Z
Zadig Galbaras
Hi folks!
My computer restarts very often, in fact I am not sure I can finish this
post in time for the next one.
The computer is a self buildt Abit socket 478 motherboard, fitted with a
2.4GHz Intel pIV
Last week I fitted a 500GB SATA2 harddisk, but the problem was there before
that.
The OS is WinXP SP2 all updates Norwegian edition.
I download a lot of shit to try and the uninstall, but I cannot figure out
what ignites these annoying reboots.
The reboots happens randomly it seems, and I cannot reproduce it.
It happens when I'm running MSIE or Outlook or just leave the computer
running with no application started.
Even when all startup options in MSCONFIG disabled, it reboots.
Screensaver is disabled.
I have started Dr. Watson and this is what he told me when the computer
malfunctioned a few minutes ago.
(This is Greek to me....as we say in Norway
Microsoft (R) DrWtsn32
Copyright (C) 1985-2001 Microsoft Corporation. Med enerett.
Programunntak oppstod:
Program: C:\WINDOWS\Explorer.EXE (pid=1816)
Tidspunkt: 18.07.2005 @ 21:40:37.578
Unntaksnummer: c0000005 (brudd på tilgangstillatelse)
*----> Systeminformasjon <----*
Datamaskinnavn: NIOBE
Brukernavn: Zadig Galbaras
Terminaløkt-id: 0
Antall prosessorer: 1
Prosessortype: x86 Family 15 Model 2 Stepping 9
Windows-versjon: 5.1
Gjeldende build: 2600
Service Pack: 2
Gjeldende type: Uniprocessor Free
Registrert organisasjon:
Registrert eier: Zadig Galbaras
*----> Oppgaveliste <----*
0 System Process
4 System
632 smss.exe
696 csrss.exe
720 winlogon.exe
764 services.exe
776 lsass.exe
932 svchost.exe
996 svchost.exe
1088 svchost.exe
1140 svchost.exe
1192 svchost.exe
1404 wbload.exe
1568 spoolsv.exe
1620 SCardSvr.exe
1816 Explorer.EXE
1920 winampa.exe
1928 type32.exe
1936 jusched.exe
1944 RUNDLL32.EXE
1960 MsgPlus.exe
1976 ICQLite.exe
1988 gcasServ.exe
1996 EnMixCPL.exe
2004 CTSysVol.exe
2012 avgcc.exe
2020 qttask.exe
2028 msnmsgr.exe
2036 msmsgs.exe
152 audevicemgr.exe
172 psn.exe
180 ScreenHunter.exe
192 wweb32.exe
392 avgamsvr.exe
492 avgupsvc.exe
272 PSNGive.exe
608 CTsvcCDA.exe
896 MROUTE~2.EXE
948 em_exec.exe
940 MDM.EXE
1048 ggviewer.exe
1212 nvsvc32.exe
1716 CONNMN~1.EXE
1892 svchost.exe
2132 wdfmgr.exe
2184 MsgAgt.exe
2816 alg.exe
3308 gcasDtServ.exe
452 CapMan.exe
2260 ElogErr.exe
1796 BROADC~1.EXE
2524 SCRFS.exe
2644 AUFILE~1.EXE
2856 Ecfmserv.exe
1764 msimn.exe
3880 solitaire.exe
3772 drwtsn32.exe
*----> Modulliste <----*
(0000000000ec0000 - 0000000000ec7000:
C:\Programfiler\Logitech\MouseWare\System\LgWndHk.dll
(0000000000f20000 - 0000000000f2b000:
C:\Programfiler\Fellesfiler\Logitech\Scrolling\LgMsgHk.dll
(0000000001000000 - 00000000010ff000: C:\WINDOWS\Explorer.EXE
(00000000012f0000 - 00000000015b8000: C:\WINDOWS\system32\xpsp2res.dll
(00000000021b0000 - 00000000021b8000: C:\WINDOWS\system32\PathCopyEx.dll
(0000000002660000 - 0000000002926000: C:\WINDOWS\system32\msi.dll
(0000000002a20000 - 0000000002a2e000: C:\Programfiler\Adobe\Acrobat
7.0\ActiveX\AcroIEHelper.dll
(0000000002a70000 - 0000000002a8b000: C:\Programfiler\Microsoft
AntiSpyware\shellextension.dll
(0000000002b30000 - 0000000002b5b000: C:\Programfiler\WinRAR\rarext.dll
(0000000002b60000 - 0000000002b72000: C:\WINDOWS\system32\browselc.dll
(0000000003060000 - 00000000030ea000: C:\WINDOWS\System32\shdoclc.dll
(00000000031f0000 - 0000000003229000: C:\WINDOWS\system32\NVRSNO.DLL
(0000000003230000 - 000000000324c000:
C:\Programfiler\Fellesfiler\Adobe\Shell\PSICON.DLL
(0000000003250000 - 000000000325f000:
C:\Programfiler\ICQLite\ICQLiteShell.dll
(00000000032b0000 - 00000000032ca000: C:\PROGRA~1\FileNote\FileNote.dll
(00000000032d0000 - 00000000032da000: C:\Programfiler\EditPlus
2\eppshell.dll
(00000000039b0000 - 00000000039db000: C:\Programfiler\Sony
Ericsson\Mobile\FilGuiLg.dll
(0000000003aa0000 - 0000000003abe000:
C:\Programfiler\FontLoader\ShellExt.dll
(0000000003bc0000 - 0000000003c32000: C:\WINDOWS\system32\nvshell.dll
(0000000003c40000 - 0000000003d42000: C:\WINDOWS\system32\MFC71U.DLL
(0000000003d90000 - 0000000003dad000:
C:\Programfiler\Fellesfiler\Zinio\ZSHExt.dll
(0000000003e80000 - 0000000003e9c000: C:\Programfiler\Adobe\Acrobat
7.0\ActiveX\PDFShell.dll
(0000000003ed0000 - 0000000003eec000:
C:\Programfiler\Illustrate\dBpowerAMP\dBShell.dll
(0000000004500000 - 0000000004975000: C:\WINDOWS\system32\nvcpl.dll
(0000000004c80000 - 0000000004cdd000: C:\Programfiler\Sony
Ericsson\Mobile\auexpext.dll
(000000000ffd0000 - 000000000fff8000: C:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 000000001000e000: C:\WINDOWS\system32\MsgPlusLoader.dll
(0000000016200000 - 0000000016206000: C:\PROGRA~1\WINZIP\WZSHLSTB.DLL
(0000000016250000 - 000000001626b000: C:\PROGRA~1\WINZIP\wzshlex1.dll
(0000000016300000 - 0000000016313000: C:\PROGRA~1\WINZIP\WZCAB3.DLL
(0000000020000000 - 0000000020017000: C:\WINDOWS\system32\odbcint.dll
(0000000027230000 - 000000002727e000:
C:\Programfiler\Google\deskbar-0.5.95.0\ggtaskbar.dll
(00000000325c0000 - 00000000325d2000: C:\Programfiler\Microsoft
Office\OFFICE11\msohev.dll
(000000004ec90000 - 000000004ee33000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
(0000000054b20000 - 0000000054b7d000: C:\Programfiler\Corel\Corel Graphics
12\PROGRAMS\CRLUTL.dll
(0000000054d70000 - 0000000054d84000: C:\Programfiler\Corel\Corel Graphics
12\PROGRAMS\CRLI18N.dll
(00000000577c0000 - 00000000577f0000: C:\Programfiler\Corel\Corel Graphics
12\PROGRAMS\CdrIco.DLL
(0000000059200000 - 000000005920d000: C:\WINDOWS\system32\wshNO.DLL
(00000000597c0000 - 000000005998a000: C:\WINDOWS\AppPatch\AcGenral.DLL
(000000005b290000 - 000000005b2c8000: C:\WINDOWS\system32\UxTheme.dll
(000000005bd10000 - 000000005bd64000: C:\WINDOWS\system32\NETAPI32.dll
(000000005d090000 - 000000005d0b6000: C:\WINDOWS\system32\ShimEng.dll
(000000005d5d0000 - 000000005d667000: C:\WINDOWS\system32\comctl32.dll
(000000005e400000 - 000000005e492000: C:\WINDOWS\system32\wiashext.dll
(0000000061ee0000 - 0000000061eed000: C:\WINDOWS\system32\MFC42LOC.DLL
(00000000621a0000 - 00000000621ab000: C:\Programfiler\Grisoft\AVG7\avgse.dll
(0000000062f20000 - 0000000062f29000: C:\WINDOWS\system32\LPK.DLL
(0000000066000000 - 000000006608e000: C:\Programfiler\Stardock\Object
Desktop\WindowBlinds\WBlind.dll
(0000000066500000 - 000000006650a000: C:\WINDOWS\system32\wbsys.dll
(0000000066600000 - 0000000066617000: C:\Programfiler\Stardock\Object
Desktop\WindowBlinds\wbhelp.dll
(0000000069cb0000 - 0000000069d21000: C:\WINDOWS\System32\themeui.dll
(000000006c750000 - 000000006c79d000: C:\WINDOWS\system32\DUSER.dll
(0000000070e90000 - 0000000070ea3000: C:\WINDOWS\system32\asycfilt.dll
(0000000071a90000 - 0000000071a98000: C:\WINDOWS\system32\WS2HELP.dll
(0000000071aa0000 - 0000000071ab7000: C:\WINDOWS\system32\WS2_32.dll
(0000000071ac0000 - 0000000071aca000: C:\WINDOWS\System32\WSOCK32.dll
(0000000071b10000 - 0000000071b22000: C:\WINDOWS\system32\MPR.dll
(0000000071be0000 - 0000000071bf3000: C:\WINDOWS\system32\SAMLIB.dll
(0000000071c00000 - 0000000071c0e000: C:\WINDOWS\System32\ntlanman.dll
(0000000071c70000 - 0000000071c77000: C:\WINDOWS\System32\NETRAP.dll
(0000000071c80000 - 0000000071cc0000: C:\WINDOWS\System32\NETUI1.dll
(0000000071cc0000 - 0000000071cd7000: C:\WINDOWS\System32\NETUI0.dll
(0000000071d30000 - 0000000071d4c000: C:\WINDOWS\System32\actxprxy.dll
(00000000722a0000 - 00000000722a5000: C:\WINDOWS\system32\sensapi.dll
(0000000072400000 - 000000007241a000: C:\WINDOWS\System32\mydocs.dll
(0000000072ce0000 - 0000000072ce8000: C:\WINDOWS\system32\msacm32.drv
(0000000072cf0000 - 0000000072cf9000: C:\WINDOWS\system32\wdmaud.drv
(0000000072fd0000 - 0000000072ff6000: C:\WINDOWS\system32\WINSPOOL.DRV
(0000000073b70000 - 0000000073b83000: C:\WINDOWS\System32\sti.dll
(0000000073da0000 - 0000000073e9e000: C:\WINDOWS\system32\MFC42.DLL
(0000000074690000 - 00000000746b7000: C:\WINDOWS\System32\msls31.dll
(00000000746c0000 - 00000000746ea000: C:\WINDOWS\System32\msimtf.dll
(00000000746f0000 - 000000007473b000: C:\WINDOWS\System32\MSCTF.dll
(0000000074780000 - 00000000747bd000: C:\WINDOWS\system32\ODBC32.dll
(0000000074aa0000 - 0000000074aa8000: C:\WINDOWS\System32\POWRPROF.dll
(0000000074ab0000 - 0000000074ab7000: C:\WINDOWS\System32\CFGMGR32.dll
(0000000074ac0000 - 0000000074aca000: C:\WINDOWS\System32\BatMeter.dll
(0000000074b00000 - 0000000074b47000: C:\WINDOWS\System32\webcheck.dll
(0000000074c50000 - 0000000074c7c000: C:\WINDOWS\system32\OLEACC.dll
(0000000074e70000 - 0000000074e80000: C:\WINDOWS\system32\wshext.dll
(0000000075320000 - 000000007534e000: C:\WINDOWS\system32\msctfime.ime
(0000000075420000 - 000000007548b000: C:\WINDOWS\system32\USP10.dll
(00000000754a0000 - 0000000075520000: C:\WINDOWS\system32\CRYPTUI.dll
(0000000075950000 - 0000000075a47000: C:\WINDOWS\system32\MSGINA.DLL
(0000000075d80000 - 0000000075e11000: C:\WINDOWS\system32\mlang.dll
(0000000075e70000 - 0000000075f20000: C:\WINDOWS\system32\SXS.DLL
(0000000075f40000 - 0000000075f47000: C:\WINDOWS\System32\drprov.dll
(0000000075f50000 - 0000000075f59000: C:\WINDOWS\System32\davclnt.dll
(0000000075f60000 - 000000007605d000: C:\WINDOWS\system32\BROWSEUI.dll
(0000000076060000 - 00000000760c5000: C:\WINDOWS\system32\MSVCP60.dll
(0000000076340000 - 0000000076350000: C:\WINDOWS\system32\WINSTA.dll
(0000000076360000 - 0000000076365000: C:\WINDOWS\system32\msimg32.dll
(0000000076370000 - 000000007638d000: C:\WINDOWS\system32\IMM32.DLL
(0000000076390000 - 00000000763d9000: C:\WINDOWS\system32\comdlg32.dll
(00000000763e0000 - 0000000076587000: C:\WINDOWS\system32\NETSHELL.dll
(0000000076590000 - 00000000765b1000: C:\WINDOWS\System32\stobject.dll
(00000000765e0000 - 00000000765fd000: C:\WINDOWS\System32\CSCDLL.dll
(0000000076970000 - 0000000076978000: C:\WINDOWS\system32\LINKINFO.dll
(0000000076980000 - 00000000769a5000: C:\WINDOWS\system32\ntshrui.dll
(00000000769b0000 - 0000000076a63000: C:\WINDOWS\system32\USERENV.dll
(0000000076b10000 - 0000000076b21000: C:\WINDOWS\system32\ATL.DLL
(0000000076b30000 - 0000000076b5d000: C:\WINDOWS\system32\WINMM.dll
(0000000076bf0000 - 0000000076c1e000: C:\WINDOWS\system32\credui.dll
(0000000076c20000 - 0000000076c4e000: C:\WINDOWS\system32\WINTRUST.dll
(0000000076c80000 - 0000000076ca8000: C:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d50000 - 0000000076d69000: C:\WINDOWS\system32\iphlpapi.dll
