Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 0:075> !analyze -v
- *******************************************************************************
- * *
- * Exception Analysis *
- * *
- *******************************************************************************
- *** WARNING: Unable to verify checksum for bink2w64.dll
- KEY_VALUES_STRING: 1
- Key : AV.Fault
- Value: Read
- Key : Timeline.OS.Boot.DeltaSec
- Value: 74796
- Key : Timeline.Process.Start.DeltaSec
- Value: 1318
- PROCESSES_ANALYSIS: 1
- SERVICE_ANALYSIS: 1
- STACKHASH_ANALYSIS: 1
- TIMELINE_ANALYSIS: 1
- Timeline: !analyze.Start
- Name: <blank>
- Time: 2019-09-10T20:11:15.930Z
- Diff: 207637930 mSec
- Timeline: Dump.Current
- Name: <blank>
- Time: 2019-09-08T10:30:38.0Z
- Diff: 0 mSec
- Timeline: Process.Start
- Name: <blank>
- Time: 2019-09-08T10:08:40.0Z
- Diff: 1318000 mSec
- Timeline: OS.Boot
- Name: <blank>
- Time: 2019-09-07T13:44:02.0Z
- Diff: 74796000 mSec
- DUMP_CLASS: 2
- DUMP_QUALIFIER: 400
- CONTEXT: (.ecxr)
- rax=0000000002db31f6 rbx=0000000000000000 rcx=00000165bd4d3000
- rdx=00000165bd4cf000 rsi=00000165bd4d3007 rdi=0000000000009ff3
- rip=00007ff62d56bc55 rsp=00000024209ff888 rbp=00000165bd4d3000
- r8=0000000000003ffa r9=00000000b4174c6a r10=00007ff62c1e5a98
- r11=00000165bd4d9000 r12=0000000004722f8c r13=0000000000000079
- r14=00000024209ffa80 r15=000000000000000d
- iopl=0 nv up ei ng nz ac po cy
- cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010297
- GTA5+0x396bc55:
- 00007ff6`2d56bc55 0fb601 movzx eax,byte ptr [rcx] ds:00000165`bd4d3000=??
- Resetting default scope
- FAULTING_IP:
- GTA5+396bc55
- 00007ff6`2d56bc55 0fb601 movzx eax,byte ptr [rcx]
- EXCEPTION_RECORD: (.exr -1)
- ExceptionAddress: 00007ff62d56bc55 (GTA5+0x000000000396bc55)
- ExceptionCode: c0000005 (Access violation)
- ExceptionFlags: 00000000
- NumberParameters: 2
- Parameter[0]: 0000000000000000
- Parameter[1]: 00000165bd4d3000
- Attempt to read from address 00000165bd4d3000
- DEFAULT_BUCKET_ID: INVALID_POINTER_READ
- PROCESS_NAME: GTA5.exe
- FOLLOWUP_IP:
- GTA5+396bc55
- 00007ff6`2d56bc55 0fb601 movzx eax,byte ptr [rcx]
- READ_ADDRESS: 00000165bd4d3000
- ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
- EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
- EXCEPTION_CODE_STR: c0000005
- EXCEPTION_PARAMETER1: 0000000000000000
- EXCEPTION_PARAMETER2: 00000165bd4d3000
- WATSON_BKT_PROCSTAMP: 5d373e5a
- WATSON_BKT_PROCVER: 1.0.1737.0
- PROCESS_VER_PRODUCT: Grand Theft Auto V
- WATSON_BKT_MODULE: GTA5.exe
- WATSON_BKT_MODSTAMP: 5d373e5a
- WATSON_BKT_MODOFFSET: 396bc55
- WATSON_BKT_MODVER: 1.0.1737.0
- MODULE_VER_PRODUCT: Grand Theft Auto V
- BUILD_VERSION_STRING: 17134.1.amd64fre.rs4_release.180410-1804
- MODLIST_WITH_TSCHKSUM_HASH: 783dd33205c3684f25e03d14553a31f4735753a4
- MODLIST_SHA1_HASH: c4be2a638ff4d99948287ba1fccbac52f44ee8a0
- COMMENT:
- *** "C:\dumps\procdump.exe" -accepteula -ma -j "C:\dumps" 13140 516 00000164B9360000
