Windows 2000 KMDF MTP Driver - KMODE_EXCEPTION_NOT_HANDLED (WdfDriverCreate) Crash

Windows2000Warrior · February 14, 2026, 7:07pm

Hi all,

I'm a beginner working on a Windows 2000 MTP (Media Transfer Protocol) driver using KMDF 1.9. I’m trying to get a basic USB MTP driver working on Windows 2000 SP4, using the official Microsoft hotfix for KMDF 1.9 support. My project is here:
https://github.com/Win2000DevCommunity/Win2000-MTP-KMDF-DRIVER

Problem:
When I load my driver, the system crashes with a KMODE_EXCEPTION_NOT_HANDLED (0x1E) bugcheck. The crash happens inside WdfDriverCreate, and the stack trace always points to this function. The exception code is 0xC0000005 (access violation) at address 0x00000000.

What I’ve tried:

INF file is undecorated for Win2K, and I removed the CatalogFile line to allow unsigned install.
WdfCoInstaller01009.dll is present, and the KMDF 1.9 hotfix is installed.
The driver compiles and loads, but always crashes at WdfDriverCreate in DriverEntry.
Debugger shows the crash at the call to WdfDriverCreate, with EIP=0x0 (null pointer dereference).

Stack trace excerpt:

mtp!WdfDriverCreate+0x26
mtp!DriverEntry+0x2b
nt!IopLoadDriver+0x672
...
ExceptionCode: c0000005 (Access violation)
ExceptionAddress: 00000000

My DriverEntry:

NTSTATUS DriverEntry(

IN PDRIVER_OBJECT DriverObject,

IN PUNICODE_STRING RegistryPath

)

{

WDF_DRIVER_CONFIG config;

NTSTATUS status;

WDF_DRIVER_CONFIG_INIT(&config, MtpEvtDeviceAdd);

status = WdfDriverCreate(DriverObject, RegistryPath, WDF_NO_OBJECT_ATTRIBUTES, &config, WDF_NO_HANDLE);

return status;

}

Questions:

Is there something special I need to do for KMDF 1.9 on Windows 2000?
Is there a known issue with WdfDriverCreate on Win2K, or something I might be missing in my setup?
Any tips for debugging this kind of crash as a beginner?

Any help or pointers would be greatly appreciated!
Thank you!

Tim_Roberts · February 15, 2026, 12:41am

You have the source code for this. WdfDriverCreate is in shared/core/fxdriverapi.cpp. You can disassemble the code at WdfDriverCreate to figure out where it went wrong. EIP=0 means that it tried to do a function call that hadn’t been set up.

Tim_Roberts · February 15, 2026, 12:48am

And, by the way, did you notice that the repository has a note about this exact issue on its readme? GitHub - Win2000DevCommunity/Win2000-MTP-KMDF-DRIVER

Windows2000Warrior · February 15, 2026, 12:30pm

Hello. thanks for your reply. As a beginner, I use AI a lot. What was mentioned that I missed?

Windows2000Warrior · February 15, 2026, 2:39pm

i think that you mean that the wdf not loaded ? : ************* Path validation summary **************
Response Time (ms) Location
OK C:\Users\Win2000\Desktop\Windows2000Debugging\Symbols

************* Preparing the environment for Debugger Extensions Gallery repositories **************
ExtensionRepository : Implicit
UseExperimentalFeatureForNugetShare : true
AllowNugetExeUpdate : true
NonInteractiveNuget : true
AllowNugetMSCredentialProviderInstall : true
AllowParallelInitializationOfLocalRepositories : true
EnableRedirectToChakraJsProvider : false

-- Configuring repositories
----> Repository : LocalInstalled, Enabled: true
----> Repository : UserExtensions, Enabled: true

Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.016 seconds

************* Waiting for Debugger Extensions Gallery to Initialize **************
.

Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.812 seconds
----> Repository : UserExtensions, Enabled: true, Packages count: 0
----> Repository : LocalInstalled, Enabled: true, Packages count: 46

Opened \\.\pipe\com_1
Waiting to reconnect...

************* Path validation summary **************
Response Time (ms) Location
OK C:\Users\Win2000\Desktop\Windows2000Debugging\Symbols

************* Preparing the environment for Debugger Extensions Gallery repositories **************
ExtensionRepository : Implicit
UseExperimentalFeatureForNugetShare : true
AllowNugetExeUpdate : true
NonInteractiveNuget : true
AllowNugetMSCredentialProviderInstall : true
AllowParallelInitializationOfLocalRepositories : true
EnableRedirectToChakraJsProvider : false

-- Configuring repositories
----> Repository : LocalInstalled, Enabled: true
----> Repository : UserExtensions, Enabled: true

Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds

************* Waiting for Debugger Extensions Gallery to Initialize **************

Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.062 seconds
----> Repository : UserExtensions, Enabled: true, Packages count: 0
----> Repository : LocalInstalled, Enabled: true, Packages count: 46

Failed to open \\.\pipe\com_1
Kernel debugger failed initialization, Win32 error 0n231
"Toutes les instances des canaux de communication sont occupÃ©es."

************* Path validation summary **************
Response Time (ms) Location
OK C:\Users\Win2000\Desktop\Windows2000Debugging\Symbols

************* Preparing the environment for Debugger Extensions Gallery repositories **************
ExtensionRepository : Implicit
UseExperimentalFeatureForNugetShare : true
AllowNugetExeUpdate : true
NonInteractiveNuget : true
AllowNugetMSCredentialProviderInstall : true
AllowParallelInitializationOfLocalRepositories : true
EnableRedirectToChakraJsProvider : false

-- Configuring repositories
----> Repository : LocalInstalled, Enabled: true
----> Repository : UserExtensions, Enabled: true

Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds

************* Waiting for Debugger Extensions Gallery to Initialize **************

Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.031 seconds
----> Repository : UserExtensions, Enabled: true, Packages count: 0
----> Repository : LocalInstalled, Enabled: true, Packages count: 46

Opened \\.\pipe\com_1
Waiting to reconnect...
Connected to Windows 2000 2195 x86 compatible target at (Sun Feb 15 15:21:09.791 2026 (UTC + 1:00)), ptr64 FALSE
Kernel Debugger connection established.

************* Path validation summary **************
Response Time (ms) Location
OK C:\Users\Win2000\Desktop\Windows2000Debugging\Symbols
Symbol search path is: C:\Users\Win2000\Desktop\Windows2000Debugging\Symbols
Executable search path is:
Windows 2000 Kernel Version 2195 (Service Pack 4) MP (2 procs) Free x86 compatible
Product: WinNt
Kernel base = 0x80400000 PsLoadedModuleList = 0x80485b00
Debug session time: Sun Feb 15 15:14:22.296 2026 (UTC + 1:00)
System Uptime: 0 days 0:03:15.921
Unable to add extension DLL: kdextx86
Break instruction exception - code 80000003 (first chance)

A fatal system error has occurred.

For analysis of this file, run !analyze -v
nt!RtlpBreakWithStatusInstruction:
804582f4 cc int 3
1: kd> !analyze -v
Connected to Windows 2000 2195 x86 compatible target at (Sun Feb 15 15:21:16.136 2026 (UTC + 1:00)), ptr64 FALSE
Loading Kernel Symbols
.............................................

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..................
..............................
Loading User Symbols

Loading unloaded module list
............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common BugCheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 00000000, The address that the exception occurred at
Arg3: 00000000, Parameter 0 of the exception
Arg4: 00000000, Parameter 1 of the exception

Debugging Details:

