A
andy
I have a win2k computer and Win98 computer networked together. Win2k was
the most recently installed. I have installed MSOffice2000 onto both
machines (individual licence numbers), however the Win2k machine seems to be
unable to run MS Word and MS Access without the Win98 machine being on. If
the Win98 machine is unavailable, the program loads and then crashes
straight away with the following error. :-
Application exception occurred:
App: (pid=1708)
When: 16/07/2003 @ 15:27:29.109
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: ANDY-W2K
User Name: Administrator
Number of Processors: 1
Processor Type: x86 Family 6 Model 6 Stepping 2
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 3
Current Type: Uniprocessor Free
Registered Owner: Andy
*----> Task List <----*
0 Idle.exe
8 System.exe
192 winlogon.exe
220 services.exe
232 lsass.exe
440 spoolsv.exe
476 avgserv.ex
504 cisvc.exe
532 jrunsvc.exe
560 jrun.exe
772 mdm.exe
876 regsvc.exe
892 MSTask.exe
916 snmp.exe
852 WinMgmt.exe
1088 inetinfo.exe
1744 Explorer.exe
2052 cidaemon.exe
1640 dllhost.exe
1588 dllhost.exe
1876 MsnMsgr.exe
2160 ntvdm.exe
2448 IEXPLORE.exe
1724 MSACCESS.exe
1708 WINWORD.exe
1860 drwtsn32.exe
0 _Total.exe
(30000000 - 3086D000)
(77F80000 - 77FFB000)
(77DB0000 - 77E0B000)
(77E80000 - 77F31000)
(77D30000 - 77DA1000)
(77F40000 - 77F79000)
(77E10000 - 77E6F000)
(308C0000 - 30E1C000)
(77A50000 - 77B45000)
(782F0000 - 78534000)
(70BD0000 - 70C1C000)
(71700000 - 7178A000)
(77800000 - 7781E000)
(76620000 - 76630000)
(775A0000 - 77625000)
(779B0000 - 77A4B000)
(78000000 - 78046000)
(77840000 - 7787D000)
(770C0000 - 770E3000)
(65000000 - 65263000)
(65300000 - 65327000)
(0FEF0000 - 0FEF8000)
(770F0000 - 772ED000)
(76710000 - 76719000)
(76FA0000 - 76FAF000)
(773E0000 - 773F5000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(75150000 - 75160000)
(75030000 - 75043000)
(75020000 - 75028000)
(77950000 - 77978000)
(77980000 - 779A4000)
(75050000 - 75058000)
(02D80000 - 02DEC000)
(60600000 - 60644000)
State Dump for Thread Id 0x524
eax=00000000 ebx=00000001 ecx=10011108 edx=00000000 esi=77f837a7
edi=00000001
eip=77f837b2 esp=0012fdec ebp=0012fe38 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000246
function: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4]
ss:00bad3bf=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0012FE38 77E1E97B 0012FE10 00000001 00000000 0012FE30
ntdll!NtWaitForMultipleObjects
0012FE94 77E1E9C8 0012FE60 00000000 00000032 000000FF
user32!MsgWaitForMultipleObjectsEx
0012FEB0 3013A390 00000000 00000000 00000000 00000032
user32!MsgWaitForMultipleObjects
00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
*----> Raw Stack Dump <----*
0012fdec 00 9d ea 77 01 00 00 00 - 10 fe 12 00 01 00 00 00
....w............
0012fdfc 00 00 00 00 30 fe 12 00 - 00 00 00 00 00 00 00 00
.....0...........
0012fe0c 01 00 00 00 34 00 00 00 - 95 a7 e1 77 eb 55 e1 77
.....4......w.U.w
0012fe1c 40 fe 12 00 c0 ac 13 30 - b0 f7 7c 30 00 00 00 00
@......0..|0....
0012fe2c 00 00 00 00 e0 5e f8 ff - ff ff ff ff 94 fe 12 00
......^..........
