Need help debugging VS6 app with Windbg and VS debugger ntdll!Breakpoint

T

Trips

Well-known member
Joined
Aug 7, 2010
Messages
2,788
<p style="margin:0in 0in 0pt <span style="font-family:Times New Roman; font-size:small Hi, I need some help to debug my application that is written in VSC++ 6.
<p style="margin:0in 0in 0pt <span style="font-family:Times New Roman; font-size:small Iâve run Windbg but donât know how to see which part of the code that is causing this breakpoint

<p style="margin:0in 0in 0pt <span style="font-family:Times New Roman; font-size:small ntdll!DbgBreakPoint:<br/>
7c90120e cc int 3
<span style="font-family:"Times New Roman"; font-size:12pt Here is the output from windbg. Error is coming from engine.exe<br/>
----------------------------OUTPUT->Windbg------------------<br/>
<span style="font-family:"Times New Roman"; font-size:12pt *** wait with pending attach<br/>
Symbol search path is: C:WINDOWSsymbolsdll;SRV*c:websymbols*http://msdl.microsoft.com/download/symbols<br/>
Executable search path is: <br/>
ModLoad: 00400000 00423000 C:OrilinkEngine.exe<br/>
ModLoad: 7c900000 7c9b2000 C:WINDOWSsystem32ntdll.dll<br/>
ModLoad: 7c800000 7c8f6000 C:WINDOWSsystem32kernel32.dll<br/>
ModLoad: 73dd0000 73ec1000 C:WINDOWSsystem32MFC42.DLL<br/>
ModLoad: 77c10000 77c68000 C:WINDOWSsystem32msvcrt.dll<br/>
ModLoad: 77f10000 77f59000 C:WINDOWSsystem32GDI32.dll<br/>
ModLoad: 7e410000 7e4a1000 C:WINDOWSsystem32USER32.dll<br/>
ModLoad: 77dd0000 77e6b000 C:WINDOWSsystem32ADVAPI32.dll<br/>
ModLoad: 77e70000 77f03000 C:WINDOWSsystem32RPCRT4.dll<br/>
ModLoad: 77fe0000 77ff1000 C:WINDOWSsystem32Secur32.dll<br/>
ModLoad: 7c9c0000 7d1d7000 C:WINDOWSsystem32SHELL32.dll<br/>
ModLoad: 77f60000 77fd6000 C:WINDOWSsystem32SHLWAPI.dll<br/>
ModLoad: 774e0000 7761e000 C:WINDOWSsystem32ole32.dll<br/>
ModLoad: 76080000 760e5000 C:WINDOWSsystem32MSVCP60.dll<br/>
ModLoad: 10000000 10061000 C:Orilinkbrand.dll<br/>
ModLoad: 5d090000 5d12a000 C:WINDOWSsystem32COMCTL32.dll<br/>
ModLoad: 77c00000 77c08000 C:WINDOWSsystem32VERSION.dll<br/>
ModLoad: 76390000 763ad000 C:WINDOWSsystem32IMM32.DLL<br/>
ModLoad: 773d0000 774d3000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202comctl32.dll<br/>
ModLoad: 74720000 7476c000 C:WINDOWSsystem32MSCTF.dll<br/>
ModLoad: 755c0000 755ee000 C:WINDOWSsystem32msctfime.ime<br/>
ModLoad: 74320000 7435d000 C:WINDOWSsystem32ODBC32.dll<br/>
ModLoad: 763b0000 763f9000 C:WINDOWSsystem32comdlg32.dll<br/>
ModLoad: 009a0000 009b7000 C:WINDOWSsystem32odbcint.dll<br/>
ModLoad: 77120000 771ab000 C:WINDOWSsystem32OLEAUT32.dll<br/>
ModLoad: 5fe80000 5fe9b000 C:WINDOWSsystem32odbccp32.dll<br/>
ModLoad: 76fd0000 7704f000 C:WINDOWSsystem32CLBCATQ.DLL<br/>
ModLoad: 77050000 77115000 C:WINDOWSsystem32COMRes.dll<br/>
ModLoad: 0f9a0000 0f9ab000 C:WINDOWSsystem32VBAJET32.DLL<br/>
ModLoad: 00be0000 00ea5000 C:WINDOWSsystem32xpsp2res.dll<br/>
ModLoad: 71ad0000 71ad9000 C:WINDOWSsystem32WSOCK32.dll<br/>
ModLoad: 71ab0000 71ac7000 C:WINDOWSsystem32WS2_32.dll<br/>
