AutoBlue BSOD Tool Development

Test output

BSOD Bugcheck Summary
Code: 
Loading Dump File [H:\Downloads\AutoBlue\Analyze_Dumps\021712-22729-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Fri Feb 17 17:57:05.994 2012 (UTC - 5:00)
System Uptime: 0 days 23:00:37.571
BugCheck 1000007E, {ffffffffc0000005, fffff880053ccffb, fffff880059ee698, fffff880059edef0}
Probably caused by : dxgmms1.sys ( dxgmms1!VIDMM_GLOBAL::ReferenceAllocationForSubmission+ab )
Arguments:
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
CURRENT_IRQL:  0
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800036bf100
BUGCHECK_STR:  0x7E
LAST_CONTROL_TRANSFER:  from fffff880053ca803 to fffff880053ccffb
SYMBOL_NAME:  dxgmms1!VIDMM_GLOBAL::ReferenceAllocationForSubmission+ab
IMAGE_NAME:  dxgmms1.sys
FAILURE_BUCKET_ID:  X64_0x7E_dxgmms1!VIDMM_GLOBAL::ReferenceAllocationForSubmission+ab
Arguments ffffffff`c0000005 fffff880`053ccffb fffff880`059ee698 fffff880`059edef0
Identifier = REG_SZ AMD64 Family 16 Model 4 Stepping 3
ProcessorNameString = REG_SZ AMD Phenom(tm) II X4 965 Processor
VendorIdentifier = REG_SZ AuthenticAMD
BiosVendor = American Megatrends Inc.
BiosVersion = V1.17
BiosReleaseDate = 02/18/2011
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7577
SystemVersion = 1.0
BaseBoardManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
\\
##----------------------------------------: End of Dump :----------------------------------------##
//
Loading Dump File [H:\Downloads\AutoBlue\Analyze_Dumps\021812-24429-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Sat Feb 18 18:53:44.363 2012 (UTC - 5:00)
System Uptime: 0 days 18:40:14.565
BugCheck 50, {fffff95fff91596c, 8, fffff95fff91596c, 5}
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for win32k.sys -
Probably caused by : win32k.sys ( win32k!memcmp+1e82 )
Arguments:
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x50
PROCESS_NAME:  explorer.exe
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from fffff800034763bf to fffff800034cbc40
SYMBOL_NAME:  win32k!memcmp+1e82
IMAGE_NAME:  win32k.sys
FAILURE_BUCKET_ID:  X64_0x50_win32k!memcmp+1e82
Arguments fffff95f`ff91596c 00000000`00000008 fffff95f`ff91596c 00000000`00000005
Identifier = REG_SZ AMD64 Family 16 Model 4 Stepping 3
ProcessorNameString = REG_SZ AMD Phenom(tm) II X4 965 Processor
VendorIdentifier = REG_SZ AuthenticAMD
BiosVendor = American Megatrends Inc.
BiosVersion = V1.17
BiosReleaseDate = 02/18/2011
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7577
SystemVersion = 1.0
BaseBoardManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
\\
##----------------------------------------: End of Dump :----------------------------------------##
//
Loading Dump File [H:\Downloads\AutoBlue\Analyze_Dumps\022012-28548-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Mon Feb 20 18:44:56.222 2012 (UTC - 5:00)
System Uptime: 0 days 7:42:34.424
BugCheck FC, {fffff880018089a0, 8000000004559963, fffff8800b9e6590, 0}
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by : hardware ( tcpip+1719a0 )
Arguments:
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xFC
PROCESS_NAME:  OUTLOOK.EXE
CURRENT_IRQL:  2
LAST_CONTROL_TRANSFER:  from fffff80003439fc0 to fffff8000348fc40
SYMBOL_NAME:  tcpip+1719a0
IMAGE_NAME:  hardware
FAILURE_BUCKET_ID:  X64_IP_MISALIGNED
Arguments fffff880`018089a0 80000000`04559963 fffff880`0b9e6590 00000000`00000000
Identifier = REG_SZ AMD64 Family 16 Model 4 Stepping 3
ProcessorNameString = REG_SZ AMD Phenom(tm) II X4 965 Processor
VendorIdentifier = REG_SZ AuthenticAMD
BiosVendor = American Megatrends Inc.
BiosVersion = V1.17
BiosReleaseDate = 02/18/2011
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7577
SystemVersion = 1.0
BaseBoardManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
\\
##----------------------------------------: End of Dump :----------------------------------------##
//
Loading Dump File [H:\Downloads\AutoBlue\Analyze_Dumps\022312-16208-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Thu Feb 23 20:09:33.059 2012 (UTC - 5:00)
System Uptime: 0 days 0:28:03.635
BugCheck FC, {fffff8800ae96b60, 80000001c177a963, fffff8800ae96890, 2}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+45d8c )
Arguments:
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xFC
PROCESS_NAME:  svchost.exe
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from fffff800034416c4 to fffff80003495c40
SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+45d8c
IMAGE_NAME:  ntkrnlmp.exe
FAILURE_BUCKET_ID:  X64_0xFC_nt!_??_::FNODOBFM::_string_+45d8c
Arguments fffff880`0ae96b60 80000001`c177a963 fffff880`0ae96890 00000000`00000002
Identifier = REG_SZ AMD64 Family 16 Model 4 Stepping 3
ProcessorNameString = REG_SZ AMD Phenom(tm) II X4 965 Processor
VendorIdentifier = REG_SZ AuthenticAMD
BiosVendor = American Megatrends Inc.
BiosVersion = V1.17
BiosReleaseDate = 02/18/2011
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7577
SystemVersion = 1.0
BaseBoardManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
\\
##----------------------------------------: End of Dump :----------------------------------------##
//
Loading Dump File [H:\Downloads\AutoBlue\Analyze_Dumps\022312-16380-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Thu Feb 23 19:39:49.529 2012 (UTC - 5:00)
System Uptime: 1 days 19:44:10.105
BugCheck A, {fffffa7fffffe7d8, 2, 1, fffff800034b7e11}
Probably caused by : memory_corruption ( nt!MiUnlinkFreeOrZeroedPage+181 )
Arguments:
CURRENT_IRQL:  2
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
LAST_CONTROL_TRANSFER:  from fffff800034971e9 to fffff80003497c40
SYMBOL_NAME:  nt!MiUnlinkFreeOrZeroedPage+181
IMAGE_NAME:  memory_corruption
FAILURE_BUCKET_ID:  X64_0xA_nt!MiUnlinkFreeOrZeroedPage+181
Arguments fffffa7f`ffffe7d8 00000000`00000002 00000000`00000001 fffff800`034b7e11
Identifier = REG_SZ AMD64 Family 16 Model 4 Stepping 3
ProcessorNameString = REG_SZ AMD Phenom(tm) II X4 965 Processor
VendorIdentifier = REG_SZ AuthenticAMD
BiosVendor = American Megatrends Inc.
BiosVersion = V1.17
BiosReleaseDate = 02/18/2011
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7577
SystemVersion = 1.0
BaseBoardManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
\\
##----------------------------------------: End of Dump :----------------------------------------##
//
Loading Dump File [H:\Downloads\AutoBlue\Analyze_Dumps\022412-18298-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Fri Feb 24 21:24:12.086 2012 (UTC - 5:00)
System Uptime: 0 days 5:46:36.662
BugCheck 50, {fffff80002f9f800, 8, fffff80002f9f800, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4611f )
Arguments:
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0x50
PROCESS_NAME:  WmiPrvSE.exe
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from fffff8000343d9fc to fffff80003491c40
SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+4611f
IMAGE_NAME:  ntkrnlmp.exe
FAILURE_BUCKET_ID:  X64_0x50_VRF_nt!_??_::FNODOBFM::_string_+4611f
Arguments fffff800`02f9f800 00000000`00000008 fffff800`02f9f800 00000000`00000000
Identifier = REG_SZ AMD64 Family 16 Model 4 Stepping 3
ProcessorNameString = REG_SZ AMD Phenom(tm) II X4 965 Processor
VendorIdentifier = REG_SZ AuthenticAMD
BiosVendor = American Megatrends Inc.
BiosVersion = V1.17
BiosReleaseDate = 02/18/2011
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7577
SystemVersion = 1.0
BaseBoardManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
\\
##----------------------------------------: End of Dump :----------------------------------------##
//
Loading Dump File [H:\Downloads\AutoBlue\Analyze_Dumps\022512-18236-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Sat Feb 25 11:23:42.865 2012 (UTC - 5:00)
System Uptime: 0 days 13:58:23.441
BugCheck 1E, {ffffffffc000001d, fffffa8008332930, 2, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4977d )
Arguments:
BUGCHECK_STR:  0x1E_c000001d
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME:  fsx.exe
CURRENT_IRQL:  2
LAST_CONTROL_TRANSFER:  from fffff8000351d588 to fffff800034d1c40
SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+4977d
IMAGE_NAME:  ntkrnlmp.exe
FAILURE_BUCKET_ID:  X64_0x1E_c000001d_VRF_BAD_IP_nt!_??_::FNODOBFM::_string_+4977d
Arguments ffffffff`c000001d fffffa80`08332930 00000000`00000002 00000000`00000000
Identifier = REG_SZ AMD64 Family 16 Model 4 Stepping 3
ProcessorNameString = REG_SZ AMD Phenom(tm) II X4 965 Processor
VendorIdentifier = REG_SZ AuthenticAMD
BiosVendor = American Megatrends Inc.
BiosVersion = V1.17
BiosReleaseDate = 02/18/2011
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7577
SystemVersion = 1.0
BaseBoardManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
\\
##----------------------------------------: End of Dump :----------------------------------------##
//
 
