Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Microsoft (R) Windows Debugger Version 10.0.18362.1 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Loading Dump File [D:\dmp\42f75fd2-ad41-4446-ac37-92e2cfd4e3d2.dmp]
- User Mini Dump File: Only registers, stack and portions of memory are available
- Symbol search path is: srv*
- Executable search path is:
- Windows 10 Version 18363 MP (12 procs) Free x64
- Product: WinNt, suite: SingleUserTS
- 18362.1.amd64fre.19h1_release.190318-1202
- Machine Name:
- Debug session time: Thu Feb 13 23:36:15.000 2020 (UTC + 3:00)
- System Uptime: not available
- Process Uptime: 0 days 0:01:58.000
- ................................................................
- ................................................................
- ..........
- This dump file has an exception of interest stored in it.
- The stored exception information can be accessed via .ecxr.
- (3a8c.3d30): Access violation - code c0000005 (first/second chance not available)
- For analysis of this file, run !analyze -v
- ntdll!NtWaitForSingleObject+0x14:
- 00007ff9`402fc144 c3 ret
- 0:068> !analyze -v
- *******************************************************************************
- * *
- * Exception Analysis *
- * *
- *******************************************************************************
- *** WARNING: Unable to verify timestamp for r5apex.exe
- *** WARNING: Unable to verify timestamp for mileswin64.dll
- KEY_VALUES_STRING: 1
- Key : AV.Fault
- Value: Read
- Key : Timeline.Process.Start.DeltaSec
- Value: 118
- PROCESSES_ANALYSIS: 1
- SERVICE_ANALYSIS: 1
- STACKHASH_ANALYSIS: 1
- TIMELINE_ANALYSIS: 1
- Timeline: !analyze.Start
- Name: <blank>
- Time: 2020-02-13T21:26:39.478Z
- Diff: 3024478 mSec
- Timeline: Dump.Current
- Name: <blank>
- Time: 2020-02-13T20:36:15.0Z
- Diff: 0 mSec
- Timeline: Process.Start
- Name: <blank>
- Time: 2020-02-13T20:34:17.0Z
- Diff: 118000 mSec
- DUMP_CLASS: 2
- DUMP_QUALIFIER: 400
- CONTEXT: (.ecxr)
- rax=0000000000000000 rbx=0000016f2c0d0000 rcx=0000000000002000
- rdx=00007ff5b6d40002 rsi=00007ff5b6d4001c rdi=00000000000004e3
- rip=00007ff93d814460 rsp=00000048bb35f7e8 rbp=00000048bb35f861
- r8=0000000000000000 r9=0000000000002000 r10=00000000000018ff
- r11=0000016f4c8d1ee0 r12=0000000000000000 r13=0000016f17bf5ad0
- r14=000000002f7e5ee0 r15=0000000000000008
- iopl=0 nv up ei ng nz na pe cy
- cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010283
- KERNELBASE!MultiByteToWideChar+0x410:
- 00007ff9`3d814460 0fb603 movzx eax,byte ptr [rbx] ds:0000016f`2c0d0000=??
- Resetting default scope
- FAULTING_IP:
- KERNELBASE!MultiByteToWideChar+410
- 00007ff9`3d814460 0fb603 movzx eax,byte ptr [rbx]
- EXCEPTION_RECORD: (.exr -1)
- ExceptionAddress: 00007ff93d814460 (KERNELBASE!MultiByteToWideChar+0x0000000000000410)
- ExceptionCode: c0000005 (Access violation)
- ExceptionFlags: 00000000
- NumberParameters: 2
- Parameter[0]: 0000000000000000
- Parameter[1]: 0000016f2c0d0000
- Attempt to read from address 0000016f2c0d0000
- DEFAULT_BUCKET_ID: INVALID_POINTER_READ
- PROCESS_NAME: r5apex.exe
- FOLLOWUP_IP:
- r5apex+c69d0d
- 00007ff6`e3d89d0d ?? ???
- READ_ADDRESS: 0000016f2c0d0000
- ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
- EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
- EXCEPTION_CODE_STR: c0000005
- EXCEPTION_PARAMETER1: 0000000000000000
- EXCEPTION_PARAMETER2: 0000016f2c0d0000
- WATSON_BKT_PROCSTAMP: 4614489d
- WATSON_BKT_PROCVER: 9.18.944.0
- PROCESS_VER_PRODUCT: Microsoft® DirectX for Windows®
- WATSON_BKT_MODULE: KERNELBASE.dll
- WATSON_BKT_MODSTAMP: f96f12ee
- WATSON_BKT_MODOFFSET: 34460
- WATSON_BKT_MODVER: 10.0.18362.628
- MODULE_VER_PRODUCT: Microsoft® Windows® Operating System
- BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
- MODLIST_WITH_TSCHKSUM_HASH: 0a55d28d8d5b1f0813821bdc50e275954a779750
- MODLIST_SHA1_HASH: fec6b1ea7762ed871b17363661f0a7559ac0d1fb
- DUMP_FLAGS: 0
- DUMP_TYPE: 2
- ANALYSIS_SESSION_HOST: EKZE-PC
- ANALYSIS_SESSION_TIME: 02-14-2020 00:26:39.0478
- ANALYSIS_VERSION: 10.0.18362.1 amd64fre
- THREAD_ATTRIBUTES:
- BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ
- PRIMARY_PROBLEM_CLASS: APPLICATION_FAULT
- PROBLEM_CLASSES:
- ID: [0n313]
- Type: [@ACCESS_VIOLATION]
- Class: Addendum
- Scope: BUCKET_ID
- Name: Omit
- Data: Omit
- PID: [Unspecified]
- TID: [0x3d30]
- Frame: [0] : KERNELBASE!MultiByteToWideChar
- ID: [0n285]
- Type: [INVALID_POINTER_READ]
- Class: Primary
- Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
- BUCKET_ID
- Name: Add
- Data: Omit
- PID: [Unspecified]
- TID: [0x3d30]
- Frame: [0] : KERNELBASE!MultiByteToWideChar
- LAST_CONTROL_TRANSFER: from 00007ff6e3d89d0d to 00007ff93d814460
- STACK_TEXT:
- 00000048`bb35f7e8 00007ff6`e3d89d0d : 00007ff6`e3ea9884 00000000`00000015 00007ff6`e3d7f218 00000000`00000015 : KERNELBASE!MultiByteToWideChar+0x410
- 00000048`bb35f8b8 00007ff6`e3ea9884 : 00000000`00000015 00007ff6`e3d7f218 00000000`00000015 00000000`00000000 : r5apex+0xc69d0d
- 00000048`bb35f8c0 00000000`00000015 : 00007ff6`e3d7f218 00000000`00000015 00000000`00000000 0000b81f`00000000 : r5apex+0xd89884
- 00000048`bb35f8c8 00007ff6`e3d7f218 : 00000000`00000015 00000000`00000000 0000b81f`00000000 00007ff6`e3d7f218 : 0x15
- 00000048`bb35f8d0 00000000`00000015 : 00000000`00000000 0000b81f`00000000 00007ff6`e3d7f218 00000048`bb35f980 : r5apex+0xc5f218
- 00000048`bb35f8d8 00000000`00000000 : 0000b81f`00000000 00007ff6`e3d7f218 00000048`bb35f980 00007ff6`e3d7d9c4 : 0x15
- THREAD_SHA1_HASH_MOD_FUNC: d4002c84fd575ed32c0afcc77f1608857b3fe3ed
- THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 6263acf962c9e929ad7e6671708e957f4bdb3e99
- THREAD_SHA1_HASH_MOD: 9bc20437aad2a7bd3da746cb14111d08df3b845d
- SYMBOL_STACK_INDEX: 1
- SYMBOL_NAME: r5apex+c69d0d
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: r5apex
- IMAGE_NAME: r5apex.exe
- DEBUG_FLR_IMAGE_TIMESTAMP: 5e3e3104
- STACK_COMMAND: ~68s ; .ecxr ; kb
- FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_r5apex.exe!Unknown
- BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_READ_r5apex+c69d0d
- FAILURE_EXCEPTION_CODE: c0000005
- FAILURE_IMAGE_NAME: r5apex.exe
- BUCKET_ID_IMAGE_STR: r5apex.exe
- FAILURE_MODULE_NAME: r5apex
- BUCKET_ID_MODULE_STR: r5apex
- FAILURE_FUNCTION_NAME: Unknown
- BUCKET_ID_FUNCTION_STR: Unknown
- BUCKET_ID_OFFSET: c69d0d
- BUCKET_ID_MODTIMEDATESTAMP: 5e3e3104
- BUCKET_ID_MODCHECKSUM: 1f44f88
- BUCKET_ID_MODVER_STR: 1.0.0.0
- BUCKET_ID_PREFIX_STR: APPLICATION_FAULT_INVALID_POINTER_READ_
- FAILURE_PROBLEM_CLASS: APPLICATION_FAULT
- FAILURE_SYMBOL_NAME: r5apex.exe!Unknown
- WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/r5apex.exe/9.18.944.0/4614489d/KERNELBASE.dll/10.0.18362.628/f96f12ee/c0000005/00034460.htm?Retriage=1
- TARGET_TIME: 2020-02-13T20:36:15.000Z
- OSBUILD: 18363
- OSSERVICEPACK: 329
- SERVICEPACK_NUMBER: 0
- OS_REVISION: 0
- SUITE_MASK: 256
- PRODUCT_TYPE: 1
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- OSEDITION: Windows 10 WinNt SingleUserTS
- OS_LOCALE:
- USER_LCID: 0
- OSBUILD_TIMESTAMP: unknown_date
- BUILDDATESTAMP_STR: 190318-1202
- BUILDLAB_STR: 19h1_release
- BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
- ANALYSIS_SESSION_ELAPSED_TIME: 1cced
- ANALYSIS_SOURCE: UM
- FAILURE_ID_HASH_STRING: um:invalid_pointer_read_c0000005_r5apex.exe!unknown
- FAILURE_ID_HASH: {c3eaffee-836c-ca4c-34e7-0ff097017c97}
- Followup: MachineOwner
- ---------
- 0:068> !analyze -v
- *******************************************************************************
- * *
- * Exception Analysis *
- * *
- *******************************************************************************
- KEY_VALUES_STRING: 1
- Key : AV.Fault
- Value: Read
- Key : Timeline.Process.Start.DeltaSec
- Value: 118
- PROCESSES_ANALYSIS: 1
- SERVICE_ANALYSIS: 1
- STACKHASH_ANALYSIS: 1
- TIMELINE_ANALYSIS: 1
- Timeline: !analyze.Start
- Name: <blank>
- Time: 2020-02-13T21:28:37.545Z
- Diff: 3142545 mSec
- Timeline: Dump.Current
- Name: <blank>
- Time: 2020-02-13T20:36:15.0Z
- Diff: 0 mSec
- Timeline: Process.Start
- Name: <blank>
- Time: 2020-02-13T20:34:17.0Z
- Diff: 118000 mSec
- DUMP_CLASS: 2
- DUMP_QUALIFIER: 400
- CONTEXT: (.ecxr)
- rax=0000000000000000 rbx=0000016f2c0d0000 rcx=0000000000002000
- rdx=00007ff5b6d40002 rsi=00007ff5b6d4001c rdi=00000000000004e3
- rip=00007ff93d814460 rsp=00000048bb35f7e8 rbp=00000048bb35f861
- r8=0000000000000000 r9=0000000000002000 r10=00000000000018ff
- r11=0000016f4c8d1ee0 r12=0000000000000000 r13=0000016f17bf5ad0
- r14=000000002f7e5ee0 r15=0000000000000008
- iopl=0 nv up ei ng nz na pe cy
- cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010283
- KERNELBASE!MultiByteToWideChar+0x410:
- 00007ff9`3d814460 0fb603 movzx eax,byte ptr [rbx] ds:0000016f`2c0d0000=??
