Code: Select all
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(10b0.1044): Access violation - code c0000005 (first/second chance not available)
eax=02eb0048 ebx=02ec1018 ecx=03d307e8 edx=701e1718 esi=02ec0fd8 edi=0030d630
eip=77935cf4 esp=0030d2f0 ebp=0030d300 iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00200246
ntdll!KiFastSystemCallRet:
77935cf4 c3 ret
0:000> K
ChildEBP RetAddr
0030d31c 779341ac ntdll!KiFastSystemCallRet
0030d320 7719b136 ntdll!ZwClose+0xc
0030d330 701e2349 kernel32!CloseHandle+0x40
0030d4c8 02fb0000 dbghelp!Win32LiveSystemProvider::OpenMapping+0x1fe
WARNING: Frame IP not in any known module. Following frames may be wrong.
0030d4e0 e778548b 0x2fb0000
0030d4e4 02eb0048 0xe778548b
0030d4e8 0030db3c 0x2eb0048
0030d4ec 00000000 0x30db3c