1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

DUMP Data Help.

Discussion in 'Legacy Windows' started by Juan medina, 2005/11/07.

  1. 2005/11/07
    Juan medina

    Juan medina Inactive Thread Starter

    Joined:
    2005/11/07
    Messages:
    1
    Likes Received:
    0
    Hi.

    I need help for analyze this dump. Exchange this run in this machinne.

    0:006> !analyze -v;r;kv;lmtn;
    *******************************************************************************
    * *
    * Exception Analysis *
    * *
    *******************************************************************************

    *************************************************************************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: ntdll!_PEB ***
    *** ***
    *************************************************************************
    *** WARNING: Unable to verify checksum for NAIShMem.dll
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for NAIShMem.dll -
    *** WARNING: Unable to verify checksum for GSEVS.DLL
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for GSEVS.DLL -
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for netif.dll -

    FAULTING_IP:
    store+246a5
    004246a5 8a4801 mov cl,[eax+0x1]

    EXCEPTION_RECORD: ffffffff -- (.exr ffffffffffffffff)
    ExceptionAddress: 004246a5 (store+0x000246a5)
    ExceptionCode: c0000005 (Access violation)
    ExceptionFlags: 00000000
    NumberParameters: 2
    Parameter[0]: 00000000
    Parameter[1]: 13ec3000
    Attempt to read from address 13ec3000

    FAULTING_THREAD: 00001058

    DEFAULT_BUCKET_ID: APPLICATION_FAULT

    PROCESS_NAME: store.exe

    ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

    READ_ADDRESS: 13ec3000

    BUGCHECK_STR: ACCESS_VIOLATION

    LAST_CONTROL_TRANSFER: from 00000000 to 004246a5

    STACK_TEXT:
    0115f32c 00000000 00000030 0f690d58 18d3a960 store+0x246a5


    FOLLOWUP_IP:
    store+246a5
    004246a5 8a4801 mov cl,[eax+0x1]

