E
EnricoSutera
It has happened some times after some Windows updates. I've no idea what it may be. The OS generates a mdmp file which however I'm not able to understand. I've used Windbg to open it and it shows what follows. Anyone can help me? Thank you
Microsoft (R) Windows Debugger Version 10.0.19528.1000 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [D:\SteamLibrary\steamapps\common\Age2HD\aok hd_5080000_crash_2020_3_16T22_32_30C0.mdmp]
Comment: ''
User Mini Dump File: Only registers, stack and portions of memory are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Version 18363 MP (8 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS Personal
18362.1.amd64fre.19h1_release.190318-1202
Machine Name:
Debug session time: Mon Mar 16 23:32:31.000 2020 (UTC + 1:00)
System Uptime: not available
Process Uptime: 0 days 1:02:07.000
................................................................
............................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(292c.49dc): Access violation - code c0000005 (first/second chance not available)
For analysis of this file, run !analyze -v
eax=00000000 ebx=0f4a1048 ecx=00000000 edx=00000000 esi=0f4a0ff8 edi=0f4a1008
eip=76f52c4c esp=00bbc6b8 ebp=00bbc6c4 iopl=0 nv up ei pl nz na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000206
ntdll!NtGetContextThread+0xc:
76f52c4c c20800 ret 8
0:000> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
KEY_VALUES_STRING: 1
Key : AV.Dereference
Value: NullPtr
Key : AV.Fault
Value: Read
Key : Analysis.CPU.Sec
Value: 0
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on LAPTOP-727RUKT3
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 51
Key : Analysis.Memory.CommitPeak.Mb
Value: 140
Key : Analysis.System
Value: CreateObject
Key : Timeline.Process.Start.DeltaSec
Value: 3727
ADDITIONAL_XML: 1
CONTEXT: (.ecxr)
eax=88780096 ebx=276bf758 ecx=00000000 edx=00000000 esi=10e4c638 edi=276bf710
eip=00fdc710 esp=00bbf3fc ebp=00bbf420 iopl=0 nv up ei pl zr na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
AoK_HD+0x6c710:
00fdc710 8b01 mov eax,dword ptr [ecx] ds:002b:00000000=????????
Resetting default scope
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00fdc710 (AoK_HD+0x0006c710)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000
PROCESS_NAME: AoK HD.exe
READ_ADDRESS: 00000000
ERROR_CODE: (NTSTATUS) 0xc0000005 - L'istruzione a 0x%p ha fatto riferimento alla memoria a 0x%p. La memoria non poteva essere %s.
EXCEPTION_CODE_STR: c0000005
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 00000000
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
00bbf420 00fdc303 7ad6081b 07d7a720 00bbf494 AoK_HD+0x6c710
00bbf444 00fdcfa4 00bbf468 00000001 7ad60823 AoK_HD+0x6c303
00bbf47c 00fdd55c 00bbf494 00000001 7ad608f7 AoK_HD+0x6cfa4
00bbf4a8 00fdc173 00000001 3f800000 3f800000 AoK_HD+0x6d55c
00bbf4e4 00fe92df 00000001 00000030 000003b4 AoK_HD+0x6c173
00bbf504 00ff4205 00000001 00000030 000003b4 AoK_HD+0x792df
00bbf52c 010007f8 00000001 00000030 000003b4 AoK_HD+0x84205
00bbf54c 012328e0 00000001 00000030 000003b4 AoK_HD+0x907f8
00bbf56c 00ff5230 00000001 00000030 000003b4 AoK_HD+0x2c28e0
00bbf5c4 0123c652 0017059a 00000201 00000005 AoK_HD+0x85230
00bbf5ec 010b303e 0017059a 00000201 00000005 AoK_HD+0x2cc652
