Fatal Error in creating worksheet

J

Joe Adams

I have written a procedure which works on some computers
on our network and does not work others. The procedure
opens a workbook, A, which contains 3 worksheets, and
inputs data from a Excel database. Between the data and
cell calculations the 3 worksheets become 3 completed
customer forms. In order to e-mail the 3 worksheets/forms
a second workbook, B, is opened and the values from each
worksheet in workbook A is copied to the corresponding
worksheet in workbook B. The worksheets in workbook B
contain the same cell formats as the worksheets in
workbook A. Since workbook B contains the forms with only
value data, this workbook is e-mailed to the customer. As
stated earlier, this procedure works fine on some specific
computers on our network and not on other specific
computers.

The workbook created by some of the specific computers
cannot be opened. When you try to open it you receive the
message: "Excel.exe has generated errors and will be
closed by Windows. You will need to restart the program.
An error log is being created." Needless to say this is
not desired. (I have attached a common error log
describing the access violation.) Note: All computers are
the same make and model, all run Excel 2000, SR-1, on
Windows 2000 Professional. All have the same printer
drivers and have the same Excel Add-ins installed.

This error only occurs when worksheet 3 is
copied/created. If only sheets 1 and 2 are copied/created
all machines work fine. I have rewritten worksheet 3 with
the same result.

Any ideas?? I have looked at printed drivers,
the "Analysis Toolpack - VBA" add-in, merged cells, and
many other issues. I have had some success with later
versions of Excel being able to open the "corrupted"
workbook, but this is not consistent and I cannot
guarantee the level of the customer's system.

Thanks for helping, I know this is not an easy one.

Joe


Application exception occurred:
App: (pid=1072)
When: 7/29/2003 @ 08:17:44.191
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WS241
User Name: jadams
Number of Processors: 1
Processor Type: x86 Family 6 Model 8 Stepping 6
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 1
Current Type: Uniprocessor Free
Registered Organization: Adkev
Registered Owner: Adkev

*----> Task List <----*
0 Idle.exe
8 System.exe
136 smss.exe
160 csrss.exe
156 winlogon.exe
208 services.exe
220 lsass.exe
392 svchost.exe
428 spoolsv.exe
504 svchost.exe
528 INOJOBSV.exe
548 LogWatNT.exe
580 regsvc.exe
612 MSTask.exe
652 WinMgmt.exe
924 Explorer.exe
992 cpqek.exe
884 EM_EXEC.exe
1044 realmon.exe
1104 OUTLOOK.exe
1168 MAPISP32.exe
752 WINWORD.exe
1072 EXCEL.exe
272 drwtsn32.exe
0 _Total.exe

(30000000 - 306D7000)
(77F80000 - 77FFA000)
(77DB0000 - 77E0A000)
(77E80000 - 77F35000)
(77D40000 - 77DB0000)
(77F40000 - 77F7C000)
(77E10000 - 77E74000)
(308C0000 - 30E1C000)
(77A50000 - 77B45000)
(770F0000 - 772AE000)
(28B70000 - 28B87000)
(691D0000 - 69255000)
(779B0000 - 77A45000)
(78000000 - 78046000)
(69800000 - 69A42000)
(70BD0000 - 70C35000)
(71710000 - 71794000)
(77840000 - 7787C000)
(770C0000 - 770E3000)
(10000000 - 1004B000)
(3FFE0000 - 3FFE9000)
(01730000 - 01738000)
(65000000 - 65263000)
(65300000 - 65327000)
(76710000 - 76719000)
(76FA0000 - 76FAF000)
(773E0000 - 773F2000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(75150000 - 7515F000)
(75030000 - 75044000)
(75020000 - 75028000)
(77950000 - 77979000)
(77980000 - 779A4000)
(75050000 - 75058000)

State Dump for Thread Id 0x2b0

eax=00000018 ebx=308ca015 ecx=0230c9c8 edx=ffffffff
esi=00000000 edi=00000018
eip=3005c5eb esp=0012d064 ebp=0012d078 iopl=0 nv
up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000202


function: <nosymbols>
3005c5d4 e82f59fbff call
Ordinal44+0x11f08 (30011f08)
3005c5d9 85c0 test eax,eax
3005c5db 749c jz
Ordinal44+0x5f979 (3005f979)
3005c5dd 33f6 xor esi,esi
3005c5df eb8f jmp
Ordinal44+0x61b70 (30061b70)
3005c5e1 55 push ebp
3005c5e2 8bec mov ebp,esp
3005c5e4 83ec10 sub esp,0x10
3005c5e7 8b4514 mov eax,
[ebp+0x14] ss:00baa64e=????????
3005c5ea 56 push esi
FAULT ->3005c5eb 832000 and dword ptr
[eax],0x0 ds:00000018=????????
3005c5ee 8d45f4 lea eax,
[ebp+0xf4] ss:00baa64e=????????
3005c5f1 50 push eax
3005c5f2 ff7510 push dword ptr
[ebp+0x10] ss:00baa64e=????????
3005c5f5 e82bfbffff call
Ordinal44+0x5c125 (3005c125)
3005c5fa ffb03e010000 push dword ptr
[eax+0x13e] ds:00000156=????????
3005c600 e865fbffff call
Ordinal44+0x5c16a (3005c16a)
3005c605 85c0 test eax,eax
3005c607 0f8c89000000 jl
Ordinal44+0x5c696 (3005c696)
3005c60d ff7510 push dword ptr
[ebp+0x10] ss:00baa64e=????????
3005c610 e89a000000 call
Ordinal44+0x5c6af (3005c6af)
3005c615 8bf0 mov esi,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0012D078 3005C588 001A65E4 00000000 00000000 00000018 !
Ordinal44
0012D09C 3005C4F8 00000000 001A65E4 0012D0C0 01805B88 !
Ordinal44
0012D0B4 6500C473 032216C0 001A65E4 01805B88 01805AD4 !
Ordinal44
0012D0D8 65035C71 032216C0 00000000 0230C9C8 0012D31C Vbe6!
VarPtr
00000000 00000000 00000000 00000000 00000000 00000000 Vbe6!
rtcGetPresentDate

*----> Raw Stack Dump <----*
0012d064 00 00 00 00 b8 01 22 03 - 84 16 22 03 9c d0 12
00 ......"...".....
0012d074 15 a0 8c 30 9c d0 12 00 - 88 c5 05 30 e4 65 1a
00 ...0.......0.e..
0012d084 00 00 00 00 00 00 00 00 - 18 00 00 00 d4 5a 80
01 .............Z..
0012d094 88 5b 80 01 c0 16 22 03 - b4 d0 12 00 f8 c4 05
30 .[...."........0
0012d0a4 00 00 00 00 e4 65 1a 00 - c0 d0 12 00 88 5b 80
01 .....e.......[..
0012d0b4 d8 d0 12 00 73 c4 00 65 - c0 16 22 03 e4 65 1a
00 ....s..e.."..e..
0012d0c4 88 5b 80 01 d4 5a 80 01 - 44 49 80 01 01 00 00
00 .[...Z..DI......
0012d0d4 d4 5a 80 01 00 00 00 00 - 71 5c 03 65 c0 16 22
03 .Z......q\.e..".
0012d0e4 00 00 00 00 c8 c9 30 02 - 1c d3 12 00 01 00 00
00 ......0.........
0012d0f4 d5 c4 05 30 44 49 80 01 - c8 c9 30 02 06 c3 05
30 ...0DI....0....0
0012d104 44 49 80 01 00 00 00 00 - c8 c9 30 02 01 00 00
00 DI........0.....
0012d114 20 05 d1 02 00 00 00 00 - ca e8 a8 77 58 2d b3
77 ..........wX-.w
0012d124 e0 02 d1 02 98 03 d1 02 - e0 02 d1 02 dc 1d d1
02 ................
0012d134 60 1d d1 02 18 04 d1 02 - 37 05 a9 77 f8 d1 12
00 `.......7..w....
0012d144 f8 d1 12 00 09 00 03 80 - 00 00 00 00 f8 d1 12
00 ................
0012d154 70 d1 12 00 24 11 a9 77 - 00 00 00 00 00 00 00
00 p...$..w........
0012d164 a0 eb 69 30 2b 93 8c 30 - 01 00 00 00 e8 60 d6
30 ..i0+..0.....`.0
0012d174 08 00 00 00 00 00 00 00 - 00 00 00 00 cc d2 12
00 ................
0012d184 54 90 8c 30 0e 00 00 00 - 08 00 00 00 c8 d2 12
00 T..0............
0012d194 08 00 00 00 b8 05 00 00 - 7a 00 00 00 db ec a8
77 ........z......w

