Hi,
I have a windows 2003 x64 OS with 16GB memory, i set it to kernel memory dump, and the page file set to system managed size which is currently allocated 16378MB, when it crashed, i got the memory dump file with 9GB.
when i tried to open the dump file with WinDbg, i got following error, seems the memory dump file is corrupted.
Anyone knows about if it is corrupted or WinDbg load it not correctly?
I tried to load it from windows 2008 R2 with WinDbg version 6.2.9200.16384
Thanks
Tsang
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: c:\symstore
Executable search path is:
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
Unable to read PsLoadedModuleList
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
KdDebuggerData.KernBase < SystemRangeStart
Windows Server 2003 Kernel Version 3790 MP (8 procs) Free x64
Product: Server, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0x0000000000000000 PsLoadedModuleList = 0xfffff800011d5100
Debug session time: Fri Sep 13 00:27:21.938 2013 (UTC - 4:00)
System Uptime: 2 days 12:36:28.796
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
Unable to read PsLoadedModuleList
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
KdDebuggerData.KernBase < SystemRangeStart
Loading Kernel Symbols
Unable to read PsLoadedModuleList
GetContextState failed, 0x80070026
CS descriptor lookup failed
GetContextState failed, 0x80070026
GetContextState failed, 0x80070026
GetContextState failed, 0x80070026
GetContextState failed, 0x80070026
Unable to get program counter
GetContextState failed, 0x80070026
Unable to get current machine context, Win32 error 0n38
GetContextState failed, 0x80070026
GetContextState failed, 0x80070026
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {7, 121a, 1020004, fffffade6d98fca0}
***** Debugger could not find nt in module list, module list might be corrupt, error 0x80070057.
GetContextState failed, 0x80070026
Unable to get current machine context, Win32 error 0n38
unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get MmPageSize (0x0) - probably bad symbols
ReadControl failed - kernel symbols must be loaded first
ReadControl failed - kernel symbols must be loaded first
GetContextState failed, 0x80070026
GetContextState failed, 0x80070026