Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Need help analyzing 0xc0000005 application crash dump

18 Jan 2016   #1
Fireplay

64 bit Windows 7
 
 
Need help analyzing 0xc0000005 application crash dump

Hey guys! I'm new here so i apologize in advance if i haven't supplied the required info. Now onto my problem -

My issue is not actually a BSOD but sporadic CTDs in many applications with the BEX message and the error code 0xc0000005. I've tried quite a few different things but none seem to work:
  • Ran memtest86 for a couple hours with 2 successful passes
    Reinstalled my applications
    Updated my graphics and sound card drivers
    Updated directx and C++ redistributable
    CCleaner to clean registry
    Defragged my C drive
    Chkdsk + sfc /scannow (no errors)
    Reset CPU and GPU back to stock settings
    Created a new user profile but applications still crashed
    Exceptions added for crashing games in firewall and AV
    Added game .exes to DEP exception list
    Updated my BIOS
    Ran applications in clean boot
    Full scanned system with AVAST
Short overview of my specs:
  • msi gtx 970
    intel i5 2500k
    650W antec PSU
    ASUS P8Z68V-Le Mobo
    Coolermaster Hyper 212EVO CPU cooler
    2 x 4gb DDR3 Kingston HyperX RAM
    1TB 7200RPM 32MB Seagate Barracuda HDD
    AVAST antivirus + Comodo Firewall
I attempted to analyze the minidump .dmp file gathered when one of my games (Maplestory) crashed but since i'm not very good at debugging, i can't seem to find the root of the exception.

So, i'm hoping that the experienced people here can take a look at the minidump linked below and locate the faulting module (i presume? or maybe its a hardware issue i overlooked).
I appreciate all the help i can get!! Thanks!

https://www.dropbox.com/s/hcfk6a9wtt....3624.zip?dl=0
(Sorry for the dropbox link but i can't seem to zip the .dmp file under 8mb)


My System SpecsSystem Spec
.
18 Jan 2016   #2
Fireplay

64 bit Windows 7
 
 

I've analyzed the crash dump on WinDbg with the command !analyze -v, and these are the lines of interest:

Code:
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for MapleStory.exe - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nmconew.dll - 
*** ERROR: Module load completed but symbols could not be loaded for BlackCall.aes
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for bdvid32.dll - 
*** WARNING: Unable to verify checksum for mss32.dll
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for mss32.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for Sound.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nvd3dum.dll - 

DUMP_CLASS: 2

DUMP_QUALIFIER: 400

CONTEXT:  0016d860 -- (.cxr 0x16d860)
eax=00000000 ebx=00000000 ecx=00000000 edx=00000000 esi=00000000 edi=00000000
eip=00000000 esp=0016dcc4 ebp=00000000 iopl=0         nv up ei pl zr na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
00000000 ??              ???
Resetting default scope

FAULTING_IP: 
+0
00000000 ??              ???

EXCEPTION_RECORD:  0016d810 -- (.exr 0x16d810)
ExceptionAddress: 00000000
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 00000000
Attempt to read from address 00000000

DEFAULT_BUCKET_ID:  STACK_OVERFLOW_NULL_EXH

PROCESS_NAME:  MapleStory.exe

OVERLAPPED_UNLOADED_MODULE: Address regions for 'wdmaud' and 'nstFA92.tmp (unloaded)' overlap

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE_STR:  c0000005

EXCEPTION_PARAMETER1:  00000008

EXCEPTION_PARAMETER2:  00000000

WRITE_ADDRESS:  00000000 

FOLLOWUP_IP: 
ntdll!RtlDispatchException+127
77c0b580 3bfb            cmp     edi,ebx

FAILED_INSTRUCTION_ADDRESS: 
+0
00000000 ??              ???

WATSON_BKT_PROCSTAMP:  5694a662

WATSON_BKT_PROCVER:  8.170.1.2

PROCESS_VER_PRODUCT:  Wizet MapleStory

WATSON_BKT_MODULE:  unknown

WATSON_BKT_MODVER:  0.0.0.0

WATSON_BKT_MODOFFSET:  0

WATSON_BKT_MODSTAMP:  bbbbbbb4

BUILD_VERSION_STRING:  6.1.7601.19045 (win7sp1_gdr.151019-1254)

MODLIST_WITH_TSCHKSUM_HASH:  0cd3e710db3fdc36d4fd5722cb75cf6d076c9b94

MODLIST_SHA1_HASH:  d21fc5afb11b73a2385672dd1e3437b0fcb880ea

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

DUMP_FLAGS:  94

DUMP_TYPE:  1

APP:  maplestory.exe

ANALYSIS_SESSION_HOST:  BENJAMIN-PC

ANALYSIS_SESSION_TIME:  01-18-2016 09:45:45.0617

ANALYSIS_VERSION: 10.0.10586.567 x86fre

RECURRING_STACK: From frames 0x5 to 0xffffffff

THREAD_ATTRIBUTES: 
LAST_CONTROL_TRANSFER:  from 00000000 to 00000000

FAULTING_THREAD:  ffffffff

THREAD_SHA1_HASH_MOD_FUNC:  57bb2ad57d6292afb8da2986516ce18cf4f35d16

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  b55985786a2598eac11426c81427a9d97efe1973

OS_LOCALE:  ENA

PROBLEM_CLASSES: 



STACK_OVERFLOW
    Tid    [0x0]
    Frame  [0x00]



SOFTWARE_NX_FAULT
    Tid    [0x1884]
    Frame  [0x00]: unknown!unknown



NULL
    Tid    [0x1884]
    Frame  [0x00]: unknown!unknown
    Failure Bucketing