(0000000076e70000 - 0000000076e7e000: C:\WINDOWS\system32\rtutils.dll
(0000000076e80000 - 0000000076e92000: C:\WINDOWS\system32\rasman.dll
(0000000076ea0000 - 0000000076ecf000: C:\WINDOWS\system32\TAPI32.dll
(0000000076ed0000 - 0000000076f0c000: C:\WINDOWS\system32\RASAPI32.DLL
(0000000076f40000 - 0000000076f48000: C:\WINDOWS\System32\WTSAPI32.dll
(0000000076f50000 - 0000000076f7d000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fc0000 - 000000007703f000: C:\WINDOWS\system32\CLBCATQ.DLL
(0000000077040000 - 0000000077107000: C:\WINDOWS\system32\COMRes.dll
(0000000077110000 - 000000007719c000: C:\WINDOWS\system32\OLEAUT32.dll
(00000000771a0000 - 0000000077246000: C:\WINDOWS\system32\WININET.dll
(0000000077250000 - 00000000772ed000: C:\WINDOWS\system32\urlmon.dll
(00000000773c0000 - 00000000774c2000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774d0000 - 000000007760d000: C:\WINDOWS\system32\ole32.dll
(0000000077680000 - 00000000776a1000: C:\WINDOWS\system32\NTMARTA.DLL
(0000000077750000 - 00000000778bc000: C:\WINDOWS\system32\SHDOCVW.dll
(0000000077910000 - 0000000077a03000: C:\WINDOWS\system32\SETUPAPI.dll
(0000000077a10000 - 0000000077a64000: C:\WINDOWS\System32\cscui.dll
(0000000077a70000 - 0000000077b04000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077b10000 - 0000000077b22000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b30000 - 0000000077b52000: C:\WINDOWS\system32\appHelp.dll
(0000000077bc0000 - 0000000077bc7000: C:\WINDOWS\system32\midimap.dll
(0000000077bd0000 - 0000000077be5000: C:\WINDOWS\system32\MSACM32.dll
(0000000077bf0000 - 0000000077bf8000: C:\WINDOWS\system32\VERSION.dll
(0000000077c00000 - 0000000077c58000: C:\WINDOWS\system32\msvcrt.dll
(0000000077c60000 - 0000000077c83000: C:\WINDOWS\system32\msv1_0.dll
(0000000077d30000 - 0000000077dc0000: C:\WINDOWS\system32\USER32.dll
(0000000077dc0000 - 0000000077e6a000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077f10000 - 0000000077f56000: C:\WINDOWS\system32\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\System32\Secur32.dll
(000000007c340000 - 000000007c396000: C:\WINDOWS\system32\MSVCR71.dll
(000000007c3a0000 - 000000007c41b000: C:\WINDOWS\system32\MSVCP71.dll
(000000007c800000 - 000000007c8f5000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9af000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d5000: C:\WINDOWS\system32\SHELL32.dll
(000000007d4a0000 - 000000007d785000: C:\WINDOWS\System32\mshtml.dll
*----> Tilstandsdump av tråd med id 0x71c <----*
eax=7ffdf000 ebx=00000003 ecx=000a6f20 edx=7c90eb94 esi=000a6f20
edi=00000000
eip=7c90eb94 esp=0007fef0 ebp=0007ff08 iopl=0 nv up ei pl nz na pe
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000202
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\ntdll.dll -
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\SHELL32.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Module load completed but symbols could not be loaded for
C:\WINDOWS\Explorer.EXE
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007ff08 7ca0be04 00000000 0007ff5c 01016e95 ntdll!KiFastSystemCallRet
0007ff14 01016e95 000a6f20 7ffd4000 0007ffc0 SHELL32!Ordinal201+0x28
0007ff5c 0101e2b6 00000000 00000000 000205e2 Explorer+0x16e95
0007ffc0 7c816d4f 00090000 00000000 7ffd4000 Explorer+0x1e2b6
0007fff0 00000000 0101e24e 00000000 78746341
kernel32!RegisterWaitForInputIdle+0x49
*----> Ubehandlet stakk dumpet <----*
000000000007fef0 18 94 d3 77 6a 3b a2 7c - ac 92 80 7c 20 6f 0a 00
....wj;.|...| o..
000000000007ff00 20 6f 0a 00 14 ff 07 00 - 14 ff 07 00 04 be a0 7c
o.............|
000000000007ff10 00 00 00 00 5c ff 07 00 - 95 6e 01 01 20 6f 0a 00
.....\....n.. o..
000000000007ff20 00 40 fd 7f c0 ff 07 00 - 00 00 00 00 24 fd 07 00
..@..........$...
000000000007ff30 50 ff 07 00 e0 ff 07 00 - 27 e0 90 7c ed aa 80 7c
P.......'..|...|
000000000007ff40 ff ff ff ff 0c 00 00 00 - 00 00 00 00 86 c7 00 00
.................
000000000007ff50 98 00 00 00 01 00 00 00 - 20 6f 0a 00 c0 ff 07 00
......... o......
000000000007ff60 b6 e2 01 01 00 00 00 00 - 00 00 00 00 e2 05 02 00
.................
000000000007ff70 01 00 00 00 00 00 09 00 - 00 00 00 00 44 00 00 00
.............D...
000000000007ff80 34 06 02 00 14 06 02 00 - e4 05 02 00 00 00 00 00
4...............
000000000007ff90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 01
.................
000000000007ffa0 45 09 91 7c 4e 09 91 7c - 01 00 00 00 01 00 00 00
E..|N..|........
000000000007ffb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000007ffc0 f0 ff 07 00 4f 6d 81 7c - 00 00 09 00 00 00 00 00
.....Om.|........
000000000007ffd0 00 40 fd 7f 38 a9 54 80 - c8 ff 07 00 d0 63 e7 89
[email protected]..
000000000007ffe0 ff ff ff ff f3 99 83 7c - 58 6d 81 7c 00 00 00 00
........|Xm.|....
000000000007fff0 00 00 00 00 00 00 00 00 - 4e e2 01 01 00 00 00 00
.........N.......
0000000000080000 41 63 74 78 20 00 00 00 - 01 00 00 00 98 24 00 00 Actx
.........$..
0000000000080010 c4 00 00 00 00 00 00 00 - 20 00 00 00 00 00 00 00
......... .......
0000000000080020 14 00 00 00 01 00 00 00 - 06 00 00 00 34 00 00 00
.............4...
*----> Tilstandsdump av tråd med id 0x720 <----*
eax=012cfd84 ebx=00000000 ecx=0018b39c edx=012cfdc8 esi=000ae340
edi=00000000
eip=7c90eb94 esp=012cfe1c ebp=012cff80 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
012cff80 77e76c22 012cffa8 77e76a3b 000ae340 ntdll!KiFastSystemCallRet
012cff88 77e76a3b 000ae340 00000000 0007f88c RPCRT4!I_RpcBCacheFree+0x5ea
012cffa8 77e76c0a 000ae1f8 012cffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
012cffb4 7c80b50b 000b7f90 00000000 0007f88c RPCRT4!I_RpcBCacheFree+0x5d2
012cffec 00000000 77e76bf0 000b7f90 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
00000000012cfe1c 99 e3 90 7c 03 67 e7 77 - 88 01 00 00 70 ff 2c 01
....|.g.w....p.,.
00000000012cfe2c 00 00 00 00 b8 b3 18 00 - 54 ff 2c 01 18 5e 78 8a
.........T.,..^x.
00000000012cfe3c 7c 4b a5 b6 77 31 56 80 - cc 35 08 8a fc 35 08 8a
|K..w1V..5...5..
00000000012cfe4c 58 35 08 8a 02 00 f8 00 - 00 00 c9 e1 36 00 f8 00
X5..........6...
00000000012cfe5c b6 67 c9 e1 14 5e 78 8a - de 2d 4e 80 58 4b a5 b6
..g...^x..-N.XK..
00000000012cfe6c 08 00 00 00 6c 01 57 80 - 05 00 00 00 00 00 00 00
.....l.W.........
00000000012cfe7c 00 00 00 00 a0 4b a5 b6 - 00 8a 7b 8a 38 a9 54 80
......K....{.8.T.
00000000012cfe8c 04 00 00 00 05 00 00 00 - 40 4d 03 e1 60 5b 03 e1
.........@M..`[..
00000000012cfe9c 00 00 00 00 00 00 c8 00 - 16 68 c9 e1 00 4b 03 e1
..........h...K..
00000000012cfeac b0 2e 56 00 60 5b 03 e1 - 30 00 30 00 e6 67 c9 e1
...V.`[..0.0..g..
00000000012cfebc 90 e5 38 00 28 4c a5 b6 - 6c 31 56 80 90 e5 38 00
...8.(L..l1V...8.
00000000012cfecc 34 00 00 c0 58 35 08 8a - 48 04 01 e1 90 3e 40 8a
4...X5..H....>@.
00000000012cfedc ec 4b a5 b6 c0 1b 50 80 - fc 4b a5 b6 04 00 00 00
..K....P..K......
00000000012cfeec 00 00 00 00 90 3e 40 8a - f4 b0 39 8a 58 35 08 8a
......>@...9.X5..
00000000012cfefc 00 00 00 00 b9 13 00 00 - e8 17 00 00 00 00 00 00
.................
00000000012cff0c 20 4c a5 b6 18 1b 50 80 - 44 9f e8 89 24 4c a5 b6
L....P.D...$L..
00000000012cff1c b2 c2 4d 80 ba c2 4d 80 - 14 9f e8 89 a8 9d e8 89
...M...M.........
00000000012cff2c dc 9d e8 89 80 ff 2c 01 - 99 66 e7 77 4c ff 2c 01
.......,..f.wL.,.
00000000012cff3c a9 66 e7 77 ed 10 90 7c - b8 7c 0b 00 90 7f 0b 00
..f.w...|.|......
00000000012cff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff
.../M.....]......
*----> Tilstandsdump av tråd med id 0x728 <----*
eax=0058b260 ebx=6602a299 ecx=00000001 edx=7c90eb94 esi=010460d8
edi=00000000
eip=7c90eb94 esp=0163ff14 ebp=0163ff44 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\SHLWAPI.dll -
ChildEBP RetAddr Args to Child
0163ff44 01011e8b 00000000 0163ffb4 77f74292 ntdll!KiFastSystemCallRet
0163ff50 77f74292 010460d8 0000005c 0007fc04 Explorer+0x11e8b
0163ffb4 7c80b50b 00000000 0000005c 0007fc04 SHLWAPI!Ordinal505+0x3e9
0163ffec 00000000 77f74223 0007fdbc 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
000000000163ff14 18 94 d3 77 40 1a 00 01 - 00 00 00 00 d8 60 04 01
....w@........`..
000000000163ff24 00 00 00 00 84 00 01 00 - 2a c0 00 00 04 00 00 00
.........*.......
000000000163ff34 de 06 1c 00 92 e2 1d 00 - 4d 03 00 00 a3 00 00 00
.........M.......
000000000163ff44 50 ff 63 01 8b 1e 01 01 - 00 00 00 00 b4 ff 63 01
P.c...........c.
000000000163ff54 92 42 f7 77 d8 60 04 01 - 5c 00 00 00 04 fc 07 00
..B.w.`..\.......
000000000163ff64 bc fd 07 00 62 1e 01 01 - b1 79 01 01 a0 01 00 00
.....b....y......
000000000163ff74 d8 60 04 01 08 00 00 00 - 00 00 00 00 00 00 00 00
..`..............
000000000163ff84 00 00 00 00 00 00 00 00 - c0 7a 14 8a a1 a8 4f 80
..........z....O.
000000000163ff94 00 00 00 00 00 00 00 00 - 00 00 00 00 81 a8 4f 80
...............O.
000000000163ffa4 9c cc 9a b6 00 00 00 00 - 00 00 00 00 dc e2 90 7c
................|
000000000163ffb4 ec ff 63 01 0b b5 80 7c - 00 00 00 00 5c 00 00 00
...c....|....\...
000000000163ffc4 04 fc 07 00 bc fd 07 00 - 00 c0 fd 7f 00 76 7b 8a
..............v{.
000000000163ffd4 c0 ff 63 01 40 01 ec 89 - ff ff ff ff f3 99 83 7c
...c.@..........|
000000000163ffe4 18 b5 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00
....|............
000000000163fff4 23 42 f7 77 bc fd 07 00 - 00 00 00 00 00 00 00 00
#B.w............
0000000001640004 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001640014 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001640024 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001640034 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001640044 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
*----> Tilstandsdump av tråd med id 0x72c <----*
eax=000000c0 ebx=00000000 ecx=77dc6a51 edx=77dc6a18 esi=ffffffff
edi=7c90fb78
eip=7c90eb94 esp=0167ff9c ebp=0167ffb4 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
0167ffb4 7c80b50b 00000000 7c90fb78 ffffffff ntdll!KiFastSystemCallRet
0167ffec 00000000 7c92798d 00000000 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
000000000167ff9c 5c d8 90 7c d4 79 92 7c - 01 00 00 00 ac ff 67 01
\..|.y.|......g.
000000000167ffac 00 00 00 00 00 00 00 80 - ec ff 67 01 0b b5 80 7c
...........g....|
000000000167ffbc 00 00 00 00 78 fb 90 7c - ff ff ff ff 00 00 00 00
.....x..|........
000000000167ffcc 00 b0 fd 7f 00 76 7b 8a - c0 ff 67 01 80 07 1c 8a
......v{...g.....
000000000167ffdc ff ff ff ff f3 99 83 7c - 18 b5 80 7c 00 00 00 00
........|...|....
000000000167ffec 00 00 00 00 00 00 00 00 - 8d 79 92 7c 00 00 00 00
..........y.|....
000000000167fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168000c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016800ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016800bc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016800cc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
*----> Tilstandsdump av tråd med id 0x734 <----*
eax=000000c0 ebx=00000000 ecx=0163fb00 edx=00000000 esi=00000000
edi=00000001
eip=7c90eb94 esp=016ffcec ebp=016fffb4 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
016fffb4 7c80b50b 00000000 00000020 0163fce4 ntdll!KiFastSystemCallRet
016fffec 00000000 7c929fae 00000000 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
00000000016ffcec ab e9 90 7c d5 a0 92 7c - 03 00 00 00 30 fd 6f 01
....|...|....0.o.
00000000016ffcfc 01 00 00 00 01 00 00 00 - 00 00 00 00 20 00 00 00
............. ...
00000000016ffd0c e4 fc 63 01 00 00 00 00 - 08 e5 97 7c 08 e5 97 7c
...c........|...|
00000000016ffd1c d0 01 00 00 34 07 00 00 - 03 00 00 00 03 00 00 00
.....4...........
00000000016ffd2c 02 00 00 00 cc 01 00 00 - b4 01 00 00 0c 06 00 00
.................
00000000016ffd3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffdac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffdbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffdcc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffddc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffdec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffdfc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffe0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffe1c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
*----> Tilstandsdump av tråd med id 0x73c <----*
eax=05342430 ebx=00000001 ecx=7c809a20 edx=00000010 esi=00000000
edi=01a0fbfc
eip=7c90eb94 esp=01a0fb54 ebp=01a0fb90 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\USER32.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
01a0fb90 77d3e4ab 00110756 00000000 00000000 ntdll!KiFastSystemCallRet
01a0fbb8 7ca2650f 00110756 00000000 00000000 USER32!SendMessageTimeoutW+0x21
01a0fbf4 7ca25bce 00000000 000d96ec 000d96d8
SHELL32!SHCloneSpecialIDList+0x114
01a0fc08 7ca25b9b 00000001 000d96d8 05342430 SHELL32!SHChangeNotify+0x1239
01a0fc28 7ca26523 00000001 000d96d8 01a0fc5c SHELL32!SHChangeNotify+0x1206
01a0fc38 7ca24aa3 00000000 00001000 00000000
SHELL32!SHCloneSpecialIDList+0x128
01a0fc5c 7c9f4f60 0000020c 00000718 7c9f4f35 SHELL32!SHChangeNotify+0x10e
01a0fc70 77d38734 00010080 00000403 0000020c SHELL32!Ordinal646+0x232b
01a0fc9c 77d38816 7c9f4f35 00010080 00000403 USER32!GetDC+0x6d
01a0fd04 77d3b4c0 0009e2f8 7c9f4f35 00010080 USER32!GetDC+0x14f
01a0fd58 77d3b50c 0058c168 00000403 0000020c USER32!DefWindowProcW+0x184
01a0fd80 7c90eae3 01a0fd90 00000018 0058c168 USER32!DefWindowProcW+0x1d0
01a0fdd0 77d39402 01a0fe20 00000000 00000000
ntdll!KiUserCallbackDispatcher+0x13
01a0fdfc 7c9f4f28 01a0fe20 00000000 00000000 USER32!PeekMessageW+0x167
01a0fe3c 7c9f4e3e 00000000 00000000 00000000 SHELL32!Ordinal646+0x22f3
01a0ff4c 7ca0a300 77f74292 00000000 7c809988 SHELL32!Ordinal646+0x2209
01a0ffb4 7c80b50b 00000000 7c809988 00090000 SHELL32!Ordinal753+0x133
01a0ffec 00000000 77f74223 0163f4d4 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
0000000001a0fb54 be 94 d3 77 73 e4 d3 77 - 56 07 11 00 00 00 00 00
....ws..wV.......
0000000001a0fb64 00 00 00 00 00 00 00 00 - 80 fb a0 01 b2 02 00 00
.................
0000000001a0fb74 00 00 00 00 00 00 00 00 - 54 22 16 02 02 00 00 00
.........T"......
0000000001a0fb84 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 fb a0 01
.................
0000000001a0fb94 ab e4 d3 77 56 07 11 00 - 00 00 00 00 00 00 00 00
....wV...........
0000000001a0fba4 00 00 00 00 02 00 00 00 - 00 00 00 00 fc fb a0 01
.................
0000000001a0fbb4 00 00 00 00 f4 fb a0 01 - 0f 65 a2 7c 56 07 11 00
..........e.|V...
0000000001a0fbc4 00 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00
.................
0000000001a0fbd4 00 00 00 00 fc fb a0 01 - 00 00 00 00 54 22 16 02
.............T"..
0000000001a0fbe4 00 00 00 00 00 00 00 00 - 00 00 00 00 01 95 ab 7c
................|
0000000001a0fbf4 08 fc a0 01 ce 5b a2 7c - 00 00 00 00 ec 96 0d 00
......[.|........
0000000001a0fc04 d8 96 0d 00 28 fc a0 01 - 9b 5b a2 7c 01 00 00 00
.....(....[.|....
0000000001a0fc14 d8 96 0d 00 30 24 34 05 - e8 96 0d 00 50 22 16 02
.....0$4.....P"..
0000000001a0fc24 01 00 00 00 38 fc a0 01 - 23 65 a2 7c 01 00 00 00
.....8...#e.|....
0000000001a0fc34 d8 96 0d 00 5c fc a0 01 - a3 4a a2 7c 00 00 00 00
.....\....J.|....
0000000001a0fc44 00 10 00 00 00 00 00 00 - 00 00 00 00 bb c8 1b 00
.................
0000000001a0fc54 d8 fc a0 01 00 00 00 00 - 70 fc a0 01 60 4f 9f 7c
.........p...`O.|
0000000001a0fc64 0c 02 00 00 18 07 00 00 - 35 4f 9f 7c 9c fc a0 01
.........5O.|....
0000000001a0fc74 34 87 d3 77 80 00 01 00 - 03 04 00 00 0c 02 00 00
4..w............
0000000001a0fc84 18 07 00 00 35 4f 9f 7c - cd ab ba dc 00 00 00 00
.....5O.|........
*----> Tilstandsdump av tråd med id 0x744 <----*
eax=01a8ff70 ebx=00000000 ecx=00002479 edx=00000000 esi=00000254
edi=00000000
eip=7c90eb94 esp=01a8fee4 ebp=01a8ff48 iopl=0 nv up ei ng nz ac po
cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000297
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** WARNING: Unable to verify checksum for
C:\Programfiler\Google\deskbar-0.5.95.0\ggtaskbar.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\Programfiler\Google\deskbar-0.5.95.0\ggtaskbar.dll -
ChildEBP RetAddr Args to Child
01a8ff48 7c802542 00000254 04f07338 00000000 ntdll!KiFastSystemCallRet
01a8ff5c 27255b57 00000254 04f07338 000bdab0
kernel32!WaitForSingleObject+0x12
01a43980 0000025c 0002000f 0008015b 27266554 ggtaskbar+0x25b57
*----> Ubehandlet stakk dumpet <----*
0000000001a8fee4 c0 e9 90 7c db 25 80 7c - 54 02 00 00 00 00 00 00
....|.%.|T.......
0000000001a8fef4 18 ff a8 01 38 73 f0 04 - 90 39 a4 01 00 00 00 00
.....8s...9......
0000000001a8ff04 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001a8ff14 10 00 00 00 80 44 6b 0f - 3f ff ff ff 00 40 fd 7f
......Dk.?....@..
0000000001a8ff24 00 70 fd 7f 18 ff a8 01 - ff ff ff ff f8 fe a8 01
..p..............
0000000001a8ff34 74 71 25 27 dc ff a8 01 - f3 99 83 7c 08 26 80 7c
tq%'.......|.&.|
0000000001a8ff44 00 00 00 00 5c ff a8 01 - 42 25 80 7c 54 02 00 00
.....\...B%.|T...
0000000001a8ff54 38 73 f0 04 00 00 00 00 - 80 39 a4 01 57 5b 25 27
8s.......9..W[%'
0000000001a8ff64 54 02 00 00 38 73 f0 04 - b0 da 0b 00 80 39 a4 01
T...8s.......9..
0000000001a8ff74 b0 37 a4 01 90 39 a4 01 - 57 5c 25 27 80 39 a4 01
..7...9..W\%'.9..
0000000001a8ff84 90 39 a4 01 a9 5c 25 27 - 80 39 a4 01 90 39 a4 01
..9...\%'.9...9..
0000000001a8ff94 52 76 23 27 eb 06 91 7c - 14 f1 63 01 ec ff a8 01
Rv#'...|..c.....
0000000001a8ffa4 b0 37 a4 01 04 00 00 00 - 04 00 00 00 44 75 23 27
..7..........Du#'
0000000001a8ffb4 b0 da 0b 00 0b b5 80 7c - b0 37 a4 01 eb 06 91 7c
........|.7.....|
0000000001a8ffc4 14 f1 63 01 b0 37 a4 01 - 00 70 fd 7f 00 76 7b 8a
...c..7...p...v{.
0000000001a8ffd4 c0 ff a8 01 f8 56 09 8a - ff ff ff ff f3 99 83 7c
......V.........|
0000000001a8ffe4 18 b5 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00
....|............
0000000001a8fff4 30 75 23 27 b0 37 a4 01 - 00 00 00 00 ff ff ff ff
0u#'.7..........
0000000001a90004 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001a90014 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
*----> Tilstandsdump av tråd med id 0x76c <----*
eax=015d0010 ebx=00000000 ecx=00000000 edx=7c90eb94 esi=0058c168
edi=00000403
eip=7c90eb94 esp=02aee890 ebp=02aee8c8 iopl=0 nv up ei pl nz na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000206
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\Programfiler\Stardock\Object Desktop\WindowBlinds\WBlind.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\NETSHELL.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\ole32.dll -
ChildEBP RetAddr Args to Child
02aee8c8 77d3b903 0058c168 00000403 0000020c ntdll!KiFastSystemCallRet
02aee8e8 6602a6e1 00010080 00000403 0000020c USER32!SendMessageW+0x49
02aeef0c 7ca2652e 00010080 00000403 0000020c WBlind!GetPleaseWait+0xe56
02aeef30 7ca24a45 00000000 00001000 00000000
SHELL32!SHCloneSpecialIDList+0x133
02aef394 763e549a 00000000 00001000 00000000 SHELL32!SHChangeNotify+0xb0
02aef3b8 763eabdf 00002000 02aef404 0009d248
NETSHELL!DllGetClassObject+0x2161
02aef48c 76431c15 000e7688 05341ea8 00000003
NETSHELL!HrIsIpStateCheckingEnabled+0x3c63
02aef5d0 76431d3f 000e7668 05341ea8 00114734
NETSHELL!NetSetupSetProgressCallback+0x278aa
02aef5e8 76431f79 000e7668 05341ea8 00114734
NETSHELL!NetSetupSetProgressCallback+0x279d4
02aef6ec 77e79dc9 000e7668 05341ea8 00114734
NETSHELL!NetSetupSetProgressCallback+0x27c0e
02aef710 77ef321a 76431e90 02aef724 00000004
RPCRT4!CheckVerificationTrailer+0x75
02aefb1c 77ef3bf3 001249f8 000c449c 02e62144 RPCRT4!NdrStubCall2+0x215
02aefb74 775f0c31 001249f8 02e62144 000c449c
RPCRT4!CStdStubBuffer_Invoke+0x82
02aefbb4 775f0bdb 02e62144 0018b2b8 000c2a7c
ole32!StgGetIFillLockBytesOnFile+0x10479
02aefbfc 77512a22 02e62144 020f9c28 001249f8
ole32!StgGetIFillLockBytesOnFile+0x10423
02aefcd4 77512947 000c449c 00000000 001249f8 ole32!CLSIDFromString+0xaab
02aefcf0 77513461 02e62144 00000001 001249f8 ole32!CLSIDFromString+0x9d0
02aefd1c 775f0e3b 02e62144 00000001 001249f8
ole32!DcomChannelSetHResult+0x5ba
02aefd50 775f09bc 02e620f0 000c449c 001249f8
ole32!StgGetIFillLockBytesOnFile+0x10683
02aefe24 775f0df2 02e620f0 000b8c68 00000400
ole32!StgGetIFillLockBytesOnFile+0x10204
02aefe50 7751349b 02e620f0 00000400 001006a8
ole32!StgGetIFillLockBytesOnFile+0x1063a
02aefe64 775132d1 02e620f0 02aefee4 7751323e
ole32!DcomChannelSetHResult+0x5f4
02aefe7c 77d38734 000100d6 0210bb38 0000babe
ole32!DcomChannelSetHResult+0x42a
02aefea8 77d38816 7751323e 000100d6 00000400 USER32!GetDC+0x6d
02aeff10 77d389cd 0009e2f8 7751323e 000100d6 USER32!GetDC+0x14f
02aeff70 77d38a10 02aeff98 00000000 02aeffb4 USER32!GetWindowLongW+0x127
02aeff80 764234c2 02aeff98 7cbc0000 00000000 USER32!DispatchMessageW+0xf
02aeffb4 7c80b50b 76456328 00000000 7cbc0000
NETSHELL!NetSetupSetProgressCallback+0x19157
02aeffec 00000000 7642348c 76456328 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
0000000002aee890 be 94 d3 77 90 d8 d3 77 - 80 00 01 00 03 04 00 00
....w...w........
0000000002aee8a0 0c 02 00 00 18 07 00 00 - 00 00 00 00 b0 02 00 00
.................
0000000002aee8b0 00 00 00 00 80 00 01 00 - 03 04 00 00 00 00 00 00
.................
0000000002aee8c0 80 00 01 00 bc e8 ae 00 - e8 e8 ae 02 03 b9 d3 77
................w
0000000002aee8d0 68 c1 58 00 03 04 00 00 - 0c 02 00 00 18 07 00 00
h.X.............
0000000002aee8e0 00 00 00 00 00 10 00 00 - 0c ef ae 02 e1 a6 02 66
................f
0000000002aee8f0 80 00 01 00 03 04 00 00 - 0c 02 00 00 18 07 00 00
.................
0000000002aee900 80 00 01 00 00 10 00 00 - 00 00 00 00 fc ec ae 02
.................
0000000002aee910 00 00 00 00 4a 00 08 02 - 45 00 00 00 18 07 00 43
.....J...E......C
0000000002aee920 4a 00 00 00 00 00 00 00 - 03 00 00 00 3e ea ae 02
J...........>...
0000000002aee930 00 00 00 00 03 04 00 01 - f4 e9 ae 02 18 07 00 43
................C
0000000002aee940 00 00 00 00 00 00 00 00 - 46 ed ae 02 45 09 91 7c
.........F...E..|
0000000002aee950 4e 09 91 7c 39 51 00 00 - cc e8 ae 02 78 ec ae 02
N..|9Q......x...
0000000002aee960 0c ec ae 02 18 ee 90 7c - 84 ec ae 02 08 00 00 00
........|........
0000000002aee970 1c ec ae 02 2e 40 91 7c - 10 4a 18 00 f4 e9 ae 02
......@.|.J......
0000000002aee980 70 09 91 7c c0 e4 97 7c - ef 40 91 7c bb 40 91 7c
p..|...|.@.|.@.|
0000000002aee990 00 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00
.................
0000000002aee9a0 29 00 00 00 24 00 02 00 - 00 d0 fa 7f 00 00 00
0 )...$...........
0000000002aee9b0 08 00 0a 00 88 3e 91 7c - 1a 02 00 00 00 00 00 00
......>.|........
0000000002aee9c0 00 00 00 00 52 51 91 7c - a0 10 08 00 4a 00 00 00
.....RQ.|....J...
*----> Tilstandsdump av tråd med id 0x970 <----*
eax=00000000 ebx=00000000 ecx=0113fe1c edx=7c90eb94 esi=000ae340
edi=000ae3e4
eip=7c90eb94 esp=0113fe1c ebp=0113ff80 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
0113ff80 77e76c22 0113ffa8 77e76a3b 000ae340 ntdll!KiFastSystemCallRet
0113ff88 77e76a3b 000ae340 00000020 00410178 RPCRT4!I_RpcBCacheFree+0x5ea
0113ffa8 77e76c0a 000ae1f8 0113ffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
0113ffb4 7c80b50b 020e6918 00000020 00410178 RPCRT4!I_RpcBCacheFree+0x5d2
0113ffec 00000000 77e76bf0 020e6918 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
000000000113fe1c 99 e3 90 7c 03 67 e7 77 - 88 01 00 00 70 ff 13 01
....|.g.w....p...
000000000113fe2c 00 00 00 00 f8 b1 0b 00 - 4c ff 13 01 0d 0a 47 3d
.........L.....G=
000000000113fe3c 32 34 38 0d 0a 52 3d 32 - 34 38 0d 0a 0d 0a 5b 42
248..R=248....[B
000000000113fe4c 75 74 74 6f 02 30 5d 0d - 00 00 43 6f 6f 72 64 3d
utto.0]...Coord=
000000000113fe5c 32 31 0d 0a 59 43 6f 6f - 72 64 3d 34 0d 0a 41 6c
21..YCoord=4..Al
000000000113fe6c 07 00 00 00 31 0d 0a 41 - 63 74 69 6f 6e 3d 30 0d
.....1..Action=0.
000000000113fe7c 0a 42 75 74 74 6f 6e 49 - 6d 61 67 65 3d 46 6c 79
..ButtonImage=Fly
000000000113fe8c 4f 53 5c 63 74 72 6c 2d - 63 6c 6f 73 65 2e 62 6d
OS\ctrl-close.bm
000000000113fe9c 70 0d 0a 43 6f 6d 62 69 - 6e 65 4f 70 3d 32 0d 0a
p..CombineOp=2..
000000000113feac 46 72 61 6d 65 43 6f 75 - 6e 74 3d 33 0d 0a 56 69
FrameCount=3..Vi
000000000113febc 73 69 62 69 6c 69 74 79 - 3d 31 0d 0a 0d 0a 5b 42
sibility=1....[B
000000000113fecc 75 74 74 6f 6e 31 5d 0d - 0a 41 63 74 69 6f 6e 3d
utton1]..Action=
000000000113fedc 32 32 0d 0a 41 6c 69 67 - 6e 3d 31 0d 0a 58 43 6f
22..Align=1..XCo
000000000113feec 6f 72 64 3d 33 38 0d 0a - 42 75 74 74 6f 6e 49 6d
ord=38..ButtonIm
000000000113fefc 61 67 65 3d 46 6c 79 4f - 53 5c 63 74 72 6c 2d 6d
age=FlyOS\ctrl-m
000000000113ff0c 61 78 2e 62 6d 70 0d 0a - cc 3c f3 89 24 9c 52 b4
ax.bmp...<..$.R.
000000000113ff1c b2 c2 4d 80 ba c2 4d 80 - 9c 3c f3 89 30 3b f3 89
...M...M..<..0;..
000000000113ff2c 64 3b f3 89 80 ff 13 01 - 99 66 e7 77 4c ff 13 01
d;.......f.wL...
000000000113ff3c a9 66 e7 77 ed 10 90 7c - 88 7c 12 00 18 69 0e 02
..f.w...|.|...i..
000000000113ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff
.../M.....]......
*----> Tilstandsdump av tråd med id 0xd28 <----*
eax=00000001 ebx=00004e20 ecx=00fdfcec edx=7c90eb94 esi=00fdfd68
edi=77d391c6
eip=7c90eb94 esp=00fdfcf8 ebp=00fdfd14 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\System32\stobject.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
00fdfd14 76591513 00fdfd68 00000000 00000000 ntdll!KiFastSystemCallRet
00fdfd8c 76593746 76590000 00000000 000105be stobject+0x1513
00fdffb4 7c80b50b 00000000 00000000 00000000 stobject!DllCanUnloadNow+0x1fa4
00fdffec 00000000 765936f7 00000000 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
0000000000fdfcf8 be 91 d3 77 f1 91 d3 77 - 68 fd fd 00 00 00 00 00
....w...wh.......
0000000000fdfd08 00 00 00 00 00 00 00 00 - 00 00 00 00 8c fd fd 00
.................
0000000000fdfd18 13 15 59 76 68 fd fd 00 - 00 00 00 00 00 00 00 00
...Yvh...........
0000000000fdfd28 00 00 00 00 00 00 00 00 - 00 00 59 76 00 00 00 00
...........Yv....
0000000000fdfd38 30 00 00 00 00 40 00 00 - 21 13 59 76 00 00 00 00
0....@..!.Yv....
0000000000fdfd48 1e 00 00 00 00 00 59 76 - fd 03 01 00 11 00 01 00
.......Yv........
0000000000fdfd58 10 00 00 00 00 00 00 00 - f4 31 59 76 00 00 00 00
..........1Yv....
0000000000fdfd68 be 05 01 00 2a c0 00 00 - 04 00 00 00 de 06 1c 00
.....*...........
0000000000fdfd78 92 e2 1d 00 4d 03 00 00 - a3 00 00 00 00 00 00 00
.....M...........
0000000000fdfd88 00 00 00 00 b4 ff fd 00 - 46 37 59 76 00 00 59 76
.........F7Yv..Yv
0000000000fdfd98 00 00 00 00 be 05 01 00 - 01 00 00 00 00 00 00 00
.................
0000000000fdfda8 43 00 3a 00 5c 00 57 00 - 49 00 4e 00 44 00 4f 00
C.:.\.W.I.N.D.O.
0000000000fdfdb8 57 00 53 00 5c 00 53 00 - 79 00 73 00 74 00 65 00
W.S.\.S.y.s.t.e.
0000000000fdfdc8 6d 00 33 00 32 00 5c 00 - 73 00 74 00 6f 00 62 00
m.3.2.\.s.t.o.b.
0000000000fdfdd8 6a 00 65 00 63 00 74 00 - 2e 00 64 00 6c 00 6c 00
j.e.c.t...d.l.l.
0000000000fdfde8 00 00 81 7c 1b 00 00 00 - 00 02 00 00 fc ff fd 00
....|............
0000000000fdfdf8 23 00 00 00 24 00 00 00 - 90 01 00 00 00 00 00 00
#...$...........
0000000000fdfe08 60 00 00 00 60 00 00 00 - 20 00 02 fb 22 20 20 00
`...`... ..." .
0000000000fdfe18 00 00 00 1b 00 00 00 00 - 40 00 10 00 e8 03 00 00
.........@.......
0000000000fdfe28 e8 03 00 00 47 02 00 00 - 00 00 00 00 00 00 00 00
.....G...........
*----> Tilstandsdump av tråd med id 0xefc <----*
eax=72cf30e8 ebx=029afef8 ecx=000000e7 edx=020fd008 esi=00000000
edi=7ffd4000
eip=7c90eb94 esp=029afed0 ebp=029aff6c iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
029aff6c 7c809c86 00000002 029affa4 00000000 ntdll!KiFastSystemCallRet
029aff88 72cf312a 00000002 029affa4 00000000
kernel32!WaitForMultipleObjects+0x18
029affb4 7c80b50b 00000000 16b723b9 00000000 wdmaud!midMessage+0x348
029affec 00000000 72cf30e8 00000000 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
00000000029afed0 ab e9 90 7c f2 94 80 7c - 02 00 00 00 f8 fe 9a 02
....|...|........
00000000029afee0 01 00 00 00 00 00 00 00 - 00 00 00 00 b9 23 b7 16
..............#..
00000000029afef0 00 00 00 00 00 00 00 00 - dc 05 00 00 80 03 00 00
.................
00000000029aff00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000029aff10 00 00 00 00 54 37 73 89 - 14 00 00 00 01 00 00 00
.....T7s.........
00000000029aff20 60 a8 0a 02 00 00 00 00 - 00 00 00 00 ec 35 73 89
`............5s.
00000000029aff30 b2 c2 4d 80 ea b5 57 80 - 00 40 fd 7f 00 60 fd 7f
...M...W..@...`..
00000000029aff40 00 60 fd 7f 00 00 00 00 - f8 fe 9a 02 00 00 00 00
..`..............
00000000029aff50 02 00 00 00 ec fe 9a 02 - 00 00 00 00 dc ff 9a 02
.................
00000000029aff60 f3 99 83 7c 90 95 80 7c - 00 00 00 00 88 ff 9a 02
....|...|........
00000000029aff70 86 9c 80 7c 02 00 00 00 - a4 ff 9a 02 00 00 00 00
....|............
00000000029aff80 ff ff ff ff 00 00 00 00 - b4 ff 9a 02 2a 31 cf 72
.............*1.r
00000000029aff90 02 00 00 00 a4 ff 9a 02 - 00 00 00 00 ff ff ff ff
.................
00000000029affa0 00 00 00 00 dc 05 00 00 - 80 03 00 00 00 00 00 00
.................
00000000029affb0 dc e2 90 7c ec ff 9a 02 - 0b b5 80 7c 00 00 00 00
....|.......|....
00000000029affc0 b9 23 b7 16 00 00 00 00 - 00 00 00 00 00 60 fd 7f
..#...........`..
00000000029affd0 00 76 7b 8a c0 ff 9a 02 - 80 fa 37 8a ff ff ff ff
..v{.......7.....
00000000029affe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00
....|...|........
00000000029afff0 00 00 00 00 e8 30 cf 72 - 00 00 00 00 00 00 00 00
......0.r........
00000000029b0000 02 00 00 00 28 00 00 00 - 6c 29 01 00 b0 4a 01 00
.....(...l)...J..
*----> Tilstandsdump av tråd med id 0xc90 <----*
eax=00000000 ebx=7c9c0068 ecx=00000004 edx=7c9c0068 esi=7c9c8078
edi=206e6920
eip=77f6409d esp=02c4d07c ebp=02c4d088 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: SHLWAPI!Ordinal219
77f6408b 56 push esi
77f6408c 57 push edi
77f6408d 8bd3 mov edx,ebx
77f6408f 85c0 test eax,eax
77f64091 8b7510 mov esi,[ebp+0x10]
77f64094 6a04 push 0x4
77f64096 59 pop ecx
77f64097 740f jz SHLWAPI!Ordinal219+0x32 (77f640a8)
77f64099 8bf8 mov edi,eax
77f6409b 33c0 xor eax,eax
FAULT ->77f6409d f3a7 rep cmpsd ds:7c9c8078=01e18d10
es:206e6920=????????
77f6409f 7414 jz SHLWAPI!Ordinal219+0x3f (77f640b5)
77f640a1 83c208 add edx,0x8
77f640a4 8b02 mov eax,[edx]
77f640a6 ebe7 jmp SHLWAPI!Ordinal219+0x19 (77f6408f)
77f640a8 bfd040f677 mov edi,0x77f640d0
77f640ad 33c0 xor eax,eax
77f640af f3a7 rep cmpsd
77f640b1 752d jnz SHLWAPI!Ordinal219+0x6a (77f640e0)
77f640b3 8bd3 mov edx,ebx
77f640b5 8b7204 mov esi,[edx+0x4]
*----> Bakoversøk i stakken <----*
--
regards
Zadig Galbaras
A Perturbed Norwegian Agnostic
-
My computer restarts very often, in fact I am not sure I can finish this
post in time for the next one.