    SYMBOL_STACK_INDEX: 0

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: store+246a5

    MODULE_NAME: store

    IMAGE_NAME: store.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 3a5f64d7

    STACK_COMMAND: ~6s ; kb

    FAILURE_BUCKET_ID: ACCESS_VIOLATION_store+246a5

    BUCKET_ID: ACCESS_VIOLATION_store+246a5

    Followup: MachineOwner
    ---------

    eax=13ec2fff ebx=0115f2c8 ecx=13ec2f0c edx=0115f2c8 esi=13ec2fcc edi=00000004
    eip=004246a5 esp=0115f1e8 ebp=0115f32c iopl=0 nv up ei ng nz na po cy
    cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000287
    store+0x246a5:
    004246a5 8a4801 mov cl,[eax+0x1] ds:0023:13ec3000=??
    ChildEBP RetAddr Args to Child
    WARNING: Stack unwind information not available. Following frames may be wrong.
    0115f32c 00000000 00000030 0f690d58 18d3a960 store+0x246a5
    start end module name
    00240000 00246000 maxapiv1 maxapiv1.dll Sat Nov 01 16:00:27 1997 (345B7C4B)
    00400000 00685000 store store.exe Fri Jan 12 17:11:03 2001 (3A5F64D7)
    00790000 0081b000 MDBSZ MDBSZ.dll Thu Oct 19 22:40:16 2000 (39EFA280)
    0f720000 0f725000 GSEV0409 GSEV0409.DLL Wed Nov 27 15:49:46 2002 (3DE513CA)
    10000000 1000e000 logclass logclass.dll Thu Feb 28 05:12:24 2002 (3C7DE668)
    11460000 11481000 msv1_0 msv1_0.dll Sat Mar 06 04:52:23 2004 (40498337)
    12000000 121e0000 Mcscan32 Mcscan32.dll Thu Sep 23 14:04:53 2004 (41531045)
    62100000 62113000 gsapperf gsapperf.dll Tue Mar 26 15:47:27 2002 (3CA0D04F)
    62400000 6244a000 GSEVS GSEVS.DLL Sun Apr 03 05:52:44 2005 (424FBCEC)
    67200000 67211000 NAIShMem NAIShMem.dll Sun Nov 03 09:16:12 2002 (3DC5138C)
    68940000 68949000 RPCNS4 RPCNS4.dll Thu Jun 19 22:44:14 2003 (3EF274FE)
    6c370000 6c46b000 MFC42 MFC42.DLL Thu Jun 19 22:44:04 2003 (3EF274F4)
    6fbf0000 6fc08000 GAPI32 GAPI32.dll Mon Sep 11 14:28:35 2000 (39BD2453)
    6fc20000 6fc29000 address address.dll Fri Sep 22 21:19:24 2000 (39CC051C)
    6fc40000 6fc58000 libxds libxds.dll Tue Sep 19 14:18:27 2000 (39C7ADF3)
    6fc70000 6fc76000 mtxapiv1 mtxapiv1.dll Sat Nov 01 16:00:33 1997 (345B7C51)
    6fc80000 6fc8c000 x400omv1 x400omv1.dll Fri Sep 22 21:19:10 2000 (39CC050E)
    6fca0000 6fca4000 ESCPRINT ESCPRINT.dll Fri Oct 06 18:51:02 2000 (39DE5756)
    6fcb0000 6fcb8000 ISATQ ISATQ.dll Fri Oct 06 18:50:53 2000 (39DE574D)
    6fcc0000 6fcd4000 netif netif.dll Thu Oct 19 22:40:28 2000 (39EFA28C)
    6fcf0000 6fcfa000 edbbcli edbbcli.dll Sat Sep 09 04:15:33 2000 (39B9F1A5)
    6fd10000 6fd19000 eseback eseback.dll Mon Jan 15 17:04:24 2001 (3A6357C8)
    6fe90000 6ff5f000 ESE ESE.dll Sat Sep 09 04:15:04 2000 (39B9F188)
    6fff0000 6fff6000 EXCHMEM EXCHMEM.dll Sat Sep 09 03:39:26 2000 (39B9E92E)
    70a70000 70ad6000 SHLWAPI SHLWAPI.DLL Tue Dec 07 23:11:49 2004 (41B662E5)
    71710000 71794000 COMCTL32 COMCTL32.DLL Thu Aug 29 10:13:07 2002 (3D6E2BF3)
    74fd0000 74fee000 msafd msafd.dll Thu Jun 19 22:44:06 2003 (3EF274F6)
    74ff0000 75002000 MSWSOCK MSWSOCK.dll Thu Jun 19 22:44:08 2003 (3EF274F8)
    75010000 75017000 wshtcpip wshtcpip.dll Thu Jun 19 22:44:22 2003 (3EF27506)
    75020000 75028000 WS2HELP WS2HELP.DLL Tue Nov 30 06:31:09 1999 (3843995D)
    75030000 75044000 WS2_32 WS2_32.DLL Thu Jun 19 22:44:22 2003 (3EF27506)
    75050000 75058000 WSOCK32 WSOCK32.dll Thu Jun 19 22:44:22 2003 (3EF27506)
    75150000 7515f000 SAMLIB SAMLIB.dll Tue Mar 23 22:17:02 2004 (4060EF9E)