0012fe3c 7b e9 e1 77 10 fe 12 00 - 01 00 00 00 00 00 00 00
{..w............
0012fe4c 30 fe 12 00 00 00 00 00 - ae a6 13 30 00 00 00 00
0..........0....
0012fe5c 20 04 00 00 34 00 00 00 - 00 00 00 00 02 00 00 00
....4...........
0012fe6c 03 00 00 00 03 00 00 00 - 3e 77 a6 01 38 22 80 00
.........>w..8"..
0012fe7c 01 00 00 00 20 22 80 00 - 00 00 00 00 cc e6 fd 7f ....
"..........
0012fe8c 00 00 00 00 34 00 00 00 - b0 fe 12 00 c8 e9 e1 77
.....4..........w
0012fe9c 60 fe 12 00 00 00 00 00 - 32 00 00 00 ff 00 00 00
`.......2.......
0012feac 00 00 00 00 00 00 00 00 - 90 a3 13 30 00 00 00 00
............0....
0012febc 00 00 00 00 00 00 00 00 - 32 00 00 00 ff 00 00 00
.........2.......
0012fecc ff ff ef ff 00 00 10 00 - b0 f7 7c 30 00 00 00 00
...........|0....
0012fedc e2 04 00 00 d0 07 00 00 - 00 00 00 00 00 00 00 00
.................
0012feec 3d b8 13 30 d2 65 e1 77 - 00 00 00 00 34 94 1f 30
=..0.e.w....4..0
0012fefc 78 00 75 00 08 00 75 00 - 34 ff 12 00 00 00 00 00
x.u...u.4.......
0012ff0c 00 00 00 00 00 00 00 00 - 34 ff 12 00 87 2d 00 30
.........4....-.0
0012ff1c 00 00 00 00 9f 7a 14 00 - 00 00 00 00 78 00 75 00
......z......x.u.
State Dump for Thread Id 0x99c
eax=77d424c2 ebx=00158dd0 ecx=00158c5c edx=00000000 esi=00158ca0
edi=00000100
eip=77f83bb8 esp=01a5fe28 ebp=01a5ff74 iopl=0 nv up ei pl nz na pe
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000202
function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4]
ss:024dd3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
01A5FF74 77D420D9 77D42528 00158CA0 00000000 40158798
ntdll!NtReplyWaitReceivePortEx
01A5FFA8 77D424DA 00157D78 01A5FFEC 77E8B2D8 00158DD0
rpcrt4!NdrConformantArrayMemorySize
01A5FFB4 77E8B2D8 00158DD0 00000000 40158798 00158DD0
rpcrt4!NdrConformantArrayMemorySize
01A5FFEC 00000000 77D424C2 00158DD0 00000000 00000000 kernel32!lstrcmpiW
*----> Raw Stack Dump <----*
01a5fe28 85 22 d4 77 e0 01 00 00 - 54 ff a5 01 00 00 00 00
..".w....T.......
01a5fe38 e0 c0 15 00 58 ff a5 01 - f8 0e 15 00 78 7d 15 00
.....X.......x}..
01a5fe48 d0 8d 15 00 01 25 00 24 - 01 74 00 21 01 9c 00 28
......%.$.t.!...(
01a5fe58 01 99 00 18 01 ee 00 12 - 00 9f 00 24 00 8b 00 12
............$....
01a5fe68 00 c9 00 36 01 5f 00 3c - 01 51 00 1f 00 a8 00 20 ...6._.<.Q.....
01a5fe78 01 51 00 1f 00 b2 00 10 - 01 44 ff fc 01 9e 00 21
..Q.......D.....!
01a5fe88 01 32 00 35 01 a3 00 21 - 01 9e 00 21 01 aa 00 16
..2.5...!...!....
01a5fe98 01 80 00 21 01 9e 00 21 - 01 93 00 1e 01 9e 00 21
....!...!.......!
01a5fea8 01 9e 00 21 00 be 00 19 - 00 bc 00 18 01 0b 00 07
....!............