mgorman87 said:
Pretty cool. Gonna have to check it out


EDIT: I'm getting syntax errors at the end of each file it processes and I have to close it out manually and then it starts the next one
Click to expand...

That's most likely due to your settings, for syntax errors check the configuration, and make sure the setlist of commands is correct for kd.exe. I didn't check those when I released these versions. But latest version appends ;q to the end of the commandlist automatically.

Open up "config.set" file and check this commandlist:
Code: 
CMD_LINES: !analyze -v;r;kv;lmtsmn;.bugcheck;!peb;!sysinfo cpuinfo;!sysinfo machineid;!sysinfo cpuspeed;!sysinfo smbios

These are the list of commands it will run through, also make sure your symbols are pointed to the correct path through the config.

Latest version: Please update the program by clicking the update button on the application, it may be slow, but for v1.2.7 which i'm officially releasing right now, it should litterally take no more than a second to update from any update from now on in the future.

I've fixed a few things, and had some major changes in functionality and increased performance.

Please for testing make sure you have v1.2.7, i'd like to see how this version goes, updates should no longer freeze the form/GUI, i've multi-threaded everything.

One thing I am working on to improve is to make sure that the user should be able to almost use the program without having to look through the instructions, or require any help with it :)
 
Last edited:
I am able to make this program's source more secure by modifying the PE/DOS header as a preventative for basic disassemblers, however doing this is not bad, it is a pseudo method for some AV's to detect it as a false positive for a program. (Mostly on the very terrible AV's that most people have unheard of.)
 
Not sure if it's possible, but can you implement the windbg debugger into your software? For example, I am at work now and I want to run some dumps. If I use your program I would need the debugger installed on this comptuer and that isn't an option
 
That would mean combining the filesize of KD.exe WinDbg.exe and my program executable itself though which is a fairly large/decently large filesize for a program though. WinDbg and KD though are portable executables aren't they? I wasn't required to install any of them when I downloaded the programs. They came straight to me in the Microsoft 64 bit debugging tools for Windows zip archive.

However, if I was to include it to the program, you'd still need to have all of the symbols anyways to run it properly. Do you have a USB or anything like that which you can take to work? I know that's what i'd probably do, just to keep my symbols KD and/or WinDbg on the key, along with my program and then you wouldn't need anything else.

It is possible, but for most big applications, the reason why they are installed is because they try to keep the application executable itself a small filesize for performance reasons. All the installation does is it adds the dll's or any other config files to a file layout in your programs folder in the way the program wants to read from them, and IF it requires any other settings, programs ONLY make registry edits if that's the way they store their settings. Otherwise they keep it in an xml or ini file for example. My application though and WinDbg as far as I know was a portable app, along with KD. They gave me the exe files straight from the zip file and I was able to use them right after extraction to my desktop when I first downloaded them :)

My app doesn't do any registry changes either, I meant for it also to be a portable app, and the only thing that should be taken care of when moving it around is that the AutoBlue folder with it's contents just needs to stay in the same directory as the executable itself. Otherwise on startup it will create those files, but it does not generate the README or the MS driverlist or the Return list.
 
Last edited:
So I put your program along with my symbols and kd.exe and windbg.exe on a usb drive and when I run it this is what i get

Code: 
Opened log file 'K:\\AutoBlue\021412-24991-01.log'

Microsoft (R) Windows Debugger Version 6.1.7601.17514 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.




Loading Dump File [K:\AutoBlue\Analyze_Dumps\021412-24991-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


Symbol search path is: K:\symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16841.amd64fre.win7_gdr.110622-1503
Machine Name:
Kernel base = 0xfffff800`02c4c000 PsLoadedModuleList = 0xfffff800`02e89e70
Debug session time: Tue Feb 14 19:05:01.016 2012 (UTC - 5:00)
System Uptime: 1 days 17:48:33.686
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
...........
The call to LoadLibrary(ext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(exts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kdexts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(ext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(exts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kdexts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
.bugcheck
Bugcheck code 0000010E
Arguments 00000000`0000001f fffff8a0`159de940 00000000`00000000 00000000`0087639a


kb
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for watchdog.sys - 
RetAddr           : Args to Child                                                           : Call Site
fffff880`00de022f : 00000000`0000010e 00000000`0000001f fffff8a0`159de940 00000000`00000000 : nt!KeBugCheckEx
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for dxgmms1.sys - 
fffff880`053bb098 : fffff8a0`02f71e50 fffff8a0`159de940 00000000`0087639a 00000000`00000000 : watchdog!WdLogEvent5+0x11b
fffff880`053b88af : 00000000`00000000 fffffa80`03952028 00000000`00000c3a fffffa80`0397b080 : dxgmms1!VidMmInterface+0xf7d8
fffff880`053d265d : 00000000`00000000 fffff8a0`149a1410 fffffa80`00000000 fffffa80`06e53220 : dxgmms1!VidMmInterface+0xcfef
fffff880`053d2398 : fffff800`00b96080 fffff880`053d1d00 fffffa80`00000000 fffffa80`00000000 : dxgmms1!VidMmInterface+0x26d9d
fffff880`053d1e96 : 00000000`00000000 fffffa80`0461ed50 00000000`00000080 fffffa80`061ba010 : dxgmms1!VidMmInterface+0x26ad8
fffff800`02f5c6fa : 00000000`023ef0c3 fffffa80`0644cb60 fffffa80`036ca040 fffffa80`0644cb60 : dxgmms1!VidMmInterface+0x265d6
fffff800`02c9ab46 : fffff800`02e36e80 fffffa80`0644cb60 fffff800`02e44c40 fffff880`01423810 : nt!PspSystemThreadStartup+0x5a
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


