What's new Search

Recent content by x BlueRobot

System registry file is missing or corrupt 0xC0000225

Did you ensure that you've loaded the SYSTEM hive beforehand using an alias of SYSTEM2?
- x BlueRobot
- Post #13
- Yesterday at 5:13 PM
- Forum: BSOD Crashes, Kernel Debugging
System registry file is missing or corrupt 0xC0000225

Could you please open command prompt and then enter the following command: reg query HKEY_LOCAL_MACHINE\SYSTEM2\ControlSet#\Control\Class\{4d36e967-e325-11ce-bfc1-08002be10318} You'll need to replace # with the number of your current control set. Since you're in the recovery environment...
- x BlueRobot
- Post #11
- Wednesday at 1:43 PM
- Forum: BSOD Crashes, Kernel Debugging
System registry file is missing or corrupt 0xC0000225

Have you checked your BCD store to make sure that there is any boot loader listed there? You may have to completely delete the BCD and then rebuild it because that bootrec /rebuildbcd command doesn't always work. The ESP partition may vary in size between different installations so its best to...
- x BlueRobot
- Post #9
- Wednesday at 5:26 AM
- Forum: BSOD Crashes, Kernel Debugging
[SOLVED] When setting a hardware breakpoint on access, do we need to do it per CPU core?

Please start reading the documentation: Source: Processor Breakpoints (ba Breakpoints) - Windows drivers
- x BlueRobot
- Post #2
- Apr 18, 2024
- Forum: BSOD Crashes, Kernel Debugging
Question about stack frames in a postmortem crash dump

Code Machine does have a debugger extension which you can download called CMKD.dll, it has a very useful command called !stack -p which will pull out the arguments for you if it can, not sure if it works with ARM though?
- x BlueRobot
- Post #7
- Apr 9, 2024
- Forum: BSOD Crashes, Kernel Debugging
Question about stack frames in a postmortem crash dump

The .frame command should read from the function prologue and then deduce the arguments from that so you should be able to use u or uf to examine how they're being set. I've always used .frame /r though rather than dv.
- x BlueRobot
- Post #6
- Apr 9, 2024
- Forum: BSOD Crashes, Kernel Debugging
Question about stack frames in a postmortem crash dump

You're going to have to look at the calling conventions and the ABI used on ARM64 machines then, one blog series here: The AArch64 processor (aka arm64), part 1: Introduction - The Old New Thing
- x BlueRobot
- Post #4
- Apr 9, 2024
- Forum: BSOD Crashes, Kernel Debugging
Question about stack frames in a postmortem crash dump

All explained in this article: CodeMachine - Article - X64 Deep Dive
- x BlueRobot
- Post #2
- Apr 9, 2024
- Forum: BSOD Crashes, Kernel Debugging
Any suggestions how to triage PROCESS_HAS_LOCKED_PAGES bugcheck?

The documentation already suggests what to do: Bug Check 0x76 PROCESS_HAS_LOCKED_PAGES - Windows drivers Just open an elevated command prompt on the client machine and then enter: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v...
- x BlueRobot
- Post #4
- Apr 9, 2024
- Forum: BSOD Crashes, Kernel Debugging
Strangely irregular BSODs on Windows 11

Have you tried disabling XMP? Those Hypervisor bugchecks are usually because of some hardware configuration issue or the processor. You might want to check that the UEFI settings have been set to their defaults as well.
- x BlueRobot
- Post #4
- Mar 28, 2024
- Forum: BSOD Crashes, Kernel Debugging
Strangely irregular BSODs on Windows 11

Did you bypass any compatibility requirements before upgrading to Windows 11?
- x BlueRobot
- Post #2
- Mar 28, 2024
- Forum: BSOD Crashes, Kernel Debugging
Is there a way to prevent the extension from being automatically created when saving a file with the same name?

I believe the user is referring to File Explorer behaviour when you save a file of a different type but same name of an already existing file in the same directory. Here's an exercise to do for anyone who needs clarification: Save a empty .txt file to your Desktop named file. This will be...
- x BlueRobot
- Post #9
- Mar 27, 2024
- Forum: Windows 10
[SOLVED] Plagued by Windows 10 problems

Thank you for the donation, I've updated your user status to Contributor for you. Hopefully you won't have any other issues!
- x BlueRobot
- Post #22
- Mar 6, 2024
- Forum: Windows 10
[SOLVED] Plagued by Windows 10 problems

I'm glad to hear that Windows Update is now working correctly and I would stay away from that update like you said, Microsoft have released a work around for it but I don't think they've actually released a proper fix yet? You can hide the update if you wanted to: Issues with KB5034441? This is...
- x BlueRobot
- Post #20
- Mar 5, 2024
- Forum: Windows 10
[SOLVED] Plagued by Windows 10 problems

Thanks, are you now able to connect to Windows Update or are you still having issues?
- x BlueRobot
- Post #17
- Mar 4, 2024
- Forum: Windows 10

x BlueRobot