- *** Just-In-Time debugger. PID: 13140 Event Handle: 516 JIT Context: .jdinfo 0x164b9360000
- NTGLOBALFLAG: 0
- APPLICATION_VERIFIER_FLAGS: 0
- PRODUCT_TYPE: 1
- SUITE_MASK: 272
- DUMP_FLAGS: 8000c07
- DUMP_TYPE: 3
- ANALYSIS_SESSION_HOST: WIBBLE
- ANALYSIS_SESSION_TIME: 09-10-2019 21:11:15.0930
- ANALYSIS_VERSION: 10.0.18362.1 amd64fre
- THREAD_ATTRIBUTES:
- OS_LOCALE: DEA
- BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ
- PRIMARY_PROBLEM_CLASS: APPLICATION_FAULT
- PROBLEM_CLASSES:
- ID: [0n313]
- Type: [@ACCESS_VIOLATION]
- Class: Addendum
- Scope: BUCKET_ID
- Name: Omit
- Data: Omit
- PID: [Unspecified]
- TID: [0x538]
- Frame: [0] : GTA5
- ID: [0n285]
- Type: [INVALID_POINTER_READ]
- Class: Primary
- Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
- BUCKET_ID
- Name: Add
- Data: Omit
- PID: [Unspecified]
- TID: [0x538]
- Frame: [0] : GTA5
- IP_ON_HEAP: ffffffffffffffff
- The fault address in not in any loaded module, please check your build's rebase
- log at <releasedir>\bin\build_logs\timebuild\ntrebase.log for module which may
- contain the address if it were loaded.
- FRAME_ONE_INVALID: 1
- LAST_CONTROL_TRANSFER: from ffffffffffffffff to 00007ff62d56bc55
- STACK_TEXT:
- 00000024`209ff888 ffffffff`ffffffff : 00000000`00000007 00007ff6`2a631d74 00000000`00000000 00000024`209ffa00 : GTA5+0x396bc55
- 00000024`209ff890 00000000`00000007 : 00007ff6`2a631d74 00000000`00000000 00000024`209ffa00 00000024`209ffa80 : 0xffffffff`ffffffff
- 00000024`209ff898 00007ff6`2a631d74 : 00000000`00000000 00000024`209ffa00 00000024`209ffa80 00007ff6`2c1e5a98 : 0x7
- 00000024`209ff8a0 00007ff6`2a636a7a : 00000000`00000004 00000000`00000030 00000024`209ffa30 00000000`00000000 : GTA5+0xa31d74
- 00000024`209ff930 00007ff6`2ae8d209 : 00007ff6`2c91e300 00007ff6`2c91e440 00007ff6`00000000 00000000`00000029 : GTA5+0xa36a7a
- 00000024`209ffa80 00007ff6`2ae8e852 : 00007ff6`2c59dfc8 00007ff6`2ae8d128 00000000`00000000 00000000`00000000 : GTA5+0x128d209
- 00000024`209ffab0 00007ff9`a69f4034 : 00000000`00009f80 00000000`00000000 00000000`00000000 00000000`00000000 : GTA5+0x128e852
- 00000024`209ffb30 00007ff9`a7b23691 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x14
- 00000024`209ffb60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
- THREAD_SHA1_HASH_MOD_FUNC: 047f4345f362b964f275a21530101809305fc0de
- THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 4697ca9477b19ebb6b1b4e595f8e26332c8b83e5
- THREAD_SHA1_HASH_MOD: 10ff40e485654c6adb5916bb3c454965d42f693b
- FAULT_INSTR_CODE: 4401b60f
- SYMBOL_STACK_INDEX: 0
- SYMBOL_NAME: GTA5+396bc55
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: GTA5
- IMAGE_NAME: GTA5.exe
- DEBUG_FLR_IMAGE_TIMESTAMP: 5d373e5a
- STACK_COMMAND: ~75s ; .ecxr ; kb
- FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_GTA5.exe!Unknown
- BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_READ_GTA5+396bc55
- FAILURE_EXCEPTION_CODE: c0000005
- FAILURE_IMAGE_NAME: GTA5.exe
- BUCKET_ID_IMAGE_STR: GTA5.exe
- FAILURE_MODULE_NAME: GTA5