State Dump for Thread Id 0x4a0

eax=77d52ba1 ebx=001437c8 ecx=001426d4 edx=00000000
esi=00143698 edi=00000100
eip=77f82230 esp=010bfe28 ebp=010bff74 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtReplyWaitReceivePortEx
77f82225 b8ac000000 mov eax,0xac
77f8222a 8d542404 lea edx,
[esp+0x4] ss:01b3d3ff=????????
77f8222e cd2e int 2e
77f82230 c21400 ret 0x14
77f82233 55 push ebp
77f82234 8bec mov ebp,esp
77f82236 56 push esi
77f82237 57 push edi
77f82238 53 push ebx
77f82239 8bf4 mov esi,esp
77f8223b ff7514 push dword ptr
[ebp+0x14] ss:01b3d54a=????????
77f8223e ff7510 push dword ptr
[ebp+0x10] ss:01b3d54a=????????
77f82241 ff750c push dword ptr
[ebp+0xc] ss:01b3d54a=????????
77f82244 ff5508 call dword ptr
[ebp+0x8] ss:01b3d54a=????????
77f82247 8be6 mov esp,esi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
010BFF74 77D525D2 77D52C07 00143698 00000000 401431B8
ntdll!NtReplyWaitReceivePortEx
010BFFA8 77D52BB9 00143670 010BFFEC 77E837CD 001437C8
rpcrt4!NdrVaryingArrayFree
010BFFB4 77E837CD 001437C8 00000000 401431B8 001437C8
rpcrt4!NdrVaryingArrayFree
010BFFEC 00000000 77D52BA1 001437C8 00000000 00007020
kernel32!TlsSetValue

*----> Raw Stack Dump <----*
010bfe28 5f 27 d5 77 64 01 00 00 - 54 ff 0b 01 00 00 00
00 _'.wd...T.......
010bfe38 f0 b1 14 00 58 ff 0b 01 - 20 e2 13 00 70 36 14
00 ....X... ...p6..
010bfe48 c8 37 14 00 26 2e 79 81 - b4 5b 7f bc f2 f0 44
80 .7..&.y..[....D.
010bfe58 68 85 00 e1 01 42 8a 81 - 87 fa 49 80 98 88 00
e1 h....B....I.....
010bfe68 b0 5c 7f bc 98 88 00 e1 - 00 00 00 00 00 00 00
00 .\..............
010bfe78 b4 5b 7f bc 8a f4 44 80 - 01 00 00 00 e0 42 8a
81 .[....D......B..
010bfe88 00 00 00 00 10 00 f8 00 - ca 2d 79 81 7c 00 f8
00 .........-y.|...
010bfe98 da 2d 79 81 28 82 8a 81 - 98 88 00 e1 00 00 00
00 .-y.(...........
010bfea8 1f 00 00 00 90 82 8a 81 - 90 82 8a 81 00 00 00
00 ................
010bfeb8 01 00 00 00 10 5c 7f bc - 00 00 00 00 38 1c 48
e2 .....\......8.H.
010bfec8 d4 5b 7f bc 00 00 00 00 - eb 4d 41 80 b0 83 8a
81 .[.......MA.....
010bfed8 e0 42 8a 81 c4 5c 7f bc - de e8 44 80 04 00 00
00 .B...\....D.....
010bfee8 c8 2d 79 81 99 a8 49 80 - 80 f3 12 00 00 00 00
00 .-y...I.........
010bfef8 48 f3 12 00 27 f8 01 00 - 00 00 00 00 00 00 00
00 H...'...........
010bff08 01 00 00 00 19 00 02 00 - fc 27 50 c0 42 01 00
00 .........'P.B...
010bff18 00 00 00 00 00 00 00 00 - 42 01 00 00 01 00 00
00 ........B.......
010bff28 00 20 50 c0 a0 72 17 81 - 40 fb 16 81 00 00 00
00 . P..r..@.......
010bff38 40 fb 16 81 d0 fc 16 81 - 64 5c 7f bc 2d d8 42
80 @.......d\..-.B.
010bff48 de d7 42 80 c4 4b 06 80 - a0 fc 16 81 40 fb 16
81 ..B..K......@...
010bff58 00 a2 2f 4d ff ff ff ff - 50 fe 0b 01 ff ff ff
ff ../M....P.......