    75170000 751bf000 NETAPI32 NETAPI32.dll Thu Jun 10 12:58:10 2004 (40C89322)
    751c0000 751c6000 NETRAP NETRAP.dll Tue Nov 30 06:31:07 1999 (3843995B)
    75500000 75504000 SECURITY SECURITY.DLL Tue Nov 30 06:31:03 1999 (38439957)
    756e0000 756e5000 ntlsapi ntlsapi.dll Thu Jun 19 22:43:46 2003 (3EF274E2)
    759b0000 759b6000 LZ32 LZ32.DLL Thu Jun 19 22:43:46 2003 (3EF274E2)
    76620000 76630000 MPR MPR.DLL Thu Jun 17 19:05:28 2004 (40D223B8)
    76b30000 76b6e000 comdlg32 comdlg32.dll Thu Jun 19 22:43:43 2003 (3EF274DF)
    77320000 77337000 MPRAPI MPRAPI.DLL Wed Dec 01 04:37:29 1999 (3844D039)
    77340000 77353000 iphlpapi iphlpapi.dll Thu Jun 19 22:43:42 2003 (3EF274DE)
    77360000 77379000 DHCPCSVC DHCPCSVC.DLL Thu Jun 19 22:43:42 2003 (3EF274DE)
    77380000 773a3000 ADSLDPC ADSLDPC.DLL Thu Jun 19 22:43:42 2003 (3EF274DE)
    773b0000 773df000 ACTIVEDS ACTIVEDS.DLL Thu Jun 19 22:43:42 2003 (3EF274DE)
    77430000 77440000 MSASN1 MSASN1.DLL Tue Mar 23 22:17:00 2004 (4060EF9C)
    774c0000 774d1000 RASMAN RASMAN.DLL Thu Jun 19 22:43:42 2003 (3EF274DE)
    774e0000 77513000 RASAPI32 RASAPI32.DLL Thu Jun 19 22:43:42 2003 (3EF274DE)
    77520000 77525000 ICMP ICMP.DLL Wed Dec 01 04:37:29 1999 (3844D039)
    77530000 77552000 TAPI32 TAPI32.DLL Thu Jun 19 22:43:42 2003 (3EF274DE)
    777e0000 777e8000 winrnr winrnr.dll Wed Dec 01 04:37:27 1999 (3844D037)
    777f0000 777f5000 rasadhlp rasadhlp.dll Wed Dec 01 04:37:27 1999 (3844D037)
    77800000 7781e000 WINSPOOL WINSPOOL.DRV Thu Jun 19 22:43:41 2003 (3EF274DD)
    77820000 77827000 VERSION VERSION.dll Thu Jun 19 22:43:41 2003 (3EF274DD)
    77830000 7783e000 RTUTILS RTUTILS.DLL Wed Dec 01 04:37:27 1999 (3844D037)
    77880000 7790e000 SETUPAPI SETUPAPI.DLL Thu Jun 19 22:43:41 2003 (3EF274DD)
    77920000 77943000 IMAGEHLP IMAGEHLP.dll Thu Jun 19 22:43:41 2003 (3EF274DD)
    77950000 7797a000 WLDAP32 WLDAP32.DLL Thu Jun 19 22:43:41 2003 (3EF274DD)
    77980000 779a4000 DNSAPI DNSAPI.DLL Tue Mar 23 22:17:00 2004 (4060EF9C)
    779b0000 77a4b000 OLEAUT32 OLEAUT32.DLL Thu Jun 19 22:43:41 2003 (3EF274DD)
    77a50000 77b3f000 ole32 ole32.dll Thu Jan 13 22:27:08 2005 (41E71FEC)
    77bf0000 77c01000 NTDSAPI NTDSAPI.dll Thu Jun 19 22:43:41 2003 (3EF274DD)
    77d30000 77da1000 RPCRT4 RPCRT4.DLL Thu Mar 11 18:29:21 2004 (4050DA31)
    77e10000 77e6f000 USER32 USER32.dll Wed Dec 29 06:14:10 2004 (41D27562)
    77f40000 77f7b000 GDI32 GDI32.dll Thu Jun 17 19:05:28 2004 (40D223B8)
    77f80000 77ffd000 ntdll ntdll.dll Tue Mar 23 22:16:59 2004 (4060EF9B)
    78000000 78045000 MSVCRT MSVCRT.dll Tue Mar 11 14:55:17 2003 (3E6E3115)
    782c0000 782cc000 rnr20 rnr20.dll Thu Jun 19 22:43:41 2003 (3EF274DD)
    782f0000 78535000 SHELL32 SHELL32.DLL Fri Dec 10 06:27:29 2004 (41B96C01)
    7c0f0000 7c151000 USERENV USERENV.DLL Tue Aug 05 18:14:10 2003 (3F302C32)
    7c2d0000 7c332000 ADVAPI32 ADVAPI32.dll Tue Mar 23 22:17:00 2004 (4060EF9C)
    7c340000 7c34f000 Secur32 Secur32.dll Thu Jun 19 22:43:41 2003 (3EF274DD)
    7c570000 7c623000 KERNEL32 KERNEL32.dll Thu Jun 17 19:05:28 2004 (40D223B8)
    7c740000 7c7c7000 CRYPT32 CRYPT32.DLL Tue Mar 23 22:17:00 2004 (4060EF9C)
     
  2. 2005/11/08
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    You'll need to get the correct symbol files from Microsoft. Also see this page below
     
    Arie,
    #2

  3. to hide this advert.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.