ModLoad: 71aa0000 71aa8000 C:WINDOWSsystem32WS2HELP.dll<br/>
ModLoad: 71a50000 71a8f000 C:WINDOWSsystem32mswsock.dll<br/>
ModLoad: 662b0000 66308000 C:WINDOWSsystem32hnetcfg.dll<br/>
ModLoad: 71a90000 71a98000 C:WINDOWSSystem32wshtcpip.dll<br/>
ModLoad: 00010000 00018000 C:Orilinkclock.dll<br/>
ModLoad: 017b0000 01817000 C:OrilinkScript.dll<br/>
ModLoad: 01820000 01831000 C:WINDOWSsystem32MSVCIRT.dll<br/>
ModLoad: 01e40000 01e61000 C:OrilinkWinDB.dll<br/>
ModLoad: 73000000 73026000 C:WINDOWSsystem32WINSPOOL.DRV<br/>
ModLoad: 1b800000 1b83a000 C:WINDOWSsystem32msjtes40.dll<br/>
ModLoad: 0f9c0000 0fa22000 C:WINDOWSsystem32expsrv.dll<br/>
(af0.4b8): Break instruction exception - code 80000003 (first chance)<br/>
eax=7ffd9000 ebx=00000001 ecx=00000002 edx=00000003 esi=00000004 edi=00000005<br/>
eip=7c90120e esp=0202ffcc ebp=0202fff4 iopl=0 nv up ei pl zr na pe nc<br/>
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246<br/>
ntdll!DbgBreakPoint:<br/>
7c90120e cc int 3<br/>
0:017> !analyze -v<br/>
*******************************************************************************<br/>
*
*<br/>
* Exception Analysis
*<br/>
*
*<br/>
*******************************************************************************
<span style="font-family:"Times New Roman"; font-size:12pt *** WARNING: Unable to verify checksum for C:OrilinkEngine.exe<br/>
*** ERROR: Module load completed but symbols could not be loaded for C:OrilinkEngine.exe<br/>
*** WARNING: Unable to verify checksum for C:Orilinkclock.dll<br/>
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:Orilinkclock.dll -
<br/>
*** WARNING: Unable to verify checksum for C:OrilinkScript.dll<br/>
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:OrilinkScript.dll -
<br/>
*** WARNING: Unable to verify checksum for C:OrilinkWinDB.dll<br/>
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:OrilinkWinDB.dll -
<br/>
GetPageUrlData failed, server returned HTTP status 404<br/>
URL requested: http://watson.microsoft.com/StageOne/Engine_exe/1_0_9_5/ntdll_dll/5_1_2600_5755/0000120e.htm?Retriage=1
http://watson.microsoft.com/StageOne/Engine_exe/1_0_9_5/ntdll_dll/5_1_2600_5755/0000120e.htm?Retriage=1
<span style="font-family:"Times New Roman"; font-size:12pt FAULTING_IP: <br/>
ntdll!DbgBreakPoint+0<br/>
7c90120e cc int 3
<span style="font-family:"Times New Roman"; font-size:12pt EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)<br/>
ExceptionAddress: 7c90120e (ntdll!DbgBreakPoint)<br/>
ExceptionCode: 80000003 (Break instruction exception)<br/>
ExceptionFlags: 00000000<br/>
NumberParameters: 3<br/>
Parameter[0]: 00000000<br/>
Parameter[1]: 00000002<br/>
Parameter[2]: 00000003
<span style="font-family:"Times New Roman"; font-size:12pt FAULTING_THREAD: 000004b8
<span style="font-family:"Times New Roman"; font-size:12pt DEFAULT_BUCKET_ID: STACKIMMUNE
<span style="font-family:"Times New Roman"; font-size:12pt PROCESS_NAME: Engine.exe
<span style="font-family:"Times New Roman"; font-size:12pt ERROR_CODE: (NTSTATUS) 0x80000003 - {EXCEPTION} Breakpoint A breakpoint has been reached.
