<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2743.600" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><SPAN class=385343204-05112004><FONT face=Arial color=#0000ff
size=2>Ross,</FONT></SPAN></DIV>
<DIV><SPAN class=385343204-05112004><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=385343204-05112004><FONT face=Arial color=#0000ff size=2>I am
far from an expert at interpretting Dr Watson dumps but my best interpretation
of the dump is that the error occurred at address
006c765b.</FONT></SPAN></DIV><SPAN class=385343204-05112004><FONT>
<DIV><FONT face=Arial color=#0000ff size=2></FONT><BR><FONT face=Arial
color=#0000ff size=2>There are sometimes rules about subtracting
the base loaded address though before doing the Find Error - if I had
the application I think I could probably work it out from trial and error
but that's not very helpful I know. I was hoping that someone who knew the right
answers off the top of their head would reply to your post...</FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV></FONT></SPAN><SPAN class=385343204-05112004><FONT face=Arial color=#0000ff
size=2>David.</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> delphi-bounces@ns3.123.co.nz
[mailto:delphi-bounces@ns3.123.co.nz]<B>On Behalf Of </B>Ross
Levis<BR><B>Sent:</B> Friday, 5 November 2004 4:37 PM<BR><B>To:</B> NZ Borland
Developers Group - Delphi List<BR><B>Subject:</B> [DUG] Win2k AV
Help!<BR><BR></FONT></DIV>
<DIV><FONT face=Arial size=2>I have a user receiving an access violation when
starting my app. He's using Win2k and all it says on the screen is that
errors occured and the program will be terminated. An entry was found in
Dr. Watson but I have no idea where to look for the address that the error
occured so I can do a Find Error in Delphi. Can someone
help.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks,</FONT></DIV>
<DIV><FONT face=Arial size=2>Ross.</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>Application exception
occurred:<BR> App:
(pid=1636)<BR> When: 11/4/2004 @
22:14:56.833<BR> Exception number:
c0000005 (access violation)</FONT>
<DIV> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>*----> System Information
<----*<BR> Computer Name:
NSI-WS-1<BR> User Name:
Administrator<BR> Number of
Processors: 1<BR> Processor Type:
x86 Family 15 Model 2 Stepping 7<BR>
Windows 2000 Version: 5.0<BR>
Current Build: 2195<BR> Service
Pack: 4<BR> Current Type:
Uniprocessor Free<BR> Registered
Organization: NSI<BR> Registered
Owner: NSI</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>*----> Task List
<----*<BR> 0 Idle.exe<BR> 8 System.exe<BR> 144
SMSS.exe<BR> 172 CSRSS.exe<BR> 168 WINLOGON.exe<BR> 220
SERVICES.exe<BR> 232 LSASS.exe<BR> 348 ati2evxx.exe<BR> 432
svchost.exe<BR> 460 spoolsv.exe<BR> 528 svchost.exe<BR> 628
VsTskMgr.exe<BR> 760 regsvc.exe<BR> 780 mstask.exe<BR> 892
WinMgmt.exe<BR> 924 svchost.exe<BR>1228 ati2evxx.exe<BR>1220
explorer.exe<BR>1168 imontray.exe<BR>1404 atiptaxx.exe<BR>1184
