rendered paste body
Microsoft (R) DrWtsn32
Copyright (C) 1985-2001 Microsoft Corp. All rights reserved.
Application exception occurred:
App: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE (pid=308)
When: 2/19/2007 @ 00:11:22.015
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: NUMBER1
User Name: Administrator
Terminal Session Id: 0
Number of Processors: 1
Processor Type: x86 Family 6 Model 8 Stepping 1
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Uniprocessor Free
Registered Organization:
Registered Owner: Number 1
*----> Task List <----*
0 System Process
4 System
668 smss.exe
744 csrss.exe
772 winlogon.exe
816 services.exe
828 lsass.exe
980 svchost.exe
1056 svchost.exe
1144 svchost.exe
1192 svchost.exe
1236 svchost.exe
1584 spoolsv.exe
1764 Explorer.EXE
1852 avgcc.exe
1536 avgamsvr.exe
1624 avgupsvc.exe
1312 nvsvc32.exe
2040 wdfmgr.exe
1248 alg.exe
484 svchost.exe
236 wuauclt.exe
308 FIREFOX.EXE
3312 drwtsn32.exe
*----> Module List <----*
(0000000000400000 - 0000000000b5a000: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
(0000000003ab0000 - 0000000003c5b000: C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.qtx
(0000000003dc0000 - 0000000003e8f000: C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.qtx
(000000000ffd0000 - 000000000fff8000: C:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 0000000010020000: C:\PROGRA~1\MOZILL~1\plugins\npqtplugin.dll
(0000000020000000 - 00000000202c5000: C:\WINDOWS\system32\xpsp2res.dll
(000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32\uxtheme.dll
(000000005b860000 - 000000005b8b4000: C:\WINDOWS\system32\NETAPI32.dll
(0000000060010000 - 0000000060022000: C:\PROGRA~1\MOZILL~1\components\jar50.dll
(0000000060040000 - 000000006004a000: C:\PROGRA~1\MOZILL~1\components\myspell.dll
(0000000060050000 - 000000006005e000: C:\PROGRA~1\MOZILL~1\components\spellchk.dll
(0000000060090000 - 00000000600c1000: C:\PROGRA~1\MOZILL~1\freebl3.dll
(00000000600d0000 - 0000000060141000: C:\PROGRA~1\MOZILL~1\js3250.dll
(00000000601a0000 - 00000000601c7000: C:\PROGRA~1\MOZILL~1\nspr4.dll
(00000000601d0000 - 000000006022b000: C:\PROGRA~1\MOZILL~1\nss3.dll
(0000000060230000 - 000000006026e000: C:\Program Files\Mozilla Firefox\nssckbi.dll
(0000000060270000 - 0000000060277000: C:\PROGRA~1\MOZILL~1\plc4.dll
(0000000060280000 - 0000000060286000: C:\PROGRA~1\MOZILL~1\plds4.dll
(00000000602a0000 - 00000000602ba000: C:\PROGRA~1\MOZILL~1\smime3.dll
(00000000602c0000 - 00000000602ff000: C:\PROGRA~1\MOZILL~1\softokn3.dll
(0000000060300000 - 0000000060320000: C:\PROGRA~1\MOZILL~1\ssl3.dll
(0000000060330000 - 0000000060344000: C:\PROGRA~1\MOZILL~1\xpcom_compat.dll
(0000000060350000 - 00000000603ba000: C:\PROGRA~1\MOZILL~1\xpcom_core.dll
(00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll
(0000000066800000 - 00000000673b1000: C:\Program Files\QuickTime\QTSystem\QuickTime.qts
(0000000067470000 - 00000000674ae000: C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.qtx
(00000000674d0000 - 0000000067537000: C:\Program Files\QuickTime\QTSystem\QuickTimeVR.qtx
(00000000675a0000 - 0000000067680000: C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.qtx
(0000000067680000 - 0000000067860000: C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.qtx
(0000000067860000 - 00000000678ae000: C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.qtx
(00000000678b0000 - 0000000067938000: C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.qtx
(0000000067950000 - 00000000679db000: C:\Program Files\QuickTime\QTSystem\QuickTimeImage.qtx
(00000000679e0000 - 0000000067a6a000: C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.qtx
(0000000067a70000 - 0000000067aa3000: C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.qtx
(0000000067ab0000 - 0000000067b1b000: C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.qtx
(0000000067b20000 - 0000000067ba9000: C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.qtx
(0000000067bb0000 - 0000000067bfd000: C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.qtx
(0000000067c00000 - 0000000067c76000: C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.qtx
(0000000067c80000 - 0000000067cd2000: C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.qtx
(0000000067ce0000 - 0000000067d4a000: C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.qtx
(0000000067df0000 - 0000000067e44000: C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.qtx
(0000000067e50000 - 0000000067e71000: C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.qtx
(0000000067e80000 - 0000000067fa3000: C:\Program Files\QuickTime\QTSystem\QuickTimeH264.qtx
(0000000068130000 - 000000006814a000: C:\Program Files\QuickTime\QTSystem\CoreVideo.qtx
(0000000071a50000 - 0000000071a8f000: C:\WINDOWS\system32\mswsock.dll
(0000000071a90000 - 0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll
(0000000071aa0000 - 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll
(0000000071ab0000 - 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll
(0000000071ad0000 - 0000000071ad9000: C:\WINDOWS\system32\WSOCK32.dll
(00000000722b0000 - 00000000722b5000: C:\WINDOWS\system32\sensapi.dll
(0000000072d10000 - 0000000072d18000: C:\WINDOWS\system32\msacm32.drv
(0000000072d20000 - 0000000072d29000: C:\WINDOWS\system32\wdmaud.drv
(0000000073000000 - 0000000073026000: C:\WINDOWS\system32\WINSPOOL.DRV
(0000000073760000 - 00000000737a9000: C:\WINDOWS\system32\ddraw.dll
(0000000073bc0000 - 0000000073bc6000: C:\WINDOWS\system32\DCIMAN32.dll
(0000000073ee0000 - 0000000073ee4000: C:\WINDOWS\system32\KsUser.dll
(0000000073f10000 - 0000000073f6c000: C:\WINDOWS\system32\DSOUND.dll
(00000000746f0000 - 000000007471a000: C:\WINDOWS\System32\msimtf.dll
(0000000074720000 - 000000007476b000: C:\WINDOWS\System32\MSCTF.dll
(0000000075cf0000 - 0000000075d81000: C:\WINDOWS\System32\mlang.dll
(0000000076380000 - 0000000076385000: C:\WINDOWS\system32\msimg32.dll
(0000000076390000 - 00000000763ad000: C:\WINDOWS\system32\IMM32.DLL
(00000000763b0000 - 00000000763f9000: C:\WINDOWS\system32\comdlg32.dll
(00000000767f0000 - 0000000076817000: C:\WINDOWS\system32\schannel.dll
(00000000769c0000 - 0000000076a73000: C:\WINDOWS\system32\USERENV.dll
(0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll
(0000000076c30000 - 0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll
(0000000076c90000 - 0000000076cb8000: C:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d60000 - 0000000076d79000: C:\WINDOWS\system32\iphlpapi.dll
(0000000076e80000 - 0000000076e8e000: C:\WINDOWS\system32\rtutils.dll
(0000000076e90000 - 0000000076ea2000: C:\WINDOWS\system32\rasman.dll
(0000000076eb0000 - 0000000076edf000: C:\WINDOWS\system32\TAPI32.dll
(0000000076ee0000 - 0000000076f1c000: C:\WINDOWS\system32\RASAPI32.DLL
(0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fb0000 - 0000000076fb8000: C:\WINDOWS\System32\winrnr.dll
(0000000076fc0000 - 0000000076fc6000: C:\WINDOWS\system32\rasadhlp.dll
(0000000076fd0000 - 000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL
(0000000077050000 - 0000000077115000: C:\WINDOWS\system32\COMRes.dll
(0000000077120000 - 00000000771ac000: C:\WINDOWS\system32\OLEAUT32.dll
(00000000771b0000 - 0000000077256000: C:\WINDOWS\system32\WININET.DLL
(00000000773d0000 - 00000000774d3000: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077920000 - 0000000077a13000: C:\WINDOWS\system32\SETUPAPI.dll
(0000000077a80000 - 0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32\Apphelp.dll
(0000000077bd0000 - 0000000077bd7000: C:\WINDOWS\system32\midimap.dll
(0000000077be0000 - 0000000077bf5000: C:\WINDOWS\system32\MSACM32.dll
(0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32\VERSION.dll
(0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32\msvcrt.dll
(0000000077d40000 - 0000000077dd0000: C:\WINDOWS\system32\USER32.dll
(0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077f10000 - 0000000077f57000: C:\WINDOWS\system32\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\system32\Secur32.dll
(000000007c800000 - 000000007c8f4000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d5000: C:\WINDOWS\system32\SHELL32.dll
*----> State Dump for Thread Id 0x2f0 <----*
eax=057dc8c2 ebx=00000000 ecx=00000018 edx=00000000 esi=30000000 edi=03c75d1f
eip=67ea933c esp=0012ed80 ebp=14131211 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00200206
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\QuickTime\QTSystem\QuickTimeH264.qtx -
function: QuickTimeH264
67ea9320 e689 out 89,al
67ea9322 7424 jz QuickTimeH264+0x29348 (67ea9348)
67ea9324 10894c242c8b adc [ecx+0x8b2c244c],cl
67ea932a 7424 jz QuickTimeH264+0x29350 (67ea9350)
67ea932c 108bcbd3ee83 adc [ebx+0x83eed3cb],cl
67ea9332 fb sti
67ea9333 201b and [ebx],bl
67ea9335 c9 leave
67ea9336 23f1 and esi,ecx
67ea9338 8b4c242c mov ecx,[esp+0x2c]
FAULT ->67ea933c 8b4c8d00 mov ecx,[ebp+ecx*4] ss:0023:14131271=????????
67ea9340 0fb60c0e movzx ecx,byte ptr [esi+ecx]
67ea9344 8bf1 mov esi,ecx
67ea9346 c1e904 shr ecx,0x4
67ea9349 03ca add ecx,edx
67ea934b 8bd9 mov ebx,ecx
67ea934d c1eb03 shr ebx,0x3
67ea9350 8b2c3b mov ebp,[ebx+edi]
67ea9353 83e107 and ecx,0x7
67ea9356 0fcd bswap ebp
67ea9358 d3e5 shl ebp,cl
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
14131211 00000000 00000000 00000000 00000000 QuickTimeH264+0x2933c
*----> Raw Stack Dump <----*
000000000012ed80 80 c5 7d 05 02 00 00 00 - 30 a2 7d 05 c2 c8 7d 05 ..}.....0.}...}.
000000000012ed90 00 00 00 30 05 00 00 00 - c8 ed 12 00 98 00 00 00 ...0............
000000000012eda0 03 00 00 00 00 00 00 00 - fd ff ff ff 18 00 00 00 ................
000000000012edb0 98 39 f9 67 00 00 00 00 - 01 00 00 00 ff ff ff ff .9.g............
000000000012edc0 00 00 00 00 ff ff ff ff - 01 00 00 00 02 00 00 00 ................
000000000012edd0 fc ff ff ff fa ff ff ff - fc ff ff ff fc ff ff ff ................
000000000012ede0 01 00 00 00 02 00 00 00 - fc ff ff ff 1f 00 00 00 ................
000000000012edf0 3c 00 00 00 14 00 00 00 - fc ff ff ff f8 ff ff ff <...............
000000000012ee00 80 c5 7d 05 1e 95 ea 67 - 30 a2 7d 05 c2 c8 7d 05 ..}....g0.}...}.
000000000012ee10 0f 00 00 00 02 00 00 00 - 80 c5 7d 05 00 cf 7d 05 ..........}...}.
000000000012ee20 00 d0 7d 05 0f 00 00 00 - 30 a2 7d 05 60 c5 7d 05 ..}.....0.}.`.}.
000000000012ee30 00 00 00 00 00 d0 7d 05 - 00 cf 7d 05 10 00 00 00 ......}...}.....
000000000012ee40 f7 a2 ea 67 30 a2 7d 05 - 00 00 00 00 70 c5 7d 05 ...g0.}.....p.}.
000000000012ee50 f0 ce 7d 05 f0 cf 7d 05 - 0f 00 00 00 02 00 00 00 ..}...}.........
000000000012ee60 60 c6 7d 05 09 01 00 00 - 50 00 78 05 30 a2 7d 05 `.}.....P.x.0.}.
000000000012ee70 12 00 00 00 01 00 00 00 - 60 c6 7d 05 a8 a8 7d 05 ........`.}...}.
000000000012ee80 00 00 00 00 00 00 00 00 - 01 00 00 00 6c 17 e9 67 ............l..g
000000000012ee90 0f 00 00 00 02 00 00 00 - 96 00 00 00 e0 ca 7d 05 ..............}.
000000000012eea0 08 01 00 00 44 a2 7d 05 - 00 e1 68 05 84 2f 73 05 ....D.}...h../s.
000000000012eeb0 a8 a8 7d 05 12 00 00 00 - 14 00 00 00 12 00 00 00 ..}.............
*----> State Dump for Thread Id 0xb0 <----*
eax=77c3a341 ebx=0027905c ecx=000000d6 edx=435c0073 esi=000000f0 edi=00000000
eip=7c90eb94 esp=010ffe60 ebp=010ffec4 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll -
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\PROGRA~1\MOZILL~1\nspr4.dll -
ChildEBP RetAddr Args to Child
010ffec4 7c802532 000000f0 0000ea60 00000000 ntdll!KiFastSystemCallRet
010ffed8 601b848c 000000f0 0000ea60 00279040 kernel32!WaitForSingleObject+0x12
0000ea60 00000000 00000000 00000000 00000000 nspr4!PR_MD_WAIT_CV+0x5c
*----> Raw Stack Dump <----*
00000000010ffe60 c0 e9 90 7c cb 25 80 7c - f0 00 00 00 00 00 00 00 ...|.%.|........
00000000010ffe70 94 fe 0f 01 44 91 27 00 - f0 91 27 00 5c 90 27 00 ....D.'...'.\.'.
00000000010ffe80 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000010ffe90 10 00 00 00 00 ba 3c dc - ff ff ff ff 00 50 fd 7f ......<......P..
00000000010ffea0 00 e0 fd 7f 94 fe 0f 01 - 58 a0 27 00 74 fe 0f 01 ........X.'.t...
00000000010ffeb0 00 00 00 00 a4 ff 0f 01 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
00000000010ffec0 00 00 00 00 d8 fe 0f 01 - 32 25 80 7c f0 00 00 00 ........2%.|....
00000000010ffed0 60 ea 00 00 00 00 00 00 - 60 ea 00 00 8c 84 1b 60 `.......`......`
00000000010ffee0 f0 00 00 00 60 ea 00 00 - 40 90 27 00 f0 91 27 00 ....`...@.'...'.
00000000010ffef0 54 ff 0f 01 00 00 00 00 - cc 48 1b 60 44 91 27 00 T........H.`D.'.
00000000010fff00 5c 90 27 00 60 ea 00 00 - 40 90 27 00 60 ea 00 00 \.'.`...@.'.`...
00000000010fff10 13 4a 1b 60 f0 91 27 00 - d0 90 27 00 40 90 27 00 .J.`..'...'.@.'.
00000000010fff20 60 ea 00 00 80 4c 1b 60 - 06 35 38 60 d0 90 27 00 `....L.`.58`..'.
00000000010fff30 60 ea 00 00 9c 92 27 00 - 14 8f 27 00 c8 93 27 00 `.....'...'...'.
00000000010fff40 08 8f 27 00 b4 ff 0f 01 - c8 93 27 00 11 e2 37 60 ..'.......'...7`
00000000010fff50 60 a0 27 00 b4 ff 0f 01 - b6 dd 37 60 74 37 3b 60 `.'.......7`t7;`
00000000010fff60 f0 91 27 00 e1 52 1b 60 - 08 8f 27 00 50 44 27 00 ..'..R.`..'.PD'.
00000000010fff70 50 44 27 00 00 00 00 00 - d0 9f 27 00 9b 72 1b 60 PD'.......'..r.`
00000000010fff80 f0 91 27 00 b0 a3 c3 77 - f0 91 27 00 00 00 00 00 ..'....w..'.....
00000000010fff90 d6 00 08 02 c8 93 27 00 - 00 00 00 00 8c ff 0f 01 ......'.........
*----> State Dump for Thread Id 0x534 <----*
eax=0130fe3c ebx=c0000000 ecx=00000019 edx=0130fe3c esi=00000000 edi=71a87558
eip=7c90eb94 esp=0130ff7c ebp=0130ffb4 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0130ffb4 7c80b683 71a5d8ec 0012f41c 7c90ee18 ntdll!KiFastSystemCallRet
0130ffec 00000000 71a5d5af 00172a18 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000130ff7c 1b e3 90 7c 09 d6 a5 71 - 78 01 00 00 bc ff 30 01 ...|...qx.....0.
000000000130ff8c b0 ff 30 01 a4 ff 30 01 - 50 d6 a5 71 1c f4 12 00 ..0...0.P..q....
000000000130ff9c 18 ee 90 7c 18 2a 17 00 - 00 00 00 00 00 00 00 00 ...|.*..........
000000000130ffac 00 00 a5 71 f8 56 99 02 - ec ff 30 01 83 b6 80 7c ...q.V....0....|
000000000130ffbc ec d8 a5 71 1c f4 12 00 - 18 ee 90 7c 18 2a 17 00 ...q.......|.*..
000000000130ffcc 00 d0 fd 7f 00 d6 8f 89 - c0 ff 30 01 90 ac 25 89 ..........0...%.
000000000130ffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|....
000000000130ffec 00 00 00 00 00 00 00 00 - af d5 a5 71 18 2a 17 00 ...........q.*..
000000000130fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000131000c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000131001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000131002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000131003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000131004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000131005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000131006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000131007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000131008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000131009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000013100ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
*----> State Dump for Thread Id 0xb84 <----*
eax=00000000 ebx=00172be8 ecx=00000000 edx=0247768c esi=7fffffff edi=ffffffff
eip=7c90eb94 esp=0140cd24 ebp=0140cd60 iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000293
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\mswsock.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\WS2_32.dll -
ChildEBP RetAddr Args to Child
0140cd60 71a55fa7 000001c8 00000170 00000000 ntdll!KiFastSystemCallRet
0140ce54 71ab2e67 00000000 0140df00 00000000 mswsock+0x5fa7
0140cea4 601b9f79 00000000 0140df00 00000000 WS2_32!select+0xa7
00000000 00000000 00000000 00000000 00000000 nspr4!PR_MD_UNLOCK+0x1769
*----> Raw Stack Dump <----*
000000000140cd24 c0 e9 90 7c 33 40 a5 71 - c8 01 00 00 01 00 00 00 ...|3@.q........
000000000140cd34 4c cd 40 01 04 ce 40 01 - 00 df 40 01 f4 cd 40 01 L.@...@...@...@.
000000000140cd44 66 62 4d 84 fd 53 c7 01 - ff ff ff ff ff ff ff 7f fbM..S..........
000000000140cd54 e8 2b 17 00 00 00 00 00 - 00 00 00 00 54 ce 40 01 .+..........T.@.
000000000140cd64 a7 5f a5 71 c8 01 00 00 - 70 01 00 00 00 00 00 00 ._.q....p.......
000000000140cd74 04 00 00 00 00 00 00 00 - 48 29 17 00 00 00 00 00 ........H)......
000000000140cd84 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000140cd94 01 00 00 00 80 96 18 6a - 67 ff ff ff ff ff ff ff .......jg.......
000000000140cda4 00 00 00 00 1c 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000140cdb4 00 00 00 00 73 de 80 7c - a8 74 16 00 00 00 00 00 ....s..|.t......
000000000140cdc4 88 ce 40 01 bc cd 40 01 - 00 00 00 00 1c 00 00 00 ..@...@.........
000000000140cdd4 e8 2b 17 00 10 ce 40 01 - 00 00 00 00 00 00 00 00 .+....@.........
000000000140cde4 00 00 00 00 f4 cd 40 01 - 00 00 00 00 00 00 00 00 ......@.........
