有没有老哥能帮忙看一下蓝屏的DMP文件

ᴀɪᴍʙᴏᴛ-avatar

ᴀɪᴍʙᴏᴛ

2021-10-25T08:49:04+00:00

No .natvis files found at C:\Windows\SYSTEM32\Visualizers.
No .natvis files found at C:\Users\Tiany\AppData\Local\Dbg\Visualizers.

Microsoft (R) Windows Debugger Version 10.0.18362.1 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\minidump\102621-11890-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: srv*
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_MMPTE_TRANSITION ***
*** ***
*************************************************************************
Windows 10 Kernel Version 18362 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0xfffff800`42600000 PsLoadedModuleList = 0xfffff800`42a48150
Debug session time: Tue Oct 26 16:19:13.899 2021 (UTC + 8:00)
System Uptime: 0 days 0:46:32.669
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_MMPTE_TRANSITION ***
*** ***
*************************************************************************
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
......

************* Symbol Loading Error Summary **************
Module name Error
ntoskrnl The system cannot find the file specified

You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
You should also verify that your symbol search path (.sympath) is correct.
For analysis of this file, run !analyze -v

总是蓝屏 没看懂是因为啥
Jw-avatar

Jw

水平不够只能简单帮你看看了

还没开始分析就报错了,推测原因是symbol文件路径有问题。可以换微软商店uwp版本的windbg preview(船新版本更傻瓜一点)或者手动把symbol search path换成下面这个试试
[img]https://img.nga.178.com/attachments/mon_202110/26/9aQ8k1t-2lthZbT3cSlp-ht.jpg[/img]

windbg官方文档参见[url=https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/]Windows Debugging Tools[/url]
Jackman757-avatar

Jackman757

你好歹把dmp文件传上来啊
ᴀɪᴍʙᴏᴛ-avatar

ᴀɪᴍʙᴏᴛ

人麻了 从微软官网下的win10 安装的时候 把所有盘格式化了 然后他娘的 无法安装所需文件! 系统有问题。装不了 麻了麻了 只能明天去网吧重做了
ᴀɪᴍʙᴏᴛ-avatar

ᴀɪᴍʙᴏᴛ

[quote][pid=561538671,29153373,1]Reply[/pid] Post by [uid=27294112]刘不安[/uid] (2021-10-26 23:31):

水平不够只能简单帮你看看了

还没开始分析就报错了,推测原因是symbol文件路径有问题。可以换微软商店uwp版本的windbg preview(船新版本更傻瓜一点)或者手动把symbol search path换成下面这个试试
[img]https://img.nga.178.com/attachments/mon_202110/26/9aQ8k1t-2lthZbT3cSlp-ht.jpg[/img]

windbg官方文档参见[url=https://docs.microsoft.com/en-us/windows-hardware/drivers/debu[/quote]多谢了 实在折腾不了了 把所有盘格式化重装了...