M
Melissa Menz
Hello All,
Any help, would be greatly appreciated. We have a user on
Windows 2000 and Office 2000 and she is experiencing
issues when she attempts to copy and paste text from one
email to another. When we do this, Outlook displays an
error saying that It also happens when she attempts to
copy text from an email to a Word document. I have
reinstalled Office 2000 and it still happens. I have
repaired Office 2000 and it still happens. The error
message is as follows and there is an attached dr watson
log.
OUTLOOK.EXE has generated errors and will be closed by
Windows. You will need to restart the program. An error
log is being generated.
In case the dr watson log is not attached, below is the
most recent entry pertaining to this error.
Thanks,
Melissa Menz
Application exception occurred:
App: (pid=1384)
When: 7/31/2003 @ 15:04:35.894
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: JENNIMURER
User Name: jjmurer
Number of Processors: 1
Processor Type: x86 Family 6 Model 6 Stepping 10
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 3
Current Type: Uniprocessor Free
Registered Organization: TRX
Registered Owner: TRX
*----> Task List <----*
0 Idle.exe
8 System.exe
144 SMSS.exe
168 CSRSS.exe
164 WINLOGON.exe
216 SERVICES.exe
228 LSASS.exe
388 svchost.exe
436 svchost.exe
480 spoolsv.exe
512 mwmdmsvc.exe
536 mwssw32.exe
632 Zanda.exe
688 regsvc.exe
736 mstask.exe
756 tcpsvcs.exe
792 SNMP.exe
828 WinMgmt.exe
856 svchost.exe
212 Njeeves.exe
932 Nvcsched.exe
776 Nvcoas.exe
1028 explorer.exe
1224 tp4mon.exe
1032 AUTOCHK.exe
1272 Zlh.exe
1212 YPager.exe
1328 Nymse.exe
1332 CClaw.exe
1384 OUTLOOK.exe
1420 MAPISP32.exe
700 DRWTSN32.exe
0 _Total.exe
(30000000 - 3000E000)
(77F80000 - 77FFB000)
(3A420000 - 3A933000)
(78000000 - 78046000)
(77E80000 - 77F31000)
(77A50000 - 77B45000)
(77D30000 - 77DA1000)
(77DB0000 - 77E0B000)
(77F40000 - 77F79000)
(77E10000 - 77E6F000)
(71710000 - 71794000)
(308C0000 - 30E1C000)
(732E0000 - 73305000)
(3A950000 - 3AAE8000)
(62100000 - 621C8000)
(782F0000 - 78536000)
(70BD0000 - 70C35000)
(76620000 - 76630000)
(3FF30000 - 3FF48000)
(77820000 - 77827000)
(759B0000 - 759B6000)
(770F0000 - 772ED000)
(626F0000 - 62714000)
(625D0000 - 625EF000)
(62030000 - 620EE000)
(779B0000 - 77A4B000)
(01310000 - 0137C000)
(74FF0000 - 75002000)
(75030000 - 75043000)
(75020000 - 75028000)
(77980000 - 779A4000)
(75050000 - 75058000)
(74FD0000 - 74FED000)
(75010000 - 75017000)
(782C0000 - 782CC000)
(77340000 - 77353000)
(77520000 - 77525000)
(77320000 - 77337000)
(75150000 - 75160000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(77950000 - 77978000)
(773B0000 - 773DE000)
(77380000 - 773A2000)
(77830000 - 7783E000)
(77880000 - 7790D000)
(77C10000 - 77C6D000)
(774E0000 - 77512000)
(774C0000 - 774D1000)
(77530000 - 77552000)
(77360000 - 77379000)
(10000000 - 10007000)
(777E0000 - 777E8000)
(782D0000 - 782EE000)
(77440000 - 774B6000)
(77430000 - 77440000)
(3A020000 - 3A03E000)
(3A000000 - 3A010000)
(62730000 - 627BF000)
(777F0000 - 777F5000)
(629A0000 - 62A32000)
(61E50000 - 61ED5000)
(5EC00000 - 5EC95000)
(01840000 - 0185F000)
(01880000 - 0188E000)
(775A0000 - 77625000)
(70440000 - 704CF000)
(3A270000 - 3A2AB000)
(75E60000 - 75E7A000)
(63580000 - 6382E000)
(1A400000 - 1A47A000)
(718C0000 - 71944000)
(70F30000 - 70F9E000)
(75AC0000 - 75AE8000)
(70510000 - 7051A000)
(02860000 - 029A9000)
(70200000 - 70295000)
(76B30000 - 76B6D000)
(77800000 - 7781E000)
(760B0000 - 760E2000)
(036F0000 - 03754000)
(03770000 - 03794000)
State Dump for Thread Id 0x5d4
eax=00000001 ebx=00000000 ecx=0006ffb0 edx=00070608
esi=037483d0 edi=780014a8
eip=00000000 esp=0006eda4 ebp=0006edb8 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000206
function: <nosymbols>
FAULT ->00000000 ???
00000001 ???
00000002 ???
00000003 ???
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0006EDA0 036F1862 0373107C 037483D0 00000009 02424CD0 !
<nosymbols>
0006EDB8 036F17F1 037483D0 0006EDAC 0000EBCC 0006F20C
html32!RtfToForeign32
0006EDCC 70F89208 00BE009C 00000000 00BE0094 00000000
html32!RtfToForeign32
0006F20C 70F89327 0006F42C 00000000 70F96280 00000001 !
<nosymbols>
0006F64C 70F3A2CE 00000001 0006F6D8 024235A0 00000000 !
<nosymbols>
0006F668 70F3B625 00000000 00081610 0006F6D8 70F70B51 !
<nosymbols>
0006F6E0 70F711FE 02424BE0 02424BF0 000E81F0 02423818 !
<nosymbols>
0006F754 70F482F2 00000002 00000000 00000000 00000001 !
<nosymbols>
0006F778 70F44A5A 00000002 00000000 00000000 02423800 !
<nosymbols>
0006F79C 635DF762 02423800 635CDED4 0000001A 00000002 !
<nosymbols>
0006F7CC 635DCC32 3A4AC480 0000001A 00000002 00000000 !
<nosymbols>
0006FB00 00000000 00070000 00000363 00000000 0006FC98 !
<nosymbols>
*----> Raw Stack Dump <----*
0006eda4 62 18 6f 03 7c 10 73 03 - d0 83 74 03 09 00 00
00 b.o.|.s...t.....
0006edb4 d0 4c 42 02 cc ed 06 00 - f1 17 6f 03 d0 83 74
03 .LB.......o...t.
0006edc4 ac ed 06 00 cc eb 00 00 - 0c f2 06 00 08 92 f8
70 ...............p
0006edd4 9c 00 be 00 00 00 00 00 - 94 00 be 00 00 00 00
00 ................
0006ede4 7b 90 f8 70 57 c9 bf 70 - 3d 7e e8 77 00 00 00
00 {..pW..p=~.w....
0006edf4 43 00 3a 00 5c 00 44 00 - 4f 00 43 00 55 00 4d
00 C.:.\.D.O.C.U.M.
0006ee04 45 00 7e 00 31 00 5c 00 - 6a 00 6a 00 6d 00 75
00 E.~.1.\.j.j.m.u.
0006ee14 72 00 65 00 72 00 5c 00 - 4c 00 4f 00 43 00 41
00 r.e.r.\.L.O.C.A.
0006ee24 4c 00 53 00 7e 00 31 00 - 5c 00 54 00 65 00 6d
00 L.S.~.1.\.T.e.m.
0006ee34 70 00 5c 00 00 00 00 00 - 00 00 00 00 00 00 00
00 p.\.............
0006ee44 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006ee54 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006ee64 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006ee74 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006ee84 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006ee94 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006eea4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006eeb4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006eec4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006eed4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
State Dump for Thread Id 0x74
eax=6210798e ebx=00000003 ecx=00000018 edx=00000000
esi=77f837a7 edi=00000003
eip=77f837b2 esp=00e5fe54 ebp=00e5fea0 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246
function: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,
[esp+0x4] ss:018dd427=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
00E5FEA0 77E1E97B 00E5FE78 00000001 00000000 00000000
ntdll!NtWaitForMultipleObjects
00E5FEFC 77E1E9C8 00E5FEC8 00E5FF74 FFFFFFFF 000000FF
user32!MsgWaitForMultipleObjectsEx
00E5FF18 62107A08 00000002 00E5FF74 00000000 FFFFFFFF
user32!MsgWaitForMultipleObjects
77F8313C 8B000000 83042454 0F00147A 016F3E85 42FF9000
MSMAPI32!ScInitMapiUtil
180D8B64 00000000 00000000 00000000 00000000 00000000
<nosymbols>
*----> Raw Stack Dump <----*
00e5fe54 00 9d ea 77 03 00 00 00 - 78 fe e5 00 01 00 00
00 ...w....x.......
00e5fe64 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
00e5fe74 03 00 00 00 e8 00 00 00 - ec 00 00 00 f4 00 00
00 ................
00e5fe84 9f 7c 10 62 7c 00 d2 00 - 40 00 d2 00 b8 00 d2
00 .|.b|...@.......
00e5fe94 00 e6 e1 77 00 00 00 00 - 00 00 00 00 fc fe e5
00 ...w............
00e5fea4 7b e9 e1 77 78 fe e5 00 - 01 00 00 00 00 00 00
00 {..wx...........
00e5feb4 00 00 00 00 00 00 00 00 - 46 5b e1 77 eb 55 e1
77 ........F[.w.U.w
00e5fec4 ab e9 e1 77 e8 00 00 00 - ec 00 00 00 f4 00 00
00 ...w............
00e5fed4 66 00 20 00 45 00 6e 00 - 01 00 00 00 07 05 00
00 f. .E.n.........
00e5fee4 60 ff e5 00 00 00 00 00 - 00 00 00 00 cc d6 fd
7f `...............
00e5fef4 00 00 00 00 f4 00 00 00 - 18 ff e5 00 c8 e9 e1
77 ...............w
00e5ff04 c8 fe e5 00 74 ff e5 00 - ff ff ff ff ff 00 00
00 ....t...........
00e5ff14 00 00 00 00 3c 31 f8 77 - 08 7a 10 62 02 00 00
00 ....<1.w.z.b....
00e5ff24 74 ff e5 00 00 00 00 00 - ff ff ff ff ff 00 00
00 t...............
00e5ff34 30 00 00 00 00 00 07 00 - ec ff e5 00 28 f9 06
00 0...........(...
00e5ff44 a4 da 42 80 10 2f 06 80 - 80 a1 60 81 20 a0 60
81 ..B../....`. .`.
00e5ff54 70 7c 07 be c2 c9 f4 77 - 00 20 50 c0 40 00 d2
00 p|.....w. P.@...
00e5ff64 7c 00 d2 00 b8 00 d2 00 - 00 00 00 00 00 00 00
00 |...............
00e5ff74 e8 00 00 00 ec 00 00 00 - 00 6d 07 00 ff ff ff
ff .........m......
00e5ff84 00 00 00 00 00 00 00 00 - 68 00 00 00 00 00 00
00 ........h.......
State Dump for Thread Id 0x5c4
eax=778321fe ebx=00000004 ecx=ffffffff edx=00000000
esi=77f837a7 edi=00000004
eip=77f837b2 esp=0141fd24 ebp=0141fd70 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246
function: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,
[esp+0x4] ss:01e9d2f7=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0141FD70 77EA9C13 0141FD48 00000001 00000000 00000000
ntdll!NtWaitForMultipleObjects
0141FFB4 77E8B2D8 00000005 00000000 000B000A 000A09B8
kernel32!WaitForMultipleObjects
0141FFEC 00000000 778321FE 000A09B8 00000000 000000C8
kernel32!lstrcmpiW
*----> Raw Stack Dump <----*
0141fd24 00 9d ea 77 04 00 00 00 - 48 fd 41 01 01 00 00
00 ...w....H.A.....
0141fd34 00 00 00 00 00 00 00 00 - 01 00 00 00 b8 09 0a
00 ................
0141fd44 01 00 00 00 d8 01 00 00 - dc 01 00 00 ec 01 00
00 ................
0141fd54 8c 02 00 00 08 80 6a 81 - 00 00 00 00 b4 1a 03
be ......j.........
0141fd64 e8 01 00 00 11 00 00 00 - 02 00 00 00 b4 ff 41
01 ..............A.
0141fd74 13 9c ea 77 48 fd 41 01 - 01 00 00 00 00 00 00
00 ...wH.A.........
0141fd84 00 00 00 00 00 00 00 00 - b2 22 83 77 04 00 00
00 .........".w....
0141fd94 b0 fe 41 01 00 00 00 00 - ff ff ff ff b8 09 0a
00 ..A.............
0141fda4 0a 00 0b 00 00 00 00 00 - 01 00 00 00 ff 0f 1f
00 ................
0141fdb4 00 00 00 00 00 00 00 00 - 01 00 00 00 38 00 00
00 ............8...
0141fdc4 23 00 00 00 23 00 00 00 - 00 00 00 00 0a 00 0b
00 #...#...........
0141fdd4 b8 09 0a 00 50 00 00 00 - ff ff ff ff fe 21 83
77 ....P........!.w
0141fde4 35 83 f8 77 50 b6 e8 77 - 1b 00 00 00 00 02 00
00 5..wP..w........
0141fdf4 fc ff 41 01 23 00 00 00 - 00 00 00 00 00 00 00
00 ..A.#...........
0141fe04 08 80 6a 81 08 80 6a 81 - 40 0e 99 81 00 00 00
00 ..j...j.@.......
0141fe14 40 0e 99 81 2c 1b 03 be - 2a 45 4a 80 64 7c 06
80 @...,...*EJ.d|..
0141fe24 40 0e 99 81 00 00 00 00 - 64 7c 06 80 40 0e 99
81 @.......d|..@...
0141fe34 00 00 00 00 40 0e 99 81 - 4c 1b 03 be 0d 51 4a
80 [email protected].
0141fe44 88 2c 00 e1 08 80 6a 81 - 88 2c 00 e1 08 80 6a
81 .,....j..,....j.
0141fe54 44 02 00 00 08 80 6a 81 - 00 00 00 00 0c 80 6a
81 D.....j.......j.
State Dump for Thread Id 0x588
eax=62114dc0 ebx=00000002 ecx=00000001 edx=00000000
esi=77f837a7 edi=00000002
eip=77f837b2 esp=014afea8 ebp=014afef4 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246
function: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,
[esp+0x4] ss:01f2d47b=3f3f3f3f
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
014AFEF4 77E1E97B 014AFECC 00000001 00000000 014AFEEC
ntdll!NtWaitForMultipleObjects
014AFF50 77E1E9C8 014AFF1C 00CE1EDC 00007530 000000FF
user32!MsgWaitForMultipleObjectsEx
014AFF6C 62114E6B 00000001 00CE1EDC 00000000 00007530
user32!MsgWaitForMultipleObjects
77F8313C 8B000000 83042454 0F00147A 016F3E85 42FF9000
MSMAPI32!WrapStoreEntryID
180D8B64 00000000 00000000 00000000 00000000 00000000
<nosymbols>
*----> Raw Stack Dump <----*
014afea8 00 9d ea 77 02 00 00 00 - cc fe 4a 01 01 00 00
00 ...w......J.....
014afeb8 00 00 00 00 ec fe 4a 01 - 00 00 00 00 00 00 00
00 ......J.........
014afec8 02 00 00 00 48 01 00 00 - c0 02 00 00 ec 89 65
e2 ....H.........e.
014afed8 c8 89 65 e2 c4 37 6b 81 - 01 00 00 00 01 00 00
00 ..e..7k.........
014afee8 00 e6 e1 77 00 5d 1e ee - ff ff ff ff 50 ff 4a
01 ...w.]......P.J.
014afef8 7b e9 e1 77 cc fe 4a 01 - 01 00 00 00 00 00 00
00 {..w..J.........
014aff08 ec fe 4a 01 00 00 00 00 - dc 1e ce 00 90 1e ce
00 ..J.............
014aff18 c0 1e ce 00 48 01 00 00 - c0 02 00 00 04 22 49
80 ....H........"I.
014aff28 88 0c 99 81 c0 4b 65 81 - 20 e0 5d 81 00 00 00
00 .....Ke. .].....
014aff38 b0 e1 5d 81 60 7c 07 be - 00 00 00 00 cc c6 fd
7f ..].`|..........
014aff48 00 00 00 00 c0 02 00 00 - 6c ff 4a 01 c8 e9 e1
77 ........l.J....w
014aff58 1c ff 4a 01 dc 1e ce 00 - 30 75 00 00 ff 00 00
00 ..J.....0u......
014aff68 00 00 00 00 3c 31 f8 77 - 6b 4e 11 62 01 00 00
00 ....<1.wkN.b....
014aff78 dc 1e ce 00 00 00 00 00 - 30 75 00 00 ff 00 00
00 ........0u......
014aff88 00 00 00 00 ec ff 4a 01 - 00 00 00 00 2c 00 20
00 ......J.....,. .
014aff98 00 00 00 00 ff ff ff ff - 47 0f 43 80 00 00 00
00 ........G.C.....
014affa8 00 00 00 00 00 00 00 00 - 4b 12 43 80 a4 67 f8
77 ........K.C..g.w
014affb8 d8 b2 e8 77 00 00 00 00 - 00 00 00 00 2c 00 20
00 ...w........,. .
014affc8 00 00 00 00 00 c0 fd 7f - 01 00 00 00 c0 ff 4a
01 ..............J.
014affd8 01 00 00 00 ff ff ff ff - 6c 13 ed 77 98 2a e8
77 ........l..w.*.w
State Dump for Thread Id 0x5a0
eax=00000000 ebx=ffffffff ecx=0008af10 edx=00000000
esi=7fffffff edi=00000102
eip=77f83786 esp=016bfce0 ebp=016bfd18 iopl=0 nv
up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000297
function: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,
[esp+0x4] ss:0213d2b3=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
016BFD18 74FD7EE6 000002EC 00000294 00000000 00000004
ntdll!NtWaitForSingleObject
016BFE04 75031DA9 00000000 016BFEB4 00000000 00000000
msafd!WSPSetSockOpt
016BFE68 62747EF7 00000000 016BFEB4 00000000 00000000
ws2_32!select
00000006 00000000 00000000 00000000 00000000 00000000
EMSMDB32!MSProviderInit
*----> Raw Stack Dump <----*
016bfce0 d2 bc fd 74 ec 02 00 00 - 01 00 00 00 04 fd 6b
01 ...t..........k.
016bfcf0 b4 fe 6b 01 8c fd 6b 01 - 7c fd 6b 01 60 fc 27
f5 ..k...k.|.k.`.'.
016bfd00 9e 57 c3 01 ff ff ff ff - ff ff ff 7f 50 86 09
00 .W..........P...
016bfd10 00 00 00 00 00 00 00 00 - 04 fe 6b 01 e6 7e fd
74 ..........k..~.t
016bfd20 ec 02 00 00 94 02 00 00 - 00 00 00 00 04 00 00
00 ................
016bfd30 00 00 00 00 18 58 09 00 - 00 00 00 00 00 00 00
00 .....X..........
016bfd40 00 00 00 00 00 1f 0a fa - ff ff ff ff 00 00 00
00 ................
016bfd50 08 00 00 00 08 60 0b 00 - 00 00 00 00 4c fd 6b
01 .....`......L.k.
016bfd60 00 00 00 00 00 00 00 00 - 10 fd 6b 01 c0 fd 6b
01 ..........k...k.
016bfd70 dc ff 6b 01 00 00 00 00 - 00 00 00 00 00 1f 0a
fa ..k.............
016bfd80 ff ff ff ff 02 00 00 00 - 00 02 00 00 94 02 00
00 ................
016bfd90 19 00 00 00 08 fe 6b 01 - 9c 02 00 00 19 00 00
00 ......k.........
016bfda0 18 fe 6b 01 00 00 00 00 - 00 00 00 00 22 9b 03
75 ..k........."..u
016bfdb0 35 9b ea 77 a4 02 00 00 - 00 00 00 00 00 00 00
00 5..w............
016bfdc0 50 86 09 00 64 28 4b 01 - 00 00 00 00 7c fd 6b
01 P...d(K.....|.k.
016bfdd0 38 00 00 00 02 00 00 00 - 00 00 00 00 00 00 00
00 8...............
016bfde0 00 00 00 00 10 00 00 00 - a4 fd 6b 01 30 fd 6b
01 ..........k.0.k.
016bfdf0 38 fe 6b 01 58 fe 6b 01 - 36 df fd 74 78 30 fd
74 8.k.X.k.6..tx0.t
016bfe00 ff ff ff ff 68 fe 6b 01 - a9 1d 03 75 00 00 00
00 ....h.k....u....
016bfe10 b4 fe 6b 01 00 00 00 00 - 00 00 00 00 ac fe 6b
01 ..k...........k.
State Dump for Thread Id 0x3e4
eax=77d424c2 ebx=000a5668 ecx=000a4fbc edx=00000000
esi=00089140 edi=00000100
eip=77f83bb8 esp=018dfe28 ebp=018dff74 iopl=0 nv
up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000202
function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,
[esp+0x4] ss:0235d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
018DFF74 77D420D9 77D42528 00089140 00000000 400CA090
ntdll!NtReplyWaitReceivePortEx
018DFFA8 77D424DA 000A5598 018DFFEC 77E8B2D8 000A5668
rpcrt4!NdrConformantArrayMemorySize
018DFFB4 77E8B2D8 000A5668 00000000 400CA090 000A5668
rpcrt4!NdrConformantArrayMemorySize
018DFFEC 00000000 77D424C2 000A5668 00000000 6FAF000D
kernel32!lstrcmpiW
*----> Raw Stack Dump <----*
018dfe28 85 22 d4 77 8c 03 00 00 - 54 ff 8d 01 00 00 00
00 .".w....T.......
018dfe38 08 c1 0a 00 58 ff 8d 01 - 10 d8 07 00 98 55 0a
00 ....X........U..
018dfe48 68 56 0a 00 00 00 00 00 - 00 00 00 00 00 00 00
00 hV..............
018dfe58 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfe68 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfe78 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfe88 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfe98 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfea8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfeb8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfec8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfed8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfee8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfef8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dff08 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dff18 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dff28 00 00 00 00 c0 4b 65 81 - 00 36 6b 81 00 00 00
00 .....Ke..6k.....
018dff38 90 37 6b 81 60 2c e2 bd - 46 02 00 00 a4 da 42
80 .7k.`,..F.....B.
018dff48 10 2f 06 80 60 37 6b 81 - 00 36 6b 81 00 00 00
00 ./..`7k..6k.....
018dff58 00 a2 2f 4d ff ff ff ff - 50 fe 8d 01 ff ff ff
ff ../M....P.......
State Dump for Thread Id 0x390
eax=63696810 ebx=0241ff74 ecx=dc000062 edx=00000000
esi=77f8377b edi=000003c4
eip=77f83786 esp=0241ff58 ebp=0241ff7c iopl=0 nv
up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000293
function: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,
[esp+0x4] ss:02e9d52b=00000300
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0241FF7C 77E8B32B 000003C4 000927C0 00000000 6367B627
ntdll!NtWaitForSingleObject
77F8316D 4AFFC033 E0850F08 89000005 FF900C42 8D0F044A
kernel32!WaitForSingleObject
0424548B 00000000 00000000 00000000 00000000 00000000
<nosymbols>
*----> Raw Stack Dump <----*
0241ff58 35 9b ea 77 c4 03 00 00 - 00 00 00 00 74 ff 41
02 5..w........t.A.
0241ff68 00 00 00 00 70 2a fb 01 - 3c 31 f8 77 00 44 5f
9a ....p*..<1.w.D_.
0241ff78 fe ff ff ff 6d 31 f8 77 - 2b b3 e8 77 c4 03 00
00 ....m1.w+..w....
0241ff88 c0 27 09 00 00 00 00 00 - 27 b6 67 63 c4 03 00
00 .'......'.gc....
0241ff98 c0 27 09 00 00 00 00 00 - 70 2a fb 01 ec ff 41
02 .'......p*....A.
0241ffa8 70 2a fb 01 0d b5 67 63 - 38 53 0e 00 e7 b4 67
63 p*....gc8S....gc
0241ffb8 d8 b2 e8 77 70 2a fb 01 - 00 00 00 00 38 53 0e
00 ...wp*......8S..
0241ffc8 70 2a fb 01 00 70 fd 7f - 10 53 0e 00 c0 ff 41
02 p*...p...S....A.
0241ffd8 10 53 0e 00 ff ff ff ff - 6c 13 ed 77 98 2a e8
77 .S......l..w.*.w
0241ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 de b4 67
63 ..............gc
0241fff8 70 2a fb 01 00 00 00 00 - f4 00 42 02 04 00 00
00 p*........B.....
02420008 04 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420018 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420028 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420038 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420048 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420058 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420068 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420078 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420088 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
State Dump for Thread Id 0x59c
eax=00070110 ebx=00000000 ecx=000002dc edx=00000000
esi=77f8377b edi=00000410
eip=77f83786 esp=0300ff64 ebp=0300ff88 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246
function: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,
[esp+0x4] ss:03a8d537=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0300FF88 77E8B32B 00000410 FFFFFFFF 00000000 3A4B1198
ntdll!NtWaitForSingleObject
0300FFEC 00000000 3A5680C0 00000000 00000000 00905A4D
kernel32!WaitForSingleObject
*----> Raw Stack Dump <----*
0300ff64 35 9b ea 77 10 04 00 00 - 00 00 00 00 00 00 00
00 5..w............
0300ff74 18 04 00 00 01 00 00 00 - 00 00 00 00 01 01 00
00 ................
0300ff84 01 01 00 00 ec ff 00 03 - 2b b3 e8 77 10 04 00
00 ........+..w....
0300ff94 ff ff ff ff 00 00 00 00 - 98 11 4b 3a 10 04 00
00 ..........K:....
0300ffa4 ff ff ff ff df 80 56 3a - ec f3 06 00 01 00 00
00 ......V:........
0300ffb4 00 00 00 00 d8 b2 e8 77 - 00 00 00 00 ec f3 06
00 .......w........
0300ffc4 01 00 00 00 00 00 00 00 - 00 60 fd 7f 5c 00 44
00 .........`..\.D.
0300ffd4 c0 ff 00 03 5c 00 44 00 - ff ff ff ff 6c 13 ed
77 ....\.D.....l..w
0300ffe4 98 2a e8 77 00 00 00 00 - 00 00 00 00 00 00 00
00 .*.w............
0300fff4 c0 80 56 3a 00 00 00 00 - 00 00 00 00 4d 5a 90
00 ..V:........MZ..
03010004 03 00 00 00 04 00 00 00 - ff ff 00 00 b8 00 00
00 ................
03010014 00 00 00 00 40 00 00 00 - 00 00 00 00 00 00 00
00 ....@...........
03010024 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
03010034 00 00 00 00 00 00 00 00 - b0 00 00 00 0e 1f ba
0e ................
03010044 00 b4 09 cd 21 b8 01 4c - cd 21 54 68 69 73 20
70 ....!..L.!This p
03010054 72 6f 67 72 61 6d 20 63 - 61 6e 6e 6f 74 20 62
65 rogram cannot be
03010064 20 72 75 6e 20 69 6e 20 - 44 4f 53 20 6d 6f 64
65 run in DOS mode
03010074 2e 0d 0d 0a 24 00 00 00 - 00 00 00 00 65 55 21
db ....$.......eU!.
03010084 21 34 4f 88 21 34 4f 88 - 21 34 4f 88 21 34 4f
88 !4O.!4O.!4O.!4O.
03010094 20 34 4f 88 52 69 63 68 - 21 34 4f 88 00 00 00
00 4O.Rich!4O.....
State Dump for Thread Id 0x594
eax=00000006 ebx=000493e0 ecx=75021eba edx=00000000
esi=000887e0 edi=000493e0
eip=77f837dc esp=0328febc ebp=0328fee4 iopl=0 nv
up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000297
function: ZwRemoveIoCompletion
77f837d1 b8a8000000 mov eax,0xa8
77f837d6 8d542404 lea edx,
[esp+0x4] ss:03d0d48f=????????
77f837da cd2e int 2e
77f837dc c21400 ret 0x14
77f837df 53 push ebx
77f837e0 f7e1 mul ecx
77f837e2 8bd8 mov ebx,eax
77f837e4 8b442408 mov eax,
[esp+0x8] ss:03d0d48f=????????
77f837e8 f7642414 mul dword ptr
[esp+0x14] ss:03d0d48f=????????
77f837ec 03d8 add ebx,eax
77f837ee 8b442408 mov eax,
[esp+0x8] ss:03d0d48f=????????
77f837f2 f7e1 mul ecx
77f837f4 03d3 add edx,ebx
77f837f6 5b pop ebx
77f837f7 c21000 ret 0x10
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0328FEE4 77D40090 0000017C 0328FF1C 0328FF0C 0328FF14
ntdll!ZwRemoveIoCompletion
0328FF20 77D48565 000493E0 0328FF60 0328FF5C 0328FF70
rpcrt4!PerformRpcInitialization
0328FF74 77D48444 77D42528 000887E0 00000002 308C2BCA
rpcrt4!NdrClientContextUnmarshall
0328FFA8 77D424DA 000E81B0 0328FFEC 77E8B2D8 000B2B88
rpcrt4!NdrClientContextUnmarshall
0328FFB4 77E8B2D8 000B2B88 00000002 308C2BCA 000B2B88
rpcrt4!NdrConformantArrayMemorySize
0328FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!lstrcmpiW
State Dump for Thread Id 0x37c
eax=00000001 ebx=00000000 ecx=00000000 edx=00000000
esi=77f8377b edi=000002b0
eip=77f83786 esp=032cff54 ebp=032cff78 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246
function: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,
[esp+0x4] ss:03d4d527=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
032CFF78 77E8B32B 000002B0 FFFFFFFF 00000000 3A56A07E
ntdll!NtWaitForSingleObject
032CFFA8 3A56A036 00000000 032CFFEC 77E8B2D8 00236BF0
kernel32!WaitForSingleObject
032CFFB4 77E8B2D8 00236BF0 00000001 00000000 00236BF0 !
RenExitInstance
032CFFEC 00000000 3A56A01F 00236BF0 00000000 032D0008
kernel32!lstrcmpiW
*----> Raw Stack Dump <----*
032cff54 35 9b ea 77 b0 02 00 00 - 00 00 00 00 00 00 00
00 5..w............
032cff64 00 00 00 00 f0 6b 23 00 - 00 00 00 00 01 01 01
00 .....k#.........
032cff74 01 01 01 00 a8 ff 2c 03 - 2b b3 e8 77 b0 02 00
00 ......,.+..w....
032cff84 ff ff ff ff 00 00 00 00 - 7e a0 56 3a b0 02 00
00 ........~.V:....
032cff94 ff ff ff ff 01 00 00 00 - f0 6b 23 00 f0 6b 23
00 .........k#..k#.
032cffa4 01 00 00 00 b4 ff 2c 03 - 36 a0 56 3a 00 00 00
00 ......,.6.V:....
032cffb4 ec ff 2c 03 d8 b2 e8 77 - f0 6b 23 00 01 00 00
00 ..,....w.k#.....
032cffc4 00 00 00 00 f0 6b 23 00 - 00 a0 fd 7f d0 3a 23
00 .....k#......:#.
032cffd4 c0 ff 2c 03 d0 3a 23 00 - ff ff ff ff 6c 13 ed
77 ..,..:#.....l..w
032cffe4 98 2a e8 77 00 00 00 00 - 00 00 00 00 00 00 00
00 .*.w............
032cfff4 1f a0 56 3a f0 6b 23 00 - 00 00 00 00 08 00 2d
03 ..V:.k#.......-.
032d0004 00 10 2d 03 49 00 50 00 - 4d 00 2e 00 41 00 70
00 ..-.I.P.M...A.p.
032d0014 70 00 6f 00 69 00 6e 00 - 74 00 6d 00 49 00 50
00 p.o.i.n.t.m.I.P.
032d0024 4d 00 2e 00 53 00 63 00 - 68 00 65 00 64 00 75
00 M...S.c.h.e.d.u.
032d0034 6c 00 65 00 00 00 00 00 - 00 00 00 00 00 00 00
00 l.e.............
032d0044 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
032d0054 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
032d0064 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
032d0074 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
032d0084 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
Any help, would be greatly appreciated. We have a user on
Windows 2000 and Office 2000 and she is experiencing
issues when she attempts to copy and paste text from one
email to another. When we do this, Outlook displays an
error saying that It also happens when she attempts to
copy text from an email to a Word document. I have
reinstalled Office 2000 and it still happens. I have
repaired Office 2000 and it still happens. The error
message is as follows and there is an attached dr watson
log.
OUTLOOK.EXE has generated errors and will be closed by
Windows. You will need to restart the program. An error
log is being generated.
In case the dr watson log is not attached, below is the
most recent entry pertaining to this error.
Thanks,
Melissa Menz
Application exception occurred:
App: (pid=1384)
When: 7/31/2003 @ 15:04:35.894
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: JENNIMURER
User Name: jjmurer
Number of Processors: 1
Processor Type: x86 Family 6 Model 6 Stepping 10
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 3
Current Type: Uniprocessor Free
Registered Organization: TRX
Registered Owner: TRX
*----> Task List <----*
0 Idle.exe
8 System.exe
144 SMSS.exe
168 CSRSS.exe
164 WINLOGON.exe
216 SERVICES.exe
228 LSASS.exe
388 svchost.exe
436 svchost.exe
480 spoolsv.exe
512 mwmdmsvc.exe
536 mwssw32.exe
632 Zanda.exe
688 regsvc.exe
736 mstask.exe
756 tcpsvcs.exe
792 SNMP.exe
828 WinMgmt.exe
856 svchost.exe
212 Njeeves.exe
932 Nvcsched.exe
776 Nvcoas.exe
1028 explorer.exe
1224 tp4mon.exe
1032 AUTOCHK.exe
1272 Zlh.exe
1212 YPager.exe
1328 Nymse.exe
1332 CClaw.exe
1384 OUTLOOK.exe
1420 MAPISP32.exe
700 DRWTSN32.exe
0 _Total.exe
(30000000 - 3000E000)
(77F80000 - 77FFB000)
(3A420000 - 3A933000)
(78000000 - 78046000)
(77E80000 - 77F31000)
(77A50000 - 77B45000)
(77D30000 - 77DA1000)
(77DB0000 - 77E0B000)
(77F40000 - 77F79000)
(77E10000 - 77E6F000)
(71710000 - 71794000)
(308C0000 - 30E1C000)
(732E0000 - 73305000)
(3A950000 - 3AAE8000)
(62100000 - 621C8000)
(782F0000 - 78536000)
(70BD0000 - 70C35000)
(76620000 - 76630000)
(3FF30000 - 3FF48000)
(77820000 - 77827000)
(759B0000 - 759B6000)
(770F0000 - 772ED000)
(626F0000 - 62714000)
(625D0000 - 625EF000)
(62030000 - 620EE000)
(779B0000 - 77A4B000)
(01310000 - 0137C000)
(74FF0000 - 75002000)
(75030000 - 75043000)
(75020000 - 75028000)
(77980000 - 779A4000)
(75050000 - 75058000)
(74FD0000 - 74FED000)
(75010000 - 75017000)
(782C0000 - 782CC000)
(77340000 - 77353000)
(77520000 - 77525000)
(77320000 - 77337000)
(75150000 - 75160000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(77950000 - 77978000)
(773B0000 - 773DE000)
(77380000 - 773A2000)
(77830000 - 7783E000)
(77880000 - 7790D000)
(77C10000 - 77C6D000)
(774E0000 - 77512000)
(774C0000 - 774D1000)
(77530000 - 77552000)
(77360000 - 77379000)
(10000000 - 10007000)
(777E0000 - 777E8000)
(782D0000 - 782EE000)
(77440000 - 774B6000)
(77430000 - 77440000)
(3A020000 - 3A03E000)
(3A000000 - 3A010000)
(62730000 - 627BF000)
(777F0000 - 777F5000)
(629A0000 - 62A32000)
(61E50000 - 61ED5000)
(5EC00000 - 5EC95000)
(01840000 - 0185F000)
(01880000 - 0188E000)
(775A0000 - 77625000)
(70440000 - 704CF000)
(3A270000 - 3A2AB000)
(75E60000 - 75E7A000)
(63580000 - 6382E000)
(1A400000 - 1A47A000)
(718C0000 - 71944000)
(70F30000 - 70F9E000)
(75AC0000 - 75AE8000)
(70510000 - 7051A000)
(02860000 - 029A9000)
(70200000 - 70295000)
(76B30000 - 76B6D000)
(77800000 - 7781E000)
(760B0000 - 760E2000)
(036F0000 - 03754000)
(03770000 - 03794000)
State Dump for Thread Id 0x5d4
eax=00000001 ebx=00000000 ecx=0006ffb0 edx=00070608
esi=037483d0 edi=780014a8
eip=00000000 esp=0006eda4 ebp=0006edb8 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000206
function: <nosymbols>
FAULT ->00000000 ???
00000001 ???
00000002 ???
00000003 ???
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0006EDA0 036F1862 0373107C 037483D0 00000009 02424CD0 !
<nosymbols>
0006EDB8 036F17F1 037483D0 0006EDAC 0000EBCC 0006F20C
html32!RtfToForeign32
0006EDCC 70F89208 00BE009C 00000000 00BE0094 00000000
html32!RtfToForeign32
0006F20C 70F89327 0006F42C 00000000 70F96280 00000001 !
<nosymbols>
0006F64C 70F3A2CE 00000001 0006F6D8 024235A0 00000000 !
<nosymbols>
0006F668 70F3B625 00000000 00081610 0006F6D8 70F70B51 !
<nosymbols>
0006F6E0 70F711FE 02424BE0 02424BF0 000E81F0 02423818 !
<nosymbols>
0006F754 70F482F2 00000002 00000000 00000000 00000001 !
<nosymbols>
0006F778 70F44A5A 00000002 00000000 00000000 02423800 !
<nosymbols>
0006F79C 635DF762 02423800 635CDED4 0000001A 00000002 !
<nosymbols>
0006F7CC 635DCC32 3A4AC480 0000001A 00000002 00000000 !
<nosymbols>
0006FB00 00000000 00070000 00000363 00000000 0006FC98 !
<nosymbols>
*----> Raw Stack Dump <----*
0006eda4 62 18 6f 03 7c 10 73 03 - d0 83 74 03 09 00 00
00 b.o.|.s...t.....
0006edb4 d0 4c 42 02 cc ed 06 00 - f1 17 6f 03 d0 83 74
03 .LB.......o...t.
0006edc4 ac ed 06 00 cc eb 00 00 - 0c f2 06 00 08 92 f8
70 ...............p
0006edd4 9c 00 be 00 00 00 00 00 - 94 00 be 00 00 00 00
00 ................
0006ede4 7b 90 f8 70 57 c9 bf 70 - 3d 7e e8 77 00 00 00
00 {..pW..p=~.w....
0006edf4 43 00 3a 00 5c 00 44 00 - 4f 00 43 00 55 00 4d
00 C.:.\.D.O.C.U.M.
0006ee04 45 00 7e 00 31 00 5c 00 - 6a 00 6a 00 6d 00 75
00 E.~.1.\.j.j.m.u.
0006ee14 72 00 65 00 72 00 5c 00 - 4c 00 4f 00 43 00 41
00 r.e.r.\.L.O.C.A.
0006ee24 4c 00 53 00 7e 00 31 00 - 5c 00 54 00 65 00 6d
00 L.S.~.1.\.T.e.m.
0006ee34 70 00 5c 00 00 00 00 00 - 00 00 00 00 00 00 00
00 p.\.............
0006ee44 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006ee54 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006ee64 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006ee74 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006ee84 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006ee94 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006eea4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006eeb4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006eec4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
0006eed4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
State Dump for Thread Id 0x74
eax=6210798e ebx=00000003 ecx=00000018 edx=00000000
esi=77f837a7 edi=00000003
eip=77f837b2 esp=00e5fe54 ebp=00e5fea0 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246
function: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,
[esp+0x4] ss:018dd427=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
00E5FEA0 77E1E97B 00E5FE78 00000001 00000000 00000000
ntdll!NtWaitForMultipleObjects
00E5FEFC 77E1E9C8 00E5FEC8 00E5FF74 FFFFFFFF 000000FF
user32!MsgWaitForMultipleObjectsEx
00E5FF18 62107A08 00000002 00E5FF74 00000000 FFFFFFFF
user32!MsgWaitForMultipleObjects
77F8313C 8B000000 83042454 0F00147A 016F3E85 42FF9000
MSMAPI32!ScInitMapiUtil
180D8B64 00000000 00000000 00000000 00000000 00000000
<nosymbols>
*----> Raw Stack Dump <----*
00e5fe54 00 9d ea 77 03 00 00 00 - 78 fe e5 00 01 00 00
00 ...w....x.......
00e5fe64 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
00e5fe74 03 00 00 00 e8 00 00 00 - ec 00 00 00 f4 00 00
00 ................
00e5fe84 9f 7c 10 62 7c 00 d2 00 - 40 00 d2 00 b8 00 d2
00 .|.b|...@.......
00e5fe94 00 e6 e1 77 00 00 00 00 - 00 00 00 00 fc fe e5
00 ...w............
00e5fea4 7b e9 e1 77 78 fe e5 00 - 01 00 00 00 00 00 00
00 {..wx...........
00e5feb4 00 00 00 00 00 00 00 00 - 46 5b e1 77 eb 55 e1
77 ........F[.w.U.w
00e5fec4 ab e9 e1 77 e8 00 00 00 - ec 00 00 00 f4 00 00
00 ...w............
00e5fed4 66 00 20 00 45 00 6e 00 - 01 00 00 00 07 05 00
00 f. .E.n.........
00e5fee4 60 ff e5 00 00 00 00 00 - 00 00 00 00 cc d6 fd
7f `...............
00e5fef4 00 00 00 00 f4 00 00 00 - 18 ff e5 00 c8 e9 e1
77 ...............w
00e5ff04 c8 fe e5 00 74 ff e5 00 - ff ff ff ff ff 00 00
00 ....t...........
00e5ff14 00 00 00 00 3c 31 f8 77 - 08 7a 10 62 02 00 00
00 ....<1.w.z.b....
00e5ff24 74 ff e5 00 00 00 00 00 - ff ff ff ff ff 00 00
00 t...............
00e5ff34 30 00 00 00 00 00 07 00 - ec ff e5 00 28 f9 06
00 0...........(...
00e5ff44 a4 da 42 80 10 2f 06 80 - 80 a1 60 81 20 a0 60
81 ..B../....`. .`.
00e5ff54 70 7c 07 be c2 c9 f4 77 - 00 20 50 c0 40 00 d2
00 p|.....w. P.@...
00e5ff64 7c 00 d2 00 b8 00 d2 00 - 00 00 00 00 00 00 00
00 |...............
00e5ff74 e8 00 00 00 ec 00 00 00 - 00 6d 07 00 ff ff ff
ff .........m......
00e5ff84 00 00 00 00 00 00 00 00 - 68 00 00 00 00 00 00
00 ........h.......
State Dump for Thread Id 0x5c4
eax=778321fe ebx=00000004 ecx=ffffffff edx=00000000
esi=77f837a7 edi=00000004
eip=77f837b2 esp=0141fd24 ebp=0141fd70 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246
function: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,
[esp+0x4] ss:01e9d2f7=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0141FD70 77EA9C13 0141FD48 00000001 00000000 00000000
ntdll!NtWaitForMultipleObjects
0141FFB4 77E8B2D8 00000005 00000000 000B000A 000A09B8
kernel32!WaitForMultipleObjects
0141FFEC 00000000 778321FE 000A09B8 00000000 000000C8
kernel32!lstrcmpiW
*----> Raw Stack Dump <----*
0141fd24 00 9d ea 77 04 00 00 00 - 48 fd 41 01 01 00 00
00 ...w....H.A.....
0141fd34 00 00 00 00 00 00 00 00 - 01 00 00 00 b8 09 0a
00 ................
0141fd44 01 00 00 00 d8 01 00 00 - dc 01 00 00 ec 01 00
00 ................
0141fd54 8c 02 00 00 08 80 6a 81 - 00 00 00 00 b4 1a 03
be ......j.........
0141fd64 e8 01 00 00 11 00 00 00 - 02 00 00 00 b4 ff 41
01 ..............A.
0141fd74 13 9c ea 77 48 fd 41 01 - 01 00 00 00 00 00 00
00 ...wH.A.........
0141fd84 00 00 00 00 00 00 00 00 - b2 22 83 77 04 00 00
00 .........".w....
0141fd94 b0 fe 41 01 00 00 00 00 - ff ff ff ff b8 09 0a
00 ..A.............
0141fda4 0a 00 0b 00 00 00 00 00 - 01 00 00 00 ff 0f 1f
00 ................
0141fdb4 00 00 00 00 00 00 00 00 - 01 00 00 00 38 00 00
00 ............8...
0141fdc4 23 00 00 00 23 00 00 00 - 00 00 00 00 0a 00 0b
00 #...#...........
0141fdd4 b8 09 0a 00 50 00 00 00 - ff ff ff ff fe 21 83
77 ....P........!.w
0141fde4 35 83 f8 77 50 b6 e8 77 - 1b 00 00 00 00 02 00
00 5..wP..w........
0141fdf4 fc ff 41 01 23 00 00 00 - 00 00 00 00 00 00 00
00 ..A.#...........
0141fe04 08 80 6a 81 08 80 6a 81 - 40 0e 99 81 00 00 00
00 ..j...j.@.......
0141fe14 40 0e 99 81 2c 1b 03 be - 2a 45 4a 80 64 7c 06
80 @...,...*EJ.d|..
0141fe24 40 0e 99 81 00 00 00 00 - 64 7c 06 80 40 0e 99
81 @.......d|..@...
0141fe34 00 00 00 00 40 0e 99 81 - 4c 1b 03 be 0d 51 4a
80 [email protected].
0141fe44 88 2c 00 e1 08 80 6a 81 - 88 2c 00 e1 08 80 6a
81 .,....j..,....j.
0141fe54 44 02 00 00 08 80 6a 81 - 00 00 00 00 0c 80 6a
81 D.....j.......j.
State Dump for Thread Id 0x588
eax=62114dc0 ebx=00000002 ecx=00000001 edx=00000000
esi=77f837a7 edi=00000002
eip=77f837b2 esp=014afea8 ebp=014afef4 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246
function: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,
[esp+0x4] ss:01f2d47b=3f3f3f3f
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
014AFEF4 77E1E97B 014AFECC 00000001 00000000 014AFEEC
ntdll!NtWaitForMultipleObjects
014AFF50 77E1E9C8 014AFF1C 00CE1EDC 00007530 000000FF
user32!MsgWaitForMultipleObjectsEx
014AFF6C 62114E6B 00000001 00CE1EDC 00000000 00007530
user32!MsgWaitForMultipleObjects
77F8313C 8B000000 83042454 0F00147A 016F3E85 42FF9000
MSMAPI32!WrapStoreEntryID
180D8B64 00000000 00000000 00000000 00000000 00000000
<nosymbols>
*----> Raw Stack Dump <----*
014afea8 00 9d ea 77 02 00 00 00 - cc fe 4a 01 01 00 00
00 ...w......J.....
014afeb8 00 00 00 00 ec fe 4a 01 - 00 00 00 00 00 00 00
00 ......J.........
014afec8 02 00 00 00 48 01 00 00 - c0 02 00 00 ec 89 65
e2 ....H.........e.
014afed8 c8 89 65 e2 c4 37 6b 81 - 01 00 00 00 01 00 00
00 ..e..7k.........
014afee8 00 e6 e1 77 00 5d 1e ee - ff ff ff ff 50 ff 4a
01 ...w.]......P.J.
014afef8 7b e9 e1 77 cc fe 4a 01 - 01 00 00 00 00 00 00
00 {..w..J.........
014aff08 ec fe 4a 01 00 00 00 00 - dc 1e ce 00 90 1e ce
00 ..J.............
014aff18 c0 1e ce 00 48 01 00 00 - c0 02 00 00 04 22 49
80 ....H........"I.
014aff28 88 0c 99 81 c0 4b 65 81 - 20 e0 5d 81 00 00 00
00 .....Ke. .].....
014aff38 b0 e1 5d 81 60 7c 07 be - 00 00 00 00 cc c6 fd
7f ..].`|..........