<span style="font-family:"Times New Roman"; font-size:12pt EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid
<span style="font-family:"Times New Roman"; font-size:12pt EXCEPTION_PARAMETER1: 00000000
<span style="font-family:"Times New Roman"; font-size:12pt EXCEPTION_PARAMETER2: 00000002
<span style="font-family:"Times New Roman"; font-size:12pt EXCEPTION_PARAMETER3: 00000003
<span style="font-family:"Times New Roman"; font-size:12pt MOD_LIST: <ANALYSIS/>
<span style="font-family:"Times New Roman"; font-size:12pt NTGLOBALFLAG: 0
<span style="font-family:"Times New Roman"; font-size:12pt APPLICATION_VERIFIER_FLAGS: 0
<span style="font-family:"Times New Roman"; font-size:12pt ADDITIONAL_DEBUG_TEXT: Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]
<span style="font-family:"Times New Roman"; font-size:12pt LAST_CONTROL_TRANSFER: from 7c951e40 to 7c90120e
<span style="font-family:"Times New Roman"; font-size:12pt PRIMARY_PROBLEM_CLASS: STACKIMMUNE
<span style="font-family:"Times New Roman"; font-size:12pt BUGCHECK_STR: APPLICATION_FAULT_STACKIMMUNE
<span style="font-family:"Times New Roman"; font-size:12pt STACK_TEXT: <br/>
00000000 00000000 engine.exe+0x0
<span style="font-family:"Times New Roman"; font-size:12pt
<br/>
SYMBOL_NAME: engine.exe
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: engine
DEBUG_FLR_IMAGE_TIMESTAMP: 4cd28daf
STACK_COMMAND: ** Pseudo Context ** ; kb
BUCKET_ID: MANUAL_BREAKIN
IMAGE_NAME: C:OrilinkEngine.exe
FAILURE_BUCKET_ID: STACKIMMUNE_80000003_C:_Orilink_Engine.exe!Unknown
FOLLOWUP_IP: <br/>
Engine+0<br/>
00400000 4d dec ebp
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/Engine_exe/1_0_9_5/4cd28daf/ntdll_dll/5_1_2600_5755/49901d48/80000003/0000120e.htm?Retriage=1
http://watson.microsoft.com/StageOne/Engine_exe/1_0_9_5/4cd28daf/ntdll_dll/5_1_2600_5755/49901d48/80000003/0000120e.htm?Retriage=1
Followup: MachineOwner<br/>
---------
0:017> ub eip<br/>
ntdll!RtlDeactivateActivationContextUnsafeFast+0x16:<br/>
7c9011f3 8b7508 mov esi,dword ptr [ebp+8]<br/>
7c9011f6 8945fc mov dword ptr [ebp-4],eax<br/>
7c9011f9 0f85f7ec0000 jne ntdll!RtlDeactivateActivationContextUnsafeFast+0x28 (7c90fef6)<br/>
7c9011ff f6461010 test byte ptr [esi+10h],10h<br/>
7c901203 0f84edec0000 je ntdll!RtlDeactivateActivationContextUnsafeFast+0x28 (7c90fef6)<br/>
7c901209 5e pop esi<br/>
7c90120a c9 leave<br/>
7c90120b c20400 ret 4



View the full article
 

Similar threads

C
VS 2019 Application Still Won't Start
Replies
0
Views
121
Craig6213
C
R
Getting crash when calling CallWindowProc() function in Migration from VS6.0 to VS2015
Replies
0
Views
86
Ramanji Keerthi
R
EDN Admin
I need help displaying a total for rental charges on a calculator.
Replies
0
Views
84
EDN Admin
EDN Admin
EDN Admin
DLL abd Batch file
Replies
0
Views
121
EDN Admin
EDN Admin
EDN Admin
VB.Net satellite .dll with .res resource file and resource retrieval in VBA
Replies
0
Views
83
EDN Admin
EDN Admin
Back
Top