The computer is a self buildt Abit socket 478 motherboard, fitted with a
2.4GHz Intel pIV
Last week I fitted a 500GB SATA2 harddisk, but the problem was there before
that.
The OS is WinXP SP2 all updates Norwegian edition.
I download a lot of shit to try and the uninstall, but I cannot figure out
what ignites these annoying reboots.
The reboots happens randomly it seems, and I cannot reproduce it.
It happens when I'm running MSIE or Outlook or just leave the computer
running with no application started.
Even when all startup options in MSCONFIG disabled, it reboots.
Screensaver is disabled.
I have started Dr. Watson and this is what he told me when the computer
malfunctioned a few minutes ago.
(This is Greek to me....as we say in Norway
Microsoft (R) DrWtsn32
Copyright (C) 1985-2001 Microsoft Corporation. Med enerett.
Programunntak oppstod:
Program: C:\WINDOWS\Explorer.EXE (pid=1816)
Tidspunkt: 18.07.2005 @ 21:40:37.578
Unntaksnummer: c0000005 (brudd på tilgangstillatelse)
*----> Systeminformasjon <----*
Datamaskinnavn: NIOBE
Brukernavn: Zadig Galbaras
Terminaløkt-id: 0
Antall prosessorer: 1
Prosessortype: x86 Family 15 Model 2 Stepping 9
Windows-versjon: 5.1
Gjeldende build: 2600
Service Pack: 2
Gjeldende type: Uniprocessor Free
Registrert organisasjon:
Registrert eier: Zadig Galbaras
*----> Oppgaveliste <----*
0 System Process
4 System
632 smss.exe
696 csrss.exe
720 winlogon.exe
764 services.exe
776 lsass.exe
932 svchost.exe
996 svchost.exe
1088 svchost.exe
1140 svchost.exe
1192 svchost.exe
1404 wbload.exe
1568 spoolsv.exe
1620 SCardSvr.exe
1816 Explorer.EXE
1920 winampa.exe
1928 type32.exe
1936 jusched.exe
1944 RUNDLL32.EXE
1960 MsgPlus.exe
1976 ICQLite.exe
1988 gcasServ.exe
1996 EnMixCPL.exe
2004 CTSysVol.exe
2012 avgcc.exe
2020 qttask.exe
2028 msnmsgr.exe
2036 msmsgs.exe
152 audevicemgr.exe
172 psn.exe
180 ScreenHunter.exe
192 wweb32.exe
392 avgamsvr.exe
492 avgupsvc.exe
272 PSNGive.exe
608 CTsvcCDA.exe
896 MROUTE~2.EXE
948 em_exec.exe
940 MDM.EXE
1048 ggviewer.exe
1212 nvsvc32.exe
1716 CONNMN~1.EXE
1892 svchost.exe
2132 wdfmgr.exe
2184 MsgAgt.exe
2816 alg.exe
3308 gcasDtServ.exe
452 CapMan.exe
2260 ElogErr.exe
1796 BROADC~1.EXE
2524 SCRFS.exe
2644 AUFILE~1.EXE
2856 Ecfmserv.exe
1764 msimn.exe
3880 solitaire.exe
3772 drwtsn32.exe
*----> Modulliste <----*
(0000000000ec0000 - 0000000000ec7000:
C:\Programfiler\Logitech\MouseWare\System\LgWndHk.dll
(0000000000f20000 - 0000000000f2b000:
C:\Programfiler\Fellesfiler\Logitech\Scrolling\LgMsgHk.dll
(0000000001000000 - 00000000010ff000: C:\WINDOWS\Explorer.EXE
(00000000012f0000 - 00000000015b8000: C:\WINDOWS\system32\xpsp2res.dll
(00000000021b0000 - 00000000021b8000: C:\WINDOWS\system32\PathCopyEx.dll
(0000000002660000 - 0000000002926000: C:\WINDOWS\system32\msi.dll
(0000000002a20000 - 0000000002a2e000: C:\Programfiler\Adobe\Acrobat
7.0\ActiveX\AcroIEHelper.dll
(0000000002a70000 - 0000000002a8b000: C:\Programfiler\Microsoft
AntiSpyware\shellextension.dll
(0000000002b30000 - 0000000002b5b000: C:\Programfiler\WinRAR\rarext.dll
(0000000002b60000 - 0000000002b72000: C:\WINDOWS\system32\browselc.dll
(0000000003060000 - 00000000030ea000: C:\WINDOWS\System32\shdoclc.dll
(00000000031f0000 - 0000000003229000: C:\WINDOWS\system32\NVRSNO.DLL
(0000000003230000 - 000000000324c000:
C:\Programfiler\Fellesfiler\Adobe\Shell\PSICON.DLL
(0000000003250000 - 000000000325f000:
C:\Programfiler\ICQLite\ICQLiteShell.dll
(00000000032b0000 - 00000000032ca000: C:\PROGRA~1\FileNote\FileNote.dll
(00000000032d0000 - 00000000032da000: C:\Programfiler\EditPlus
2\eppshell.dll
(00000000039b0000 - 00000000039db000: C:\Programfiler\Sony
Ericsson\Mobile\FilGuiLg.dll
(0000000003aa0000 - 0000000003abe000:
C:\Programfiler\FontLoader\ShellExt.dll
(0000000003bc0000 - 0000000003c32000: C:\WINDOWS\system32\nvshell.dll
(0000000003c40000 - 0000000003d42000: C:\WINDOWS\system32\MFC71U.DLL
(0000000003d90000 - 0000000003dad000:
C:\Programfiler\Fellesfiler\Zinio\ZSHExt.dll
(0000000003e80000 - 0000000003e9c000: C:\Programfiler\Adobe\Acrobat
7.0\ActiveX\PDFShell.dll
(0000000003ed0000 - 0000000003eec000:
C:\Programfiler\Illustrate\dBpowerAMP\dBShell.dll
(0000000004500000 - 0000000004975000: C:\WINDOWS\system32\nvcpl.dll
(0000000004c80000 - 0000000004cdd000: C:\Programfiler\Sony
Ericsson\Mobile\auexpext.dll
(000000000ffd0000 - 000000000fff8000: C:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 000000001000e000: C:\WINDOWS\system32\MsgPlusLoader.dll
(0000000016200000 - 0000000016206000: C:\PROGRA~1\WINZIP\WZSHLSTB.DLL
(0000000016250000 - 000000001626b000: C:\PROGRA~1\WINZIP\wzshlex1.dll
(0000000016300000 - 0000000016313000: C:\PROGRA~1\WINZIP\WZCAB3.DLL
(0000000020000000 - 0000000020017000: C:\WINDOWS\system32\odbcint.dll
(0000000027230000 - 000000002727e000:
C:\Programfiler\Google\deskbar-0.5.95.0\ggtaskbar.dll
(00000000325c0000 - 00000000325d2000: C:\Programfiler\Microsoft
Office\OFFICE11\msohev.dll
(000000004ec90000 - 000000004ee33000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
(0000000054b20000 - 0000000054b7d000: C:\Programfiler\Corel\Corel Graphics
12\PROGRAMS\CRLUTL.dll
(0000000054d70000 - 0000000054d84000: C:\Programfiler\Corel\Corel Graphics
12\PROGRAMS\CRLI18N.dll
(00000000577c0000 - 00000000577f0000: C:\Programfiler\Corel\Corel Graphics
12\PROGRAMS\CdrIco.DLL
(0000000059200000 - 000000005920d000: C:\WINDOWS\system32\wshNO.DLL
(00000000597c0000 - 000000005998a000: C:\WINDOWS\AppPatch\AcGenral.DLL
(000000005b290000 - 000000005b2c8000: C:\WINDOWS\system32\UxTheme.dll
(000000005bd10000 - 000000005bd64000: C:\WINDOWS\system32\NETAPI32.dll
(000000005d090000 - 000000005d0b6000: C:\WINDOWS\system32\ShimEng.dll
(000000005d5d0000 - 000000005d667000: C:\WINDOWS\system32\comctl32.dll
(000000005e400000 - 000000005e492000: C:\WINDOWS\system32\wiashext.dll
(0000000061ee0000 - 0000000061eed000: C:\WINDOWS\system32\MFC42LOC.DLL
(00000000621a0000 - 00000000621ab000: C:\Programfiler\Grisoft\AVG7\avgse.dll
(0000000062f20000 - 0000000062f29000: C:\WINDOWS\system32\LPK.DLL
(0000000066000000 - 000000006608e000: C:\Programfiler\Stardock\Object
Desktop\WindowBlinds\WBlind.dll
(0000000066500000 - 000000006650a000: C:\WINDOWS\system32\wbsys.dll
(0000000066600000 - 0000000066617000: C:\Programfiler\Stardock\Object
Desktop\WindowBlinds\wbhelp.dll
(0000000069cb0000 - 0000000069d21000: C:\WINDOWS\System32\themeui.dll
(000000006c750000 - 000000006c79d000: C:\WINDOWS\system32\DUSER.dll
(0000000070e90000 - 0000000070ea3000: C:\WINDOWS\system32\asycfilt.dll
(0000000071a90000 - 0000000071a98000: C:\WINDOWS\system32\WS2HELP.dll
(0000000071aa0000 - 0000000071ab7000: C:\WINDOWS\system32\WS2_32.dll
(0000000071ac0000 - 0000000071aca000: C:\WINDOWS\System32\WSOCK32.dll
(0000000071b10000 - 0000000071b22000: C:\WINDOWS\system32\MPR.dll
(0000000071be0000 - 0000000071bf3000: C:\WINDOWS\system32\SAMLIB.dll
(0000000071c00000 - 0000000071c0e000: C:\WINDOWS\System32\ntlanman.dll
(0000000071c70000 - 0000000071c77000: C:\WINDOWS\System32\NETRAP.dll
(0000000071c80000 - 0000000071cc0000: C:\WINDOWS\System32\NETUI1.dll
(0000000071cc0000 - 0000000071cd7000: C:\WINDOWS\System32\NETUI0.dll
(0000000071d30000 - 0000000071d4c000: C:\WINDOWS\System32\actxprxy.dll
(00000000722a0000 - 00000000722a5000: C:\WINDOWS\system32\sensapi.dll
(0000000072400000 - 000000007241a000: C:\WINDOWS\System32\mydocs.dll
(0000000072ce0000 - 0000000072ce8000: C:\WINDOWS\system32\msacm32.drv
(0000000072cf0000 - 0000000072cf9000: C:\WINDOWS\system32\wdmaud.drv
(0000000072fd0000 - 0000000072ff6000: C:\WINDOWS\system32\WINSPOOL.DRV
(0000000073b70000 - 0000000073b83000: C:\WINDOWS\System32\sti.dll
(0000000073da0000 - 0000000073e9e000: C:\WINDOWS\system32\MFC42.DLL
(0000000074690000 - 00000000746b7000: C:\WINDOWS\System32\msls31.dll
(00000000746c0000 - 00000000746ea000: C:\WINDOWS\System32\msimtf.dll
(00000000746f0000 - 000000007473b000: C:\WINDOWS\System32\MSCTF.dll
(0000000074780000 - 00000000747bd000: C:\WINDOWS\system32\ODBC32.dll
(0000000074aa0000 - 0000000074aa8000: C:\WINDOWS\System32\POWRPROF.dll
(0000000074ab0000 - 0000000074ab7000: C:\WINDOWS\System32\CFGMGR32.dll
(0000000074ac0000 - 0000000074aca000: C:\WINDOWS\System32\BatMeter.dll
(0000000074b00000 - 0000000074b47000: C:\WINDOWS\System32\webcheck.dll
(0000000074c50000 - 0000000074c7c000: C:\WINDOWS\system32\OLEACC.dll
(0000000074e70000 - 0000000074e80000: C:\WINDOWS\system32\wshext.dll
(0000000075320000 - 000000007534e000: C:\WINDOWS\system32\msctfime.ime
(0000000075420000 - 000000007548b000: C:\WINDOWS\system32\USP10.dll
(00000000754a0000 - 0000000075520000: C:\WINDOWS\system32\CRYPTUI.dll
(0000000075950000 - 0000000075a47000: C:\WINDOWS\system32\MSGINA.DLL
(0000000075d80000 - 0000000075e11000: C:\WINDOWS\system32\mlang.dll
(0000000075e70000 - 0000000075f20000: C:\WINDOWS\system32\SXS.DLL
(0000000075f40000 - 0000000075f47000: C:\WINDOWS\System32\drprov.dll
(0000000075f50000 - 0000000075f59000: C:\WINDOWS\System32\davclnt.dll
(0000000075f60000 - 000000007605d000: C:\WINDOWS\system32\BROWSEUI.dll
(0000000076060000 - 00000000760c5000: C:\WINDOWS\system32\MSVCP60.dll
(0000000076340000 - 0000000076350000: C:\WINDOWS\system32\WINSTA.dll
(0000000076360000 - 0000000076365000: C:\WINDOWS\system32\msimg32.dll
(0000000076370000 - 000000007638d000: C:\WINDOWS\system32\IMM32.DLL
(0000000076390000 - 00000000763d9000: C:\WINDOWS\system32\comdlg32.dll
(00000000763e0000 - 0000000076587000: C:\WINDOWS\system32\NETSHELL.dll
(0000000076590000 - 00000000765b1000: C:\WINDOWS\System32\stobject.dll
(00000000765e0000 - 00000000765fd000: C:\WINDOWS\System32\CSCDLL.dll
(0000000076970000 - 0000000076978000: C:\WINDOWS\system32\LINKINFO.dll
(0000000076980000 - 00000000769a5000: C:\WINDOWS\system32\ntshrui.dll
(00000000769b0000 - 0000000076a63000: C:\WINDOWS\system32\USERENV.dll
(0000000076b10000 - 0000000076b21000: C:\WINDOWS\system32\ATL.DLL
(0000000076b30000 - 0000000076b5d000: C:\WINDOWS\system32\WINMM.dll
(0000000076bf0000 - 0000000076c1e000: C:\WINDOWS\system32\credui.dll
(0000000076c20000 - 0000000076c4e000: C:\WINDOWS\system32\WINTRUST.dll
(0000000076c80000 - 0000000076ca8000: C:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d50000 - 0000000076d69000: C:\WINDOWS\system32\iphlpapi.dll
(0000000076e70000 - 0000000076e7e000: C:\WINDOWS\system32\rtutils.dll
