Skip to content

Error on Win10 x64 - 1709 #2

@forensic65x

Description

@forensic65x

I ran it via the oneliner and received the following error:

Mount-DbgDumpFile : DbgEng API returned 0xd000011e.
At line:1 char:933

  • ... eStream.Close();}Mount-DbgDumpFile -DumpFile $processDumpPath;$faObj ...
  •                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
    • CategoryInfo : NotSpecified: (:) [Mount-DbgDumpFile], DbgEngException
    • FullyQualifiedErrorId : DbgEngApiError,MS.Dbg.Commands.MountDbgDumpFileCommand

dd : Cannot process argument transformation on parameter 'Address'. DbgEng API returned 0x8000ffff.
At line:1 char:990

  • ... mpFile -DumpFile $processDumpPath;$faObj = dd lsasrv!h3DesKey;$sa = ' ...
  •                                               ~~~~~~~~~~~~~~~
    
    • CategoryInfo : InvalidData: (:) [dd], ParameterBindingArgumentTransformationException
    • FullyQualifiedErrorId : ParameterArgumentTransformationError,dd

The variable '$faObj' cannot be retrieved because it has not been set.
At line:1 char:1024

  • ... DumpPath;$faObj = dd lsasrv!h3DesKey;$sa = '{0:x8}' -f $faObj.Item(1) ...
  •                                                        ~~~~~~
    
    • CategoryInfo : InvalidOperation: (faObj:String) [], RuntimeException
    • FullyQualifiedErrorId : VariableIsUndefined

The variable '$sa' cannot be retrieved because it has not been set.
At line:1 char:1080

  • ... f $faObj.Item(1) + '{0:x8}' -f $faObj.Item(0);$saObj = dd $sa;$ta = ' ...
  •                                                           ~~~
    
    • CategoryInfo : InvalidOperation: (sa:String) [], RuntimeException
    • FullyQualifiedErrorId : VariableIsUndefined

The variable '$saObj' cannot be retrieved because it has not been set.
At line:1 char:1102

  • ... }' -f $faObj.Item(0);$saObj = dd $sa;$ta = '{0:x8}' -f $saObj.Item(5) ...
  •                                                        ~~~~~~
    
    • CategoryInfo : InvalidOperation: (saObj:String) [], RuntimeException
    • FullyQualifiedErrorId : VariableIsUndefined

The variable '$ta' cannot be retrieved because it has not been set.
At line:1 char:1158

  • ... f $saObj.Item(5) + '{0:x8}' -f $saObj.Item(4);$h3Des = db $ta;$k = '0 ...
  •                                                           ~~~
    
    • CategoryInfo : InvalidOperation: (ta:String) [], RuntimeException
    • FullyQualifiedErrorId : VariableIsUndefined

The variable '$h3Des' cannot be retrieved because it has not been set.
At line:1 char:1180

  • ... }' -f $saObj.Item(4);$h3Des = db $ta;$k = '0x{0:x}' -f $h3Des.Item(60 ...
  •                                                        ~~~~~~
    
    • CategoryInfo : InvalidOperation: (h3Des:String) [], RuntimeException
    • FullyQualifiedErrorId : VariableIsUndefined

db : Cannot process argument transformation on parameter 'Address'. DbgEng API returned 0x8000ffff.
At line:1 char:1964

  • ... 0:x}' -f $h3Des.Item(83);$iv = db lsasrv!InitializationVector;$iv = ' ...
  •                                   ~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
    • CategoryInfo : InvalidData: (:) [db], ParameterBindingArgumentTransformationException
    • FullyQualifiedErrorId : ParameterArgumentTransformationError,db

The variable '$iv' cannot be retrieved because it has not been set.
At line:1 char:2011

  • ... );$iv = db lsasrv!InitializationVector;$iv = '0x{0:x}' -f $iv.Item(0) ...
  •                                                           ~~~
    
    • CategoryInfo : InvalidOperation: (iv:String) [], RuntimeException
    • FullyQualifiedErrorId : VariableIsUndefined

dd : Cannot process argument transformation on parameter 'Address'. DbgEng API returned 0x8000ffff.
At line:1 char:2238

  • ... ', 0x{0:x}' -f $iv.Item(7);$lsObj = dd wdigest!l_LogSessList;$lsf = ...
  •                                         ~~~~~~~~~~~~~~~~~~~~~
    
    • CategoryInfo : InvalidData: (:) [dd], ParameterBindingArgumentTransformationException
    • FullyQualifiedErrorId : ParameterArgumentTransformationError,dd

The variable '$lsObj' cannot be retrieved because it has not been set.
At line:1 char:2279

  • ... );$lsObj = dd wdigest!l_LogSessList;$lsf = '{0:x8}' -f $lsObj.Item(1) ...
  •                                                        ~~~~~~
    
    • CategoryInfo : InvalidOperation: (lsObj:String) [], RuntimeException
    • FullyQualifiedErrorId : VariableIsUndefined

The variable '$lsf' cannot be retrieved because it has not been set.
At line:1 char:2358

  • ... 8}' -f $lsObj.Item(0);$nextEntry = '';$i = 0;$lsfEntry = $lsf;while ( ...
  •                                                          ~~~~
    
    • CategoryInfo : InvalidOperation: (lsf:String) [], RuntimeException
    • FullyQualifiedErrorId : VariableIsUndefined

The variable '$lsfEntry' cannot be retrieved because it has not been set.
At line:1 char:2370

  • ... m(0);$nextEntry = '';$i = 0;$lsfEntry = $lsf;while ($lsfEntry -ne $ne ...
  •                                                     ~~~~~~~~~
    
    • CategoryInfo : InvalidOperation: (lsfEntry:String) [], RuntimeException
    • FullyQualifiedErrorId : VariableIsUndefined

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions