date/time : 2005-01-05 15:58
computer name : HAL9000
user name : Michael
operating system : Windows 2000 Service Pack 4 build 2195
system language : German
system up time : 2 hours 29 minutes
program up time : 8 minutes 18 seconds
processor : AMD Athlon(tm) XP 1800+
physical memory : 783/1023 MB (free/total)
free disk space : (C:) 9,18 GB (G:) 9,07 GB
display mode : 1280x1024, 16 bit
process id : $48c
executable : MultiDocViewer.exe
exec. date/time : 2005-01-05 09:47
version : 1.0.0.15
madExcept version : 2.7e
exception class : EAccessViolation
exception message :
Access violation at address 00521273 in module 'MultiDocViewer.exe'. Read of address 0000022C.
main thread ($3e8):
00521273 MultiDocViewer.exe madExcept DrawGraphic
7789ff54 ntdll.dll KiUserCallbackDispatcher
77e0643b USER32.dll DefWindowProcA
77e05f64 USER32.dll DispatchMessageA
00524adf MultiDocViewer.exe madExcept GetReportHeader
thread $49c:
77883310 ntdll.dll NtReplyWaitReceivePortEx
>> created by main thread ($3e8) at:
77d25898 RPCRT4.DLL
thread $4a8:
77882870 ntdll.dll NtWaitForSingleObject
74fa12f2 WS2_32.DLL select
thread $4b8:
77882870 ntdll.dll NtWaitForSingleObject
77e99fe2 KERNEL32.DLL WaitForSingleObjectEx
77e7b3d6 KERNEL32.DLL WaitForSingleObject
thread $4bc:
7788289c ntdll.dll NtRemoveIoCompletion
77e853d1 KERNEL32.DLL GetQueuedCompletionStatus
>> created by main thread ($3e8) at:
77d25898 RPCRT4.DLL
thread $4c8:
7788287e ntdll.dll NtWaitForMultipleObjects
77e9a1ad KERNEL32.DLL WaitForMultipleObjectsEx
77e019e0 USER32.dll MsgWaitForMultipleObjectsEx
77e01ac9 USER32.dll MsgWaitForMultipleObjects
>> created by thread $4a8 at:
772faf41 SHLWAPI.DLL
thread $4cc:
77882870 ntdll.dll NtWaitForSingleObject
77e99fe2 KERNEL32.DLL WaitForSingleObjectEx
77e7b3d6 KERNEL32.DLL WaitForSingleObject
thread $4ac: <priority:1>
7788289c ntdll.dll NtRemoveIoCompletion
thread $410:
77883310 ntdll.dll NtReplyWaitReceivePortEx
>> created by thread $49c at:
77d25898 RPCRT4.DLL
modules:
00400000 MultiDocViewer.exe 1.0.0.15 G:\Downloads\MultiDocViewer
016d0000 shdocvw.dll 6.0.2800.1606 C:\
WINNT\system32
02030000 MPRAPI.DLL 5.0.2181.1 C:\
WINNT\system32
03ec0000
MSI.DLL 2.0.2600.1183 C:\
WINNT\system32
1a400000 URLMON.DLL 6.0.2800.1479 C:\
WINNT\system32
63000000 WININET.dll 6.0.2800.1468 C:\
WINNT\system32
63580000 mshtml.dll 6.0.2800.1479 C:\
WINNT\system32
69470000 olepro32.dll 5.0.4522.0 C:\
WINNT\system32
6b700000 jscript.dll 5.6.0.8513 C:\
WINNT\system32
70440000 mlang.dll 6.0.2800.1106 C:\
WINNT\system32
70f30000 mshtmled.dll 6.0.2800.1106 C:\
