API tools faq
paste
arcline11

Crash Dump

arcline11
Jun 6th, 2016
203
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.56 KB | None | 0 0
raw download clone embed print report
  1. Instant Online Crash Analysis, brought to you by OSR Open Systems Resources, Inc.
  2.  
  3. Show DivPrimary Analysis
  4.  
  5. Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
  6. Online Crash Dump Analysis Service
  7. See http://www.osronline.com for more information
  8. Windows 8 Version 10586 MP (8 procs) Free x86 compatible
  9. Product: WinNt, suite: SingleUserTS Personal
  10. kernel32.dll version: 10.0.10586.0 (th2_release.151029-1700)
  11. Machine Name:
  12. Debug session time: Mon Jun 6 01:14:11.000 2016 (UTC - 4:00)
  13. System Uptime: not available
  14. Process Uptime: 0 days 0:00:32.000
  15. Kernel time: 0 days 0:00:08.000
  16. User time: 0 days 0:00:28.000
  17. TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\oca.ini, error 2
  18. TRIAGER: Could not open triage file : e:\dump_analysis\program\winxp\triage.ini, error 2
  19. TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\user.ini, error 2
  20. *******************************************************************************
  21. * *
  22. * Exception Analysis *
  23. * *
  24. *******************************************************************************
  25.  
  26. TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\guids.ini, error 2
  27. *** WARNING: Unable to verify timestamp for nvSCPAPI.dll
  28. *** ERROR: Module load completed but symbols could not be loaded for nvSCPAPI.dll
  29. *** WARNING: Unable to verify timestamp for hdtHighHeelNative.dll
  30. *** ERROR: Module load completed but symbols could not be loaded for hdtHighHeelNative.dll
  31. *** WARNING: Unable to verify timestamp for hdtPhysicsExtensions.dll
  32. *** ERROR: Module load completed but symbols could not be loaded for hdtPhysicsExtensions.dll
  33. *** WARNING: Unable to verify timestamp for XAudio2_6.dll
  34. *** WARNING: Unable to verify timestamp for nvd3dum.dll
  35. *** ERROR: Module load completed but symbols could not be loaded for nvd3dum.dll
  36. TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
  37. *** The OS name list needs to be updated! Unknown Windows version: 10.0 ***
  38.  
  39. FAULTING_IP:
  40. TESV+650a3d
  41. 00a50a3d 8b4704 mov eax,dword ptr [edi+4]
  42.  
  43. EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
  44. ExceptionAddress: 00a50a3d (TESV+0x00650a3d)
  45. ExceptionCode: c0000005 (Access violation)
  46. ExceptionFlags: 00000000
  47. NumberParameters: 2
  48. Parameter[0]: 00000000
  49. Parameter[1]: f82478ba
  50. Attempt to read from address f82478ba
  51.  
  52. DEFAULT_BUCKET_ID: INVALID_POINTER_READ
  53.  
  54. PROCESS_NAME: TESV.exe
  55.  
  56. ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
  57.  
  58. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
  59.  
  60. EXCEPTION_PARAMETER1: 00000000
  61.  
  62. EXCEPTION_PARAMETER2: f82478ba
  63.  
  64. READ_ADDRESS: f82478ba
  65.  
  66. FOLLOWUP_IP:
  67. TESV+650a3d
  68. 00a50a3d 8b4704 mov eax,dword ptr [edi+4]
  69.  
  70. FAULTING_THREAD: 0000168c
  71.  
  72. PRIMARY_PROBLEM_CLASS: INVALID_POINTER_READ
  73.  
  74. BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ
  75.  
  76. IP_ON_HEAP: 367ecce0
  77. The fault address in not in any loaded module, please check your build's rebase
  78. log at \bin\build_logs\timebuild\ntrebase.log for module which may
  79. contain the address if it were loaded.
  80.  
  81. FRAME_ONE_INVALID: 1
  82.  
  83. LAST_CONTROL_TRANSFER: from 367ecce0 to 00a50a3d
  84.  
  85. STACK_TEXT:
  86. WARNING: Stack unwind information not available. Following frames may be wrong.
  87. 224ef718 367ecce0 f82478c2 00000000 00a512a1 TESV+0x650a3d
  88. 00000000 00000000 00000000 00000000 00000000 0x367ecce0
  89.  
  90.  
  91. SYMBOL_STACK_INDEX: 0
  92.  
  93. SYMBOL_NAME: TESV+650a3d
  94.  
  95. FOLLOWUP_NAME: MachineOwner
  96.  
  97. MODULE_NAME: TESV
  98.  
  99. IMAGE_NAME: TESV.exe
  100.  
  101. DEBUG_FLR_IMAGE_TIMESTAMP: 51437ce5
  102.  
  103. STACK_COMMAND: ~37s; .ecxr ; kb
  104.  
  105. FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_TESV.exe!Unknown
  106.  
  107. BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_READ_TESV+650a3d
  108.  
  109. WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/TESV_exe/1_9_32_0/51437ce5/TESV_exe/1_9_32_0/51437ce5/c0000005/00650a3d.htm?Retriage=1
  110.  
  111. Followup: MachineOwner
  112. ---------
  113.  
  114.  
  115. This free analysis is provided by OSR Open Systems Resources, Inc.
  116. Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)
  117. Show DivLoaded Module List
  118.  
  119. Show DivRaw Stack Contents
  120.  
  121. Show DivDump Header Information
  122.  
  123. Show DivStrings
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!