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

KEY_VALUES_STRING: 1

Key  : Analysis.CPU.mSec
Value: 1953

Key  : Analysis.Elapsed.mSec
Value: 19421

Key  : Analysis.IO.Other.Mb
Value: 0

Key  : Analysis.IO.Read.Mb
Value: 1

Key  : Analysis.IO.Write.Mb
Value: 0

Key  : Analysis.Init.CPU.mSec
Value: 1390

Key  : Analysis.Init.Elapsed.mSec
Value: 19316

Key  : Analysis.Memory.CommitPeak.Mb
Value: 44

Key  : Analysis.Version.DbgEng
Value: 10.0.29507.1001

Key  : Analysis.Version.Description
Value: 10.2511.5.1 amd64fre

Key  : Analysis.Version.Ext
Value: 1.2511.5.1

Key  : Bugcheck.Code.KiBugCheckData
Value: 0x1e

Key  : Bugcheck.Code.LegacyAPI
Value: 0x1e

Key  : Bugcheck.Code.TargetModel
Value: 0x1e

Key  : Failure.Bucket
Value: 0x1E_mtp!WdfDriverCreate

Key  : Failure.Exception.Record
Value: 0xfffffffff204f948

Key  : Failure.Hash
Value: {5b3c15f9-8e9e-5291-990b-f31ea23adc8d}

BUGCHECK_CODE: 1e

BUGCHECK_P1: ffffffffc0000005

BUGCHECK_P2: 0

BUGCHECK_P3: 0

BUGCHECK_P4: 0

FAULTING_THREAD: ffffffff85e7c3a0

PROCESS_NAME: System

CONTEXT: f204f5a0 -- (.cxr 0xfffffffff204f5a0)
eax=85aae000 ebx=00000000 ecx=85a3d390 edx=00000000 esi=e12b3730 edi=85a2ad90
eip=00000000 esp=f204fa10 ebp=f204fa2c iopl=0 nv up ei ng nz ac po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010292
00000000 ?? ???
Resetting default scope

EXCEPTION_RECORD: f204f948 -- (.exr 0xfffffffff204f948)
ExceptionAddress: 00000000
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000

IP_IN_FREE_BLOCK: 0

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
f204fa0c f1f90596 00000000 85a3d390 85aae000 0x0
f204fa2c f1f904fb 85a3d390 85aae000 00000000 mtp!WdfDriverCreate+0x26 [c:\users\win2000\downloads\winddk-1ed3987db6e72d1fb9c6298fddf0c080b8f591e1\7600.16385.1\inc\wdf\kmdf\1.9\wdfdriver.h @ 219]
f204fa60 804b1d5e 85a3d390 85aae000 00000000 mtp!DriverEntry+0x2b [c:\users\win2000\downloads\winddk-1ed3987db6e72d1fb9c6298fddf0c080b8f591e1\3790.1830\src\mtp_kmdf_w2k\driver.c @ 33]
f204fb28 80426f5f 8000007c 85aae000 e1bec8ac nt!IopLoadDriver+0x672
f204fb58 804f84da 85abda88 8000007c 00000003 nt!IopCallDriverAddDeviceQueryRoutine+0x356
f204fba8 804f8797 f204fc34 00000010 f204fc04 nt!RtlpCallQueryRegistryRoutine+0x343
f204fc0c 804bc2a8 00000000 00000082 00000001 nt!RtlQueryRegistryValues+0x1ed
f204fcd0 8042667b 80000214 f204fd01 f204fd2c nt!IopCallDriverAddDevice+0x38f
f204fce8 804baab4 85a09208 f204fd28 85a09470 nt!IopProcessNewChildren+0x3d
f204fd0c 804ba54b 85a09470 f204fd28 00000008 nt!IopEnumerateDevice+0x20a
f204fd34 80426508 85a09458 00000001 00000000 nt!IopBusCheck+0x53
f204fd78 80417b47 00000000 00000000 00000000 nt!IopDeviceActionWorker+0x4c4
f204fda8 80457838 00000000 00000000 00000000 nt!ExpWorkerThread+0xaf
f204fddc 8046c8e6 80417a98 00000001 00000000 nt!PspSystemThreadStartup+0x54
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

FAULTING_SOURCE_LINE: c:\users\win2000\downloads\winddk-1ed3987db6e72d1fb9c6298fddf0c080b8f591e1\7600.16385.1\inc\wdf\kmdf\1.9\wdfdriver.h

FAULTING_SOURCE_FILE: c:\users\win2000\downloads\winddk-1ed3987db6e72d1fb9c6298fddf0c080b8f591e1\7600.16385.1\inc\wdf\kmdf\1.9\wdfdriver.h

FAULTING_SOURCE_LINE_NUMBER: 219

FAULTING_SOURCE_CODE:
No source found for 'c:\users\win2000\downloads\winddk-1ed3987db6e72d1fb9c6298fddf0c080b8f591e1\7600.16385.1\inc\wdf\kmdf\1.9\wdfdriver.h'

SYMBOL_NAME: mtp!WdfDriverCreate+26

MODULE_NAME: mtp

IMAGE_NAME: mtp.sys

STACK_COMMAND: .cxr 0xfffffffff204f5a0 ; kb

BUCKET_ID_FUNC_OFFSET: 26

FAILURE_BUCKET_ID: 0x1E_mtp!WdfDriverCreate

OSPLATFORM_TYPE: x86

OSNAME: Windows 2000

FAILURE_ID_HASH: {5b3c15f9-8e9e-5291-990b-f31ea23adc8d}

Followup: MachineOwner

1: kd> lm
start end module name
80062000 80076f80 hal (deferred)
80400000 805a2840 nt (pdb symbols) c:\users\win2000\desktop\windows2000debugging\symbols\exe\ntkrnlmp.pdb
a0000000 a018ee40 win32k (deferred)
bb33d000 bb34ca20 ipsec (deferred)
bb37d000 bb38ef80 wdmaud (deferred)
bb4cf000 bb4da8c0 sysaudio (deferred)
bb547000 bb584660 srv (deferred)
bb69d000 bb6bc140 afd (deferred)
bb6f1000 bb6f3080 vmmemctl (deferred)
bb7a5000 bb7ad240 Fips (deferred)
bb7dd000 bb7dfde0 ws2ifsl (deferred)
bb7fd000 bb998300 vmx_fb (deferred)
bb9c1000 bba2aa40 mrxsmb (deferred)
bba3d000 bba69ac0 rdbss (deferred)
bba6a000 bba8c700 vmhgfs (deferred)
bba8d000 bbab7d00 netbt (deferred)
bbab8000 bbb061a0 tcpip (deferred)
bfd4f000 bfd793a0 update (deferred)
bfd7a000 bfd90ba0 ndiswan (deferred)
bfd91000 bfdacb40 KS (deferred)
bfdad000 bfdd11e0 portcls (deferred)
bfdd2000 bfde9580 vmx_svga (deferred)
bfe0e000 bfe11580 vga (deferred)
bfe7e000 bfe93be0 Mup (deferred)
bfe94000 bfebdaa0 NDIS (deferred)
bfebe000 bff3b480 Ntfs (deferred)
bff3c000 bff4d7c0 KSecDD (deferred)
bff4e000 bff6f5a0 fltmgr (deferred)
bff70000 bff82180 SCSIPORT (deferred)
bff83000 bff98180 atapi (deferred)
bff99000 bffba9c0 dmio (deferred)
bffbb000 bffd75a0 ftdisk (deferred)
bffd8000 bffffc20 ACPI (deferred)
f1c00000 f1c0e6a0 pci (deferred)
f1c10000 f1c1b680 isapnp (deferred)
f1c20000 f1c2fb80 vmci (deferred)
f1c30000 f1c3d580 vsock (deferred)
f1c40000 f1c49740 buslogic (deferred)
f1c50000 f1c58700 CLASSPNP (deferred)
f1c70000 f1c7b680 i8042prt (deferred)
