G
Guest
I have a customer with a single node Citrix MetaFrame XP enterprise edition
v.3 farm running on a Windows 2000 server at SP4. This server has
intermittent lock ups. I have check the Dr.Watson log and there are 2
components that need to be updated. The termsrv.exe and the icaapi.dll. I
suggested that he install Update rollup 1 for SP4. He does not want to
install this due to problems it causes with Citrix Metaframe XP. What would
Microsoft's suggestions be for this issue.
Below is the Dr.Watson:
Application exception occurred:
App: termsrv.exe (pid=648)
When: 1/26/2006 @ 19:21:45.475
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: VSPCTX2
User Name: SYSTEM
Number of Processors: 4
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 4
Current Type: Multiprocessor Free
Registered Organization: Convergys
Registered Owner: Convergys
*----> Task List <----*
0 Idle.exe
8 System.exe
444 smss.exe
472 csrss.exe
468 winlogon.exe
524 services.exe
536 lsass.exe
648 termsrv.exe
744 svchost.exe
780 ccSetMgr.exe
808 ccEvtMgr.exe
952 spoolsv.exe
1012 msdtc.exe
1172 cisvc.exe
1184 dcevt32.exe
1200 dcstor32.exe
1216 DefWatch.exe
1232 svchost.exe
1296 mr2kserv.exe
1348 bpinetd.exe
1428 omsad32.exe
1444 SSM.exe
1468 bpjava-msvc.exe
1488 omtsreco.exe
1548 RACWinVNC.exe
1564 regsvc.exe
1580 SavRoam.exe
1608 mstask.exe
1688 omaws32.exe
1712 snmp.exe
1752 VxSvc.exe
1832 winmgmt.exe
1872 svchost.exe
1624 AgentSVC.exe
1924 cdmsvc.exe
1948 sAginst.exe
1956 dfssvc.exe
1980 encsvc.exe
2000 inetinfo.exe
2060 ImaSrv.exe
2152 mfcom.exe
2848 scardsvr.exe
2896 svchost.exe
3284 PatrolAgent.exe
4100 PatrolPerf.exe
3856 snmpmagt.exe
4324 PWKPslApi.xpc.exe
4404 PWKNTMon.exe
4812 cmd.exe
3100 logd.exe
4724 svchost.exe
5772 Rtvscan.exe
6144 racsrvc.exe
6232 csrss.exe
4024 winlogon.exe
3948 csrss.exe
6372 winlogon.exe
3408 wfshell.exe
5308 explorer.exe
2604 ccApp.exe
5548 WZQKPICK.exe
6252 LUCOMS~1.exe
6716 wfshell.exe
6844 explorer.exe
6920 ccApp.exe
4308 WZQKPICK.exe
6956 LUCOMS~1.exe
6852 jrew.exe
2864 sqlplus.exe
4188 csrss.exe
6888 winlogon.exe
7656 wfshell.exe
7804 accountsreceiva.exe
7892 custaccmaintena.exe
5880 csrss.exe
7228 winlogon.exe
5040 custaccmaintena.exe
7056 wfshell.exe
7484 custaccmaintena.exe
2836 cidaemon.exe
6440 cidaemon.exe
4340 csrss.exe
3384 winlogon.exe
8252 wfshell.exe
8516 custaccmaintena.exe
5692 custaccmaintena.exe
5108 csrss.exe
7080 winlogon.exe
7580 csrss.exe
6348 winlogon.exe
8296 csrss.exe
6256 winlogon.exe
8704 drwtsn32.exe
1748 cmd.exe
692 sr_historyret.e.exe
0 _Total.exe
