Error with Excel 2000 workbook

ERROR MESSAGE RECEIVED PRESSING DELETE KEY ON A SINGLE
CELL IN EXCEL 2000 WORKBOOK.

The instruction at "0x30681bb9" reference memory
at "0x0048005e". The memory could not be "read".


ERROR FILE :

Microsoft (R) Windows 2000 (TM) Version 5.00 DrWtsn32
Copyright (C) 1985-1999 Microsoft Corp. All rights
reserved.

Application exception occurred:
App: (pid=1640)
When: 10/31/2003 @ 15:03:20.116
Exception number: c0000005 (access violation)

*---- System Information ----*
Computer Name: FT-11096
User Name: cobbyj
Number of Processors: 1
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 3
Current Type: Uniprocessor Free
Registered Organization: Financial Times Ltd
Registered Owner: Financial Times

*---- Task List ----*
0 Idle.exe
8 System.exe
144 SMSS.exe
168 CSRSS.exe
164 WINLOGON.exe
216 SERVICES.exe
228 LSASS.exe
412 SVCHOST.exe
444 spoolsv.exe
508 ASFAgent.exe
552 clisvcl.exe
568 SVCHOST.exe
588 Iap.exe
620 FrameworkServic.exe
688 Mcshield.exe
704 VsTskMgr.exe
788 NMSSvc.exe
792 naPrdMgr.exe
868 regsvc.exe
884 LOCATOR.exe
912 mstask.exe
996 Wuser32.exe
1192 SMSAPM32.exe
1244 explorer.exe
1264 point32.exe
828 shstat.exe
1344 UpdaterUI.exe
1404 launch32.exe
1420 realsched.exe
1472 rnathchk.exe
1648 SMSMon32.exe
424 nlnotes.exe
1576 nhldaemn.exe
1640 EXCEL.exe
1488 HsComLog.exe
276 DRWTSN32.exe
0 _Total.exe

(30000000 - 306D9000)
(77F80000 - 77FFB000)
(77DB0000 - 77E0B000)
(77E80000 - 77F31000)
(77D30000 - 77D9E000)
(77F40000 - 77F79000)
(77E10000 - 77E6F000)
(308C0000 - 30E1D000)
(77A50000 - 77B3C000)
(775A0000 - 77625000)
(779B0000 - 77A4B000)
(78000000 - 78046000)
(770F0000 - 772ED000)
(782F0000 - 78534000)
(70BD0000 - 70C1C000)
(716F0000 - 7177A000)
(77840000 - 7787D000)
(770C0000 - 770E3000)
(10000000 - 10022000)
(3FFE0000 - 3FFE9000)
(01480000 - 014AA000)
(014B0000 - 01664000)
(76620000 - 76630000)
(60460000 - 6048F000)
(77800000 - 7781E000)
(01670000 - 0174E000)
(60990000 - 609D4000)
(602A0000 - 602B1000)
(609E0000 - 60A21000)
(01750000 - 017C0000)
(61220000 - 6122E000)
(03DF0000 - 03E7B000)
(05960000 - 0596B000)
(6C370000 - 6C462000)
(65000000 - 65263000)
(65300000 - 65327000)
(05F70000 - 05FDC000)
(75160000 - 7516C000)
(75210000 - 75225000)
(751D0000 - 75208000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(75150000 - 75160000)
(75030000 - 75043000)
(75020000 - 75028000)
(77950000 - 77978000)
(77980000 - 779A4000)
(75050000 - 75058000)
(28B70000 - 28B87000)
(76DF0000 - 76E01000)
(70FE0000 - 710FB000)
(76FA0000 - 76FAF000)
(773E0000 - 773F5000)
(70200000 - 70279000)
(77530000 - 77552000)
(76710000 - 76719000)
(06C30000 - 06CA9000)
(77570000 - 775A0000)
(6A8F0000 - 6A910000)
(69BF0000 - 69C0D000)
(77BF0000 - 77C01000)

State Dump for Thread Id 0x354

eax=0ba07800 ebx=03caa424 ecx=00480048 edx=00000000
esi=00000000 edi=00000008
eip=30681bb9 esp=0012f848 ebp=0012f900 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246


function: nosymbols
30681ba4 57 push edi
30681ba5 56 push esi
30681ba6 52 push edx
30681ba7 51 push ecx
30681ba8 53 push ebx
30681ba9 50 push eax
30681baa e88a0bd4ff call
MdCallBack+0x1cc8e (303c2739)
30681baf e9dde49eff jmp
Ordinal44+0x70091 (30070091)
30681bb4 33d2 xor edx,edx
30681bb6 8b4819 mov ecx,
[eax+0x19] ds:0c484dd2=????????
FAULT -30681bb9 668b5116 mov dx,
[ecx+0x16] ds:00efd61b=????
30681bbd 85d2 test edx,edx
30681bbf 0f84cce49eff je
Ordinal44+0x70091 (30070091)
30681bc5 8b5110 mov edx,
[ecx+0x10] ds:00efd61a=????????
30681bc8 80fe00 cmp dh,0x0
30681bcb 0f85c0e49eff jne
Ordinal44+0x70091 (30070091)
30681bd1 8d45fc lea eax,
[ebp+0xfc] ss:00baced2=????????
30681bd4 8d55f8 lea edx,
[ebp+0xf8] ss:00baced2=????????
30681bd7 8b7594 mov esi,
[ebp+0x94] ss:00baced2=????????
30681bda 56 push esi
30681bdb 53 push ebx
30681bdc 51 push ecx

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0012F900 3006EB67 00000048 00000048 00000011 00000020 !
LPenHelper
0012FA58 3006DD8B 0000003A 00000000 00000100 00000100 !
Ordinal44
0012FAE4 3006DB16 03CABB8C 00000000 0000003A E4800000 !
Ordinal44
0012FB04 300936D4 03CABB8C 0000003A E4A00000 00000100 !
Ordinal44
0012FB34 30127296 03CABB8C 00000002 00000001 00000000 !
Ordinal44
0012FBDC 3012717A 0012FDB4 00000001 00000000 00000034 !
Ordinal44
0012FBFC 30036A1F 0012FDB4 00000001 00000000 00818254 !
Ordinal44
0012FD9C 302B5B55 00000034 0012FDB4 00000001 00000000 !
Ordinal44
0012FE24 3007350A 0081804C 0012FED8 00000C00 00000000 !
Ordinal44
0012FE58 301791C2 FFFFFFFF 00000C00 0081804C 00000000 !
Ordinal44
0012FF28 300027FA 00000000 0012FFC0 300026E5 30000000 !
Ordinal44
0012FF34 300026E5 30000000 00000000 00132F45 00000001 !
Ordinal44
0012FFC0 77EA847C 00000000 00000000 7FFDF000 C0000005 !
Ordinal44
0012FFF0 00000000 30002658 00000000 000000C8 00000100
kernel32!ProcessIdToSessionId

*---- Raw Stack Dump ----*
0012f848 11 00 00 00 00 00 00 00 - 20 00 00 00 7c fa 12
00 ........ ...|...
0012f858 00 f9 12 00 48 00 00 00 - 48 00 00 00 20 00 00
00 ....H...H... ...
0012f868 44 f8 12 00 f0 1b 68 30 - 1c 9f f8 07 50 00 00
00 D.....h0....P...
0012f878 40 00 00 00 1c d0 98 05 - dc 6a f9 07 e4 34 f9
07 @........j...4..
0012f888 0f 00 00 00 48 00 00 00 - 1c f0 98 05 f8 ef 98
05 ....H...........
0012f898 03 00 00 00 04 00 00 00 - 24 a4 ca 03 00 03 48
00 ........$.....H.
0012f8a8 11 00 20 00 00 00 00 00 - 14 00 21 00 03 00 00
00 .. .......!.....
0012f8b8 00 00 00 00 00 00 00 00 - 24 a4 ca 03 24 a4 ca
03 ........$...$...
0012f8c8 00 00 00 00 09 ff ff ff - 00 00 00 00 48 00 00
00 ............H...
0012f8d8 11 00 00 00 20 00 00 00 - 69 d0 17 30 90 5e 57
06 .... ...i..0.^W.
0012f8e8 00 00 00 00 00 00 00 00 - e0 46 f9 07 e0 46 f9
07 .........F...F..
0012f8f8 fc 00 42 09 ec 00 42 09 - 58 fa 12 00 67 eb 06
30 ..B...B.X...g..0
0012f908 48 00 00 00 48 00 00 00 - 11 00 00 00 20 00 00
00 H...H....... ...
0012f918 01 00 00 00 00 00 00 00 - 00 01 00 00 58 fa 12
00 ............X...
0012f928 00 00 00 00 01 00 00 00 - 00 00 00 00 0c f9 12
00 ................
0012f938 5c df 06 30 b0 00 77 00 - 00 00 77 00 00 20 00
00 \..0..w...w.. ..
0012f948 00 00 00 00 00 00 00 00 - 00 00 00 00 03 00 00
00 ................
0012f958 09 04 00 00 00 20 00 00 - 00 00 77 00 00 00 77
00 ..... ....w...w.
0012f968 02 00 00 00 00 70 06 00 - 00 10 00 00 02 00 00
00 .....p..........
0012f978 00 00 04 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................

State Dump for Thread Id 0x558

eax=77d41c54 ebx=77f8316d ecx=00000001 edx=00000000
esi=00145530 edi=00000100
eip=77f83bb8 esp=084dfe28 ebp=084dff74 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,
[esp+0x4] ss:08f5d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
084DFF74 77D56D9E 77D39AD0 00145530 00000000 0788FA8C
ntdll!NtReplyWaitReceivePortEx
084DFFA8 77D41C6C 0013BB50 084DFFEC 77E8B2D8 0017DA98
rpcrt4!TowerConstruct
084DFFB4 77E8B2D8 0017DA98 00000000 0788FA8C 0017DA98
rpcrt4!I_RpcServerInqTransportType
084DFFEC 00000000 00000000 00000000 00000000 00000000
kernel32!lstrcmpiW

State Dump for Thread Id 0x500

eax=77d41c54 ebx=80020000 ecx=00000001 edx=00000000
esi=00145530 edi=00000100
eip=77f83bb8 esp=0788fe28 ebp=0788ff74 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,
[esp+0x4] ss:0830d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0788FF74 77D56D9E 77D39A00 00145530 00000000 084DFA8C
ntdll!NtReplyWaitReceivePortEx
0788FFA8 77D41C6C 001864A8 0788FFEC 77E8B2D8 00177178
rpcrt4!TowerConstruct
0788FFB4 77E8B2D8 00177178 00000000 084DFA8C 00177178
rpcrt4!I_RpcServerInqTransportType
0788FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!lstrcmpiW



Application exception occurred:
App: (pid=260)
When: 10/31/2003 @ 15:04:17.256
Exception number: c0000005 (access violation)

*---- System Information ----*
Computer Name: FT-11096
User Name: cobbyj
Number of Processors: 1
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 3
Current Type: Uniprocessor Free
Registered Organization: Financial Times Ltd
Registered Owner: Financial Times

*---- Task List ----*
0 Idle.exe
8 System.exe
144 SMSS.exe
168 CSRSS.exe
164 WINLOGON.exe
216 SERVICES.exe
228 LSASS.exe
412 SVCHOST.exe
444 spoolsv.exe
508 ASFAgent.exe
552 clisvcl.exe
568 SVCHOST.exe
588 Iap.exe
620 FrameworkServic.exe
688 Mcshield.exe
704 VsTskMgr.exe
788 NMSSvc.exe
792 naPrdMgr.exe
868 regsvc.exe
884 LOCATOR.exe
912 mstask.exe
996 Wuser32.exe
1192 SMSAPM32.exe
1244 explorer.exe
1264 point32.exe
828 shstat.exe
1344 UpdaterUI.exe
1404 launch32.exe
1420 realsched.exe
1472 rnathchk.exe
1648 SMSMon32.exe
424 nlnotes.exe
1576 nhldaemn.exe
1488 HsComLog.exe
260 EXCEL.exe
1352 DRWTSN32.exe
0 _Total.exe

(30000000 - 306D9000)
(77F80000 - 77FFB000)
(77DB0000 - 77E0B000)
(77E80000 - 77F31000)
(77D30000 - 77D9E000)
(77F40000 - 77F79000)
(77E10000 - 77E6F000)
(308C0000 - 30E1D000)
(77A50000 - 77B3C000)
(775A0000 - 77625000)
(779B0000 - 77A4B000)
(78000000 - 78046000)
(770F0000 - 772ED000)
(782F0000 - 78534000)
(70BD0000 - 70C1C000)
(716F0000 - 7177A000)
(77840000 - 7787D000)
(770C0000 - 770E3000)
(10000000 - 10022000)
(3FFE0000 - 3FFE9000)
(01480000 - 014AA000)
(014B0000 - 01664000)
(76620000 - 76630000)
(60460000 - 6048F000)
(77800000 - 7781E000)
(01670000 - 0174E000)
(60990000 - 609D4000)
(602A0000 - 602B1000)
(609E0000 - 60A21000)
(01750000 - 017C0000)
(61220000 - 6122E000)
(03DD0000 - 03E5B000)
(05840000 - 0584B000)
(6C370000 - 6C462000)
(65000000 - 65263000)
(65300000 - 65327000)
(05E50000 - 05EBC000)
(75160000 - 7516C000)
(75210000 - 75225000)
(751D0000 - 75208000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(75150000 - 75160000)
(75030000 - 75043000)
(75020000 - 75028000)
(77950000 - 77978000)
(77980000 - 779A4000)
(75050000 - 75058000)
(28B70000 - 28B87000)
(76DF0000 - 76E01000)
(70FE0000 - 710FB000)
(76FA0000 - 76FAF000)
(773E0000 - 773F5000)
(70200000 - 70279000)
(77530000 - 77552000)
(76710000 - 76719000)

State Dump for Thread Id 0x114

eax=06227800 ebx=061bb654 ecx=00480048 edx=00000000
esi=00000000 edi=00000008
eip=30681bb9 esp=0012f848 ebp=0012f900 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246


function: nosymbols
30681ba4 57 push edi
30681ba5 56 push esi
30681ba6 52 push edx
30681ba7 51 push ecx
30681ba8 53 push ebx
30681ba9 50 push eax
30681baa e88a0bd4ff call
MdCallBack+0x1cc8e (303c2739)
30681baf e9dde49eff jmp
Ordinal44+0x70091 (30070091)
30681bb4 33d2 xor edx,edx
30681bb6 8b4819 mov ecx,
[eax+0x19] ds:06ca4dd2=????????
FAULT -30681bb9 668b5116 mov dx,
[ecx+0x16] ds:00efd61b=????
30681bbd 85d2 test edx,edx
30681bbf 0f84cce49eff je
Ordinal44+0x70091 (30070091)
30681bc5 8b5110 mov edx,
[ecx+0x10] ds:00efd61a=????????
30681bc8 80fe00 cmp dh,0x0
30681bcb 0f85c0e49eff jne
Ordinal44+0x70091 (30070091)
30681bd1 8d45fc lea eax,
[ebp+0xfc] ss:00baced2=????????
30681bd4 8d55f8 lea edx,
[ebp+0xf8] ss:00baced2=????????
30681bd7 8b7594 mov esi,
[ebp+0x94] ss:00baced2=????????
30681bda 56 push esi
30681bdb 53 push ebx
30681bdc 51 push ecx

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0012F900 3006EB67 00000048 00000048 00000011 00000011 !
LPenHelper
0012FA58 3006DD8B 0000003A 00000000 00000100 00000100 !
Ordinal44
0012FAE4 3006DB16 061BCDA8 00000000 0000003A E4800000 !
Ordinal44
0012FB04 300936D4 061BCDA8 0000003A E4A00000 00000100 !
Ordinal44
0012FB34 30127296 061BCDA8 00000002 00000001 00000000 !
Ordinal44
0012FBDC 3012717A 0012FDB4 00000001 00000000 00000034 !
Ordinal44
0012FBFC 30036A1F 0012FDB4 00000001 00000000 00818254 !
Ordinal44
0012FD9C 302B5B55 00000034 0012FDB4 00000001 00000000 !
Ordinal44
0012FE24 3007350A 0081804C 0012FED8 00000400 00000000 !
Ordinal44
0012FE58 301791C2 FFFFFFFF 00000400 0081804C 00000000 !
Ordinal44
0012FF28 300027FA 00000000 0012FFC0 300026E5 30000000 !
Ordinal44
0012FF34 300026E5 30000000 00000000 00132F45 00000001 !
Ordinal44
0012FFC0 77EA847C 00000000 00000000 7FFDF000 C0000005 !
Ordinal44
0012FFF0 00000000 30002658 00000000 000000C8 00000100
kernel32!ProcessIdToSessionId