EXH
    Tid    [0x1884]
    Frame  [0x3e8]
    Failure Bucketing


BUGCHECK_STR:  STACK_OVERFLOW_SOFTWARE_NX_FAULT_NULL_EXH

STACK_TEXT:  
00163a18 00000000 unknown!unknown+0x0
00163a1c 77c0b60d ntdll!ExecuteHandler2+0x26
00163a40 77c0b5df ntdll!ExecuteHandler+0x24
00163a64 77c0b580 ntdll!RtlDispatchException+0x127
00163af0 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00163fb4 00000000 unknown!unknown+0x0
00163fb8 77c0b60d ntdll!ExecuteHandler2+0x26
00163fdc 77c0b5df ntdll!ExecuteHandler+0x24
00164000 77c0b580 ntdll!RtlDispatchException+0x127
0016408c 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00164550 00000000 unknown!unknown+0x0
00164554 77c0b60d ntdll!ExecuteHandler2+0x26
00164578 77c0b5df ntdll!ExecuteHandler+0x24
0016459c 77c0b580 ntdll!RtlDispatchException+0x127
00164628 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00164aec 00000000 unknown!unknown+0x0
00164af0 77c0b60d ntdll!ExecuteHandler2+0x26
00164b14 77c0b5df ntdll!ExecuteHandler+0x24
00164b38 77c0b580 ntdll!RtlDispatchException+0x127
00164bc4 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00165088 00000000 unknown!unknown+0x0
0016508c 77c0b60d ntdll!ExecuteHandler2+0x26
001650b0 77c0b5df ntdll!ExecuteHandler+0x24
001650d4 77c0b580 ntdll!RtlDispatchException+0x127
00165160 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00165624 00000000 unknown!unknown+0x0
00165628 77c0b60d ntdll!ExecuteHandler2+0x26
0016564c 77c0b5df ntdll!ExecuteHandler+0x24
00165670 77c0b580 ntdll!RtlDispatchException+0x127
001656fc 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00165bc0 00000000 unknown!unknown+0x0
00165bc4 77c0b60d ntdll!ExecuteHandler2+0x26
00165be8 77c0b5df ntdll!ExecuteHandler+0x24
00165c0c 77c0b580 ntdll!RtlDispatchException+0x127
00165c98 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016615c 00000000 unknown!unknown+0x0
00166160 77c0b60d ntdll!ExecuteHandler2+0x26
00166184 77c0b5df ntdll!ExecuteHandler+0x24
001661a8 77c0b580 ntdll!RtlDispatchException+0x127
00166234 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
001666f8 00000000 unknown!unknown+0x0
001666fc 77c0b60d ntdll!ExecuteHandler2+0x26
00166720 77c0b5df ntdll!ExecuteHandler+0x24
00166744 77c0b580 ntdll!RtlDispatchException+0x127
001667d0 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00166c94 00000000 unknown!unknown+0x0
00166c98 77c0b60d ntdll!ExecuteHandler2+0x26
00166cbc 77c0b5df ntdll!ExecuteHandler+0x24
00166ce0 77c0b580 ntdll!RtlDispatchException+0x127
00166d6c 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00167230 00000000 unknown!unknown+0x0
00167234 77c0b60d ntdll!ExecuteHandler2+0x26
00167258 77c0b5df ntdll!ExecuteHandler+0x24
0016727c 77c0b580 ntdll!RtlDispatchException+0x127
00167308 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
001677cc 00000000 unknown!unknown+0x0
001677d0 77c0b60d ntdll!ExecuteHandler2+0x26
001677f4 77c0b5df ntdll!ExecuteHandler+0x24
00167818 77c0b580 ntdll!RtlDispatchException+0x127
001678a4 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00167d68 00000000 unknown!unknown+0x0
00167d6c 77c0b60d ntdll!ExecuteHandler2+0x26
00167d90 77c0b5df ntdll!ExecuteHandler+0x24
00167db4 77c0b580 ntdll!RtlDispatchException+0x127
00167e40 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00168304 00000000 unknown!unknown+0x0
00168308 77c0b60d ntdll!ExecuteHandler2+0x26
0016832c 77c0b5df ntdll!ExecuteHandler+0x24
00168350 77c0b580 ntdll!RtlDispatchException+0x127
001683dc 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
001688a0 00000000 unknown!unknown+0x0
001688a4 77c0b60d ntdll!ExecuteHandler2+0x26
