Hello!
Looks like a driver problem to me.
Code:
1: kd> .bugcheck
Bugcheck code [B][COLOR=Red]1000008E[/COLOR][/B]
Arguments [B][COLOR=Red]c0000005[/COLOR][/B] 8d366b3a a9ab3754 00000000
The bugcheck itself (1000008E) is very curious, and has plenty of possibilities. However, to get to the very crux of this bugcheck, parameter 1 (C0000005, STATUS_ACCESS_VIOLATION), a sub-bugcheck if you will, contains most of the information, and so needs to be analysed.
"STATUS_ACCESS_VIOLATION indicates that a memory access violation occurred."
We must make sure to understand the differences between probable cause, and probably causes. Probable causes includes everything likely, including hardware if we can't find a pattern. Probable cause is harder to find, and is what we actually believe the problem to be.
To be good at debugging BSoDs, ideally one must understand the mechanics of a computer, and the Assembly programming language. STATUS_ACCESS_VIOLATION screams "driver" at me. Oh, there are other causes and meanings, but I am going to take my Probably Cause (singular) as "driver".
We use the the d* commands (Display Memory) (d, da, db, dc, dd, dD, df, dp, dq, du, dw, dW, dyb, dyd) to do just that, display memory.
In this case, I am going to use
db, just for ease (although not necessarily accuracy).
db dumps "Byte values and ASCII characters."
For this one, I am going to dump the memory at the reference which caused the exception.
So this time, I am going to take the second parameter:
Code:
0: kd> .bugcheck
Bugcheck code 1000008E
Arguments c0000005 [B][COLOR=Red]8cd50b3a[/COLOR][/B] 81179754 00000000
and dump the memory at that location:
Code:
0: kd> db [B][COLOR=Red]8cd50b3a[/COLOR][/B]
8cd50b3a 0f b6 11 33 d0 81 e2 ff-00 00 00 c1 e8 08 33 04 ...3..........3.
8cd50b4a 95 08 2e d6 8c 41 ff 4c-24 04 75 e4 f7 d0 c2 04 .....A.L$.u.....
8cd50b5a 00 6a 00 ff 74 24 08 ff-15 58 30 d5 8c 6a 00 6a .j..t$...X0..j.j
8cd50b6a ff ff 15 74 30 d5 8c c2-14 00 56 33 f6 56 ff 74 ...t0.....V3.V.t
8cd50b7a 24 0c ff 15 58 30 d5 8c-56 56 56 56 ff 15 60 30 $...X0..VVVV..`0
8cd50b8a d5 8c 50 ff 15 70 30 d5-8c 5e c2 14 00 6a 00 ff ..P..p0..^...j..
8cd50b9a 74 24 08 ff 15 58 30 d5-8c 6a 00 ff 15 6c 30 d5 t$...X0..j...l0.
8cd50baa 8c c2 14 00 6a 00 ff 74-24 08 ff 15 58 30 d5 8c ....j..t$...X0..
As a way to speed things up:
Code:
If you omit [I]Range[/I], the command will display memory starting at the ending location of the last display command. If [I]Range[/I] is omitted and no previous display command has been used, the display begins at the current instruction pointer.
Be very wary of this! It is useful, but remember that if you start fiddling with the dump file, you can actually change where this command is going to start, and break your pattern. Read and fully understand the above!
Right, memory dumped, let's do some comparisons, between 0x1000008E dumps:
Code:
0: kd> db
8cd50b3a 0f b6 11 33 d0 81 e2 ff-00 00 00 c1 e8 08 33 04 ...3..........3.
8cd50b4a 95 08 2e d6 8c 41 ff 4c-24 04 75 e4 f7 d0 c2 04 .....A.L$.u.....
8cd50b5a 00 6a 00 ff 74 24 08 ff-15 58 30 d5 8c 6a 00 6a .j..t$...X0..j.j
8cd50b6a ff ff 15 74 30 d5 8c c2-14 00 56 33 f6 56 ff 74 ...t0.....V3.V.t
8cd50b7a 24 0c ff 15 58 30 d5 8c-56 56 56 56 ff 15 60 30 $...X0..VVVV..`0
8cd50b8a d5 8c 50 ff 15 70 30 d5-8c 5e c2 14 00 6a 00 ff ..P..p0..^...j..
8cd50b9a 74 24 08 ff 15 58 30 d5-8c 6a 00 ff 15 6c 30 d5 t$...X0..j...l0.
8cd50baa 8c c2 14 00 6a 00 ff 74-24 08 ff 15 58 30 d5 8c ....j..t$...X0..
Code:
1: kd> db
8ca60b3a 0f b6 11 33 d0 81 e2 ff-00 00 00 c1 e8 08 33 04 ...3..........3.
8ca60b4a 95 08 2e a7 8c 41 ff 4c-24 04 75 e4 f7 d0 c2 04 .....A.L$.u.....
8ca60b5a 00 6a 00 ff 74 24 08 ff-15 58 30 a6 8c 6a 00 6a .j..t$...X0..j.j
8ca60b6a ff ff 15 74 30 a6 8c c2-14 00 56 33 f6 56 ff 74 ...t0.....V3.V.t
8ca60b7a 24 0c ff 15 58 30 a6 8c-56 56 56 56 ff 15 60 30 $...X0..VVVV..`0
8ca60b8a a6 8c 50 ff 15 70 30 a6-8c 5e c2 14 00 6a 00 ff ..P..p0..^...j..
8ca60b9a 74 24 08 ff 15 58 30 a6-8c 6a 00 ff 15 6c 30 a6 t$...X0..j...l0.
8ca60baa 8c c2 14 00 6a 00 ff 74-24 08 ff 15 58 30 a6 8c ....j..t$...X0..
Code:
0: kd> db
8d366b3a 0f b6 11 33 d0 81 e2 ff-00 00 00 c1 e8 08 33 04 ...3..........3.
8d366b4a 95 08 8e 37 8d 41 ff 4c-24 04 75 e4 f7 d0 c2 04 ...7.A.L$.u.....
8d366b5a 00 6a 00 ff 74 24 08 ff-15 58 90 36 8d 6a 00 6a .j..t$...X.6.j.j
8d366b6a ff ff 15 74 90 36 8d c2-14 00 56 33 f6 56 ff 74 ...t.6....V3.V.t
8d366b7a 24 0c ff 15 58 90 36 8d-56 56 56 56 ff 15 60 90 $...X.6.VVVV..`.
8d366b8a 36 8d 50 ff 15 70 90 36-8d 5e c2 14 00 6a 00 ff 6.P..p.6.^...j..
8d366b9a 74 24 08 ff 15 58 90 36-8d 6a 00 ff 15 6c 90 36 t$...X.6.j...l.6
8d366baa 8d c2 14 00 6a 00 ff 74-24 08 ff 15 58 90 36 8d ....j..t$...X.6.
Code:
8d366b3a 0f b6 11 33 d0 81 e2 ff-00 00 00 c1 e8 08 33 04 ...3..........3.
8d366b4a 95 08 8e 37 8d 41 ff 4c-24 04 75 e4 f7 d0 c2 04 ...7.A.L$.u.....
8d366b5a 00 6a 00 ff 74 24 08 ff-15 58 90 36 8d 6a 00 6a .j..t$...X.6.j.j
8d366b6a ff ff 15 74 90 36 8d c2-14 00 56 33 f6 56 ff 74 ...t.6....V3.V.t
8d366b7a 24 0c ff 15 58 90 36 8d-56 56 56 56 ff 15 60 90 $...X.6.VVVV..`.
8d366b8a 36 8d 50 ff 15 70 90 36-8d 5e c2 14 00 6a 00 ff 6.P..p.6.^...j..
8d366b9a 74 24 08 ff 15 58 90 36-8d 6a 00 ff 15 6c 90 36 t$...X.6.j...l.6
8d366baa 8d c2 14 00 6a 00 ff 74-24 08 ff 15 58 90 36 8d ....j..t$...X.6.
1000007E:
Code:
1: kd> db 81e1b890
81e1b890 0f b7 0c 51 66 83 f9 61-72 41 66 83 f9 7a 77 08 ...Qf..arAf..zw.
81e1b8a0 0f b7 c9 83 e9 20 eb 36-8b 4e 04 0f b7 14 51 0f ..... .6.N....Q.
81e1b8b0 b7 ca 8b f9 c1 ef 08 0f-b7 3c 78 8b d9 c1 eb 04 .........<x.....
81e1b8c0 83 e3 0f 03 fb 0f b7 3c-78 83 e1 0f 03 f9 66 8b .......<x.....f.
81e1b8d0 0c 78 66 03 ca 8b 7d 08-8b 55 e4 0f b7 c9 8b 5f .xf...}..U....._
81e1b8e0 04 66 89 0c 53 42 89 55-e4 8b 4d e0 eb 9b c7 45 .f..SB.U..M....E
81e1b8f0 fc fe ff ff ff c7 45 dc-00 00 00 00 e8 20 00 00 ......E...... ..
81e1b900 00 66 8b 06 66 89 07 33-c0 e8 bf ac e4 ff c2 0c .f..f..3........
Code:
81e18890 0f b7 0c 51 66 83 f9 61-72 41 66 83 f9 7a 77 08 ...Qf..arAf..zw.
81e188a0 0f b7 c9 83 e9 20 eb 36-8b 4e 04 0f b7 14 51 0f ..... .6.N....Q.
81e188b0 b7 ca 8b f9 c1 ef 08 0f-b7 3c 78 8b d9 c1 eb 04 .........<x.....
81e188c0 83 e3 0f 03 fb 0f b7 3c-78 83 e1 0f 03 f9 66 8b .......<x.....f.
81e188d0 0c 78 66 03 ca 8b 7d 08-8b 55 e4 0f b7 c9 8b 5f .xf...}..U....._
81e188e0 04 66 89 0c 53 42 89 55-e4 8b 4d e0 eb 9b c7 45 .f..SB.U..M....E
81e188f0 fc fe ff ff ff c7 45 dc-00 00 00 00 e8 20 00 00 ......E...... ..