WINNT\system32
70fb0000 iepeers.dll 6.0.2800.1106 C:\
WINNT\system32
71500000 browseui.dll 6.0.2800.1584 C:\
WINNT\system32
71710000 comctl32.dll 5.81.4916.400 C:\
WINNT\system32
718c0000 shdoclc.dll 6.0.2800.1106 C:\
WINNT\system32
74f40000 msafd.dll 5.0.2195.6602 C:\
WINNT\system32
74f80000 wshtcpip.dll 5.0.2195.6601 C:\
WINNT\System32
74f90000 WS2HELP.DLL 5.0.2134.1 C:\
WINNT\system32
74fa0000 WS2_32.DLL 5.0.2195.6601 C:\
WINNT\system32
74fc0000 wsock32.dll 5.0.2195.6603 C:\
WINNT\system32
750c0000 SAMLIB.dll 5.0.2195.6897 C:\
WINNT\system32
750e0000 netapi32.dll 5.0.2195.6949 C:\
WINNT\system32
75130000 NETRAP.dll 5.0.2134.1 C:\
WINNT\system32
75940000 LZ32.DLL 5.0.2195.6611 C:\
WINNT\system32
75a40000 sensapi.dll 5.0.2195.6627 C:\
WINNT\system32
75a50000 MSLS31.DLL 3.10.337.0 C:\
WINNT\system32
75df0000 IMM32.DLL 5.0.2195.6655 C:\
WINNT\system32
76b00000 comdlg32.dll 5.0.3700.6693 C:\
WINNT\system32
77090000 CSCDLL.DLL 5.0.2195.6713 C:\
WINNT\system32
772a0000 SHLWAPI.DLL 6.0.2800.1584 C:\
WINNT\system32
77310000 iphlpapi.dll 5.0.2195.6602 C:\
WINNT\system32
77330000 DHCPCSVC.DLL 5.0.2195.6685 C:\
WINNT\system32
77350000 ADSLDPC.DLL 5.0.2195.6701 C:\
WINNT\system32
77380000 ACTIVEDS.DLL 5.0.2195.6601 C:\
WINNT\system32
77400000 MSASN1.DLL 5.0.2195.6905 C:\
WINNT\system32
77490000 RASMAN.DLL 5.0.2195.6738 C:\
WINNT\system32
774b0000 RASAPI32.DLL 5.0.2195.6625 C:\
WINNT\system32
774f0000 ICMP.DLL 5.0.2134.1 C:\
WINNT\system32
77500000 TAPI32.DLL 5.0.2195.6664 C:\
WINNT\system32
77580000 SHELL32.DLL 5.0.3900.6975 C:\
WINNT\system32
777d0000 winrnr.dll 5.0.2160.1 C:\
WINNT\System32
777e0000 rasadhlp.dll 5.0.2168.1 C:\
WINNT\system32
777f0000 winspool.drv 5.0.2195.6659 C:\
WINNT\system32
77810000 VERSION.dll 5.0.2195.6623 C:\
WINNT\system32
77820000 RTUTILS.DLL 5.0.2168.1 C:\
WINNT\system32
77830000 rnr20.dll 5.0.2195.6603 C:\
WINNT\System32
77840000 cscui.dll 5.0.2195.6705 C:\
WINNT\system32
77880000 ntdll.dll 5.0.2195.6899 C:\
WINNT\system32
77940000 WLDAP32.DLL 5.0.2195.6666 C:\
WINNT\system32
77970000 DNSAPI.DLL 5.0.2195.6824 C:\
WINNT\system32
779a0000 oleaut32.dll 2.40.4522.0 C:\
WINNT\system32
77a40000 ole32.dll 5.0.2195.6906 C:\
WINNT\system32
77be0000 NTDSAPI.dll 5.0.2195.6666 C:\
WINNT\system32
77d20000 RPCRT4.DLL 5.0.2195.6904 C:\
WINNT\system32
77e00000 USER32.dll 5.0.2195.6897 C:\
WINNT\system32
77e70000 KERNEL32.DLL 5.0.2195.6946 C:\
WINNT\system32
77f40000 GDI32.dll 5.0.2195.6945 C:\
WINNT\system32
78000000 msvcrt.dll 6.1.9844.0 C:\
WINNT\system32