1: kd> !analyze -v;r;kv;lmtsmn;.bugcheck;!peb;!sysinfo cpuinfo;!sysinfo machineid;!sysinfo cpuspeed;!sysinfo smbios;q
The call to LoadLibrary(ext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(exts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kdexts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
No export analyze found
rax=000000000087639a rbx=fffffa8005508dc0 rcx=000000000000010e
rdx=000000000000001f rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cbc5c0 rsp=fffff88006069838 rbp=0000000000000000
 r8=fffff8a0159de940  r9=0000000000000000 r10=0000000000000000
r11=0000000000000001 r12=0000000000000005 r13=fffff88000ddf000
r14=0000000000000001 r15=0000000000000079
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
nt!KeBugCheckEx:
fffff800`02cbc5c0 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`06069840=000000000000010e
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`06069838 fffff880`00de022f : 00000000`0000010e 00000000`0000001f fffff8a0`159de940 00000000`00000000 : nt!KeBugCheckEx
fffff880`06069840 fffff880`053bb098 : fffff8a0`02f71e50 fffff8a0`159de940 00000000`0087639a 00000000`00000000 : watchdog!WdLogEvent5+0x11b
fffff880`06069890 fffff880`053b88af : 00000000`00000000 fffffa80`03952028 00000000`00000c3a fffffa80`0397b080 : dxgmms1!VidMmInterface+0xf7d8
fffff880`060698d0 fffff880`053d265d : 00000000`00000000 fffff8a0`149a1410 fffffa80`00000000 fffffa80`06e53220 : dxgmms1!VidMmInterface+0xcfef
fffff880`06069aa0 fffff880`053d2398 : fffff800`00b96080 fffff880`053d1d00 fffffa80`00000000 fffffa80`00000000 : dxgmms1!VidMmInterface+0x26d9d
fffff880`06069c90 fffff880`053d1e96 : 00000000`00000000 fffffa80`0461ed50 00000000`00000080 fffffa80`061ba010 : dxgmms1!VidMmInterface+0x26ad8
fffff880`06069cc0 fffff800`02f5c6fa : 00000000`023ef0c3 fffffa80`0644cb60 fffffa80`036ca040 fffffa80`0644cb60 : dxgmms1!VidMmInterface+0x265d6
fffff880`06069d00 fffff800`02c9ab46 : fffff800`02e36e80 fffffa80`0644cb60 fffff800`02e44c40 fffff880`01423810 : nt!PspSystemThreadStartup+0x5a
fffff880`06069d40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
start             end                 module name
fffff880`00f90000 fffff880`00fe7000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02d3f000 fffff880`02dc8000   afd      afd.sys      Sun Apr 24 22:43:58 2011 (4DB4DFEE)
fffff880`02ccf000 fffff880`02ce5000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00dd4000 fffff880`00ddf000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`03e3b000 fffff880`03e43000   ASACPI   ASACPI.sys   Wed May 13 21:25:17 2009 (4A0B72FD)
fffff880`03ae5000 fffff880`03aec000   AsIO     AsIO.sys     Mon Dec 17 04:11:49 2007 (47663D55)
fffff880`09696000 fffff880`096a1000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00ece000 fffff880`00ed7000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00daa000 fffff880`00dd4000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`03fd9000 fffff880`03fdce80   BdaSup   BdaSup.SYS   Mon Jul 13 20:06:40 2009 (4A5BCC10)
fffff880`01409000 fffff880`01410000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03cdf000 fffff880`03dfe000   BHDrvx64 BHDrvx64.sys Wed Nov 23 14:32:10 2011 (4ECD4A3A)
fffff880`03cce000 fffff880`03cdf000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`027ad000 fffff880`027cb000   bowser   bowser.sys   Wed Feb 23 00:15:06 2011 (4D6497DA)
fffff960`00660000 fffff960`00687000   cdd      cdd.dll      unavailable (00000000)
fffff880`01000000 fffff880`0102a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cc0000 fffff880`00d80000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0414f000 fffff880`04161000   circlass circlass.sys Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`011bb000 fffff880`011eb000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c62000 fffff880`00cc0000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01200000 fffff880`01273000   cng      cng.sys      Wed Nov 16 23:26:35 2011 (4EC48CFB)
fffff880`053ec000 fffff880`053fc000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`06800000 fffff880`0680e000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03cb0000 fffff880`03cce000   dfsc     dfsc.sys     Tue Apr 26 22:57:39 2011 (4DB78623)
fffff880`03ca1000 fffff880`03cb0000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`017db000 fffff880`017f1000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04000000 fffff880`04022000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`04056000 fffff880`0405f000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0404a000 fffff880`04056000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0405f000 fffff880`04072000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`041e2000 fffff880`041ee000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`052a6000 fffff880`0539a000   dxgkrnl  dxgkrnl.sys  Tue Jan 25 23:22:56 2011 (4D3FA1A0)
fffff880`0539a000 fffff880`053e0000   dxgmms1  dxgmms1.sys  Tue Jan 25 23:22:12 2011 (4D3FA174)
fffff880`03c02000 fffff880`03c7b000   eeCtrl64 eeCtrl64.sys Fri Jan 20 18:39:48 2012 (4F19FB44)