001688c8 77c0b5df ntdll!ExecuteHandler+0x24
001688ec 77c0b580 ntdll!RtlDispatchException+0x127
00168978 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00168e3c 00000000 unknown!unknown+0x0
00168e40 77c0b60d ntdll!ExecuteHandler2+0x26
00168e64 77c0b5df ntdll!ExecuteHandler+0x24
00168e88 77c0b580 ntdll!RtlDispatchException+0x127
00168f14 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
001693d8 00000000 unknown!unknown+0x0
001693dc 77c0b60d ntdll!ExecuteHandler2+0x26
00169400 77c0b5df ntdll!ExecuteHandler+0x24
00169424 77c0b580 ntdll!RtlDispatchException+0x127
001694b0 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00169974 00000000 unknown!unknown+0x0
00169978 77c0b60d ntdll!ExecuteHandler2+0x26
0016999c 77c0b5df ntdll!ExecuteHandler+0x24
001699c0 77c0b580 ntdll!RtlDispatchException+0x127
00169a4c 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
00169f10 00000000 unknown!unknown+0x0
00169f14 77c0b60d ntdll!ExecuteHandler2+0x26
00169f38 77c0b5df ntdll!ExecuteHandler+0x24
00169f5c 77c0b580 ntdll!RtlDispatchException+0x127
00169fe8 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016a4ac 00000000 unknown!unknown+0x0
0016a4b0 77c0b60d ntdll!ExecuteHandler2+0x26
0016a4d4 77c0b5df ntdll!ExecuteHandler+0x24
0016a4f8 77c0b580 ntdll!RtlDispatchException+0x127
0016a584 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016aa48 00000000 unknown!unknown+0x0
0016aa4c 77c0b60d ntdll!ExecuteHandler2+0x26
0016aa70 77c0b5df ntdll!ExecuteHandler+0x24
0016aa94 77c0b580 ntdll!RtlDispatchException+0x127
0016ab20 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016afe4 00000000 unknown!unknown+0x0
0016afe8 77c0b60d ntdll!ExecuteHandler2+0x26
0016b00c 77c0b5df ntdll!ExecuteHandler+0x24
0016b030 77c0b580 ntdll!RtlDispatchException+0x127
0016b0bc 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016b580 00000000 unknown!unknown+0x0
0016b584 77c0b60d ntdll!ExecuteHandler2+0x26
0016b5a8 77c0b5df ntdll!ExecuteHandler+0x24
0016b5cc 77c0b580 ntdll!RtlDispatchException+0x127
0016b658 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016bb1c 00000000 unknown!unknown+0x0
0016bb20 77c0b60d ntdll!ExecuteHandler2+0x26
0016bb44 77c0b5df ntdll!ExecuteHandler+0x24
0016bb68 77c0b580 ntdll!RtlDispatchException+0x127
0016bbf4 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016c0b8 00000000 unknown!unknown+0x0
0016c0bc 77c0b60d ntdll!ExecuteHandler2+0x26
0016c0e0 77c0b5df ntdll!ExecuteHandler+0x24
0016c104 77c0b580 ntdll!RtlDispatchException+0x127
0016c190 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016c654 00000000 unknown!unknown+0x0
0016c658 77c0b60d ntdll!ExecuteHandler2+0x26
0016c67c 77c0b5df ntdll!ExecuteHandler+0x24
0016c6a0 77c0b580 ntdll!RtlDispatchException+0x127
0016c72c 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016cbf0 00000000 unknown!unknown+0x0
0016cbf4 77c0b60d ntdll!ExecuteHandler2+0x26
0016cc18 77c0b5df ntdll!ExecuteHandler+0x24
0016cc3c 77c0b580 ntdll!RtlDispatchException+0x127
0016ccc8 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016d18c 00000000 unknown!unknown+0x0
0016d190 77c0b60d ntdll!ExecuteHandler2+0x26
0016d1b4 77c0b5df ntdll!ExecuteHandler+0x24
0016d1d8 77c0b580 ntdll!RtlDispatchException+0x127
0016d264 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016d728 00000000 unknown!unknown+0x0
0016d72c 77c0b60d ntdll!ExecuteHandler2+0x26
0016d750 77c0b5df ntdll!ExecuteHandler+0x24
0016d774 77c0b580 ntdll!RtlDispatchException+0x127
0016d800 77bc0133 ntdll!KiUserExceptionDispatcher+0xf
0016dcc4 00000000 unknown!unknown+0x0


