| 1 |
|
|---|
| 2 | Microsoft (R) Windows NT (TM) Version 4.00 DrWtsn32
|
|---|
| 3 | Copyright (C) 1985-1996 Microsoft Corp. All rights reserved.
|
|---|
| 4 |
|
|---|
| 5 |
|
|---|
| 6 |
|
|---|
| 7 | Application exception occurred:
|
|---|
| 8 | App: (pid=268)
|
|---|
| 9 | When: 4/16/2004 @ 15:3:55.23
|
|---|
| 10 | Exception number: c0000005 (access violation)
|
|---|
| 11 |
|
|---|
| 12 | *----> System Information <----*
|
|---|
| 13 | Computer Name:
|
|---|
| 14 | User Name: Administrator
|
|---|
| 15 | Number of Processors: 1
|
|---|
| 16 | Processor Type: x86 Family 6 Model 5 Stepping 2
|
|---|
| 17 | Windows Version: 4.0
|
|---|
| 18 | Current Build: 1381
|
|---|
| 19 | Current Type: Uniprocessor Free
|
|---|
| 20 | Registered Organization:
|
|---|
| 21 | Registered Owner:
|
|---|
| 22 |
|
|---|
| 23 | *----> Task List <----*
|
|---|
| 24 | 0 Idle.exe
|
|---|
| 25 | 2 System.exe
|
|---|
| 26 | 26 SMSS.exe
|
|---|
| 27 | 34 CSRSS.exe
|
|---|
| 28 | 41 WINLOGON.exe
|
|---|
| 29 | 33 SERVICES.exe
|
|---|
| 30 | 49 LSASS.exe
|
|---|
| 31 | 71 SPOOLSS.exe
|
|---|
| 32 | 80 DefWatch.exe
|
|---|
| 33 | 93 LLSSRV.exe
|
|---|
| 34 | 91 Rtvscan.exe
|
|---|
| 35 | 117 rpcss.exe
|
|---|
| 36 | 126 TERMSRV.exe
|
|---|
| 37 | 137 LSERVER.exe
|
|---|
| 38 | 147 PSTORES.exe
|
|---|
| 39 | 150 mstask.exe
|
|---|
| 40 | 121 CSRSS.exe
|
|---|
| 41 | 207 WINLOGON.exe
|
|---|
| 42 | 216 CSRSS.exe
|
|---|
| 43 | 211 WINLOGON.exe
|
|---|
| 44 | 193 CSRSS.exe
|
|---|
| 45 | 246 WINLOGON.exe
|
|---|
| 46 | 265 NDDEAGNT.exe
|
|---|
| 47 | 238 EXPLORER.exe
|
|---|
| 48 | 276 LOADWC.exe
|
|---|
| 49 | 286 WZQKPICK.exe
|
|---|
| 50 | 272 CMD.exe
|
|---|
| 51 | 161 drwtsn32.exe
|
|---|
| 52 | 0 _Total.exe
|
|---|
| 53 |
|
|---|
| 54 | (00400000 - 00400000)
|
|---|
| 55 | (77f60000 - 77fbf000) dll\ntdll.dbg
|
|---|
| 56 | (77ef0000 - 77f58000) dll\kernel32.dbg
|
|---|
| 57 | (77da0000 - 77de4000) dll\advapi32.dbg
|
|---|
| 58 | (77e60000 - 77eb2000) dll\user32.dbg
|
|---|
| 59 | (77ec0000 - 77eec000) dll\gdi32.dbg
|
|---|
| 60 | (4ef80000 - 4efd7000) dll\rpcrt4.dbg
|
|---|
| 61 | (73940000 - 7394c000) dll\winsta.dbg
|
|---|
| 62 | (71710000 - 71794000) dll\comctl32.dbg
|
|---|
| 63 | (65f00000 - 65fb1000) dll\ole32.dbg
|
|---|
| 64 | (77c20000 - 77d60000) dll\shell32.dbg
|
|---|
| 65 | (77a70000 - 77a7b000) dll\version.dbg
|
|---|
| 66 | (779a0000 - 779a8000) dll\lz32.dbg
|
|---|
| 67 | (48000000 - 4806c000)
|
|---|
| 68 |
|
|---|
| 69 | State Dump for Thread Id 0x11a
|
|---|
| 70 |
|
|---|
| 71 | eax=fa087c00 ebx=00000400 ecx=00000000 edx=00000000 esi=00000000 edi=00000000
|
|---|
| 72 | eip=77f0d3a8 esp=0012fa64 ebp=0012fabc iopl=0 nv up ei pl zr na po nc
|
|---|
| 73 | cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
|
|---|
| 74 |
|
|---|
| 75 |
|
|---|
| 76 | function: GetDiskFreeSpaceExW
|
|---|
| 77 | 77f0d387 e8984b0200 call GetDateFormatW+0x40b6 (77f31f24)
|
|---|
| 78 | 77f0d38c ff75cc push dword ptr [ebp-0x34] ss:00fae4c2=????????
|
|---|
| 79 | 77f0d38f ff75c8 push dword ptr [ebp-0x38] ss:00fae4c2=????????
|
|---|
| 80 | 77f0d392 ff75f4 push dword ptr [ebp-0xc] ss:00fae4c2=????????
|
|---|
| 81 | 77f0d395 8b4d0c mov ecx,[ebp+0xc] ss:00fae4c2=????????
|
|---|
| 82 | 77f0d398 ff75f0 push dword ptr [ebp-0x10] ss:00fae4c2=????????
|
|---|
| 83 | 77f0d39b 8901 mov [ecx],eax ds:00000000=????????