fffff880`096c5000 fffff880`096e5000   ENG64    ENG64.SYS    Fri Jul 29 09:17:51 2011 (4E32B2FF)
fffff880`03c7b000 fffff880`03ca1000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri Jan 20 18:39:49 2012 (4F19FB45)
fffff880`09000000 fffff880`091f8000   EX64     EX64.SYS     Fri Jul 29 09:15:11 2011 (4E32B25F)
fffff880`010a0000 fffff880`010b4000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01054000 fffff880`010a0000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`015df000 fffff880`015e9000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`013c3000 fffff880`013fd000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01125000 fffff880`0116f000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02c03000 fffff800`02c4c000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04800000 fffff880`04824000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`020f5000 fffff880`0210e000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`020e4000 fffff880`020f5000   hidir    hidir.sys    Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0210e000 fffff880`02116080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0214f000 fffff880`0215d000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`026e5000 fffff880`027ad000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`017d2000 fffff880`017db000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`096e5000 fffff880`09762000   IDSvia64 IDSvia64.sys Tue Nov 22 15:23:23 2011 (4ECC04BB)
fffff880`04883000 fffff880`052a5e20   igdkmd64 igdkmd64.sys Fri Feb 11 14:16:32 2011 (4D558B10)
fffff880`04022000 fffff880`0404a000   IntcHdmi IntcHdmi.sys Mon Mar 15 11:45:27 2010 (4B9E5617)
fffff880`00ec6000 fffff880`00ece000   intelide intelide.sys Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03bdf000 fffff880`03bf5000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03b9c000 fffff880`03bc9000   Ironx64  Ironx64.SYS  Fri Nov 12 18:06:50 2010 (4CDDC88A)
fffff880`0412f000 fffff880`0413e000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02117000 fffff880`02125000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00baf000 fffff800`00bb9000   kdcom    kdcom.dll    Sat Feb 05 07:21:45 2011 (4D4D40D9)
fffff880`03f96000 fffff880`03fd9000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`015b4000 fffff880`015ce000   ksecdd   ksecdd.sys   Wed Nov 16 22:54:33 2011 (4EC48579)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Wed Nov 16 23:27:30 2011 (4EC48D32)
fffff880`03fdd000 fffff880`03fe2200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`03fe3000 fffff880`03ff5000   L1E62x64 L1E62x64.sys Thu Jun 11 02:45:22 2009 (4A30A802)
fffff880`021af000 fffff880`021c4000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0216b000 fffff880`0218e000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c0a000 fffff880`00c4e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`0215d000 fffff880`0216b000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0413e000 fffff880`0414d000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02125000 fffff880`02132000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d90000 fffff880`00daa000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`027cb000 fffff880`027e3000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02600000 fffff880`0262d000   mrxsmb   mrxsmb.sys   Tue May 03 22:51:06 2011 (4DC0BF1A)
fffff880`0262d000 fffff880`0267b000   mrxsmb10 mrxsmb10.sys Fri Jul 08 22:44:55 2011 (4E17C0A7)
fffff880`0267b000 fffff880`0269e000   mrxsmb20 mrxsmb20.sys Tue May 03 22:51:05 2011 (4DC0BF19)
fffff880`02cf8000 fffff880`02d03000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00ff0000 fffff880`00ffa000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`096a3000 fffff880`096a4c00   MSPCLOCK MSPCLOCK.sys Mon Jul 13 20:00:17 2009 (4A5BCA91)
fffff880`096a1000 fffff880`096a2a80   MSPQM    MSPQM.sys    Mon Jul 13 20:00:17 2009 (4A5BCA91)
fffff880`01365000 fffff880`013c3000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03a5d000 fffff880`03a68000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017c0000 fffff880`017d2000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016ce000 fffff880`017c0000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0409e000 fffff880`040aa000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`040aa000 fffff880`040d9000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`041cd000 fffff880`041e2000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c74000 fffff880`02c83000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c00000 fffff880`02c45000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02d03000 fffff880`02d14000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03a51000 fffff880`03a5d000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c4c000 fffff800`03228000   nt       ntkrnlmp.exe Wed Jun 22 22:51:48 2011 (4E02AA44)
fffff880`01412000 fffff880`015b4000   Ntfs     Ntfs.sys     Thu Mar 10 22:39:25 2011 (4D79996D)