*---- Raw Stack Dump ----*
0012f848 11 00 00 00 00 00 00 00 - 11 00 00 00 7c fa 12
00 ............|...
0012f858 00 f9 12 00 48 00 00 00 - 48 00 00 00 11 00 00
00 ....H...H.......
0012f868 44 f8 12 00 f0 1b 68 30 - 0c 00 26 06 50 00 00
00 D.....h0..&.P...
0012f878 40 00 00 00 08 42 26 06 - fc 57 25 06 f0 49 26
06 @....B&..W%..I&.
0012f888 0f 00 00 00 48 00 00 00 - 8c 3a 26 06 68 3a 26
06 ....H....:&.h:&.
0012f898 03 00 00 00 04 00 00 00 - 54 b6 1b 06 00 03 48
00 ........T.....H.
0012f8a8 11 00 11 00 00 00 00 00 - 10 00 12 00 03 00 00
00 ................
0012f8b8 00 00 00 00 00 00 00 00 - 54 b6 1b 06 54 b6 1b
06 ........T...T...
0012f8c8 00 00 00 00 09 ff ff ff - 00 00 00 00 48 00 00
00 ............H...
0012f8d8 11 00 00 00 11 00 00 00 - 69 d0 17 30 94 28 86
05 ........i..0.(..
0012f8e8 00 00 00 00 00 00 00 00 - a4 50 25 06 a4 50 25
06 .........P%..P%.
0012f8f8 00 3c 26 06 f0 3b 26 06 - 58 fa 12 00 67 eb 06
30 .&..;&.X...g..0
0012f908 48 00 00 00 48 00 00 00 - 11 00 00 00 11 00 00
00 H...H...........
0012f918 01 00 00 00 00 00 00 00 - 00 01 00 00 58 fa 12
00 ............X...
0012f928 00 00 00 00 01 00 00 00 - 00 00 00 00 0c f9 12
00 ................
0012f938 5c df 06 30 b0 00 77 00 - 00 00 77 00 00 20 00
00 \..0..w...w.. ..
0012f948 00 00 00 00 00 00 00 00 - 00 00 00 00 03 00 00
00 ................
0012f958 09 04 00 00 00 20 00 00 - 00 00 77 00 00 00 77
00 ..... ....w...w.
0012f968 02 00 00 00 00 70 06 00 - 00 10 00 00 02 00 00
00 .....p..........
0012f978 00 00 04 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................

State Dump for Thread Id 0x668

eax=0000017c ebx=77f8316d ecx=00145530 edx=00000000
esi=00145530 edi=00000100
eip=77f83bb8 esp=00f1fe28 ebp=00f1ff74 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,
[esp+0x4] ss:0199d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
00F1FF74 77D56D9E 77D39AD0 00145530 4014504C 00000070
ntdll!NtReplyWaitReceivePortEx
00F1FFA8 77D41C6C 0013BB50 00F1FFEC 77E8B2D8 00144198
rpcrt4!TowerConstruct
00F1FFB4 77E8B2D8 00144198 4014504C 00000070 00144198
rpcrt4!I_RpcServerInqTransportType
00F1FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!lstrcmpiW

State Dump for Thread Id 0x500

eax=77ab4639 ebx=00000102 ecx=001443a0 edx=00000000
esi=77f8318c edi=0101ff74
eip=77f83197 esp=0101ff60 ebp=0101ff7c iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,
[esp+0x4] ss:01a9d533=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0101FF7C 77EA9D5F 0000EA60 00000000 77AB85FC 0000EA60
ntdll!NtDelayExecution
00007530 00000000 00000000 00000000 00000000 00000000
kernel32!Sleep

*---- Raw Stack Dump ----*
0101ff60 94 9d ea 77 00 00 00 00 - 74 ff 01 01 c4 9a ea
77 ...w....t......w
0101ff70 30 84 14 00 00 ba 3c dc - ff ff ff ff 30 75 00
00 0..........0u..
0101ff80 5f 9d ea 77 60 ea 00 00 - 00 00 00 00 fc 85 ab
77 _..w`..........w
0101ff90 60 ea 00 00 fb 46 ab 77 - 00 00 00 00 00 00 a5
77 `....F.w.......w
0101ffa0 30 84 14 00 ec ff 01 01 - 30 84 14 00 53 46 ab
77 0.......0...SF.w
0101ffb0 d8 7a a6 77 c3 7a a6 77 - d8 b2 e8 77 30 84 14
00 .z.w.z.w...w0...
0101ffc0 d8 7a a6 77 c3 7a a6 77 - 30 84 14 00 00 c0 fd
7f .z.w.z.w0.......
0101ffd0 a0 43 14 00 c0 ff 01 01 - a0 43 14 00 ff ff ff
ff .C.......C......
0101ffe0 6c 13 ed 77 98 2a e8 77 - 00 00 00 00 00 00 00
00 l..w.*.w........
0101fff0 00 00 00 00 39 46 ab 77 - 30 84 14 00 00 00 00
00 ....9F.w0.......
01020000 00 00 00 00 00 00 ff ff - 00 00 00 00 00 20 00
00 ............. ..
01020010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020060 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020070 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020080 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................

State Dump for Thread Id 0x558

eax=77d41c54 ebx=77f8316d ecx=00000000 edx=00000000
esi=00151708 edi=0013bad8
eip=77f83197 esp=0583ff78 ebp=0583ffa8 iopl=0 nv
up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000286


function: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,
[esp+0x4] ss:062bd54b=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0583FFA8 77D41C6C 0013BB50 0583FFEC 77E8B2D8 0014F098
ntdll!NtDelayExecution
0583FFB4 77E8B2D8 0014F098 00000000 00000000 0014F098
rpcrt4!I_RpcServerInqTransportType
0583FFEC 00000000 77D41C54 0014F098 00000000 00905A4D
kernel32!lstrcmpiW

*---- Raw Stack Dump ----*
0583ff78 74 9a d3 77 01 00 00 00 - 90 ff 83 05 00 00 00
00 t..w............
0583ff88 00 00 00 00 98 f0 14 00 - 00 5d 1e ee ff ff ff
ff .........]......
0583ff98 00 5d 1e ee ff ff ff ff - 30 75 00 00 98 f0 14
00 .]......0u......
0583ffa8 b4 ff 83 05 6c 1c d4 77 - 50 bb 13 00 ec ff 83
05 ....l..wP.......
0583ffb8 d8 b2 e8 77 98 f0 14 00 - 00 00 00 00 00 00 00
00 ...w............
0583ffc8 98 f0 14 00 00 b0 fd 7f - 00 00 00 00 c0 ff 83
05 ................
0583ffd8 00 00 00 00 ff ff ff ff - 6c 13 ed 77 98 2a e8
77 ........l..w.*.w
0583ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 54 1c d4
77 ............T..w
0583fff8 98 f0 14 00 00 00 00 00 - 4d 5a 90 00 03 00 00
00 ........MZ......
05840008 04 00 00 00 ff ff 00 00 - b8 00 00 00 00 00 00
00 ................
05840018 40 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 @...............
05840028 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
05840038 00 00 00 00 80 00 00 00 - 0e 1f ba 0e 00 b4 09
cd ................
05840048 21 b8 01 4c cd 21 54 68 - 69 73 20 70 72 6f 67
72 !..L.!This progr
05840058 61 6d 20 63 61 6e 6e 6f - 74 20 62 65 20 72 75
6e am cannot be run
05840068 20 69 6e 20 44 4f 53 20 - 6d 6f 64 65 2e 0d 0d
0a in DOS mode....
05840078 24 00 00 00 00 00 00 00 - 50 45 00 00 4c 01 06
00 $.......PE..L...
05840088 98 61 0b 37 00 00 00 00 - 00 00 00 00 e0 00 0e
21 .a.7...........!
05840098 0b 01 05 00 00 30 00 00 - 00 46 00 00 00 00 00
00 .....0...F......
058400a8 70 3b 00 00 00 10 00 00 - 00 40 00 00 00 00 00
10 p;.......@......