|
|---|
| 84 | 77f0d39d 895104 mov [ecx+0x4],edx ds:00e7ea06=????????
|
|---|
| 85 | 77f0d3a0 e87f4b0200 call GetDateFormatW+0x40b6 (77f31f24)
|
|---|
| 86 | 77f0d3a5 8b4d10 mov ecx,[ebp+0x10] ss:00fae4c2=????????
|
|---|
| 87 | FAULT ->77f0d3a8 8901 mov [ecx],eax ds:00000000=????????
|
|---|
| 88 | 77f0d3aa 895104 mov [ecx+0x4],edx ds:00e7ea06=????????
|
|---|
| 89 | 77f0d3ad 8b5514 mov edx,[ebp+0x14] ss:00fae4c2=????????
|
|---|
| 90 | 77f0d3b0 85d2 test edx,edx
|
|---|
| 91 | 77f0d3b2 740d jz GetDiskFreeSpaceExW+0x14e (77f0d3c1)
|
|---|
| 92 | 77f0d3b4 8b450c mov eax,[ebp+0xc] ss:00fae4c2=????????
|
|---|
| 93 | 77f0d3b7 8b08 mov ecx,[eax] ds:fa087c00=????????
|
|---|
| 94 | 77f0d3b9 8b7004 mov esi,[eax+0x4] ds:faf06606=????????
|
|---|
| 95 | 77f0d3bc 890a mov [edx],ecx ds:00000000=????????
|
|---|
| 96 | 77f0d3be 897204 mov [edx+0x4],esi ds:00e7ea06=????????
|
|---|
| 97 | 77f0d3c1 b801000000 mov eax,0x1
|
|---|
| 98 | 77f0d3c6 5f pop edi
|
|---|
| 99 |
|
|---|
| 100 | *----> Stack Back Trace <----*
|
|---|
| 101 |
|
|---|
| 102 | FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
|
|---|
| 103 | 0012fabc 77f0d26c 7ffdec00 0012fb24 00000000 00000000 kernel32!GetDiskFreeSpaceExW
|
|---|
| 104 | 0012fae0 004050e4 0042b610 0012fb24 00000000 00000000 kernel32!GetDiskFreeSpaceExA
|
|---|
| 105 |
|
|---|
| 106 | *----> Raw Stack Dump <----*
|
|---|
| 107 | 0012fa64 ff ff ff ff f8 eb fd 7f - 18 00 00 00 00 00 00 00 ................
|
|---|
| 108 | 0012fa74 a4 fa 12 00 40 00 00 00 - 00 00 00 00 00 00 00 00 ....@...........
|
|---|
| 109 | 0012fa84 3e 04 7d 00 00 00 00 00 - a7 70 0b 00 00 00 00 00 >.}......p......
|
|---|
| 110 | 0012fa94 01 00 00 00 00 02 00 00 - 00 00 00 00 18 00 00 00 ................
|
|---|
| 111 | 0012faa4 0e 00 1a 02 28 21 13 00 - 00 02 00 00 00 00 00 00 ....(!..........
|
|---|
| 112 | 0012fab4 5c 00 00 00 44 00 00 00 - e0 fa 12 00 6c d2 f0 77 \...D.......l..w
|
|---|
| 113 | 0012fac4 00 ec fd 7f 24 fb 12 00 - 00 00 00 00 00 00 00 00 ....$...........
|
|---|
| 114 | 0012fad4 10 b6 42 00 03 00 04 00 - 10 b6 42 00 40 fb 12 00 ..B.......B.@...
|
|---|
| 115 | 0012fae4 e4 50 40 00 10 b6 42 00 - 24 fb 12 00 00 00 00 00 .P@...B.$.......
|
|---|
| 116 | 0012faf4 00 00 00 00 e4 58 4b 00 - 05 04 00 00 30 58 4b 00 .....XK.....0XK.
|
|---|
| 117 | 0012fb04 14 00 00 00 56 00 10 01 - 00 00 00 00 00 00 00 00 ....V...........
|
|---|
| 118 | 0012fb14 e4 58 4b 00 47 00 00 00 - 30 58 4b 00 18 00 00 00 .XK.G...0XK.....
|
|---|
| 119 | 0012fb24 00 4e e1 16 00 00 00 00 - bc 5e 13 00 20 01 08 00 .N.......^.. ...
|
|---|
| 120 | 0012fb34 80 fb 12 00 bb 72 e7 77 - 00 00 00 00 88 fb 12 00 .....r.w........
|
|---|
| 121 | 0012fb44 54 72 e7 77 c0 00 31 00 - 05 04 00 00 00 00 00 00 Tr.w..1.........
|
|---|
| 122 | 0012fb54 00 00 00 00 05 04 00 00 - 30 58 4b 00 c0 00 31 00 ........0XK...1.
|
|---|
| 123 | 0012fb64 04 00 00 00 00 00 00 00 - 00 00 00 00 20 01 08 00 ............ ...
|
|---|
| 124 | 0012fb74 30 58 4b 00 c0 00 31 00 - 00 00 00 00 c0 00 31 00 0XK...1.......1.
|
|---|
| 125 | 0012fb84 00 00 00 00 b8 fb 12 00 - bc 27 e6 77 30 58 4b 00 .........'.w0XK.
|
|---|
| 126 | 0012fb94 05 04 00 00 00 00 00 00 - 00 00 00 00 01 00 00 00 ................
|
|---|
| 127 |
|
|---|
| 128 |
|
|---|
| 129 |
|
|---|
