Skip to content

Instantly share code, notes, and snippets.

@kennykerr
Created May 1, 2026 15:11
Show Gist options
  • Select an option

  • Save kennykerr/ad826e754a050e2fd3ceb876a311bb0c to your computer and use it in GitHub Desktop.

Select an option

Save kennykerr/ad826e754a050e2fd3ceb876a311bb0c to your computer and use it in GitHub Desktop.
No .natvis files found at C:\WINDOWS\SYSTEM32\Visualizers.
No .natvis files found at C:\Users\kekerr\AppData\Local\Dbg\Visualizers.
Microsoft (R) Windows Debugger Version 10.0.26608.1000 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\kekerr\AppData\Local\CrashDumps\sample_xaml_app.exe.178404.dmp]
User Mini Dump File with Full Memory: Only application data is available
Symbol search path is: srv*
Executable search path is:
Windows 10 Version 26608 MP (24 procs) Free x64
Product: WinNt, suite: SingleUserTS
Edition build lab: 26608.1000.amd64fre.ge_current_directwinpd.260423-1718
Debug session time: Fri May 1 10:05:45.000 2026 (UTC - 5:00)
System Uptime: 5 days 9:17:33.101
Process Uptime: 0 days 0:00:05.000
................................................................
....................
Loading unloaded module list
.
Unable to add extension DLL: ntsdexts
Unable to add extension DLL: uext
Unable to add extension DLL: exts
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(2b8e4.7034): Access violation - code c0000005 (first/second chance not available)
+------------------------------------------------------------------------+
| This target supports Hardware-enforced Stack Protection. A HW based |
| "Shadow Stack" may be available to assist in debugging and analysis. |
| See aka.ms/userhsp for more info. |
| |
| dps @ssp |
| |
+------------------------------------------------------------------------+
For analysis of this file, run !analyze -v
ntdll!ZwWaitForMultipleObjects+0x14:
00007ffc`9df60c84 c3 ret
0:007> cdb: Reading initial command '.symfix; .reload /f; !sym noisy; .ecxr; r; kvn 50; ub poi(@rsp) L20; .frame /r 9; u . L10; lmvm sample_xaml_app; qd'
.*** WARNING: Unable to verify checksum for sample_xaml_app.exe
......................
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
.........................................
....................
Loading unloaded module list
.
************* Symbol Loading Error Summary **************
Module name Error
sample_xaml_app The system cannot find the file specified
ntdll The system cannot find the file specified
kernel32 The system cannot find the file specified
KERNELBASE The system cannot find the file specified
combase The system cannot find the file specified
rpcrt4 The system cannot find the file specified
ole32 The system cannot find the file specified
gdi32 The system cannot find the file specified
win32u The system cannot find the file specified
gdi32full The system cannot find the file specified
user32 The system cannot find the file specified
oleaut32 The system cannot find the file specified
imm32 The system cannot find the file specified
kernel.appcore The system cannot find the file specified
Windows.ApplicationMod The system cannot find the file specified
WinTypes The system cannot find the file specified
sechost The system cannot find the file specified
windows.staterepositor The system cannot find the file specified
Windows.UI.Xaml The system cannot find the file specified
iertutil The system cannot find the file specified
advapi32 The system cannot find the file specified
netutils The system cannot find the file specified
srvcli The system cannot find the file specified
twinapi.appcore The system cannot find the file specified
SHCore The system cannot find the file specified
RpcRtRemote The system cannot find the file specified
OneCoreUAPCommonProxyS The system cannot find the file specified
urlmon The system cannot find the file specified
shell32 The system cannot find the file specified
windows.storage The system cannot find the file specified
uxtheme The system cannot find the file specified
CoreMessaging The system cannot find the file specified
dxgi The system cannot find the file specified
powrprof The system cannot find the file specified
umpdc The system cannot find the file specified
DXCore The system cannot find the file specified
Windows.UI The system cannot find the file specified
directxdatabasehelper The system cannot find the file specified
MrmCoreR The system cannot find the file specified
cfgmgr32 The system cannot find the file specified
windows.staterepositor The system cannot find the file specified
profapi The system cannot find the file specified
BCP47mrm The system cannot find the file specified
Windows.Shell.ServiceH The system cannot find the file specified
d3d11 The system cannot find the file specified
nvldumdx The system cannot find the file specified
version The system cannot find the file specified
cryptnet The system cannot find the file specified
crypt32 The system cannot find the file specified
wldp The system cannot find the file specified
devobj The system cannot find the file specified
CoreUIComponents The system cannot find the file specified
imagehlp The system cannot find the file specified
rmclient The system cannot find the file specified
InputHost The system cannot find the file specified
msctf The system cannot find the file specified
rsaenh The system cannot find the file specified
bcrypt The system cannot find the file specified
nvgpucomp64 The system cannot find the file specified
UiaManager The system cannot find the file specified
WindowManagementAPI The system cannot find the file specified
NvMemMapStoragex The system cannot find the file specified
winmm The system cannot find the file specified
windows.ui.core.textin The system cannot find the file specified
TextInputFramework The system cannot find the file specified
Windows.UI.Immersive The system cannot find the file specified
DataExchange The system cannot find the file specified
nvwgf2umx The system cannot find the file specified
shlwapi The system cannot find the file specified
nvppex The system cannot find the file specified
d2d1 The system cannot find the file specified
DWrite The system cannot find the file specified
TextShaping The system cannot find the file specified
You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
You should also verify that your symbol search path (.sympath) is correct.
noisy mode - symbol prompts off
rax=0000000000000000 rbx=0000000000000000 rcx=00000218c119a9d0
rdx=00000218c1e1d3d0 rsi=00000218c1e1d3d0 rdi=00000218c116dd30
rip=0000000000000000 rsp=000000473e6fe088 rbp=00000218c1159030
r8=0000000000000001 r9=00007ff711d9ec00 r10=00000218c116ec00
r11=000000473e6fdf20 r12=00000218c17077d8 r13=00000218c1a70fc0
r14=00000218c116dd30 r15=00000218c1153e80
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