00bbf648 010b184a 06bcfaa8 0017059a 00000201 AoK_HD+0x14303e
00bbf664 74f4444b 0017059a 00000201 00000005 AoK_HD+0x14184a
00bbf690 74f24f8c 010b1830 0017059a 00000201 user32!_InternalCallWinProc+0x2b
00bbf774 74f240de 010b1830 00000000 00000201 user32!UserCallWinProcCheckWow+0x3ac
00bbf7e8 74f23ec0 00bbf601 00bbf804 65e843e0 user32!DispatchMessageWorker+0x20e
00bbf7f4 65e843e0 06c9b6a0 06c9b780 00bbf874 user32!DispatchMessageW+0x10
00bbf804 011a5b34 06c9b6a0 7ad6042b ffffffff gameoverlayrenderer!OverlayHookD3D3+0x1d540
00bbf874 01343c4c 7ad60093 00000000 00f70000 AoK_HD+0x235b34
00bbfccc 01344235 00f70000 00000000 01be5b94 AoK_HD+0x3d3c4c
00bbfd0c 014459fc 00f70000 00000000 01be5b94 AoK_HD+0x3d4235
00bbfd58 76e06359 00d00000 76e06340 00bbfdc4 AoK_HD+0x4d59fc
00bbfd68 76f47b74 00d00000 e753734e 00000000 kernel32!BaseThreadInitThunk+0x19
00bbfdc4 76f47b44 ffffffff 76f68f25 00000000 ntdll!__RtlUserThreadStart+0x2f
00bbfdd4 00000000 01445a80 00d00000 00000000 ntdll!_RtlUserThreadStart+0x1b
SYMBOL_NAME: AoK_HD+6c710
MODULE_NAME: AoK_HD
IMAGE_NAME: AoK_HD.exe
STACK_COMMAND: ~0s ; .ecxr ; kb
FAILURE_BUCKET_ID: NULL_POINTER_READ_c0000005_AoK_HD.exe!Unknown
OS_VERSION: 10.0.18362.1
BUILDLAB_STR: 19h1_release
OSPLATFORM_TYPE: x86
OSNAME: Windows 10
FAILURE_ID_HASH: {0f16eaff-c0f1-27f9-c401-449f470a3b10}
Followup: MachineOwner
---------
Continue reading...
Microsoft (R) Windows Debugger Version 10.0.19528.1000 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [D:\SteamLibrary\steamapps\common\Age2HD\aok hd_5080000_crash_2020_3_16T22_32_30C0.mdmp]
Comment: ''
User Mini Dump File: Only registers, stack and portions of memory are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Version 18363 MP (8 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS Personal
18362.1.amd64fre.19h1_release.190318-1202
Machine Name:
Debug session time: Mon Mar 16 23:32:31.000 2020 (UTC + 1:00)
System Uptime: not available
Process Uptime: 0 days 1:02:07.000
................................................................
............................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(292c.49dc): Access violation - code c0000005 (first/second chance not available)
For analysis of this file, run !analyze -v
eax=00000000 ebx=0f4a1048 ecx=00000000 edx=00000000 esi=0f4a0ff8 edi=0f4a1008
eip=76f52c4c esp=00bbc6b8 ebp=00bbc6c4 iopl=0 nv up ei pl nz na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000206
ntdll!NtGetContextThread+0xc:
76f52c4c c20800 ret 8
0:000> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
KEY_VALUES_STRING: 1
Key : AV.Dereference
Value: NullPtr
Key : AV.Fault
Value: Read
Key : Analysis.CPU.Sec
Value: 0
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on LAPTOP-727RUKT3
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 51
Key : Analysis.Memory.CommitPeak.Mb
Value: 140
Key : Analysis.System
Value: CreateObject
Key : Timeline.Process.Start.DeltaSec
Value: 3727
ADDITIONAL_XML: 1
CONTEXT: (.ecxr)
eax=88780096 ebx=276bf758 ecx=00000000 edx=00000000 esi=10e4c638 edi=276bf710
eip=00fdc710 esp=00bbf3fc ebp=00bbf420 iopl=0 nv up ei pl zr na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
AoK_HD+0x6c710:
00fdc710 8b01 mov eax,dword ptr [ecx] ds:002b:00000000=????????
Resetting default scope
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00fdc710 (AoK_HD+0x0006c710)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000
PROCESS_NAME: AoK HD.exe
READ_ADDRESS: 00000000
ERROR_CODE: (NTSTATUS) 0xc0000005 - L'istruzione a 0x%p ha fatto riferimento alla memoria a 0x%p. La memoria non poteva essere %s.
EXCEPTION_CODE_STR: c0000005
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 00000000
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
00bbf420 00fdc303 7ad6081b 07d7a720 00bbf494 AoK_HD+0x6c710
00bbf444 00fdcfa4 00bbf468 00000001 7ad60823 AoK_HD+0x6c303
00bbf47c 00fdd55c 00bbf494 00000001 7ad608f7 AoK_HD+0x6cfa4
00bbf4a8 00fdc173 00000001 3f800000 3f800000 AoK_HD+0x6d55c
00bbf4e4 00fe92df 00000001 00000030 000003b4 AoK_HD+0x6c173
00bbf504 00ff4205 00000001 00000030 000003b4 AoK_HD+0x792df
00bbf52c 010007f8 00000001 00000030 000003b4 AoK_HD+0x84205
00bbf54c 012328e0 00000001 00000030 000003b4 AoK_HD+0x907f8
00bbf56c 00ff5230 00000001 00000030 000003b4 AoK_HD+0x2c28e0
00bbf5c4 0123c652 0017059a 00000201 00000005 AoK_HD+0x85230
00bbf5ec 010b303e 0017059a 00000201 00000005 AoK_HD+0x2cc652
00bbf648 010b184a 06bcfaa8 0017059a 00000201 AoK_HD+0x14303e
00bbf664 74f4444b 0017059a 00000201 00000005 AoK_HD+0x14184a
00bbf690 74f24f8c 010b1830 0017059a 00000201 user32!_InternalCallWinProc+0x2b
00bbf774 74f240de 010b1830 00000000 00000201 user32!UserCallWinProcCheckWow+0x3ac
00bbf7e8 74f23ec0 00bbf601 00bbf804 65e843e0 user32!DispatchMessageWorker+0x20e
00bbf7f4 65e843e0 06c9b6a0 06c9b780 00bbf874 user32!DispatchMessageW+0x10
00bbf804 011a5b34 06c9b6a0 7ad6042b ffffffff gameoverlayrenderer!OverlayHookD3D3+0x1d540
00bbf874 01343c4c 7ad60093 00000000 00f70000 AoK_HD+0x235b34
00bbfccc 01344235 00f70000 00000000 01be5b94 AoK_HD+0x3d3c4c
00bbfd0c 014459fc 00f70000 00000000 01be5b94 AoK_HD+0x3d4235
00bbfd58 76e06359 00d00000 76e06340 00bbfdc4 AoK_HD+0x4d59fc
00bbfd68 76f47b74 00d00000 e753734e 00000000 kernel32!BaseThreadInitThunk+0x19
00bbfdc4 76f47b44 ffffffff 76f68f25 00000000 ntdll!__RtlUserThreadStart+0x2f
00bbfdd4 00000000 01445a80 00d00000 00000000 ntdll!_RtlUserThreadStart+0x1b
SYMBOL_NAME: AoK_HD+6c710
MODULE_NAME: AoK_HD
IMAGE_NAME: AoK_HD.exe
STACK_COMMAND: ~0s ; .ecxr ; kb
FAILURE_BUCKET_ID: NULL_POINTER_READ_c0000005_AoK_HD.exe!Unknown
OS_VERSION: 10.0.18362.1
BUILDLAB_STR: 19h1_release
OSPLATFORM_TYPE: x86
OSNAME: Windows 10
FAILURE_ID_HASH: {0f16eaff-c0f1-27f9-c401-449f470a3b10}
Followup: MachineOwner
---------
Continue reading...