782f0000 MPR.DLL 5.0.2195.6824 C:\
WINNT\system32
78310000 SETUPAPI.DLL 5.0.2195.6622 C:\
WINNT\system32
784a0000 CLBCATQ.DLL 2000.2.3511.0 C:\
WINNT\system32
791a0000 USERENV.DLL 5.0.2195.6794 C:\
WINNT\system32
79350000 advapi32.dll 5.0.2195.6876 C:\
WINNT\system32
79430000 Secur32.dll 5.0.2195.6695 C:\
WINNT\system32
799d0000 CRYPT32.dll 5.131.2195.6824 C:\
WINNT\system32
hardware:
+ Anschlüsse (
COM und LPT)
- Druckeranschluss (LPT1)
- Kommunikationsanschluss (COM1)
- Kommunikationsanschluss (COM2)
+ Audio-, Video- und Gamecontroller
- Audiocodecs
- Legacy-Audiotreiber
- Legacy-Videoaufnahmegerät
- Mediensteuerungsgerät
- MPU-401-kompatibles MIDI-Gerät
- SiS 7012 Audio Driver (driver 5.0.0.6020)
- Standardgameport
- Videocodecs
+ Computer
- ACPI-PC (Advanced Configuration and Power Interface)
+ Datenträger
- IC35L060AVV207-0
- ICSI IC1100 CF USB Device
- ICSI IC1100 MS USB Device
- ICSI IC1100 SM USB Device
- ICSI IC1100 MMC/SD USB Device
- WDC WD400BB-75DEA0
+ Diskettencontroller
- Standard-Diskettenlaufwerkcontroller
+ Diskettenlaufwerke
- Diskettenlaufwerk
+ Drucker
- Canon BJC-2000 (driver 1.50.2.6)
+ DVD/CD-ROM-Laufwerke
- AOPEN CD-RW CRW4850
- ATAPI DVD-ROM 16XMax
+ Eingabegeräte (Human Interface Devices)
- USB-HID (Human Interface Device)
+ Grafikkarte
- NVIDIA RIVA TNT2/TNT2 Pro (driver 6.6.9.3)
+
IDE ATA/ATAPI-Controller
- Primärer
IDE-Kanal
- Sekundärer
IDE-Kanal
- SiS PCI-
IDE-Controller
+ Monitore
- (Standardmonitor)
+ Mäuse und andere Zeigegeräte
- HID-konforme Maus
+ Netzwerkadapter
- SiS 900 PCI Fast Ethernet Adapter (driver 1.14.1.0)
- T-Sinus 111data (driver 1.52.3.236)
+ Systemgeräte
- ACPI-Schalter
- ACPI-Sleepknopf
- Datenträger-Manager
- DMA-Controller
- ISAPnP-Datenleseport
- Microcode-Aktualisierungsgerät
- Microsoft ACPI-konformes System
- Numerischer Coprozessor
- Parallelklassen-Enumerator
- PCI Standard-Host-CPU-Brücke
- PCI Standard-PCI-zu-PCI-Brücke
- PCI-Bus
- PnP-Softwaregeräte-Enumerator
- SIS PCI-zu-ISA-Brücke
- System CMOS/Echtzeituhr
- Systemlautsprecher
- Systemzeitgeber
- Verwaltung logischer Datenträger
+ Tastaturen
- Standardtastatur (101/102 Tasten) oder Microsoft Natural Keyboard (PS/2)
+ USB-Controller
- SiS 7001 PCI-zu-USB Open Host-Controller
- SiS 7001 PCI-zu-USB Open Host-Controller
- Standard-USB-Hub
- USB-Massenspeicher
- USB-Root-Hub
- USB-Root-Hub
disassembling:
00521273 sub_521273: ; function entry point
00521273 > mov eax, [eax+$22c]
00521279 call -$2df32 ($4f334c)
0052127e mov edi, eax
00521280
dec edi
00521281 test edi, edi
[...]