f1c80000 f1c8c4c0 VIDEOPRT (deferred)
f1c90000 f1c99e20 es1371mp (deferred)
f1ca0000 f1caca80 rasl2tp (deferred)
f1cb0000 f1cbbc40 raspptp (deferred)
f1cc0000 f1cc9be0 usbhub (deferred)
f1cd0000 f1cd9ce0 NDProxy (deferred)
f1ce0000 f1ce8fa0 Npfs (deferred)
f1cf0000 f1cf8680 msgpc (deferred)
f1d00000 f1d081a0 netbios (deferred)
f1d80000 f1d8f600 Cdfs (deferred)
f1e80000 f1e85520 PCIIDEX (deferred)
f1e88000 f1e8f4c0 MountMgr (deferred)
f1e90000 f1e97720 disk (deferred)
f1e98000 f1e9d100 agp440 (deferred)
f1eb0000 f1eb5ec0 kbdclass (deferred)
f1ec0000 f1ec5400 mouclass (deferred)
f1ed0000 f1ed6c40 cdrom (deferred)
f1ee8000 f1eeff40 uhcd (deferred)
f1f00000 f1f04fc0 USBD (deferred)
f1f10000 f1f15b00 vmxnet (deferred)
f1f40000 f1f44400 ptilink (deferred)
f1f50000 f1f540e0 raspti (deferred)
f1f60000 f1f66a20 EFS (deferred)
f1f70000 f1f75fa0 HIDCLASS (deferred)
f1f88000 f1f8d900 HIDPARSE (deferred)
f1f90000 f1f94400 mtp (private pdb symbols) c:\users\win2000\desktop\windows2000debugging\symbols\sys\mtp.pdb
f1fc8000 f1fcd240 Msfs (deferred)
f1fe8000 f1fefd00 wanarp (deferred)
f2010000 f2012a20 BOOTVID (deferred)
f2014000 f2016320 compbatt (deferred)
f2018000 f201ad00 PartMgr (deferred)
f20a4000 f20a65a0 CmBatt (deferred)
f20ac000 f20ae2e0 ndistapi (deferred)
f20b8000 f20bb6c0 dump_diskdump (deferred)
f20bc000 f20bfe60 TDI (deferred)
f20c8000 f20ca540 gameenum (deferred)
f20e4000 f20e7540 hidusb (deferred)
f20ec000 f20eec60 mouhid (deferred)
f2100000 f2101b00 BATTC (deferred)
f2102000 f2103100 intelide (deferred)
f2104000 f2105d20 Diskperf (deferred)
f2106000 f2107b80 dmload (deferred)
f2108000 f2109d00 vmscsi (deferred)
f2110000 f2111380 vmmouse (deferred)
f2118000 f2119400 vmusbmouse (deferred)
f211c000 f211dca0 Fs_Rec (deferred)
f2124000 f2125e40 rasacd (deferred)
f2142000 f2143d00 dump_vmscsi (deferred)
f21c8000 f21c8f80 WMILIB (deferred)
f2338000 f2338a40 audstub (deferred)
f2341000 f2341d80 swenum (deferred)
f2352000 f23529e0 Null (deferred)
f2354000 f2354ee0 Beep (deferred)
f2357000 f2357f80 mnmdd (deferred)