000000000140cdf4 ff ff ff ff ff ff ff 7f - 01 00 00 00 00 00 00 00 ................
000000000140ce04 70 01 00 00 19 00 00 00 - 00 00 00 00 30 07 00 00 p...........0...
000000000140ce14 19 00 00 00 a8 74 16 00 - 30 07 00 00 02 01 00 00 .....t..0.......
000000000140ce24 3c ce 40 01 4c 03 00 00 - 02 01 00 00 a8 74 16 00 <.@.L........t..
000000000140ce34 64 ce 40 01 5f 06 00 00 - 78 cd 40 01 0c 15 aa 71 d.@._...x.@....q
000000000140ce44 94 ce 40 01 c8 71 a7 71 - 68 2e a5 71 ff ff ff ff ..@..q.qh..q....
000000000140ce54 a4 ce 40 01 67 2e ab 71 - 00 00 00 00 00 df 40 01 ..@.g..q......@.
*----> State Dump for Thread Id 0x9ac <----*
eax=77c3a341 ebx=0151fe80 ecx=0012f5e0 edx=0012f83c esi=00000000 edi=7ffd5000
eip=7c90eb94 esp=0151fe58 ebp=0151fef4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\PROGRA~1\MOZILL~1\xpcom_core.dll -
ChildEBP RetAddr Args to Child
0151fef4 7c80a075 00000002 0151ff48 00000000 ntdll!KiFastSystemCallRet
0151ff10 004a7948 00000002 0151ff48 00000000 kernel32!WaitForMultipleObjects+0x18
0151ff54 6037ddb6 01126cc4 01126eb0 601b52e1 FIREFOX!nsRegionRectIterator__operator=+0xde73
0151ffb4 7c80b683 01127030 7c97c174 00000008 xpcom_core!nsServiceManager__UnregisterService+0x196b
0151ffec 00000000 77c3a341 01127030 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000151fe58 ab e9 90 7c e2 94 80 7c - 02 00 00 00 80 fe 51 01 ...|...|......Q.
000000000151fe68 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000151fe78 dc 01 00 00 00 00 00 00 - dc 01 00 00 cc 01 00 00 ................
000000000151fe88 d4 fe 51 01 18 ee 90 7c - a0 01 00 00 e5 03 00 00 ..Q....|........
000000000151fe98 a8 fe 51 01 82 93 80 7c - 14 00 00 00 01 00 00 00 ..Q....|........
000000000151fea8 00 00 00 00 00 00 00 00 - 10 00 00 00 a0 01 00 00 ................
000000000151feb8 79 9e 80 7c 00 00 00 00 - 00 50 fd 7f 00 b0 fd 7f y..|.....P......
000000000151fec8 03 01 00 00 00 00 00 00 - 80 fe 51 01 a4 ff 51 01 ..........Q...Q.
000000000151fed8 02 00 00 00 74 fe 51 01 - ff ff ff ff a4 ff 51 01 ....t.Q.......Q.
000000000151fee8 a8 9a 83 7c d8 95 80 7c - 00 00 00 00 10 ff 51 01 ...|...|......Q.
000000000151fef8 75 a0 80 7c 02 00 00 00 - 48 ff 51 01 00 00 00 00 u..|....H.Q.....
000000000151ff08 ff ff ff ff 00 00 00 00 - 54 ff 51 01 48 79 4a 00 ........T.Q.HyJ.
000000000151ff18 02 00 00 00 48 ff 51 01 - 00 00 00 00 ff ff ff ff ....H.Q.........
000000000151ff28 5c 6f 12 01 9c 6e 12 01 - 30 70 12 01 03 01 00 00 \o...n..0p......
000000000151ff38 00 00 00 00 00 00 00 00 - 00 00 00 00 dc 01 00 00 ................
000000000151ff48 dc 01 00 00 cc 01 00 00 - a0 01 00 00 b4 ff 51 01 ..............Q.
000000000151ff58 b6 dd 37 60 c4 6c 12 01 - b0 6e 12 01 e1 52 1b 60 ..7`.l...n...R.`
000000000151ff68 90 6e 12 01 50 44 27 00 - 50 44 27 00 74 c1 97 7c .n..PD'.PD'.t..|
000000000151ff78 28 c9 53 01 9b 72 1b 60 - b0 6e 12 01 b0 a3 c3 77 (.S..r.`.n.....w
000000000151ff88 b0 6e 12 01 74 c1 97 7c - 08 00 00 00 30 70 12 01 .n..t..|....0p..
*----> State Dump for Thread Id 0xac0 <----*
eax=00000001 ebx=002787fc ecx=00000003 edx=00000000 esi=000001e4 edi=00000000
eip=7c90eb94 esp=0188fe70 ebp=0188fed4 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0188fed4 7c802532 000001e4 00001220 00000000 ntdll!KiFastSystemCallRet
0188fee8 601b848c 000001e4 00001220 002787e0 kernel32!WaitForSingleObject+0x12
00001220 00000000 00000000 00000000 00000000 nspr4!PR_MD_WAIT_CV+0x5c
*----> Raw Stack Dump <----*
000000000188fe70 c0 e9 90 7c cb 25 80 7c - e4 01 00 00 00 00 00 00 ...|.%.|........
000000000188fe80 a4 fe 88 01 ec 8e 27 00 - 50 c6 1a 01 fc 87 27 00 ......'.P.....'.
000000000188fe90 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000188fea0 10 00 00 00 00 fe 3b fd - ff ff ff ff 00 50 fd 7f ......;......P..
000000000188feb0 00 a0 fd 7f a4 fe 88 01 - 00 00 00 00 84 fe 88 01 ................
000000000188fec0 00 00 00 00 a4 ff 88 01 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
000000000188fed0 00 00 00 00 e8 fe 88 01 - 32 25 80 7c e4 01 00 00 ........2%.|....
000000000188fee0 20 12 00 00 00 00 00 00 - 20 12 00 00 8c 84 1b 60 ....... ......`
000000000188fef0 e4 01 00 00 20 12 00 00 - e0 87 27 00 50 c6 1a 01 .... .....'.P...
000000000188ff00 48 7e 27 00 e0 87 27 00 - cc 48 1b 60 ec 8e 27 00 H~'...'..H.`..'.
000000000188ff10 fc 87 27 00 20 12 00 00 - 48 c2 6a 01 20 12 00 00 ..'. ...H.j. ...
000000000188ff20 13 4a 1b 60 50 c6 1a 01 - 78 8e 27 00 e0 87 27 00 .J.`P...x.'...'.
000000000188ff30 20 12 00 00 20 7e 27 00 - a8 12 38 60 78 8e 27 00 ... ~'...8`x.'.
000000000188ff40 20 12 00 00 fc c6 1a 01 - d4 ef 57 01 b4 ff 88 01 .........W.....
000000000188ff50 60 c8 1a 01 20 12 00 00 - b6 dd 37 60 60 72 06 07 `... .....7``r..
000000000188ff60 50 c6 1a 01 e1 52 1b 60 - c8 ef 57 01 50 44 27 00 P....R.`..W.PD'.
000000000188ff70 50 44 27 00 4d 6f 7a 69 - f0 fa 1c 01 9b 72 1b 60 PD'.Mozi.....r.`
000000000188ff80 50 c6 1a 01 b0 a3 c3 77 - 50 c6 1a 01 4d 6f 7a 69 P......wP...Mozi
000000000188ff90 6c 6c 61 20 60 c8 1a 01 - 00 00 00 00 8c ff 88 01 lla `...........
000000000188ffa0 81 a8 4f 80 dc ff 88 01 - 94 5c c3 77 d8 40 c1 77 ..O......\.w.@.w
*----> State Dump for Thread Id 0xadc <----*
eax=01146d80 ebx=0165b95c ecx=00000000 edx=7c90eb94 esi=00000214 edi=00000000
eip=7c90eb94 esp=0198fe78 ebp=0198fedc iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0198fedc 7c802532 00000214 0000ea60 00000000 ntdll!KiFastSystemCallRet
0198fef0 601b848c 00000214 0000ea60 0165b940 kernel32!WaitForSingleObject+0x12
0000ea60 00000000 00000000 00000000 00000000 nspr4!PR_MD_WAIT_CV+0x5c
*----> Raw Stack Dump <----*
000000000198fe78 c0 e9 90 7c cb 25 80 7c - 14 02 00 00 00 00 00 00 ...|.%.|........
000000000198fe88 ac fe 98 01 44 ba 65 01 - f8 99 62 01 5c b9 65 01 ....D.e...b.\.e.
000000000198fe98 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000198fea8 10 00 00 00 00 ba 3c dc - ff ff ff ff 00 50 fd 7f ......<......P..
000000000198feb8 00 90 fd 7f ac fe 98 01 - 18 ee 90 7c 8c fe 98 01 ...........|....
000000000198fec8 ff ff ff ff a4 ff 98 01 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
000000000198fed8 00 00 00 00 f0 fe 98 01 - 32 25 80 7c 14 02 00 00 ........2%.|....
000000000198fee8 60 ea 00 00 00 00 00 00 - 60 ea 00 00 8c 84 1b 60 `.......`......`
000000000198fef8 14 02 00 00 60 ea 00 00 - 40 b9 65 01 f8 99 62 01 ....`...@.e...b.
000000000198ff08 60 ea 00 00 28 b9 65 01 - cc 48 1b 60 44 ba 65 01 `...(.e..H.`D.e.
000000000198ff18 5c b9 65 01 60 ea 00 00 - 08 b9 65 01 60 ea 00 00 \.e.`.....e.`...
000000000198ff28 13 4a 1b 60 f8 99 62 01 - d0 b9 65 01 40 b9 65 01 .J.`..b...e.@.e.
000000000198ff38 60 ea 00 00 28 b9 65 01 - 46 c5 48 00 d0 b9 65 01 `...(.e.F.H...e.
000000000198ff48 60 ea 00 00 a4 9a 62 01 - f8 99 62 01 b4 ff 98 01 `.....b...b.....
000000000198ff58 00 be 65 01 40 b9 65 01 - 08 b9 65 01 e1 52 1b 60 ..e.@.e...e..R.`
000000000198ff68 3c 4b 06 07 50 44 27 00 - 50 44 27 00 62 3e 91 7c <K..PD'.PD'.b>.|
000000000198ff78 d0 8d 61 01 9b 72 1b 60 - f8 99 62 01 b0 a3 c3 77 ..a..r.`..b....w
000000000198ff88 f8 99 62 01 62 3e 91 7c - 08 02 00 00 00 be 65 01 ..b.b>.|......e.
000000000198ff98 00 00 00 00 8c ff 98 01 - 81 a8 4f 80 dc ff 98 01 ..........O.....
000000000198ffa8 94 5c c3 77 d8 40 c1 77 - 00 00 00 00 ec ff 98 01 .\.w.@.w........
*----> State Dump for Thread Id 0xb80 <----*
eax=77e76bf0 ebx=00000000 ecx=00000009 edx=7c910732 esi=00153130 edi=001531d4
eip=7c90eb94 esp=01a8fe1c ebp=01a8ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
01a8ff80 77e76c22 01a8ffa8 77e76a3b 00153130 ntdll!KiFastSystemCallRet
01a8ff88 77e76a3b 00153130 00000000 0012e898 RPCRT4!I_RpcBCacheFree+0x5ea
01a8ffa8 77e76c0a 001605d0 01a8ffec 7c80b683 RPCRT4!I_RpcBCacheFree+0x403
01a8ffb4 7c80b683 00175ee0 00000000 0012e898 RPCRT4!I_RpcBCacheFree+0x5d2
01a8ffec 00000000 77e76bf0 00175ee0 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
0000000001a8fe1c 99 e3 90 7c 03 67 e7 77 - 28 02 00 00 70 ff a8 01 ...|.g.w(...p...
0000000001a8fe2c 00 00 00 00 b8 85 17 00 - 54 ff a8 01 65 63 74 46 ........T...ectF
0000000001a8fe3c 44 00 69 6e 69 74 00 69 - 6e 69 74 46 72 6f 6d 50 D.init.initFromP
0000000001a8fe4c 52 54 68 72 65 61 64 00 - 69 6e 69 74 46 72 6f 6d RThread.initFrom
0000000001a8fe5c 50 4c 51 75 65 75 65 00 - 65 6e 74 65 72 4d 6f 6e PLQueue.enterMon
0000000001a8fe6c 69 74 6f 72 00 65 78 69 - 74 4d 6f 6e 69 74 6f 72 itor.exitMonitor
0000000001a8fe7c 00 72 65 76 6f 6b 65 45 - 76 65 6e 74 73 00 67 65 .revokeEvents.ge
0000000001a8fe8c 74 50 4c 45 76 65 6e 74 - 51 75 65 75 65 00 69 73 tPLEventQueue.is
0000000001a8fe9c 51 75 65 75 65 4e 61 74 - 69 76 65 00 73 74 6f 70 QueueNative.stop
0000000001a8feac 41 63 63 65 70 74 69 6e - 67 45 76 65 6e 74 73 00 AcceptingEvents.
0000000001a8febc 6e 73 49 52 44 46 49 6e - 4d 65 6d 6f 72 79 44 61 nsIRDFInMemoryDa
0000000001a8fecc 74 61 53 6f 75 72 63 65 - 00 00 25 00 01 00 00 00 taSource..%.....
0000000001a8fedc 77 6c 01 80 92 05 3a 00 - 06 00 00 80 45 6e 73 75 wl....:.....Ensu
0000000001a8feec 72 65 46 61 73 74 43 6f - 6e 74 61 69 6e 6d 65 6e reFastContainmen
0000000001a8fefc 74 00 6e 73 49 54 6f 6f - 6c 6b 69 74 00 00 25 00 t.nsIToolkit..%.
0000000001a8ff0c 01 00 00 00 77 9e 01 80 - bc 71 17 89 24 1c 07 b3 ....w....q..$...
0000000001a8ff1c b2 c2 4d 80 ba c2 4d 80 - 8c 71 17 89 20 70 17 89 ..M...M..q.. p..
0000000001a8ff2c 54 70 17 89 80 ff a8 01 - 99 66 e7 77 4c ff a8 01 Tp.......f.wL...
0000000001a8ff3c a9 66 e7 77 ed 10 90 7c - 90 5b 17 00 e0 5e 17 00 .f.w...|.[...^..
0000000001a8ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......
*----> State Dump for Thread Id 0xfb0 <----*
eax=774fe429 ebx=00007530 ecx=7ffd5000 edx=00000000 esi=00000000 edi=01b8ff50
eip=7c90eb94 esp=01b8ff20 ebp=01b8ff78 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ole32.dll -
ChildEBP RetAddr Args to Child
01b8ff78 7c802451 0000ea60 00000000 01b8ffb4 ntdll!KiFastSystemCallRet
01b8ff88 774fe31d 0000ea60 001786c0 774fe3dc kernel32!Sleep+0xf
01b8ffb4 7c80b683 001786c0 7c910945 7c91094e ole32!StringFromGUID2+0x51b
01b8ffec 00000000 774fe429 001786c0 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
0000000001b8ff20 5c d8 90 7c ed 23 80 7c - 00 00 00 00 50 ff b8 01 \..|.#.|....P...
0000000001b8ff30 40 25 80 7c f8 6d 60 77 - 30 75 00 00 14 00 00 00 @%.|.m`w0u......
0000000001b8ff40 01 00 00 00 00 00 00 00 - 00 00 00 00 10 00 00 00 ................
0000000001b8ff50 00 ba 3c dc ff ff ff ff - 00 d1 4e 77 50 ff b8 01 ..<.......NwP...
0000000001b8ff60 30 ff b8 01 98 4f 15 00 - dc ff b8 01 a8 9a 83 7c 0....O.........|
0000000001b8ff70 58 24 80 7c 00 00 00 00 - 88 ff b8 01 51 24 80 7c X$.|........Q$.|
0000000001b8ff80 60 ea 00 00 00 00 00 00 - b4 ff b8 01 1d e3 4f 77 `.............Ow
0000000001b8ff90 60 ea 00 00 c0 86 17 00 - dc e3 4f 77 00 00 00 00 `.........Ow....
0000000001b8ffa0 45 09 91 7c c0 86 17 00 - 00 00 4e 77 44 e4 4f 77 E..|......NwD.Ow
0000000001b8ffb0 4e 09 91 7c ec ff b8 01 - 83 b6 80 7c c0 86 17 00 N..|.......|....
0000000001b8ffc0 45 09 91 7c 4e 09 91 7c - c0 86 17 00 00 70 fd 7f E..|N..|.....p..
0000000001b8ffd0 00 d6 8f 89 c0 ff b8 01 - 18 33 07 89 ff ff ff ff .........3......
0000000001b8ffe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
0000000001b8fff0 00 00 00 00 29 e4 4f 77 - c0 86 17 00 00 00 00 00 ....).Ow........
0000000001b90000 08 00 00 00 00 01 00 03 - ee ff ee ff 00 00 00 00 ................
0000000001b90010 00 00 27 00 00 00 00 00 - 00 00 b9 01 00 04 00 00 ..'.............
0000000001b90020 40 00 b9 01 00 00 f9 01 - 00 00 00 00 00 00 00 00 @...............
0000000001b90030 00 00 00 00 00 00 00 00 - 40 00 b9 01 00 00 00 00 ........@.......
0000000001b90040 51 00 08 00 e6 01 0c 03 - 40 05 a4 00 40 9b 39 60 Q.......@...@.9`
0000000001b90050 68 ea c7 01 00 00 00 00 - 05 00 00 00 a0 82 63 01 h.............c.
*----> State Dump for Thread Id 0x26c <----*
eax=00000102 ebx=01e247fc ecx=0208fe78 edx=7c90eb94 esi=00000268 edi=00000000
eip=7c90eb94 esp=0208fe78 ebp=0208fedc iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0208fedc 7c802532 00000268 000000fa 00000000 ntdll!KiFastSystemCallRet
0208fef0 601b848c 00000268 000000fa 01e247e0 kernel32!WaitForSingleObject+0x12
000000fa 00000000 00000000 00000000 00000000 nspr4!PR_MD_WAIT_CV+0x5c
*----> Raw Stack Dump <----*
000000000208fe78 c0 e9 90 7c cb 25 80 7c - 68 02 00 00 00 00 00 00 ...|.%.|h.......
000000000208fe88 ac fe 08 02 e4 48 e2 01 - 18 60 e2 01 fc 47 e2 01 .....H...`...G..
000000000208fe98 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000208fea8 10 00 00 00 60 da d9 ff - ff ff ff ff 00 50 fd 7f ....`........P..
000000000208feb8 00 60 fd 7f ac fe 08 02 - 02 01 00 00 8c fe 08 02 .`..............
000000000208fec8 7d 00 30 00 a4 ff 08 02 - a8 9a 83 7c f8 25 80 7c }.0........|.%.|
000000000208fed8 00 00 00 00 f0 fe 08 02 - 32 25 80 7c 68 02 00 00 ........2%.|h...
000000000208fee8 fa 00 00 00 00 00 00 00 - fa 00 00 00 8c 84 1b 60 ...............`
000000000208fef8 68 02 00 00 fa 00 00 00 - e0 47 e2 01 18 60 e2 01 h........G...`..
000000000208ff08 00 00 00 00 60 4c 1b 60 - cc 48 1b 60 e4 48 e2 01 ....`L.`.H.`.H..
000000000208ff18 fc 47 e2 01 fa 00 00 00 - e0 47 e2 01 fa 00 00 00 .G.......G......
000000000208ff28 13 4a 1b 60 18 60 e2 01 - 70 48 e2 01 e0 47 e2 01 .J.`.`..pH...G..
000000000208ff38 fa 00 00 00 b8 47 e2 01 - 53 94 87 00 70 48 e2 01 .....G..S...pH..
000000000208ff48 fa 00 00 00 c4 60 e2 01 - 18 60 e2 01 b4 ff 08 02 .....`...`......
000000000208ff58 60 61 e2 01 00 00 00 00 - b8 47 e2 01 e1 52 1b 60 `a.......G...R.`
000000000208ff68 b8 47 e2 01 50 44 27 00 - 50 44 27 00 10 d8 12 00 .G..PD'.PD'.....