UpdaterUI.exe<BR>1384 shstat.exe<BR>1436 wcescomm.exe<BR>1420
WinCinemaMgr.ex.exe<BR>1484 WinScheduler.ex.exe<BR>1572
WCESMgr.exe<BR> 204 OUTLOOK.exe<BR>1764 MAPISP32.exe<BR> 696
mmc.exe<BR>1636 SPLCreator.exe<BR> 992 DRWTSN32.exe<BR> 0
_Total.exe</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>(00400000 - 00532000) <BR>(77F80000
- 77FFD000) <BR>(7C570000 - 7C623000) <BR>(7C2D0000 - 7C332000) <BR>(77D30000
- 77DA1000) <BR>(71710000 - 71794000) <BR>(77F40000 - 77F7B000) <BR>(77E10000
- 77E75000) <BR>(76B30000 - 76B6E000) <BR>(63180000 - 631E9000) <BR>(78000000
- 78045000) <BR>(782F0000 - 78535000) <BR>(5D300000 - 5D380000) <BR>(77A50000
- 77B3F000) <BR>(779B0000 - 77A4B000) <BR>(77820000 - 77827000) <BR>(759B0000
- 759B6000) <BR>(77800000 - 7781E000) <BR>(76620000 - 76630000) <BR>(775A0000
- 77630000) </FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>State Dump for Thread Id
0x2e0</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>eax=0012fe6e ebx=00000000
ecx=7ffb0222 edx=ffffff6e esi=004da324 edi=00000065<BR>eip=006c765b
esp=0012fe88 ebp=0012fef0
iopl=0 nv up ei pl zr na po
nc<BR>cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000
efl=00010246</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><BR><FONT face=Arial color=#000080 size=2>function:
<nosymbols><BR> 006c7651
???<BR> 006c7652
???<BR> 006c7653
???<BR> 006c7654
???<BR> 006c7655
???<BR> 006c7656
???<BR> 006c7657
???<BR> 006c7658
???<BR> 006c7659
???<BR> 006c765a ???<BR>FAULT
->006c765b ???<BR> 006c765c
???<BR> 006c765d
???<BR> 006c765e
???<BR> 006c765f
???<BR> 006c7660
???<BR> 006c7661
???<BR> 006c7662
???<BR> 006c7663
???<BR> 006c7664
???<BR> 006c7665
???<BR> 006c7666 ???</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>*----> Stack Back Trace
<----*</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>FramePtr ReturnAd Param#1
Param#2 Param#3 Param#4 Function Name<BR>0012FE84 0012FEF8
004C7806 0012FEF0 00CF2100 004DA080 <nosymbols> <BR>0012FEF0 004C78EE
0012FF28 004C794A 0012FF20 004DA080 <nosymbols> <BR>0012FF20 004C8517
0012FFB4 004C8933 0012FFA4 00780065 !<nosymbols> <BR>0012FFA4 004D6A20
00000065 7FFDF000 0012FFE0 004038D8 !<nosymbols> <BR>0012FFC0 7C59893D
00780065 00000065 7FFDF000 00000000 !<nosymbols> <BR>0012FFF0 00000000
0052E4F0 00000000 000000C8 00000100 kernel32!ProcessIdToSessionId
</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>*----> Raw Stack Dump
<----*<BR>0012fe88 f8 fe 12 00 06 78 4c 00 - f0 fe 12 00 00 21 cf
00 .....xL......!..<BR>0012fe98 80 a0 4d 00 01 00 00 00 - 00 00 00
00 00 00 00 00 ..M.............<BR>0012fea8 00 00 00 00 00 00 00
00 - 00 00 00 00 00 00 00 00 ................<BR>0012feb8 00 00 00
00 00 00 00 00 - 74 47 d7 00 d0 c1 d6 00
........tG......<BR>0012fec8 f0 32 d7 00 00 00 00 00 - d0 c5 d6 00 24 36
d7 00 .2..........$6..<BR>0012fed8 f0 c2 d6 00 f0 88 d6 00 - c8 ad
d4 00 98 b7 d6 00 ................<BR>0012fee8 00 00 00 00 00 00
00 01 - 20 ff 12 00 ee 78 4c 00 ........ ....xL.<BR>0012fef8 28 ff
12 00 4a 79 4c 00 - 20 ff 12 00 80 a0 4d 00 (...JyL.