- BUCKET_ID_MODULE_STR: GTA5
- FAILURE_FUNCTION_NAME: Unknown
- BUCKET_ID_FUNCTION_STR: Unknown
- BUCKET_ID_OFFSET: 396bc55
- BUCKET_ID_MODTIMEDATESTAMP: 5d373e5a
- BUCKET_ID_MODCHECKSUM: 476d608
- BUCKET_ID_MODVER_STR: 1.0.1737.0
- BUCKET_ID_PREFIX_STR: APPLICATION_FAULT_INVALID_POINTER_READ_
- FAILURE_PROBLEM_CLASS: APPLICATION_FAULT
- FAILURE_SYMBOL_NAME: GTA5.exe!Unknown
- WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/GTA5.exe/1.0.1737.0/5d373e5a/GTA5.exe/1.0.1737.0/5d373e5a/c0000005/0396bc55.htm?Retriage=1
- TARGET_TIME: 2019-09-08T10:30:38.000Z
- OSBUILD: 17134
- OSSERVICEPACK: 753
- SERVICEPACK_NUMBER: 0
- OS_REVISION: 0
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- OSEDITION: Windows 10 WinNt SingleUserTS
- USER_LCID: 0
- OSBUILD_TIMESTAMP: unknown_date
- BUILDDATESTAMP_STR: 180410-1804
- BUILDLAB_STR: rs4_release
- BUILDOSVER_STR: 10.0.17134.1.amd64fre.rs4_release.180410-1804
- ANALYSIS_SESSION_ELAPSED_TIME: 16248
- ANALYSIS_SOURCE: UM
- FAILURE_ID_HASH_STRING: um:invalid_pointer_read_c0000005_gta5.exe!unknown
- FAILURE_ID_HASH: {7bef1ee3-a18b-8a05-033e-2ff4925df613}
- Followup: MachineOwner
- ---------
- 0:075> !mex.t -v
- DbgID ThreadID User Kernel Create Time (UTC)
- 75 538 (0n1336) 5s.093 546ms 09/08/2019 10:08:54.303 AM
- # Memory Child-SP Return Call Site
- 0 00000024209fe378 00007ff9a3f56099 ntdll!NtWaitForMultipleObjects+0x14
- 1 768 B 00000024209fe380 00007ff9a3f55f8e KERNELBASE!WaitForMultipleObjectsEx+0xf9
- 2 64 B 00000024209fe680 00007ff9a6a4702b KERNELBASE!WaitForMultipleObjects+0xe
- 3 288 B 00000024209fe6c0 00007ff9a6a46adc kernel32!WerpReportFaultInternal+0x51b
- 4 64 B 00000024209fe7e0 00007ff9a3ffc0fb kernel32!WerpReportFault+0xac
- 5 272 B 00000024209fe820 00007ff9a7b53167 KERNELBASE!UnhandledExceptionFilter+0x35b
- 6 48 B 00000024209fe930 00007ff9a7b3b5e6 ntdll!RtlUserThreadStart$filt$0+0x38
- 7 112 B 00000024209fe960 00007ff9a7b4f7dd ntdll!_C_specific_handler+0x96
- 8 48 B 00000024209fe9d0 00007ff9a7abd856 ntdll!RtlpExecuteHandlerForException+0xd
- 9 1.75 KB 00000024209fea00 00007ff9a7b4e70e ntdll!RtlDispatchException+0x3c6
- a 1.88 KB 00000024209ff100 00007ff62d56bc55 ntdll!KiUserExceptionDispatch+0x2e
- b 8 B 00000024209ff888 ffffffffffffffff GTA5+0x396bc55
- c 8 B 00000024209ff890 0000000000000007 0xffffffffffffffff
- d 8 B 00000024209ff898 00007ff62a631d74 0x7
- e 144 B 00000024209ff8a0 00007ff62a636a7a GTA5+0xa31d74
- f 336 B 00000024209ff930 00007ff62ae8d209 GTA5+0xa36a7a
- 10 48 B 00000024209ffa80 00007ff62ae8e852 GTA5+0x128d209
- 11 128 B 00000024209ffab0 00007ff9a69f4034 GTA5+0x128e852
- 12 48 B 00000024209ffb30 00007ff9a7b23691 kernel32!BaseThreadInitThunk+0x14
- 13 80 B 00000024209ffb60 0000000000000000 ntdll!RtlUserThreadStart+0x21
- Module Byte Count Stack Usage
- ========== ========== ===========
- ntdll 4008 3.91 KB
- KERNELBASE 1104 1.08 KB
- GTA5 664 664 B
- kernel32 400 400 B
- unknown 16 16 B
- Total Stack Usage: 6.05 KB
Advertisement
Add Comment
Please, Sign In to add comment