Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 0:000> .load wow64exts
- 0:000> .effmach x86
- Effective machine: x86 compatible (x86)
- 0:000:x86> !analyze -v
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for QtGui4.dll -
- *******************************************************************************
- * *
- * Exception Analysis *
- * *
- *******************************************************************************
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for QtCore4.dll -
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for labeless_ida.plw -
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for unicorn1.dll -
- DUMP_CLASS: 2
- DUMP_QUALIFIER: 400
- FAULTING_IP:
- +0
- 00000000 ?? ???
- EXCEPTION_RECORD: (.exr -1)
- ExceptionAddress: 00000000
- ExceptionCode: 80000003 (Break instruction exception)
- ExceptionFlags: 00000000
- NumberParameters: 0
- FAULTING_THREAD: 0000282c
- DEFAULT_BUCKET_ID: STATUS_BREAKPOINT
- PROCESS_NAME: idaq.exe
- ERROR_CODE: (NTSTATUS) 0x80000003 - {UNNTAK} Avbruddspunkt Et avbruddspunkt er n dd.
- EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - Ett eller flere argumenter er ugyldige
- EXCEPTION_CODE_STR: 80000003
- WATSON_BKT_PROCSTAMP: 55390d9f
- WATSON_BKT_PROCVER: 6.8.15.423
- PROCESS_VER_PRODUCT: The Interactive Disassembler
- WATSON_BKT_MODULE: unknown
- WATSON_BKT_MODVER: 0.0.0.0
- WATSON_BKT_MODOFFSET: 0
- WATSON_BKT_MODSTAMP: bbbbbbb4
- BUILD_VERSION_STRING: 10.0.14393.0 (rs1_release.160715-1616)
- MODLIST_WITH_TSCHKSUM_HASH: e93ac1daf43b8c731150fa91f052f051bc7462cc
- MODLIST_SHA1_HASH: 281377f6a063b3b7fe4fc6f4183d1683d54da878
- NTGLOBALFLAG: 0
- APPLICATION_VERIFIER_FLAGS: 0
- PRODUCT_TYPE: 1
- SUITE_MASK: 272
- DUMP_FLAGS: 8000c07
- DUMP_TYPE: 0
- ANALYSIS_SESSION_HOST: STORM-SHADOW-PC
- ANALYSIS_SESSION_TIME: 03-05-2017 15:05:03.0488
- ANALYSIS_VERSION: 10.0.14321.1024 x86fre
- THREAD_ATTRIBUTES:
- OS_LOCALE: DAN
- PROBLEM_CLASSES:
- Tid [0x0]
- Frame [0x00]
- String [STATUS_BREAKPOINT]
- Data Bucketing
- ZEROED_STACK
- Tid [0x282c]
- Frame [0x00]: win32u!NtUserShowWindow
- BUGCHECK_STR: STATUS_BREAKPOINT_ZEROED_STACK
- LAST_CONTROL_TRANSFER: from 593c66d7 to 771329fc
- STACK_TEXT:
- 010fcaa0 593c66d7 00100a2e 00000001 02e378f8 win32u!NtUserShowWindow+0xc
- WARNING: Stack unwind information not available. Following frames may be wrong.
- 010fcac4 59346d10 59346d28 8a4d1657 02e378f8 QtGui4!QT::QWidgetPrivate::show_sys+0x177
- 010fcac8 59346d28 8a4d1657 02e378f8 02e31eb0 QtGui4!QT::QApplicationPrivate::enterModal+0x1d0
- 010fcb0c 59396258 59396262 8a4d179f 02e378f8 QtGui4!QT::QApplicationPrivate::enterModal+0x1e8
- 010fcb10 59396262 8a4d179f 02e378f8 02e31eb0 QtGui4!QT::QWidgetPrivate::show_helper+0x1b8
- 010fcb44 593967ad 8a4d17d3 000001cc 02e31eb0 QtGui4!QT::QWidgetPrivate::show_helper+0x1c2
- 00000000 00000000 00000000 00000000 00000000 QtGui4!QT::QWidget::setVisible+0x2ad
- STACK_COMMAND: ~0s; .ecxr ; kb
- THREAD_SHA1_HASH_MOD_FUNC: e872c264a5531150adb22ac861b5b113bfd448ac
- THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 472d34538db7a53fce18f65db706811df52d5362
- THREAD_SHA1_HASH_MOD: 122367393200b28c54efd0db76431cdf354e586a
- FOLLOWUP_IP:
- win32u!NtUserShowWindow+c
- 771329fc c20800 ret 8
- FAULT_INSTR_CODE: 900008c2
- SYMBOL_STACK_INDEX: 0
- SYMBOL_NAME: win32u!NtUserShowWindow+c
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: win32u
- IMAGE_NAME: win32u.dll
- DEBUG_FLR_IMAGE_TIMESTAMP: 57a023c2
- FAILURE_BUCKET_ID: STATUS_BREAKPOINT_80000003_win32u.dll!NtUserShowWindow
- BUCKET_ID: STATUS_BREAKPOINT_ZEROED_STACK_win32u!NtUserShowWindow+c
- PRIMARY_PROBLEM_CLASS: STATUS_BREAKPOINT_ZEROED_STACK_win32u!NtUserShowWindow+c
- FAILURE_EXCEPTION_CODE: 80000003
- FAILURE_IMAGE_NAME: win32u.dll
- BUCKET_ID_IMAGE_STR: win32u.dll
- FAILURE_MODULE_NAME: win32u
- BUCKET_ID_MODULE_STR: win32u
- FAILURE_FUNCTION_NAME: NtUserShowWindow
- BUCKET_ID_FUNCTION_STR: NtUserShowWindow
- BUCKET_ID_OFFSET: c
- BUCKET_ID_MODTIMEDATESTAMP: 57a023c2
- BUCKET_ID_MODCHECKSUM: 16f0e
- BUCKET_ID_MODVER_STR: 10.0.14393.51
- BUCKET_ID_PREFIX_STR: STATUS_BREAKPOINT_ZEROED_STACK_
- FAILURE_PROBLEM_CLASS: STATUS_BREAKPOINT
- FAILURE_SYMBOL_NAME: win32u.dll!NtUserShowWindow
- WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/idaq.exe/6.8.15.423/55390d9f/unknown/0.0.0.0/bbbbbbb4/80000003/00000000.htm?Retriage=1
- TARGET_TIME: 2017-03-05T13:56:47.000Z
- OSBUILD: 14393
- OSSERVICEPACK: 0
- SERVICEPACK_NUMBER: 0
- OS_REVISION: 0
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- OSEDITION: Windows 10 WinNt SingleUserTS
- USER_LCID: 0
- OSBUILD_TIMESTAMP: 2016-07-16 03:33:42
- BUILDDATESTAMP_STR: 160715-1616
- BUILDLAB_STR: rs1_release
- BUILDOSVER_STR: 10.0.14393.0
- ANALYSIS_SESSION_ELAPSED_TIME: 1d3f
- ANALYSIS_SOURCE: UM
- FAILURE_ID_HASH_STRING: um:status_breakpoint_80000003_win32u.dll!ntusershowwindow
- FAILURE_ID_HASH: {fc1665c8-3676-4a75-face-3bc36c3ee47e}
- Followup: MachineOwner
- ---------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement