这个Dump文件怎么看啊

[funabori]

程序运行一段时间以后就会偶尔出现异常退出，dump文件看是下面的错误，但是这是什么意思啊
ODULE_NAME: rpcrt4

FAULTING_MODULE: 7c950000 ntdll

DEBUG_FLR_IMAGE_TIMESTAMP: 4248f26b

ERROR_CODE: (NTSTATUS) 0xc0000005 - "0x%08lx"

READ_ADDRESS: 01290048

BUGCHECK_STR: ACCESS_VIOLATION

LAST_CONTROL_TRANSFER: from 77bf8edc to 77bffb2f

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
02a0fec0 77bf8edc 0016083c 00161c50 00000000 rpcrt4+0xfb2f
02a0fee4 77bff91d 77bff749 00161c50 02a0ff04 rpcrt4+0x8edc
02a0ff08 77bffaee 77bff9e4 00154480 00000000 rpcrt4+0xf91d
02a0ff2c 77bfccb1 00154480 00000001 001679b0 rpcrt4+0xfaee
02a0ff84 77bff9f1 02a0ffac 77bff7dd 00154480 rpcrt4+0xccb1
02a0ff8c 77bff7dd 00154480 00000000 00000000 rpcrt4+0xf9f1
02a0ffac 77bfde88 00152cc0 02a0ffec 7c826063 rpcrt4+0xf7dd
02a0ffb8 7c826063 001679b0 00000000 00000000 rpcrt4+0xde88
02a0ffec 00000000 77bfde6d 001679b0 00000000 kernel32+0x26063


FAULTING_THREAD: 00002668

FOLLOWUP_IP:
rpcrt4+fb2f
77bffb2f 8b08 mov ecx,dword ptr [eax]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: rpcrt4+fb2f

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: rpcrt4.dll

STACK_COMMAND: ~16s; .ecxr ; kb

BUCKET_ID: WRONG_SYMBOLS

FAILURE_BUCKET_ID: rpcrt4.dll!base_address_c0000005_WRONG_SYMBOLS

Followup: MachineOwner
---------

0:016> kb
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
02a0fec0 77bf8edc 0016083c 00161c50 00000000 rpcrt4+0xfb2f
02a0fee4 77bff91d 77bff749 00161c50 02a0ff04 rpcrt4+0x8edc
02a0ff08 77bffaee 77bff9e4 00154480 00000000 rpcrt4+0xf91d
02a0ff2c 77bfccb1 00154480 00000001 001679b0 rpcrt4+0xfaee
02a0ff84 77bff9f1 02a0ffac 77bff7dd 00154480 rpcrt4+0xccb1
02a0ff8c 77bff7dd 00154480 00000000 00000000 rpcrt4+0xf9f1
02a0ffac 77bfde88 00152cc0 02a0ffec 7c826063 rpcrt4+0xf7dd
02a0ffb8 7c826063 001679b0 00000000 00000000 rpcrt4+0xde88
02a0ffec 00000000 77bfde6d 001679b0 00000000 kernel32+0x26063
0:016> kb

也没有和我程序相关的东西啊，怎样知道哪个代码导致了这个错误那，谢谢

[ouyh12345]

调用了rpcrt4.dll？
有没有它的符号文件？

[funabori]

没有显式的调用rpcrt4.dll啊，下面这段好像有点详细信息，难道是GetModuleFileNameA这个函数会调用rpcrt4.dll吗，谢谢
ERROR ->77bffb2f 8b08 mov ecx,[eax] ds:0023:01290048=????????
77bffb31 890e mov [esi],ecx
77bffb33 897104 mov [ecx+0x4],esi
77bffb36 8d78f8 lea edi,[eax-0x8]
77bffb39 8b06 mov eax,[esi]
77bffb3b 3bc6 cmp eax,esi
77bffb3d 0f8455800400 je RPCRT4!RpcMgmtSetAuthorizationFn+0x2d50 (77c47b98)
77bffb43 8b4f04 mov ecx,[edi+0x4]
77bffb46 83c0f8 add eax,0xfffffff8
77bffb49 8bd1 mov edx,ecx
77bffb4b 2b5004 sub edx,[eax+0x4]

ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
02a0fec0 77bf8edc 0016083c 00161c50 00000000 RPCRT4!I_RpcTransGetThreadEvent+0x4da
02a0fee4 77bff91d 77bff749 00161c50 02a0ff04 RPCRT4!RpcBindingSetOption+0x23d
02a0ff08 77bffaee 77bff9e4 00154480 00000000 RPCRT4!I_RpcTransGetThreadEvent+0x2c8
02a0ff2c 77bfccb1 00154480 00000001 001679b0 RPCRT4!I_RpcTransGetThreadEvent+0x499
02a0ff84 77bff9f1 02a0ffac 77bff7dd 00154480 RPCRT4!NdrNonEncapsulatedUnionMemorySize+0x326
02a0ff8c 77bff7dd 00154480 00000000 00000000 RPCRT4!I_RpcTransGetThreadEvent+0x39c
02a0ffac 77bfde88 00152cc0 02a0ffec 7c826063 RPCRT4!I_RpcTransGetThreadEvent+0x188
02a0ffb8 7c826063 001679b0 00000000 00000000 RPCRT4!I_RpcLogEvent+0xe92
02a0ffec 00000000 77bfde6d 001679b0 00000000 kernel32!GetModuleFileNameA+0xeb

[meiZiNick]

没遇到过这种情况.