(01000000 - 01027000)
(77F80000 - 77FFB000)
(7C2D0000 - 7C332000)
(7C4E0000 - 7C599000)
(77D30000 - 77DA1000)
(68A80000 - 68A8B000)
(78000000 - 78045000)
(75150000 - 7515F000)
(77E10000 - 77E75000)
(77F40000 - 77F7C000)
(75170000 - 751BF000)
(7C340000 - 7C34F000)
(751C0000 - 751C6000)
(75030000 - 75044000)
(75020000 - 75028000)
(77950000 - 7797A000)
(77980000 - 779A4000)
(75050000 - 75058000)
(77320000 - 77337000)
(7CE20000 - 7CF0F000)
(779B0000 - 77A4B000)
(773B0000 - 773DF000)
(77380000 - 773A3000)
(77830000 - 7783E000)
(77880000 - 7790E000)
(7C0F0000 - 7C152000)
(65780000 - 6578D000)
(6EA50000 - 6EA72000)
(6AC10000 - 6AC1A000)
(77BF0000 - 77C01000)
(77440000 - 774B8000)
(77430000 - 77440000)
(77920000 - 77943000)
(77820000 - 77827000)
(759B0000 - 759B6000)
(756E0000 - 756E5000)
(10000000 - 10006000)
(67AD0000 - 67AD7000)
(71710000 - 71794000)
(7CA00000 - 7CA23000)
(68A60000 - 68A7B000)
(77800000 - 7781E000)
(76620000 - 76631000)
(02750000 - 02792000)
(655E0000 - 655E7000)
(66640000 - 6664A000)
(77530000 - 77552000)
(70A70000 - 70AD6000)
(3F3A0000 - 3F3C9000)
(3F690000 - 3F699000)
(3F620000 - 3F629000)
(3F520000 - 3F534000)
(3F280000 - 3F287000)
(028E0000 - 02903000)
(3F460000 - 3F466000)
(678D0000 - 678F9000)
(3F720000 - 3F737000)
(3F560000 - 3F56D000)
(3F760000 - 3F766000)
(3F5C0000 - 3F5C9000)
(3F250000 - 3F256000)
(67D30000 - 67D39000)
(67FA0000 - 67FAA000)
(67C10000 - 67C1B000)
(02910000 - 0291F000)
(02920000 - 0292C000)
(02930000 - 02952000)
(67F80000 - 67F91000)
(3F340000 - 3F34C000)
(02C90000 - 02CB3000)
(74FF0000 - 75002000)
(74FD0000 - 74FEE000)
(75010000 - 75017000)
(782C0000 - 782CC000)
(77340000 - 77353000)
(77520000 - 77525000)
(774E0000 - 77513000)
(774C0000 - 774D1000)
(77360000 - 77379000)
(777E0000 - 777E8000)
(78280000 - 782B5000)
(76670000 - 7667E000)
(782D0000 - 782EF000)
(7C950000 - 7C9DF000)
(777F0000 - 777F5000)
(78160000 - 78187000)
(67400000 - 67427000)
State Dump for Thread Id 0xb04
eax=000f8bd8 ebx=0008eb01 ecx=00070000 edx=00000000 esi=00000000 edi=025cffa4
eip=77f950df esp=025cfe40 ebp=025cfe78 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
function: ZwDeviceIoControlFile
77f950d4 b838000000 mov eax,0x38
77f950d9 8d542404 lea edx,[esp+0x4]
ss:02de9d27=????????
77f950dd cd2e int 2e
77f950df c22800 ret 0x28
77f950e2 8bca mov ecx,edx
77f950e4 894dcc mov [ebp+0xcc],ecx
ss:02de9d5e=????????
77f950e7 66832100 and word ptr [ecx],0x0
ds:00070000=00c8
77f950eb e9eccaffff jmp RtlDosPathNameToNtPathName_U+0x25a
(77f91bdc)
77f950f0 8b4508 mov eax,[ebp+0x8]
ss:02de9d5e=????????
77f950f3 5e pop esi
77f950f4 5f pop edi
77f950f5 c9 leave
77f950f6 c3 ret
77f950f7 55 push ebp
77f950f8 8bec mov ebp,esp
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
025CFE78 6EA54F23 00000178 00380047 00000000 00000000
ntdll!ZwDeviceIoControlFile
025CFEA4 6EA54D76 00088060 00380047 00000000 00000000
icaapi!IcaPushConsoleStack
025CFECC 01014C76 00088060 00380047 00000000 00000000 icaapi!IcaStackIoControl
025CFEF0 6EA54E8E 0008EB18 00088060 00380047 00000000 termsrv!<nosymbols>
025CFF20 6EA54849 00088060 00380047 00000000 00000000
icaapi!IcaPushConsoleStack
025CFF50 010058B2 00088060 0008EB38 0008EBBC 00000000
icaapi!IcaStackConnectionWait
025CFFB4 7C4E987C 00000001 00000000 00F5F2C8 00010001 termsrv!<nosymbols>
025CFFEC 00000000 00000000 00000000 00000000 00000000
kernel32!SetThreadExecutionState
State Dump for Thread Id 0x20a4
eax=0010e500 ebx=00000000 ecx=9e8c001e edx=00000000 esi=77f94086 edi=00000558
eip=77f94091 esp=0439f9f4 ebp=0439fa18 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
function: ZwWaitForSingleObject
77f94086 b8ea000000 mov eax,0xea
77f9408b 8d542404 lea edx,[esp+0x4]
ss:04bb98db=????????
77f9408f cd2e int 2e
77f94091 c20c00 ret 0xc
77f94094 8a5001 mov dl,[eax+0x1]
ds:009283e6=00
77f94097 3a5101 cmp dl,[ecx+0x1]
ds:9f0d9f04=??
77f9409a 0f8598c7ffff jne RtlEqualPrefixSid+0x44 (77f90838)
77f940a0 84d2 test dl,dl
77f940a2 7410 jz RtlQueryAtomInAtomTable+0x31
(77f94fb4)
77f940a4 0fb6d2 movzx edx,dl
77f940a7 33ff xor edi,edi
77f940a9 8d72ff lea esi,[edx+0xff]
ds:00819ee6=????????
77f940ac 85f6 test esi,esi
77f940ae 0f8f04100100 jnle RtlEraseUnicodeString+0x4e
(77fa50b8)
77f940b4 b001 mov al,0x1
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0439FA18 7C4F1B1B 00000558 FFFFFFFF 00000000 0100C32A
ntdll!ZwWaitForSingleObject
0439FA5C 0100ABB3 001173D0 00000018 0439FAA4 77D32355
kernel32!WaitForSingleObject
0439FA90 77D9356D 0100ABA2 0439FAB4 00000004 00000000 termsrv!<nosymbols>
0439FD0C 77D93017 00000000 00000000 000CF310 0439FD24 rpcrt4!NdrStubCall2
0439FD28 77D321E0 000CF310 0007ED58 000CF310 00000000 rpcrt4!NdrServerCall2
0439FD60 77D320FE 0101C1FE 000CF310 0439FE0C 000CF310
rpcrt4!I_RpcGetBufferWithObject
0439FDB8 77D32021 00000010 00000000 0439FE0C 00000000
rpcrt4!I_RpcGetBufferWithObject
0439FDD8 77D3748D 000CF310 00000000 0439FE0C 77F89134
rpcrt4!I_RpcGetBufferWithObject
0439FE10 77D37030 00101E18 0007E560 87F60012 00000241 rpcrt4!RpcBindingFree
0439FE28 77D37C1D 000CF218 0439FE50 00101E18 0439FF6C rpcrt4!RpcBindingFree
0439FF74 77D37B4C 77D359C3 0007E560 039EFB38 00000000
rpcrt4!NdrCorrelationInitialize
0439FFA8 77D358D6 0007C980 0439FFEC 7C4E987C 0BF96BB8
rpcrt4!NdrCorrelationInitialize
0439FFB4 7C4E987C 0BF96BB8 039EFB38 00000000 0BF96BB8 rpcrt4!RpcBindingFree
0439FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!SetThreadExecutionState
*----> Raw Stack Dump <----*
0439f9f4 c2 c4 4f 7c 58 05 00 00 - 00 00 00 00 00 00 00 00 ..O|X...........
0439fa04 34 91 f8 77 a8 9c 12 00 - 00 2d 02 01 01 01 00 01 4..w.....-......
0439fa14 01 01 00 01 5c fa 39 04 - 1b 1b 4f 7c 58 05 00 00 ....\.9...O|X...