01a5feb8 01 24 00 23 01 35 00 36 - 01 7a 00 0f 01 ca 00 25
..$.#.5.6.z.....%
01a5fec8 01 76 00 0f 01 9c 00 20 - 01 9e 00 21 01 9e 00 21 .v.....
....!...!
01a5fed8 01 81 00 20 01 5d 00 17 - 01 a8 00 19 01 a5 00 21 ...
..].........!
01a5fee8 00 e8 00 21 01 a5 00 21 - 01 b3 00 18 01 2d 00 18
....!...!.....-..
01a5fef8 02 1e 00 21 01 a5 00 21 - 01 9e 00 21 01 8e 00 1c
....!...!...!....
01a5ff08 01 a5 00 1b 01 a3 00 21 - 01 9e 00 21 01 3f 00 10
........!...!.?..
01a5ff18 01 a5 00 21 01 8f 00 16 - 02 31 00 13 01 ca 00 16
....!.....1......
01a5ff28 01 a1 00 07 40 89 d2 fd - a0 4d d2 fd 00 00 00 00
[email protected]......
01a5ff38 a0 4d d2 fd 30 4f d2 fd - 64 0c bd b5 f3 da 42 80
..M..0O..d.....B.
01a5ff48 a4 da 42 80 d4 4b 06 80 - 00 4f d2 fd a0 4d d2 fd
...B..K...O...M..
01a5ff58 00 a2 2f 4d ff ff ff ff - 50 fe a5 01 ff ff ff ff
.../M....P.......
State Dump for Thread Id 0x934
eax=6502c3a3 ebx=00000000 ecx=00000000 edx=00000000 esi=77f8318c
edi=026fff98
eip=77f83197 esp=026fff84 ebp=026fffa0 iopl=0 nv up ei pl nz na pe
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000202
function: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,[esp+0x4]
ss:0317d557=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
026FFFA0 77EA9D5F 000000C8 00000000 6502C3AE 000000C8 ntdll!NtDelayExecution
026FFFEC 00000000 6502C3A3 00000000 00000000 02700040 kernel32!Sleep
*----> Raw Stack Dump <----*
026fff84 94 9d ea 77 00 00 00 00 - 98 ff 6f 02 00 00 00 00
....w......o.....
026fff94 01 00 03 00 80 7b e1 ff - ff ff ff ff ec ff 6f 02
......{........o.
026fffa4 5f 9d ea 77 c8 00 00 00 - 00 00 00 00 ae c3 02 65
_..w...........e
026fffb4 c8 00 00 00 d8 b2 e8 77 - 00 00 00 00 00 00 00 00
........w........
026fffc4 01 00 03 00 00 00 00 00 - 00 c0 fd 7f 00 00 00 00
.................
026fffd4 c0 ff 6f 02 00 00 00 00 - ff ff ff ff 6c 13 ed 77
...o.........l..w
026fffe4 98 2a e8 77 00 00 00 00 - 00 00 00 00 00 00 00 00
..*.w............
026ffff4 a3 c3 02 65 00 00 00 00 - 00 00 00 00 40 00 70 02
[email protected].
02700004 00 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00
.................
02700014 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700024 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700034 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700044 00 00 70 02 00 00 00 00 - 04 00 00 00 11 00 00 00
...p.............
02700054 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700064 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700074 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700084 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700094 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
027000a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
027000b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
State Dump for Thread Id 0x908
eax=00000844 ebx=00000000 ecx=00000211 edx=00000000 esi=00000000
edi=0020e008
eip=6061fdc3 esp=0297fb60 ebp=0297fb68 iopl=0 nv up ei pl nz ac po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000216
function: DrvConvertDevMode
6061fda4 3bfe cmp edi,esi
6061fda6 7608 jbe DrvConvertDevMode+0x80c4
(606238b0)
6061fda8 3bf8 cmp edi,eax
6061fdaa 0f8278010000 jb DrvConvertDevMode+0x473c
(6061ff28)
6061fdb0 f7c703000000 test edi,0x3
6061fdb6 7514 jnz DrvDocumentEvent+0xef1 (6062becc)
6061fdb8 c1e902 shr ecx,0x2
6061fdbb 83e203 and edx,0x3
6061fdbe 83f908 cmp ecx,0x8
6061fdc1 7229 jb 6062f0ec
FAULT ->6061fdc3 f3a5 rep movsd ds:00000000=????????
es:0020e008=001f95a8
6061fdc5 ff2495d8fe6160
ds:00000000=????????
jmp dword ptr [DrvConvertDevMode+0x46ec
(6061fed8)+edx*4]
6061fdcc 8bc7 mov eax,edi
6061fdce ba03000000 mov edx,0x3
6061fdd3 83e904 sub ecx,0x4
6061fdd6 720c jb DrvConvertDevMode+0xc8f8
(606280e4)
6061fdd8 83e003 and eax,0x3
6061fddb 03c8 add ecx,eax
6061fddd ff2485f0fd6160
ds:00000844=????????
jmp dword ptr [DrvConvertDevMode+0x4604
(6061fdf0)+eax*4]
6061fde4 ff248de8fe6160
ds:00000211=????????
jmp dword ptr [DrvConvertDevMode+0x46fc
(6061fee8)+ecx*4]
6061fdeb 90 nop
6061fdec ff248d6cfe6160
ds:00000211=????????
jmp dword ptr [DrvConvertDevMode+0x4680
(6061fe6c)+ecx*4]
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0297FB68 6062A627 0020E008 00000000 00000844 00000000 !DrvConvertDevMode
0297FD98 6062A277 02E23C30 60600000 0297FDE0 FFFFFFFF
!DrvAdvancedDocumentProperties
0297FE04 7780EAA3 00000000 00000000 001BAE68 0020E008
!DrvDocumentPropertySheets
0297FE3C 301058F2 00000000 00000000 0297FE68 0074EB3C
winspool!DocumentPropertiesA
0297FF8C 301056DD 00000001 77F8313C 00000028 77F8316D !<nosymbols>
3010567D 5C353957 89307CF0 7CF06035 F05CBB30 850F307C !<nosymbols>
F6335653 00000000 00000000 00000000 00000000 00000000 <nosymbols>
*----> Raw Stack Dump <----*
0297fb60 e0 fd 97 02 00 00 00 00 - 98 fd 97 02 27 a6 62 60
.............'.b`
0297fb70 08 e0 20 00 00 00 00 00 - 44 08 00 00 00 00 00 00 ..
......D.......
0297fb80 e0 fd 97 02 e0 fd 97 02 - 00 00 00 00 00 00 00 00
.................
0297fb90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fba0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fbb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fbc0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fbd0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fbe0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fbf0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fc00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fc10 00 00 00 00 46 00 3a 00 - 5c 00 57 00 49 00 4e 00
.....F.:.\.W.I.N.
0297fc20 4e 00 54 00 5c 00 53 00 - 79 00 73 00 74 00 65 00
N.T.\.S.y.s.t.e.
0297fc30 6d 00 33 00 32 00 5c 00 - 73 00 70 00 e8 85 63 60
m.3.2.\.s.p...c`
0297fc40 60 85 63 60 00 00 00 00 - 06 00 00 00 98 fc 97 02
`.c`............
0297fc50 c8 76 f8 77 06 fd 97 02 - 0c 00 00 00 00 00 60 60
..v.w..........``
0297fc60 b8 85 63 60 e8 85 63 60 - 04 fd 97 02 01 00 00 00
...c`..c`........
0297fc70 00 00 00 00 f8 00 60 60 - 68 fc 97 02 00 fd 97 02
.......``h.......