Application exception occurred:
App: (pid=656)
When: 10/31/2003 @ 15:07:48.772
Exception number: c0000005 (access violation)

*---- System Information ----*
Computer Name: FT-11096
User Name: cobbyj
Number of Processors: 1
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 3
Current Type: Uniprocessor Free
Registered Organization: Financial Times Ltd
Registered Owner: Financial Times

*---- Task List ----*
0 Idle.exe
8 System.exe
144 SMSS.exe
168 CSRSS.exe
164 WINLOGON.exe
216 SERVICES.exe
228 LSASS.exe
412 SVCHOST.exe
444 spoolsv.exe
508 ASFAgent.exe
552 clisvcl.exe
568 SVCHOST.exe
588 Iap.exe
620 FrameworkServic.exe
688 Mcshield.exe
704 VsTskMgr.exe
788 NMSSvc.exe
792 naPrdMgr.exe
868 regsvc.exe
884 LOCATOR.exe
912 mstask.exe
996 Wuser32.exe
1192 SMSAPM32.exe
1244 explorer.exe
1264 point32.exe
828 shstat.exe
1344 UpdaterUI.exe
1404 launch32.exe
1420 realsched.exe
1472 rnathchk.exe
1648 SMSMon32.exe
424 nlnotes.exe
1576 nhldaemn.exe
1488 HsComLog.exe
656 EXCEL.exe
1240 DRWTSN32.exe
0 _Total.exe

(30000000 - 306D9000)
(77F80000 - 77FFB000)
(77DB0000 - 77E0B000)
(77E80000 - 77F31000)
(77D30000 - 77D9E000)
(77F40000 - 77F79000)
(77E10000 - 77E6F000)
(308C0000 - 30E1D000)
(77A50000 - 77B3C000)
(775A0000 - 77625000)
(779B0000 - 77A4B000)
(78000000 - 78046000)
(770F0000 - 772ED000)
(782F0000 - 78534000)
(70BD0000 - 70C1C000)
(716F0000 - 7177A000)
(77840000 - 7787D000)
(770C0000 - 770E3000)
(10000000 - 10022000)
(3FFE0000 - 3FFE9000)
(01480000 - 014AA000)
(014B0000 - 01664000)
(76620000 - 76630000)
(60460000 - 6048F000)
(77800000 - 7781E000)
(01670000 - 0174E000)
(60990000 - 609D4000)
(602A0000 - 602B1000)
(609E0000 - 60A21000)
(01750000 - 017C0000)
(61220000 - 6122E000)
(03DD0000 - 03E5B000)
(05840000 - 0584B000)
(6C370000 - 6C462000)
(65000000 - 65263000)
(65300000 - 65327000)
(75160000 - 7516C000)
(75210000 - 75225000)
(751D0000 - 75208000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(75150000 - 75160000)
(75030000 - 75043000)
(75020000 - 75028000)
(77950000 - 77978000)
(77980000 - 779A4000)
(75050000 - 75058000)
(05E70000 - 05EDC000)
(28B70000 - 28B87000)
(76DF0000 - 76E01000)
(70FE0000 - 710FB000)
(76FA0000 - 76FAF000)
(773E0000 - 773F5000)
(70200000 - 70279000)
(77530000 - 77552000)
(76710000 - 76719000)

State Dump for Thread Id 0x548

eax=06227800 ebx=061bb654 ecx=00480048 edx=00000000
esi=00000000 edi=00000008
eip=30681bb9 esp=0012f848 ebp=0012f900 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246


function: nosymbols
30681ba4 57 push edi
30681ba5 56 push esi
30681ba6 52 push edx
30681ba7 51 push ecx
30681ba8 53 push ebx
30681ba9 50 push eax
30681baa e88a0bd4ff call
MdCallBack+0x1cc8e (303c2739)
30681baf e9dde49eff jmp
Ordinal44+0x70091 (30070091)
30681bb4 33d2 xor edx,edx
30681bb6 8b4819 mov ecx,
[eax+0x19] ds:06ca4dd2=????????
FAULT -30681bb9 668b5116 mov dx,
[ecx+0x16] ds:00efd61b=????
30681bbd 85d2 test edx,edx
30681bbf 0f84cce49eff je
Ordinal44+0x70091 (30070091)
30681bc5 8b5110 mov edx,
[ecx+0x10] ds:00efd61a=????????
30681bc8 80fe00 cmp dh,0x0
30681bcb 0f85c0e49eff jne
Ordinal44+0x70091 (30070091)
30681bd1 8d45fc lea eax,
[ebp+0xfc] ss:00baced2=????????
30681bd4 8d55f8 lea edx,
[ebp+0xf8] ss:00baced2=????????
30681bd7 8b7594 mov esi,
[ebp+0x94] ss:00baced2=????????
30681bda 56 push esi
30681bdb 53 push ebx
30681bdc 51 push ecx

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0012F900 3006EB67 00000048 00000048 00000003 00000003 !
LPenHelper
0012FA58 3006DD8B 0000003A 00000000 00000100 00000100 !
Ordinal44
0012FAE4 3006DB16 061BCDA8 00000000 0000003A E4800000 !
Ordinal44
0012FB04 300936D4 061BCDA8 0000003A E4A00000 00000100 !
Ordinal44
0012FB34 30127296 061BCDA8 00000002 00000001 00000000 !
Ordinal44
0012FBDC 3012717A 0012FDB4 00000001 00000000 00000034 !
Ordinal44
0012FBFC 30036A1F 0012FDB4 00000001 00000000 00818254 !
Ordinal44
0012FD9C 302B5B55 00000034 0012FDB4 00000001 00000000 !
Ordinal44
0012FE24 3007350A 0081804C 0012FED8 00000400 00000000 !
Ordinal44
0012FE58 301791C2 FFFFFFFF 00000400 0081804C 00000000 !
Ordinal44
0012FF28 300027FA 00000000 0012FFC0 300026E5 30000000 !
Ordinal44
0012FF34 300026E5 30000000 00000000 00132F45 00000001 !
Ordinal44
0012FFC0 77EA847C 00000000 00000000 7FFDF000 C0000005 !
Ordinal44
0012FFF0 00000000 30002658 00000000 000000C8 00000100
kernel32!ProcessIdToSessionId

*---- Raw Stack Dump ----*
0012f848 03 00 00 00 00 00 00 00 - 03 00 00 00 7c fa 12
00 ............|...
0012f858 00 f9 12 00 48 00 00 00 - 48 00 00 00 03 00 00
00 ....H...H.......
0012f868 44 f8 12 00 f0 1b 68 30 - 0c 00 26 06 50 00 00
00 D.....h0..&.P...
0012f878 40 00 00 00 5c 42 26 06 - fc 57 25 06 44 4a 26
06 @...\B&..W%.DJ&.
0012f888 0f 00 00 00 48 00 00 00 - e0 3a 26 06 bc 3a 26
06 ....H....:&..:&.
0012f898 03 00 00 00 04 00 00 00 - 54 b6 1b 06 00 03 48
00 ........T.....H.
0012f8a8 03 00 03 00 00 00 00 00 - 03 00 04 00 03 00 00
00 ................
0012f8b8 00 00 00 00 00 00 00 00 - 54 b6 1b 06 54 b6 1b
06 ........T...T...
0012f8c8 00 00 00 00 09 ff ff ff - 00 00 00 00 48 00 00
00 ............H...
0012f8d8 03 00 00 00 03 00 00 00 - 69 d0 17 30 94 28 86
05 ........i..0.(..
0012f8e8 00 00 00 00 00 00 00 00 - a4 50 25 06 a4 50 25
06 .........P%..P%.
0012f8f8 34 3c 26 06 24 3c 26 06 - 58 fa 12 00 67 eb 06
30 4&.$&.X...g..0
0012f908 48 00 00 00 48 00 00 00 - 03 00 00 00 03 00 00
00 H...H...........
0012f918 01 00 00 00 00 00 00 00 - 00 01 00 00 58 fa 12
00 ............X...
0012f928 00 00 00 00 01 00 00 00 - 00 00 00 00 0c f9 12
00 ................
0012f938 5c df 06 30 b0 00 77 00 - 00 00 77 00 00 20 00
00 \..0..w...w.. ..
0012f948 00 00 00 00 00 00 00 00 - 00 00 00 00 03 00 00
00 ................
0012f958 09 04 00 00 00 20 00 00 - 00 00 77 00 00 00 77
00 ..... ....w...w.
0012f968 02 00 00 00 00 70 06 00 - 00 10 00 00 02 00 00
00 .....p..........
0012f978 00 00 04 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................

State Dump for Thread Id 0x104

eax=0000017c ebx=77f8316d ecx=00145530 edx=00000000
esi=00145530 edi=00000100
eip=77f83bb8 esp=00f1fe28 ebp=00f1ff74 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,
[esp+0x4] ss:0199d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
00F1FF74 77D56D9E 77D39AD0 00145530 4014504C 00000070
ntdll!NtReplyWaitReceivePortEx
00F1FFA8 77D41C6C 0013BB50 00F1FFEC 77E8B2D8 00144198
rpcrt4!TowerConstruct
00F1FFB4 77E8B2D8 00144198 4014504C 00000070 00144198
rpcrt4!I_RpcServerInqTransportType
00F1FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!lstrcmpiW

Close and reboot.

See if you can consistently cause exactly the same error.

If so, you might need to uninstall and reinstall office.

