[Duplicate] Crash With Wad

[Sparky]

i get this crash at the beggining of map30 of onemore3.wad
if you need this wad it can be found here:
http://sparky.suhost.com/Pub/Doom/Wads/ ... eMore3.zip

Code: ACCESS_VIOLATION
Tried to read address 0000000c
Flags: 00000000
Address: 0044e197

Windows NT 5.1 Build 2600 Service Pack 1

GS=0000 FS=0038 ES=0023 DS=0023
EAX=00000000 EBX=00000000 ECX=00000004 EDX=00000000
ESI=00000000 EDI=00000000
EBP=0a66e9c8 EIP=0044e197 ESP=0012fb20 CS=001b SS=0023
EFlags=00010246
CF- PF+ AF- ZF+ SF- TF- IF+ DF- OF- NT- RF+ VM- AC- VI- VP-

FPU State:
ControlWord=027f StatusWord=4020 TagWord=ffff
ErrorOffset=0047412e
ErrorSelector=0000001b
DataOffset=005aad1c
DataSelector=ffff0023
Cr0NpxState=00000000

MM0=0000000000000000
MM1=00696da800690572
MM2=0000022805d006b0
MM3=b400000000000000
MM4=0000000000000000
MM5=0000000000000000
MM6=0a66e9c800000000
MM7=000000230012fb20

Running threads:
0000a948 at 0044e197*
0000a9c0
0000af14
0000abe8
0000ace0
0000a884
0000adc0
0000aab0
0000abc0

Loaded modules:
00400000 - 0062cfff *zdoom.exe
77f50000 - 77ff6fff ntdll.dll
77e60000 - 77f45fff kernel32.dll
71950000 - 71a33fff COMCTL32.dll
77c10000 - 77c62fff msvcrt.dll
77c70000 - 77caffff GDI32.dll
77d40000 - 77dcbfff USER32.dll
77dd0000 - 77e5cfff ADVAPI32.dll
78000000 - 78085fff RPCRT4.dll
70a70000 - 70ad4fff SHLWAPI.dll
71ad0000 - 71ad7fff WSOCK32.dll
71ab0000 - 71ac3fff WS2_32.dll
71aa0000 - 71aa7fff WS2HELP.dll
76b40000 - 76b6bfff WINMM.dll
10000000 - 10093fff fmod.dll
77be0000 - 77bf3fff MSACM32.dll
771b0000 - 772d0fff ole32.dll
763b0000 - 763f4fff comdlg32.dll
773d0000 - 77bc1fff SHELL32.dll
5ad70000 - 5ada3fff uxtheme.dll
00df0000 - 00efffff MsgPlusH1.dll
77120000 - 771aafff OLEAUT32.dll
74720000 - 74763fff MSCTF.dll
76f50000 - 76f57fff wtsapi32.dll
76360000 - 7636efff WINSTA.dll
76f90000 - 76f9ffff Secur32.dll
51080000 - 510d5fff dsound.dll
77c00000 - 77c06fff VERSION.dll
72d20000 - 72d28fff wdmaud.drv
72d10000 - 72d17fff msacm32.drv
77bd0000 - 77bd6fff midimap.dll
5ef80000 - 5ef83fff KsUser.dll
76fd0000 - 77047fff CLBCATQ.DLL
77050000 - 77114fff COMRes.dll
6ce10000 - 6ce44fff dinput8.dll
688f0000 - 688f8fff HID.DLL
76670000 - 76756fff SETUPAPI.DLL
51000000 - 51046fff ddraw.dll
73bc0000 - 73bc5fff DCIMAN32.dll
01980000 - 0199bfff McVSSkt.dll
605d0000 - 605d7fff mslbui.dll

Bytes near EIP:
0044e187: 13 d1 0f ac d0 10 f7 d8 89 45 2c 33 f6 8b 55 2c
0044e197: 8b 47 0c 8b 4d 30 2b c2 99 33 c2 2b c2 3b c8 7c
0044e1a7: 09 8b d7 33 c9 e8 0f d4 08 00 8b 44 24 60 8b d8