0297fc80 5c fd 97 02 01 00 00 00 - a8 fc 97 02 66 51 f8 77
\...........fQ.w
0297fc90 00 00 60 60 00 00 00 00 - 6c fd 97 02 a5 74 f8 77
...``....l....t.w
the most recently installed. I have installed MSOffice2000 onto both
machines (individual licence numbers), however the Win2k machine seems to be
unable to run MS Word and MS Access without the Win98 machine being on. If
the Win98 machine is unavailable, the program loads and then crashes
straight away with the following error. :-
Application exception occurred:
App: (pid=1708)
When: 16/07/2003 @ 15:27:29.109
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: ANDY-W2K
User Name: Administrator
Number of Processors: 1
Processor Type: x86 Family 6 Model 6 Stepping 2
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 3
Current Type: Uniprocessor Free
Registered Owner: Andy
*----> Task List <----*
0 Idle.exe
8 System.exe
192 winlogon.exe
220 services.exe
232 lsass.exe
440 spoolsv.exe
476 avgserv.ex
504 cisvc.exe
532 jrunsvc.exe
560 jrun.exe
772 mdm.exe
876 regsvc.exe
892 MSTask.exe
916 snmp.exe
852 WinMgmt.exe
1088 inetinfo.exe
1744 Explorer.exe
2052 cidaemon.exe
1640 dllhost.exe
1588 dllhost.exe
1876 MsnMsgr.exe
2160 ntvdm.exe
2448 IEXPLORE.exe
1724 MSACCESS.exe
1708 WINWORD.exe
1860 drwtsn32.exe
0 _Total.exe
(30000000 - 3086D000)
(77F80000 - 77FFB000)
(77DB0000 - 77E0B000)
(77E80000 - 77F31000)
(77D30000 - 77DA1000)
(77F40000 - 77F79000)
(77E10000 - 77E6F000)
(308C0000 - 30E1C000)
(77A50000 - 77B45000)
(782F0000 - 78534000)
(70BD0000 - 70C1C000)
(71700000 - 7178A000)
(77800000 - 7781E000)
(76620000 - 76630000)
(775A0000 - 77625000)
(779B0000 - 77A4B000)
(78000000 - 78046000)
(77840000 - 7787D000)
(770C0000 - 770E3000)
(65000000 - 65263000)
(65300000 - 65327000)
(0FEF0000 - 0FEF8000)
(770F0000 - 772ED000)
(76710000 - 76719000)
(76FA0000 - 76FAF000)
(773E0000 - 773F5000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(75150000 - 75160000)
(75030000 - 75043000)
(75020000 - 75028000)
(77950000 - 77978000)
(77980000 - 779A4000)
(75050000 - 75058000)
(02D80000 - 02DEC000)
(60600000 - 60644000)
State Dump for Thread Id 0x524
eax=00000000 ebx=00000001 ecx=10011108 edx=00000000 esi=77f837a7
edi=00000001
eip=77f837b2 esp=0012fdec ebp=0012fe38 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000246
function: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4]
ss:00bad3bf=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0012FE38 77E1E97B 0012FE10 00000001 00000000 0012FE30
ntdll!NtWaitForMultipleObjects
0012FE94 77E1E9C8 0012FE60 00000000 00000032 000000FF
user32!MsgWaitForMultipleObjectsEx
0012FEB0 3013A390 00000000 00000000 00000000 00000032
user32!MsgWaitForMultipleObjects
00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
*----> Raw Stack Dump <----*
0012fdec 00 9d ea 77 01 00 00 00 - 10 fe 12 00 01 00 00 00
....w............
0012fdfc 00 00 00 00 30 fe 12 00 - 00 00 00 00 00 00 00 00
.....0...........
0012fe0c 01 00 00 00 34 00 00 00 - 95 a7 e1 77 eb 55 e1 77
.....4......w.U.w
0012fe1c 40 fe 12 00 c0 ac 13 30 - b0 f7 7c 30 00 00 00 00
@......0..|0....
0012fe2c 00 00 00 00 e0 5e f8 ff - ff ff ff ff 94 fe 12 00
......^..........
0012fe3c 7b e9 e1 77 10 fe 12 00 - 01 00 00 00 00 00 00 00
{..w............