- Resetting default scope
- FAULTING_IP:
- KERNELBASE!MultiByteToWideChar+410
- 00007ff9`3d814460 0fb603 movzx eax,byte ptr [rbx]
- EXCEPTION_RECORD: (.exr -1)
- ExceptionAddress: 00007ff93d814460 (KERNELBASE!MultiByteToWideChar+0x0000000000000410)
- ExceptionCode: c0000005 (Access violation)
- ExceptionFlags: 00000000
- NumberParameters: 2
- Parameter[0]: 0000000000000000
- Parameter[1]: 0000016f2c0d0000
- Attempt to read from address 0000016f2c0d0000
- DEFAULT_BUCKET_ID: INVALID_POINTER_READ
- PROCESS_NAME: r5apex.exe
- FOLLOWUP_IP:
- r5apex+c69d0d
- 00007ff6`e3d89d0d ?? ???
- READ_ADDRESS: 0000016f2c0d0000
- ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
- EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
- EXCEPTION_CODE_STR: c0000005
- EXCEPTION_PARAMETER1: 0000000000000000
- EXCEPTION_PARAMETER2: 0000016f2c0d0000
- WATSON_BKT_PROCSTAMP: 4614489d
- WATSON_BKT_PROCVER: 9.18.944.0
- PROCESS_VER_PRODUCT: Microsoft® DirectX for Windows®
- WATSON_BKT_MODULE: KERNELBASE.dll
- WATSON_BKT_MODSTAMP: f96f12ee
- WATSON_BKT_MODOFFSET: 34460
- WATSON_BKT_MODVER: 10.0.18362.628
- MODULE_VER_PRODUCT: Microsoft® Windows® Operating System
- BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
- MODLIST_WITH_TSCHKSUM_HASH: 0a55d28d8d5b1f0813821bdc50e275954a779750
- MODLIST_SHA1_HASH: fec6b1ea7762ed871b17363661f0a7559ac0d1fb
- DUMP_FLAGS: 0
- DUMP_TYPE: 2
- ANALYSIS_SESSION_HOST: EKZE-PC
- ANALYSIS_SESSION_TIME: 02-14-2020 00:28:37.0545
- ANALYSIS_VERSION: 10.0.18362.1 amd64fre
- THREAD_ATTRIBUTES:
- BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ
- PRIMARY_PROBLEM_CLASS: APPLICATION_FAULT
- PROBLEM_CLASSES:
- ID: [0n313]
- Type: [@ACCESS_VIOLATION]
- Class: Addendum
- Scope: BUCKET_ID
- Name: Omit
- Data: Omit
- PID: [Unspecified]
- TID: [0x3d30]
- Frame: [0] : KERNELBASE!MultiByteToWideChar
- ID: [0n285]
- Type: [INVALID_POINTER_READ]
- Class: Primary
- Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
- BUCKET_ID
- Name: Add
- Data: Omit
- PID: [Unspecified]
- TID: [0x3d30]
- Frame: [0] : KERNELBASE!MultiByteToWideChar
- LAST_CONTROL_TRANSFER: from 00007ff6e3d89d0d to 00007ff93d814460
- STACK_TEXT:
- 00000048`bb35f7e8 00007ff6`e3d89d0d : 00007ff6`e3ea9884 00000000`00000015 00007ff6`e3d7f218 00000000`00000015 : KERNELBASE!MultiByteToWideChar+0x410
- 00000048`bb35f8b8 00007ff6`e3ea9884 : 00000000`00000015 00007ff6`e3d7f218 00000000`00000015 00000000`00000000 : r5apex+0xc69d0d
- 00000048`bb35f8c0 00000000`00000015 : 00007ff6`e3d7f218 00000000`00000015 00000000`00000000 0000b81f`00000000 : r5apex+0xd89884
- 00000048`bb35f8c8 00007ff6`e3d7f218 : 00000000`00000015 00000000`00000000 0000b81f`00000000 00007ff6`e3d7f218 : 0x15
- 00000048`bb35f8d0 00000000`00000015 : 00000000`00000000 0000b81f`00000000 00007ff6`e3d7f218 00000048`bb35f980 : r5apex+0xc5f218
- 00000048`bb35f8d8 00000000`00000000 : 0000b81f`00000000 00007ff6`e3d7f218 00000048`bb35f980 00007ff6`e3d7d9c4 : 0x15
- THREAD_SHA1_HASH_MOD_FUNC: d4002c84fd575ed32c0afcc77f1608857b3fe3ed
- THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 6263acf962c9e929ad7e6671708e957f4bdb3e99
- THREAD_SHA1_HASH_MOD: 9bc20437aad2a7bd3da746cb14111d08df3b845d
- SYMBOL_STACK_INDEX: 1
- SYMBOL_NAME: r5apex+c69d0d
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: r5apex
- IMAGE_NAME: r5apex.exe
- DEBUG_FLR_IMAGE_TIMESTAMP: 5e3e3104
- STACK_COMMAND: ~68s ; .ecxr ; kb
- FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_r5apex.exe!Unknown
- BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_READ_r5apex+c69d0d
- FAILURE_EXCEPTION_CODE: c0000005
- FAILURE_IMAGE_NAME: r5apex.exe
- BUCKET_ID_IMAGE_STR: r5apex.exe
- FAILURE_MODULE_NAME: r5apex
- BUCKET_ID_MODULE_STR: r5apex
- FAILURE_FUNCTION_NAME: Unknown
- BUCKET_ID_FUNCTION_STR: Unknown
- BUCKET_ID_OFFSET: c69d0d
- BUCKET_ID_MODTIMEDATESTAMP: 5e3e3104
- BUCKET_ID_MODCHECKSUM: 1f44f88
- BUCKET_ID_MODVER_STR: 1.0.0.0
- BUCKET_ID_PREFIX_STR: APPLICATION_FAULT_INVALID_POINTER_READ_
- FAILURE_PROBLEM_CLASS: APPLICATION_FAULT
- FAILURE_SYMBOL_NAME: r5apex.exe!Unknown
- WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/r5apex.exe/9.18.944.0/4614489d/KERNELBASE.dll/10.0.18362.628/f96f12ee/c0000005/00034460.htm?Retriage=1
- TARGET_TIME: 2020-02-13T20:36:15.000Z
- OSBUILD: 18363
- OSSERVICEPACK: 329
- SERVICEPACK_NUMBER: 0
- OS_REVISION: 0
- SUITE_MASK: 256
- PRODUCT_TYPE: 1
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- OSEDITION: Windows 10 WinNt SingleUserTS
- OS_LOCALE:
- USER_LCID: 0
- OSBUILD_TIMESTAMP: unknown_date
- BUILDDATESTAMP_STR: 190318-1202
- BUILDLAB_STR: 19h1_release
- BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
- ANALYSIS_SESSION_ELAPSED_TIME: baa
- ANALYSIS_SOURCE: UM
- FAILURE_ID_HASH_STRING: um:invalid_pointer_read_c0000005_r5apex.exe!unknown
- FAILURE_ID_HASH: {c3eaffee-836c-ca4c-34e7-0ff097017c97}
- Followup: MachineOwner
- ---------
Advertisement
Add Comment
Please, Sign In to add comment