81e18900 00 66 8b 06 66 89 07 33-c0 e8 bf ac e4 ff c2 0c .f..f..3........
Code:
0: kd> db
81e51890 0f b7 0c 51 66 83 f9 61-72 41 66 83 f9 7a 77 08 ...Qf..arAf..zw.
81e518a0 0f b7 c9 83 e9 20 eb 36-8b 4e 04 0f b7 14 51 0f ..... .6.N....Q.
81e518b0 b7 ca 8b f9 c1 ef 08 0f-b7 3c 78 8b d9 c1 eb 04 .........<x.....
81e518c0 83 e3 0f 03 fb 0f b7 3c-78 83 e1 0f 03 f9 66 8b .......<x.....f.
81e518d0 0c 78 66 03 ca 8b 7d 08-8b 55 e4 0f b7 c9 8b 5f .xf...}..U....._
81e518e0 04 66 89 0c 53 42 89 55-e4 8b 4d e0 eb 9b c7 45 .f..SB.U..M....E
81e518f0 fc fe ff ff ff c7 45 dc-00 00 00 00 e8 20 00 00 ......E...... ..
81e51900 00 66 8b 06 66 89 07 33-c0 e8 bf ac e4 ff c2 0c .f..f..3........
Code:
1: kd> db
81e0b890 0f b7 0c 51 66 83 f9 61-72 41 66 83 f9 7a 77 08 ...Qf..arAf..zw.
81e0b8a0 0f b7 c9 83 e9 20 eb 36-8b 4e 04 0f b7 14 51 0f ..... .6.N....Q.
81e0b8b0 b7 ca 8b f9 c1 ef 08 0f-b7 3c 78 8b d9 c1 eb 04 .........<x.....
81e0b8c0 83 e3 0f 03 fb 0f b7 3c-78 83 e1 0f 03 f9 66 8b .......<x.....f.
81e0b8d0 0c 78 66 03 ca 8b 7d 08-8b 55 e4 0f b7 c9 8b 5f .xf...}..U....._
81e0b8e0 04 66 89 0c 53 42 89 55-e4 8b 4d e0 eb 9b c7 45 .f..SB.U..M....E
81e0b8f0 fc fe ff ff ff c7 45 dc-00 00 00 00 e8 20 00 00 ......E...... ..
81e0b900 00 66 8b 06 66 89 07 33-c0 e8 bf ac e4 ff c2 0c .f..f..3........
Code:
1: kd> db
81e4c890 0f b7 0c 51 66 83 f9 61-72 41 66 83 f9 7a 77 08 ...Qf..arAf..zw.
81e4c8a0 0f b7 c9 83 e9 20 eb 36-8b 4e 04 0f b7 14 51 0f ..... .6.N....Q.
81e4c8b0 b7 ca 8b f9 c1 ef 08 0f-b7 3c 78 8b d9 c1 eb 04 .........<x.....
81e4c8c0 83 e3 0f 03 fb 0f b7 3c-78 83 e1 0f 03 f9 66 8b .......<x.....f.
81e4c8d0 0c 78 66 03 ca 8b 7d 08-8b 55 e4 0f b7 c9 8b 5f .xf...}..U....._
81e4c8e0 04 66 89 0c 53 42 89 55-e4 8b 4d e0 eb 9b c7 45 .f..SB.U..M....E
81e4c8f0 fc fe ff ff ff c7 45 dc-00 00 00 00 e8 20 00 00 ......E...... ..
81e4c900 00 66 8b 06 66 89 07 33-c0 e8 bf ac e4 ff c2 0c .f..f..3........
Code:
81e56890 0f b7 0c 51 66 83 f9 61-72 41 66 83 f9 7a 77 08 ...Qf..arAf..zw.
81e568a0 0f b7 c9 83 e9 20 eb 36-8b 4e 04 0f b7 14 51 0f ..... .6.N....Q.
81e568b0 b7 ca 8b f9 c1 ef 08 0f-b7 3c 78 8b d9 c1 eb 04 .........<x.....
81e568c0 83 e3 0f 03 fb 0f b7 3c-78 83 e1 0f 03 f9 66 8b .......<x.....f.
81e568d0 0c 78 66 03 ca 8b 7d 08-8b 55 e4 0f b7 c9 8b 5f .xf...}..U....._
81e568e0 04 66 89 0c 53 42 89 55-e4 8b 4d e0 eb 9b c7 45 .f..SB.U..M....E
81e568f0 fc fe ff ff ff c7 45 dc-00 00 00 00 e8 20 00 00 ......E...... ..
81e56900 00 66 8b 06 66 89 07 33-c0 e8 bf ac e4 ff c2 0c .f..f..3........
Do you see that pattern! Yes, there are some subtle differences at times. This is to be expected in normal memory, because memory isn't like an .exe file. It is designed to be constantly changing - it holds variables.
But I think that that is enough evidence to go on to say that it come from such a similar area in memory that it is most likely a driver. And although I have no evidence for this, I wouldn't be surprised if the 1000008e and 1000007e faulty driver were one and the same (and these bugchecks themselves point to a driver)
Richard