79a375f8 ffff808e`79a37340 ffff808e`79a375f8 ffff8501`fca40180 : nt!RtlDispatchException+0x4a5

    ffff808e`79a36e10 fffff807`16bd351d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x16e

    ffff808e`79a374c0 fffff807`16bcf2a2 : fffff807`16a00000 00000000`00000000 ffff808e`79a37748 fffff807`16960b2a : nt!KiExceptionDispatch+0x11d

    ffff808e`79a376a0 fffff807`16a4b007 : ffff2889`ffffffff ffffffff`267d7000 00000007`00000000 00000000`00000003 : nt!KiGeneralProtectionFault+0x322

    ffff808e`79a37830 fffff807`16a6be16 : ffffda04`2477b188 00000000`00000000 ffffda04`2477b250 ffffda04`2477b180 : nt!KiTryUnwaitThread+0x187

    ffff808e`79a37890 fffff807`16a6b9f2 : ffffda04`2477b180 00000000`ca5d37bd 00000001`00000004 ffffda04`1e88b010 : nt!KiTimerWaitTest+0x1b6

    ffff808e`79a37940 fffff807`16a6a7e9 : 00000000`00000000 00000000`00989680 00000000`00003297 00000000`000000af : nt!KiProcessExpiredTimerList+0xd2

    ffff808e`79a37a30 fffff807`16bc5054 : ffffffff`00000000 ffff8501`fc8f9180 ffff8501`fc90a340 ffffda04`245f7080 : nt!KiRetireDpcList+0x4e9

    ffff808e`79a37c60 00000000`00000000 : ffff808e`79a38000 ffff808e`79a32000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x84





    THREAD_SHA1_HASH_MOD_FUNC: 8836b4b9bc26ee65351ed3452fce2c016d4846c9



    THREAD_SHA1_HASH_MOD_FUNC_OFFSET: a0580901ff41c49a9bd544c250bcc7bec78abeff



    THREAD_SHA1_HASH_MOD: dc844b1b94baa204d070855e43bbbd27eee98b94



    FOLLOWUP_IP:

    nt!KiTryUnwaitThread+187

    fffff807`16a4b007 483901 cmp qword ptr [rcx],rax



    FAULT_INSTR_CODE: f013948



    SYMBOL_STACK_INDEX: 7



    SYMBOL_NAME: nt!KiTryUnwaitThread+187



    FOLLOWUP_NAME: MachineOwner



    MODULE_NAME: nt



    IMAGE_NAME: ntkrnlmp.exe



    DEBUG_FLR_IMAGE_TIMESTAMP: 4269a790



    STACK_COMMAND: .thread ; .cxr ; kb



    BUCKET_ID_FUNC_OFFSET: 187



    FAILURE_BUCKET_ID: 0x1E_c0000005_R_nt!KiTryUnwaitThread



    BUCKET_ID: 0x1E_c0000005_R_nt!KiTryUnwaitThread



    PRIMARY_PROBLEM_CLASS: 0x1E_c0000005_R_nt!KiTryUnwaitThread



    TARGET_TIME: 2020-02-18T21:04:36.000Z



    OSBUILD: 18362



    OSSERVICEPACK: 0



    SERVICEPACK_NUMBER: 0



    OS_REVISION: 0



    SUITE_MASK: 784



    PRODUCT_TYPE: 1



    OSPLATFORM_TYPE: x64



    OSNAME: Windows 10



    OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal



    OS_LOCALE:



    USER_LCID: 0



    OSBUILD_TIMESTAMP: 2005-04-22 18:40:32



    BUILDDATESTAMP_STR: 190318-1202



    BUILDLAB_STR: 19h1_release



    BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202



    ANALYSIS_SESSION_ELAPSED_TIME: 187a



    ANALYSIS_SOURCE: KM



    FAILURE_ID_HASH_STRING: km:0x1e_c0000005_r_nt!kitryunwaitthread



    FAILURE_ID_HASH: {4abda1ba-718c-fcea-57ff-6e531adb2ce2}



    Followup: MachineOwner

    :)
     
    MarkOBoii, Feb 18, 2020
    #1
  2. MARKOBOII
    MarkOBoii Win User

    WinDpg

    I need help knowing whats wrong with my pc it keeps restarting and i got this in WinDpg on my dump file. Anyone plz help

    Microsoft (R) Windows Debugger Version 10.0.18362.1 AMD64

    Copyright (c) Microsoft Corporation. All rights reserved.

    Loading Dump File [C:\Windows\MEMORY.DMP]

    Kernel Bitmap Dump File: Full address space is available

    Symbol search path is: srv*

    Executable search path is:

    Windows 10 Kernel Version 18362 MP (12 procs) Free x64

    Product: WinNt, suite: TerminalServer SingleUserTS Personal

    Built by: 18362.1.amd64fre.19h1_release.190318-1202

    Machine Name:

    Kernel base = 0xfffff807`16a00000 PsLoadedModuleList = 0xfffff807`16e48190

    Debug session time: Tue Feb 18 13:04:36.821 2020 (UTC - 8:00)

    System Uptime: 0 days 0:05:39.513

    Loading Kernel Symbols

    ...............................................................

    ................................................................

    .........................................................

    Loading User Symbols

    Loading unloaded module list

    ......

    For analysis of this file, run !analyze -v

    2: kd> !analyze -v

    *******************************************************************************

    * *

    * Bugcheck Analysis *

    * *

    *******************************************************************************

    KMODE_EXCEPTION_NOT_HANDLED (1e)

    This is a very common bugcheck. Usually the exception address pinpoints

    the driver/function that caused the problem. Always note this address

    as well as the link date of the driver/image that contains this address.

    Arguments:

    Arg1: ffffffffc0000005, The exception code that was not handled

    Arg2: fffff80716a4b007, The address that the exception occurred at

    Arg3: 0000000000000000, Parameter 0 of the exception

    Arg4: ffffffffffffffff, Parameter 1 of the exception

    Debugging Details:

    ------------------

    KEY_VALUES_STRING: 1

    PROCESSES_ANALYSIS: 1

    SERVICE_ANALYSIS: 1

    STACKHASH_ANALYSIS: 1

    TIMELINE_ANALYSIS: 1

    DUMP_CLASS: 1

    DUMP_QUALIFIER: 402

    BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202

    SYSTEM_MANUFACTURER: Gigabyte Technology Co., Ltd.

    SYSTEM_PRODUCT_NAME: B450 AORUS ELITE

    SYSTEM_SKU: Default string

    SYSTEM_VERSION: Default string

    BIOS_VENDOR: American Megatrends Inc.

    BIOS_VERSION: F51

    BIOS_DATE: 12/18/2019

    BASEBOARD_MANUFACTURER: Gigabyte Technology Co., Ltd.

    BASEBOARD_PRODUCT: B450 AORUS ELITE

    BASEBOARD_VERSION: x.x

    DUMP_TYPE: 0

    BUGCHECK_P1: ffffffffc0000005

    BUGCHECK_P2: fffff80716a4b007

    BUGCHECK_P3: 0

    BUGCHECK_P4: ffffffffffffffff

    READ_ADDRESS: ffffffffffffffff

    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

    FAULTING_IP:

    nt!KiTryUnwaitThread+187

    fffff807`16a4b007 483901 cmp qword ptr [rcx],rax

    EXCEPTION_PARAMETER2: ffffffffffffffff

    BUGCHECK_STR: 0x1E_c0000005_R

    CPU_COUNT: c

    CPU_MHZ: d42

    CPU_VENDOR: AuthenticAMD

    CPU_FAMILY: 17

    CPU_MODEL: 8

    CPU_STEPPING: 2

    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

    PROCESS_NAME: System

    CURRENT_IRQL: 2

    ANALYSIS_SESSION_HOST: DESKTOP-OQI31UU

    ANALYSIS_SESSION_TIME: 02-18-2020 15:54:26.0173

    ANALYSIS_VERSION: 10.0.18362.1 amd64fre

    LAST_CONTROL_TRANSFER: from fffff80716ca663e to fffff80716bc1510

    STACK_TEXT:

    ffff808e`79a36648 fffff807`16ca663e : 00000000`0000001e ffffffff`c0000005 fffff807`16a4b007 00000000`00000000 : nt!KeBugCheckEx

    ffff808e`79a36650 fffff807`16bca342 : fffff807`16f11000 fffff807`16a00000 0005e530`00ab6000 00000000`0010001f : nt!KiFatalExceptionHandler+0x22

    ffff808e`79a36690 fffff807`16ac2f15 : 00000000`00000000 00000000`00000000 ffff808e`79a36c00 00007fff`ffff0000 : nt!RtlpExecuteHandlerForException+0x12

    ffff808e`79a366c0 fffff807`16ac74ae : ffff808e`79a375f8 ffff808e`79a37340 ffff808e`79a375f8 ffff8501`fca40180 : nt!RtlDispatchException+0x4a5

    ffff808e`79a36e10 fffff807`16bd351d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x16e

    ffff808e`79a374c0 fffff807`16bcf2a2 : fffff807`16a00000 00000000`00000000 ffff808e`79a37748 fffff807`16960b2a : nt!KiExceptionDispatch+0x11d

    ffff808e`79a376a0 fffff807`16a4b007 : ffff2889`ffffffff ffffffff`267d7000 00000007`00000000 00000000`00000003 : nt!KiGeneralProtectionFault+0x322

    ffff808e`79a37830 fffff807`16a6be16 : ffffda04`2477b188 00000000`00000000 ffffda04`2477b250 ffffda04`2477b180 : nt!KiTryUnwaitThread+0x187

    ffff808e`79a37890 fffff807`16a6b9f2 : ffffda04`2477b180 00000000`ca5d37bd 00000001`00000004 ffffda04`1e88b010 : nt!KiTimerWaitTest+0x1b6

    ffff808e`79a37940 fffff807`16a6a7e9 : 00000000`00000000 00000000`00989680 00000000`00003297 00000000`000000af : nt!KiProcessExpiredTimerList+0xd2

    ffff808e`79a37a30 fffff807`16bc5054 : ffffffff`00000000 ffff8501`fc8f9180 ffff8501`fc90a340 ffffda04`245f7080 : nt!KiRetireDpcList+0x4e9

    ffff808e`79a37c60 00000000`00000000 : ffff808e`79a38000 ffff808e`79a32000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x84

    THREAD_SHA1_HASH_MOD_FUNC: 8836b4b9bc26ee65351ed3452fce2c016d4846c9

    THREAD_SHA1_HASH_MOD_FUNC_OFFSET: a0580901ff41c49a9bd544c250bcc7bec78abeff

    THREAD_SHA1_HASH_MOD: dc844b1b94baa204d070855e43bbbd27eee98b94

    FOLLOWUP_IP:

    nt!KiTryUnwaitThread+187

    fffff807`16a4b007 483901 cmp qword ptr [rcx],rax

    FAULT_INSTR_CODE: f013948

    SYMBOL_STACK_INDEX: 7

    SYMBOL_NAME: nt!KiTryUnwaitThread+187

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntkrnlmp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 4269a790

    STACK_COMMAND: .thread ; .cxr ; kb

    BUCKET_ID_FUNC_OFFSET: 187

    FAILURE_BUCKET_ID: 0x1E_c0000005_R_nt!KiTryUnwaitThread

    BUCKET_ID: 0x1E_c0000005_R_nt!KiTryUnwaitThread

    PRIMARY_PROBLEM_CLASS: 0x1E_c0000005_R_nt!KiTryUnwaitThread

    TARGET_TIME: 2020-02-18T21:04:36.000Z

    OSBUILD: 18362

    OSSERVICEPACK: 0

    SERVICEPACK_NUMBER: 0

    OS_REVISION: 0

    SUITE_MASK: 784

    PRODUCT_TYPE: 1

    OSPLATFORM_TYPE: x64

    OSNAME: Windows 10

    OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal

    OS_LOCALE:

    USER_LCID: 0

    OSBUILD_TIMESTAMP: 2005-04-22 18:40:32

    BUILDDATESTAMP_STR: 190318-1202

    BUILDLAB_STR: 19h1_release

    BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202

    ANALYSIS_SESSION_ELAPSED_TIME: 187a

    ANALYSIS_SOURCE: KM

    FAILURE_ID_HASH_STRING: km:0x1e_c0000005_r_nt!kitryunwaitthread

    FAILURE_ID_HASH: {4abda1ba-718c-fcea-57ff-6e531adb2ce2}

    Followup: MachineOwner
     
    MarkOBoii, Feb 24, 2020
    #2
Thema:

WinDpg

Users found this page by searching for:

  1. 0x1E_c0000005_R_nt!KiTryUnwaitThread