ZDoom version 2.0.60

Command line:
D:\Games\Doom\zdoom.exe -IWAD D:\Games\Doom\doom2.wad -WARP 30 -FILE D:\Games\Doom\Wads\Graphics\xxlfrag.wad D:\Games\Doom\Wads\Graphics\face.wad D:\Games\Doom\Wads\Graphics\splash3.wad D:\Games\Doom\Wads\Doom2\Ports\OneMore3.wad -SKILL 4 +SET DMFLAGS 0 +SET DMFLAGS2 0
IWAD: doom2.wad

Current map: MAP30

viewx = 1412399
viewy = 7988972
viewz = 31019648
viewangle = 1189085184

Possible call trace:
0044e197 BOOM
004577dd call 004574d0
0046ddcc
0045a329 call 0046dd70
0045df9b call 00459d80
00461a15 call 0045dd70
00463681 call 00462f40
00421e87 call [edx+0x10]
004221cd call 00421e10
004729d4 call 00422180
0042a7eb call 004728f0
0041b412 call 0042a4d0
004174fc call 0041b120
0042d4b7 call 00409a10
0040afe3 call 0040af30
0040afe3 call 0040af30
00498981 call 0040afd0
00498a83 call 004fc8a6
00495b33 call 00417550
00495e45 call 00495780
004ffd5a call 00495dd0
004ffbee call 004fd650
004ffbd6

