IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: c01dd004, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82c75bb3, address which referenced memory
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
ADDITIONAL_DEBUG_TEXT:
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
MODULE_NAME: nt
FAULTING_MODULE: 82c0e000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc007
WRITE_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
c01dd004
CURRENT_IRQL: 0
FAULTING_IP:
nt!KiDispatchInterrupt+203
82c75bb3 894204 mov dword ptr [edx+4],eax
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
LAST_CONTROL_TRANSFER: from 82c75bb3 to 82c547eb
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
966ddb94 82c75bb3 badb0d00 c01dd000 a8d11888 nt!Kei386EoiHelper+0x29b3
966ddba8 82c99141 85de9620 00000000 966ddbec nt!KiDispatchInterrupt+0x203
966ddbb8 82c99337 00000000 00000000 00000023 nt!ExEnterCriticalRegionAndAcquireResourceExclusive+0x59
966ddc0c 82c75966 966ddc58 85c2c7d8 82d37d20 nt!KeSetPriorityThread+0xcd
966ddc20 82c7cb15 85c2c7d8 00000000 82d37d20 nt!KeSetEvent+0x2a1
966ddc58 82c7b403 00000000 85c2c7d8 ffffffff nt!KeRemoveQueueEx+0x9a0
966ddc80 82c7b0e1 85c2c7d8 85c2c898 00000039 nt!KeDelayExecutionThread+0x5cc
966ddcd8 82e3f6ed 82e44401 00000000 966ddcfc nt!KeDelayExecutionThread+0x2aa
966ddd24 82c5142a 00000000 01c2f434 01c2f43c nt!NtWaitForSingleObject+0x29e
966ddd34 778d64f4 badb0d00 01c2f42c 00000000 nt!ZwYieldExecution+0xb56
966ddd38 badb0d00 01c2f42c 00000000 00000000 0x778d64f4
966ddd3c 01c2f42c 00000000 00000000 00000000 0xbadb0d00
966ddd40 00000000 00000000 00000000 00000000 0x1c2f42c
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiDispatchInterrupt+203
82c75bb3 894204 mov dword ptr [edx+4],eax
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!KiDispatchInterrupt+203
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: ntkrpamp.exe
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------