(0000000076e80000 - 0000000076e92000: C:\WINDOWS\system32\rasman.dll
(0000000076ea0000 - 0000000076ecf000: C:\WINDOWS\system32\TAPI32.dll
(0000000076ed0000 - 0000000076f0c000: C:\WINDOWS\system32\RASAPI32.DLL
(0000000076f40000 - 0000000076f48000: C:\WINDOWS\System32\WTSAPI32.dll
(0000000076f50000 - 0000000076f7d000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fc0000 - 000000007703f000: C:\WINDOWS\system32\CLBCATQ.DLL
(0000000077040000 - 0000000077107000: C:\WINDOWS\system32\COMRes.dll
(0000000077110000 - 000000007719c000: C:\WINDOWS\system32\OLEAUT32.dll
(00000000771a0000 - 0000000077246000: C:\WINDOWS\system32\WININET.dll
(0000000077250000 - 00000000772ed000: C:\WINDOWS\system32\urlmon.dll
(00000000773c0000 - 00000000774c2000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774d0000 - 000000007760d000: C:\WINDOWS\system32\ole32.dll
(0000000077680000 - 00000000776a1000: C:\WINDOWS\system32\NTMARTA.DLL
(0000000077750000 - 00000000778bc000: C:\WINDOWS\system32\SHDOCVW.dll
(0000000077910000 - 0000000077a03000: C:\WINDOWS\system32\SETUPAPI.dll
(0000000077a10000 - 0000000077a64000: C:\WINDOWS\System32\cscui.dll
(0000000077a70000 - 0000000077b04000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077b10000 - 0000000077b22000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b30000 - 0000000077b52000: C:\WINDOWS\system32\appHelp.dll
(0000000077bc0000 - 0000000077bc7000: C:\WINDOWS\system32\midimap.dll
(0000000077bd0000 - 0000000077be5000: C:\WINDOWS\system32\MSACM32.dll
(0000000077bf0000 - 0000000077bf8000: C:\WINDOWS\system32\VERSION.dll
(0000000077c00000 - 0000000077c58000: C:\WINDOWS\system32\msvcrt.dll
(0000000077c60000 - 0000000077c83000: C:\WINDOWS\system32\msv1_0.dll
(0000000077d30000 - 0000000077dc0000: C:\WINDOWS\system32\USER32.dll
(0000000077dc0000 - 0000000077e6a000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077f10000 - 0000000077f56000: C:\WINDOWS\system32\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\System32\Secur32.dll
(000000007c340000 - 000000007c396000: C:\WINDOWS\system32\MSVCR71.dll
(000000007c3a0000 - 000000007c41b000: C:\WINDOWS\system32\MSVCP71.dll
(000000007c800000 - 000000007c8f5000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9af000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d5000: C:\WINDOWS\system32\SHELL32.dll
(000000007d4a0000 - 000000007d785000: C:\WINDOWS\System32\mshtml.dll
*----> Tilstandsdump av tråd med id 0x71c <----*
eax=7ffdf000 ebx=00000003 ecx=000a6f20 edx=7c90eb94 esi=000a6f20
edi=00000000
eip=7c90eb94 esp=0007fef0 ebp=0007ff08 iopl=0 nv up ei pl nz na pe
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000202
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\ntdll.dll -
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\SHELL32.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Module load completed but symbols could not be loaded for
C:\WINDOWS\Explorer.EXE
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007ff08 7ca0be04 00000000 0007ff5c 01016e95 ntdll!KiFastSystemCallRet
0007ff14 01016e95 000a6f20 7ffd4000 0007ffc0 SHELL32!Ordinal201+0x28
0007ff5c 0101e2b6 00000000 00000000 000205e2 Explorer+0x16e95
0007ffc0 7c816d4f 00090000 00000000 7ffd4000 Explorer+0x1e2b6
0007fff0 00000000 0101e24e 00000000 78746341
kernel32!RegisterWaitForInputIdle+0x49
*----> Ubehandlet stakk dumpet <----*
000000000007fef0 18 94 d3 77 6a 3b a2 7c - ac 92 80 7c 20 6f 0a 00
....wj;.|...| o..
000000000007ff00 20 6f 0a 00 14 ff 07 00 - 14 ff 07 00 04 be a0 7c
o.............|
000000000007ff10 00 00 00 00 5c ff 07 00 - 95 6e 01 01 20 6f 0a 00
.....\....n.. o..
000000000007ff20 00 40 fd 7f c0 ff 07 00 - 00 00 00 00 24 fd 07 00
..@..........$...
000000000007ff30 50 ff 07 00 e0 ff 07 00 - 27 e0 90 7c ed aa 80 7c
P.......'..|...|
000000000007ff40 ff ff ff ff 0c 00 00 00 - 00 00 00 00 86 c7 00 00
.................
000000000007ff50 98 00 00 00 01 00 00 00 - 20 6f 0a 00 c0 ff 07 00
......... o......
000000000007ff60 b6 e2 01 01 00 00 00 00 - 00 00 00 00 e2 05 02 00
.................
000000000007ff70 01 00 00 00 00 00 09 00 - 00 00 00 00 44 00 00 00
.............D...
000000000007ff80 34 06 02 00 14 06 02 00 - e4 05 02 00 00 00 00 00
4...............
000000000007ff90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 01
.................
000000000007ffa0 45 09 91 7c 4e 09 91 7c - 01 00 00 00 01 00 00 00
E..|N..|........
000000000007ffb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000007ffc0 f0 ff 07 00 4f 6d 81 7c - 00 00 09 00 00 00 00 00
.....Om.|........
000000000007ffd0 00 40 fd 7f 38 a9 54 80 - c8 ff 07 00 d0 63 e7 89
[email protected]..
000000000007ffe0 ff ff ff ff f3 99 83 7c - 58 6d 81 7c 00 00 00 00
........|Xm.|....
000000000007fff0 00 00 00 00 00 00 00 00 - 4e e2 01 01 00 00 00 00
.........N.......
0000000000080000 41 63 74 78 20 00 00 00 - 01 00 00 00 98 24 00 00 Actx
.........$..
0000000000080010 c4 00 00 00 00 00 00 00 - 20 00 00 00 00 00 00 00
......... .......
0000000000080020 14 00 00 00 01 00 00 00 - 06 00 00 00 34 00 00 00
.............4...
*----> Tilstandsdump av tråd med id 0x720 <----*
eax=012cfd84 ebx=00000000 ecx=0018b39c edx=012cfdc8 esi=000ae340
edi=00000000
eip=7c90eb94 esp=012cfe1c ebp=012cff80 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
012cff80 77e76c22 012cffa8 77e76a3b 000ae340 ntdll!KiFastSystemCallRet
012cff88 77e76a3b 000ae340 00000000 0007f88c RPCRT4!I_RpcBCacheFree+0x5ea
012cffa8 77e76c0a 000ae1f8 012cffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
012cffb4 7c80b50b 000b7f90 00000000 0007f88c RPCRT4!I_RpcBCacheFree+0x5d2
012cffec 00000000 77e76bf0 000b7f90 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
00000000012cfe1c 99 e3 90 7c 03 67 e7 77 - 88 01 00 00 70 ff 2c 01
....|.g.w....p.,.
00000000012cfe2c 00 00 00 00 b8 b3 18 00 - 54 ff 2c 01 18 5e 78 8a
.........T.,..^x.
00000000012cfe3c 7c 4b a5 b6 77 31 56 80 - cc 35 08 8a fc 35 08 8a
|K..w1V..5...5..
00000000012cfe4c 58 35 08 8a 02 00 f8 00 - 00 00 c9 e1 36 00 f8 00
X5..........6...
00000000012cfe5c b6 67 c9 e1 14 5e 78 8a - de 2d 4e 80 58 4b a5 b6
..g...^x..-N.XK..
00000000012cfe6c 08 00 00 00 6c 01 57 80 - 05 00 00 00 00 00 00 00
.....l.W.........
00000000012cfe7c 00 00 00 00 a0 4b a5 b6 - 00 8a 7b 8a 38 a9 54 80
......K....{.8.T.
00000000012cfe8c 04 00 00 00 05 00 00 00 - 40 4d 03 e1 60 5b 03 e1
.........@M..`[..
00000000012cfe9c 00 00 00 00 00 00 c8 00 - 16 68 c9 e1 00 4b 03 e1
..........h...K..
00000000012cfeac b0 2e 56 00 60 5b 03 e1 - 30 00 30 00 e6 67 c9 e1
...V.`[..0.0..g..
00000000012cfebc 90 e5 38 00 28 4c a5 b6 - 6c 31 56 80 90 e5 38 00
...8.(L..l1V...8.
00000000012cfecc 34 00 00 c0 58 35 08 8a - 48 04 01 e1 90 3e 40 8a
4...X5..H....>@.
00000000012cfedc ec 4b a5 b6 c0 1b 50 80 - fc 4b a5 b6 04 00 00 00
..K....P..K......
00000000012cfeec 00 00 00 00 90 3e 40 8a - f4 b0 39 8a 58 35 08 8a
......>@...9.X5..
00000000012cfefc 00 00 00 00 b9 13 00 00 - e8 17 00 00 00 00 00 00
.................
00000000012cff0c 20 4c a5 b6 18 1b 50 80 - 44 9f e8 89 24 4c a5 b6
L....P.D...$L..
00000000012cff1c b2 c2 4d 80 ba c2 4d 80 - 14 9f e8 89 a8 9d e8 89
...M...M.........
00000000012cff2c dc 9d e8 89 80 ff 2c 01 - 99 66 e7 77 4c ff 2c 01
.......,..f.wL.,.
00000000012cff3c a9 66 e7 77 ed 10 90 7c - b8 7c 0b 00 90 7f 0b 00
..f.w...|.|......
00000000012cff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff
.../M.....]......
*----> Tilstandsdump av tråd med id 0x728 <----*
eax=0058b260 ebx=6602a299 ecx=00000001 edx=7c90eb94 esi=010460d8
edi=00000000
eip=7c90eb94 esp=0163ff14 ebp=0163ff44 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\SHLWAPI.dll -
ChildEBP RetAddr Args to Child
0163ff44 01011e8b 00000000 0163ffb4 77f74292 ntdll!KiFastSystemCallRet
0163ff50 77f74292 010460d8 0000005c 0007fc04 Explorer+0x11e8b
0163ffb4 7c80b50b 00000000 0000005c 0007fc04 SHLWAPI!Ordinal505+0x3e9
0163ffec 00000000 77f74223 0007fdbc 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
000000000163ff14 18 94 d3 77 40 1a 00 01 - 00 00 00 00 d8 60 04 01
....w@........`..
000000000163ff24 00 00 00 00 84 00 01 00 - 2a c0 00 00 04 00 00 00
.........*.......
000000000163ff34 de 06 1c 00 92 e2 1d 00 - 4d 03 00 00 a3 00 00 00
.........M.......
000000000163ff44 50 ff 63 01 8b 1e 01 01 - 00 00 00 00 b4 ff 63 01
P.c...........c.
000000000163ff54 92 42 f7 77 d8 60 04 01 - 5c 00 00 00 04 fc 07 00
..B.w.`..\.......
000000000163ff64 bc fd 07 00 62 1e 01 01 - b1 79 01 01 a0 01 00 00
.....b....y......
000000000163ff74 d8 60 04 01 08 00 00 00 - 00 00 00 00 00 00 00 00
..`..............
000000000163ff84 00 00 00 00 00 00 00 00 - c0 7a 14 8a a1 a8 4f 80
..........z....O.
000000000163ff94 00 00 00 00 00 00 00 00 - 00 00 00 00 81 a8 4f 80
...............O.
000000000163ffa4 9c cc 9a b6 00 00 00 00 - 00 00 00 00 dc e2 90 7c
................|
000000000163ffb4 ec ff 63 01 0b b5 80 7c - 00 00 00 00 5c 00 00 00
...c....|....\...
000000000163ffc4 04 fc 07 00 bc fd 07 00 - 00 c0 fd 7f 00 76 7b 8a
..............v{.
000000000163ffd4 c0 ff 63 01 40 01 ec 89 - ff ff ff ff f3 99 83 7c
...c.@..........|
000000000163ffe4 18 b5 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00
....|............
000000000163fff4 23 42 f7 77 bc fd 07 00 - 00 00 00 00 00 00 00 00
#B.w............
0000000001640004 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001640014 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001640024 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001640034 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001640044 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
*----> Tilstandsdump av tråd med id 0x72c <----*
eax=000000c0 ebx=00000000 ecx=77dc6a51 edx=77dc6a18 esi=ffffffff
edi=7c90fb78
eip=7c90eb94 esp=0167ff9c ebp=0167ffb4 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
0167ffb4 7c80b50b 00000000 7c90fb78 ffffffff ntdll!KiFastSystemCallRet
0167ffec 00000000 7c92798d 00000000 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
000000000167ff9c 5c d8 90 7c d4 79 92 7c - 01 00 00 00 ac ff 67 01
\..|.y.|......g.
000000000167ffac 00 00 00 00 00 00 00 80 - ec ff 67 01 0b b5 80 7c
...........g....|
000000000167ffbc 00 00 00 00 78 fb 90 7c - ff ff ff ff 00 00 00 00
.....x..|........
000000000167ffcc 00 b0 fd 7f 00 76 7b 8a - c0 ff 67 01 80 07 1c 8a
......v{...g.....
000000000167ffdc ff ff ff ff f3 99 83 7c - 18 b5 80 7c 00 00 00 00
........|...|....
000000000167ffec 00 00 00 00 00 00 00 00 - 8d 79 92 7c 00 00 00 00
..........y.|....
000000000167fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168000c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000168009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016800ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016800bc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016800cc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
*----> Tilstandsdump av tråd med id 0x734 <----*
eax=000000c0 ebx=00000000 ecx=0163fb00 edx=00000000 esi=00000000
edi=00000001
eip=7c90eb94 esp=016ffcec ebp=016fffb4 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
016fffb4 7c80b50b 00000000 00000020 0163fce4 ntdll!KiFastSystemCallRet
016fffec 00000000 7c929fae 00000000 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
00000000016ffcec ab e9 90 7c d5 a0 92 7c - 03 00 00 00 30 fd 6f 01
....|...|....0.o.
00000000016ffcfc 01 00 00 00 01 00 00 00 - 00 00 00 00 20 00 00 00
............. ...
00000000016ffd0c e4 fc 63 01 00 00 00 00 - 08 e5 97 7c 08 e5 97 7c
...c........|...|
00000000016ffd1c d0 01 00 00 34 07 00 00 - 03 00 00 00 03 00 00 00
.....4...........
00000000016ffd2c 02 00 00 00 cc 01 00 00 - b4 01 00 00 0c 06 00 00
.................
00000000016ffd3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffd9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffdac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffdbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffdcc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffddc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffdec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffdfc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffe0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000016ffe1c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
*----> Tilstandsdump av tråd med id 0x73c <----*
eax=05342430 ebx=00000001 ecx=7c809a20 edx=00000010 esi=00000000
edi=01a0fbfc
eip=7c90eb94 esp=01a0fb54 ebp=01a0fb90 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\USER32.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
01a0fb90 77d3e4ab 00110756 00000000 00000000 ntdll!KiFastSystemCallRet
01a0fbb8 7ca2650f 00110756 00000000 00000000 USER32!SendMessageTimeoutW+0x21
01a0fbf4 7ca25bce 00000000 000d96ec 000d96d8
SHELL32!SHCloneSpecialIDList+0x114
01a0fc08 7ca25b9b 00000001 000d96d8 05342430 SHELL32!SHChangeNotify+0x1239
01a0fc28 7ca26523 00000001 000d96d8 01a0fc5c SHELL32!SHChangeNotify+0x1206
01a0fc38 7ca24aa3 00000000 00001000 00000000
SHELL32!SHCloneSpecialIDList+0x128
01a0fc5c 7c9f4f60 0000020c 00000718 7c9f4f35 SHELL32!SHChangeNotify+0x10e
01a0fc70 77d38734 00010080 00000403 0000020c SHELL32!Ordinal646+0x232b
01a0fc9c 77d38816 7c9f4f35 00010080 00000403 USER32!GetDC+0x6d
01a0fd04 77d3b4c0 0009e2f8 7c9f4f35 00010080 USER32!GetDC+0x14f
01a0fd58 77d3b50c 0058c168 00000403 0000020c USER32!DefWindowProcW+0x184
01a0fd80 7c90eae3 01a0fd90 00000018 0058c168 USER32!DefWindowProcW+0x1d0
01a0fdd0 77d39402 01a0fe20 00000000 00000000
ntdll!KiUserCallbackDispatcher+0x13
01a0fdfc 7c9f4f28 01a0fe20 00000000 00000000 USER32!PeekMessageW+0x167
01a0fe3c 7c9f4e3e 00000000 00000000 00000000 SHELL32!Ordinal646+0x22f3
01a0ff4c 7ca0a300 77f74292 00000000 7c809988 SHELL32!Ordinal646+0x2209
01a0ffb4 7c80b50b 00000000 7c809988 00090000 SHELL32!Ordinal753+0x133
01a0ffec 00000000 77f74223 0163f4d4 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
0000000001a0fb54 be 94 d3 77 73 e4 d3 77 - 56 07 11 00 00 00 00 00
....ws..wV.......
0000000001a0fb64 00 00 00 00 00 00 00 00 - 80 fb a0 01 b2 02 00 00
.................
0000000001a0fb74 00 00 00 00 00 00 00 00 - 54 22 16 02 02 00 00 00
.........T"......
0000000001a0fb84 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 fb a0 01
.................
0000000001a0fb94 ab e4 d3 77 56 07 11 00 - 00 00 00 00 00 00 00 00
....wV...........
0000000001a0fba4 00 00 00 00 02 00 00 00 - 00 00 00 00 fc fb a0 01
.................
0000000001a0fbb4 00 00 00 00 f4 fb a0 01 - 0f 65 a2 7c 56 07 11 00
..........e.|V...
0000000001a0fbc4 00 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00
.................
0000000001a0fbd4 00 00 00 00 fc fb a0 01 - 00 00 00 00 54 22 16 02
.............T"..
0000000001a0fbe4 00 00 00 00 00 00 00 00 - 00 00 00 00 01 95 ab 7c
................|
0000000001a0fbf4 08 fc a0 01 ce 5b a2 7c - 00 00 00 00 ec 96 0d 00
......[.|........
0000000001a0fc04 d8 96 0d 00 28 fc a0 01 - 9b 5b a2 7c 01 00 00 00
.....(....[.|....
0000000001a0fc14 d8 96 0d 00 30 24 34 05 - e8 96 0d 00 50 22 16 02
.....0$4.....P"..
0000000001a0fc24 01 00 00 00 38 fc a0 01 - 23 65 a2 7c 01 00 00 00
.....8...#e.|....
0000000001a0fc34 d8 96 0d 00 5c fc a0 01 - a3 4a a2 7c 00 00 00 00
.....\....J.|....
0000000001a0fc44 00 10 00 00 00 00 00 00 - 00 00 00 00 bb c8 1b 00
.................
0000000001a0fc54 d8 fc a0 01 00 00 00 00 - 70 fc a0 01 60 4f 9f 7c
.........p...`O.|
0000000001a0fc64 0c 02 00 00 18 07 00 00 - 35 4f 9f 7c 9c fc a0 01
.........5O.|....
0000000001a0fc74 34 87 d3 77 80 00 01 00 - 03 04 00 00 0c 02 00 00
4..w............
0000000001a0fc84 18 07 00 00 35 4f 9f 7c - cd ab ba dc 00 00 00 00
.....5O.|........
*----> Tilstandsdump av tråd med id 0x744 <----*
eax=01a8ff70 ebx=00000000 ecx=00002479 edx=00000000 esi=00000254
edi=00000000
eip=7c90eb94 esp=01a8fee4 ebp=01a8ff48 iopl=0 nv up ei ng nz ac po
cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000297
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** WARNING: Unable to verify checksum for
C:\Programfiler\Google\deskbar-0.5.95.0\ggtaskbar.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\Programfiler\Google\deskbar-0.5.95.0\ggtaskbar.dll -
ChildEBP RetAddr Args to Child
01a8ff48 7c802542 00000254 04f07338 00000000 ntdll!KiFastSystemCallRet
01a8ff5c 27255b57 00000254 04f07338 000bdab0
kernel32!WaitForSingleObject+0x12
01a43980 0000025c 0002000f 0008015b 27266554 ggtaskbar+0x25b57
*----> Ubehandlet stakk dumpet <----*
0000000001a8fee4 c0 e9 90 7c db 25 80 7c - 54 02 00 00 00 00 00 00
....|.%.|T.......
0000000001a8fef4 18 ff a8 01 38 73 f0 04 - 90 39 a4 01 00 00 00 00
.....8s...9......
0000000001a8ff04 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001a8ff14 10 00 00 00 80 44 6b 0f - 3f ff ff ff 00 40 fd 7f
......Dk.?....@..
0000000001a8ff24 00 70 fd 7f 18 ff a8 01 - ff ff ff ff f8 fe a8 01
..p..............
0000000001a8ff34 74 71 25 27 dc ff a8 01 - f3 99 83 7c 08 26 80 7c
tq%'.......|.&.|
0000000001a8ff44 00 00 00 00 5c ff a8 01 - 42 25 80 7c 54 02 00 00
.....\...B%.|T...
0000000001a8ff54 38 73 f0 04 00 00 00 00 - 80 39 a4 01 57 5b 25 27
8s.......9..W[%'
0000000001a8ff64 54 02 00 00 38 73 f0 04 - b0 da 0b 00 80 39 a4 01
T...8s.......9..
0000000001a8ff74 b0 37 a4 01 90 39 a4 01 - 57 5c 25 27 80 39 a4 01
..7...9..W\%'.9..
0000000001a8ff84 90 39 a4 01 a9 5c 25 27 - 80 39 a4 01 90 39 a4 01
..9...\%'.9...9..
0000000001a8ff94 52 76 23 27 eb 06 91 7c - 14 f1 63 01 ec ff a8 01
Rv#'...|..c.....
0000000001a8ffa4 b0 37 a4 01 04 00 00 00 - 04 00 00 00 44 75 23 27
..7..........Du#'
0000000001a8ffb4 b0 da 0b 00 0b b5 80 7c - b0 37 a4 01 eb 06 91 7c
........|.7.....|
0000000001a8ffc4 14 f1 63 01 b0 37 a4 01 - 00 70 fd 7f 00 76 7b 8a
...c..7...p...v{.
0000000001a8ffd4 c0 ff a8 01 f8 56 09 8a - ff ff ff ff f3 99 83 7c
......V.........|
0000000001a8ffe4 18 b5 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00
....|............
0000000001a8fff4 30 75 23 27 b0 37 a4 01 - 00 00 00 00 ff ff ff ff
0u#'.7..........
0000000001a90004 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000001a90014 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
*----> Tilstandsdump av tråd med id 0x76c <----*
eax=015d0010 ebx=00000000 ecx=00000000 edx=7c90eb94 esi=0058c168
edi=00000403
eip=7c90eb94 esp=02aee890 ebp=02aee8c8 iopl=0 nv up ei pl nz na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000206
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\Programfiler\Stardock\Object Desktop\WindowBlinds\WBlind.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\NETSHELL.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\ole32.dll -
ChildEBP RetAddr Args to Child
02aee8c8 77d3b903 0058c168 00000403 0000020c ntdll!KiFastSystemCallRet
02aee8e8 6602a6e1 00010080 00000403 0000020c USER32!SendMessageW+0x49
02aeef0c 7ca2652e 00010080 00000403 0000020c WBlind!GetPleaseWait+0xe56
02aeef30 7ca24a45 00000000 00001000 00000000
SHELL32!SHCloneSpecialIDList+0x133
02aef394 763e549a 00000000 00001000 00000000 SHELL32!SHChangeNotify+0xb0
02aef3b8 763eabdf 00002000 02aef404 0009d248
NETSHELL!DllGetClassObject+0x2161
02aef48c 76431c15 000e7688 05341ea8 00000003
NETSHELL!HrIsIpStateCheckingEnabled+0x3c63
02aef5d0 76431d3f 000e7668 05341ea8 00114734
NETSHELL!NetSetupSetProgressCallback+0x278aa
02aef5e8 76431f79 000e7668 05341ea8 00114734
NETSHELL!NetSetupSetProgressCallback+0x279d4
02aef6ec 77e79dc9 000e7668 05341ea8 00114734
NETSHELL!NetSetupSetProgressCallback+0x27c0e
02aef710 77ef321a 76431e90 02aef724 00000004
RPCRT4!CheckVerificationTrailer+0x75
02aefb1c 77ef3bf3 001249f8 000c449c 02e62144 RPCRT4!NdrStubCall2+0x215
02aefb74 775f0c31 001249f8 02e62144 000c449c
RPCRT4!CStdStubBuffer_Invoke+0x82
02aefbb4 775f0bdb 02e62144 0018b2b8 000c2a7c
ole32!StgGetIFillLockBytesOnFile+0x10479
02aefbfc 77512a22 02e62144 020f9c28 001249f8
ole32!StgGetIFillLockBytesOnFile+0x10423
02aefcd4 77512947 000c449c 00000000 001249f8 ole32!CLSIDFromString+0xaab
02aefcf0 77513461 02e62144 00000001 001249f8 ole32!CLSIDFromString+0x9d0
02aefd1c 775f0e3b 02e62144 00000001 001249f8
ole32!DcomChannelSetHResult+0x5ba
02aefd50 775f09bc 02e620f0 000c449c 001249f8
ole32!StgGetIFillLockBytesOnFile+0x10683
02aefe24 775f0df2 02e620f0 000b8c68 00000400
ole32!StgGetIFillLockBytesOnFile+0x10204
02aefe50 7751349b 02e620f0 00000400 001006a8
ole32!StgGetIFillLockBytesOnFile+0x1063a
02aefe64 775132d1 02e620f0 02aefee4 7751323e
ole32!DcomChannelSetHResult+0x5f4
02aefe7c 77d38734 000100d6 0210bb38 0000babe
ole32!DcomChannelSetHResult+0x42a
02aefea8 77d38816 7751323e 000100d6 00000400 USER32!GetDC+0x6d
02aeff10 77d389cd 0009e2f8 7751323e 000100d6 USER32!GetDC+0x14f
02aeff70 77d38a10 02aeff98 00000000 02aeffb4 USER32!GetWindowLongW+0x127
02aeff80 764234c2 02aeff98 7cbc0000 00000000 USER32!DispatchMessageW+0xf
02aeffb4 7c80b50b 76456328 00000000 7cbc0000
NETSHELL!NetSetupSetProgressCallback+0x19157
02aeffec 00000000 7642348c 76456328 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
0000000002aee890 be 94 d3 77 90 d8 d3 77 - 80 00 01 00 03 04 00 00
....w...w........
0000000002aee8a0 0c 02 00 00 18 07 00 00 - 00 00 00 00 b0 02 00 00
.................
0000000002aee8b0 00 00 00 00 80 00 01 00 - 03 04 00 00 00 00 00 00
.................
0000000002aee8c0 80 00 01 00 bc e8 ae 00 - e8 e8 ae 02 03 b9 d3 77
................w
0000000002aee8d0 68 c1 58 00 03 04 00 00 - 0c 02 00 00 18 07 00 00
h.X.............
0000000002aee8e0 00 00 00 00 00 10 00 00 - 0c ef ae 02 e1 a6 02 66
................f
0000000002aee8f0 80 00 01 00 03 04 00 00 - 0c 02 00 00 18 07 00 00
.................
0000000002aee900 80 00 01 00 00 10 00 00 - 00 00 00 00 fc ec ae 02
.................
0000000002aee910 00 00 00 00 4a 00 08 02 - 45 00 00 00 18 07 00 43
.....J...E......C
0000000002aee920 4a 00 00 00 00 00 00 00 - 03 00 00 00 3e ea ae 02
J...........>...
0000000002aee930 00 00 00 00 03 04 00 01 - f4 e9 ae 02 18 07 00 43
................C
0000000002aee940 00 00 00 00 00 00 00 00 - 46 ed ae 02 45 09 91 7c
.........F...E..|
0000000002aee950 4e 09 91 7c 39 51 00 00 - cc e8 ae 02 78 ec ae 02
N..|9Q......x...
0000000002aee960 0c ec ae 02 18 ee 90 7c - 84 ec ae 02 08 00 00 00
........|........
0000000002aee970 1c ec ae 02 2e 40 91 7c - 10 4a 18 00 f4 e9 ae 02
......@.|.J......
0000000002aee980 70 09 91 7c c0 e4 97 7c - ef 40 91 7c bb 40 91 7c
p..|...|.@.|.@.|
0000000002aee990 00 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00
.................
0000000002aee9a0 29 00 00 00 24 00 02 00 - 00 d0 fa 7f 00 00 00
0 )...$...........
0000000002aee9b0 08 00 0a 00 88 3e 91 7c - 1a 02 00 00 00 00 00 00
......>.|........
0000000002aee9c0 00 00 00 00 52 51 91 7c - a0 10 08 00 4a 00 00 00
.....RQ.|....J...
*----> Tilstandsdump av tråd med id 0x970 <----*
eax=00000000 ebx=00000000 ecx=0113fe1c edx=7c90eb94 esi=000ae340
edi=000ae3e4
eip=7c90eb94 esp=0113fe1c ebp=0113ff80 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
0113ff80 77e76c22 0113ffa8 77e76a3b 000ae340 ntdll!KiFastSystemCallRet
0113ff88 77e76a3b 000ae340 00000020 00410178 RPCRT4!I_RpcBCacheFree+0x5ea
0113ffa8 77e76c0a 000ae1f8 0113ffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
0113ffb4 7c80b50b 020e6918 00000020 00410178 RPCRT4!I_RpcBCacheFree+0x5d2
0113ffec 00000000 77e76bf0 020e6918 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
000000000113fe1c 99 e3 90 7c 03 67 e7 77 - 88 01 00 00 70 ff 13 01
....|.g.w....p...
000000000113fe2c 00 00 00 00 f8 b1 0b 00 - 4c ff 13 01 0d 0a 47 3d
.........L.....G=
000000000113fe3c 32 34 38 0d 0a 52 3d 32 - 34 38 0d 0a 0d 0a 5b 42
248..R=248....[B
000000000113fe4c 75 74 74 6f 02 30 5d 0d - 00 00 43 6f 6f 72 64 3d
utto.0]...Coord=
000000000113fe5c 32 31 0d 0a 59 43 6f 6f - 72 64 3d 34 0d 0a 41 6c
21..YCoord=4..Al
000000000113fe6c 07 00 00 00 31 0d 0a 41 - 63 74 69 6f 6e 3d 30 0d
.....1..Action=0.
000000000113fe7c 0a 42 75 74 74 6f 6e 49 - 6d 61 67 65 3d 46 6c 79
..ButtonImage=Fly
000000000113fe8c 4f 53 5c 63 74 72 6c 2d - 63 6c 6f 73 65 2e 62 6d
OS\ctrl-close.bm
000000000113fe9c 70 0d 0a 43 6f 6d 62 69 - 6e 65 4f 70 3d 32 0d 0a
p..CombineOp=2..
000000000113feac 46 72 61 6d 65 43 6f 75 - 6e 74 3d 33 0d 0a 56 69
FrameCount=3..Vi
000000000113febc 73 69 62 69 6c 69 74 79 - 3d 31 0d 0a 0d 0a 5b 42
sibility=1....[B
000000000113fecc 75 74 74 6f 6e 31 5d 0d - 0a 41 63 74 69 6f 6e 3d
utton1]..Action=
000000000113fedc 32 32 0d 0a 41 6c 69 67 - 6e 3d 31 0d 0a 58 43 6f
22..Align=1..XCo
000000000113feec 6f 72 64 3d 33 38 0d 0a - 42 75 74 74 6f 6e 49 6d
ord=38..ButtonIm
000000000113fefc 61 67 65 3d 46 6c 79 4f - 53 5c 63 74 72 6c 2d 6d
age=FlyOS\ctrl-m
000000000113ff0c 61 78 2e 62 6d 70 0d 0a - cc 3c f3 89 24 9c 52 b4
ax.bmp...<..$.R.
000000000113ff1c b2 c2 4d 80 ba c2 4d 80 - 9c 3c f3 89 30 3b f3 89
...M...M..<..0;..
000000000113ff2c 64 3b f3 89 80 ff 13 01 - 99 66 e7 77 4c ff 13 01
d;.......f.wL...
000000000113ff3c a9 66 e7 77 ed 10 90 7c - 88 7c 12 00 18 69 0e 02
..f.w...|.|...i..
000000000113ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff
.../M.....]......
*----> Tilstandsdump av tråd med id 0xd28 <----*
eax=00000001 ebx=00004e20 ecx=00fdfcec edx=7c90eb94 esi=00fdfd68
edi=77d391c6
eip=7c90eb94 esp=00fdfcf8 ebp=00fdfd14 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\System32\stobject.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
00fdfd14 76591513 00fdfd68 00000000 00000000 ntdll!KiFastSystemCallRet
00fdfd8c 76593746 76590000 00000000 000105be stobject+0x1513
00fdffb4 7c80b50b 00000000 00000000 00000000 stobject!DllCanUnloadNow+0x1fa4
00fdffec 00000000 765936f7 00000000 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
0000000000fdfcf8 be 91 d3 77 f1 91 d3 77 - 68 fd fd 00 00 00 00 00
....w...wh.......
0000000000fdfd08 00 00 00 00 00 00 00 00 - 00 00 00 00 8c fd fd 00
.................
0000000000fdfd18 13 15 59 76 68 fd fd 00 - 00 00 00 00 00 00 00 00
...Yvh...........
0000000000fdfd28 00 00 00 00 00 00 00 00 - 00 00 59 76 00 00 00 00
...........Yv....
0000000000fdfd38 30 00 00 00 00 40 00 00 - 21 13 59 76 00 00 00 00
0....@..!.Yv....
0000000000fdfd48 1e 00 00 00 00 00 59 76 - fd 03 01 00 11 00 01 00
.......Yv........
0000000000fdfd58 10 00 00 00 00 00 00 00 - f4 31 59 76 00 00 00 00
..........1Yv....
0000000000fdfd68 be 05 01 00 2a c0 00 00 - 04 00 00 00 de 06 1c 00
.....*...........
0000000000fdfd78 92 e2 1d 00 4d 03 00 00 - a3 00 00 00 00 00 00 00
.....M...........
0000000000fdfd88 00 00 00 00 b4 ff fd 00 - 46 37 59 76 00 00 59 76
.........F7Yv..Yv
0000000000fdfd98 00 00 00 00 be 05 01 00 - 01 00 00 00 00 00 00 00
.................
0000000000fdfda8 43 00 3a 00 5c 00 57 00 - 49 00 4e 00 44 00 4f 00
C.:.\.W.I.N.D.O.
0000000000fdfdb8 57 00 53 00 5c 00 53 00 - 79 00 73 00 74 00 65 00
W.S.\.S.y.s.t.e.
0000000000fdfdc8 6d 00 33 00 32 00 5c 00 - 73 00 74 00 6f 00 62 00
m.3.2.\.s.t.o.b.
0000000000fdfdd8 6a 00 65 00 63 00 74 00 - 2e 00 64 00 6c 00 6c 00
j.e.c.t...d.l.l.
0000000000fdfde8 00 00 81 7c 1b 00 00 00 - 00 02 00 00 fc ff fd 00
....|............
0000000000fdfdf8 23 00 00 00 24 00 00 00 - 90 01 00 00 00 00 00 00
#...$...........
0000000000fdfe08 60 00 00 00 60 00 00 00 - 20 00 02 fb 22 20 20 00
`...`... ..." .
0000000000fdfe18 00 00 00 1b 00 00 00 00 - 40 00 10 00 e8 03 00 00
.........@.......
0000000000fdfe28 e8 03 00 00 47 02 00 00 - 00 00 00 00 00 00 00 00
.....G...........
*----> Tilstandsdump av tråd med id 0xefc <----*
eax=72cf30e8 ebx=029afef8 ecx=000000e7 edx=020fd008 esi=00000000
edi=7ffd4000
eip=7c90eb94 esp=029afed0 ebp=029aff6c iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Bakoversøk i stakken <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
029aff6c 7c809c86 00000002 029affa4 00000000 ntdll!KiFastSystemCallRet
029aff88 72cf312a 00000002 029affa4 00000000
kernel32!WaitForMultipleObjects+0x18
029affb4 7c80b50b 00000000 16b723b9 00000000 wdmaud!midMessage+0x348
029affec 00000000 72cf30e8 00000000 00000000
kernel32!GetModuleFileNameA+0x1b4
*----> Ubehandlet stakk dumpet <----*
00000000029afed0 ab e9 90 7c f2 94 80 7c - 02 00 00 00 f8 fe 9a 02
....|...|........
00000000029afee0 01 00 00 00 00 00 00 00 - 00 00 00 00 b9 23 b7 16
..............#..
00000000029afef0 00 00 00 00 00 00 00 00 - dc 05 00 00 80 03 00 00
.................
00000000029aff00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00000000029aff10 00 00 00 00 54 37 73 89 - 14 00 00 00 01 00 00 00
.....T7s.........
00000000029aff20 60 a8 0a 02 00 00 00 00 - 00 00 00 00 ec 35 73 89
`............5s.
00000000029aff30 b2 c2 4d 80 ea b5 57 80 - 00 40 fd 7f 00 60 fd 7f
...M...W..@...`..
00000000029aff40 00 60 fd 7f 00 00 00 00 - f8 fe 9a 02 00 00 00 00
..`..............
00000000029aff50 02 00 00 00 ec fe 9a 02 - 00 00 00 00 dc ff 9a 02
.................
00000000029aff60 f3 99 83 7c 90 95 80 7c - 00 00 00 00 88 ff 9a 02
....|...|........
00000000029aff70 86 9c 80 7c 02 00 00 00 - a4 ff 9a 02 00 00 00 00
....|............
00000000029aff80 ff ff ff ff 00 00 00 00 - b4 ff 9a 02 2a 31 cf 72
.............*1.r
00000000029aff90 02 00 00 00 a4 ff 9a 02 - 00 00 00 00 ff ff ff ff
.................
00000000029affa0 00 00 00 00 dc 05 00 00 - 80 03 00 00 00 00 00 00
.................
00000000029affb0 dc e2 90 7c ec ff 9a 02 - 0b b5 80 7c 00 00 00 00
....|.......|....
00000000029affc0 b9 23 b7 16 00 00 00 00 - 00 00 00 00 00 60 fd 7f
..#...........`..
00000000029affd0 00 76 7b 8a c0 ff 9a 02 - 80 fa 37 8a ff ff ff ff
..v{.......7.....
00000000029affe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00
....|...|........
00000000029afff0 00 00 00 00 e8 30 cf 72 - 00 00 00 00 00 00 00 00
......0.r........
00000000029b0000 02 00 00 00 28 00 00 00 - 6c 29 01 00 b0 4a 01 00
.....(...l)...J..
*----> Tilstandsdump av tråd med id 0xc90 <----*
eax=00000000 ebx=7c9c0068 ecx=00000004 edx=7c9c0068 esi=7c9c8078
edi=206e6920
eip=77f6409d esp=02c4d07c ebp=02c4d088 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
funksjon: SHLWAPI!Ordinal219
77f6408b 56 push esi
77f6408c 57 push edi
77f6408d 8bd3 mov edx,ebx
77f6408f 85c0 test eax,eax
77f64091 8b7510 mov esi,[ebp+0x10]
77f64094 6a04 push 0x4
77f64096 59 pop ecx
77f64097 740f jz SHLWAPI!Ordinal219+0x32 (77f640a8)
77f64099 8bf8 mov edi,eax
77f6409b 33c0 xor eax,eax
FAULT ->77f6409d f3a7 rep cmpsd ds:7c9c8078=01e18d10
es:206e6920=????????
77f6409f 7414 jz SHLWAPI!Ordinal219+0x3f (77f640b5)
77f640a1 83c208 add edx,0x8
77f640a4 8b02 mov eax,[edx]
77f640a6 ebe7 jmp SHLWAPI!Ordinal219+0x19 (77f6408f)
77f640a8 bfd040f677 mov edi,0x77f640d0
77f640ad 33c0 xor eax,eax
77f640af f3a7 rep cmpsd
77f640b1 752d jnz SHLWAPI!Ordinal219+0x6a (77f640e0)
77f640b3 8bd3 mov edx,ebx
77f640b5 8b7204 mov esi,[edx+0x4]
*----> Bakoversøk i stakken <----*
--
regards
Zadig Galbaras
A Perturbed Norwegian Agnostic
-