000000000208ff78 78 65 e2 01 9b 72 1b 60 - 18 60 e2 01 b0 a3 c3 77 xe...r.`.`.....w
000000000208ff88 18 60 e2 01 10 d8 12 00 - d0 1a 17 00 60 61 e2 01 .`..........`a..
000000000208ff98 00 00 00 00 8c ff 08 02 - 81 a8 4f 80 dc ff 08 02 ..........O.....
000000000208ffa8 94 5c c3 77 d8 40 c1 77 - 00 00 00 00 ec ff 08 02 .\.w.@.w........
*----> State Dump for Thread Id 0xc70 <----*
eax=00000000 ebx=01e2620c ecx=00000000 edx=00000000 esi=00000270 edi=00000000
eip=7c90eb94 esp=0218fe7c ebp=0218fee0 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0218fee0 7c802532 00000270 000000fa 00000000 ntdll!KiFastSystemCallRet
0218fef4 601b848c 00000270 000000fa 01e261f0 kernel32!WaitForSingleObject+0x12
000000fa 00000000 00000000 00000000 00000000 nspr4!PR_MD_WAIT_CV+0x5c
*----> Raw Stack Dump <----*
000000000218fe7c c0 e9 90 7c cb 25 80 7c - 70 02 00 00 00 00 00 00 ...|.%.|p.......
000000000218fe8c b0 fe 18 02 f4 62 e2 01 - 10 63 e2 01 0c 62 e2 01 .....b...c...b..
000000000218fe9c 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000218feac 10 00 00 00 60 da d9 ff - ff ff ff ff 00 50 fd 7f ....`........P..
000000000218febc 00 40 fd 7f b0 fe 18 02 - 02 01 00 00 90 fe 18 02 .@..............
000000000218fecc 6d 6f 75 73 a4 ff 18 02 - a8 9a 83 7c f8 25 80 7c mous.......|.%.|
000000000218fedc 00 00 00 00 f4 fe 18 02 - 32 25 80 7c 70 02 00 00 ........2%.|p...
000000000218feec fa 00 00 00 00 00 00 00 - fa 00 00 00 8c 84 1b 60 ...............`
000000000218fefc 70 02 00 00 fa 00 00 00 - f0 61 e2 01 10 63 e2 01 p........a...c..
000000000218ff0c 80 4c 1b 60 60 4c 1b 60 - cc 48 1b 60 f4 62 e2 01 .L.``L.`.H.`.b..
000000000218ff1c 0c 62 e2 01 fa 00 00 00 - f0 61 e2 01 fa 00 00 00 .b.......a......
000000000218ff2c 13 4a 1b 60 10 63 e2 01 - 80 62 e2 01 f0 61 e2 01 .J.`.c...b...a..
000000000218ff3c fa 00 00 00 b0 c6 e1 01 - cf 88 87 00 80 62 e2 01 .............b..
000000000218ff4c fa 00 00 00 bc 63 e2 01 - 10 63 e2 01 b4 ff 18 02 .....c...c......
000000000218ff5c e8 64 e2 01 fa 00 00 00 - e1 52 1b 60 b0 c6 e1 01 .d.......R.`....
000000000218ff6c 50 44 27 00 50 44 27 00 - 10 d8 12 00 f0 85 dd 01 PD'.PD'.........
000000000218ff7c 9b 72 1b 60 10 63 e2 01 - b0 a3 c3 77 10 63 e2 01 .r.`.c.....w.c..
000000000218ff8c 10 d8 12 00 d0 1a 17 00 - e8 64 e2 01 00 00 00 00 .........d......
000000000218ff9c 8c ff 18 02 81 a8 4f 80 - dc ff 18 02 94 5c c3 77 ......O......\.w
000000000218ffac d8 40 c1 77 00 00 00 00 - ec ff 18 02 83 b6 80 7c .@.w...........|
*----> State Dump for Thread Id 0xae0 <----*
eax=00000000 ebx=01f15e04 ecx=0000000f edx=01f15e04 esi=000002d4 edi=00000000
eip=7c90eb94 esp=02b8fd20 ebp=02b8fd84 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
02b8fd84 7c802532 000002d4 ffffffff 00000000 ntdll!KiFastSystemCallRet
02b8fd98 601b848c 000002d4 ffffffff 01f15de8 kernel32!WaitForSingleObject+0x12
ffffffff 00000000 00000000 00000000 00000000 nspr4!PR_MD_WAIT_CV+0x5c
*----> Raw Stack Dump <----*
0000000002b8fd20 c0 e9 90 7c cb 25 80 7c - d4 02 00 00 00 00 00 00 ...|.%.|........
0000000002b8fd30 00 00 00 00 9c bd d3 01 - b8 5b f2 01 04 5e f1 01 .........[...^..
0000000002b8fd40 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000002b8fd50 10 00 00 00 8c fd b8 02 - 00 e0 fa 7f 00 50 fd 7f .............P..
0000000002b8fd60 00 e0 fa 7f 00 00 00 00 - 0f 24 80 7c 34 fd b8 02 .........$.|4...
0000000002b8fd70 00 00 00 00 a4 ff b8 02 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
0000000002b8fd80 00 00 00 00 98 fd b8 02 - 32 25 80 7c d4 02 00 00 ........2%.|....
0000000002b8fd90 ff ff ff ff 00 00 00 00 - ff ff ff ff 8c 84 1b 60 ...............`
0000000002b8fda0 d4 02 00 00 ff ff ff ff - e8 5d f1 01 b8 5b f2 01 .........]...[..
0000000002b8fdb0 48 ff b8 02 00 00 00 00 - cc 48 1b 60 9c bd d3 01 H........H.`....
0000000002b8fdc0 04 5e f1 01 ff ff ff ff - 00 00 00 00 ff ff ff ff .^..............
0000000002b8fdd0 13 4a 1b 60 b8 5b f2 01 - 28 bd d3 01 e8 5d f1 01 .J.`.[..(....]..
0000000002b8fde0 ff ff ff ff 00 00 00 00 - 1f 73 45 00 28 bd d3 01 .........sE.(...
0000000002b8fdf0 ff ff ff ff 64 5c f2 01 - 94 f8 1a 02 80 53 f1 01 ....d\.......S..
0000000002b8fe00 88 d1 17 00 dc 59 f1 01 - b8 5a 09 b3 c2 03 00 00 .....Y...Z......
0000000002b8fe10 40 5c 09 b3 24 fe b8 02 - 00 00 00 00 c8 05 91 7c @\..$..........|
0000000002b8fe20 b8 59 f1 01 f0 fe b8 02 - 51 05 91 7c e8 09 27 00 .Y......Q..|..'.
0000000002b8fe30 6d 05 91 7c 64 5c f2 01 - c0 59 f1 01 80 53 f1 01 m..|d\...Y...S..
0000000002b8fe40 00 00 00 00 23 a9 38 b9 - 00 4b 6b 89 b8 3c 13 89 ....#.8..Kk..<..
0000000002b8fe50 30 a0 38 b9 08 84 17 89 - 28 00 00 00 6c fe b8 02 0.8.....(...l...
*----> State Dump for Thread Id 0xfd0 <----*
eax=02728000 ebx=0165b95c ecx=02cafb1c edx=00001000 esi=00000304 edi=00000000
eip=7c90eb94 esp=02cafe78 ebp=02cafedc iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
02cafedc 7c802532 00000304 0000ea60 00000000 ntdll!KiFastSystemCallRet
02cafef0 601b848c 00000304 0000ea60 0165b940 kernel32!WaitForSingleObject+0x12
0000ea60 00000000 00000000 00000000 00000000 nspr4!PR_MD_WAIT_CV+0x5c
*----> Raw Stack Dump <----*
0000000002cafe78 c0 e9 90 7c cb 25 80 7c - 04 03 00 00 00 00 00 00 ...|.%.|........
0000000002cafe88 ac fe ca 02 44 ba 65 01 - 10 ca 1f 02 5c b9 65 01 ....D.e.....\.e.
0000000002cafe98 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000002cafea8 10 00 00 00 00 ba 3c dc - ff ff ff ff 00 50 fd 7f ......<......P..
0000000002cafeb8 00 d0 fa 7f ac fe ca 02 - 18 ee 90 7c 8c fe ca 02 ...........|....
0000000002cafec8 ff ff ff ff a4 ff ca 02 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
0000000002cafed8 00 00 00 00 f0 fe ca 02 - 32 25 80 7c 04 03 00 00 ........2%.|....
0000000002cafee8 60 ea 00 00 00 00 00 00 - 60 ea 00 00 8c 84 1b 60 `.......`......`
0000000002cafef8 04 03 00 00 60 ea 00 00 - 40 b9 65 01 10 ca 1f 02 ....`...@.e.....
0000000002caff08 60 ea 00 00 28 b9 65 01 - cc 48 1b 60 44 ba 65 01 `...(.e..H.`D.e.
0000000002caff18 5c b9 65 01 60 ea 00 00 - 08 b9 65 01 60 ea 00 00 \.e.`.....e.`...
0000000002caff28 13 4a 1b 60 10 ca 1f 02 - d0 b9 65 01 40 b9 65 01 .J.`......e.@.e.
0000000002caff38 60 ea 00 00 28 b9 65 01 - 46 c5 48 00 d0 b9 65 01 `...(.e.F.H...e.
0000000002caff48 60 ea 00 00 bc ca 1f 02 - 10 ca 1f 02 b4 ff ca 02 `...............
0000000002caff58 b8 e7 2a 02 40 b9 65 01 - 08 b9 65 01 e1 52 1b 60 ..*.@.e...e..R.`
0000000002caff68 54 14 06 07 50 44 27 00 - 50 44 27 00 e0 ca 25 02 T...PD'.PD'...%.
0000000002caff78 48 e8 2a 02 9b 72 1b 60 - 10 ca 1f 02 b0 a3 c3 77 H.*..r.`.......w
0000000002caff88 10 ca 1f 02 e0 ca 25 02 - ff ff ff ff b8 e7 2a 02 ......%.......*.
0000000002caff98 00 00 00 00 8c ff ca 02 - 81 a8 4f 80 dc ff ca 02 ..........O.....
0000000002caffa8 94 5c c3 77 d8 40 c1 77 - 00 00 00 00 ec ff ca 02 .\.w.@.w........
*----> State Dump for Thread Id 0x70 <----*
eax=00000001 ebx=01e61e6c ecx=024b2a08 edx=00000001 esi=00000318 edi=00000000
eip=7c90eb94 esp=02edfe48 ebp=02edfeac iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
02edfeac 7c802532 00000318 ffffffff 00000000 ntdll!KiFastSystemCallRet
02edfec0 601b848c 00000318 ffffffff 01e61e50 kernel32!WaitForSingleObject+0x12
ffffffff 00000000 00000000 00000000 00000000 nspr4!PR_MD_WAIT_CV+0x5c
*----> Raw Stack Dump <----*
0000000002edfe48 c0 e9 90 7c cb 25 80 7c - 18 03 00 00 00 00 00 00 ...|.%.|........
0000000002edfe58 00 00 00 00 74 32 e7 01 - 90 80 30 02 6c 1e e6 01 ....t2....0.l...
0000000002edfe68 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000002edfe78 10 00 00 00 00 00 27 00 - 18 ee 01 00 00 50 fd 7f ......'......P..
0000000002edfe88 00 c0 fa 7f 00 00 00 00 - 00 00 27 00 5c fe ed 02 ..........'.\...
0000000002edfe98 07 00 00 00 a4 ff ed 02 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
0000000002edfea8 00 00 00 00 c0 fe ed 02 - 32 25 80 7c 18 03 00 00 ........2%.|....
0000000002edfeb8 ff ff ff ff 00 00 00 00 - ff ff ff ff 8c 84 1b 60 ...............`
0000000002edfec8 18 03 00 00 ff ff ff ff - 50 1e e6 01 90 80 30 02 ........P.....0.
0000000002edfed8 60 ff ed 02 00 00 00 00 - cc 48 1b 60 74 32 e7 01 `........H.`t2..
0000000002edfee8 6c 1e e6 01 ff ff ff ff - 01 00 00 00 a8 c0 f7 01 l...............
0000000002edfef8 94 46 1b 60 90 80 30 02 - 00 32 e7 01 50 1e e6 01 .F.`..0..2..P...
0000000002edff08 ff ff ff ff 98 63 1e 02 - a8 c0 f7 01 ba 08 38 60 .....c........8`
0000000002edff18 a8 c0 f7 01 ff ff ff ff - 60 2b 2f 02 08 da 2c 02 ........`+/...,.
0000000002edff28 01 00 00 00 1e ea 37 60 - 98 63 1e 02 00 00 00 00 ......7`.c......
0000000002edff38 84 23 86 00 60 2b 2f 02 - 54 ff ed 02 3c 81 30 02 .#..`+/.T...<.0.
0000000002edff48 90 80 30 02 50 1e e6 01 - 20 82 a9 00 f0 fa 6d 02 ..0.P... .....m.
0000000002edff58 00 00 00 00 70 6e 14 01 - b4 ff ed 02 e1 52 1b 60 ....pn.......R.`
0000000002edff68 00 00 00 00 50 44 27 00 - 50 44 27 00 84 74 96 00 ....PD'.PD'..t..
0000000002edff78 c8 2d e7 01 9b 72 1b 60 - 90 80 30 02 b0 a3 c3 77 .-...r.`..0....w
*----> State Dump for Thread Id 0x90c <----*
eax=00000000 ebx=011263fc ecx=00000000 edx=0017aee8 esi=0000035c edi=00000000
eip=7c90eb94 esp=02fdfe58 ebp=02fdfebc iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
02fdfebc 7c802532 0000035c 0000ea60 00000000 ntdll!KiFastSystemCallRet
02fdfed0 601b848c 0000035c 0000ea60 011263e0 kernel32!WaitForSingleObject+0x12
0000ea60 00000000 00000000 00000000 00000000 nspr4!PR_MD_WAIT_CV+0x5c
*----> Raw Stack Dump <----*
0000000002fdfe58 c0 e9 90 7c cb 25 80 7c - 5c 03 00 00 00 00 00 00 ...|.%.|\.......
0000000002fdfe68 8c fe fd 02 e4 64 12 01 - 98 64 51 02 fc 63 12 01 .....d...dQ..c..
0000000002fdfe78 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000002fdfe88 10 00 00 00 00 ba 3c dc - ff ff ff ff 00 50 fd 7f ......<......P..
0000000002fdfe98 00 b0 fa 7f 8c fe fd 02 - de c2 c2 77 6c fe fd 02 ...........wl...
0000000002fdfea8 00 00 00 00 a4 ff fd 02 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
0000000002fdfeb8 00 00 00 00 d0 fe fd 02 - 32 25 80 7c 5c 03 00 00 ........2%.|\...
0000000002fdfec8 60 ea 00 00 00 00 00 00 - 60 ea 00 00 8c 84 1b 60 `.......`......`
0000000002fdfed8 5c 03 00 00 60 ea 00 00 - e0 63 12 01 98 64 51 02 \...`....c...dQ.
0000000002fdfee8 48 ff fd 02 00 c4 1a 60 - cc 48 1b 60 e4 64 12 01 H......`.H.`.d..
0000000002fdfef8 fc 63 12 01 60 ea 00 00 - cc 5c 17 01 60 ea 00 00 .c..`....\..`...
0000000002fdff08 13 4a 1b 60 98 64 51 02 - 70 64 12 01 e0 63 12 01 .J.`.dQ.pd...c..
0000000002fdff18 60 ea 00 00 90 5c 17 01 - e6 48 4b 00 70 64 12 01 `....\...HK.pd..
0000000002fdff28 60 ea 00 00 90 5c 17 01 - 70 c8 f7 01 10 40 1a 60 `....\..p....@.`
0000000002fdff38 e0 63 12 01 64 a6 44 02 - 53 4a 06 07 60 ea 00 00 .c..d.D.SJ..`...
0000000002fdff48 60 ff fd 02 b8 4a 4b 00 - 68 ff fd 02 98 64 51 02 `....JK.h....dQ.
0000000002fdff58 44 65 51 02 e0 65 51 02 - b4 ff fd 02 e1 52 1b 60 DeQ..eQ......R.`
0000000002fdff68 70 c8 f7 01 50 44 27 00 - 50 44 27 00 32 07 91 7c p...PD'.PD'.2..|
0000000002fdff78 00 9f 52 02 9b 72 1b 60 - 98 64 51 02 b0 a3 c3 77 ..R..r.`.dQ....w
0000000002fdff88 98 64 51 02 32 07 91 7c - 04 00 00 00 e0 65 51 02 .dQ.2..|.....eQ.
*----> State Dump for Thread Id 0xe8c <----*
eax=72d230e8 ebx=041dfef8 ecx=00000037 edx=00000000 esi=00000000 edi=7ffd5000
eip=7c90eb94 esp=041dfed0 ebp=041dff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
041dff6c 7c80a075 00000002 041dffa4 00000000 ntdll!KiFastSystemCallRet
041dff88 72d2312a 00000002 041dffa4 00000000 kernel32!WaitForMultipleObjects+0x18
041dffb4 7c80b683 00000000 00000000 00150000 wdmaud!midMessage+0x348
041dffec 00000000 72d230e8 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000041dfed0 ab e9 90 7c e2 94 80 7c - 02 00 00 00 f8 fe 1d 04 ...|...|........
00000000041dfee0 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000041dfef0 00 00 00 00 00 00 00 00 - 90 03 00 00 84 03 00 00 ................
00000000041dff00 ff ff ff ff b8 1c 06 b3 - bc 1c 06 b3 00 80 00 00 ................
00000000041dff10 14 1d 06 b3 3c 17 17 89 - 14 00 00 00 01 00 00 00 ....<...........
00000000041dff20 00 00 00 00 00 00 00 00 - 10 00 00 00 d4 15 17 89 ................
00000000041dff30 20 6c 0c 89 ea b5 57 80 - 00 50 fd 7f 00 f0 fa 7f l....W..P......
00000000041dff40 00 f0 fa 7f 00 00 00 00 - f8 fe 1d 04 00 00 00 00 ................
00000000041dff50 02 00 00 00 ec fe 1d 04 - 00 00 00 00 dc ff 1d 04 ................
00000000041dff60 a8 9a 83 7c d8 95 80 7c - 00 00 00 00 88 ff 1d 04 ...|...|........
00000000041dff70 75 a0 80 7c 02 00 00 00 - a4 ff 1d 04 00 00 00 00 u..|............
00000000041dff80 ff ff ff ff 00 00 00 00 - b4 ff 1d 04 2a 31 d2 72 ............*1.r
00000000041dff90 02 00 00 00 a4 ff 1d 04 - 00 00 00 00 ff ff ff ff ................
00000000041dffa0 00 00 15 00 90 03 00 00 - 84 03 00 00 00 00 00 00 ................
00000000041dffb0 dc e2 90 7c ec ff 1d 04 - 83 b6 80 7c 00 00 00 00 ...|.......|....
00000000041dffc0 00 00 00 00 00 00 15 00 - 00 00 00 00 00 f0 fa 7f ................
00000000041dffd0 00 d6 8f 89 c0 ff 1d 04 - c8 31 10 89 ff ff ff ff .........1......
00000000041dffe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
00000000041dfff0 00 00 00 00 e8 30 d2 72 - 00 00 00 00 00 00 00 00 .....0.r........
00000000041e0000 08 00 00 00 00 01 00 05 - ee ff ee ff 00 00 00 00 ................
*----> State Dump for Thread Id 0xec0 <----*
eax=7ffaa000 ebx=77d496b8 ecx=02d41fb0 edx=00000000 esi=031dff40 edi=77d48bf6
eip=7c90eb94 esp=031dfef8 ebp=031dff1c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.qtx -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
031dff1c 674892a7 031dff40 00000000 00000000 ntdll!KiFastSystemCallRet
031dffb4 7c80b683 02d41fb0 00000000 00000000 QuickTimeWebHelper!InitializeGuts+0x7f37
031dffec 00000000 674908ae 02d41fb0 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000031dfef8 be 91 d4 77 82 10 d5 77 - 40 ff 1d 03 00 00 00 00 ...w...w@.......