State Dump for Thread Id 0x2d8

eax=65009ec9 ebx=00000000 ecx=ffffffff edx=00000000
esi=77f820b1 edi=02c2ff98
eip=77f820bc esp=02c2ff84 ebp=02c2ffa0 iopl=0 nv
up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000202


function: NtDelayExecution
77f820b1 b832000000 mov eax,0x32
77f820b6 8d542404 lea edx,
[esp+0x4] ss:036ad55b=????????
77f820ba cd2e int 2e
77f820bc c20800 ret 0x8
77f820bf 53 push ebx
77f820c0 51 push ecx
77f820c1 6a00 push 0x0
77f820c3 c70701000000 mov dword ptr
[edi],0x1 ds:02c2ff98=ffe17b80
77f820c9 ff750c push dword ptr
[ebp+0xc] ss:036ad576=????????
77f820cc 50 push eax
77f820cd e88af8ffff call
RtlMultiByteToUnicodeN (77f8195c)
77f820d2 e97ffeffff jmp
RtlConsoleMultiByteToUnicodeN+0x333 (77f81f56)

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
02C2FFA0 77E834FA 000000C8 00000000 65009ED4 000000C8
ntdll!NtDelayExecution
02C2FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!Sleep
 
R

Ronald Dodge

The only remote chance that I could see, but that would be assuming that
differnt systems has different amounts of RAM as has been the cause over
time for us, maybe on some of those computer systems, it used up more RAM
than what the system has on it, but if the system has a minimal of 128 MB of
RAM, then this can't be the case either, at least not directly.

Now given it seems to point out that it happens on the third worksheet, one
other thing you may want to look at is the code dealing with the point of
time when it's creating the third worksheet. Is it using some sort of
setting that is assumed to be the same on all system within Excel? At what
point of time during this creation is it crashing?

One way to see if this may be happening, you could try holding down the
Shift key while opening the Excel file, which then after it's openned, step
through the code that it normally runs when the file opens, so as it may
point out where in the code it's crashing.

--
Ronald R. Dodge, Jr.
Production Statistician
Master MOUS 2000
Joe Adams said:
I have written a procedure which works on some computers
on our network and does not work others. The procedure
opens a workbook, A, which contains 3 worksheets, and
inputs data from a Excel database. Between the data and
cell calculations the 3 worksheets become 3 completed
customer forms. In order to e-mail the 3 worksheets/forms
a second workbook, B, is opened and the values from each
worksheet in workbook A is copied to the corresponding
worksheet in workbook B. The worksheets in workbook B
contain the same cell formats as the worksheets in
workbook A. Since workbook B contains the forms with only
value data, this workbook is e-mailed to the customer. As
stated earlier, this procedure works fine on some specific
computers on our network and not on other specific
computers.

The workbook created by some of the specific computers
cannot be opened. When you try to open it you receive the
message: "Excel.exe has generated errors and will be
closed by Windows. You will need to restart the program.
An error log is being created." Needless to say this is
not desired. (I have attached a common error log
describing the access violation.) Note: All computers are
the same make and model, all run Excel 2000, SR-1, on
Windows 2000 Professional. All have the same printer
drivers and have the same Excel Add-ins installed.

This error only occurs when worksheet 3 is
copied/created. If only sheets 1 and 2 are copied/created
all machines work fine. I have rewritten worksheet 3 with
the same result.

Any ideas?? I have looked at printed drivers,
the "Analysis Toolpack - VBA" add-in, merged cells, and
many other issues. I have had some success with later
versions of Excel being able to open the "corrupted"
workbook, but this is not consistent and I cannot
guarantee the level of the customer's system.

Thanks for helping, I know this is not an easy one.

