21 May 07 SHL

------------------------------------------------------------
Trap screen 1 found at address #70:6a66
This screen is most likely related to a previous trap.

P1=00000001  P2=00000100  P3=XXXXXXXX  P4=XXXXXXXX
CS:EIP=005b:1b67c110  CSACC=f0df  CSLIM=ffffffff
SS:ESP=0053:000deda8  SSACC=f0f3  SSLIM=ffffffff
EBP=000dedac  FLG=00012206
EAX=00000100  EBX=00424490  ECX=80000246  EDX=13e8af20
ESI=1c774440  EDI=1c79ef80
DS=0053  DSACC=f0f3  DSLIM=ffffffff
ES=0053  ESACC=f0f3  ESLIM=ffffffff
FS=150b  FSACC=00f3  FSLIM=00000030
GS=0000  GSACC=****  GSLIM=*******

%1b67c0e0 PMCTLS GetRecordNFromX + 30

------------------------------------------------------------
Trap screen 2 found at address #70:6e4e

P1=00000001  P2=00000100  P3=XXXXXXXX  P4=XXXXXXXX
EAX=00000100  EBX=00424490  ECX=80000246  EDX=13e8af20
ESI=1c774440  EDI=1c79ef80
DS=0053  DSACC=f0f3  DSLIM=ffffffff
ES=0053  ESACC=f0f3  ESLIM=ffffffff
FS=150b  FSACC=00f3  FSLIM=00000030
GS=0000  GSACC=****  GSLIM=********
CS:EIP=005b:1b67c110  CSACC=f0df  CSLIM=ffffffff
SS:ESP=0053:000deda8  SSACC=f0f3  SSLIM=ffffffff
EBP=000dedac  FLG=0001220

ASCII found at #70:6e4e-12 is c0000005 (Exception Code?)
c0000005:  System Encountered an access violation

ASCII found at #70:6e4e-9 is 1b67c110. (Linear Address?)

ASCII found after trap screen: (Module name Object:Offset?)
PMCTLS.DLL 0002:000bc110

%1b67c0e0 PMCTLS GetRecordNFromX + 30

=========================================================================

#k

005b:1b67e703 80000246 00e18328 00000000 00000004 [PMCTLS CnrQueryRecord + 16b]
005b:1b67c332 80000246 00e18328 00010001 1e935a7b [PMCTLS CnrGateProc + 1fe]
005b:1da2cc03 80000246 00000340 00e18328 00010001
005b:000e01c0 1e93d7d1 80000246 00000340 00e18328
005b:1e938f80 1c774440 1e92f27f 000e031c 1c774440 [PMMERGE _WinTrackRect + cc]
005b:1e933c31 00000bff ffffffff 1b5d9302 0100001d [PMMERGE DoTimer + 109]

# ring3

#   Base Ptr   Parameters                                Caller
  --------   ----------------                          ------

  %000dedac  0246 8000 8328 00e1 0000 0000 0004 0000   PMCTLS CnrQueryRecord + 16b
  %000deddc  0246 8000 8328 00e1 0001 0001 5a7b 1e93   PMCTLS CnrGateProc + 1fe
  %000dedf4  1da2 0246 8000 0340 0000 8328 00e1 0001   Unknown ffe4 000d cc03 1da2
  %000dffe4  000e d7d1 1e93 0246 8000 0340 0000 8328   Unknown 020c 000e 01c0 000e
  %000e020c  4440 1c77 f27f 1e92 031c 000e 4440 1c77   PMMERGE _WinTrackRect + cc
  %000e0248  0bff 0000 ffff ffff 9302 1b5d 001d 0100   PMMERGE DoTimer + 109

# u %1da2cc03-6

%1da2cbfd ff934c020000       call      dword ptr [ebx+0000024c]
%1da2cc03 83c410             add       esp,+10

# .mamc 1da2cc03

*har     par      cpg        va    flg next prev link hash hob   hal
 153d %febb4348 00000110 %1d9e0000 3d9 153e 152f 0000 06b7 187c 0000  hco=010ba
 hob   har hobnxt flgs own  hmte  sown,cnt lt st xf
 187c  153d 0000  0838 18b2 18b2  0000 00  00 00 00 shared    f:fm3dll.dll
 hco=010ba pco=fdafb3bd  hconext=00000 hptda=18ae f=1d  pid=0088 f:fm3.exe

# .lmo 18b2

hmte=18b2 pmte=%fdd1242c mflags=4198b186 f:\fm2\fm3dll.dll
obj   vsize    vbase    flags   ipagemap cpagemap hob  sel
0001 00000030 1d9d0000 80002025 00000001 00000001 1891 ecef r-x shr big
0002 001001a7 1d9e0000 80002025 00000002 00000101 187c ecf7 r-x shr big
0003 00000019 1daf0000 80001025 00000103 00000001 121d ed7f r-x shr alias
0004 00008238 1db00000 80002021 00000104 00000009 1871 ed87 r-- shr big
0005 00000008 165f0000 80001003 0000010d 00000000 0000 b2ff rw- alias
0006 00021e00 16280000 80002003 0000010d 00000022 0000 b147 rw- big
0007 000016f8 16600000 80002003 0000012f 00000002 0000 b307 rw- big

# ? %1da2cc03-%1d9e0000

%0004cc03 %%0004cc03

2:0004cc03

Line numbers for J:\SLA_DEV2\FM2.DEV\dll\treecnr.obj(treecnr.c) segment TREECNR (@0x00000000)

	  2902          1     0002:0004cbd8
	  2903          1     0002:0004cc17

833 MRESULT EXPENTRY TreeCnrWndProc(HWND hwnd, ULONG msg, MPARAM mp1, MPARAM mp2)

2902  return (dcd && dcd->oldproc) ? dcd->oldproc(hwnd, msg, mp1, mp2) :
2903    PFNWPCnr(hwnd, msg, mp1, mp2);

2906 HWND StartTreeCnr(HWND hwndParent, ULONG flags)

# dd %000dedac (ebp)

%000dedac  000deddc 1b67e703 80000246 00e18328
%000dedbc  00000000 00000004 00424490 00010001

# ln %1b67e703
%1b67e598 PMCTLS CnrQueryRecord + 16b

# dd %000deddc

%000deddc  000dedf4 1b67c332 80000246 00e18328
%000dedec  00010001 1e935a7b 000dffe4 1da2cc03

# ln %1b67c332
%1b67c134 PMCTLS CnrGateProc + 1fe

# dd %000dedf4
                             hwnd     msg
%000dedf4  000dffe4 1da2cc03 80000246 00000340
           mp1      mp2
%000dee04  00e18328 00010001 1c774440 1c774440
%000dee14  00000007 00000000 000df020 fffffff7

# ln %1da2cc03
No Symbols Found

   #define CM_QUERYRECORD                0x0340

# db %00e18328 (PRECORDCORDE)
 
%00e18328 1c 00 00 00 00 01 00 00-00 00 00 00 00 00 00 00 ................ 
%00e18338 00 00 00 00 54 83 e1 00-74 3f 77 1c 46 02 00 80 ....T.a.t?w.F... 
%00e18348 54 83 e1 00 69 3a 5c 64-63 69 6d 5c 31 30 30 5f T.a.i:\dcim\100_ 
%00e18358 66 75 6a 69 00 00 00 00-00 00 00 00 00 00 00 00 fuji............ 
%00e18368 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................