00000000031dff08 00 00 00 00 00 00 00 00 - b8 96 d4 77 f6 8b d4 77 ...........w...w
00000000031dff18 42 10 d5 77 b4 ff 1d 03 - a7 92 48 67 40 ff 1d 03 B..w......Hg@...
00000000031dff28 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000031dff38 b0 1f d4 02 48 20 d4 02 - 3a 01 38 00 13 01 00 00 ....H ..:.8.....
00000000031dff48 67 75 6c 70 00 00 00 00 - 52 80 06 07 3b 01 00 00 gulp....R...;...
00000000031dff58 8a 00 00 00 20 00 00 00 - b0 8f 48 67 00 00 00 00 .... .....Hg....
00000000031dff68 00 00 00 00 00 00 40 00 - 00 00 00 00 11 00 01 00 ......@.........
00000000031dff78 06 00 00 00 00 00 00 00 - 68 9d 49 67 1d 09 49 67 ........h.Ig..Ig
00000000031dff88 00 00 00 00 00 00 00 00 - 00 00 00 00 b0 1f d4 02 ................
00000000031dff98 00 00 00 00 8c ff 1d 03 - 81 a8 4f 80 dc ff 1d 03 ..........O.....
00000000031dffa8 d8 0f 49 67 38 a9 49 67 - 00 00 00 00 ec ff 1d 03 ..Ig8.Ig........
00000000031dffb8 83 b6 80 7c b0 1f d4 02 - 00 00 00 00 00 00 00 00 ...|............
00000000031dffc8 b0 1f d4 02 00 a0 fa 7f - 00 d6 8f 89 c0 ff 1d 03 ................
00000000031dffd8 a0 e2 17 89 ff ff ff ff - a8 9a 83 7c 90 b6 80 7c ...........|...|
00000000031dffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 ae 08 49 67 ..............Ig
00000000031dfff8 b0 1f d4 02 00 00 00 00 - c8 00 00 00 1e 01 00 00 ................
00000000031e0008 ff ee ff ee 02 10 00 00 - 00 00 00 00 00 fe 00 00 ................
00000000031e0018 00 00 20 00 00 20 00 00 - 00 02 00 00 00 20 00 00 .. .. ....... ..
00000000031e0028 23 01 00 00 ff ef fd 7f - 0c 00 08 06 00 00 00 00 #...............
*----> State Dump for Thread Id 0xbe8 <----*
eax=0018c6b0 ebx=0299a910 ecx=0017f090 edx=00000008 esi=00000000 edi=7ffd5000
eip=7c90eb94 esp=034afea8 ebp=034aff44 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\QuickTime\QTSystem\QuickTime.qts -
ChildEBP RetAddr Args to Child
034aff44 7c80a075 00000021 67317298 00000000 ntdll!KiFastSystemCallRet
034aff60 668f18fd 00000021 67317298 00000000 kernel32!WaitForMultipleObjects+0x18
7c80a05d ff006aec 75ff1475 0c75ff10 e80875ff QuickTime!theQTMLDispatcher+0x252ed
8b55ff8b 00000000 00000000 00000000 00000000 0xff006aec
*----> Raw Stack Dump <----*
00000000034afea8 ab e9 90 7c e2 94 80 7c - 21 00 00 00 10 a9 99 02 ...|...|!.......
00000000034afeb8 01 00 00 00 00 00 00 00 - 00 00 00 00 98 4f 15 00 .............O..
00000000034afec8 60 39 1e 03 c8 38 1e 03 - 93 01 00 00 7a 1a 00 00 `9...8......z...
00000000034afed8 7a 1a 00 00 84 a0 50 c0 - 80 9c 10 89 98 00 00 00 z.....P.........
00000000034afee8 9c 36 50 c0 00 04 00 00 - 14 00 00 00 01 00 00 00 .6P.............
00000000034afef8 00 00 00 00 00 00 00 00 - 10 00 00 00 d4 71 4e 80 .............qN.
00000000034aff08 9c 36 50 c0 e0 c9 86 66 - 00 50 fd 7f 00 90 fa 7f .6P....f.P......
00000000034aff18 00 90 fa 7f 00 00 00 00 - 10 a9 99 02 ef c9 86 66 ...............f
00000000034aff28 21 00 00 00 c4 fe 4a 03 - 31 90 86 66 a4 ff 4a 03 !.....J.1..f..J.
00000000034aff38 a8 9a 83 7c d8 95 80 7c - 00 00 00 00 60 ff 4a 03 ...|...|....`.J.
00000000034aff48 75 a0 80 7c 21 00 00 00 - 98 72 31 67 00 00 00 00 u..|!....r1g....
00000000034aff58 ff ff ff ff 00 00 00 00 - 5d a0 80 7c fd 18 8f 66 ........]..|...f
00000000034aff68 21 00 00 00 98 72 31 67 - 00 00 00 00 ff ff ff ff !....r1g........
00000000034aff78 b4 ff 4a 03 ff ff ff ff - 38 3e 8a 66 2e 44 8a 66 ..J.....8>.f.D.f
00000000034aff88 00 00 00 00 98 4f 15 00 - c8 ee 1d 03 c8 38 1e 03 .....O.......8..
00000000034aff98 00 00 00 00 8c ff 4a 03 - 81 a8 4f 80 dc ff 4a 03 ......J...O...J.
00000000034affa8 d0 72 8a 66 28 be 17 67 - 00 00 00 00 ec ff 4a 03 .r.f(..g......J.
00000000034affb8 83 b6 80 7c c8 38 1e 03 - 98 4f 15 00 c8 ee 1d 03 ...|.8...O......
00000000034affc8 c8 38 1e 03 00 90 fa 7f - 00 d6 8f 89 c0 ff 4a 03 .8............J.
00000000034affd8 a0 e2 17 89 ff ff ff ff - a8 9a 83 7c 90 b6 80 7c ...........|...|
*----> State Dump for Thread Id 0xc6c <----*
eax=668a43bf ebx=7c809728 ecx=00000000 edx=032ba008 esi=0000069c edi=00000000
eip=7c90eb94 esp=035afef0 ebp=035aff54 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
035aff54 7c802532 0000069c 7fffffff 00000000 ntdll!KiFastSystemCallRet
035aff68 6690020a 0000069c 7fffffff 031e4c18 kernel32!WaitForSingleObject+0x12
035affb4 7c80b683 031e4b80 032ba008 00000000 QuickTime!LIST_ComponentDispatch+0x673a
035affec 00000000 668a43bf 031e4b80 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000035afef0 c0 e9 90 7c cb 25 80 7c - 9c 06 00 00 00 00 00 00 ...|.%.|........
00000000035aff00 24 ff 5a 03 20 25 80 7c - ff ff ff 7f 28 97 80 7c $.Z. %.|....(..|
00000000035aff10 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000035aff20 10 00 00 00 10 27 00 00 - 78 ec ff ff 00 50 fd 7f .....'..x....P..
00000000035aff30 00 80 fa 7f 24 ff 5a 03 - 31 90 86 66 04 ff 5a 03 ....$.Z.1..f..Z.
00000000035aff40 58 ff 5a 03 a4 ff 5a 03 - a8 9a 83 7c f8 25 80 7c X.Z...Z....|.%.|
00000000035aff50 00 00 00 00 68 ff 5a 03 - 32 25 80 7c 9c 06 00 00 ....h.Z.2%.|....
00000000035aff60 ff ff ff 7f 00 00 00 00 - b4 ff 5a 03 0a 02 90 66 ..........Z....f
00000000035aff70 9c 06 00 00 ff ff ff 7f - 18 4c 1e 03 08 a0 2b 03 .........L....+.
00000000035aff80 80 4b 1e 03 2e 44 8a 66 - 00 00 00 00 08 a0 2b 03 .K...D.f......+.
00000000035aff90 00 00 00 00 80 4b 1e 03 - 00 00 00 00 8c ff 5a 03 .....K........Z.
00000000035affa0 81 a8 4f 80 dc ff 5a 03 - d0 72 8a 66 28 be 17 67 ..O...Z..r.f(..g
00000000035affb0 00 00 00 00 ec ff 5a 03 - 83 b6 80 7c 80 4b 1e 03 ......Z....|.K..
00000000035affc0 08 a0 2b 03 00 00 00 00 - 80 4b 1e 03 00 80 fa 7f ..+......K......
00000000035affd0 00 d6 8f 89 c0 ff 5a 03 - 60 f5 f3 88 ff ff ff ff ......Z.`.......
00000000035affe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
00000000035afff0 00 00 00 00 bf 43 8a 66 - 80 4b 1e 03 00 00 00 00 .....C.f.K......
00000000035b0000 08 00 00 00 00 01 00 01 - ee ff ee ff 00 00 00 00 ................
00000000035b0010 00 00 d5 02 00 60 0f 00 - 00 00 5b 03 00 01 00 00 .....`....[.....
00000000035b0020 40 00 5b 03 00 00 6b 03 - f6 00 00 00 01 00 00 00 @.[...k.........
*----> State Dump for Thread Id 0x680 <----*
eax=668a43bf ebx=031e38c8 ecx=031e4b80 edx=00000000 esi=00000694 edi=00000000
eip=7c90eb94 esp=03aafed4 ebp=03aaff38 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
03aaff38 7c802532 00000694 ffffffff 00000000 ntdll!KiFastSystemCallRet
03aaff4c 66861556 00000694 ffffffff 00000020 kernel32!WaitForSingleObject+0x12
03aaff80 668a442e 00000000 00000020 00000020 QuickTime!DllMain+0x11886
03aaffb4 7c80b683 031e38c8 00000020 00000020 QuickTime!DllMain+0x5475e
03aaffec 00000000 668a43bf 031e38c8 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
0000000003aafed4 c0 e9 90 7c cb 25 80 7c - 94 06 00 00 00 00 00 00 ...|.%.|........
0000000003aafee4 00 00 00 00 20 00 00 00 - ff ff ff ff c8 38 1e 03 .... ........8..
0000000003aafef4 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000003aaff04 10 00 00 00 ef c9 86 66 - 98 f0 99 02 00 50 fd 7f .......f.....P..
0000000003aaff14 00 70 fa 7f 00 00 00 00 - 34 ff aa 03 e8 fe aa 03 .p......4.......
0000000003aaff24 c8 38 1e 03 70 ff aa 03 - a8 9a 83 7c f8 25 80 7c .8..p......|.%.|
0000000003aaff34 00 00 00 00 4c ff aa 03 - 32 25 80 7c 94 06 00 00 ....L...2%.|....
0000000003aaff44 ff ff ff ff 00 00 00 00 - 80 ff aa 03 56 15 86 66 ............V..f
0000000003aaff54 94 06 00 00 ff ff ff ff - 20 00 00 00 80 4b 1e 03 ........ ....K..
0000000003aaff64 c8 38 1e 03 5c ff aa 03 - 58 53 4e 80 a4 ff aa 03 .8..\...XSN.....
0000000003aaff74 d0 72 8a 66 48 bb 17 67 - ff ff ff ff b4 ff aa 03 .r.fH..g........
0000000003aaff84 2e 44 8a 66 00 00 00 00 - 20 00 00 00 20 00 00 00 .D.f.... ... ...
0000000003aaff94 c8 38 1e 03 00 00 00 00 - 8c ff aa 03 81 a8 4f 80 .8............O.
0000000003aaffa4 dc ff aa 03 d0 72 8a 66 - 28 be 17 67 00 00 00 00 .....r.f(..g....
0000000003aaffb4 ec ff aa 03 83 b6 80 7c - c8 38 1e 03 20 00 00 00 .......|.8.. ...
0000000003aaffc4 20 00 00 00 c8 38 1e 03 - 00 70 fa 7f 00 d6 8f 89 ....8...p......
0000000003aaffd4 c0 ff aa 03 88 c4 05 89 - ff ff ff ff a8 9a 83 7c ...............|
0000000003aaffe4 90 b6 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00 ...|............
0000000003aafff4 bf 43 8a 66 c8 38 1e 03 - 00 00 00 00 4d 5a 90 00 .C.f.8......MZ..
0000000003ab0004 03 00 00 00 04 00 00 00 - ff ff 00 00 b8 00 00 00 ................
*----> State Dump for Thread Id 0x9d0 <----*
eax=6686c8f0 ebx=00000000 ecx=00000000 edx=00000004 esi=00000434 edi=00000000
eip=7c90eb94 esp=03fcfee8 ebp=03fcff4c iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
03fcff4c 7c802532 00000434 0000000f 00000000 ntdll!KiFastSystemCallRet
03fcff60 66861be0 00000434 0000000f 03c6bab0 kernel32!WaitForSingleObject+0x12
7c802520 ff006aec 75ff0c75 000ee808 c25d0000 QuickTime!DllMain+0x11f10
8b55ff8b 00000000 00000000 00000000 00000000 0xff006aec
*----> Raw Stack Dump <----*
0000000003fcfee8 c0 e9 90 7c cb 25 80 7c - 34 04 00 00 00 00 00 00 ...|.%.|4.......
0000000003fcfef8 1c ff fc 03 5b 4e b4 76 - 4b 80 06 07 00 00 00 00 ....[N.vK.......
0000000003fcff08 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000003fcff18 10 00 00 00 10 b6 fd ff - ff ff ff ff 00 50 fd 7f .............P..
0000000003fcff28 00 60 fa 7f 1c ff fc 03 - 00 00 ff ff fc fe fc 03 .`..............
0000000003fcff38 08 00 00 00 a4 ff fc 03 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
0000000003fcff48 00 00 00 00 60 ff fc 03 - 32 25 80 7c 34 04 00 00 ....`...2%.|4...
0000000003fcff58 0f 00 00 00 00 00 00 00 - 20 25 80 7c e0 1b 86 66 ........ %.|...f
0000000003fcff68 34 04 00 00 0f 00 00 00 - b0 ba c6 03 00 00 00 00 4...............
0000000003fcff78 b4 ff fc 03 c8 38 1e 03 - 0f 00 00 00 2e 44 8a 66 .....8.......D.f
0000000003fcff88 00 00 00 00 00 00 00 00 - d8 34 17 00 c8 38 1e 03 .........4...8..
0000000003fcff98 00 00 00 00 8c ff fc 03 - 81 a8 4f 80 dc ff fc 03 ..........O.....
0000000003fcffa8 d0 72 8a 66 28 be 17 67 - 00 00 00 00 ec ff fc 03 .r.f(..g........
0000000003fcffb8 83 b6 80 7c c8 38 1e 03 - 00 00 00 00 d8 34 17 00 ...|.8.......4..
0000000003fcffc8 c8 38 1e 03 00 60 fa 7f - 00 d6 8f 89 c0 ff fc 03 .8...`..........
0000000003fcffd8 60 f5 f3 88 ff ff ff ff - a8 9a 83 7c 90 b6 80 7c `..........|...|
0000000003fcffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 bf 43 8a 66 .............C.f
0000000003fcfff8 c8 38 1e 03 00 00 00 00 - 00 00 00 00 00 00 00 00 .8..............
0000000003fd0008 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000003fd0018 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
*----> State Dump for Thread Id 0x7c4 <----*
eax=73f1b94b ebx=02994308 ecx=ffffffff edx=7c916928 esi=00000000 edi=7ffd5000
eip=7c90eb94 esp=0537fd88 ebp=0537fe24 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\DSOUND.dll -
ChildEBP RetAddr Args to Child
0537fe24 7c80a075 00000040 0537fe78 00000000 ntdll!KiFastSystemCallRet
0537fe40 73f114a2 00000040 0537fe78 00000000 kernel32!WaitForMultipleObjects+0x18
0537fe58 73f1294a 00000040 ffffffff 00000000 DSOUND+0x14a2
0537ff78 73f19fbf ffffffff 0000003f 02d55558 DSOUND+0x294a
0537ff98 73f1297e 02d52390 02d530d4 73f1b993 DSOUND!DirectSoundCreate+0x537c
0537ffb4 7c80b683 02d530d4 02d52390 0012eea4 DSOUND+0x297e
0537ffec 00000000 73f1b94b 02d530d4 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000537fd88 ab e9 90 7c e2 94 80 7c - 40 00 00 00 08 43 99 02 ...|...|@....C..
000000000537fd98 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000537fda8 40 00 00 00 01 00 00 00 - 7c 26 00 c0 ff ff bd 00 @.......|&......
000000000537fdb8 c0 db 37 89 00 00 00 00 - 38 00 00 00 23 00 00 00 ..7.....8...#...
000000000537fdc8 23 00 00 00 90 23 d5 02 - 14 00 00 00 01 00 00 00 #....#..........
000000000537fdd8 00 00 00 00 00 00 00 00 - 10 00 00 00 a6 68 91 7c .............h.|
000000000537fde8 59 06 81 7c 1b 00 00 00 - 00 50 fd 7f 00 50 fa 7f Y..|.....P...P..
000000000537fdf8 00 50 fa 7f 00 00 00 00 - 08 43 99 02 00 02 00 00 .P.......C......
000000000537fe08 40 00 00 00 a4 fd 37 05 - 00 d3 8f 89 dc ff 37 05 @.....7.......7.
000000000537fe18 a8 9a 83 7c d8 95 80 7c - 00 00 00 00 40 fe 37 05 ...|...|....@.7.
000000000537fe28 75 a0 80 7c 40 00 00 00 - 78 fe 37 05 00 00 00 00 u..|@...x.7.....
000000000537fe38 ff ff ff ff 00 00 00 00 - 58 fe 37 05 a2 14 f1 73 ........X.7....s
000000000537fe48 40 00 00 00 78 fe 37 05 - 00 00 00 00 ff ff ff ff @...x.7.........
000000000537fe58 78 ff 37 05 4a 29 f1 73 - 40 00 00 00 ff ff ff ff x.7.J).s@.......
000000000537fe68 00 00 00 00 78 fe 37 05 - d4 30 d5 02 d4 30 d5 02 ....x.7..0...0..
000000000537fe78 80 08 00 00 fc 05 00 00 - ec 05 00 00 f4 05 00 00 ................
000000000537fe88 0c 06 00 00 14 06 00 00 - 20 06 00 00 1c 06 00 00 ........ .......
000000000537fe98 30 06 00 00 2c 06 00 00 - 28 06 00 00 24 06 00 00 0...,...(...$...
000000000537fea8 38 06 00 00 34 06 00 00 - 40 06 00 00 3c 06 00 00 8...4...@...<...
000000000537feb8 74 06 00 00 8c 06 00 00 - c4 07 00 00 c8 07 00 00 t...............
*----> State Dump for Thread Id 0x110 <----*
eax=059b0000 ebx=0547fdb8 ecx=0547fe6c edx=7c90eb94 esi=00000000 edi=7ffd5000
eip=7c90eb94 esp=0547fd90 ebp=0547fe2c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0547fe2c 7c80a075 00000001 0547fe80 00000000 ntdll!KiFastSystemCallRet
0547fe48 73f114a2 00000001 0547fe80 00000000 kernel32!WaitForMultipleObjects+0x18
0547fe60 73f1294a 00000001 000001f4 00000000 DSOUND+0x14a2
0547ff80 73f12a13 000001f4 00000000 00000000 DSOUND+0x294a
0547ffb4 7c80b683 02d51efc 00000000 7c910732 DSOUND+0x2a13
0547ffec 00000000 73f1b94b 02d51efc 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000547fd90 ab e9 90 7c e2 94 80 7c - 01 00 00 00 b8 fd 47 05 ...|...|......G.
000000000547fda0 01 00 00 00 00 00 00 00 - ec fd 47 05 00 00 00 00 ..........G.....
000000000547fdb0 01 00 00 00 01 00 00 00 - 9c 08 00 00 24 95 80 7c ............$..|
000000000547fdc0 00 00 00 00 12 95 80 7c - 80 75 d5 02 00 00 00 00 .......|.u......
000000000547fdd0 00 00 00 00 e4 06 00 00 - 14 00 00 00 01 00 00 00 ................
000000000547fde0 00 00 00 00 00 00 00 00 - 10 00 00 00 c0 b4 b3 ff ................
000000000547fdf0 ff ff ff ff 84 fe 47 05 - 00 50 fd 7f 00 40 fa 7f ......G..P...@..
000000000547fe00 12 95 80 7c ec fd 47 05 - b8 fd 47 05 1c fe 47 05 ...|..G...G...G.
000000000547fe10 01 00 00 00 ac fd 47 05 - d0 5e d5 02 dc ff 47 05 ......G..^....G.
000000000547fe20 a8 9a 83 7c d8 95 80 7c - 00 00 00 00 48 fe 47 05 ...|...|....H.G.
000000000547fe30 75 a0 80 7c 01 00 00 00 - 80 fe 47 05 00 00 00 00 u..|......G.....
000000000547fe40 f4 01 00 00 00 00 00 00 - 60 fe 47 05 a2 14 f1 73 ........`.G....s
000000000547fe50 01 00 00 00 80 fe 47 05 - 00 00 00 00 f4 01 00 00 ......G.........
000000000547fe60 80 ff 47 05 4a 29 f1 73 - 01 00 00 00 f4 01 00 00 ..G.J).s........
000000000547fe70 00 00 00 00 80 fe 47 05 - fc 1e d5 02 fc 1e d5 02 ......G.........
000000000547fe80 9c 08 00 00 00 00 00 00 - 20 00 00 00 b4 fe 47 05 ........ .....G.
000000000547fe90 01 00 00 00 00 00 00 00 - 02 00 00 00 00 00 00 00 ................
000000000547fea0 00 00 00 00 c4 fe 47 05 - ab e9 90 7c e2 94 80 7c ......G....|...|
000000000547feb0 00 40 fa 7f 44 ff 47 05 - 24 95 80 7c f0 fe 47 05 .@..D.G.$..|..G.
000000000547fec0 12 95 80 7c 00 00 00 00 - fc 1e d5 02 fc 1e d5 02 ...|............
Application exception occurred:
App: C:\Program Files\Shareaza\Shareaza.exe (pid=1356)
When: 2/20/2007 @ 13:36:55.453
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: NUMBER1
User Name: Administrator
Terminal Session Id: 0
Number of Processors: 1
Processor Type: x86 Family 6 Model 8 Stepping 1
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Uniprocessor Free
Registered Organization:
Registered Owner: Number 1
*----> Task List <----*
0 System Process
4 System
664 smss.exe
724 csrss.exe
752 winlogon.exe
796 services.exe
808 lsass.exe
956 svchost.exe
1056 svchost.exe
1144 svchost.exe
1264 svchost.exe
1344 svchost.exe
1560 spoolsv.exe
1760 Explorer.EXE
1852 avgamsvr.exe
1888 avgupsvc.exe
1968 nvsvc32.exe
172 wdfmgr.exe
348 avgcc.exe
720 qttask.exe
1304 V CAST Music Monitor.exe
1612 alg.exe
1580 svchost.exe
1748 wuauclt.exe
652 msmsgs.exe
1356 Shareaza.exe
1520 drwtsn32.exe
*----> Module List <----*
(0000000000400000 - 0000000000859000: C:\Program Files\Shareaza\Shareaza.exe
(0000000001c10000 - 0000000001c24000: C:\Program Files\Shareaza\Plugins\ImageViewer.dll
(0000000003580000 - 0000000003597000: C:\WINDOWS\system32\odbcint.dll
(0000000004df0000 - 0000000004f5c000: C:\WINDOWS\System32\quartz.dll
(000000001afa0000 - 000000001afb9000: C:\Program Files\Shareaza\Plugins\MediaLibraryBuilder.dll
(0000000020000000 - 00000000202c5000: C:\WINDOWS\system32\xpsp2res.dll
(000000004d4f0000 - 000000004d548000: C:\WINDOWS\System32\WINHTTP.dll
(0000000057fd0000 - 0000000057ff7000: C:\WINDOWS\System32\mpg2splt.ax
(000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32\uxtheme.dll
(000000005b860000 - 000000005b8b4000: C:\WINDOWS\system32\NETAPI32.dll
(0000000060ca0000 - 0000000060d2c000: C:\WINDOWS\System32\qedit.dll
(00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll
(0000000071a50000 - 0000000071a8f000: C:\WINDOWS\system32\mswsock.dll
(0000000071a90000 - 0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll
(0000000071aa0000 - 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll
(0000000071ab0000 - 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll
(0000000071ad0000 - 0000000071ad9000: C:\WINDOWS\system32\wsock32.dll
(0000000071b20000 - 0000000071b32000: C:\WINDOWS\system32\MPR.dll
(0000000071bf0000 - 0000000071c03000: C:\WINDOWS\System32\SAMLIB.dll
(0000000071c10000 - 0000000071c1e000: C:\WINDOWS\System32\ntlanman.dll
(0000000071c80000 - 0000000071c87000: C:\WINDOWS\System32\NETRAP.dll
(0000000071c90000 - 0000000071cd0000: C:\WINDOWS\System32\NETUI1.dll
(0000000071cd0000 - 0000000071ce7000: C:\WINDOWS\System32\NETUI0.dll
(00000000722b0000 - 00000000722b5000: C:\WINDOWS\system32\sensapi.dll
(0000000073000000 - 0000000073026000: C:\WINDOWS\system32\WINSPOOL.DRV
(0000000074320000 - 000000007435d000: C:\WINDOWS\system32\ODBC32.dll
(00000000745e0000 - 00000000748a6000: C:\WINDOWS\system32\msi.dll
(0000000074980000 - 0000000074a8e000: C:\WINDOWS\System32\msxml3.dll
(0000000074ad0000 - 0000000074ad8000: C:\WINDOWS\system32\PowrProf.dll
(0000000074f00000 - 0000000074f0c000: C:\WINDOWS\System32\SSDPAPI.dll
(0000000075970000 - 0000000075a67000: C:\WINDOWS\system32\MSGINA.dll
(0000000075a70000 - 0000000075a91000: C:\WINDOWS\System32\MSVFW32.dll
(0000000075e90000 - 0000000075f40000: C:\WINDOWS\system32\SXS.DLL
(0000000075f40000 - 0000000075f51000: C:\WINDOWS\System32\devenum.dll
(0000000075f60000 - 0000000075f67000: C:\WINDOWS\System32\drprov.dll
(0000000075f70000 - 0000000075f79000: C:\WINDOWS\System32\davclnt.dll
(0000000076360000 - 0000000076370000: C:\WINDOWS\system32\WINSTA.dll
(00000000763b0000 - 00000000763f9000: C:\WINDOWS\system32\comdlg32.dll
(00000000769c0000 - 0000000076a73000: C:\WINDOWS\system32\USERENV.dll
(0000000076b20000 - 0000000076b31000: C:\WINDOWS\system32\ATL.DLL
(0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll
(0000000076c30000 - 0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll
(0000000076c90000 - 0000000076cb8000: C:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d40000 - 0000000076d58000: C:\WINDOWS\system32\MPRAPI.dll
(0000000076d60000 - 0000000076d79000: C:\WINDOWS\system32\iphlpapi.dll
(0000000076de0000 - 0000000076e03000: C:\WINDOWS\System32\upnp.dll
(0000000076e10000 - 0000000076e35000: C:\WINDOWS\system32\adsldpc.dll
(0000000076e80000 - 0000000076e8e000: C:\WINDOWS\system32\rtutils.dll
(0000000076e90000 - 0000000076ea2000: C:\WINDOWS\system32\rasman.dll
(0000000076eb0000 - 0000000076edf000: C:\WINDOWS\system32\TAPI32.dll
(0000000076ee0000 - 0000000076f1c000: C:\WINDOWS\system32\RASAPI32.DLL
(0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fb0000 - 0000000076fb8000: C:\WINDOWS\System32\winrnr.dll
(0000000076fc0000 - 0000000076fc6000: C:\WINDOWS\system32\rasadhlp.dll
(0000000076fd0000 - 000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL
(0000000077050000 - 0000000077115000: C:\WINDOWS\system32\COMRes.dll
(0000000077120000 - 00000000771ac000: C:\WINDOWS\system32\OLEAUT32.dll
(00000000771b0000 - 0000000077256000: C:\WINDOWS\system32\WININET.dll
(00000000773d0000 - 00000000774d3000: C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077920000 - 0000000077a13000: C:\WINDOWS\system32\SETUPAPI.dll
(0000000077a80000 - 0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32\appHelp.dll
(0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32\VERSION.dll
(0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32\msvcrt.dll
(0000000077cc0000 - 0000000077cf2000: C:\WINDOWS\system32\ACTIVEDS.dll
(0000000077d40000 - 0000000077dd0000: C:\WINDOWS\system32\USER32.dll
(0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077f10000 - 0000000077f57000: C:\WINDOWS\system32\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\system32\Secur32.dll
(000000007c800000 - 000000007c8f4000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d5000: C:\WINDOWS\system32\SHELL32.dll
(000000007e1e0000 - 000000007e280000: C:\WINDOWS\system32\urlmon.dll
*----> State Dump for Thread Id 0x640 <----*
eax=00000000 ebx=00000000 ecx=000bdacb edx=00000000 esi=000000c4 edi=00000000
eip=7c90eb94 esp=0012fb20 ebp=0012fb84 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll -
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Module load completed but symbols could not be loaded for C:\Program Files\Shareaza\Shareaza.exe
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\USER32.dll -
ChildEBP RetAddr Args to Child
0012fb84 7c802532 000000c4 00000032 00000000 ntdll!KiFastSystemCallRet
0012fb98 006096b3 000000c4 00000032 006097e3 kernel32!WaitForSingleObject+0x12
0012fcb8 00629b2a 00000113 00000001 006a49a0 Shareaza+0x2096b3
0012fcd8 0062b897 00000113 00000001 00000000 Shareaza+0x229b2a
0012fd38 0062b927 00000000 000401f4 00000113 Shareaza+0x22b897
0012fd58 77d48734 000401f4 00000113 00000001 Shareaza+0x22b927
0012fd84 77d48816 0062b8f3 000401f4 00000113 USER32!GetDC+0x6d
0012fdec 77d489cd 00000000 0062b8f3 000401f4 USER32!GetDC+0x14f
0012fe4c 77d48a10 0015d650 00000000 00000000 USER32!GetWindowLongW+0x127
0012fe5c 006289df 0015d650 0015d650 006f05b0 USER32!DispatchMessageW+0xf
00000000 00000000 00000000 00000000 00000000 Shareaza+0x2289df
*----> Raw Stack Dump <----*
000000000012fb20 c0 e9 90 7c cb 25 80 7c - c4 00 00 00 00 00 00 00 ...|.%.|........
000000000012fb30 54 fb 12 00 60 03 9b 01 - e8 fb 12 00 00 00 00 00 T...`...........
000000000012fb40 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000012fb50 10 00 00 00 e0 5e f8 ff - ff ff ff ff 00 e0 fd 7f .....^..........
000000000012fb60 00 d0 fd 7f 54 fb 12 00 - 00 00 00 00 34 fb 12 00 ....T.......4...
000000000012fb70 32 00 03 00 18 fc 12 00 - a8 9a 83 7c f8 25 80 7c 2..........|.%.|
000000000012fb80 00 00 00 00 98 fb 12 00 - 32 25 80 7c c4 00 00 00 ........2%.|....
000000000012fb90 32 00 00 00 00 00 00 00 - b8 fc 12 00 b3 96 60 00 2.............`.
000000000012fba0 c4 00 00 00 32 00 00 00 - e3 97 60 00 32 00 00 00 ....2.....`.2...
000000000012fbb0 60 03 9b 01 7e 1e 5d 00 - 32 00 00 00 60 03 9b 01 `...~.].2...`...
000000000012fbc0 b0 28 5d 00 60 03 9b 01 - 60 03 9b 01 b0 28 5d 00 .(].`...`....(].
000000000012fbd0 04 fc 12 00 87 c4 d4 77 - 93 c4 d4 77 60 03 9b 01 .......w...w`...
000000000012fbe0 60 03 9b 01 b0 28 5d 00 - b8 fd 6e 00 c4 00 00 00 `....(]...n.....
000000000012fbf0 00 00 00 00 ac fc 12 00 - 67 04 d7 77 98 c4 d4 77 ........g..w...w
000000000012fc00 ff ff ff ff 93 c4 d4 77 - ed d3 5b 00 f4 01 04 00 .......w..[.....
000000000012fc10 00 00 00 00 00 00 00 00 - ac fc 12 00 10 43 65 00 .............Ce.
000000000012fc20 00 00 00 00 dc 28 5d 00 - 60 03 9b 01 00 00 00 00 .....(].`.......
000000000012fc30 96 cd 62 00 01 00 00 00 - 60 03 9b 01 60 03 9b 01 ..b.....`...`...
000000000012fc40 20 d6 15 00 48 3b 64 00 - 00 00 00 00 f3 b8 62 00 ...H;d.......b.
000000000012fc50 27 b9 62 00 00 00 00 00 - 32 00 03 00 29 02 00 00 '.b.....2...)...
*----> State Dump for Thread Id 0x214 <----*
eax=00000102 ebx=00000000 ecx=00000102 edx=7c90eb94 esi=00153130 edi=00000000
eip=7c90eb94 esp=0101fe1c ebp=0101ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0101ff80 77e76c22 0101ffa8 77e76a3b 00153130 ntdll!KiFastSystemCallRet
0101ff88 77e76a3b 00153130 00000000 0012f5f8 RPCRT4!I_RpcBCacheFree+0x5ea
0101ffa8 77e76c0a 00167f80 0101ffec 7c80b683 RPCRT4!I_RpcBCacheFree+0x403
0101ffb4 7c80b683 00166a80 00000000 0012f5f8 RPCRT4!I_RpcBCacheFree+0x5d2
0101ffec 00000000 77e76bf0 00166a80 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000101fe1c 99 e3 90 7c 03 67 e7 77 - 74 01 00 00 70 ff 01 01 ...|.g.wt...p...
000000000101fe2c 00 00 00 00 90 4a 17 00 - 54 ff 01 01 2f c5 57 80 .....J..T.../.W.
000000000101fe3c 4a c5 57 80 64 9d bd b4 - 78 f4 12 00 aa c4 57 80 J.W.d...x.....W.
000000000101fe4c 37 40 56 80 02 00 00 00 - 00 00 57 89 08 00 00 00 7@V.......W.....
000000000101fe5c 90 b6 57 89 90 b6 57 89 - 58 9b bd b4 8c 39 4e 80 ..W...W.X....9N.
000000000101fe6c 03 00 00 00 02 15 53 89 - 00 00 00 00 74 9b bd b4 ......S.....t...
000000000101fe7c b5 46 4e 80 00 00 00 00 - ce 39 4e 80 d8 26 2b 89 .FN......9N..&+.
000000000101fe8c f8 a4 06 89 80 15 53 89 - 88 9b bd b4 8b f6 7b f7 ......S.......{.
000000000101fe9c 5c a5 06 89 00 00 00 00 - 00 00 00 00 9c 9b bd b4 \...............
000000000101feac 1a 24 6b b9 58 a5 06 89 - 00 00 00 00 30 11 53 89 .$k.X.......0.S.
000000000101febc c4 9b bd b4 9a 31 97 f7 - b0 09 2b 89 f8 a4 06 89 .....1....+.....
000000000101fecc a9 31 97 f7 60 11 53 89 - 30 11 53 89 00 00 00 00 .1..`.S.0.S.....
000000000101fedc d8 26 2b 89 00 00 00 00 - dc 9b bd b4 49 39 97 f7 .&+.........I9..
000000000101feec 6c 39 97 f7 dc 9b bd b4 - 00 00 00 00 51 54 9e ba l9..........QT..
000000000101fefc f8 9b bd b4 5d c9 9e ba - 00 2c 9f ba 60 8a 53 89 ....]....,..`.S.
000000000101ff0c e8 a3 51 89 c0 26 8c 89 - 6c e7 02 89 24 9c bd b4 ..Q..&..l...$...
000000000101ff1c b2 c2 4d 80 ba c2 4d 80 - 3c e7 02 89 d0 e5 02 89 ..M...M.<.......
000000000101ff2c 04 e6 02 89 80 ff 01 01 - 99 66 e7 77 4c ff 01 01 .........f.wL...
000000000101ff3c a9 66 e7 77 ed 10 90 7c - b0 67 16 00 80 6a 16 00 .f.w...|.g...j..
000000000101ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......
*----> State Dump for Thread Id 0x444 <----*
eax=000000c0 ebx=00000000 ecx=00174b08 edx=00174ac8 esi=0012eab0 edi=00001000
eip=7c90eb94 esp=0148ff9c ebp=0148ffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0148ffb4 7c80b683 00000000 00001000 0012eab0 ntdll!KiFastSystemCallRet
0148ffec 00000000 7c92798d 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000148ff9c 5c d8 90 7c d4 79 92 7c - 01 00 00 00 ac ff 48 01 \..|.y.|......H.
000000000148ffac 00 00 00 00 00 00 00 80 - ec ff 48 01 83 b6 80 7c ..........H....|
000000000148ffbc 00 00 00 00 00 10 00 00 - b0 ea 12 00 00 00 00 00 ................
000000000148ffcc 00 a0 fd 7f 00 d6 8f 89 - c0 ff 48 01 60 d1 0e 89 ..........H.`...
000000000148ffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|....
000000000148ffec 00 00 00 00 00 00 00 00 - 8d 79 92 7c 00 00 00 00 .........y.|....
000000000148fffc 00 00 00 00 ff ff ff ff - ff ff ff ff 00 00 00 00 ................
000000000149000c 00 10 00 00 00 01 00 00 - 00 00 00 00 00 00 00 00 ................
000000000149001c 00 00 00 00 01 00 00 00 - 00 01 00 00 a4 1a 49 01 ..............I.
000000000149002c 54 1a 49 01 34 12 49 01 - d8 19 49 01 50 ed 53 4d T.I.4.I...I.P.SM
000000000149003c 00 00 00 00 04 00 00 00 - 20 00 00 00 00 10 00 00 ........ .......
000000000149004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000149005c 02 00 00 00 00 00 00 00 - f0 bf 53 4d 00 00 00 00 ..........SM....
000000000149006c b0 c0 53 4d 00 00 00 00 - 00 04 08 00 40 00 03 00 ..SM........@...
000000000149007c 00 01 00 01 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000149008c 00 00 49 01 00 00 00 00 - 00 00 00 00 00 10 00 00 ..I.............
000000000149009c 00 01 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000014900ac 00 01 00 00 a4 1a 49 01 - 54 1a 49 01 34 12 49 01 ......I.T.I.4.I.
00000000014900bc d8 19 49 01 50 ed 53 4d - 00 00 00 00 08 00 00 00 ..I.P.SM........
00000000014900cc 20 00 00 00 00 10 00 00 - 00 00 00 00 00 00 00 00 ...............
*----> State Dump for Thread Id 0x468 <----*
eax=00000102 ebx=00000000 ecx=7ffd9000 edx=7c97c380 esi=7c97c380 edi=7c97c3a0
eip=7c90eb94 esp=015cff70 ebp=015cffb4 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000286
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
015cffb4 7c80b683 00000000 0012f864 7c915a00 ntdll!KiFastSystemCallRet
015cffec 00000000 7c910760 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000015cff70 1b e3 90 7c 9d 07 91 7c - f0 01 00 00 ac ff 5c 01 ...|...|......\.
00000000015cff80 b0 ff 5c 01 98 ff 5c 01 - a0 ff 5c 01 64 f8 12 00 ..\...\...\.d...
00000000015cff90 00 5a 91 7c 00 00 00 00 - 00 00 00 00 70 ad 18 00 .Z.|........p...
00000000015cffa0 00 7c 28 e8 ff ff ff ff - 35 ec 6e 80 69 75 92 7c .|(.....5.n.iu.|
00000000015cffb0 b8 73 1b 00 ec ff 5c 01 - 83 b6 80 7c 00 00 00 00 .s....\....|....
00000000015cffc0 64 f8 12 00 00 5a 91 7c - 00 00 00 00 00 90 fd 7f d....Z.|........
00000000015cffd0 00 d6 8f 89 c0 ff 5c 01 - 60 d1 0e 89 ff ff ff ff ......\.`.......