0439fa24 ff ff ff ff 00 00 00 00 - 2a c3 00 01 58 05 00 00 ........*...X...
0439fa34 ff ff ff ff 70 fa 39 04 - b0 fa 39 04 00 fa 39 04 ....p.9...9...9.
0439fa44 20 51 12 00 e9 f9 d3 77 - 55 04 13 00 6c fb 39 04 Q.....wU...l.9.
0439fa54 01 00 00 00 68 dd 0e 00 - 90 fa 39 04 b3 ab 00 01 ....h.....9.....
0439fa64 d0 73 11 00 18 00 00 00 - a4 fa 39 04 55 23 d3 77 .s........9.U#.w
0439fa74 d0 73 11 00 ac fa 39 04 - 18 00 00 00 a4 fa 39 04 .s....9.......9.
0439fa84 02 02 02 02 04 00 00 00 - 24 fd 39 04 0c fd 39 04 ........$.9...9.
0439fa94 6d 35 d9 77 a2 ab 00 01 - b4 fa 39 04 04 00 00 00 m5.w......9.....
0439faa4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0439fab4 d0 73 11 00 ac fa 39 04 - 18 00 00 00 a4 fa 39 04 .s....9.......9.
0439fac4 00 00 00 00 58 ed 07 00 - 00 00 00 00 00 00 00 00 ....X...........
0439fad4 c8 3e 07 40 00 a0 f8 7f - 58 c7 11 00 a2 ab 00 01 .>[email protected].......
0439fae4 01 00 00 00 04 00 00 00 - 18 f9 39 04 00 00 00 00 ..........9.....
0439faf4 00 00 00 00 b4 fa 39 04 - 00 00 00 00 6e 2e 00 01 ......9.....n...
0439fb04 58 28 00 01 48 2a f9 77 - 05 00 00 00 05 00 00 00 X(..H*.w........
0439fb14 2e 00 00 00 20 51 12 00 - 01 00 00 00 01 00 00 00 .... Q..........
0439fb24 00 00 07 00 18 45 13 00 - a1 00 00 00 d8 fc 39 04 .....E........9.
v.3 farm running on a Windows 2000 server at SP4. This server has
intermittent lock ups. I have check the Dr.Watson log and there are 2
components that need to be updated. The termsrv.exe and the icaapi.dll. I
suggested that he install Update rollup 1 for SP4. He does not want to
install this due to problems it causes with Citrix Metaframe XP. What would
Microsoft's suggestions be for this issue.
Below is the Dr.Watson:
Application exception occurred:
App: termsrv.exe (pid=648)
When: 1/26/2006 @ 19:21:45.475
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: VSPCTX2
User Name: SYSTEM
Number of Processors: 4
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 4
Current Type: Multiprocessor Free
Registered Organization: Convergys
Registered Owner: Convergys
*----> Task List <----*
0 Idle.exe
8 System.exe
444 smss.exe
472 csrss.exe
468 winlogon.exe
524 services.exe
536 lsass.exe
648 termsrv.exe
744 svchost.exe
780 ccSetMgr.exe
808 ccEvtMgr.exe
952 spoolsv.exe
1012 msdtc.exe
1172 cisvc.exe
1184 dcevt32.exe
1200 dcstor32.exe
1216 DefWatch.exe
1232 svchost.exe
1296 mr2kserv.exe
1348 bpinetd.exe
1428 omsad32.exe
1444 SSM.exe
1468 bpjava-msvc.exe
1488 omtsreco.exe
1548 RACWinVNC.exe
1564 regsvc.exe
1580 SavRoam.exe
1608 mstask.exe
1688 omaws32.exe
1712 snmp.exe
1752 VxSvc.exe
1832 winmgmt.exe
1872 svchost.exe
1624 AgentSVC.exe
1924 cdmsvc.exe
1948 sAginst.exe
1956 dfssvc.exe
1980 encsvc.exe
2000 inetinfo.exe
2060 ImaSrv.exe
2152 mfcom.exe
2848 scardsvr.exe
2896 svchost.exe
3284 PatrolAgent.exe
4100 PatrolPerf.exe
3856 snmpmagt.exe
4324 PWKPslApi.xpc.exe
4404 PWKNTMon.exe
4812 cmd.exe
3100 logd.exe
4724 svchost.exe
5772 Rtvscan.exe
6144 racsrvc.exe
6232 csrss.exe
4024 winlogon.exe