00000000`00000000 ?? ???
Last set context:
rax=0000000000000000 rbx=0000000000000000 rcx=00000218c119a9d0
rdx=00000218c1e1d3d0 rsi=00000218c1e1d3d0 rdi=00000218c116dd30
rip=0000000000000000 rsp=000000473e6fe088 rbp=00000218c1159030
r8=0000000000000001 r9=00007ff711d9ec00 r10=00000218c116ec00
r11=000000473e6fdf20 r12=00000218c17077d8 r13=00000218c1a70fc0
r14=00000218c116dd30 r15=00000218c1153e80
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
00000000`00000000 ?? ???
# Child-SP RetAddr : Args to Child : Call Site
00 00000047`3e6fe088 00007ffc`66cc0cc7 : 00000218`c1a70fc0 00000218`c17077d8 00000218`c1e1d438 00000218`c116ecd8 : 0x0
01 00000047`3e6fe090 00007ffc`66cc0bc6 : 00000218`c1e1d3d0 00000218`c116ecd8 00000218`c119a9d0 00000000`00000878 : Windows_UI_Xaml!DllMain+0x444a7
02 00000047`3e6fe0c0 00007ffc`66cc0aaf : 00000000`00000000 00000000`00000000 00000047`3e6fe230 00000000`00000000 : Windows_UI_Xaml!DllMain+0x443a6
03 00000047`3e6fe100 00007ffc`90c4657b : 00000218`c1707eb0 00000000`00000000 00007034`00000003 00000218`c1a55e80 : Windows_UI_Xaml!DllMain+0x4428f
04 00000047`3e6fe130 00007ffc`9dd736a3 : 00000218`c1153e00 00000000`00000004 00000218`c1a70ee0 00000218`c1a70f01 : twinapi_appcore!PsmWaitForAppResume+0x2acb
05 00000047`3e6fe280 00007ffc`9dd7570e : 00007ffc`9076ab00 00000047`3e6fe9a0 00000218`c11727b0 00000000`00000000 : rpcrt4!NdrServerCallNdr64+0x1c63
06 00000047`3e6fe2e0 00007ffc`9dcb6c50 : 00000000`0000001d 00007ffc`0002b8e4 00007ffc`00000000 00000047`3e6fe9a0 : rpcrt4!Ndr64AsyncServerCall64+0x6fe
07 00000047`3e6fe8f0 00007ffc`9c1ddae3 : 00000000`00000000 00000047`3e6feb00 00007ffc`90769080 eba62892`226fef60 : rpcrt4!NdrStubCall3+0xc0
08 00000047`3e6fe960 00007ffc`9c1dd9fb : 4d559a43`00000001 00000218`c11727b0 00000218`c1a704a0 00000000`00000001 : combase!CStdStubBuffer_Invoke+0xa3
09 00000047`3e6fe9a0 00007ffc`9c1dcf76 : 00000218`c119fa20 00000047`3e6feab0 00000047`3e6fea48 00000218`00000001 : combase!CoCreateGuid+0x2dcb
0a 00000047`3e6fea00 00007ffc`9c1dc288 : 00000218`c119fa20 00000047`3e6fece8 00000218`c1a112e0 00000000`00000000 : combase!CoCreateGuid+0x2346
0b 00000047`3e6febc0 00007ffc`9c233f2f : 00000218`c1153840 00000047`3e6fed28 00000047`3e6fed90 00000218`c1a112e0 : combase!CoCreateGuid+0x1658
0c 00000047`3e6fec90 00007ffc`9c27146f : 00000000`00000000 00000000`00000001 00000218`c1a112e0 00000218`c1a112e0 : combase!RoGetServerActivatableClasses+0x103f
0d 00000047`3e6fef20 00007ffc`9c1c29cc : 00000000`00000000 00000218`c1172720 00000000`00000000 00000218`c1172720 : combase!Ordinal180+0x15f
0e 00000047`3e6ff000 00007ffc`9c1c14cf : 00000218`c1153840 00000000`00000000 00000218`c1153840 00000218`c1172720 : combase!CoWaitForMultipleHandles+0x31cc
0f 00000047`3e6ff310 00007ffc`9c213c50 : 00000218`00000014 00000218`c1a112e0 00000000`00000000 00000000`00000000 : combase!CoWaitForMultipleHandles+0x1ccf
10 00000047`3e6ff490 00007ffc`9c1bef1a : 00000000`ffffff00 00000218`c1a112f0 00000047`3e6ff5e0 00000047`3e6ff8c0 : combase!Ordinal111+0x2f0
11 00000047`3e6ff4e0 00007ffc`9c287a4c : 00000218`c1153840 00000000`00000000 00000000`00000000 00000218`c1153840 : combase!Ordinal87+0x78a
12 00000047`3e6ff790 00007ffc`9c2878ba : 00000000`00000000 00000001`00000024 00000047`3e6ff840 00000000`00000001 : combase!CoQueryProxyBlanket+0x66c
13 00000047`3e6ff870 00007ffc`9c1bf8e2 : 00000000`00000008 00000218`c114bc30 00000000`00000000 00000000`00000001 : combase!CoQueryProxyBlanket+0x4da
14 00000047`3e6ff8f0 00007ffc`90c6629a : 00000218`c1126c50 00000047`3e6ffa39 00000000`80004005 00000218`c114bbf0 : combase!CoWaitForMultipleHandles+0xe2
15 00000047`3e6ff930 00007ffc`90c66122 : 00000218`00000000 00000218`c1126c50 00000047`3e6ff940 00000000`00000000 : twinapi_appcore!PsmRegisterAppStateChangeNotification+0x1366a
16 00000047`3e6ff970 00007ffc`9d1a6b7a : 00000218`c114bbf0 00000218`c1126c50 00000000`00000000 00000000`80004005 : twinapi_appcore!PsmRegisterAppStateChangeNotification+0x134f2
17 00000047`3e6ff9a0 00007ffc`9c59e957 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : SHCore!Ordinal234+0x22a
18 00000047`3e6ffaa0 00007ffc`9de879fc : 00000000`00000000 00000000`00000000 000004f0`fffffb30 000004d0`fffffb30 : kernel32!BaseThreadInitThunk+0x17
19 00000047`3e6ffad0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x2c
Windows_UI_Xaml!DllMain+0x44443:
00007ffc`66cc0c63 cc int 3
00007ffc`66cc0c64 cc int 3
00007ffc`66cc0c65 cc int 3
00007ffc`66cc0c66 cc int 3
00007ffc`66cc0c67 cc int 3
00007ffc`66cc0c68 48895c2408 mov qword ptr [rsp+8],rbx
00007ffc`66cc0c6d 4889742410 mov qword ptr [rsp+10h],rsi
00007ffc`66cc0c72 57 push rdi
00007ffc`66cc0c73 4883ec20 sub rsp,20h
00007ffc`66cc0c77 488364244000 and qword ptr [rsp+40h],0
00007ffc`66cc0c7d 488bf2 mov rsi,rdx
00007ffc`66cc0c80 488bf9 mov rdi,rcx
00007ffc`66cc0c83 e8d87ed6ff call Windows_UI_Xaml!DllGetActivationFactory+0xabe0 (00007ffc`66a28b60)
00007ffc`66cc0c88 85c0 test eax,eax
00007ffc`66cc0c8a 746a je Windows_UI_Xaml!DllMain+0x444d6 (00007ffc`66cc0cf6)
00007ffc`66cc0c8c 33db xor ebx,ebx
00007ffc`66cc0c8e 4885ff test rdi,rdi
00007ffc`66cc0c91 741c je Windows_UI_Xaml!DllMain+0x4448f (00007ffc`66cc0caf)
00007ffc`66cc0c93 488b07 mov rax,qword ptr [rdi]
00007ffc`66cc0c96 4c8d442440 lea r8,[rsp+40h]
00007ffc`66cc0c9b 488d1526cb9800 lea rdx,[Windows_UI_Xaml!GetStringRawBuffer+0x653d08 (00007ffc`6764d7c8)]
00007ffc`66cc0ca2 488bcf mov rcx,rdi
00007ffc`66cc0ca5 488b00 mov rax,qword ptr [rax]
00007ffc`66cc0ca8 e863836d00 call Windows_UI_Xaml!GetStringRawBuffer+0x39f550 (00007ffc`67399010)
00007ffc`66cc0cad 8bd8 mov ebx,eax
00007ffc`66cc0caf 85db test ebx,ebx
00007ffc`66cc0cb1 786e js Windows_UI_Xaml!DllMain+0x44501 (00007ffc`66cc0d21)
00007ffc`66cc0cb3 488b4c2440 mov rcx,qword ptr [rsp+40h]
00007ffc`66cc0cb8 488bd6 mov rdx,rsi
00007ffc`66cc0cbb 488b01 mov rax,qword ptr [rcx]
00007ffc`66cc0cbe 488b4070 mov rax,qword ptr [rax+70h]
00007ffc`66cc0cc2 e849836d00 call Windows_UI_Xaml!GetStringRawBuffer+0x39f550 (00007ffc`67399010)
09 00000047`3e6fe9a0 00007ffc`9c1dcf76 combase!CoCreateGuid+0x2dcb
rax=0000000000000000 rbx=00000218c11727b0 rcx=00000218c119a9d0
rdx=00000218c1e1d3d0 rsi=00000218c1a704a0 rdi=00000218c1a11308
rip=00007ffc9c1dd9fb rsp=000000473e6fe9a0 rbp=000000473e6feb00
r8=0000000000000001 r9=00007ff711d9ec00 r10=00000218c116ec00
r11=000000473e6fdf20 r12=0000000000000005 r13=00000218c119fa20
r14=00000218c11310c0 r15=0000000000000005
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
combase!CoCreateGuid+0x2dcb:
00007ffc`9c1dd9fb eb05 jmp combase!CoCreateGuid+0x2dd2 (00007ffc`9c1dda02)
00000000`00000000 ?? ???
^ Memory access error in '.symfix; .reload /f; !sym noisy; .ecxr; r; kvn 50; ub poi(@rsp) l20; .frame /r 9; u . l10; lmvm sample_xaml_app; qd'
0:007> 0:007>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment