All pastes #497069 Raw Edit

Vassago - DrWtsn32 crash report

public text v1 · immutable
·published 2007-05-19 16:46 UTC
rendered paste body
Microsoft (R) Windows 2000 (TM) Version 5.00 DrWtsn32
Copyright (C) 1985-1999 Microsoft Corp. All rights reserved.



Application exception occurred:
        App:  (pid=1068)
        When: 19/05/2007 @ 19:25:33.704
        Exception number: c0000005 (access violation)

*----> System Information <----*
        Computer Name: HOMEPC
        User Name: Vassago
        Number of Processors: 1
        Processor Type: x86 Family 6 Model 5 Stepping 2
        Windows 2000 Version: 5.0
        Current Build: 2195
        Service Pack: 4
        Current Type: Uniprocessor Free
        Registered Organization: Home
        Registered Owner: Vassago

*----> Task List <----*
   0 Idle.exe
   8 System.exe
 212 smss.exe
 236 csrss.exe
 256 WINLOGON.exe
 288 SERVICES.exe
 300 LSASS.exe
 448 svchost.exe
 488 vsmon.exe
 604 svchost.exe
 636 nod32krn.exe
 652 nvsvc32.exe
 716 winmgmt.exe
 792 explorer.exe
1028 zlclient.exe
1036 ServUTray.exe
1040 Flex2K.exe
 968 winremote.exe
 272 explorer.exe
1128 miranda32.exe
1292 ProxyPlus.exe
 880 ServUDaemon.exe
1468 IEXPLORE.exe
1068 miranda32.exe
1072 drwtsn32.exe
   0 _Total.exe

(00400000 - 00489000) 
(77F80000 - 77FFC000) 
(75050000 - 75058000) 
(7C570000 - 7C624000) 
(75030000 - 75044000) 
(78000000 - 78045000) 
(7C2D0000 - 7C335000) 
(77D30000 - 77D9F000) 
(75020000 - 75028000) 
(71710000 - 71794000) 
(77F40000 - 77F7C000) 
(77E10000 - 77E79000) 
(77570000 - 775A0000) 
(77820000 - 77827000) 
(759B0000 - 759B6000) 
(76B30000 - 76B6E000) 
(70A70000 - 70AD6000) 
(7CF30000 - 7D176000) 
(7CE20000 - 7CF0F000) 
(779B0000 - 77A4B000) 
(10000000 - 10007000) 
(12580000 - 12589000) 
(12420000 - 12455000) 
(120E0000 - 12137000) 
(12000000 - 12011000) 
(780C0000 - 78121000) 
(010F0000 - 01116000) 
(12200000 - 12211000) 
(6B2C0000 - 6B2C5000) 
(44000000 - 44013000) 
(01160000 - 0116C000) 
(01580000 - 015F1000) 
(01620000 - 0163A000) 
(01640000 - 0164B000) 
(63000000 - 63095000) 
(7C740000 - 7C7CC000) 
(77430000 - 77441000) 
(124A0000 - 124A8000) 
(772B0000 - 7731D000) 
(01650000 - 016EA000) 
(77800000 - 7781E000) 
(76620000 - 76631000) 
(06510000 - 06550000) 
(7C000000 - 7C054000) 
(69280000 - 6928F000) 
(126A0000 - 126AE000) 
(01A20000 - 01ABF000) 
(11CD0000 - 11CE4000) 
(01BD0000 - 01BDA000) 
(01BE0000 - 01BF0000) 
(22100000 - 22114000) 
(76B20000 - 76B25000) 
(12820000 - 1284D000) 
(11110000 - 11133000) 
(01CF0000 - 01D0C000) 
(72070000 - 7207B000) 
(14310000 - 1431E000) 
(25010000 - 2501F000) 
(68380000 - 68388000) 
(25020000 - 2503A000) 
(67400000 - 6740B000) 
(01F10000 - 01F30000) 
(01F30000 - 01F35000) 
(12940000 - 12955000) 
(11BD0000 - 11BE3000) 
(1B200000 - 1B21F000) 
(01F40000 - 01F5E000) 
(77920000 - 77943000) 
(655E0000 - 655E7000) 
(66640000 - 6664A000) 
(77530000 - 77552000) 
(77880000 - 7790E000) 
(7C0F0000 - 7C154000) 
(7CDC0000 - 7CE10000) 
(7C340000 - 7C34F000) 
(77BF0000 - 77C01000) 
(77980000 - 779A4000) 
(77950000 - 7797B000) 
(751C0000 - 751C6000) 
(75150000 - 75160000) 
(65780000 - 6578D000) 
(68A80000 - 68A8B000) 
(77320000 - 77337000) 
(773B0000 - 773DF000) 
(77380000 - 773A3000) 
(77830000 - 7783E000) 
(76930000 - 7695B000) 
(78160000 - 78188000) 
(774E0000 - 77514000) 
(774C0000 - 774D1000) 
(7CA00000 - 7CA23000) 
(7C950000 - 7C9DF000) 
(1A400000 - 1A47D000) 
(782C0000 - 782CC000) 
(77340000 - 77353000) 
(77520000 - 77525000) 
(77360000 - 77379000) 
(777E0000 - 777E8000) 
(777F0000 - 777F5000) 
(74FD0000 - 74FEE000) 
(75010000 - 75017000) 
(03640000 - 03663000) 
(03670000 - 03697000) 
(72A00000 - 72A2D000) 

State Dump for Thread Id 0x5a0

eax=00000000 ebx=00000000 ecx=01f56e40 edx=0000011c esi=01f56e30 edi=00000000
eip=77f8f281 esp=0012f6e4 ebp=0012f744 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246


function: RtlpWaitForCriticalSection
        77f8f266 f6d8             neg     al
        77f8f268 1bc0             sbb     eax,eax
        77f8f26a f7d0             not     eax
        77f8f26c 2578fcfc77       and     eax,0x77fcfc78
        77f8f271 395e10           cmp     [esi+0x10],ebx         ds:02ae0d16=????????
        77f8f274 8945fc           mov     [ebp+0xfc],eax         ss:00cb962a=????????
        77f8f277 7506             jnz     RtlUnicodeToCustomCPN+0x13 (77f9487f)
        77f8f279 56               push    esi
        77f8f27a e81ffeffff       call RtlSetCriticalSectionSpinCount+0xfc (77f8f09e)
        77f8f27f 8b06             mov     eax,[esi]              ds:01f56e30=00000000
FAULT ->77f8f281 ff4010           inc     dword ptr [eax+0x10]   ds:00b89ee6=????????
        77f8f284 ff75fc           push    dword ptr [ebp+0xfc]   ss:00cb962a=????????
        77f8f287 8b06             mov     eax,[esi]              ds:01f56e30=00000000
        77f8f289 ff4014           inc     dword ptr [eax+0x14]   ds:00b89ee6=????????
        77f8f28c 53               push    ebx
        77f8f28d ff7610           push    dword ptr [esi+0x10]   ds:02ae0d16=????????
        77f8f290 e8739cffff       call    ZwWaitForSingleObject (77f88f08)
        77f8f295 3d02010000       cmp     eax,0x102
        77f8f29a 0f85ad000000     jne     RtlpWaitForCriticalSection+0x156 (77f8f34d)
        77f8f2a0 57               push    edi
        77f8f2a1 6862f1f877       push    0x77f8f162
        77f8f2a6 e8a1260000       call    DbgPrint (77f9194c)

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0012F744 77F87F26 01F56E00 01F4A477 01F56E30 00000150 ntdll!RtlpWaitForCriticalSection 
0012F900 00402EA2 0012F764 0012F93C 00000548 00100001 ntdll!RtlEnterCriticalSection 
0012F918 00402FC5 4352415F 00000000 0012F93C 0012F93C !<nosymbols> 
0012FD3C 00402A30 00000000 004523CC 01F4C800 00F12A48 !<nosymbols> 
0012FE70 0041A833 01F40000 00000000 00000027 0041AA37 !<nosymbols> 
000000D0 00000000 00000000 00000000 00000000 00000000 !<nosymbols> 

*----> Raw Stack Dump <----*
0012f6e4  00 00 00 00 20 cc d2 06 - 3c f9 12 00 62 6e 6f 72  .... ...<...bnor
0012f6f4  6d 61 6c 6c 79 20 64 65 - 6c 65 74 65 64 20 62 65  mally deleted be
0012f704  63 61 75 73 65 20 6d 6f - 64 75 6c 65 20 27 43 3a  cause module 'C:
0012f714  5c 50 72 6f 67 72 61 6d - 20 46 69 6c 65 73 5c 4d  \Program Files\M
0012f724  69 72 61 6e 64 61 20 49 - 08 3f 13 00 00 00 00 00  iranda I.?......
0012f734  00 00 00 00 00 f9 12 00 - 6c a4 f4 01 00 00 00 00  ........l.......
0012f744  00 f9 12 00 26 7f f8 77 - 00 6e f5 01 77 a4 f4 01  ....&..w.n..w...
0012f754  30 6e f5 01 50 01 00 00 - 90 a2 45 00 10 a3 f4 01  0n..P.....E.....
0012f764  90 a2 45 00 10 a3 f4 01 - bc 3a f4 01 70 2f 41 62  ..E......:..p/Ab
0012f774  bc 3a f4 01 6f 6d 6d 61 - 6e 64 7d 00 61 6e 64 7d  .:..ommand}.and}
0012f784  00 5a 18 00 19 00 00 00 - 19 00 00 00 20 00 00 00  .Z.......... ...
0012f794  2a 05 19 00 56 04 43 00 - 19 00 00 00 00 00 00 00  *...V.C.........
0012f7a4  20 00 00 00 30 f8 12 00 - 56 04 43 00 00 80 00 00   ...0...V.C.....
0012f7b4  28 00 00 00 cc 00 00 00 - 0b 54 f4 77 90 08 01 c1  (........T.w....
0012f7c4  f4 f7 12 00 a0 5a 18 00 - 8a 2c fb 77 00 00 13 00  .....Z...,.w....
0012f7d4  98 5a 18 00 a0 5a 18 00 - d0 f7 12 00 88 06 13 00  .Z...Z..........
0012f7e4  88 f8 12 00 01 00 00 00 - 84 00 00 00 97 b1 e3 77  ...............w
0012f7f4  00 00 00 00 14 f8 12 00 - 93 38 43 12 30 f8 12 00  .........8C.0...
0012f804  54 f8 12 00 ca 49 43 12 - 4c f8 12 00 22 cf 43 00  T....IC.L...".C.
0012f814  2a 05 19 00 20 00 00 00 - 56 04 43 00 01 00 00 02  *... ...V.C.....

State Dump for Thread Id 0x5a8

eax=00000001 ebx=00000004 ecx=00000101 edx=00000000 esi=77f88ef8 edi=00000004
eip=77f88f03 esp=0327fd24 ebp=0327fd70 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: NtWaitForMultipleObjects
        77f88ef8 b8e9000000       mov     eax,0xe9
        77f88efd 8d542404         lea     edx,[esp+0x4]          ss:03e09c0b=????????
        77f88f01 cd2e             int     2e
        77f88f03 c21400           ret     0x14
        77f88f06 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0327FD70 7C59A150 0327FD48 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects 
0327FFB4 7C57B396 00000005 000B000A 7C3280D0 00153D78 kernel32!WaitForMultipleObjects 
0327FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!lstrcmpiW 

State Dump for Thread Id 0x244

eax=77d37dd0 ebx=00182048 ecx=77d99158 edx=00000000 esi=001547b0 edi=00000100
eip=77f88b37 esp=033ffe28 ebp=033fff74 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000202


function: ZwReplyWaitReceivePortEx
        77f88b2c b8ac000000       mov     eax,0xac
        77f88b31 8d542404         lea     edx,[esp+0x4]          ss:03f89d0f=????????
        77f88b35 cd2e             int     2e
        77f88b37 c21400           ret     0x14
        77f88b3a 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
033FFF74 77D58E4A 77D3AEED 001547B0 0012EEA8 00000100 ntdll!ZwReplyWaitReceivePortEx 
033FFFA8 77D37DE8 0019E010 033FFFEC 7C57B396 00182048 rpcrt4!TowerConstruct 
033FFFB4 7C57B396 00182048 0012EEA8 00000100 00182048 rpcrt4!I_RpcConnectionInqSockBuffSize2 
033FFFEC 00000000 00000000 00000000 00000000 00000000 kernel32!lstrcmpiW 

State Dump for Thread Id 0x574

eax=7ce85ae5 ebx=00000102 ecx=01720170 edx=00000000 esi=77f88398 edi=034fff74
eip=77f883a3 esp=034fff60 ebp=034fff7c iopl=0         nv up ei pl nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000206


function: NtDelayExecution
        77f88398 b832000000       mov     eax,0x32
        77f8839d 8d542404         lea     edx,[esp+0x4]          ss:04089e47=????????
        77f883a1 cd2e             int     2e
        77f883a3 c20800           ret     0x8
        77f883a6 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
034FFF7C 7C59A29C 0000EA60 00000000 7CE89ACC 0000EA60 ntdll!NtDelayExecution 
00007530 00000000 00000000 00000000 00000000 00000000 kernel32!Sleep 

*----> Raw Stack Dump <----*
034fff60  d1 a2 59 7c 00 00 00 00 - 74 ff 4f 03 01 a0 59 7c  ..Y|....t.O...Y|
034fff70  30 35 17 00 00 ba 3c dc - ff ff ff ff 30 75 00 00  05....<.....0u..
034fff80  9c a2 59 7c 60 ea 00 00 - 00 00 00 00 cc 9a e8 7c  ..Y|`..........|
034fff90  60 ea 00 00 a7 5b e8 7c - 00 00 00 00 00 00 e2 7c  `....[.|.......|
034fffa0  30 35 17 00 ec ff 4f 03 - 30 35 17 00 ff 5a e8 7c  05....O.05...Z.|
034fffb0  85 7d e3 7c 70 7d e3 7c - 96 b3 57 7c 30 35 17 00  .}.|p}.|..W|05..
034fffc0  85 7d e3 7c 70 7d e3 7c - 30 35 17 00 00 f0 fa 7f  .}.|p}.|05......
034fffd0  70 01 72 01 c0 ff 4f 03 - 70 01 72 01 ff ff ff ff  p.r...O.p.r.....
034fffe0  6c 21 5c 7c 08 2b 57 7c - 00 00 00 00 00 00 00 00  l!\|.+W|........
034ffff0  00 00 00 00 e5 5a e8 7c - 30 35 17 00 00 00 00 00  .....Z.|05......
03500000  c8 00 00 00 00 01 00 00 - ff ee ff ee 02 10 00 00  ................
03500010  00 00 00 00 00 fe 00 00 - 00 00 10 00 00 20 00 00  ............. ..
03500020  00 02 00 00 00 20 00 00 - ee 01 00 00 ff ef fd 7f  ..... ..........
03500030  10 00 08 06 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
03500040  00 00 00 00 98 05 50 03 - 0f 00 00 00 f8 ff ff ff  ......P.........
03500050  50 00 50 03 50 00 50 03 - 40 06 50 03 00 00 00 00  P.P.P.P.@.P.....
03500060  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
03500070  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
03500080  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
03500090  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................

State Dump for Thread Id 0x4a0

eax=00000000 ebx=0000003f ecx=00000101 edx=00000000 esi=0362ebfc edi=00000001
eip=77f88f03 esp=0362ebe4 ebp=0362ffb4 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246


function: NtWaitForMultipleObjects
        77f88ef8 b8e9000000       mov     eax,0xe9
        77f88efd 8d542404         lea     edx,[esp+0x4]          ss:041b8acb=????????
        77f88f01 cd2e             int     2e
        77f88f03 c21400           ret     0x14
        77f88f06 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0362FFB4 7C57B396 026EF924 00000208 0000021A 026EF924 ntdll!NtWaitForMultipleObjects 
0362FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!lstrcmpiW 

*----> Raw Stack Dump <----*
0362ebe4  f5 0f fa 77 15 00 00 00 - 18 ec 62 03 01 00 00 00  ...w......b.....
0362ebf4  01 00 00 00 00 00 00 00 - 08 09 fd 77 08 09 fd 77  ...........w...w
0362ec04  74 03 00 00 a0 04 00 00 - 15 00 00 00 15 00 00 00  t...............
0362ec14  14 00 00 00 78 03 00 00 - 84 00 00 00 d4 03 00 00  ....x...........
0362ec24  0c 04 00 00 a8 04 00 00 - f8 04 00 00 34 05 00 00  ............4...
0362ec34  6c 03 00 00 24 05 00 00 - c0 03 00 00 f8 03 00 00  l...$...........
0362ec44  20 04 00 00 48 04 00 00 - 58 04 00 00 68 04 00 00   ...H...X...h...
0362ec54  84 04 00 00 94 04 00 00 - bc 04 00 00 d4 04 00 00  ................
0362ec64  e4 04 00 00 0c 05 00 00 - 00 00 00 00 00 00 00 00  ................
0362ec74  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0362ec84  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0362ec94  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0362eca4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0362ecb4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0362ecc4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0362ecd4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0362ece4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0362ecf4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0362ed04  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0362ed14  00 00 00 00 00 00 00 00 - 00 67 1a 00 10 09 20 00  .........g.... .

State Dump for Thread Id 0x590

eax=7c0f6a2c ebx=00000003 ecx=00200838 edx=00000000 esi=77f88ef8 edi=00000003
eip=77f88f03 esp=0379ff20 ebp=0379ff6c iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: NtWaitForMultipleObjects
        77f88ef8 b8e9000000       mov     eax,0xe9
        77f88efd 8d542404         lea     edx,[esp+0x4]          ss:04329e07=????????
        77f88f01 cd2e             int     2e
        77f88f03 c21400           ret     0x14
        77f88f06 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0379FF6C 7C59A150 0379FF44 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects 
00000000 00000000 00000000 00000000 00000000 00000000 kernel32!WaitForMultipleObjects 

*----> Raw Stack Dump <----*
0379ff20  3d a2 59 7c 03 00 00 00 - 44 ff 79 03 01 00 00 00  =.Y|....D.y.....
0379ff30  00 00 00 00 00 00 00 00 - 00 60 14 7c 00 00 00 00  .........`.|....
0379ff40  7a 7e 57 7c d8 03 00 00 - dc 03 00 00 e0 03 00 00  z~W|............
0379ff50  00 00 00 00 00 00 00 00 - c8 1f 13 00 16 00 18 00  ................
0379ff60  20 69 0f 7c 00 00 00 00 - 04 ff 79 03 00 00 00 00   i.|......y.....
0379ff70  50 a1 59 7c 44 ff 79 03 - 01 00 00 00 00 00 00 00  P.Y|D.y.........
0379ff80  00 00 00 00 00 00 00 00 - 8b 6a 0f 7c 03 00 00 00  .........j.|....
0379ff90  44 60 14 7c 00 00 00 00 - ff ff ff ff 62 d5 f8 77  D`.|........b..w
0379ffa0  48 e7 fc 77 ec ff 79 03 - 00 00 00 00 00 00 00 00  H..w..y.........
0379ffb0  03 00 00 00 00 00 0f 7c - 96 b3 57 7c 00 00 00 00  .......|..W|....
0379ffc0  62 d5 f8 77 48 e7 fc 77 - 00 00 00 00 00 d0 fa 7f  b..wH..w........
0379ffd0  38 08 20 00 c0 ff 79 03 - 38 08 20 00 ff ff ff ff  8. ...y.8. .....
0379ffe0  6c 21 5c 7c 08 2b 57 7c - 00 00 00 00 00 00 00 00  l!\|.+W|........
0379fff0  00 00 00 00 2c 6a 0f 7c - 00 00 00 00 00 00 00 00  ....,j.|........
037a0000  08 00 00 00 01 01 00 00 - ee ff ee ff 00 00 00 00  ................
037a0010  00 00 13 00 00 f0 0f 00 - 00 00 7a 03 00 01 00 00  ..........z.....
037a0020  40 00 7a 03 00 00 8a 03 - ff 00 00 00 01 00 00 00  @.z.............
037a0030  a8 05 13 00 00 00 00 00 - b0 0f 7a 03 00 00 00 00  ..........z.....
037a0040  cf 01 08 00 01 00 0c 00 - 78 c4 13 00 08 f1 16 00  ........x.......
037a0050  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................

State Dump for Thread Id 0x4c0

eax=03a9fea8 ebx=00168320 ecx=00000003 edx=00000000 esi=74fea3a0 edi=00000000
eip=77f88af7 esp=03a9ff84 ebp=03a9ffb4 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000202


function: NtRemoveIoCompletion
        77f88aec b8a8000000       mov     eax,0xa8
        77f88af1 8d542404         lea     edx,[esp+0x4]          ss:04629e6b=????????
        77f88af5 cd2e             int     2e
        77f88af7 c21400           ret     0x14
        77f88afa 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
03A9FFB4 7C57B396 74FD9048 00183428 00000000 00168320 ntdll!NtRemoveIoCompletion 
03A9FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!lstrcmpiW