0012fe4c 30 fe 12 00 00 00 00 00 - ae a6 13 30 00 00 00 00
0..........0....
0012fe5c 20 04 00 00 34 00 00 00 - 00 00 00 00 02 00 00 00
....4...........
0012fe6c 03 00 00 00 03 00 00 00 - 3e 77 a6 01 38 22 80 00
.........>w..8"..
0012fe7c 01 00 00 00 20 22 80 00 - 00 00 00 00 cc e6 fd 7f ....
"..........
0012fe8c 00 00 00 00 34 00 00 00 - b0 fe 12 00 c8 e9 e1 77
.....4..........w
0012fe9c 60 fe 12 00 00 00 00 00 - 32 00 00 00 ff 00 00 00
`.......2.......
0012feac 00 00 00 00 00 00 00 00 - 90 a3 13 30 00 00 00 00
............0....
0012febc 00 00 00 00 00 00 00 00 - 32 00 00 00 ff 00 00 00
.........2.......
0012fecc ff ff ef ff 00 00 10 00 - b0 f7 7c 30 00 00 00 00
...........|0....
0012fedc e2 04 00 00 d0 07 00 00 - 00 00 00 00 00 00 00 00
.................
0012feec 3d b8 13 30 d2 65 e1 77 - 00 00 00 00 34 94 1f 30
=..0.e.w....4..0
0012fefc 78 00 75 00 08 00 75 00 - 34 ff 12 00 00 00 00 00
x.u...u.4.......
0012ff0c 00 00 00 00 00 00 00 00 - 34 ff 12 00 87 2d 00 30
.........4....-.0
0012ff1c 00 00 00 00 9f 7a 14 00 - 00 00 00 00 78 00 75 00
......z......x.u.
State Dump for Thread Id 0x99c
eax=77d424c2 ebx=00158dd0 ecx=00158c5c edx=00000000 esi=00158ca0
edi=00000100
eip=77f83bb8 esp=01a5fe28 ebp=01a5ff74 iopl=0 nv up ei pl nz na pe
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000202
function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4]
ss:024dd3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
01A5FF74 77D420D9 77D42528 00158CA0 00000000 40158798
ntdll!NtReplyWaitReceivePortEx
01A5FFA8 77D424DA 00157D78 01A5FFEC 77E8B2D8 00158DD0
rpcrt4!NdrConformantArrayMemorySize
01A5FFB4 77E8B2D8 00158DD0 00000000 40158798 00158DD0
rpcrt4!NdrConformantArrayMemorySize
01A5FFEC 00000000 77D424C2 00158DD0 00000000 00000000 kernel32!lstrcmpiW
*----> Raw Stack Dump <----*
01a5fe28 85 22 d4 77 e0 01 00 00 - 54 ff a5 01 00 00 00 00
..".w....T.......
01a5fe38 e0 c0 15 00 58 ff a5 01 - f8 0e 15 00 78 7d 15 00
.....X.......x}..
01a5fe48 d0 8d 15 00 01 25 00 24 - 01 74 00 21 01 9c 00 28
......%.$.t.!...(
01a5fe58 01 99 00 18 01 ee 00 12 - 00 9f 00 24 00 8b 00 12
............$....
01a5fe68 00 c9 00 36 01 5f 00 3c - 01 51 00 1f 00 a8 00 20 ...6._.<.Q.....
01a5fe78 01 51 00 1f 00 b2 00 10 - 01 44 ff fc 01 9e 00 21
..Q.......D.....!
01a5fe88 01 32 00 35 01 a3 00 21 - 01 9e 00 21 01 aa 00 16
..2.5...!...!....
01a5fe98 01 80 00 21 01 9e 00 21 - 01 93 00 1e 01 9e 00 21
....!...!.......!
01a5fea8 01 9e 00 21 00 be 00 19 - 00 bc 00 18 01 0b 00 07
....!............