3948 csrss.exe
6372 winlogon.exe
3408 wfshell.exe
5308 explorer.exe
2604 ccApp.exe
5548 WZQKPICK.exe
6252 LUCOMS~1.exe
6716 wfshell.exe
6844 explorer.exe
6920 ccApp.exe
4308 WZQKPICK.exe
6956 LUCOMS~1.exe
6852 jrew.exe
2864 sqlplus.exe
4188 csrss.exe
6888 winlogon.exe
7656 wfshell.exe
7804 accountsreceiva.exe
7892 custaccmaintena.exe
5880 csrss.exe
7228 winlogon.exe
5040 custaccmaintena.exe
7056 wfshell.exe
7484 custaccmaintena.exe
2836 cidaemon.exe
6440 cidaemon.exe
4340 csrss.exe
3384 winlogon.exe
8252 wfshell.exe
8516 custaccmaintena.exe
5692 custaccmaintena.exe
5108 csrss.exe
7080 winlogon.exe
7580 csrss.exe
6348 winlogon.exe
8296 csrss.exe
6256 winlogon.exe
8704 drwtsn32.exe
1748 cmd.exe
692 sr_historyret.e.exe
0 _Total.exe
(01000000 - 01027000)
(77F80000 - 77FFB000)
(7C2D0000 - 7C332000)
(7C4E0000 - 7C599000)
(77D30000 - 77DA1000)
(68A80000 - 68A8B000)
(78000000 - 78045000)
(75150000 - 7515F000)
(77E10000 - 77E75000)
(77F40000 - 77F7C000)
(75170000 - 751BF000)
(7C340000 - 7C34F000)
(751C0000 - 751C6000)
(75030000 - 75044000)
(75020000 - 75028000)
(77950000 - 7797A000)
(77980000 - 779A4000)
(75050000 - 75058000)
(77320000 - 77337000)
(7CE20000 - 7CF0F000)
(779B0000 - 77A4B000)
(773B0000 - 773DF000)
(77380000 - 773A3000)
(77830000 - 7783E000)
(77880000 - 7790E000)
(7C0F0000 - 7C152000)
(65780000 - 6578D000)
(6EA50000 - 6EA72000)
(6AC10000 - 6AC1A000)
(77BF0000 - 77C01000)
(77440000 - 774B8000)
(77430000 - 77440000)
(77920000 - 77943000)
(77820000 - 77827000)
(759B0000 - 759B6000)
(756E0000 - 756E5000)
(10000000 - 10006000)
(67AD0000 - 67AD7000)
(71710000 - 71794000)
(7CA00000 - 7CA23000)
(68A60000 - 68A7B000)
(77800000 - 7781E000)
(76620000 - 76631000)
(02750000 - 02792000)
(655E0000 - 655E7000)
(66640000 - 6664A000)
(77530000 - 77552000)
(70A70000 - 70AD6000)
(3F3A0000 - 3F3C9000)
(3F690000 - 3F699000)
(3F620000 - 3F629000)
(3F520000 - 3F534000)
(3F280000 - 3F287000)
(028E0000 - 02903000)
(3F460000 - 3F466000)
(678D0000 - 678F9000)
(3F720000 - 3F737000)
(3F560000 - 3F56D000)
(3F760000 - 3F766000)
(3F5C0000 - 3F5C9000)
(3F250000 - 3F256000)
(67D30000 - 67D39000)
(67FA0000 - 67FAA000)
(67C10000 - 67C1B000)
(02910000 - 0291F000)
(02920000 - 0292C000)
(02930000 - 02952000)
(67F80000 - 67F91000)
(3F340000 - 3F34C000)
(02C90000 - 02CB3000)
(74FF0000 - 75002000)
(74FD0000 - 74FEE000)
(75010000 - 75017000)
(782C0000 - 782CC000)
(77340000 - 77353000)
(77520000 - 77525000)
(774E0000 - 77513000)
(774C0000 - 774D1000)
(77360000 - 77379000)
(777E0000 - 777E8000)
(78280000 - 782B5000)
(76670000 - 7667E000)
(782D0000 - 782EF000)
(7C950000 - 7C9DF000)
(777F0000 - 777F5000)
(78160000 - 78187000)
(67400000 - 67427000)
State Dump for Thread Id 0xb04
eax=000f8bd8 ebx=0008eb01 ecx=00070000 edx=00000000 esi=00000000 edi=025cffa4
eip=77f950df esp=025cfe40 ebp=025cfe78 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
function: ZwDeviceIoControlFile
77f950d4 b838000000 mov eax,0x38
77f950d9 8d542404 lea edx,[esp+0x4]
ss:02de9d27=????????