fffff880`01400000 fffff880`01409000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02c4e000 fffff880`02c74000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`03e1e000 fffff880`03e3b000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00d80000 fffff880`00d90000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`015ce000 fffff880`015df000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`02000000 fffff880`020a6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`03e4e000 fffff880`03f95580   PhilMAS64 PhilMAS64.sys Mon Nov 03 22:19:50 2008 (490FBF56)
fffff880`069c2000 fffff880`069ff000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c4e000 fffff880`00c62000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0407a000 fffff880`0409e000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`040d9000 fffff880`040f4000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`040f4000 fffff880`04115000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04115000 fffff880`0412f000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03a00000 fffff880`03a51000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`00def000 fffff880`00df8000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`00c00000 fffff880`00c09000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02cef000 fffff880`02cf8000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01693000 fffff880`016cd000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`021c4000 fffff880`021dc000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06815000 fffff880`069c1900   RTKVHD64 RTKVHD64.sys Fri May 22 14:04:20 2009 (4A16E924)
fffff880`0269e000 fffff880`026a9000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`053e0000 fffff880`053ec000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02c83000 fffff880`02ca0000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0168b000 fffff880`01693000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06200000 fffff880`062c0000   SRTSP64  SRTSP64.SYS  Tue Mar 29 22:46:12 2011 (4D929974)
fffff880`03bc9000 fffff880`03bdf000   SRTSPX64 SRTSPX64.SYS Tue Mar 29 22:46:18 2011 (4D92997A)
fffff880`06356000 fffff880`063eb000   srv      srv.sys      Thu Apr 28 23:13:05 2011 (4DBA2CC1)
fffff880`062ef000 fffff880`06356000   srv2     srv2.sys     Thu Apr 28 23:12:51 2011 (4DBA2CB3)
fffff880`026a9000 fffff880`026d6000   srvnet   srvnet.sys   Thu Apr 28 23:12:35 2011 (4DBA2CA3)
fffff880`0414d000 fffff880`0414e480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`010b4000 fffff880`01125000   SYMDS64  SYMDS64.SYS  Tue Dec 07 19:16:58 2010 (4CFECE7A)
fffff880`01281000 fffff880`01365000   SYMEFA64 SYMEFA64.SYS Sun Mar 13 23:20:58 2011 (4D7D899A)
fffff880`03b66000 fffff880`03b9c000   SYMEVENT64x86 SYMEVENT64x86.SYS Thu Mar 24 19:02:36 2011 (4D8BCD8C)
fffff880`03aff000 fffff880`03b66000   SYMNETS  SYMNETS.SYS  Tue Apr 19 18:33:31 2011 (4DAE0DBB)
fffff880`01802000 fffff880`01a00000   tcpip    tcpip.sys    Wed Sep 28 23:52:31 2011 (4E83EB7F)
fffff880`027e3000 fffff880`027f5000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02d32000 fffff880`02d3f000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02d14000 fffff880`02d32000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02cbb000 fffff880`02ccf000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00470000 fffff960`0047a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`02dc8000 fffff880`02dee000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04161000 fffff880`04173000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`02132000 fffff880`0214f000   usbccgp  usbccgp.sys  Thu Mar 24 23:23:03 2011 (4D8C0A97)
fffff880`020c3000 fffff880`020e2000   usbcir   usbcir.sys   Mon Jul 13 20:06:36 2009 (4A5BCC0C)
fffff880`020e2000 fffff880`020e3f00   USBD     USBD.SYS     Thu Mar 24 23:22:51 2011 (4D8C0A8B)
fffff880`03e0d000 fffff880`03e1e000   usbehci  usbehci.sys  Thu Mar 24 23:22:57 2011 (4D8C0A91)
fffff880`04173000 fffff880`041cd000   usbhub   usbhub.sys   Thu Mar 24 23:23:22 2011 (4D8C0AAA)
fffff880`04824000 fffff880`0487a000   USBPORT  USBPORT.SYS  Thu Mar 24 23:23:03 2011 (4D8C0A97)
fffff880`03e00000 fffff880`03e0d000   usbuhci  usbuhci.sys  Thu Mar 24 23:22:55 2011 (4D8C0A8F)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01273000 fffff880`01281000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0102a000 fffff880`0104f000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e6a000 fffff880`00ec6000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0116f000 fffff880`011bb000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02ca0000 fffff880`02cbb000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`00ddf000 fffff880`00def000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00edd000 fffff880`00f81000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f81000 fffff880`00f90000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02c45000 fffff880`02c4e000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00070000 fffff960`00384000   win32k   win32k.sys   unavailable (00000000)
fffff880`00fe7000 fffff880`00ff0000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0218e000 fffff880`021af000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)