00000000015cffe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
00000000015cfff0 00 00 00 00 60 07 91 7c - 00 00 00 00 00 00 00 00 ....`..|........
00000000015d0000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0060 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0070 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0080 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d00a0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
*----> State Dump for Thread Id 0x494 <----*
eax=000000c0 ebx=00000000 ecx=0012f8f0 edx=00000000 esi=00000000 edi=00000001
eip=7c90eb94 esp=016cfcec ebp=016cffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
016cffb4 7c80b683 00000000 00000020 0012f864 ntdll!KiFastSystemCallRet
016cffec 00000000 7c929fae 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000016cfcec ab e9 90 7c d5 a0 92 7c - 02 00 00 00 30 fd 6c 01 ...|...|....0.l.
00000000016cfcfc 01 00 00 00 01 00 00 00 - 00 00 00 00 20 00 00 00 ............ ...
00000000016cfd0c 64 f8 12 00 00 00 00 00 - 08 e5 97 7c 08 e5 97 7c d..........|...|
00000000016cfd1c f8 01 00 00 94 04 00 00 - 02 00 00 00 02 00 00 00 ................
00000000016cfd2c 01 00 00 00 f4 01 00 00 - ec 01 00 00 00 00 00 00 ................
00000000016cfd3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdcc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfddc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdfc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfe0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfe1c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
*----> State Dump for Thread Id 0x940 <----*
eax=74f0742e ebx=017cfed4 ecx=0000007e edx=7c910732 esi=00000000 edi=7ffde000
eip=7c90eb94 esp=017cfeac ebp=017cff48 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\System32\SSDPAPI.dll -
ChildEBP RetAddr Args to Child
017cff48 7c80a075 00000002 017cff94 00000000 ntdll!KiFastSystemCallRet
017cff64 74f04b62 00000002 017cff94 00000000 kernel32!WaitForMultipleObjects+0x18
017cffa4 74f0743f 00150000 0012f88c 017cffec SSDPAPI!FindServicesClose+0x1232
017cffb4 7c80b683 00184bb0 00150000 0012f88c SSDPAPI+0x743f
017cffec 00000000 74f0742e 00184bb0 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000017cfeac ab e9 90 7c e2 94 80 7c - 02 00 00 00 d4 fe 7c 01 ...|...|......|.
00000000017cfebc 01 00 00 00 00 00 00 00 - 00 00 00 00 b0 4b 18 00 .............K..
00000000017cfecc 5d a0 80 7c 00 00 00 00 - fc 01 00 00 e8 01 00 00 ]..|............
00000000017cfedc d7 d1 4f 77 68 68 60 77 - e1 f5 4f 77 0c 72 60 77 ..Owhh`w..Ow.r`w
00000000017cfeec 68 ff 7c 01 08 72 60 77 - 14 00 00 00 01 00 00 00 h.|..r`w........
00000000017cfefc 00 00 00 00 00 00 00 00 - 10 00 00 00 66 97 80 7c ............f..|
00000000017cff0c 68 ff 7c 01 3c 68 60 77 - 00 e0 fd 7f 00 70 fd 7f h.|.<h`w.....p..
00000000017cff1c b4 2f 51 77 00 00 00 00 - d4 fe 7c 01 68 ff 7c 01 ./Qw......|.h.|.
00000000017cff2c 02 00 00 00 c8 fe 7c 01 - 3c 68 60 77 dc ff 7c 01 ......|.<h`w..|.
00000000017cff3c a8 9a 83 7c d8 95 80 7c - 00 00 00 00 64 ff 7c 01 ...|...|....d.|.
00000000017cff4c 75 a0 80 7c 02 00 00 00 - 94 ff 7c 01 00 00 00 00 u..|......|.....
00000000017cff5c ff ff ff ff 00 00 00 00 - a4 ff 7c 01 62 4b f0 74 ..........|.bK.t
00000000017cff6c 02 00 00 00 94 ff 7c 01 - 00 00 00 00 ff ff ff ff ......|.........
00000000017cff7c b0 4b 18 00 00 00 15 00 - b0 4b 18 00 00 00 00 00 .K.......K......
00000000017cff8c 00 00 00 00 00 00 00 00 - fc 01 00 00 e8 01 00 00 ................
00000000017cff9c 00 00 00 00 01 00 00 00 - b4 ff 7c 01 3f 74 f0 74 ..........|.?t.t
00000000017cffac 00 00 15 00 8c f8 12 00 - ec ff 7c 01 83 b6 80 7c ..........|....|
00000000017cffbc b0 4b 18 00 00 00 15 00 - 8c f8 12 00 b0 4b 18 00 .K...........K..
00000000017cffcc 00 70 fd 7f 00 d6 8f 89 - c0 ff 7c 01 20 03 fe 88 .p........|. ...
00000000017cffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|....
*----> State Dump for Thread Id 0x960 <----*
eax=047080a0 ebx=006e119c ecx=0b4d18a8 edx=00000003 esi=000000c4 edi=00000000
eip=7c90eb94 esp=0255fe00 ebp=0255fe64 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0255fe64 7c802532 000000c4 000000fa 00000000 ntdll!KiFastSystemCallRet
0255fe78 006096b3 000000c4 000000fa 006097e3 kernel32!WaitForSingleObject+0x12
ffffffff 00000000 00000000 00000000 00000000 Shareaza+0x2096b3
*----> Raw Stack Dump <----*
000000000255fe00 c0 e9 90 7c cb 25 80 7c - c4 00 00 00 00 00 00 00 ...|.%.|........
000000000255fe10 34 fe 55 02 01 00 00 00 - ac fe 55 02 9c 11 6e 00 4.U.......U...n.
000000000255fe20 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000255fe30 10 00 00 00 60 da d9 ff - ff ff ff ff 00 e0 fd 7f ....`...........
000000000255fe40 00 40 fd 7f 34 fe 55 02 - 60 5a 73 04 14 fe 55 02 .@..4.U.`Zs...U.
000000000255fe50 00 00 00 00 c4 fe 55 02 - a8 9a 83 7c f8 25 80 7c ......U....|.%.|
000000000255fe60 00 00 00 00 78 fe 55 02 - 32 25 80 7c c4 00 00 00 ....x.U.2%.|....
000000000255fe70 fa 00 00 00 00 00 00 00 - ff ff ff ff b3 96 60 00 ..............`.
000000000255fe80 c4 00 00 00 fa 00 00 00 - e3 97 60 00 fa 00 00 00 ..........`.....
000000000255fe90 00 00 00 00 d2 56 45 00 - fa 00 00 00 a0 09 71 00 .....VE.......q.
000000000255fea0 00 00 00 00 e6 6d 18 05 - f0 fe 55 02 b8 fd 6e 00 .....m....U...n.
000000000255feb0 c4 00 00 00 00 00 00 00 - f0 25 80 7c 32 25 80 7c .........%.|2%.|
000000000255fec0 d4 00 00 00 f0 fe 55 02 - 00 a7 65 00 01 00 00 00 ......U...e.....
000000000255fed0 93 4d 45 00 e6 6d 18 05 - ff ff ff ff 00 0a 71 00 .ME..m........q.
000000000255fee0 e1 06 4f 00 7c f9 12 00 - 60 26 af 01 80 ff 55 02 ..O.|...`&....U.
000000000255fef0 74 ff 55 02 9a c7 65 00 - 00 00 00 00 7a 06 4f 00 t.U...e.....z.O.
000000000255ff00 9c 02 00 00 93 8d 62 00 - 00 0a 71 00 32 07 91 7c ......b...q.2..|
000000000255ff10 e8 1b af 01 e8 1b af 01 - 24 5c d5 b7 d4 01 66 00 ........$\....f.
000000000255ff20 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000255ff30 01 00 00 00 00 00 00 00 - 98 00 03 00 00 e3 ed 88 ................
*----> State Dump for Thread Id 0x96c <----*
eax=00000000 ebx=000002d0 ecx=0275fe90 edx=7c90eb94 esi=000000c0 edi=00000000
eip=7c90eb94 esp=0275fe70 ebp=0275fed4 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0275fed4 7c802532 000000c0 000001f4 00000000 ntdll!KiFastSystemCallRet
0275fee8 0047a7f9 000000c0 000001f4 0012fb50 kernel32!WaitForSingleObject+0x12
0275ff80 006169b3 0012fb50 00000000 7c9105c8 Shareaza+0x7a7f9
0275ffb4 7c80b683 01b01b30 00000000 7c9105c8 Shareaza+0x2169b3
0275ffec 00000000 00616944 01b01b30 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000275fe70 c0 e9 90 7c cb 25 80 7c - c0 00 00 00 00 00 00 00 ...|.%.|........
000000000275fe80 a4 fe 75 02 20 25 80 7c - d8 e1 6e 00 d0 02 00 00 ..u. %.|..n.....
000000000275fe90 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000275fea0 10 00 00 00 c0 b4 b3 ff - ff ff ff ff 00 e0 fd 7f ................
000000000275feb0 00 e0 fa 7f a4 fe 75 02 - 73 97 60 00 84 fe 75 02 ......u.s.`...u.
000000000275fec0 fa 97 60 00 74 ff 75 02 - a8 9a 83 7c f8 25 80 7c ..`.t.u....|.%.|
000000000275fed0 00 00 00 00 e8 fe 75 02 - 32 25 80 7c c0 00 00 00 ......u.2%.|....
000000000275fee0 f4 01 00 00 00 00 00 00 - 80 ff 75 02 f9 a7 47 00 ..........u...G.
000000000275fef0 c0 00 00 00 f4 01 00 00 - 50 fb 12 00 ca a7 47 00 ........P.....G.
000000000275ff00 20 05 af 01 93 8d 62 00 - d8 e1 6e 00 00 00 00 00 .....b...n.....
000000000275ff10 30 1b b0 01 30 1b b0 01 - 24 5c d5 b7 d4 01 66 00 0...0...$\....f.
000000000275ff20 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000275ff30 01 00 00 00 00 00 00 00 - 98 00 03 00 00 13 5a 89 ..............Z.
000000000275ff40 00 00 00 00 00 00 00 00 - 44 01 66 00 b8 01 66 00 ........D.f...f.
000000000275ff50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000275ff60 00 00 00 00 00 00 00 00 - 00 00 00 00 20 05 af 01 ............ ...
000000000275ff70 0c ff 75 02 a4 ff 75 02 - 9e 3a 64 00 00 00 00 00 ..u...u..:d.....
000000000275ff80 b4 ff 75 02 b3 69 61 00 - 50 fb 12 00 00 00 00 00 ..u..ia.P.......
000000000275ff90 c8 05 91 7c 30 1b b0 01 - 00 00 00 00 8c ff 75 02 ...|0.........u.
000000000275ffa0 81 a8 4f 80 dc ff 75 02 - 6c 66 61 00 70 5b 66 00 ..O...u.lfa.p[f.
*----> State Dump for Thread Id 0x970 <----*
eax=01afa108 ebx=001a51e8 ecx=0000000f edx=00000000 esi=000000c4 edi=00000000
eip=7c90eb94 esp=028bf904 ebp=028bf968 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
028bf968 7c802532 000000c4 00000032 00000000 ntdll!KiFastSystemCallRet
028bf97c 006096b3 000000c4 00000032 006097e3 kernel32!WaitForSingleObject+0x12
006eff30 00000000 0067d154 00000000 00000000 Shareaza+0x2096b3
*----> Raw Stack Dump <----*
00000000028bf904 c0 e9 90 7c cb 25 80 7c - c4 00 00 00 00 00 00 00 ...|.%.|........
00000000028bf914 38 f9 8b 02 2c fe 8b 02 - a8 f9 8b 02 e8 51 1a 00 8...,........Q..
00000000028bf924 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000028bf934 10 00 00 00 e0 5e f8 ff - ff ff ff ff 00 e0 fd 7f .....^..........
00000000028bf944 00 d0 fa 7f 38 f9 8b 02 - d4 fd 8b 02 18 f9 8b 02 ....8...........
00000000028bf954 1c 00 00 00 b4 f9 8b 02 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
00000000028bf964 00 00 00 00 7c f9 8b 02 - 32 25 80 7c c4 00 00 00 ....|...2%.|....
00000000028bf974 32 00 00 00 00 00 00 00 - 30 ff 6e 00 b3 96 60 00 2.......0.n...`.
00000000028bf984 c4 00 00 00 32 00 00 00 - e3 97 60 00 32 00 00 00 ....2.....`.2...
00000000028bf994 30 fe 8b 02 f0 3b 4c 00 - 32 00 00 00 78 fe 8b 02 0....;L.2...x...
00000000028bf9a4 45 00 00 00 b8 fd 6e 00 - c4 00 00 00 00 00 00 00 E.....n.........
00000000028bf9b4 68 fe 8b 02 18 06 65 00 - 00 00 00 00 c9 f1 46 00 h.....e.......F.
00000000028bf9c4 30 ff 6e 00 30 fe 8b 02 - 00 00 00 00 00 00 00 00 0.n.0...........
00000000028bf9d4 ae bc a6 71 14 fb 8b 02 - 00 00 00 00 00 00 00 00 ...q............
00000000028bf9e4 00 00 00 00 1c fb 8b 02 - 00 00 00 00 78 fb 8b 02 ............x...
00000000028bf9f4 00 00 00 00 00 00 00 00 - 80 4f 19 00 88 cd 6e 00 .........O....n.
00000000028bfa04 01 00 00 00 24 03 00 00 - fc f9 8b 02 00 fe 8a 07 ....$...........
00000000028bfa14 30 fa 8b 02 46 0f 91 7c - 40 00 00 00 00 fe 8a 07 0...F..|@.......
00000000028bfa24 00 00 d8 00 f8 f5 8a 07 - 00 00 d8 00 00 00 d8 00 ................
00000000028bfa34 78 01 d8 00 04 fb 8b 02 - 12 0e 91 7c 00 00 d8 00 x..........|....
*----> State Dump for Thread Id 0x994 <----*
eax=00000080 ebx=01b2fe78 ecx=00000000 edx=00000000 esi=06268610 edi=0000006f
eip=0051059c esp=029bfe10 ebp=0000004d iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
function: Shareaza
00510582 8b0b mov ecx,[ebx]
00510584 f7da neg edx
00510586 1bd2 sbb edx,edx
00510588 83e240 and edx,0x40
0051058b 33c0 xor eax,eax
0051058d 83f90b cmp ecx,0xb
00510590 8b4b3c mov ecx,[ebx+0x3c]
00510593 0f95c0 setne al
00510596 48 dec eax
00510597 2580000000 and eax,0x80
FAULT ->0051059c 03d0 add edx,eax
0051059e 03d1 add edx,ecx
005105a0 85ed test ebp,ebp
005105a2 89562c mov [esi+0x2c],edx
005105a5 7504 jnz Shareaza+0x1105ab (005105ab)
005105a7 85ff test edi,edi
005105a9 7407 jz Shareaza+0x1105b2 (005105b2)
005105ab 837c245004 cmp dword ptr [esp+0x50],0x4
005105b0 751b jnz Shareaza+0x1105cd (005105cd)
005105b2 8b442434 mov eax,[esp+0x34]
005105b6 85c0 test eax,eax
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0000004d 00000000 00000000 00000000 00000000 Shareaza+0x11059c
*----> Raw Stack Dump <----*
00000000029bfe10 00 04 00 00 00 00 00 00 - 10 86 26 06 00 5d 75 04 ..........&..]u.
00000000029bfe20 00 00 00 00 00 00 00 00 - e5 40 eb 08 00 00 00 00 .........@......
00000000029bfe30 91 1f 00 00 a4 49 15 00 - 97 90 f4 05 c8 71 a7 71 .....I.......q.q
00000000029bfe40 00 20 00 00 00 00 00 00 - 7d 68 a5 71 4d 00 00 00 . ......}h.qM...
00000000029bfe50 60 07 00 00 c0 af 49 00 - 87 ae 49 00 10 86 26 06 `.....I...I...&.
00000000029bfe60 02 00 00 00 00 00 00 00 - 4f c2 02 00 00 5d 75 04 ........O....]u.
00000000029bfe70 41 03 00 00 18 4e 46 00 - 00 5d 75 04 22 9a 41 00 A....NF..]u.".A.
00000000029bfe80 30 e5 6e 00 01 00 00 00 - 00 00 00 00 32 25 80 7c 0.n.........2%.|
00000000029bfe90 c4 00 00 00 ff ff ff ff - dc 9e 41 00 00 5d 75 04 ..........A..]u.
00000000029bfea0 34 e5 6e 00 af 7d 50 03 - 4f c2 02 00 fe b8 49 00 4.n..}P.O.....I.
00000000029bfeb0 20 b9 49 00 a8 fd 6e 00 - b8 fd 6e 00 42 24 80 7c .I...n...n.B$.|
00000000029bfec0 e8 fe 6e 00 15 00 00 00 - 12 00 00 00 b4 2e 40 0a ..n...........@.
00000000029bfed0 41 03 00 00 0a 0a 00 00 - e4 b3 7b 04 00 00 00 00 A.........{.....
00000000029bfee0 00 5d 75 04 43 8f 50 03 - 6a 04 00 00 b2 f9 49 00 .]u.C.P.j.....I.
00000000029bfef0 10 fa ae 01 80 ff 9b 02 - 44 03 00 00 0a f9 49 00 ........D.....I.
00000000029bff00 dc f8 12 00 93 8d 62 00 - a8 fd 6e 00 04 6d 2b 66 ......b...n..m+f
00000000029bff10 a0 76 af 01 a0 76 af 01 - 24 5c d5 b7 d4 01 66 00 .v...v..$\....f.
00000000029bff20 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000029bff30 01 00 00 00 00 00 00 00 - 98 00 03 00 00 81 f5 88 ................
00000000029bff40 00 00 00 00 00 00 00 00 - 44 01 66 00 b8 01 66 00 ........D.f...f.
*----> State Dump for Thread Id 0x998 <----*
eax=000003a0 ebx=001862f8 ecx=001b4e00 edx=0000009d esi=7fffffff edi=ffffffff
eip=7c90eb94 esp=0300fd98 ebp=0300fdd4 iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000293
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\mswsock.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\WS2_32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\System32\WINHTTP.dll -
ChildEBP RetAddr Args to Child
0300fdd4 71a55fa7 000003b8 000003a0 00000000 ntdll!KiFastSystemCallRet
0300fec8 71ab2e67 00000001 0138c0b0 0138c4b4 mswsock+0x5fa7
0300ff18 4d506091 00000001 0138c0b0 0138c4b4 WS2_32!select+0xa7
0300ffa0 4d506525 00000000 00000000 0138c000 WINHTTP!WinHttpReceiveResponse+0x5f10
0300ffb4 7c80b683 0138c000 00000000 00000000 WINHTTP!WinHttpReceiveResponse+0x63a4
0300ffec 00000000 4d50650d 0138c000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000300fd98 c0 e9 90 7c 33 40 a5 71 - b8 03 00 00 01 00 00 00 ...|3@.q........
000000000300fda8 c0 fd 00 03 78 fe 00 03 - b0 c0 38 01 68 fe 00 03 ....x.....8.h...
000000000300fdb8 a6 0f e6 3b 37 55 c7 01 - ff ff ff ff ff ff ff 7f ...;7U..........
000000000300fdc8 f8 62 18 00 00 00 00 00 - 00 00 00 00 c8 fe 00 03 .b..............
000000000300fdd8 a7 5f a5 71 b8 03 00 00 - a0 03 00 00 00 00 00 00 ._.q............
000000000300fde8 04 00 00 00 b8 c8 38 01 - d0 79 1a 00 b4 c4 38 01 ......8..y....8.
000000000300fdf8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000300fe08 01 00 00 00 80 0f 05 fd - ff ff ff ff 13 44 a5 71 .............D.q
000000000300fe18 00 00 00 00 10 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000300fe28 64 fe 00 03 17 20 01 00 - 4c fe 00 03 10 00 00 00 d.... ..L.......
000000000300fe38 fc fe 00 03 b0 44 a5 71 - 01 00 00 00 1c 00 00 00 .....D.q........
000000000300fe48 f8 62 18 00 84 fe 00 03 - b4 c4 38 01 b8 c8 38 01 .b........8...8.
