Debugging the crash dump
Loading Dump File [C:\Users\gomerpile\Documents\Battlefield V\Temp\CrashDump_BugSentryMinimal_2018.11.20_18.21.18.107.dmp]
Comment: ‘Frostbite MiniDump. Address: 0000000148486B8D (In Windbg type: .ecxr)
[EOF]’
User Mini Dump File: Only registers, stack and portions of memory are available
- Path validation summary
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Version 17763 MP (8 procs) Free x64
Product: WinNt, suite: SingleUserTS
17763.1.amd64fre.rs5_release.180914-1434
Machine Name:
Debug session time: Tue Nov 20 18:21:18.000 2018 (UTC - 5:00)
System Uptime: not available
Process Uptime: 0 days 1:59:19.000
…
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(3c64.3b94): Access violation - code c0000005 (first/second chance not available)
ntdll!NtWaitForSingleObject+0x14:
00007ffd`9d8ce614 c3 ret
0:016> ecxr
*** WARNING: Unable to verify timestamp for bfv.exe** - ERROR: Module load completed but symbols could not be loaded for bfv.exe
*** WARNING: Unable to verify timestamp for RTSSHooks64.dll** - ERROR: Module load completed but symbols could not be loaded for RTSSHooks64.dll
*** WARNING: Unable to verify timestamp for d3dcompiler_42.dll** - WARNING: Unable to verify timestamp for Extension.Twinkle.JavaScriptCore_Win64_retail.dll
*** ERROR: Module load completed but symbols could not be loaded for Extension.Twinkle.JavaScriptCore_Win64_retail.dll** - WARNING: Unable to verify timestamp for Activation64.dll
*** ERROR: Module load completed but symbols could not be loaded for Activation64.dll** - WARNING: Unable to verify timestamp for twitchsdk_64_release.dll
*** ERROR: Module load completed but symbols could not be loaded for twitchsdk_64_release.dll** - WARNING: Unable to verify timestamp for igo64.dll
*** ERROR: Module load completed but symbols could not be loaded for igo64.dll** - WARNING: Unable to verify timestamp for dbdata.dll
*** ERROR: Module load completed but symbols could not be loaded for dbdata.dll** - WARNING: Unable to verify timestamp for VCRUNTIME140.dll
*** WARNING: Unable to verify timestamp for nvwgf2umx.dll** - ERROR: Module load completed but symbols could not be loaded for nvwgf2umx.dll**
Couldn’t resolve error at ‘cxr’
Looking at the cause of this, RTSSHooks.dll, this file is associated to msi after burner, after verifying the afterburner.exe and comparing the crash dump to this I was able to create the crash. I discovered that the MSI monitoring in the msi afterburner properties caused a memory violation, I discovered that bf5 need to be run in admin, after that I had no more crash dumps.