014aff48 00 00 00 00 c0 02 00 00 - 6c ff 4a 01 c8 e9 e1
77 ........l.J....w
014aff58 1c ff 4a 01 dc 1e ce 00 - 30 75 00 00 ff 00 00
00 ..J.....0u......
014aff68 00 00 00 00 3c 31 f8 77 - 6b 4e 11 62 01 00 00
00 ....<1.wkN.b....
014aff78 dc 1e ce 00 00 00 00 00 - 30 75 00 00 ff 00 00
00 ........0u......
014aff88 00 00 00 00 ec ff 4a 01 - 00 00 00 00 2c 00 20
00 ......J.....,. .
014aff98 00 00 00 00 ff ff ff ff - 47 0f 43 80 00 00 00
00 ........G.C.....
014affa8 00 00 00 00 00 00 00 00 - 4b 12 43 80 a4 67 f8
77 ........K.C..g.w
014affb8 d8 b2 e8 77 00 00 00 00 - 00 00 00 00 2c 00 20
00 ...w........,. .
014affc8 00 00 00 00 00 c0 fd 7f - 01 00 00 00 c0 ff 4a
01 ..............J.
014affd8 01 00 00 00 ff ff ff ff - 6c 13 ed 77 98 2a e8
77 ........l..w.*.w
State Dump for Thread Id 0x5a0
eax=00000000 ebx=ffffffff ecx=0008af10 edx=00000000
esi=7fffffff edi=00000102
eip=77f83786 esp=016bfce0 ebp=016bfd18 iopl=0 nv
up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000297
function: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,
[esp+0x4] ss:0213d2b3=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
016BFD18 74FD7EE6 000002EC 00000294 00000000 00000004
ntdll!NtWaitForSingleObject
016BFE04 75031DA9 00000000 016BFEB4 00000000 00000000
msafd!WSPSetSockOpt
016BFE68 62747EF7 00000000 016BFEB4 00000000 00000000
ws2_32!select
00000006 00000000 00000000 00000000 00000000 00000000
EMSMDB32!MSProviderInit
*----> Raw Stack Dump <----*
016bfce0 d2 bc fd 74 ec 02 00 00 - 01 00 00 00 04 fd 6b
01 ...t..........k.
016bfcf0 b4 fe 6b 01 8c fd 6b 01 - 7c fd 6b 01 60 fc 27
f5 ..k...k.|.k.`.'.
016bfd00 9e 57 c3 01 ff ff ff ff - ff ff ff 7f 50 86 09
00 .W..........P...
016bfd10 00 00 00 00 00 00 00 00 - 04 fe 6b 01 e6 7e fd
74 ..........k..~.t
016bfd20 ec 02 00 00 94 02 00 00 - 00 00 00 00 04 00 00
00 ................
016bfd30 00 00 00 00 18 58 09 00 - 00 00 00 00 00 00 00
00 .....X..........
016bfd40 00 00 00 00 00 1f 0a fa - ff ff ff ff 00 00 00
00 ................
016bfd50 08 00 00 00 08 60 0b 00 - 00 00 00 00 4c fd 6b
01 .....`......L.k.
016bfd60 00 00 00 00 00 00 00 00 - 10 fd 6b 01 c0 fd 6b
01 ..........k...k.
016bfd70 dc ff 6b 01 00 00 00 00 - 00 00 00 00 00 1f 0a
fa ..k.............
016bfd80 ff ff ff ff 02 00 00 00 - 00 02 00 00 94 02 00
00 ................
016bfd90 19 00 00 00 08 fe 6b 01 - 9c 02 00 00 19 00 00
00 ......k.........
016bfda0 18 fe 6b 01 00 00 00 00 - 00 00 00 00 22 9b 03
75 ..k........."..u
016bfdb0 35 9b ea 77 a4 02 00 00 - 00 00 00 00 00 00 00
00 5..w............
016bfdc0 50 86 09 00 64 28 4b 01 - 00 00 00 00 7c fd 6b
01 P...d(K.....|.k.
016bfdd0 38 00 00 00 02 00 00 00 - 00 00 00 00 00 00 00
00 8...............
016bfde0 00 00 00 00 10 00 00 00 - a4 fd 6b 01 30 fd 6b
01 ..........k.0.k.
016bfdf0 38 fe 6b 01 58 fe 6b 01 - 36 df fd 74 78 30 fd
74 8.k.X.k.6..tx0.t
016bfe00 ff ff ff ff 68 fe 6b 01 - a9 1d 03 75 00 00 00
00 ....h.k....u....
016bfe10 b4 fe 6b 01 00 00 00 00 - 00 00 00 00 ac fe 6b
01 ..k...........k.
State Dump for Thread Id 0x3e4
eax=77d424c2 ebx=000a5668 ecx=000a4fbc edx=00000000
esi=00089140 edi=00000100
eip=77f83bb8 esp=018dfe28 ebp=018dff74 iopl=0 nv
up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000202
function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,
[esp+0x4] ss:0235d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
018DFF74 77D420D9 77D42528 00089140 00000000 400CA090
ntdll!NtReplyWaitReceivePortEx
018DFFA8 77D424DA 000A5598 018DFFEC 77E8B2D8 000A5668
rpcrt4!NdrConformantArrayMemorySize
018DFFB4 77E8B2D8 000A5668 00000000 400CA090 000A5668
rpcrt4!NdrConformantArrayMemorySize
018DFFEC 00000000 77D424C2 000A5668 00000000 6FAF000D
kernel32!lstrcmpiW
*----> Raw Stack Dump <----*
018dfe28 85 22 d4 77 8c 03 00 00 - 54 ff 8d 01 00 00 00
00 .".w....T.......
018dfe38 08 c1 0a 00 58 ff 8d 01 - 10 d8 07 00 98 55 0a
00 ....X........U..
018dfe48 68 56 0a 00 00 00 00 00 - 00 00 00 00 00 00 00
00 hV..............
018dfe58 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfe68 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfe78 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfe88 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfe98 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfea8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfeb8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfec8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfed8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfee8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dfef8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dff08 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dff18 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
018dff28 00 00 00 00 c0 4b 65 81 - 00 36 6b 81 00 00 00
00 .....Ke..6k.....
018dff38 90 37 6b 81 60 2c e2 bd - 46 02 00 00 a4 da 42
80 .7k.`,..F.....B.
018dff48 10 2f 06 80 60 37 6b 81 - 00 36 6b 81 00 00 00
00 ./..`7k..6k.....
018dff58 00 a2 2f 4d ff ff ff ff - 50 fe 8d 01 ff ff ff
ff ../M....P.......
State Dump for Thread Id 0x390
eax=63696810 ebx=0241ff74 ecx=dc000062 edx=00000000
esi=77f8377b edi=000003c4
eip=77f83786 esp=0241ff58 ebp=0241ff7c iopl=0 nv
up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000293
function: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,
[esp+0x4] ss:02e9d52b=00000300
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0241FF7C 77E8B32B 000003C4 000927C0 00000000 6367B627
ntdll!NtWaitForSingleObject
77F8316D 4AFFC033 E0850F08 89000005 FF900C42 8D0F044A
kernel32!WaitForSingleObject
0424548B 00000000 00000000 00000000 00000000 00000000
<nosymbols>
*----> Raw Stack Dump <----*
0241ff58 35 9b ea 77 c4 03 00 00 - 00 00 00 00 74 ff 41
02 5..w........t.A.
0241ff68 00 00 00 00 70 2a fb 01 - 3c 31 f8 77 00 44 5f
9a ....p*..<1.w.D_.
0241ff78 fe ff ff ff 6d 31 f8 77 - 2b b3 e8 77 c4 03 00
00 ....m1.w+..w....
0241ff88 c0 27 09 00 00 00 00 00 - 27 b6 67 63 c4 03 00
00 .'......'.gc....
0241ff98 c0 27 09 00 00 00 00 00 - 70 2a fb 01 ec ff 41
02 .'......p*....A.
0241ffa8 70 2a fb 01 0d b5 67 63 - 38 53 0e 00 e7 b4 67
63 p*....gc8S....gc
0241ffb8 d8 b2 e8 77 70 2a fb 01 - 00 00 00 00 38 53 0e
00 ...wp*......8S..