Stack Contents:
0012fb20: 00000000 01a20cfc 00000000 00000000 ················
0012fb30: 01007340 019f30b8 004577dd 00ca02e8 @s···0···wE·····
0012fb40: 0000000e 000001ad 01a20cfc 00d17340 ············@s··
0012fb50: 0000000c 00d17340 02000c06 0a66e9c8 ····@s········f·
0012fb60: 0012fccc 0050e8ee ffffffff 0046ddcc ······P·······F·
0012fb70: 00000001 00010000 00000000 00000000 ················
0012fb80: 00000000 00d17340 9f200000 005aac78 ····@s···· ·x·Z·
0012fb90: 0000005e 0045a329 00000000 00000000 ^···)·E·········
0012fba0: 00000001 00d17340 001745cf 0081ae02 ····@s···E······
0012fbb0: fffbabfc 001745cf 01a06008 00290000 ·····E···`····)·
0012fbc0: 00380000 ffea7812 00000000 001587ee ··8··x··········
0012fbd0: 007babfc 0045df9b 0081ae02 00000000 ··{···E·········
0012fbe0: 00000000 00060206 00d17340 0000b505 ········@s······
0012fbf0: 0001bd00 51031000 0001bde1 00000004 ·······Q········
0012fc00: 00060206 00000001 00000001 005aac78 ············x·Z·
0012fc10: 00000000 0012fc5c 00060206 0001bde1 ····\···········
0012fc20: 001587ee 007babfc 00000001 00461a15 ······{·······F·
0012fc30: 00000000 00000001 00000000 00d17340 ············@s··
0012fc40: 00000000 00000000 00000000 00000000 ················
0012fc50: 00000000 005aaf14 00463681 01b80000 ······Z··6F·····
0012fc60: 00421e87 005a9a6c 00000008 00000000 ··B·l·Z·········
0012fc70: 004221cd 00000008 005ac6f8 00000001 ·!B·······Z·····
0012fc80: 004729d4 00000102 00000001 0042a7eb ·)G···········B·
0012fc90: 005aa5ca 00000005 61827212 0041b412 ··Z······r·a··A·
0012fca0: 00000004 019e4c18 0012fcd8 00000001 ·····L··········
0012fcb0: 004174fc 00000004 019e4c18 00000001 ·tA······L······
0012fcc0: 0042d4b7 00000101 0012fcb4 0012fe04 ··B·············
0012fcd0: 0050df65 00000000 00000000 0000026e e·P·········n···
0012fce0: 000000f8 0012fe6c 0000017e fae4ce14 ····l···~·······
0012fcf0: 00cc8af0 f4c47b4d 2022648f 6d6f6f44 ····M{···d" Doom
0012fd00: 7475412e 616f6c6f 6b730064 00736e69 .Autoload·skins·
0012fd10: 7334f4bd 7e29d3e6 3b6c990d 82b43338 ··4s··)~··l;83··
0012fd20: 12ef0ed4 4e654df1 b7fa1d8c fb36150b ·····MeN······6·
0012fd30: 014986ed 74aa234e 8d65f4bf 5b11d155 ··I·N#·t··e·U··[
0012fd40: d9fa464f d232eae7 aac82ed5 00000002 OF····2··.······
0012fd50: 08aa569a 0040afe3 0012fd64 00000002 ·V····@·d·······
0012fd60: 08aa569a 0040afe3 0012fd74 00498981 ·V····@·t·····I·
0012fd70: 0052d030 00498a83 00000094 00000005 0·R···I·········
0012fd80: 00000001 00000a28 00000002 76726553 ····(·······Serv
0012fd90: 20656369 6b636150 77003120 772bb638 ice Pack 1·w8·+w
0012fda0: 771c453f 00000000 8007000e 0015a498 ?E·w············
0012fdb0: 771b449c 00000000 00000000 771ce3f3 ·D·w···········w
0012fdc0: 0015a498 0012fe04 772bb6ec 00000000 ··········+w····
0012fdd0: 772bb264 0012fdfc 771c0ee8 00000001 d·+w·······w····
0012fde0: 00000000 00000002 00000000 00000000 ················
0012fdf0: 0000026e 0000017e 00000002 00aa569a n···~········V··
0012fe00: 08aa569a 0012fe60 0050df88 ffffffff ·V··`·····P·····
0012fe10: 00495b33 ffffffff 77e7e6b9 7ffdf000 3[I········w···
0012fe20: 00000000 00000000 0000026e 0000017e ········n···~···
0012fe30: 00000001 000f4240 0012fe2c 00000020 ····@B··,··· ···
0012fe40: 00000276 00000000 00400000 00400230 v·········@·0·@·
0012fe50: 00400208 77e60000 00400000 0012fe14 ··@····w··@·····
0012fe60: 0012fe88 0050f430 00000000 0012fe98 ····0·P·········
0012fe70: 00495e45 77e7ad86 00000000 7ffdf000 E^I····w·······
0012fe80: 0012fe74 0012f748 0012ffb0 004ff998 t···H·········O·
0012fe90: 0052c6d8 00000000 0012ffc0 004ffd5a ··R·········Z·O·
0012fea0: 00400000 00000000 00152328 00000001 ··@·····(#······
0012feb0: 00000094 00000005 00000001 00000a28 ············(···
0012fec0: 00000002 76726553 20656369 6b636150 ····Service Pack
0012fed0: f5003120 f5c64c08 f5c64c08 f5c64c08 1···L···L···L··
0012fee0: f5c64c08 e33af000 e33b0000 e33b1000 ·L····:···;···;·
0012fef0: e33b2000 e33b3000 e33b4000 e33b5000 · ;··0;··@;··P;·
0012ff00: e33b6000 e33b7000 e33b8000 e33b9000 ·`;··p;···;···;·
0012ff10: e33ba000 e33bb000 e33bc000 e33bd000 ··;···;···;···;·
0012ff20: 8266b020 ff676980 0000fee4 00000001 ·f··ig·········
0012ff30: 00000015 00000000 00000015 000023af ·············#··
0012ff40: 004ffbee 02b87ac0 0012eae4 7ffdf000 ··O··z·········
0012ff50: 00000044 00153650 00153600 001536b0 D···P6···6···6··
0012ff60: 00000000 00000000 00000000 00000000 ················
0012ff70: 00000000 00000000 00000000 00000001 ················
0012ff80: 00000001 00000000 ffffffff ffffffff ················
0012ff90: ffffffff 00000006 00000000 8053476f ············oGS·
0012ffa0: 00152328 00000000 0012feb0 e16e07c8 (#············n·
0012ffb0: 0012ffe0 004ff998 00559b00 00000000 ······O···U·····
0012ffc0: 0012fff0 77e814c7 02b87ac0 0012eae4 ·······w·z······
0012ffd0: 7ffdf000 f5c64cf0 0012ffc8 80534504 ····L·······ES·
0012ffe0: ffffffff 77e94809 77e91210 00000000 ·····H·w···w····
0012fff0: 00000000 00000000 004ffbd6 00000000 ··········O·····

[randi]

Same as this one.