--
Regards,
Tom Ogilvy

ju wrote in message
...
ERROR MESSAGE RECEIVED PRESSING DELETE KEY ON A SINGLE
CELL IN EXCEL 2000 WORKBOOK.

The instruction at "0x30681bb9" reference memory
at "0x0048005e". The memory could not be "read".


ERROR FILE :

Microsoft (R) Windows 2000 (TM) Version 5.00 DrWtsn32
Copyright (C) 1985-1999 Microsoft Corp. All rights
reserved.

Application exception occurred:
App: (pid=1640)
When: 10/31/2003 @ 15:03:20.116
Exception number: c0000005 (access violation)

*---- System Information ----*
Computer Name: FT-11096
User Name: cobbyj
Number of Processors: 1
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 3
Current Type: Uniprocessor Free
Registered Organization: Financial Times Ltd
Registered Owner: Financial Times

*---- Task List ----*
0 Idle.exe
8 System.exe
144 SMSS.exe
168 CSRSS.exe
164 WINLOGON.exe
216 SERVICES.exe
228 LSASS.exe
412 SVCHOST.exe
444 spoolsv.exe
508 ASFAgent.exe
552 clisvcl.exe
568 SVCHOST.exe
588 Iap.exe
620 FrameworkServic.exe
688 Mcshield.exe
704 VsTskMgr.exe
788 NMSSvc.exe
792 naPrdMgr.exe
868 regsvc.exe
884 LOCATOR.exe
912 mstask.exe
996 Wuser32.exe
1192 SMSAPM32.exe
1244 explorer.exe
1264 point32.exe
828 shstat.exe
1344 UpdaterUI.exe
1404 launch32.exe
1420 realsched.exe
1472 rnathchk.exe
1648 SMSMon32.exe
424 nlnotes.exe
1576 nhldaemn.exe
1640 EXCEL.exe
1488 HsComLog.exe
276 DRWTSN32.exe
0 _Total.exe

(30000000 - 306D9000)
(77F80000 - 77FFB000)
(77DB0000 - 77E0B000)
(77E80000 - 77F31000)
(77D30000 - 77D9E000)
(77F40000 - 77F79000)
(77E10000 - 77E6F000)
(308C0000 - 30E1D000)
(77A50000 - 77B3C000)
(775A0000 - 77625000)
(779B0000 - 77A4B000)
(78000000 - 78046000)
(770F0000 - 772ED000)
(782F0000 - 78534000)
(70BD0000 - 70C1C000)
(716F0000 - 7177A000)
(77840000 - 7787D000)
(770C0000 - 770E3000)
(10000000 - 10022000)
(3FFE0000 - 3FFE9000)
(01480000 - 014AA000)
(014B0000 - 01664000)
(76620000 - 76630000)
(60460000 - 6048F000)
(77800000 - 7781E000)
(01670000 - 0174E000)
(60990000 - 609D4000)
(602A0000 - 602B1000)
(609E0000 - 60A21000)
(01750000 - 017C0000)
(61220000 - 6122E000)
(03DF0000 - 03E7B000)
(05960000 - 0596B000)
(6C370000 - 6C462000)
(65000000 - 65263000)
(65300000 - 65327000)
(05F70000 - 05FDC000)
(75160000 - 7516C000)
(75210000 - 75225000)
(751D0000 - 75208000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(75150000 - 75160000)
(75030000 - 75043000)
(75020000 - 75028000)
(77950000 - 77978000)
(77980000 - 779A4000)
(75050000 - 75058000)
(28B70000 - 28B87000)
(76DF0000 - 76E01000)
(70FE0000 - 710FB000)
(76FA0000 - 76FAF000)
(773E0000 - 773F5000)
(70200000 - 70279000)
(77530000 - 77552000)
(76710000 - 76719000)
(06C30000 - 06CA9000)
(77570000 - 775A0000)
(6A8F0000 - 6A910000)
(69BF0000 - 69C0D000)
(77BF0000 - 77C01000)

State Dump for Thread Id 0x354

eax=0ba07800 ebx=03caa424 ecx=00480048 edx=00000000
esi=00000000 edi=00000008
eip=30681bb9 esp=0012f848 ebp=0012f900 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246


function: nosymbols
30681ba4 57 push edi
30681ba5 56 push esi
30681ba6 52 push edx
30681ba7 51 push ecx
30681ba8 53 push ebx
30681ba9 50 push eax
30681baa e88a0bd4ff call
MdCallBack+0x1cc8e (303c2739)
30681baf e9dde49eff jmp
Ordinal44+0x70091 (30070091)
30681bb4 33d2 xor edx,edx
30681bb6 8b4819 mov ecx,
[eax+0x19] ds:0c484dd2=????????
FAULT -30681bb9 668b5116 mov dx,
[ecx+0x16] ds:00efd61b=????
30681bbd 85d2 test edx,edx
30681bbf 0f84cce49eff je
Ordinal44+0x70091 (30070091)
30681bc5 8b5110 mov edx,
[ecx+0x10] ds:00efd61a=????????
30681bc8 80fe00 cmp dh,0x0
30681bcb 0f85c0e49eff jne
Ordinal44+0x70091 (30070091)
30681bd1 8d45fc lea eax,
[ebp+0xfc] ss:00baced2=????????
30681bd4 8d55f8 lea edx,
[ebp+0xf8] ss:00baced2=????????
30681bd7 8b7594 mov esi,
[ebp+0x94] ss:00baced2=????????
30681bda 56 push esi
30681bdb 53 push ebx
30681bdc 51 push ecx

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0012F900 3006EB67 00000048 00000048 00000011 00000020 !
LPenHelper
0012FA58 3006DD8B 0000003A 00000000 00000100 00000100 !
Ordinal44
0012FAE4 3006DB16 03CABB8C 00000000 0000003A E4800000 !
Ordinal44
0012FB04 300936D4 03CABB8C 0000003A E4A00000 00000100 !
Ordinal44
0012FB34 30127296 03CABB8C 00000002 00000001 00000000 !
Ordinal44
0012FBDC 3012717A 0012FDB4 00000001 00000000 00000034 !
Ordinal44
0012FBFC 30036A1F 0012FDB4 00000001 00000000 00818254 !
Ordinal44
0012FD9C 302B5B55 00000034 0012FDB4 00000001 00000000 !
Ordinal44
0012FE24 3007350A 0081804C 0012FED8 00000C00 00000000 !
Ordinal44
0012FE58 301791C2 FFFFFFFF 00000C00 0081804C 00000000 !
Ordinal44
0012FF28 300027FA 00000000 0012FFC0 300026E5 30000000 !
Ordinal44
0012FF34 300026E5 30000000 00000000 00132F45 00000001 !
Ordinal44
0012FFC0 77EA847C 00000000 00000000 7FFDF000 C0000005 !
Ordinal44
0012FFF0 00000000 30002658 00000000 000000C8 00000100
kernel32!ProcessIdToSessionId

*---- Raw Stack Dump ----*
0012f848 11 00 00 00 00 00 00 00 - 20 00 00 00 7c fa 12
00 ........ ...|...
0012f858 00 f9 12 00 48 00 00 00 - 48 00 00 00 20 00 00
00 ....H...H... ...
0012f868 44 f8 12 00 f0 1b 68 30 - 1c 9f f8 07 50 00 00
00 D.....h0....P...
0012f878 40 00 00 00 1c d0 98 05 - dc 6a f9 07 e4 34 f9
07 @........j...4..
0012f888 0f 00 00 00 48 00 00 00 - 1c f0 98 05 f8 ef 98
05 ....H...........
0012f898 03 00 00 00 04 00 00 00 - 24 a4 ca 03 00 03 48
00 ........$.....H.
0012f8a8 11 00 20 00 00 00 00 00 - 14 00 21 00 03 00 00
00 .. .......!.....
0012f8b8 00 00 00 00 00 00 00 00 - 24 a4 ca 03 24 a4 ca
03 ........$...$...
0012f8c8 00 00 00 00 09 ff ff ff - 00 00 00 00 48 00 00
00 ............H...
0012f8d8 11 00 00 00 20 00 00 00 - 69 d0 17 30 90 5e 57
06 .... ...i..0.^W.
0012f8e8 00 00 00 00 00 00 00 00 - e0 46 f9 07 e0 46 f9
07 .........F...F..
0012f8f8 fc 00 42 09 ec 00 42 09 - 58 fa 12 00 67 eb 06
30 ..B...B.X...g..0
0012f908 48 00 00 00 48 00 00 00 - 11 00 00 00 20 00 00
00 H...H....... ...
0012f918 01 00 00 00 00 00 00 00 - 00 01 00 00 58 fa 12
00 ............X...
0012f928 00 00 00 00 01 00 00 00 - 00 00 00 00 0c f9 12
00 ................
0012f938 5c df 06 30 b0 00 77 00 - 00 00 77 00 00 20 00
00 \..0..w...w.. ..
0012f948 00 00 00 00 00 00 00 00 - 00 00 00 00 03 00 00
00 ................
0012f958 09 04 00 00 00 20 00 00 - 00 00 77 00 00 00 77
00 ..... ....w...w.
0012f968 02 00 00 00 00 70 06 00 - 00 10 00 00 02 00 00
00 .....p..........
0012f978 00 00 04 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................

State Dump for Thread Id 0x558

eax=77d41c54 ebx=77f8316d ecx=00000001 edx=00000000
esi=00145530 edi=00000100
eip=77f83bb8 esp=084dfe28 ebp=084dff74 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,
[esp+0x4] ss:08f5d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
084DFF74 77D56D9E 77D39AD0 00145530 00000000 0788FA8C
ntdll!NtReplyWaitReceivePortEx
084DFFA8 77D41C6C 0013BB50 084DFFEC 77E8B2D8 0017DA98
rpcrt4!TowerConstruct
084DFFB4 77E8B2D8 0017DA98 00000000 0788FA8C 0017DA98
rpcrt4!I_RpcServerInqTransportType
084DFFEC 00000000 00000000 00000000 00000000 00000000
kernel32!lstrcmpiW

State Dump for Thread Id 0x500

eax=77d41c54 ebx=80020000 ecx=00000001 edx=00000000
esi=00145530 edi=00000100
eip=77f83bb8 esp=0788fe28 ebp=0788ff74 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,
[esp+0x4] ss:0830d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0788FF74 77D56D9E 77D39A00 00145530 00000000 084DFA8C
ntdll!NtReplyWaitReceivePortEx
0788FFA8 77D41C6C 001864A8 0788FFEC 77E8B2D8 00177178
rpcrt4!TowerConstruct
0788FFB4 77E8B2D8 00177178 00000000 084DFA8C 00177178
rpcrt4!I_RpcServerInqTransportType
0788FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!lstrcmpiW



Application exception occurred:
App: (pid=260)
When: 10/31/2003 @ 15:04:17.256
Exception number: c0000005 (access violation)

*---- System Information ----*
Computer Name: FT-11096
User Name: cobbyj
Number of Processors: 1
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 3
Current Type: Uniprocessor Free
Registered Organization: Financial Times Ltd
Registered Owner: Financial Times

*---- Task List ----*
0 Idle.exe
8 System.exe
144 SMSS.exe
168 CSRSS.exe
164 WINLOGON.exe
216 SERVICES.exe
228 LSASS.exe
412 SVCHOST.exe
444 spoolsv.exe
508 ASFAgent.exe
552 clisvcl.exe
568 SVCHOST.exe
588 Iap.exe
620 FrameworkServic.exe
688 Mcshield.exe
704 VsTskMgr.exe
788 NMSSvc.exe
792 naPrdMgr.exe
868 regsvc.exe
884 LOCATOR.exe
912 mstask.exe
996 Wuser32.exe
1192 SMSAPM32.exe
1244 explorer.exe
1264 point32.exe
828 shstat.exe
1344 UpdaterUI.exe
1404 launch32.exe
1420 realsched.exe
1472 rnathchk.exe
1648 SMSMon32.exe
424 nlnotes.exe
1576 nhldaemn.exe
1488 HsComLog.exe
260 EXCEL.exe
1352 DRWTSN32.exe
0 _Total.exe

(30000000 - 306D9000)
(77F80000 - 77FFB000)
(77DB0000 - 77E0B000)
(77E80000 - 77F31000)
(77D30000 - 77D9E000)
(77F40000 - 77F79000)
(77E10000 - 77E6F000)
(308C0000 - 30E1D000)
(77A50000 - 77B3C000)
(775A0000 - 77625000)
(779B0000 - 77A4B000)
(78000000 - 78046000)
(770F0000 - 772ED000)
(782F0000 - 78534000)
(70BD0000 - 70C1C000)
(716F0000 - 7177A000)
(77840000 - 7787D000)
(770C0000 - 770E3000)
(10000000 - 10022000)
(3FFE0000 - 3FFE9000)
(01480000 - 014AA000)
(014B0000 - 01664000)
(76620000 - 76630000)
(60460000 - 6048F000)
(77800000 - 7781E000)
(01670000 - 0174E000)
(60990000 - 609D4000)
(602A0000 - 602B1000)
(609E0000 - 60A21000)
(01750000 - 017C0000)
(61220000 - 6122E000)
(03DD0000 - 03E5B000)
(05840000 - 0584B000)
(6C370000 - 6C462000)
(65000000 - 65263000)
(65300000 - 65327000)
(05E50000 - 05EBC000)
(75160000 - 7516C000)
(75210000 - 75225000)
(751D0000 - 75208000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(75150000 - 75160000)
(75030000 - 75043000)
(75020000 - 75028000)
(77950000 - 77978000)
(77980000 - 779A4000)
(75050000 - 75058000)
(28B70000 - 28B87000)
(76DF0000 - 76E01000)
(70FE0000 - 710FB000)
(76FA0000 - 76FAF000)
(773E0000 - 773F5000)
(70200000 - 70279000)
(77530000 - 77552000)
(76710000 - 76719000)

State Dump for Thread Id 0x114

eax=06227800 ebx=061bb654 ecx=00480048 edx=00000000
esi=00000000 edi=00000008
eip=30681bb9 esp=0012f848 ebp=0012f900 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246


function: nosymbols
30681ba4 57 push edi
30681ba5 56 push esi
30681ba6 52 push edx
30681ba7 51 push ecx
30681ba8 53 push ebx
30681ba9 50 push eax
30681baa e88a0bd4ff call
MdCallBack+0x1cc8e (303c2739)
30681baf e9dde49eff jmp
Ordinal44+0x70091 (30070091)
30681bb4 33d2 xor edx,edx
30681bb6 8b4819 mov ecx,
[eax+0x19] ds:06ca4dd2=????????
FAULT -30681bb9 668b5116 mov dx,
[ecx+0x16] ds:00efd61b=????
30681bbd 85d2 test edx,edx
30681bbf 0f84cce49eff je
Ordinal44+0x70091 (30070091)
30681bc5 8b5110 mov edx,
[ecx+0x10] ds:00efd61a=????????
30681bc8 80fe00 cmp dh,0x0
30681bcb 0f85c0e49eff jne
Ordinal44+0x70091 (30070091)
30681bd1 8d45fc lea eax,
[ebp+0xfc] ss:00baced2=????????
30681bd4 8d55f8 lea edx,
[ebp+0xf8] ss:00baced2=????????
30681bd7 8b7594 mov esi,
[ebp+0x94] ss:00baced2=????????
30681bda 56 push esi
30681bdb 53 push ebx
30681bdc 51 push ecx

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0012F900 3006EB67 00000048 00000048 00000011 00000011 !
LPenHelper
0012FA58 3006DD8B 0000003A 00000000 00000100 00000100 !
Ordinal44
0012FAE4 3006DB16 061BCDA8 00000000 0000003A E4800000 !
Ordinal44
0012FB04 300936D4 061BCDA8 0000003A E4A00000 00000100 !
Ordinal44
0012FB34 30127296 061BCDA8 00000002 00000001 00000000 !
Ordinal44
0012FBDC 3012717A 0012FDB4 00000001 00000000 00000034 !
Ordinal44
0012FBFC 30036A1F 0012FDB4 00000001 00000000 00818254 !
Ordinal44
0012FD9C 302B5B55 00000034 0012FDB4 00000001 00000000 !
Ordinal44
0012FE24 3007350A 0081804C 0012FED8 00000400 00000000 !
Ordinal44
0012FE58 301791C2 FFFFFFFF 00000400 0081804C 00000000 !
Ordinal44
0012FF28 300027FA 00000000 0012FFC0 300026E5 30000000 !
Ordinal44
0012FF34 300026E5 30000000 00000000 00132F45 00000001 !
Ordinal44
0012FFC0 77EA847C 00000000 00000000 7FFDF000 C0000005 !
Ordinal44
0012FFF0 00000000 30002658 00000000 000000C8 00000100
kernel32!ProcessIdToSessionId