Unloaded modules:
fffff880`09762000 fffff880`097d3000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`03a68000 fffff880`03ae5000   IDSvia64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`096a5000 fffff880`096c5000   ENG64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`09002000 fffff880`091fa000   EX64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`062c0000 fffff880`062e0000   ENG64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`09000000 fffff880`091f8000   EX64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`09625000 fffff880`09696000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`017f1000 fffff880`017ff000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`015e9000 fffff880`015f5000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`015f5000 fffff880`015fe000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`011eb000 fffff880`011fe000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 0000010E
Arguments 00000000`0000001f fffff8a0`159de940 00000000`00000000 00000000`0087639a
The call to LoadLibrary(ext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(exts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kdexts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
No export peb found
The call to LoadLibrary(ext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(exts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kdexts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
No export sysinfo found
The call to LoadLibrary(ext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(exts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kdexts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
No export sysinfo found
The call to LoadLibrary(ext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(exts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kdexts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
No export sysinfo found
The call to LoadLibrary(ext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(exts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kext) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kdexts) failed, Win32 error 0n2
    "The system cannot find the file specified."
Please check your debugger configuration and/or network access.
No export sysinfo found
quit:


\\
##----------------------------------------: End of Dump \021412-24991-01 :----------------------------------------##
 
It's a permission issue with the debugger itself being able to load the symbols on a removable media drive. You'd have to move them to the actual computer drive with accessible permissions. Otherwise, what are the settings you're using?

Is it correctly pointing to the debugger and your symbols? If you configure it at home and you move the USB to another computer there's a chance that it might not use the same drive letter keep in mind. Those settings are crucial.

What about running as admin?

Edit: By what I see you're settings for kd/windbg and symbol path should be in "K:\" it appears though that you're loading from "K:\symbols" though.

Please check your debugger configuration and/or network access.
The call to LoadLibrary(kext) failed, Win32 error 0n2
"The system cannot find the file specified."
Click to expand...

that's definitely a permissional error though, I get permission errors when I try to call anything from the System32 folder.
 
Last edited:
I may have this permission error fixed if I can include a shared set of permissions using the Fileshare enumeration values in a method that allows such a parameter to read the filestream. Above all that though, everything else seems to be working for an independent app. I'll be working more on the current version that I have now before making it available as an update or download :)
 
AutoBlue v2.0.1 Released!

-Speed increases
-UI functional during update checks, and the entire BSOD analysis process

Download Here: http://tech.reboot.pro/uploads/AceInfinity/AB/AutoBlue_2.0.1.zip

Or update through the program if you want

sRv8R.png
 
Last edited:

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top