000000000300fe58 00 00 00 00 68 fe 00 03 - 00 00 00 00 00 00 00 00 ....h...........
000000000300fe68 80 0f 05 fd ff ff ff ff - 01 00 00 00 00 00 00 00 ................
000000000300fe78 a0 03 00 00 19 00 00 00 - f8 62 18 00 00 00 00 00 .........b......
000000000300fe88 40 fe 00 03 d8 73 1a 00 - dc ff 00 03 c8 71 a7 71 @....s.......q.q
000000000300fe98 b8 44 a5 71 ff ff ff ff - b0 44 a5 71 c9 61 ab 71 .D.q.....D.q.a.q
000000000300fea8 a0 03 00 00 92 8d 00 00 - ec fd 00 03 0c 15 aa 71 ...............q
000000000300feb8 08 ff 00 03 c8 71 a7 71 - 68 2e a5 71 ff ff ff ff .....q.qh..q....
000000000300fec8 18 ff 00 03 67 2e ab 71 - 01 00 00 00 b0 c0 38 01 ....g..q......8.
*----> State Dump for Thread Id 0x99c <----*
eax=01384200 ebx=00000000 ecx=01384018 edx=013810a8 esi=0138f000 edi=00000001
eip=7c90eb94 esp=0310ff08 ebp=0310ff34 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0310ff34 4d5066cd 000003ac 0310ffa8 0310ffac ntdll!KiFastSystemCallRet
0310ffb4 7c80b683 4d4f0000 0012e0d8 7c90ee18 WINHTTP!WinHttpReceiveResponse+0x654c
0310ffec 00000000 4d506686 4d4f0000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000310ff08 1b e3 90 7c 46 a7 80 7c - ac 03 00 00 ac ff 10 03 ...|F..|........
000000000310ff18 4c ff 10 03 2c ff 10 03 - 00 00 00 00 5d 09 50 4d L...,.......].PM
000000000310ff28 fe ff ff ff 00 00 00 00 - 01 00 00 00 b4 ff 10 03 ................
000000000310ff38 cd 66 50 4d ac 03 00 00 - a8 ff 10 03 ac ff 10 03 .fPM............
000000000310ff48 9c ff 10 03 ff ff ff ff - d8 e0 12 00 18 ee 90 7c ...............|
000000000310ff58 00 00 4f 4d 00 00 00 00 - b8 18 4f 80 00 00 00 00 ..OM......O.....
000000000310ff68 00 00 00 00 58 53 4e 80 - e7 e2 6e 80 20 40 f6 88 ....XSN...n. @..
000000000310ff78 50 fd 6a b4 00 00 00 00 - 00 00 00 00 01 00 00 00 P.j.............
000000000310ff88 00 00 00 00 40 f7 ed 88 - a1 a8 4f 80 00 00 00 00 ....@.....O.....
000000000310ff98 00 00 00 00 00 b0 38 01 - 00 00 00 00 00 00 00 00 ......8.........
000000000310ffa8 ff ff ff ff 00 f0 38 01 - 00 00 22 03 ec ff 10 03 ......8...".....
000000000310ffb8 83 b6 80 7c 00 00 4f 4d - d8 e0 12 00 18 ee 90 7c ...|..OM.......|
000000000310ffc8 00 00 4f 4d 00 a0 fa 7f - 00 d6 8f 89 c0 ff 10 03 ..OM............
000000000310ffd8 18 4d f6 88 ff ff ff ff - a8 9a 83 7c 90 b6 80 7c .M.........|...|
000000000310ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 86 66 50 4d .............fPM
000000000310fff8 00 00 4f 4d 00 00 00 00 - ff ff ff ff ff ff ff ff ..OM............
0000000003110008 00 00 00 00 00 10 00 00 - 00 01 00 00 00 00 00 00 ................
0000000003110018 00 00 00 00 00 00 00 00 - 01 00 00 00 00 01 00 00 ................
0000000003110028 a4 1a 11 03 54 1a 11 03 - 34 12 11 03 d8 19 11 03 ....T...4.......
0000000003110038 50 ed 53 4d 00 00 00 00 - 04 00 00 00 20 00 00 00 P.SM........ ...
*----> State Dump for Thread Id 0x9a8 <----*
eax=00000000 ebx=c0000000 ecx=0334ff7c edx=7c90eb94 esi=00000000 edi=71a87558
eip=7c90eb94 esp=0334ff7c ebp=0334ffb4 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0334ffb4 7c80b683 71a5d8ec 0310f100 7c90ee18 ntdll!KiFastSystemCallRet
0334ffec 00000000 71a5d5af 001a7dd0 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000334ff7c 1b e3 90 7c 09 d6 a5 71 - cc 03 00 00 bc ff 34 03 ...|...q......4.
000000000334ff8c b0 ff 34 03 a4 ff 34 03 - 50 d6 a5 71 00 f1 10 03 ..4...4.P..q....
000000000334ff9c 18 ee 90 7c d0 7d 1a 00 - 00 00 00 00 00 00 00 00 ...|.}..........
000000000334ffac 00 00 a5 71 70 6f 1b 00 - ec ff 34 03 83 b6 80 7c ...qpo....4....|
000000000334ffbc ec d8 a5 71 00 f1 10 03 - 18 ee 90 7c d0 7d 1a 00 ...q.......|.}..
000000000334ffcc 00 90 fa 7f 00 d6 8f 89 - c0 ff 34 03 18 4d f6 88 ..........4..M..
000000000334ffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|....
000000000334ffec 00 00 00 00 00 00 00 00 - af d5 a5 71 d0 7d 1a 00 ...........q.}..
000000000334fffc 00 00 00 00 48 54 54 50 - 2f 31 2e 30 20 32 30 30 ....HTTP/1.0 200
000000000335000c 20 4f 4b 0d 0a 53 45 52 - 56 45 52 3a 20 4c 49 4e OK..SERVER: LIN
000000000335001c 55 58 2f 32 2e 34 20 55 - 50 6e 50 2f 31 2e 30 20 UX/2.4 UPnP/1.0
000000000335002c 42 52 43 4d 34 30 30 2f - 31 2e 30 0d 0a 44 41 54 BRCM400/1.0..DAT
000000000335003c 45 3a 20 54 75 65 2c 20 - 32 30 20 46 65 62 20 32 E: Tue, 20 Feb 2
000000000335004c 30 30 37 20 30 30 3a 30 - 37 3a 34 34 20 47 4d 54 007 00:07:44 GMT
000000000335005c 0d 0a 43 4f 4e 54 45 4e - 54 2d 54 59 50 45 3a 20 ..CONTENT-TYPE:
000000000335006c 61 70 70 6c 69 63 61 74 - 69 6f 6e 2f 6f 63 74 65 application/octe
000000000335007c 74 2d 73 74 72 65 61 6d - 0d 0a 43 61 63 68 65 2d t-stream..Cache-
000000000335008c 43 6f 6e 74 72 6f 6c 3a - 20 6d 61 78 2d 61 67 65 Control: max-age
000000000335009c 3d 31 0d 0a 50 52 41 47 - 4d 41 3a 20 6e 6f 2d 63 =1..PRAGMA: no-c
00000000033500ac 61 63 68 65 0d 0a 43 6f - 6e 6e 65 63 74 69 6f 6e ache..Connection
*----> State Dump for Thread Id 0x9ac <----*
eax=034aff98 ebx=00186378 ecx=7c91056d edx=3ad60023 esi=034afbc8 edi=034afb9c
eip=7c90eb94 esp=034afb14 ebp=034afb60 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
034afb60 77e7a716 00185e80 034afb80 77e7a747 ntdll!KiFastSystemCallRet
034afb6c 77e7a747 034afb9c 74f01830 034aff78 RPCRT4!I_RpcSendReceive+0x23
034afb80 77ef3675 034afbc8 00185e94 00000000 RPCRT4!NdrSendReceive+0x28
034aff5c 74f0500d 74f01830 74f015fc 034aff78 RPCRT4!NdrClientCall2+0x1a5
034aff70 74f02586 001b76b0 034aff98 00000000 SSDPAPI!FindServices+0x1e9
034affb4 7c80b683 001b76b0 00000000 00000000 SSDPAPI!DeregisterNotification+0x5de
034affec 00000000 74f02555 001b76b0 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000034afb14 ed e3 90 7c 68 c9 e7 77 - 34 02 00 00 48 5e 18 00 ...|h..w4...H^..
00000000034afb24 48 5e 18 00 9c fb 4a 03 - c8 fb 4a 03 01 00 00 00 H^....J...J.....
00000000034afb34 2d 39 ea 77 20 7f 1a 00 - 00 00 00 00 00 00 00 00 -9.w ...........
00000000034afb44 1e cf e7 77 b0 76 1b 00 - 80 5e 18 00 b0 76 1b 00 ...w.v...^...v..
00000000034afb54 80 fb 4a 03 dc 8e e7 77 - 00 00 00 00 6c fb 4a 03 ..J....w....l.J.
00000000034afb64 16 a7 e7 77 80 5e 18 00 - 80 fb 4a 03 47 a7 e7 77 ...w.^....J.G..w
00000000034afb74 9c fb 4a 03 30 18 f0 74 - 78 ff 4a 03 5c ff 4a 03 ..J.0..tx.J.\.J.
00000000034afb84 75 36 ef 77 c8 fb 4a 03 - 94 5e 18 00 00 00 00 00 u6.w..J..^......
00000000034afb94 00 00 00 00 b0 76 1b 00 - 78 63 18 00 10 00 00 00 .....v..xc......
00000000034afba4 80 5e 18 00 14 00 00 00 - 09 00 00 00 74 4c 18 00 .^..........tL..
00000000034afbb4 38 14 f0 74 16 1e 4e 77 - 05 00 00 00 32 1e 4e 77 8..t..Nw....2.Nw
00000000034afbc4 00 00 00 00 9c fb 4a 03 - 94 5e 18 00 00 00 00 00 ......J..^......
00000000034afbd4 00 00 00 00 00 00 00 00 - 24 00 00 00 00 00 00 00 ........$.......
00000000034afbe4 00 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000034afbf4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000034afc04 00 00 00 00 00 00 00 00 - 00 00 00 00 be 52 f0 74 .............R.t
00000000034afc14 ce 52 f0 74 78 ff 4a 03 - 18 fc 4a 03 00 02 00 00 .R.tx.J...J.....
00000000034afc24 38 6a 1b 00 30 18 f0 74 - 00 00 00 00 00 00 00 00 8j..0..t........
00000000034afc34 00 00 00 00 30 00 00 00 - 02 00 00 00 00 00 00 00 ....0...........
00000000034afc44 2c 01 3d 00 e0 95 9a 00 - 00 00 00 00 00 00 00 00 ,.=.............
*----> State Dump for Thread Id 0x9f4 <----*
eax=00180b80 ebx=00000000 ecx=00180c90 edx=01defe14 esi=00153130 edi=001531d4
eip=7c90eb94 esp=01defe1c ebp=01deff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
01deff80 77e76c22 01deffa8 77e76a3b 00153130 ntdll!KiFastSystemCallRet
01deff88 77e76a3b 00153130 00000007 00000000 RPCRT4!I_RpcBCacheFree+0x5ea
01deffa8 77e76c0a 00167f80 01deffec 7c80b683 RPCRT4!I_RpcBCacheFree+0x403
01deffb4 7c80b683 001c9f20 00000007 00000000 RPCRT4!I_RpcBCacheFree+0x5d2
01deffec 00000000 77e76bf0 001c9f20 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
0000000001defe1c 99 e3 90 7c 03 67 e7 77 - 74 01 00 00 70 ff de 01 ...|.g.wt...p...
0000000001defe2c 00 00 00 00 10 d0 1d 00 - 4c ff de 01 0b 53 04 00 ........L....S..
0000000001defe3c 08 f9 6b 81 00 00 00 00 - 9c 36 50 c0 20 79 11 89 ..k......6P. y..
0000000001defe4c c7 08 00 00 02 2b d8 b8 - 00 00 4e 80 c7 08 00 00 .....+....N.....
0000000001defe5c 20 79 11 89 00 40 fa 7f - fc 07 30 c0 90 fe 1f c0 y...@....0.....
0000000001defe6c 04 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001defe7c 00 00 00 00 64 b2 e0 88 - 28 2c d8 b8 8e b5 4e 80 ....d...(,....N.
0000000001defe8c fc 07 30 c0 28 2c d8 b8 - 06 b4 4e 80 00 40 fa 7f ..0.(,....N..@..
0000000001defe9c 00 00 00 00 00 00 00 00 - c8 dc 02 89 28 77 11 89 ............(w..
0000000001defeac 01 77 11 89 00 00 00 00 - 90 fe 1f c0 00 00 00 00 .w..............
0000000001defebc 00 00 00 00 ff ff ee 00 - 00 00 04 00 ef 0e 00 00 ................
0000000001defecc f4 77 11 89 28 77 11 89 - 00 00 00 00 00 00 00 00 .w..(w..........
0000000001defedc 00 00 ef 00 3c 2b d8 b8 - 00 00 00 00 ff ff ff ff ....<+..........
0000000001defeec 90 24 4e 80 00 40 fa 7f - ff ff ff ff 22 89 56 80 .$N..@......".V.
0000000001defefc ec e7 4d 80 ff ff ff ff - b8 2c d8 b8 bc 2c d8 b8 ..M......,...,..
0000000001deff0c 00 80 00 00 14 2d d8 b8 - 6c d7 e0 88 24 2c d8 b8 .....-..l...$,..
0000000001deff1c b2 c2 4d 80 ba c2 4d 80 - 3c d7 e0 88 d0 d5 e0 88 ..M...M.<.......
0000000001deff2c 04 d6 e0 88 80 ff de 01 - 99 66 e7 77 4c ff de 01 .........f.wL...
0000000001deff3c a9 66 e7 77 ed 10 90 7c - f8 9e 1c 00 20 9f 1c 00 .f.w...|.... ...
0000000001deff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......
*----> State Dump for Thread Id 0xb38 <----*
eax=00188c90 ebx=71ac408c ecx=7ffd6000 edx=71ac408c esi=00000494 edi=00000000
eip=7c90eb94 esp=038eff20 ebp=038eff84 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
038eff84 7c802532 00000494 ffffffff 00000000 ntdll!KiFastSystemCallRet
038eff98 71abd174 00000494 ffffffff 0012f66c kernel32!WaitForSingleObject+0x12
038effb4 7c80b683 00000494 0012f66c 7c90ee18 WS2_32!getnameinfo+0xb03
038effec 00000000 71abd149 001ed510 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000038eff20 c0 e9 90 7c cb 25 80 7c - 94 04 00 00 00 00 00 00 ...|.%.|........
00000000038eff30 00 00 00 00 10 d5 1e 00 - 98 fd 21 00 8c 40 ac 71 ..........!..@.q
00000000038eff40 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000038eff50 10 00 00 00 30 00 00 00 - 7c ff 8e 03 00 e0 fd 7f ....0...|.......
00000000038eff60 00 60 fd 7f 00 00 00 00 - 09 00 00 00 34 ff 8e 03 .`..........4...
00000000038eff70 18 ee 90 7c dc ff 8e 03 - a8 9a 83 7c f8 25 80 7c ...|.......|.%.|
00000000038eff80 00 00 00 00 98 ff 8e 03 - 32 25 80 7c 94 04 00 00 ........2%.|....
00000000038eff90 ff ff ff ff 00 00 00 00 - b4 ff 8e 03 74 d1 ab 71 ............t..q
00000000038effa0 94 04 00 00 ff ff ff ff - 6c f6 12 00 18 ee 90 7c ........l......|
00000000038effb0 10 d5 1e 00 ec ff 8e 03 - 83 b6 80 7c 94 04 00 00 ...........|....
00000000038effc0 6c f6 12 00 18 ee 90 7c - 10 d5 1e 00 00 60 fd 7f l......|.....`..
00000000038effd0 00 d6 8f 89 c0 ff 8e 03 - 78 a4 06 89 ff ff ff ff ........x.......
00000000038effe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
00000000038efff0 00 00 00 00 49 d1 ab 71 - 10 d5 1e 00 00 00 00 00 ....I..q........
00000000038f0000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000038f0010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000038f0020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000038f0030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000038f0040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000038f0050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
Application exception occurred:
App: C:\Program Files\Shareaza\Shareaza.exe (pid=2364)
When: 2/20/2007 @ 14:01:51.109
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: NUMBER1
User Name: Administrator
Terminal Session Id: 0
Number of Processors: 1
Processor Type: x86 Family 6 Model 8 Stepping 1
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Uniprocessor Free
Registered Organization:
Registered Owner: Number 1
*----> Task List <----*
0 System Process
4 System
664 smss.exe
724 csrss.exe
752 winlogon.exe
796 services.exe
808 lsass.exe
956 svchost.exe
1056 svchost.exe
1144 svchost.exe
1264 svchost.exe
1344 svchost.exe
1560 spoolsv.exe
1760 Explorer.EXE
1852 avgamsvr.exe
1888 avgupsvc.exe
1968 nvsvc32.exe
172 wdfmgr.exe
348 avgcc.exe
720 qttask.exe
1304 V CAST Music Monitor.exe
1612 alg.exe
1580 svchost.exe
1748 wuauclt.exe
652 msmsgs.exe
2364 Shareaza.exe
3860 FIREFOX.EXE
3620 MaxBlast.exe
3840 wmiprvse.exe
3764 drwtsn32.exe
*----> Module List <----*
(0000000000400000 - 0000000000859000: C:\Program Files\Shareaza\Shareaza.exe
(0000000001b20000 - 0000000001b34000: C:\Program Files\Shareaza\Plugins\ImageViewer.dll
(0000000003780000 - 00000000038ec000: C:\WINDOWS\System32\quartz.dll
(0000000010000000 - 000000001013a000: C:\Program Files\Shareaza\libgfl254.dll
(000000001af40000 - 000000001af4f000: C:\Program Files\Shareaza\Plugins\GFLImageServices.dll
(000000001afa0000 - 000000001afb9000: C:\Program Files\Shareaza\Plugins\MediaLibraryBuilder.dll
(0000000020000000 - 00000000202c5000: C:\WINDOWS\system32\xpsp2res.dll
(000000004d4f0000 - 000000004d548000: C:\WINDOWS\System32\WINHTTP.dll
(000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32\uxtheme.dll
(000000005b860000 - 000000005b8b4000: C:\WINDOWS\system32\NETAPI32.dll
(0000000060ca0000 - 0000000060d2c000: C:\WINDOWS\System32\qedit.dll
(00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll
(0000000071a50000 - 0000000071a8f000: C:\WINDOWS\system32\mswsock.dll
(0000000071a90000 - 0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll
(0000000071aa0000 - 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll
(0000000071ab0000 - 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll
(0000000071ad0000 - 0000000071ad9000: C:\WINDOWS\system32\wsock32.dll
(0000000071bf0000 - 0000000071c03000: C:\WINDOWS\system32\SAMLIB.dll
(00000000722b0000 - 00000000722b5000: C:\WINDOWS\system32\sensapi.dll
(0000000073000000 - 0000000073026000: C:\WINDOWS\system32\WINSPOOL.DRV
(00000000745e0000 - 00000000748a6000: C:\WINDOWS\system32\msi.dll
(0000000074980000 - 0000000074a8e000: C:\WINDOWS\System32\msxml3.dll
(0000000074ad0000 - 0000000074ad8000: C:\WINDOWS\system32\PowrProf.dll
(0000000074f00000 - 0000000074f0c000: C:\WINDOWS\System32\SSDPAPI.dll
(0000000075a70000 - 0000000075a91000: C:\WINDOWS\System32\MSVFW32.dll
(0000000075e90000 - 0000000075f40000: C:\WINDOWS\system32\SXS.DLL
(0000000075f40000 - 0000000075f51000: C:\WINDOWS\System32\devenum.dll
(00000000763b0000 - 00000000763f9000: C:\WINDOWS\system32\comdlg32.dll
(00000000769c0000 - 0000000076a73000: C:\WINDOWS\system32\USERENV.dll
(0000000076b20000 - 0000000076b31000: C:\WINDOWS\system32\ATL.DLL
(0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll
(0000000076d40000 - 0000000076d58000: C:\WINDOWS\system32\MPRAPI.dll
(0000000076d60000 - 0000000076d79000: C:\WINDOWS\system32\iphlpapi.dll
(0000000076de0000 - 0000000076e03000: C:\WINDOWS\System32\upnp.dll
(0000000076e10000 - 0000000076e35000: C:\WINDOWS\system32\adsldpc.dll
(0000000076e80000 - 0000000076e8e000: C:\WINDOWS\system32\rtutils.dll
(0000000076e90000 - 0000000076ea2000: C:\WINDOWS\system32\rasman.dll
(0000000076eb0000 - 0000000076edf000: C:\WINDOWS\system32\TAPI32.dll
(0000000076ee0000 - 0000000076f1c000: C:\WINDOWS\system32\RASAPI32.DLL
(0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fb0000 - 0000000076fb8000: C:\WINDOWS\System32\winrnr.dll
(0000000076fc0000 - 0000000076fc6000: C:\WINDOWS\system32\rasadhlp.dll
(0000000076fd0000 - 000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL
(0000000077050000 - 0000000077115000: C:\WINDOWS\system32\COMRes.dll
(0000000077120000 - 00000000771ac000: C:\WINDOWS\system32\OLEAUT32.dll
(00000000771b0000 - 0000000077256000: C:\WINDOWS\system32\WININET.dll
(00000000773d0000 - 00000000774d3000: C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077920000 - 0000000077a13000: C:\WINDOWS\system32\SETUPAPI.dll
(0000000077a80000 - 0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32\appHelp.dll
(0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32\VERSION.dll
(0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32\msvcrt.dll
(0000000077cc0000 - 0000000077cf2000: C:\WINDOWS\system32\ACTIVEDS.dll
(0000000077d40000 - 0000000077dd0000: C:\WINDOWS\system32\USER32.dll
(0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077f10000 - 0000000077f57000: C:\WINDOWS\system32\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\system32\Secur32.dll
(000000007c800000 - 000000007c8f4000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d5000: C:\WINDOWS\system32\SHELL32.dll
(000000007e1e0000 - 000000007e280000: C:\WINDOWS\system32\urlmon.dll
*----> State Dump for Thread Id 0x890 <----*
eax=00000000 ebx=00000000 ecx=000be941 edx=00000000 esi=0015d650 edi=0015d620
eip=7c90eb94 esp=0012fe34 ebp=0012fe50 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll -
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Module load completed but symbols could not be loaded for C:\Program Files\Shareaza\Shareaza.exe
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0012fe50 006289b9 0015d650 00000000 00000000 ntdll!KiFastSystemCallRet
00000000 00000000 00000000 00000000 00000000 Shareaza+0x2289b9
*----> Raw Stack Dump <----*
000000000012fe34 be 91 d4 77 f1 91 d4 77 - 50 d6 15 00 00 00 00 00 ...w...wP.......