Joe


Application exception occurred:
App: (pid=1072)
When: 7/29/2003 @ 08:17:44.191
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: WS241
User Name: jadams
Number of Processors: 1
Processor Type: x86 Family 6 Model 8 Stepping 6
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 1
Current Type: Uniprocessor Free
Registered Organization: Adkev
Registered Owner: Adkev

*----> Task List <----*
0 Idle.exe
8 System.exe
136 smss.exe
160 csrss.exe
156 winlogon.exe
208 services.exe
220 lsass.exe
392 svchost.exe
428 spoolsv.exe
504 svchost.exe
528 INOJOBSV.exe
548 LogWatNT.exe
580 regsvc.exe
612 MSTask.exe
652 WinMgmt.exe
924 Explorer.exe
992 cpqek.exe
884 EM_EXEC.exe
1044 realmon.exe
1104 OUTLOOK.exe
1168 MAPISP32.exe
752 WINWORD.exe
1072 EXCEL.exe
272 drwtsn32.exe
0 _Total.exe

(30000000 - 306D7000)
(77F80000 - 77FFA000)
(77DB0000 - 77E0A000)
(77E80000 - 77F35000)
(77D40000 - 77DB0000)
(77F40000 - 77F7C000)
(77E10000 - 77E74000)
(308C0000 - 30E1C000)
(77A50000 - 77B45000)
(770F0000 - 772AE000)
(28B70000 - 28B87000)
(691D0000 - 69255000)
(779B0000 - 77A45000)
(78000000 - 78046000)
(69800000 - 69A42000)
(70BD0000 - 70C35000)
(71710000 - 71794000)
(77840000 - 7787C000)
(770C0000 - 770E3000)
(10000000 - 1004B000)
(3FFE0000 - 3FFE9000)
(01730000 - 01738000)
(65000000 - 65263000)
(65300000 - 65327000)
(76710000 - 76719000)
(76FA0000 - 76FAF000)
(773E0000 - 773F2000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(75150000 - 7515F000)
(75030000 - 75044000)
(75020000 - 75028000)
(77950000 - 77979000)
(77980000 - 779A4000)
(75050000 - 75058000)

State Dump for Thread Id 0x2b0

eax=00000018 ebx=308ca015 ecx=0230c9c8 edx=ffffffff
esi=00000000 edi=00000018
eip=3005c5eb esp=0012d064 ebp=0012d078 iopl=0 nv
up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000202


function: <nosymbols>
3005c5d4 e82f59fbff call
Ordinal44+0x11f08 (30011f08)
3005c5d9 85c0 test eax,eax
3005c5db 749c jz
Ordinal44+0x5f979 (3005f979)
3005c5dd 33f6 xor esi,esi
3005c5df eb8f jmp
Ordinal44+0x61b70 (30061b70)
3005c5e1 55 push ebp
3005c5e2 8bec mov ebp,esp
3005c5e4 83ec10 sub esp,0x10
3005c5e7 8b4514 mov eax,
[ebp+0x14] ss:00baa64e=????????
3005c5ea 56 push esi
FAULT ->3005c5eb 832000 and dword ptr
[eax],0x0 ds:00000018=????????
3005c5ee 8d45f4 lea eax,
[ebp+0xf4] ss:00baa64e=????????
3005c5f1 50 push eax
3005c5f2 ff7510 push dword ptr
[ebp+0x10] ss:00baa64e=????????
3005c5f5 e82bfbffff call
Ordinal44+0x5c125 (3005c125)
3005c5fa ffb03e010000 push dword ptr
[eax+0x13e] ds:00000156=????????
3005c600 e865fbffff call
Ordinal44+0x5c16a (3005c16a)
3005c605 85c0 test eax,eax
3005c607 0f8c89000000 jl
Ordinal44+0x5c696 (3005c696)
3005c60d ff7510 push dword ptr
[ebp+0x10] ss:00baa64e=????????
3005c610 e89a000000 call
Ordinal44+0x5c6af (3005c6af)
3005c615 8bf0 mov esi,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0012D078 3005C588 001A65E4 00000000 00000000 00000018 !
Ordinal44
0012D09C 3005C4F8 00000000 001A65E4 0012D0C0 01805B88 !
Ordinal44
0012D0B4 6500C473 032216C0 001A65E4 01805B88 01805AD4 !
Ordinal44
0012D0D8 65035C71 032216C0 00000000 0230C9C8 0012D31C Vbe6!
VarPtr
00000000 00000000 00000000 00000000 00000000 00000000 Vbe6!
rtcGetPresentDate

*----> Raw Stack Dump <----*
0012d064 00 00 00 00 b8 01 22 03 - 84 16 22 03 9c d0 12
00 ......"...".....
0012d074 15 a0 8c 30 9c d0 12 00 - 88 c5 05 30 e4 65 1a
00 ...0.......0.e..
0012d084 00 00 00 00 00 00 00 00 - 18 00 00 00 d4 5a 80
01 .............Z..
0012d094 88 5b 80 01 c0 16 22 03 - b4 d0 12 00 f8 c4 05
30 .[...."........0
0012d0a4 00 00 00 00 e4 65 1a 00 - c0 d0 12 00 88 5b 80
01 .....e.......[..
0012d0b4 d8 d0 12 00 73 c4 00 65 - c0 16 22 03 e4 65 1a
00 ....s..e.."..e..
0012d0c4 88 5b 80 01 d4 5a 80 01 - 44 49 80 01 01 00 00
00 .[...Z..DI......
0012d0d4 d4 5a 80 01 00 00 00 00 - 71 5c 03 65 c0 16 22
03 .Z......q\.e..".
0012d0e4 00 00 00 00 c8 c9 30 02 - 1c d3 12 00 01 00 00
00 ......0.........
0012d0f4 d5 c4 05 30 44 49 80 01 - c8 c9 30 02 06 c3 05
30 ...0DI....0....0
0012d104 44 49 80 01 00 00 00 00 - c8 c9 30 02 01 00 00
00 DI........0.....
0012d114 20 05 d1 02 00 00 00 00 - ca e8 a8 77 58 2d b3
77 ..........wX-.w
0012d124 e0 02 d1 02 98 03 d1 02 - e0 02 d1 02 dc 1d d1
02 ................
0012d134 60 1d d1 02 18 04 d1 02 - 37 05 a9 77 f8 d1 12
00 `.......7..w....
0012d144 f8 d1 12 00 09 00 03 80 - 00 00 00 00 f8 d1 12
00 ................
0012d154 70 d1 12 00 24 11 a9 77 - 00 00 00 00 00 00 00
00 p...$..w........
0012d164 a0 eb 69 30 2b 93 8c 30 - 01 00 00 00 e8 60 d6
30 ..i0+..0.....`.0
0012d174 08 00 00 00 00 00 00 00 - 00 00 00 00 cc d2 12
00 ................
0012d184 54 90 8c 30 0e 00 00 00 - 08 00 00 00 c8 d2 12
00 T..0............
0012d194 08 00 00 00 b8 05 00 00 - 7a 00 00 00 db ec a8
77 ........z......w

State Dump for Thread Id 0x4a0

eax=77d52ba1 ebx=001437c8 ecx=001426d4 edx=00000000
esi=00143698 edi=00000100
eip=77f82230 esp=010bfe28 ebp=010bff74 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtReplyWaitReceivePortEx
77f82225 b8ac000000 mov eax,0xac
77f8222a 8d542404 lea edx,
[esp+0x4] ss:01b3d3ff=????????
77f8222e cd2e int 2e
77f82230 c21400 ret 0x14
77f82233 55 push ebp
77f82234 8bec mov ebp,esp
77f82236 56 push esi
77f82237 57 push edi
77f82238 53 push ebx
77f82239 8bf4 mov esi,esp
77f8223b ff7514 push dword ptr
[ebp+0x14] ss:01b3d54a=????????
77f8223e ff7510 push dword ptr
[ebp+0x10] ss:01b3d54a=????????
77f82241 ff750c push dword ptr
[ebp+0xc] ss:01b3d54a=????????
77f82244 ff5508 call dword ptr
[ebp+0x8] ss:01b3d54a=????????
77f82247 8be6 mov esp,esi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
010BFF74 77D525D2 77D52C07 00143698 00000000 401431B8
ntdll!NtReplyWaitReceivePortEx
010BFFA8 77D52BB9 00143670 010BFFEC 77E837CD 001437C8
rpcrt4!NdrVaryingArrayFree
010BFFB4 77E837CD 001437C8 00000000 401431B8 001437C8
rpcrt4!NdrVaryingArrayFree
010BFFEC 00000000 77D52BA1 001437C8 00000000 00007020
kernel32!TlsSetValue

*----> Raw Stack Dump <----*
010bfe28 5f 27 d5 77 64 01 00 00 - 54 ff 0b 01 00 00 00
00 _'.wd...T.......
010bfe38 f0 b1 14 00 58 ff 0b 01 - 20 e2 13 00 70 36 14
00 ....X... ...p6..
010bfe48 c8 37 14 00 26 2e 79 81 - b4 5b 7f bc f2 f0 44
80 .7..&.y..[....D.
010bfe58 68 85 00 e1 01 42 8a 81 - 87 fa 49 80 98 88 00
e1 h....B....I.....
010bfe68 b0 5c 7f bc 98 88 00 e1 - 00 00 00 00 00 00 00
00 .\..............
010bfe78 b4 5b 7f bc 8a f4 44 80 - 01 00 00 00 e0 42 8a
81 .[....D......B..
010bfe88 00 00 00 00 10 00 f8 00 - ca 2d 79 81 7c 00 f8
00 .........-y.|...
010bfe98 da 2d 79 81 28 82 8a 81 - 98 88 00 e1 00 00 00
00 .-y.(...........
010bfea8 1f 00 00 00 90 82 8a 81 - 90 82 8a 81 00 00 00
00 ................
010bfeb8 01 00 00 00 10 5c 7f bc - 00 00 00 00 38 1c 48
e2 .....\......8.H.
010bfec8 d4 5b 7f bc 00 00 00 00 - eb 4d 41 80 b0 83 8a
81 .[.......MA.....
010bfed8 e0 42 8a 81 c4 5c 7f bc - de e8 44 80 04 00 00
00 .B...\....D.....
010bfee8 c8 2d 79 81 99 a8 49 80 - 80 f3 12 00 00 00 00
00 .-y...I.........
010bfef8 48 f3 12 00 27 f8 01 00 - 00 00 00 00 00 00 00
00 H...'...........
010bff08 01 00 00 00 19 00 02 00 - fc 27 50 c0 42 01 00
00 .........'P.B...
010bff18 00 00 00 00 00 00 00 00 - 42 01 00 00 01 00 00
00 ........B.......
010bff28 00 20 50 c0 a0 72 17 81 - 40 fb 16 81 00 00 00
00 . P..r..@.......
010bff38 40 fb 16 81 d0 fc 16 81 - 64 5c 7f bc 2d d8 42
80 @.......d\..-.B.
010bff48 de d7 42 80 c4 4b 06 80 - a0 fc 16 81 40 fb 16
81 ..B..K......@...
010bff58 00 a2 2f 4d ff ff ff ff - 50 fe 0b 01 ff ff ff
ff ../M....P.......

State Dump for Thread Id 0x2d8

eax=65009ec9 ebx=00000000 ecx=ffffffff edx=00000000
esi=77f820b1 edi=02c2ff98
eip=77f820bc esp=02c2ff84 ebp=02c2ffa0 iopl=0 nv
up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000202


function: NtDelayExecution
77f820b1 b832000000 mov eax,0x32
77f820b6 8d542404 lea edx,
[esp+0x4] ss:036ad55b=????????
77f820ba cd2e int 2e
77f820bc c20800 ret 0x8
77f820bf 53 push ebx
77f820c0 51 push ecx
77f820c1 6a00 push 0x0
77f820c3 c70701000000 mov dword ptr
[edi],0x1 ds:02c2ff98=ffe17b80
77f820c9 ff750c push dword ptr
[ebp+0xc] ss:036ad576=????????
77f820cc 50 push eax
77f820cd e88af8ffff call
RtlMultiByteToUnicodeN (77f8195c)
77f820d2 e97ffeffff jmp
RtlConsoleMultiByteToUnicodeN+0x333 (77f81f56)

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
02C2FFA0 77E834FA 000000C8 00000000 65009ED4 000000C8
ntdll!NtDelayExecution
02C2FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!Sleep
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Application Exception occurred in Explorer.exe 1
Execl DrWatson Error 80000007 3
Explorer.exe 6.0.2900.3156 crash in urlmon.dll 7.0.6000.16762 3
Svchost.exe Errors 9
Windows - Application Error - The memory could not be read! 1
WinMgmt drwatson program error 1
An int that is 4 bytes in native, and 12 bytes in .NET? Huh? 8
IE Error reporting tool 2

Top