Unloaded modules:
bb2b8000 bb2dd000 kmixer.sys
bb4af000 bb4bc000 DMusic.sys
bb4bf000 bb4cd000 swmidi.sys
bb7c5000 bb7d5000 Serial.SYS
f1fd8000 f1fdf000 Parport.SYS
bb984000 bb999000 VGA.dll
bb7fd000 bb999000 vmx_fb.dll
f1d10000 f1d19000 redbook.sys
f1fb8000 f1fbd000 Cdaudio.SYS
f20f8000 f20fb000 Sfloppy.SYS
f1fa8000 f1fad000 Flpydisk.SYS
f1f98000 f1f9f000 Fdc.SYS
1: kd> uf WdfDriverCreate
mtp!WdfDriverCreate [c:\users\win2000\downloads\winddk-1ed3987db6e72d1fb9c6298fddf0c080b8f591e1\7600.16385.1\inc\wdf\kmdf\1.9\wdfdriver.h @ 217]:
217 f1f90570 8bff mov edi,edi
217 f1f90572 55 push ebp
217 f1f90573 8bec mov ebp,esp
218 f1f90575 8b4518 mov eax,dword ptr [ebp+18h]
218 f1f90578 50 push eax
218 f1f90579 8b4d14 mov ecx,dword ptr [ebp+14h]
218 f1f9057c 51 push ecx
218 f1f9057d 8b5510 mov edx,dword ptr [ebp+10h]
218 f1f90580 52 push edx
218 f1f90581 8b450c mov eax,dword ptr [ebp+0Ch]
218 f1f90584 50 push eax
218 f1f90585 8b4d08 mov ecx,dword ptr [ebp+8]
218 f1f90588 51 push ecx
218 f1f90589 8b15543df9f1 mov edx,dword ptr [mtp!WdfDriverGlobals (f1f93d54)]
218 f1f9058f 52 push edx
218 f1f90590 ff15e038f9f1 call dword ptr [mtp!WdfFunctions+0x1d0 (f1f938e0)]
219 f1f90596 5d pop ebp
219 f1f90597 c21400 ret 14h
1: kd> r WdfDriverCreate
^ Bad register error in 'r WdfDriverCreate'
1: kd> kb WdfDriverCreate
Requested number of stack frames (0xfffffffff1f90570) is too large! The maximum number is 0xffff.
^ Range error in 'kb WdfDriverCreate'
1: kd> r eip
eip=804582f4
1: kd> dd WdfDriverCreate
f1f90570 8b55ff8b 18458bec 144d8b50 10558b51
f1f90580 0c458b52 084d8b50 54158b51 52f1f93d
f1f90590 38e015ff c25df1f9 cccc0014 cccccccc
f1f905a0 3a50544d 66645720 69766544 72436563
f1f905b0 65746165 69616620 2064656c 30257830
f1f905c0 000a7838 3a50544d 70744d20 5f627355
f1f905d0 61657243 66206574 656c6961 78302064
f1f905e0 78383025 0000000a 3a50544d 66645720
1: kd> u 804582f4
ReadVirtual: 804582f4 not properly sign extended
804582f4 cc int 3
804582f5 c20400 ret 4
804582f8 55 push ebp
804582f9 8bec mov ebp,esp
804582fb 6aff push 0FFFFFFFFh
804582fd 68f8674080 push offset nt!GUID_DEVICE_BATTERY+0x608 (804067f8)
80458302 68202a4680 push offset nt!_except_handler3 (80462a20)
80458307 64a100000000 mov eax,dword ptr fs:[00000000h]
1: kd> sxe ld mtp.sys
1: kd> bp mtp!DriverEntry
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\atlmfc.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\concurrency.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\cpp_rest.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Kernel.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\ObjectiveC.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\stl.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Usb4Kd.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Data.Json.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Geolocation.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Sensors.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Media.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\windows.natvis'
NatVis script unloaded from 'C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2601.12001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\winrt.natvis'

************* Path validation summary **************
Response Time (ms) Location
OK C:\Users\Win2000\Desktop\Windows2000Debugging\Symbols

************* Preparing the environment for Debugger Extensions Gallery repositories **************
ExtensionRepository : Implicit
UseExperimentalFeatureForNugetShare : true
AllowNugetExeUpdate : true
NonInteractiveNuget : true
AllowNugetMSCredentialProviderInstall : true
AllowParallelInitializationOfLocalRepositories : true
EnableRedirectToChakraJsProvider : false

-- Configuring repositories
----> Repository : LocalInstalled, Enabled: true
----> Repository : UserExtensions, Enabled: true

Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds

************* Waiting for Debugger Extensions Gallery to Initialize **************

Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.016 seconds
----> Repository : UserExtensions, Enabled: true, Packages count: 0
----> Repository : LocalInstalled, Enabled: true, Packages count: 46

Opened \\.\pipe\com_1
Waiting to reconnect...
Connected to Windows 2000 2195 x86 compatible target at (Sun Feb 15 15:25:43.040 2026 (UTC + 1:00)), ptr64 FALSE
Kernel Debugger connection established.

************* Path validation summary **************
Response Time (ms) Location
OK C:\Users\Win2000\Desktop\Windows2000Debugging\Symbols
Symbol search path is: C:\Users\Win2000\Desktop\Windows2000Debugging\Symbols
Executable search path is:
Windows 2000 Kernel Version 2195 MP (1 procs) Free x86 compatible
Kernel base = 0x80400000 PsLoadedModuleList = 0x80485b00
System Uptime: not available
Unable to add extension DLL: kdextx86
nt!DebugService+0xf:
8045ea23 cc int 3
kd> g
nt!DebugService+0xf:
8045ea23 cc int 3
0: kd> g
Breakpoint 0 hit
mtp!DriverEntry:
f1f904d0 8bff mov edi,edi
0: kd> dd mtp!WdfFunctions+0x1d0 L1
f1f938e0 00000000
0: kd> dd f1f938e0 L1
ReadVirtual: f1f938e0 not properly sign extended
f1f938e0 00000000
0: kd> dd f1f938e0
f1f938e0 00000000 00000000 00000000 00000000
f1f938f0 00000000 00000000 00000000 00000000
f1f93900 00000000 00000000 00000000 00000000
f1f93910 00000000 00000000 00000000 00000000
f1f93920 00000000 00000000 00000000 00000000
f1f93930 00000000 00000000 00000000 00000000
f1f93940 00000000 00000000 00000000 00000000
f1f93950 00000000 00000000 00000000 00000000
0: kd> dt mtp!WdfDriverGlobals
(null)
0: kd> u mtp!WdfDriverCreate
mtp!WdfDriverCreate [c:\users\win2000\downloads\winddk-1ed3987db6e72d1fb9c6298fddf0c080b8f591e1\7600.16385.1\inc\wdf\kmdf\1.9\wdfdriver.h @ 217]:
f1f90570 8bff mov edi,edi
f1f90572 55 push ebp
f1f90573 8bec mov ebp,esp
f1f90575 8b4518 mov eax,dword ptr [ebp+18h]
f1f90578 50 push eax
f1f90579 8b4d14 mov ecx,dword ptr [ebp+14h]
f1f9057c 51 push ecx
f1f9057d 8b5510 mov edx,dword ptr [ebp+10h]
windbg> .open -a 0xfffffffff1f90570
0: kd> bp f1f90590
0: kd> g
Break instruction exception - code 80000003 (first chance)
mtp!WdfDriverCreate+0x20:
f1f90590 ff15e038f9f1 call dword ptr [mtp!WdfFunctions+0x1d0 (f1f938e0)]
0: kd> dd f1f938e0 L1
ReadVirtual: f1f938e0 not properly sign extended
f1f938e0 00000000

Scott_Noone_OSR · February 15, 2026, 3:26pm

KMDF 1.9 does not support Windows 2000….Windows 2000 is very old you know.

Windows2000Warrior · February 15, 2026, 7:32pm

there are many wrong documentation about 2000 in MS site , because i see many api’s are mentions that avlaible in XP as minimum but in reality when check in 2000 you will found them

not sure why i can’t past links , but search in net for `Kernel-Mode Driver Framework version 1.9 update for Windows 2000, for Windows XP, for Windows Server 2003, for Windows Vista, and for Windows Server 2008` you will find that in MS site , also the same problem happen with XP

Tim_Roberts · February 16, 2026, 4:54am

Hello. thanks for your reply. As a beginner, I use AI a lot. What was mentioned that I missed?

AI is one thing, but it does not excuse you from your responsibility to read and understand the documentation. AI without understanding results in disaster.

The page clearly says that a KMODE_EXCEPTION_NOT_HANDLED is known to occur with this code. The most common cause is that wdf01000.sys is not present. Did you copy it into place? Did you read the part where it tells you how to rundll32 on WdfCoInstaller01009.dll to get it loaded? Are you just stabbing in the dark here? That’s not good engineering.

Windows2000Warrior · February 18, 2026, 10:21pm

I did make sure to wdf01000.sys with installing the official kmdf 1.9 for 2000/xp and to run WdfCoInstaller01009.dll as described, but unfortunately I am still facing the same issue.

When I asked, I thought you might have been referring to something else mentioned in the .txt files, so I wanted to be sure I did not miss anything important. I am trying to check all possible causes, not to avoid responsibility, but because I am still at the early stages of learning driver development.

I truly appreciate your guidance and your patience. If there is something specific you think I should verify or re-check, I would be grateful for the direction.

Thank you again.

Tim_Roberts · February 19, 2026, 2:26am

So, have you double-checked to make sure that wdf01000.sys is present in C:\Windows\System32\Drivers?

Windows2000Warrior · February 19, 2026, 3:19pm

yes , in both 2000/XP , somehow make the wdf01000 not loaded , maybe there are a issue in compiling or .inf file