[Ask] Cara Baca dump file pakai app debugger

Discussion in 'Programming & Reverse Engineering' started by mviilways, Sep 24, 2010.

  1. mviilways

    mviilways New Member

    Messages:
    91
    Likes Received:
    29
    Trophy Points:
    0
    Para master djawir ,
    mo nanya cara baca file minidump hasil blue screen gimana ya ?
    kalo soal errornya doank sih bisa di cari di gugel juga, tp disini saya pengen tau + bisa baca minidump secara detail,,
    saya coba pakai app windbg dr mikocok, tp hasilnya gini terus :

    Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini092210-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: C:\symbols\
    Executable search path is:
    Unable to load image ntoskrnl.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    Windows XP Kernel Version 2600 (Service Pack 3) Monster Pack (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Machine Name:
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
    Debug session time: Wed Sep 22 23:33:43.546 2010 (GMT+7)
    System Uptime: 0 days 2:59:30.229
    Unable to load image ntoskrnl.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    Loading Kernel Symbols
    ...............................................................
    .......................................................
    Loading User Symbols
    Loading unloaded module list
    ...............
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 10000050, {f02165f6, 0, 805461d4, 2}

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************
    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    *************************************************************************

    padahal symbol sudah saya download yang full package buat XP SP3 (209mb) , tp tetep gagal .. variable nya juga sudah saya masukin sesuai folder tempat symbol, trus saya coba pakai variable buat symbolnya supaya langsung download otomatis di si mikoconya sendiri ,, tapi tetep gagal maning :frusty::frusty: ..

    buat yang bisa ... Pleeeaaseeeee :cry::cry:
     

Share This Page