01a5feb8 01 24 00 23 01 35 00 36 - 01 7a 00 0f 01 ca 00 25
..$.#.5.6.z.....%
01a5fec8 01 76 00 0f 01 9c 00 20 - 01 9e 00 21 01 9e 00 21 .v.....
....!...!
01a5fed8 01 81 00 20 01 5d 00 17 - 01 a8 00 19 01 a5 00 21 ...
..].........!
01a5fee8 00 e8 00 21 01 a5 00 21 - 01 b3 00 18 01 2d 00 18
....!...!.....-..
01a5fef8 02 1e 00 21 01 a5 00 21 - 01 9e 00 21 01 8e 00 1c
....!...!...!....
01a5ff08 01 a5 00 1b 01 a3 00 21 - 01 9e 00 21 01 3f 00 10
........!...!.?..
01a5ff18 01 a5 00 21 01 8f 00 16 - 02 31 00 13 01 ca 00 16
....!.....1......
01a5ff28 01 a1 00 07 40 89 d2 fd - a0 4d d2 fd 00 00 00 00
[email protected]......
01a5ff38 a0 4d d2 fd 30 4f d2 fd - 64 0c bd b5 f3 da 42 80
..M..0O..d.....B.
01a5ff48 a4 da 42 80 d4 4b 06 80 - 00 4f d2 fd a0 4d d2 fd
...B..K...O...M..
01a5ff58 00 a2 2f 4d ff ff ff ff - 50 fe a5 01 ff ff ff ff
.../M....P.......
State Dump for Thread Id 0x934
eax=6502c3a3 ebx=00000000 ecx=00000000 edx=00000000 esi=77f8318c
edi=026fff98
eip=77f83197 esp=026fff84 ebp=026fffa0 iopl=0 nv up ei pl nz na pe
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000202
function: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,[esp+0x4]
ss:0317d557=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
026FFFA0 77EA9D5F 000000C8 00000000 6502C3AE 000000C8 ntdll!NtDelayExecution
026FFFEC 00000000 6502C3A3 00000000 00000000 02700040 kernel32!Sleep
*----> Raw Stack Dump <----*
026fff84 94 9d ea 77 00 00 00 00 - 98 ff 6f 02 00 00 00 00
....w......o.....
026fff94 01 00 03 00 80 7b e1 ff - ff ff ff ff ec ff 6f 02
......{........o.
026fffa4 5f 9d ea 77 c8 00 00 00 - 00 00 00 00 ae c3 02 65
_..w...........e
026fffb4 c8 00 00 00 d8 b2 e8 77 - 00 00 00 00 00 00 00 00
........w........
026fffc4 01 00 03 00 00 00 00 00 - 00 c0 fd 7f 00 00 00 00
.................
026fffd4 c0 ff 6f 02 00 00 00 00 - ff ff ff ff 6c 13 ed 77
...o.........l..w
026fffe4 98 2a e8 77 00 00 00 00 - 00 00 00 00 00 00 00 00
..*.w............
026ffff4 a3 c3 02 65 00 00 00 00 - 00 00 00 00 40 00 70 02
[email protected].
02700004 00 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00
.................
02700014 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700024 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700034 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700044 00 00 70 02 00 00 00 00 - 04 00 00 00 11 00 00 00
...p.............
02700054 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700064 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700074 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700084 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02700094 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
027000a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
027000b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
State Dump for Thread Id 0x908
eax=00000844 ebx=00000000 ecx=00000211 edx=00000000 esi=00000000
edi=0020e008
eip=6061fdc3 esp=0297fb60 ebp=0297fb68 iopl=0 nv up ei pl nz ac po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000216
function: DrvConvertDevMode
6061fda4 3bfe cmp edi,esi
6061fda6 7608 jbe DrvConvertDevMode+0x80c4
(606238b0)
6061fda8 3bf8 cmp edi,eax
6061fdaa 0f8278010000 jb DrvConvertDevMode+0x473c
(6061ff28)
6061fdb0 f7c703000000 test edi,0x3
6061fdb6 7514 jnz DrvDocumentEvent+0xef1 (6062becc)
6061fdb8 c1e902 shr ecx,0x2
6061fdbb 83e203 and edx,0x3
6061fdbe 83f908 cmp ecx,0x8
6061fdc1 7229 jb 6062f0ec
FAULT ->6061fdc3 f3a5 rep movsd ds:00000000=????????
