Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- KEY_VALUES_STRING: 1
- Key : AV.Fault
- Value: Read
- Key : Timeline.Process.Start.DeltaSec
- Value: 12
- PROCESSES_ANALYSIS: 1
- SERVICE_ANALYSIS: 1
- STACKHASH_ANALYSIS: 1
- TIMELINE_ANALYSIS: 1
- Timeline: !analyze.Start
- Name: <blank>
- Time: 2019-03-26T17:07:26.826Z
- Diff: 125826 mSec
- Timeline: Dump.Current
- Name: <blank>
- Time: 2019-03-26T17:05:21.0Z
- Diff: 0 mSec
- Timeline: Process.Start
- Name: <blank>
- Time: 2019-03-26T17:05:09.0Z
- Diff: 12000 mSec
- DUMP_CLASS: 2
- DUMP_QUALIFIER: 400
- CONTEXT: (.ecxr)
- rax=0000000000000000 rbx=0000000010001af0 rcx=0000000096e60080
- rdx=0000000000000000 rsi=00007ffdeb6f9a20 rdi=0000000010001af0
- rip=0000000010003654 rsp=0000005f977bf470 rbp=0000000000000010
- r8=0000005f977bf388 r9=0000000000000010 r10=0000000000000000
- r11=0000000000000246 r12=00007ffdeb6f9e20 r13=0000000000000000
- r14=0000000000000000 r15=0000000000000000
- iopl=0 nv up ei ng nz na po nc
- cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010286
- EZFRD64!DllCanUnloadNow+0x2434:
- 00000000`10003654 837c011000 cmp dword ptr [rcx+rax+10h],0 ds:00000000`96e60090=????????
- Resetting default scope
- FAULTING_IP:
- EZFRD64!DllCanUnloadNow+2434
- 00000000`10003654 837c011000 cmp dword ptr [rcx+rax+10h],0
- EXCEPTION_RECORD: (.exr -1)
- ExceptionAddress: 0000000010003654 (EZFRD64!DllCanUnloadNow+0x0000000000002434)
- ExceptionCode: c0000005 (Access violation)
- ExceptionFlags: 00000000
- NumberParameters: 2
- Parameter[0]: 0000000000000000
- Parameter[1]: 0000000096e60090
- Attempt to read from address 0000000096e60090
- DEFAULT_BUCKET_ID: INVALID_POINTER_READ
- PROCESS_NAME: XenonRacer-Win64-Shipping.exe
- FOLLOWUP_IP:
- EZFRD64!DllCanUnloadNow+2434
- 00000000`10003654 837c011000 cmp dword ptr [rcx+rax+10h],0
- READ_ADDRESS: 0000000096e60090
- ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
- EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
- EXCEPTION_CODE_STR: c0000005
- EXCEPTION_PARAMETER1: 0000000000000000
- EXCEPTION_PARAMETER2: 0000000096e60090
- WATSON_BKT_PROCSTAMP: 5c9a0fe5
- WATSON_BKT_PROCVER: 4.20.3.0
- PROCESS_VER_PRODUCT: UE4Game
- WATSON_BKT_MODULE: EZFRD64.dll
- WATSON_BKT_MODSTAMP: 4693218c
- WATSON_BKT_MODOFFSET: 3654
- BUILD_VERSION_STRING: 17763.1.amd64fre.rs5_release.180914-1434
- MODLIST_WITH_TSCHKSUM_HASH: 5d5c1cbd2ac9632ce90b6846bb0b3c12be9ff87b
- MODLIST_SHA1_HASH: 537e8d0fcce331c19a5bf257c0829d5bf5a2614d
- DUMP_FLAGS: 0
- DUMP_TYPE: 2
- ANALYSIS_SESSION_HOST: DESKTOP-S0UBHQ0
- ANALYSIS_SESSION_TIME: 03-26-2019 14:07:26.0826
- ANALYSIS_VERSION: 10.0.18317.1001 amd64fre
- THREAD_ATTRIBUTES:
- BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ
- PRIMARY_PROBLEM_CLASS: APPLICATION_FAULT
- PROBLEM_CLASSES:
- ID: [0n313]
- Type: [@ACCESS_VIOLATION]
- Class: Addendum
- Scope: BUCKET_ID
- Name: Omit
- Data: Omit
- PID: [Unspecified]
- TID: [0x17ac]
- Frame: [0] : EZFRD64!DllCanUnloadNow
- ID: [0n285]
- Type: [INVALID_POINTER_READ]
- Class: Primary
- Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
- BUCKET_ID
- Name: Add
- Data: Omit
- PID: [Unspecified]
- TID: [0x17ac]
- Frame: [0] : EZFRD64!DllCanUnloadNow
- LAST_CONTROL_TRANSFER: from 0000000010001b2a to 0000000010003654
- STACK_TEXT:
- 0000005f`977bf470 00000000`10001b2a : 00000000`96e60080 00000000`00000000 00000000`00000000 00000000`00000000 : EZFRD64!DllCanUnloadNow+0x2434
- 0000005f`977bf520 00007ffd`eb6f0f84 : 00000000`00000010 00007ffd`00000000 00000000`96e60080 00000000`00000000 : EZFRD64!DllCanUnloadNow+0x90a
- 0000005f`977bf590 00007ffd`eb6e5de0 : 00000000`96e60080 00007ffd`eb6f9a20 00000000`00000000 00000000`00000000 : winmm!DriverCallback+0x64
- 0000005f`977bf5d0 00007ffd`eb6e62f8 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : winmm!TimerCompletion+0x10c
- 0000005f`977bf630 00007ffd`f10281f4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : winmm!timeThread+0x78
- 0000005f`977bf770 00007ffd`f149a251 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x14
- 0000005f`977bf7a0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
- THREAD_SHA1_HASH_MOD_FUNC: 317ed40a43b01de0503c83df817a60cdde9bb9a3
- THREAD_SHA1_HASH_MOD_FUNC_OFFSET: eb54044ef9b16620cece1a5aa6a647703ff5f25e
- THREAD_SHA1_HASH_MOD: 9260b0a1782c7b74b1adb12cec74cb67610dea81
- FAULT_INSTR_CODE: 10017c83
- SYMBOL_STACK_INDEX: 0
- SYMBOL_NAME: EZFRD64!DllCanUnloadNow+2434
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: EZFRD64
- IMAGE_NAME: EZFRD64.dll
- DEBUG_FLR_IMAGE_TIMESTAMP: 4693218c
- STACK_COMMAND: ~6s ; .ecxr ; kb
- FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_EZFRD64.dll!DllCanUnloadNow
- BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_READ_EZFRD64!DllCanUnloadNow+2434
- FAILURE_EXCEPTION_CODE: c0000005
- FAILURE_IMAGE_NAME: EZFRD64.dll
- BUCKET_ID_IMAGE_STR: EZFRD64.dll
- FAILURE_MODULE_NAME: EZFRD64
- BUCKET_ID_MODULE_STR: EZFRD64
- FAILURE_FUNCTION_NAME: DllCanUnloadNow
- BUCKET_ID_FUNCTION_STR: DllCanUnloadNow
- BUCKET_ID_OFFSET: 2434
- BUCKET_ID_MODTIMEDATESTAMP: 4693218c
- BUCKET_ID_MODCHECKSUM: 0
- BUCKET_ID_MODVER_STR: 0.0.0.0
- BUCKET_ID_PREFIX_STR: APPLICATION_FAULT_INVALID_POINTER_READ_
- FAILURE_PROBLEM_CLASS: APPLICATION_FAULT
- FAILURE_SYMBOL_NAME: EZFRD64.dll!DllCanUnloadNow
- TARGET_TIME: 2019-03-26T17:05:21.000Z
- OSBUILD: 17763
- OSSERVICEPACK: 379
- SERVICEPACK_NUMBER: 0
- OS_REVISION: 0
- SUITE_MASK: 256
- PRODUCT_TYPE: 1
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- OSEDITION: Windows 10 WinNt SingleUserTS
- OS_LOCALE:
- USER_LCID: 0
- OSBUILD_TIMESTAMP: unknown_date
- BUILDDATESTAMP_STR: 180914-1434
- BUILDLAB_STR: rs5_release
- BUILDOSVER_STR: 10.0.17763.1.amd64fre.rs5_release.180914-1434
- ANALYSIS_SESSION_ELAPSED_TIME: f2da
- ANALYSIS_SOURCE: UM
- FAILURE_ID_HASH_STRING: um:invalid_pointer_read_c0000005_ezfrd64.dll!dllcanunloadnow
- FAILURE_ID_HASH: {e077aa74-b258-395e-57ee-ec42bef64fee}
- Followup: MachineOwner
- ---------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement