Character-mode STOP messages are always displayed on a full character-mode screen rather than in a Windows-mode message box. They are also uniquely identified by a hexadecimal number and a symbolic string, as in the following example:
*** STOP: 0x00000001 APC_INDEX_MISMATCH
The content of the symbolic string may suggest, to a trained technician, which part of the Kernel detected the condition that left no recourse but to stop. However, keep in mind that the cause may actually be in another part of the system.
Figure 38.1 is an example of a complete STOP message screen generated by the Windows NT Kernel.
Section 1: Debug Port Status Indicators
DSR CTS SND
Section 2: BugCheck Information
*** STOP: 0x0000000A (0x00000000,0x0000001A,0x00000000,0xFC873D6C) IRQL_NOT_LESS_OR_EQUAL*** Address fc873d6c has base at fc870000 - i8042prt.SYS CPUID:GenuineIntel 5.1.5 irql:1f SYSVER 0Xf0000421
Section 3: Driver Information
Dll Base DateStmp - Name Dll Base DateStmp - Name 80100000 2fc653bc - ntoskrnl.exe 80400000 2fb24f4a - hal.dll 80010000 2faae87f - ncrc810.sys 80013000 2faae8ca - SCSIPORT.SYS 8001b000 2faae8c5 - Scsidisk.sys 8029e000 2fc15d19 - Fastfat.sys fc820000 2faae8af - Floppy.sys fc830000 2fb16eef - Scsicdrm.SYS fc840000 2faae8ff - FS_Rec.SYSfc850000 2faae8b7 - Null.SYS fc860000 2faae8a1 - Beep.SYS fc870000 31167860 - i8042prt.SYS fc880000 2faae8b5 - Mouclass.SYS fc890000 2faae8b4 - Kbdclass.SYS fc8b0000 2faae88d - VIDEOPRT.SYS fc8c0000 2fb67626 - ati.SYS fc8a0000 2faae892 - vga.sys fc8e0000 2faae8fd - Msfs.SYS fc8f0000 2faae8ec - npfs.SYS fc900000 2faae91a - ndistapi.sys fc910000 2fc4f4b2 - ntfs.SYS fc980000 2fc12af6 - NDIS.SYS fc970000 2faaee1e - asyncmac.sys fc9a0000 2dd47963 - epront.sys fc9b0000 2fb52712 - ndiswan.sys fc9e0000 2faae945 - TDI.SYS fc9c0000 2fae6a5f - nbf.sys fc9f0000 2faec8b1 - afd.sys fca00000 2faaee1f - rasarp.sys fca10000 2fbf9993 - streams.sys fca30000 2fc1557b - tcpip.sys fca50000 2e6ce2d3 - ubnb.sys fca60000 2e64646c - mcsxns.sys fca70000 2fc0daf7 - netbt.sys
Section 4: Kernel Build Number and Stack Dump
Address dword dump Build [1057] - Name 8014004c fc873d6c fc873d6c ff05e051 00000000 ff05e04b 0000002f - i8042prt.SYS 8014007c 801400c4 801400c4 00000000 00000023 00000023 00000037 - ntoskrnl.exe 80140098 fc87258e fc87258e 801400e8 00000030 ff0d141c ff0d1598 - i8042prt.SYS 8014009c 801400e8 801400e8 00000030 ff0d141c ff0d1598 00000002 - ntoskrnl.exe 801400b0 801400f8 801400f8 00000000 fc873d6c 00000008 00010202 - ntoskrnl.exe 801400b8 fc873d6c fc873d6c 00000008 00010202 ff0ced88 ff0d1598 - i8042prt.SYS 801400e0 801400c4 801400c4 fca460f4 ffffffff fc874f78 fc870418 - ntoskrnl.exe 801400e4 fca460f4 fca460f4 ffffffff fc874f78 fc870418 ffffffff - tcpip.sys 801400ec fc874f78 fc874f78 fc870418 ffffffff 80140110 8013be2a - i8042prt.SYS 801400f0 fc870418 fc870418 ffffffff 80140110 8013be2a ff0ced88 - i8042prt.SYS 801400f8 80140110 80140110 8013be2a ff0ced88 ff0d1350 80137502 - ntoskrnl.exe 801400fc 8013be2a 8013be2a ff0ced88 ff0d1350 80137052 00000031 - ntoskrnl.exe
Section 5: Debug Port Information
Kernel Debugger Using: COM2 (Port 0x2f8, Baud Rate 19200) Beginning dump of physical memory Physical memory dump complete. Contact your system administrator or technical support group.
Figure 38.1 STOP Message Screen