77f950dd cd2e int 2e
77f950df c22800 ret 0x28
77f950e2 8bca mov ecx,edx
77f950e4 894dcc mov [ebp+0xcc],ecx
ss:02de9d5e=????????
77f950e7 66832100 and word ptr [ecx],0x0
ds:00070000=00c8
77f950eb e9eccaffff jmp RtlDosPathNameToNtPathName_U+0x25a
(77f91bdc)
77f950f0 8b4508 mov eax,[ebp+0x8]
ss:02de9d5e=????????
77f950f3 5e pop esi
77f950f4 5f pop edi
77f950f5 c9 leave
77f950f6 c3 ret
77f950f7 55 push ebp
77f950f8 8bec mov ebp,esp
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
025CFE78 6EA54F23 00000178 00380047 00000000 00000000
ntdll!ZwDeviceIoControlFile
025CFEA4 6EA54D76 00088060 00380047 00000000 00000000
icaapi!IcaPushConsoleStack
025CFECC 01014C76 00088060 00380047 00000000 00000000 icaapi!IcaStackIoControl
025CFEF0 6EA54E8E 0008EB18 00088060 00380047 00000000 termsrv!<nosymbols>
025CFF20 6EA54849 00088060 00380047 00000000 00000000
icaapi!IcaPushConsoleStack
025CFF50 010058B2 00088060 0008EB38 0008EBBC 00000000
icaapi!IcaStackConnectionWait
025CFFB4 7C4E987C 00000001 00000000 00F5F2C8 00010001 termsrv!<nosymbols>
025CFFEC 00000000 00000000 00000000 00000000 00000000
kernel32!SetThreadExecutionState
State Dump for Thread Id 0x20a4
eax=0010e500 ebx=00000000 ecx=9e8c001e edx=00000000 esi=77f94086 edi=00000558
eip=77f94091 esp=0439f9f4 ebp=0439fa18 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
function: ZwWaitForSingleObject
77f94086 b8ea000000 mov eax,0xea
77f9408b 8d542404 lea edx,[esp+0x4]
ss:04bb98db=????????
77f9408f cd2e int 2e
77f94091 c20c00 ret 0xc
77f94094 8a5001 mov dl,[eax+0x1]
ds:009283e6=00
77f94097 3a5101 cmp dl,[ecx+0x1]
ds:9f0d9f04=??
77f9409a 0f8598c7ffff jne RtlEqualPrefixSid+0x44 (77f90838)
77f940a0 84d2 test dl,dl
77f940a2 7410 jz RtlQueryAtomInAtomTable+0x31
(77f94fb4)
77f940a4 0fb6d2 movzx edx,dl
77f940a7 33ff xor edi,edi
77f940a9 8d72ff lea esi,[edx+0xff]
ds:00819ee6=????????
