32-bit Collector Crashes During Operations

Windows 10
1

I’m experiencing an issue with the ihServerToServerCollector.exe process. It’s causing a breakpoint exception with the error code 0x80000003. The error message indicates that a breakpoint has been reached.

Here’s the stack text:

00000000`0009ecf8 00000000`771a1b56     : 00000023`77224eec 00007ffa`eb670023 00000000`01bfff68 00000000`0196f690 : wow64cpuCpupSyscallStub+0x13
00000000`0009ed00 00000000`771a11c9     : 00000000`0196fd24 00007ffa`eb67c67c 00000000`0009edd0 00007ffa`eb67e053 : wow64cpuThunk0ArgReloadState+0x5
00000000`0009edb0 00007ffa`eb67df5d     : 00000000`003af000 00000000`00400128 00000000`00000000 00000000`0009f7f0 : wow64cpuBTCpuSimulate+0x9
00000000`0009edf0 00007ffa`eb67d79d     : 00000000`00000000 00000000`01ab6ba8 00000000`00000000 00000000`00000000 : wow64RunCpuSimulation+0xd
00000000`0009ee20 00007ffa`ecef7600     : 00000000`00400128 00007ffa`ecf50828 00000000`003ae000 00007ffa`ecf4bdd8 : wow64Wow64LdrpInitialize+0x12d
00000000`0009f0d0 00007ffa`ece98838     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000001 : ntdllLdrpInitializeProcess+0x16f0
00000000`0009f4a0 00007ffa`ecebec1d     : 00000000`00000000 00007ffa`ece20000 00000000`003b0000 00000000`003ae050 : ntdllLdrpInitialize+0x16c
00000000`0009f520 00007ffa`ece9863e     : 00000000`0009f7f0 00000000`00000000 00000000`0009f7f0 00000000`00000000 : ntdllLdrpInitializeInternal+0xed
00000000`0009f7a0 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdllLdrInitializeThunk+0xe

The stack command is ~0s; .ecxr ; kb. The symbol name is wow64cpuCpupSyscallStub+13, and the module name is wow64cpu. The image name is wow64cpu.dll.

I’m running Windows 10 with the OS version 10.0.20348.1. The build lab string is fe_release, and the OS platform type is x64.

I’m wondering if the issue is related to the wow64cpu.dll file being absent or corrupted. Can anyone help me troubleshoot this problem?

2

To troubleshoot the issue with the ihServerToServerCollector.exe process crashing on Windows 10, we need to investigate the problem with the wow64cpu.dll file. Here are the steps to follow:

  1. Verify the System File Checker Output: Ensure you can run a System File Checker (SFC) scan using sfc /scannow in the command prompt. If you’re unable to access the command prompt, try booting into safe mode.

  2. Check for Corrupted System Files: The SFC scan will check for corrupted system files. Check the output for any errors or issues. If errors are found, attempt to resolve them using the SFCFix utility.

  3. Inspect Loaded DLLs: Use a debugger like WinDbg to inspect loaded DLLs. Ensure wow64cpu.dll is loaded correctly by comparing the loaded module list in a WOW64 process at ntdllLdrpDoDebuggerBreak.

  4. Configure System Variables and Register DLLs: Ensure the system variable wow64cpu.dll is registered correctly. If it’s not, manually register it following these instructions:

    • Method 1: Using Regsvr: Run regsvr32 wow64cpu.dll in the command prompt.
    • Method 2: Manually Registering in System32 and SysWOW64:
      1. Copy wow64cpu.dll to both C:\Windows\System32\wow64cpu.dll and C:\Windows\SysWOW64\wow64cpu.dll.
      2. Run the command regsvr32 C:\Windows\System32\wow64cpu.dll and then regsvr32 C:\Windows\SysWOW64\wow64cpu.dll.

  5. System Restore: If the issue persists, try performing a system restore to a point prior to the problem occurring.

  6. Check for Malware and Infections: Ensure your system is free from malware and viruses. Scan using your anti-virus software to detect and remove any infections.

  7. Try Process Reinitialization: Use a debugger to load wow64cpu.dll before injecting any other modules. For example, you can load it using sxe ld wow64cpu and g commands in WinDbg.

  8. Account for WOW64 Transition: Since the debugger is a 64-bit process and the debugee is a 32-bit process, it might be necessary to account for the WOW64 transition in your code. Ensure the 32-bit version of wow64cpu.dll is present and correctly loaded.

  9. Reinstall Programs: If none of the above steps resolve the issue, try reinstalling the programs that are crashing, including the ihServerToServerCollector.exe process.

  10. Seek Further Guidance: If the problem persists, seek further assistance from a Windows developer or system administrator for more detailed analysis and support.

By following these steps, you should be able to identify and resolve the issue causing the ihServerToServerCollector.exe process to crash due to the wow64cpu.dll error.