THREAD_SHA1_HASH_MOD:  197bf2ed8b6986a7448c1265c7936fed62e96949

FAULT_INSTR_CODE:  840ffb3b

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  ntdll!RtlDispatchException+127

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: ntdll

IMAGE_NAME:  ntdll.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  56258e62

STACK_COMMAND:  .cxr 16d860 ; kb ; dps 163a18 ; kb

FAILURE_BUCKET_ID:  STACK_OVERFLOW_NULL_EXH_c0000005_ntdll.dll!RtlDispatchException

BUCKET_ID:  STACK_OVERFLOW_SOFTWARE_NX_FAULT_NULL_EXH_NULL_IP_ntdll!RtlDispatchException+127

PRIMARY_PROBLEM_CLASS:  STACK_OVERFLOW_SOFTWARE_NX_FAULT_NULL_EXH_NULL_IP_ntdll!RtlDispatchException+127

BUCKET_ID_OFFSET:  127

BUCKET_ID_MODULE_STR:  ntdll

BUCKET_ID_MODTIMEDATESTAMP:  56258e62

BUCKET_ID_MODCHECKSUM:  142aa7

BUCKET_ID_MODVER_STR:  6.1.7601.19045

BUCKET_ID_PREFIX_STR:  STACK_OVERFLOW_SOFTWARE_NX_FAULT_NULL_EXH_NULL_IP_

FAILURE_PROBLEM_CLASS:  STACK_OVERFLOW_NULL_EXH

FAILURE_EXCEPTION_CODE:  c0000005

FAILURE_IMAGE_NAME:  ntdll.dll

FAILURE_FUNCTION_NAME:  RtlDispatchException

BUCKET_ID_FUNCTION_STR:  RtlDispatchException

FAILURE_SYMBOL_NAME:  ntdll.dll!RtlDispatchException

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/MapleStory.exe/8.170.1.2/5694a662/unknown/0.0.0.0/bbbbbbb4/c0000005/00000000.htm?Retriage=1

TARGET_TIME:  2016-01-16T08:21:18.000Z

OSBUILD:  7601

OSSERVICEPACK:  19045

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  256

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x86

OSNAME:  Windows 7

OSEDITION:  Windows 7 WinNt (Service Pack 1) SingleUserTS

USER_LCID:  0

OSBUILD_TIMESTAMP:  2015-10-20 11:47:00

BUILDDATESTAMP_STR:  151019-1254

BUILDLAB_STR:  win7sp1_gdr

BUILDOSVER_STR:  6.1.7601.19045

ANALYSIS_SESSION_ELAPSED_TIME: 4243b7

ANALYSIS_SOURCE:  UM

FAILURE_ID_HASH_STRING:  um:stack_overflow_null_exh_c0000005_ntdll.dll!rtldispatchexception

FAILURE_ID_HASH:  {d96e23c8-5a77-9db3-93e3-115c954ede1e}

Followup:     MachineOwner
I've tried and failed to find out what initially caused the exception handling recursion (i'm new to using WinDbg). So i'm hoping the more experienced people here can help me out!
My System SpecsSystem Spec
19 Jan 2016   #3
Fireplay

64 bit Windows 7
 
 

Help please? Anyone?
My System SpecsSystem Spec
.

20 Jan 2016   #4
Fireplay

64 bit Windows 7
 
 

I'm stumped on what to do next...any solutions appreciated, guys.
My System SpecsSystem Spec
Reply

 Need help analyzing 0xc0000005 application crash dump




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Q: Delete application Crash Dump files?
I have a few application crash dump files (.dmp) in ...\AppData\Local\CrashDumps. Can I delete them safely using Windows Explorer? I have already removed the reports from the Acton Center and Disk Cleanup did not touch them.
Performance & Maintenance
Cannot run any 32 bit application: error 0xc0000005
Hi. When I try to run any 32 bit application I get the following message: The application was unable to start correctly (0xc0000005). Click OK to close the application. The problem started to occur after using Windows Update yesterday. I have tried to use System Restore to return my system to...
Software
need some help analyzing ( anyone with crash dump analysis skills)
hey ic been getting these bsod frequently and would like to know the cause i have a feeling its a memory issue but dont know wat to do can anyone confirm that it is a memory issue here is the minidump files
BSOD Help and Support
help, NEED help analyzing crash dump file !!! PLEASE!
ok so iv been getting random bsod lately and it is becoming more frequent however i do not have knowledge on reading dump files i was wondering if someone could analyze the dump file and explain wats wrong THANK YOU !! IF YOU ARE ABLE TO DO SO PLEASE ASK TO SEND THE DMP FILE
BSOD Help and Support
Help debugging dump file from application crash
Hi all, I'm developing a large application using Visual Studio 2008 using VB.NET, with .NET Frameworks 2.0 . The application also make extensive usage of the DevExpress controls suit.
BSOD Help and Support
Help Analyzing Crash
Can someone please help me understand this crash. My computer crashed, but I am not sure why. I know my installation of an update failed, but I am not sure what this could be. The dump info is attached.
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 18:54.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App