77f940ac 85f6 test esi,esi
77f940ae 0f8f04100100 jnle RtlEraseUnicodeString+0x4e
(77fa50b8)
77f940b4 b001 mov al,0x1
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0439FA18 7C4F1B1B 00000558 FFFFFFFF 00000000 0100C32A
ntdll!ZwWaitForSingleObject
0439FA5C 0100ABB3 001173D0 00000018 0439FAA4 77D32355
kernel32!WaitForSingleObject
0439FA90 77D9356D 0100ABA2 0439FAB4 00000004 00000000 termsrv!<nosymbols>
0439FD0C 77D93017 00000000 00000000 000CF310 0439FD24 rpcrt4!NdrStubCall2
0439FD28 77D321E0 000CF310 0007ED58 000CF310 00000000 rpcrt4!NdrServerCall2
0439FD60 77D320FE 0101C1FE 000CF310 0439FE0C 000CF310
rpcrt4!I_RpcGetBufferWithObject
0439FDB8 77D32021 00000010 00000000 0439FE0C 00000000
rpcrt4!I_RpcGetBufferWithObject
0439FDD8 77D3748D 000CF310 00000000 0439FE0C 77F89134
rpcrt4!I_RpcGetBufferWithObject
0439FE10 77D37030 00101E18 0007E560 87F60012 00000241 rpcrt4!RpcBindingFree
0439FE28 77D37C1D 000CF218 0439FE50 00101E18 0439FF6C rpcrt4!RpcBindingFree
0439FF74 77D37B4C 77D359C3 0007E560 039EFB38 00000000
rpcrt4!NdrCorrelationInitialize
0439FFA8 77D358D6 0007C980 0439FFEC 7C4E987C 0BF96BB8
rpcrt4!NdrCorrelationInitialize
0439FFB4 7C4E987C 0BF96BB8 039EFB38 00000000 0BF96BB8 rpcrt4!RpcBindingFree
0439FFEC 00000000 00000000 00000000 00000000 00000000
kernel32!SetThreadExecutionState
*----> Raw Stack Dump <----*
0439f9f4 c2 c4 4f 7c 58 05 00 00 - 00 00 00 00 00 00 00 00 ..O|X...........
0439fa04 34 91 f8 77 a8 9c 12 00 - 00 2d 02 01 01 01 00 01 4..w.....-......
0439fa14 01 01 00 01 5c fa 39 04 - 1b 1b 4f 7c 58 05 00 00 ....\.9...O|X...
0439fa24 ff ff ff ff 00 00 00 00 - 2a c3 00 01 58 05 00 00 ........*...X...
0439fa34 ff ff ff ff 70 fa 39 04 - b0 fa 39 04 00 fa 39 04 ....p.9...9...9.
0439fa44 20 51 12 00 e9 f9 d3 77 - 55 04 13 00 6c fb 39 04 Q.....wU...l.9.
0439fa54 01 00 00 00 68 dd 0e 00 - 90 fa 39 04 b3 ab 00 01 ....h.....9.....
0439fa64 d0 73 11 00 18 00 00 00 - a4 fa 39 04 55 23 d3 77 .s........9.U#.w
0439fa74 d0 73 11 00 ac fa 39 04 - 18 00 00 00 a4 fa 39 04 .s....9.......9.
0439fa84 02 02 02 02 04 00 00 00 - 24 fd 39 04 0c fd 39 04 ........$.9...9.
0439fa94 6d 35 d9 77 a2 ab 00 01 - b4 fa 39 04 04 00 00 00 m5.w......9.....
0439faa4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0439fab4 d0 73 11 00 ac fa 39 04 - 18 00 00 00 a4 fa 39 04 .s....9.......9.
0439fac4 00 00 00 00 58 ed 07 00 - 00 00 00 00 00 00 00 00 ....X...........
0439fad4 c8 3e 07 40 00 a0 f8 7f - 58 c7 11 00 a2 ab 00 01 .>[email protected].......
0439fae4 01 00 00 00 04 00 00 00 - 18 f9 39 04 00 00 00 00 ..........9.....
0439faf4 00 00 00 00 b4 fa 39 04 - 00 00 00 00 6e 2e 00 01 ......9.....n...
0439fb04 58 28 00 01 48 2a f9 77 - 05 00 00 00 05 00 00 00 X(..H*.w........
0439fb14 2e 00 00 00 20 51 12 00 - 01 00 00 00 01 00 00 00 .... Q..........
0439fb24 00 00 07 00 18 45 13 00 - a1 00 00 00 d8 fc 39 04 .....E........9.