STOP WINDOWS
, Windows XP , - , . , ? , , . , : / / / / / . .
, , , . : Windows XP, - . , , , , , . - : , , . , , . , : , ( ), . :
STOP: 0x000000D1 (0x00000000, 0x000000000, 0x00000000, 0xF8BCC2A4)
STOP (0x000000D1) ( ) . , , , - . , . , , , , . , :
Nwiz.sys - Addres F8BCCA44 base at F8BCC000, DateStamp 33bb8f1d
, , . , . , , , , , , . ( ), : / / / / .
, , , .
|
|
|
, BSoD.
(BSoD)
(. Blue Screen of Death, BSoD) Microsoft Windows.
:
(1 );
, ( STOP), (2 );
, (3 );
? .
, :
0x0000000A
1 - ,
2 - IRQL,
3 - : 0 = , 1 =
4 - ,
, , , . () . - . , , . - .
0x0000000D
1 -
2 - ,
, .
0x0000001A
MEMORY_MANAGEMENT
.
X0000001E
1 -
2 - ,
3 - Parameter 0
4 - Parameter 1
Windows XP . , . , . 0x80000003 , , /NODEBUG . , , /DEBUG. , 0XBFC0304, . , . , , (), .
0x00000020
1 - APC,
2 - APC
3 - IRQ
() APC . , . , FsRtlEnterFileSystem , FsRtlExitFileSystem. - FsRtlExitFileSystem , FsRtlEnterFileSystem. , , , NTFS, FAT, HPFS RDR. IRQL 0. , , IRQ. , , . .
|
|
|
X00000023
FAT ( ).
X00000024
NTFS ( ).
0x0000002A
1 - , IRP (I/O Request Packet) , IRP ; IRP. , IRP, , , , - .
X0000002B
.
, - . .
0x0000002E
1 - ,
2 -
3 - (PSR)
4 - (FIR)
(), . 0x8XXXXXXX, .
0x00000031
1 - , , ,
2 - 0.
.
0x00000032
1 - , , ,
2 - 1.
.
0x00000035
1 - IRP
IoCallDriver() , , , . , , . , , . , , , - .
0x00000036
1 -
, 0, , ( , ). .
X00000037
0x0000003E
. , . , Pentium 80486 . , 86 , .
X0000003F
. F (Page File Entries). , .
X00000040
IoBuildPartialMdl() MDL, MDL, MDL , . .
0x00000044
1 - IRP
IRP [IoCompleteRequest()], . , - - , . - 2 . , , , . , , , . , , DeviceObject , .
|
|
|
X00000048
, I/O Request Packet (IRP), , , , , . , , .
X00000049
.
, 0x0A.
0x0000004C
Winlogon CSRSS (Windows) "" . . - c0000005, , . , , .
0x0000004D
1 -
2 -
, .
0x0000004E
1. 1
2. ,
3.
4. 0
1. 2
2. ,
3.
4.
- () - .
0x00000050
1.
, . .
0x00000051
1. 1 (, )
2. 2 (, )
3.
4. HvCheckHive', -
. , - , . . , , . , , PDC BDC SAM ( ), .
0x00000058
, , , . .
0x00000069
. ,
.
0x00000073
1. 5
2. 2
3.
4. UNICODE_STRING, , . SOFTWARE, SECURITY, SAM ( ).
X00000074
, SYSTEM, NTLDR, . , , OSLOADER , . , . LastKnownGood ( ) .
|
|
|
0x00000075
, " ".
X00000077
1. 0
2. 0
3. PFE
4.
1.
2. I/O
3.
4.
( ) .
- , , ..
0x00000079
1. (1, 2 3):
1. PRCB ( ). , 2 3:
2 - NTOSKRNL.EXE
3 - HAL.DLL
2. , 2 3:
2 - NTOSKRNL.EXE
3 - HAL.DLL
3. Micro Channel Architecture (MCA) MCA HAL, 2 3:
2 - , NTDETECT.COM 2 , - MCA
3 - , HAL , 2 , HAL MCA. Windows XP (Hardware Abstaction Layer - HAL) Windows XP. - BIOS API, , . , NTOSKRNL.EXE HAL.DLL .
0x0000007A
, 077: ( ). .
X0000007B
1. . , . Boot.ini .
0x0000007D
1.
2.
3.
4. 0
, Windows. - , .
0x0000007F
1.
, , . - , , - .
0x0000008B
1 - MBR.
2 - MBR
3 - MBR .
, MBR, , . , .. . .
X0000008E
, :
RAM .
RAM Windows XP.
:
1. RAM , Windows XP. - 128, - 64, - 4.
2. .
3. , 4.
4. .
5. .
: 0x0000008E RAM .
0x00000092
, , , .
X00000098
OC ( Trial- ).
X0000009C
.
X0000009F
, () .
X000000B4
. .
X000000B9
. - .
X000000BE
().
|
|
|
X000000C2
. - .
X000000C4
...
X000000C5
IRQL. , .
X000000C6
. .
X000000C7
Delayed Procedure Call (DPC) . .
X000000C9
- .
X000000CB
0x76. , - .
X000000CE
. .
X000000D1
.
X000000D8
. F (Page File Entries). , ( ).
X000000E3
NTFS.
X000000EA
, . .
X000000ED
Windows XP , . 07.
X000000F2
" ", . , "".
X000000F3
Windows - .
X1000007E
0x7E.
X1000008E
0x8E.
XC000009A
Windows .
XC0000135
. . .
XC0000142
.
XC0000218
. . - .
XC000021A
Windows XP - Winlogon.exe Csrss.exe. , , , System .
XC0000221
. .
XC0000244
, CrashOnAuditFail .
XC000026C
. .