*---- Raw Stack Dump ----*
0012f848 11 00 00 00 00 00 00 00 - 11 00 00 00 7c fa 12
00 ............|...
0012f858 00 f9 12 00 48 00 00 00 - 48 00 00 00 11 00 00
00 ....H...H.......
0012f868 44 f8 12 00 f0 1b 68 30 - 0c 00 26 06 50 00 00
00 D.....h0..&.P...
0012f878 40 00 00 00 08 42 26 06 - fc 57 25 06 f0 49 26
06 @....B&..W%..I&.
0012f888 0f 00 00 00 48 00 00 00 - 8c 3a 26 06 68 3a 26
06 ....H....:&.h:&.
0012f898 03 00 00 00 04 00 00 00 - 54 b6 1b 06 00 03 48
00 ........T.....H.
0012f8a8 11 00 11 00 00 00 00 00 - 10 00 12 00 03 00 00
00 ................
0012f8b8 00 00 00 00 00 00 00 00 - 54 b6 1b 06 54 b6 1b
06 ........T...T...
0012f8c8 00 00 00 00 09 ff ff ff - 00 00 00 00 48 00 00
00 ............H...
0012f8d8 11 00 00 00 11 00 00 00 - 69 d0 17 30 94 28 86
05 ........i..0.(..
0012f8e8 00 00 00 00 00 00 00 00 - a4 50 25 06 a4 50 25
06 .........P%..P%.
0012f8f8 00 3c 26 06 f0 3b 26 06 - 58 fa 12 00 67 eb 06
30 .&..;&.X...g..0
0012f908 48 00 00 00 48 00 00 00 - 11 00 00 00 11 00 00
00 H...H...........
0012f918 01 00 00 00 00 00 00 00 - 00 01 00 00 58 fa 12
00 ............X...
0012f928 00 00 00 00 01 00 00 00 - 00 00 00 00 0c f9 12
00 ................
0012f938 5c df 06 30 b0 00 77 00 - 00 00 77 00 00 20 00
00 \..0..w...w.. ..
0012f948 00 00 00 00 00 00 00 00 - 00 00 00 00 03 00 00
00 ................
0012f958 09 04 00 00 00 20 00 00 - 00 00 77 00 00 00 77
00 ..... ....w...w.
0012f968 02 00 00 00 00 70 06 00 - 00 10 00 00 02 00 00
00 .....p..........
0012f978 00 00 04 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................

State Dump for Thread Id 0x668

eax=0000017c ebx=77f8316d ecx=00145530 edx=00000000
esi=00145530 edi=00000100
eip=77f83bb8 esp=00f1fe28 ebp=00f1ff74 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,
[esp+0x4] ss:0199d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
00F1FF74 77D56D9E 77D39AD0 00145530 4014504C 00000070
ntdll!NtReplyWaitReceivePortEx
00F1FFA8 77D41C6C 0013BB50 00F1FFEC 77E8B2D8 00144198
rpcrt4!TowerConstruct
00F1FFB4 77E8B2D8 00144198 4014504C 00000070 00144198
rpcrt4!I_RpcServerInqTransportType
00F1FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!lstrcmpiW

State Dump for Thread Id 0x500

eax=77ab4639 ebx=00000102 ecx=001443a0 edx=00000000
esi=77f8318c edi=0101ff74
eip=77f83197 esp=0101ff60 ebp=0101ff7c iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,
[esp+0x4] ss:01a9d533=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0101FF7C 77EA9D5F 0000EA60 00000000 77AB85FC 0000EA60
ntdll!NtDelayExecution
00007530 00000000 00000000 00000000 00000000 00000000
kernel32!Sleep

*---- Raw Stack Dump ----*
0101ff60 94 9d ea 77 00 00 00 00 - 74 ff 01 01 c4 9a ea
77 ...w....t......w
0101ff70 30 84 14 00 00 ba 3c dc - ff ff ff ff 30 75 00
00 0..........0u..
0101ff80 5f 9d ea 77 60 ea 00 00 - 00 00 00 00 fc 85 ab
77 _..w`..........w
0101ff90 60 ea 00 00 fb 46 ab 77 - 00 00 00 00 00 00 a5
77 `....F.w.......w
0101ffa0 30 84 14 00 ec ff 01 01 - 30 84 14 00 53 46 ab
77 0.......0...SF.w
0101ffb0 d8 7a a6 77 c3 7a a6 77 - d8 b2 e8 77 30 84 14
00 .z.w.z.w...w0...
0101ffc0 d8 7a a6 77 c3 7a a6 77 - 30 84 14 00 00 c0 fd
7f .z.w.z.w0.......
0101ffd0 a0 43 14 00 c0 ff 01 01 - a0 43 14 00 ff ff ff
ff .C.......C......
0101ffe0 6c 13 ed 77 98 2a e8 77 - 00 00 00 00 00 00 00
00 l..w.*.w........
0101fff0 00 00 00 00 39 46 ab 77 - 30 84 14 00 00 00 00
00 ....9F.w0.......
01020000 00 00 00 00 00 00 ff ff - 00 00 00 00 00 20 00
00 ............. ..
01020010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020060 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020070 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020080 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
01020090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................

State Dump for Thread Id 0x558

eax=77d41c54 ebx=77f8316d ecx=00000000 edx=00000000
esi=00151708 edi=0013bad8
eip=77f83197 esp=0583ff78 ebp=0583ffa8 iopl=0 nv
up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000286


function: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,
[esp+0x4] ss:062bd54b=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0583FFA8 77D41C6C 0013BB50 0583FFEC 77E8B2D8 0014F098
ntdll!NtDelayExecution
0583FFB4 77E8B2D8 0014F098 00000000 00000000 0014F098
rpcrt4!I_RpcServerInqTransportType
0583FFEC 00000000 77D41C54 0014F098 00000000 00905A4D
kernel32!lstrcmpiW

*---- Raw Stack Dump ----*
0583ff78 74 9a d3 77 01 00 00 00 - 90 ff 83 05 00 00 00
00 t..w............
0583ff88 00 00 00 00 98 f0 14 00 - 00 5d 1e ee ff ff ff
ff .........]......
0583ff98 00 5d 1e ee ff ff ff ff - 30 75 00 00 98 f0 14
00 .]......0u......
0583ffa8 b4 ff 83 05 6c 1c d4 77 - 50 bb 13 00 ec ff 83
05 ....l..wP.......
0583ffb8 d8 b2 e8 77 98 f0 14 00 - 00 00 00 00 00 00 00
00 ...w............
0583ffc8 98 f0 14 00 00 b0 fd 7f - 00 00 00 00 c0 ff 83
05 ................
0583ffd8 00 00 00 00 ff ff ff ff - 6c 13 ed 77 98 2a e8
77 ........l..w.*.w
0583ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 54 1c d4
77 ............T..w
0583fff8 98 f0 14 00 00 00 00 00 - 4d 5a 90 00 03 00 00
00 ........MZ......
05840008 04 00 00 00 ff ff 00 00 - b8 00 00 00 00 00 00
00 ................
05840018 40 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 @...............
05840028 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................
05840038 00 00 00 00 80 00 00 00 - 0e 1f ba 0e 00 b4 09
cd ................
05840048 21 b8 01 4c cd 21 54 68 - 69 73 20 70 72 6f 67
72 !..L.!This progr
05840058 61 6d 20 63 61 6e 6e 6f - 74 20 62 65 20 72 75
6e am cannot be run
05840068 20 69 6e 20 44 4f 53 20 - 6d 6f 64 65 2e 0d 0d
0a in DOS mode....
05840078 24 00 00 00 00 00 00 00 - 50 45 00 00 4c 01 06
00 $.......PE..L...
05840088 98 61 0b 37 00 00 00 00 - 00 00 00 00 e0 00 0e
21 .a.7...........!
05840098 0b 01 05 00 00 30 00 00 - 00 46 00 00 00 00 00
00 .....0...F......
058400a8 70 3b 00 00 00 10 00 00 - 00 40 00 00 00 00 00
10 p;.......@......



Application exception occurred:
App: (pid=656)
When: 10/31/2003 @ 15:07:48.772
Exception number: c0000005 (access violation)

*---- System Information ----*
Computer Name: FT-11096
User Name: cobbyj
Number of Processors: 1
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 3
Current Type: Uniprocessor Free
Registered Organization: Financial Times Ltd
Registered Owner: Financial Times

*---- Task List ----*
0 Idle.exe
8 System.exe
144 SMSS.exe
168 CSRSS.exe
164 WINLOGON.exe
216 SERVICES.exe
228 LSASS.exe
412 SVCHOST.exe
444 spoolsv.exe
508 ASFAgent.exe
552 clisvcl.exe
568 SVCHOST.exe
588 Iap.exe
620 FrameworkServic.exe
688 Mcshield.exe
704 VsTskMgr.exe
788 NMSSvc.exe
792 naPrdMgr.exe
868 regsvc.exe
884 LOCATOR.exe
912 mstask.exe
996 Wuser32.exe
1192 SMSAPM32.exe
1244 explorer.exe
1264 point32.exe
828 shstat.exe
1344 UpdaterUI.exe
1404 launch32.exe
1420 realsched.exe
1472 rnathchk.exe
1648 SMSMon32.exe
424 nlnotes.exe
1576 nhldaemn.exe
1488 HsComLog.exe
656 EXCEL.exe
1240 DRWTSN32.exe
0 _Total.exe

(30000000 - 306D9000)
(77F80000 - 77FFB000)
(77DB0000 - 77E0B000)
(77E80000 - 77F31000)
(77D30000 - 77D9E000)
(77F40000 - 77F79000)
(77E10000 - 77E6F000)
(308C0000 - 30E1D000)
(77A50000 - 77B3C000)
(775A0000 - 77625000)
(779B0000 - 77A4B000)
(78000000 - 78046000)
(770F0000 - 772ED000)
(782F0000 - 78534000)
(70BD0000 - 70C1C000)
(716F0000 - 7177A000)
(77840000 - 7787D000)
(770C0000 - 770E3000)
(10000000 - 10022000)
(3FFE0000 - 3FFE9000)
(01480000 - 014AA000)
(014B0000 - 01664000)
(76620000 - 76630000)
(60460000 - 6048F000)
(77800000 - 7781E000)
(01670000 - 0174E000)
(60990000 - 609D4000)
(602A0000 - 602B1000)
(609E0000 - 60A21000)
(01750000 - 017C0000)
(61220000 - 6122E000)
(03DD0000 - 03E5B000)
(05840000 - 0584B000)
(6C370000 - 6C462000)
(65000000 - 65263000)
(65300000 - 65327000)
(75160000 - 7516C000)
(75210000 - 75225000)
(751D0000 - 75208000)
(75170000 - 751BF000)
(77BE0000 - 77BEF000)
(751C0000 - 751C6000)
(75150000 - 75160000)
(75030000 - 75043000)
(75020000 - 75028000)
(77950000 - 77978000)
(77980000 - 779A4000)
(75050000 - 75058000)
(05E70000 - 05EDC000)
(28B70000 - 28B87000)
(76DF0000 - 76E01000)
(70FE0000 - 710FB000)
(76FA0000 - 76FAF000)
(773E0000 - 773F5000)
(70200000 - 70279000)
(77530000 - 77552000)
(76710000 - 76719000)

State Dump for Thread Id 0x548

eax=06227800 ebx=061bb654 ecx=00480048 edx=00000000
esi=00000000 edi=00000008
eip=30681bb9 esp=0012f848 ebp=0012f900 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000246


function: nosymbols
30681ba4 57 push edi
30681ba5 56 push esi
30681ba6 52 push edx
30681ba7 51 push ecx
30681ba8 53 push ebx
30681ba9 50 push eax
30681baa e88a0bd4ff call
MdCallBack+0x1cc8e (303c2739)
30681baf e9dde49eff jmp
Ordinal44+0x70091 (30070091)
30681bb4 33d2 xor edx,edx
30681bb6 8b4819 mov ecx,
[eax+0x19] ds:06ca4dd2=????????
FAULT -30681bb9 668b5116 mov dx,
[ecx+0x16] ds:00efd61b=????
30681bbd 85d2 test edx,edx
30681bbf 0f84cce49eff je
Ordinal44+0x70091 (30070091)
30681bc5 8b5110 mov edx,
[ecx+0x10] ds:00efd61a=????????
30681bc8 80fe00 cmp dh,0x0
30681bcb 0f85c0e49eff jne
Ordinal44+0x70091 (30070091)
30681bd1 8d45fc lea eax,
[ebp+0xfc] ss:00baced2=????????
30681bd4 8d55f8 lea edx,
[ebp+0xf8] ss:00baced2=????????
30681bd7 8b7594 mov esi,
[ebp+0x94] ss:00baced2=????????
30681bda 56 push esi
30681bdb 53 push ebx
30681bdc 51 push ecx

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
0012F900 3006EB67 00000048 00000048 00000003 00000003 !
LPenHelper
0012FA58 3006DD8B 0000003A 00000000 00000100 00000100 !
Ordinal44
0012FAE4 3006DB16 061BCDA8 00000000 0000003A E4800000 !
Ordinal44
0012FB04 300936D4 061BCDA8 0000003A E4A00000 00000100 !
Ordinal44
0012FB34 30127296 061BCDA8 00000002 00000001 00000000 !
Ordinal44
0012FBDC 3012717A 0012FDB4 00000001 00000000 00000034 !
Ordinal44
0012FBFC 30036A1F 0012FDB4 00000001 00000000 00818254 !
Ordinal44
0012FD9C 302B5B55 00000034 0012FDB4 00000001 00000000 !
Ordinal44
0012FE24 3007350A 0081804C 0012FED8 00000400 00000000 !
Ordinal44
0012FE58 301791C2 FFFFFFFF 00000400 0081804C 00000000 !
Ordinal44
0012FF28 300027FA 00000000 0012FFC0 300026E5 30000000 !
Ordinal44
0012FF34 300026E5 30000000 00000000 00132F45 00000001 !
Ordinal44
0012FFC0 77EA847C 00000000 00000000 7FFDF000 C0000005 !
Ordinal44
0012FFF0 00000000 30002658 00000000 000000C8 00000100
kernel32!ProcessIdToSessionId

*---- Raw Stack Dump ----*
0012f848 03 00 00 00 00 00 00 00 - 03 00 00 00 7c fa 12
00 ............|...
0012f858 00 f9 12 00 48 00 00 00 - 48 00 00 00 03 00 00
00 ....H...H.......
0012f868 44 f8 12 00 f0 1b 68 30 - 0c 00 26 06 50 00 00
00 D.....h0..&.P...
0012f878 40 00 00 00 5c 42 26 06 - fc 57 25 06 44 4a 26
06 @...\B&..W%.DJ&.
0012f888 0f 00 00 00 48 00 00 00 - e0 3a 26 06 bc 3a 26
06 ....H....:&..:&.
0012f898 03 00 00 00 04 00 00 00 - 54 b6 1b 06 00 03 48
00 ........T.....H.
0012f8a8 03 00 03 00 00 00 00 00 - 03 00 04 00 03 00 00
00 ................
0012f8b8 00 00 00 00 00 00 00 00 - 54 b6 1b 06 54 b6 1b
06 ........T...T...
0012f8c8 00 00 00 00 09 ff ff ff - 00 00 00 00 48 00 00
00 ............H...
0012f8d8 03 00 00 00 03 00 00 00 - 69 d0 17 30 94 28 86
05 ........i..0.(..
0012f8e8 00 00 00 00 00 00 00 00 - a4 50 25 06 a4 50 25
06 .........P%..P%.
0012f8f8 34 3c 26 06 24 3c 26 06 - 58 fa 12 00 67 eb 06
30 4&.$&.X...g..0
0012f908 48 00 00 00 48 00 00 00 - 03 00 00 00 03 00 00
00 H...H...........
0012f918 01 00 00 00 00 00 00 00 - 00 01 00 00 58 fa 12
00 ............X...
0012f928 00 00 00 00 01 00 00 00 - 00 00 00 00 0c f9 12
00 ................
0012f938 5c df 06 30 b0 00 77 00 - 00 00 77 00 00 20 00
00 \..0..w...w.. ..
0012f948 00 00 00 00 00 00 00 00 - 00 00 00 00 03 00 00
00 ................
0012f958 09 04 00 00 00 20 00 00 - 00 00 77 00 00 00 77
00 ..... ....w...w.
0012f968 02 00 00 00 00 70 06 00 - 00 10 00 00 02 00 00
00 .....p..........
0012f978 00 00 04 00 00 00 00 00 - 00 00 00 00 00 00 00
00 ................

State Dump for Thread Id 0x104

eax=0000017c ebx=77f8316d ecx=00145530 edx=00000000
esi=00145530 edi=00000100
eip=77f83bb8 esp=00f1fe28 ebp=00f1ff74 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000 efl=00000206


function: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,
[esp+0x4] ss:0199d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14

*---- Stack Back Trace ----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4
Function Name
00F1FF74 77D56D9E 77D39AD0 00145530 4014504C 00000070
ntdll!NtReplyWaitReceivePortEx
00F1FFA8 77D41C6C 0013BB50 00F1FFEC 77E8B2D8 00144198
rpcrt4!TowerConstruct
00F1FFB4 77E8B2D8 00144198 4014504C 00000070 00144198
rpcrt4!I_RpcServerInqTransportType
00F1FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!lstrcmpiW