0241ffc8 70 2a fb 01 00 70 fd 7f - 10 53 0e 00 c0 ff 41
02 p*...p...S....A.
0241ffd8 10 53 0e 00 ff ff ff ff - 6c 13 ed 77 98 2a e8
77 .S......l..w.*.w
0241ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 de b4 67
63 ..............gc
0241fff8 70 2a fb 01 00 00 00 00 - f4 00 42 02 04 00 00
00 p*........B.....
02420008 04 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420018 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420028 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420038 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420048 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420058 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420068 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420078 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
02420088 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
State Dump for Thread Id 0x59c
eax=00070110 ebx=00000000 ecx=000002dc edx=00000000
esi=77f8377b edi=00000410
eip=77f83786 esp=0300ff64 ebp=0300ff88 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246
function: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,
[esp+0x4] ss:03a8d537=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0300FF88 77E8B32B 00000410 FFFFFFFF 00000000 3A4B1198
ntdll!NtWaitForSingleObject
0300FFEC 00000000 3A5680C0 00000000 00000000 00905A4D
kernel32!WaitForSingleObject
*----> Raw Stack Dump <----*
0300ff64 35 9b ea 77 10 04 00 00 - 00 00 00 00 00 00 00
00 5..w............
0300ff74 18 04 00 00 01 00 00 00 - 00 00 00 00 01 01 00
00 ................
0300ff84 01 01 00 00 ec ff 00 03 - 2b b3 e8 77 10 04 00
00 ........+..w....
0300ff94 ff ff ff ff 00 00 00 00 - 98 11 4b 3a 10 04 00
00 ..........K:....
0300ffa4 ff ff ff ff df 80 56 3a - ec f3 06 00 01 00 00
00 ......V:........
0300ffb4 00 00 00 00 d8 b2 e8 77 - 00 00 00 00 ec f3 06
00 .......w........
0300ffc4 01 00 00 00 00 00 00 00 - 00 60 fd 7f 5c 00 44
00 .........`..\.D.
0300ffd4 c0 ff 00 03 5c 00 44 00 - ff ff ff ff 6c 13 ed
77 ....\.D.....l..w
0300ffe4 98 2a e8 77 00 00 00 00 - 00 00 00 00 00 00 00
00 .*.w............
0300fff4 c0 80 56 3a 00 00 00 00 - 00 00 00 00 4d 5a 90
00 ..V:........MZ..
03010004 03 00 00 00 04 00 00 00 - ff ff 00 00 b8 00 00
00 ................
03010014 00 00 00 00 40 00 00 00 - 00 00 00 00 00 00 00
00 ....@...........
03010024 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
03010034 00 00 00 00 00 00 00 00 - b0 00 00 00 0e 1f ba
0e ................
03010044 00 b4 09 cd 21 b8 01 4c - cd 21 54 68 69 73 20
70 ....!..L.!This p
03010054 72 6f 67 72 61 6d 20 63 - 61 6e 6e 6f 74 20 62
65 rogram cannot be
03010064 20 72 75 6e 20 69 6e 20 - 44 4f 53 20 6d 6f 64
65 run in DOS mode
03010074 2e 0d 0d 0a 24 00 00 00 - 00 00 00 00 65 55 21
db ....$.......eU!.
03010084 21 34 4f 88 21 34 4f 88 - 21 34 4f 88 21 34 4f
88 !4O.!4O.!4O.!4O.
03010094 20 34 4f 88 52 69 63 68 - 21 34 4f 88 00 00 00
00 4O.Rich!4O.....
State Dump for Thread Id 0x594
eax=00000006 ebx=000493e0 ecx=75021eba edx=00000000
esi=000887e0 edi=000493e0
eip=77f837dc esp=0328febc ebp=0328fee4 iopl=0 nv
up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000297
function: ZwRemoveIoCompletion
77f837d1 b8a8000000 mov eax,0xa8
77f837d6 8d542404 lea edx,
[esp+0x4] ss:03d0d48f=????????
77f837da cd2e int 2e
77f837dc c21400 ret 0x14
77f837df 53 push ebx
77f837e0 f7e1 mul ecx
77f837e2 8bd8 mov ebx,eax
77f837e4 8b442408 mov eax,
[esp+0x8] ss:03d0d48f=????????
77f837e8 f7642414 mul dword ptr
[esp+0x14] ss:03d0d48f=????????
77f837ec 03d8 add ebx,eax
77f837ee 8b442408 mov eax,
[esp+0x8] ss:03d0d48f=????????
77f837f2 f7e1 mul ecx
77f837f4 03d3 add edx,ebx
77f837f6 5b pop ebx
77f837f7 c21000 ret 0x10
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0328FEE4 77D40090 0000017C 0328FF1C 0328FF0C 0328FF14
ntdll!ZwRemoveIoCompletion
0328FF20 77D48565 000493E0 0328FF60 0328FF5C 0328FF70
rpcrt4!PerformRpcInitialization
0328FF74 77D48444 77D42528 000887E0 00000002 308C2BCA
rpcrt4!NdrClientContextUnmarshall
0328FFA8 77D424DA 000E81B0 0328FFEC 77E8B2D8 000B2B88
rpcrt4!NdrClientContextUnmarshall
0328FFB4 77E8B2D8 000B2B88 00000002 308C2BCA 000B2B88
rpcrt4!NdrConformantArrayMemorySize
0328FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!lstrcmpiW
State Dump for Thread Id 0x37c
eax=00000001 ebx=00000000 ecx=00000000 edx=00000000
esi=77f8377b edi=000002b0
eip=77f83786 esp=032cff54 ebp=032cff78 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246
function: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,
[esp+0x4] ss:03d4d527=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
032CFF78 77E8B32B 000002B0 FFFFFFFF 00000000 3A56A07E
ntdll!NtWaitForSingleObject
032CFFA8 3A56A036 00000000 032CFFEC 77E8B2D8 00236BF0
kernel32!WaitForSingleObject
032CFFB4 77E8B2D8 00236BF0 00000001 00000000 00236BF0 !
RenExitInstance
032CFFEC 00000000 3A56A01F 00236BF0 00000000 032D0008
kernel32!lstrcmpiW
*----> Raw Stack Dump <----*
032cff54 35 9b ea 77 b0 02 00 00 - 00 00 00 00 00 00 00
00 5..w............
032cff64 00 00 00 00 f0 6b 23 00 - 00 00 00 00 01 01 01
00 .....k#.........
032cff74 01 01 01 00 a8 ff 2c 03 - 2b b3 e8 77 b0 02 00
00 ......,.+..w....
032cff84 ff ff ff ff 00 00 00 00 - 7e a0 56 3a b0 02 00
00 ........~.V:....
032cff94 ff ff ff ff 01 00 00 00 - f0 6b 23 00 f0 6b 23
00 .........k#..k#.
032cffa4 01 00 00 00 b4 ff 2c 03 - 36 a0 56 3a 00 00 00
00 ......,.6.V:....
032cffb4 ec ff 2c 03 d8 b2 e8 77 - f0 6b 23 00 01 00 00
00 ..,....w.k#.....
032cffc4 00 00 00 00 f0 6b 23 00 - 00 a0 fd 7f d0 3a 23
00 .....k#......:#.
032cffd4 c0 ff 2c 03 d0 3a 23 00 - ff ff ff ff 6c 13 ed
77 ..,..:#.....l..w
032cffe4 98 2a e8 77 00 00 00 00 - 00 00 00 00 00 00 00
00 .*.w............
032cfff4 1f a0 56 3a f0 6b 23 00 - 00 00 00 00 08 00 2d
03 ..V:.k#.......-.
032d0004 00 10 2d 03 49 00 50 00 - 4d 00 2e 00 41 00 70
00 ..-.I.P.M...A.p.
032d0014 70 00 6f 00 69 00 6e 00 - 74 00 6d 00 49 00 50
00 p.o.i.n.t.m.I.P.
032d0024 4d 00 2e 00 53 00 63 00 - 68 00 65 00 64 00 75
00 M...S.c.h.e.d.u.
032d0034 6c 00 65 00 00 00 00 00 - 00 00 00 00 00 00 00
00 l.e.............
032d0044 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
032d0054 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
032d0064 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
032d0074 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
032d0084 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................