es:0020e008=001f95a8
6061fdc5 ff2495d8fe6160
ds:00000000=????????
jmp dword ptr [DrvConvertDevMode+0x46ec
(6061fed8)+edx*4]
6061fdcc 8bc7 mov eax,edi
6061fdce ba03000000 mov edx,0x3
6061fdd3 83e904 sub ecx,0x4
6061fdd6 720c jb DrvConvertDevMode+0xc8f8
(606280e4)
6061fdd8 83e003 and eax,0x3
6061fddb 03c8 add ecx,eax
6061fddd ff2485f0fd6160
ds:00000844=????????
jmp dword ptr [DrvConvertDevMode+0x4604
(6061fdf0)+eax*4]
6061fde4 ff248de8fe6160
ds:00000211=????????
jmp dword ptr [DrvConvertDevMode+0x46fc
(6061fee8)+ecx*4]
6061fdeb 90 nop
6061fdec ff248d6cfe6160
ds:00000211=????????
jmp dword ptr [DrvConvertDevMode+0x4680
(6061fe6c)+ecx*4]
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0297FB68 6062A627 0020E008 00000000 00000844 00000000 !DrvConvertDevMode
0297FD98 6062A277 02E23C30 60600000 0297FDE0 FFFFFFFF
!DrvAdvancedDocumentProperties
0297FE04 7780EAA3 00000000 00000000 001BAE68 0020E008
!DrvDocumentPropertySheets
0297FE3C 301058F2 00000000 00000000 0297FE68 0074EB3C
winspool!DocumentPropertiesA
0297FF8C 301056DD 00000001 77F8313C 00000028 77F8316D !<nosymbols>
3010567D 5C353957 89307CF0 7CF06035 F05CBB30 850F307C !<nosymbols>
F6335653 00000000 00000000 00000000 00000000 00000000 <nosymbols>
*----> Raw Stack Dump <----*
0297fb60 e0 fd 97 02 00 00 00 00 - 98 fd 97 02 27 a6 62 60
.............'.b`
0297fb70 08 e0 20 00 00 00 00 00 - 44 08 00 00 00 00 00 00 ..
......D.......
0297fb80 e0 fd 97 02 e0 fd 97 02 - 00 00 00 00 00 00 00 00
.................
0297fb90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fba0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fbb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fbc0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fbd0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fbe0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fbf0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fc00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0297fc10 00 00 00 00 46 00 3a 00 - 5c 00 57 00 49 00 4e 00
.....F.:.\.W.I.N.
0297fc20 4e 00 54 00 5c 00 53 00 - 79 00 73 00 74 00 65 00
N.T.\.S.y.s.t.e.
0297fc30 6d 00 33 00 32 00 5c 00 - 73 00 70 00 e8 85 63 60
m.3.2.\.s.p...c`
0297fc40 60 85 63 60 00 00 00 00 - 06 00 00 00 98 fc 97 02
`.c`............
0297fc50 c8 76 f8 77 06 fd 97 02 - 0c 00 00 00 00 00 60 60
..v.w..........``
0297fc60 b8 85 63 60 e8 85 63 60 - 04 fd 97 02 01 00 00 00
...c`..c`........
0297fc70 00 00 00 00 f8 00 60 60 - 68 fc 97 02 00 fd 97 02
.......``h.......
0297fc80 5c fd 97 02 01 00 00 00 - a8 fc 97 02 66 51 f8 77
\...........fQ.w
0297fc90 00 00 60 60 00 00 00 00 - 6c fd 97 02 a5 74 f8 77
...``....l....t.w