.....M.<BR>0012ff08 00 00 00 00 5c b4 d7 00 - f4 ea d6 00 a4 4e d7
00 ....\........N..<BR>0012ff18 00 00 00 00 00 00 00 00 - a4 ff 12
00 17 85 4c 00 ..............L.<BR>0012ff28 b4 ff 12 00 33 89 4c
00 - a4 ff 12 00 65 00 78 00 ....3.L.....e.x.<BR>0012ff38 d4 97 4d
00 00 00 00 00 - 00 00 00 00 00 00 00 00
..M.............<BR>0012ff48 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00
00 00 ................<BR>0012ff58 00 00 00 00 00 00 00 00 - 00 00
00 00 00 00 00 00 ................<BR>0012ff68 00 00 00 00 00 00
00 00 - 00 00 00 00 00 00 00 00 ................<BR>0012ff78 00 00
00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
................<BR>0012ff88 b8 23 17 00 5c 46 d7 00 - c4 b7 d6 00 95 49
5c a9 .#..\F.......I\.<BR>0012ff98 fd b2 e2 40 00 00 00 00 - 00 00
00 00 c0 ff 12 00 ...@............<BR>0012ffa8 20 6a 4d 00 65 00
00 00 - 00 f0 fd 7f e0 ff 12 00 jM.e...........<BR>0012ffb8
d8 38 40 00 c0 ff 12 00 - f0 ff 12 00 3d 89 59 7c </FONT><A
href=""><FONT face=Arial color=#000080 size=2>.8@.........=.Y</FONT></A><FONT
face=Arial color=#000080 size=2>|</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>State Dump for Thread Id
0x5a4</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>eax=77d358be ebx=0016fde8
ecx=0012f044 edx=00000000 esi=0016fcb8 edi=00000100<BR>eip=77f83310
esp=0101fe28 ebp=0101ff74
iopl=0 nv up ei pl nz na po
nc<BR>cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000
efl=00000206</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><BR><FONT face=Arial color=#000080 size=2>function:
ZwReplyWaitReceivePortEx<BR>
77f83305 b8ac000000
mov
eax,0xac<BR> 77f8330a
8d542404
lea
edx,[esp+0x4]
ss:01a99d0f=????????<BR> 77f8330e
cd2e
int 2e<BR>
77f83310 c21400
ret 0x14</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>*----> Stack Back Trace
<----*</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>FramePtr ReturnAd Param#1
Param#2 Param#3 Param#4 Function Name<BR>0101FF74 77D37B4C
77D35924 0016FCB8 77D33E01 00130000 ntdll!ZwReplyWaitReceivePortEx
<BR>0101FFA8 77D358D6 00167F68 0101FFEC 7C57B388 0016FDE8
rpcrt4!NdrCorrelationInitialize <BR>0101FFB4 7C57B388 0016FDE8 77D33E01
00130000 0016FDE8 rpcrt4!RpcBindingFree <BR>0101FFEC 00000000 00000000
00000000 00000000 00000000 kernel32!lstrcmpiW </FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>State Dump for Thread Id
0x670</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>eax=77ab502c ebx=00000102
ecx=00cc00ca edx=00000000 esi=77f82826 edi=0111ff74<BR>eip=77f82831
esp=0111ff60 ebp=0111ff7c
iopl=0 nv up ei pl nz na po
nc<BR>cs=001b ss=0023 ds=0023 es=0023 fs=0038
gs=0000
efl=00000206</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><BR><FONT face=Arial color=#000080 size=2>function:
NtDelayExecution<BR> 77f82826
b832000000 mov
eax,0x32<BR> 77f8282b
8d542404
lea
edx,[esp+0x4]
ss:01b99e47=????????<BR> 77f8282f
cd2e
int 2e<BR>
77f82831 c20800
ret 0x8<BR>
77f82834
53
push ebx<BR>
77f82835
51
push ecx<BR>
77f82836
6a00
push 0x0<BR>
77f82838 c70701000000 mov
dword ptr [edi],0x1
ds:0111ff74=dc3cba00<BR> 77f8283e
ff750c
push dword ptr [ebp+0xc]
ss:01b99e62=????????<BR> 77f82841
50
push eax<BR>
77f82842 e879fdffff call
RtlMultiByteToUnicodeN
(77f825c0)<BR> 77f82847
e928fcffff jmp
RtlConsoleMultiByteToUnicodeN+0x333 (77f82474)</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>*----> Stack Back Trace
<----*</FONT></DIV>
<DIV><FONT face=Arial color=#000080 size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#000080 size=2>FramePtr ReturnAd Param#1
Param#2 Param#3 Param#4 Function Name<BR>0111FF7C 7C59A20E
0000EA60 00000000 77AB8FFB 0000EA60 ntdll!NtDelayExecution <BR>00007530
00000000 00000000 00000000 00000000 00000000
kernel32!Sleep</FONT></DIV></DIV></BLOCKQUOTE></BODY></HTML>