000000000012fe44 00 00 00 00 00 00 00 00 - 50 d6 15 00 00 00 00 00 ........P.......
000000000012fe54 b9 89 62 00 50 d6 15 00 - 00 00 00 00 00 00 00 00 ..b.P...........
000000000012fe64 00 00 00 00 50 d6 15 00 - b0 05 6f 00 42 87 62 00 ....P.....o.B.b.
000000000012fe74 b0 05 6f 00 b0 05 6f 00 - c0 ff 12 00 ff ff ff ff ..o...o.........
000000000012fe84 02 00 00 00 20 d6 15 00 - 81 00 63 00 a1 b6 80 7c .... .....c....|
000000000012fe94 00 00 00 00 00 e0 fd 7f - 3f 34 61 00 00 00 40 00 ........?4a...@.
000000000012fea4 00 00 00 00 c2 06 02 00 - 01 00 00 00 94 00 00 00 ................
000000000012feb4 05 00 00 00 01 00 00 00 - 28 0a 00 00 02 00 00 00 ........(.......
000000000012fec4 53 65 72 76 69 63 65 20 - 50 61 63 6b 20 32 00 b4 Service Pack 2..
000000000012fed4 00 40 9c e1 00 50 9c e1 - 00 60 9c e1 00 70 9c e1 .@...P...`...p..
000000000012fee4 00 80 9c e1 00 90 9c e1 - 00 a0 9c e1 00 b0 9c e1 ................
000000000012fef4 00 c0 9c e1 00 d0 9c e1 - 00 e0 9c e1 00 f0 9c e1 ................
000000000012ff04 00 00 9d e1 00 10 9d e1 - 00 20 9d e1 88 bb f8 88 ......... ......
000000000012ff14 80 69 67 ff 7d 8c 02 00 - 01 00 00 00 0f 00 00 00 .ig.}...........
000000000012ff24 00 00 00 00 0f 00 00 00 - c4 09 00 00 80 e8 55 80 ..............U.
000000000012ff34 48 3c 6d b4 c1 8f 54 80 - 00 00 93 89 d4 32 61 00 H<m...T......2a.
000000000012ff44 39 00 34 00 32 00 32 00 - 00 e0 fd 7f 44 00 00 00 9.4.2.2.....D...
000000000012ff54 60 07 02 00 40 07 02 00 - c4 06 02 00 00 00 00 00 `...@...........
000000000012ff64 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
*----> State Dump for Thread Id 0xc34 <----*
eax=0101ff54 ebx=00000000 ecx=00153130 edx=7c90eb94 esi=00153130 edi=001531d4
eip=7c90eb94 esp=0101fe1c ebp=0101ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0101ff80 77e76c22 0101ffa8 77e76a3b 00153130 ntdll!KiFastSystemCallRet
0101ff88 77e76a3b 00153130 00000000 0012f5f8 RPCRT4!I_RpcBCacheFree+0x5ea
0101ffa8 77e76c0a 00167f80 0101ffec 7c80b683 RPCRT4!I_RpcBCacheFree+0x403
0101ffb4 7c80b683 00166a80 00000000 0012f5f8 RPCRT4!I_RpcBCacheFree+0x5d2
0101ffec 00000000 77e76bf0 00166a80 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000101fe1c 99 e3 90 7c 03 67 e7 77 - 74 01 00 00 70 ff 01 01 ...|.g.wt...p...
000000000101fe2c 00 00 00 00 58 4a 17 00 - 4c ff 01 01 2f c5 57 80 ....XJ..L.../.W.
000000000101fe3c 4a c5 57 80 64 3d 6d b4 - 78 f4 12 00 aa c4 57 80 J.W.d=m.x.....W.
000000000101fe4c 37 40 56 80 02 00 00 00 - 00 00 f8 88 08 00 00 00 7@V.............
000000000101fe5c 88 bb f8 88 88 bb f8 88 - 58 3b 6d b4 8c 39 4e 80 ........X;m..9N.
000000000101fe6c 02 00 00 00 02 15 53 89 - 00 00 00 00 74 3b 6d b4 ......S.....t;m.
000000000101fe7c b5 46 4e 80 00 00 00 00 - ce 39 4e 80 d8 26 2b 89 .FN......9N..&+.
000000000101fe8c 70 c1 f9 88 80 15 53 89 - 88 3b 6d b4 8b f6 7b f7 p.....S..;m...{.
000000000101fe9c d4 c1 f9 88 00 00 00 00 - 00 00 00 00 9c 3b 6d b4 .............;m.
000000000101feac 1a 24 6b b9 d0 c1 f9 88 - 00 00 00 00 30 11 53 89 .$k.........0.S.
000000000101febc c4 3b 6d b4 9a 31 97 f7 - b0 09 2b 89 70 c1 f9 88 .;m..1....+.p...
000000000101fecc a9 31 97 f7 60 11 53 89 - 30 11 53 89 00 00 00 00 .1..`.S.0.S.....
000000000101fedc d8 26 2b 89 00 00 00 00 - dc 3b 6d b4 49 39 97 f7 .&+......;m.I9..
000000000101feec 6c 39 97 f7 dc 3b 6d b4 - 00 00 00 00 51 54 9e ba l9...;m.....QT..
000000000101fefc f8 3b 6d b4 5d c9 9e ba - 00 2c 9f ba 60 8a 53 89 .;m.]....,..`.S.
000000000101ff0c e8 a3 51 89 c0 26 8c 89 - 24 ed 0d 89 24 3c 6d b4 ..Q..&..$...$<m.
000000000101ff1c b2 c2 4d 80 ba c2 4d 80 - f4 ec 0d 89 88 eb 0d 89 ..M...M.........
000000000101ff2c bc eb 0d 89 80 ff 01 01 - 99 66 e7 77 4c ff 01 01 .........f.wL...
000000000101ff3c a9 66 e7 77 ed 10 90 7c - b0 67 16 00 80 6a 16 00 .f.w...|.g...j..
000000000101ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......
*----> State Dump for Thread Id 0xd10 <----*
eax=000000c0 ebx=00000000 ecx=00174ad0 edx=00174a90 esi=0012eab0 edi=00001000
eip=7c90eb94 esp=0148ff9c ebp=0148ffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0148ffb4 7c80b683 00000000 00001000 0012eab0 ntdll!KiFastSystemCallRet
0148ffec 00000000 7c92798d 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000148ff9c 5c d8 90 7c d4 79 92 7c - 01 00 00 00 ac ff 48 01 \..|.y.|......H.
000000000148ffac 00 00 00 00 00 00 00 80 - ec ff 48 01 83 b6 80 7c ..........H....|
000000000148ffbc 00 00 00 00 00 10 00 00 - b0 ea 12 00 00 00 00 00 ................
000000000148ffcc 00 a0 fd 7f 00 d6 8f 89 - c0 ff 48 01 30 08 b1 88 ..........H.0...
000000000148ffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|....
000000000148ffec 00 00 00 00 00 00 00 00 - 8d 79 92 7c 00 00 00 00 .........y.|....
000000000148fffc 00 00 00 00 00 00 00 00 - 9f 00 13 00 10 00 90 01 ................
000000000149000c 17 00 b0 01 ff ff ff 00 - ff ff ff 00 00 00 00 00 ................
000000000149001c 00 00 00 00 ff ff ff 00 - ff ff ff 00 00 00 00 00 ................
000000000149002c 00 00 00 00 00 00 00 00 - 01 00 00 00 0d 02 01 01 ................
000000000149003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000149004c 02 00 00 00 01 00 00 00 - 01 00 00 00 00 00 00 00 ................
000000000149005c 00 00 00 00 00 00 00 00 - 1f 00 89 01 00 00 00 00 ................
000000000149006c ff ff ff ff ff ff ff ff - 00 00 00 00 00 00 00 00 ................
000000000149007c 00 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................
000000000149008c 00 00 00 00 21 00 8a 01 - 00 00 00 40 06 00 00 00 ....!......@....
000000000149009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000014900ac 00 00 00 40 06 00 00 00 - 00 00 00 00 00 00 00 00 ...@............
00000000014900bc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000014900cc 4b 00 00 00 00 00 00 40 - fe ff ff ff 00 00 00 00 K......@........
*----> State Dump for Thread Id 0xfe4 <----*
eax=00188584 ebx=00000000 ecx=00000001 edx=76dfbb8c esi=7c97c380 edi=7c97c3a0
eip=7c90eb94 esp=015cff70 ebp=015cffb4 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000286
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
015cffb4 7c80b683 00000000 0012f864 7c915a00 ntdll!KiFastSystemCallRet
015cffec 00000000 7c910760 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000015cff70 1b e3 90 7c 9d 07 91 7c - f0 01 00 00 ac ff 5c 01 ...|...|......\.
00000000015cff80 b0 ff 5c 01 98 ff 5c 01 - a0 ff 5c 01 64 f8 12 00 ..\...\...\.d...
00000000015cff90 00 5a 91 7c 00 00 00 00 - 00 00 00 00 78 d3 1b 00 .Z.|........x...
00000000015cffa0 00 7c 28 e8 ff ff ff ff - 35 ec 6e 80 69 75 92 7c .|(.....5.n.iu.|
00000000015cffb0 e0 21 1c 00 ec ff 5c 01 - 83 b6 80 7c 00 00 00 00 .!....\....|....
00000000015cffc0 64 f8 12 00 00 5a 91 7c - 00 00 00 00 00 90 fd 7f d....Z.|........
00000000015cffd0 00 d6 8f 89 c0 ff 5c 01 - 30 08 b1 88 ff ff ff ff ......\.0.......
00000000015cffe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
00000000015cfff0 00 00 00 00 60 07 91 7c - 00 00 00 00 00 00 00 00 ....`..|........
00000000015d0000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0060 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0070 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0080 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d00a0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
*----> State Dump for Thread Id 0x938 <----*
eax=000000c0 ebx=00000000 ecx=0012f8f0 edx=00000000 esi=00000000 edi=00000001
eip=7c90eb94 esp=016cfcec ebp=016cffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
016cffb4 7c80b683 00000000 00000020 0012f864 ntdll!KiFastSystemCallRet
016cffec 00000000 7c929fae 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000016cfcec ab e9 90 7c d5 a0 92 7c - 02 00 00 00 30 fd 6c 01 ...|...|....0.l.
00000000016cfcfc 01 00 00 00 01 00 00 00 - 00 00 00 00 20 00 00 00 ............ ...
00000000016cfd0c 64 f8 12 00 00 00 00 00 - 08 e5 97 7c 08 e5 97 7c d..........|...|
00000000016cfd1c f8 01 00 00 38 09 00 00 - 02 00 00 00 02 00 00 00 ....8...........
00000000016cfd2c 01 00 00 00 f4 01 00 00 - ec 01 00 00 00 00 00 00 ................
00000000016cfd3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdcc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfddc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdfc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfe0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfe1c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
*----> State Dump for Thread Id 0x3e8 <----*
eax=74f0742e ebx=017cfed4 ecx=0000007e edx=7c910732 esi=00000000 edi=7ffde000
eip=7c90eb94 esp=017cfeac ebp=017cff48 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\System32\SSDPAPI.dll -
ChildEBP RetAddr Args to Child
017cff48 7c80a075 00000002 017cff94 00000000 ntdll!KiFastSystemCallRet
017cff64 74f04b62 00000002 017cff94 00000000 kernel32!WaitForMultipleObjects+0x18
017cffa4 74f0743f 00150000 0012f88c 017cffec SSDPAPI!FindServicesClose+0x1232
017cffb4 7c80b683 00184bd8 00150000 0012f88c SSDPAPI+0x743f
017cffec 00000000 74f0742e 00184bd8 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000017cfeac ab e9 90 7c e2 94 80 7c - 02 00 00 00 d4 fe 7c 01 ...|...|......|.
00000000017cfebc 01 00 00 00 00 00 00 00 - 00 00 00 00 d8 4b 18 00 .............K..
00000000017cfecc 5d a0 80 7c 00 00 00 00 - fc 01 00 00 e8 01 00 00 ]..|............
00000000017cfedc d7 d1 4f 77 68 68 60 77 - e1 f5 4f 77 0c 72 60 77 ..Owhh`w..Ow.r`w
00000000017cfeec 68 ff 7c 01 08 72 60 77 - 14 00 00 00 01 00 00 00 h.|..r`w........
00000000017cfefc 00 00 00 00 00 00 00 00 - 10 00 00 00 66 97 80 7c ............f..|
00000000017cff0c 68 ff 7c 01 3c 68 60 77 - 00 e0 fd 7f 00 70 fd 7f h.|.<h`w.....p..
00000000017cff1c b4 2f 51 77 00 00 00 00 - d4 fe 7c 01 68 ff 7c 01 ./Qw......|.h.|.
00000000017cff2c 02 00 00 00 c8 fe 7c 01 - 3c 68 60 77 dc ff 7c 01 ......|.<h`w..|.
00000000017cff3c a8 9a 83 7c d8 95 80 7c - 00 00 00 00 64 ff 7c 01 ...|...|....d.|.
00000000017cff4c 75 a0 80 7c 02 00 00 00 - 94 ff 7c 01 00 00 00 00 u..|......|.....
00000000017cff5c ff ff ff ff 00 00 00 00 - a4 ff 7c 01 62 4b f0 74 ..........|.bK.t
00000000017cff6c 02 00 00 00 94 ff 7c 01 - 00 00 00 00 ff ff ff ff ......|.........
00000000017cff7c d8 4b 18 00 00 00 15 00 - d8 4b 18 00 00 00 00 00 .K.......K......
00000000017cff8c 00 00 00 00 00 00 00 00 - fc 01 00 00 e8 01 00 00 ................
00000000017cff9c 00 00 00 00 01 00 00 00 - b4 ff 7c 01 3f 74 f0 74 ..........|.?t.t
00000000017cffac 00 00 15 00 8c f8 12 00 - ec ff 7c 01 83 b6 80 7c ..........|....|
00000000017cffbc d8 4b 18 00 00 00 15 00 - 8c f8 12 00 d8 4b 18 00 .K...........K..
00000000017cffcc 00 70 fd 7f 00 d6 8f 89 - c0 ff 7c 01 28 9c 1a 89 .p........|.(...
00000000017cffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|....
*----> State Dump for Thread Id 0x8dc <----*
eax=00002733 ebx=00000001 ecx=00000004 edx=001c96d0 esi=02308270 edi=00002733
eip=004196c6 esp=0255fdf8 ebp=00000000 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
function: Shareaza
004196b1 0800 or [eax],al
004196b3 8b4e28 mov ecx,[esi+0x28]
004196b6 3bcd cmp ecx,ebp
004196b8 7405 jz Shareaza+0x196bf (004196bf)
004196ba 8b11 mov edx,[ecx]
004196bc 53 push ebx
004196bd ff12 call dword ptr [edx]
004196bf 8b4e2c mov ecx,[esi+0x2c]
004196c2 3bcd cmp ecx,ebp
004196c4 7405 jz Shareaza+0x196cb (004196cb)
FAULT ->004196c6 8b01 mov eax,[ecx] ds:0023:00000004=????????
004196c8 53 push ebx
004196c9 ff10 call dword ptr [eax]
004196cb 6a14 push 0x14
004196cd e8b8e02000 call Shareaza+0x22778a (0062778a)
004196d2 83c404 add esp,0x4
004196d5 3bc5 cmp eax,ebp
004196d7 7414 jz Shareaza+0x196ed (004196ed)
004196d9 c70020dd6600 mov dword ptr [eax],0x66dd20
004196df 896804 mov [eax+0x4],ebp
004196e2 896808 mov [eax+0x8],ebp
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00000000 00000000 00000000 00000000 00000000 Shareaza+0x196c6
*----> Raw Stack Dump <----*
000000000255fdf8 70 82 30 02 70 82 30 02 - 00 00 00 00 7c 20 67 00 p.0.p.0.....| g.
000000000255fe08 d8 00 00 00 08 45 a7 01 - 9c 92 80 7c 00 00 00 00 .....E.....|....
000000000255fe18 19 3d 2e 0b a4 f4 4e 00 - 01 00 00 00 e1 1e 00 00 .=....N.........
000000000255fe28 9c 11 6e 00 4e f8 44 00 - 78 82 30 02 e1 1e 00 00 ..n.N.D.x.0.....
000000000255fe38 60 0d ad 01 00 00 00 00 - 30 00 29 02 8a 1a 4f 00 `.......0.)...O.
000000000255fe48 00 00 00 00 b3 37 2f 05 - 01 00 00 00 b0 19 4f 00 .....7/.......O.
000000000255fe58 00 00 00 00 30 00 29 02 - b3 37 2f 05 68 0a 71 00 ....0.)..7/.h.q.
000000000255fe68 f9 27 4f 00 01 00 00 00 - 30 00 29 02 6c 0a 71 00 .'O.....0.).l.q.
000000000255fe78 00 00 00 00 01 00 00 00 - b0 fe 55 02 18 06 65 00 ..........U...e.
000000000255fe88 00 00 00 00 05 80 4f 00 - 01 00 00 00 45 ec 00 00 ......O.....E...
000000000255fe98 b3 37 2f 05 80 e1 30 02 - b3 37 2f 05 00 00 00 00 .7/...0..7/.....
000000000255fea8 00 00 00 00 08 7d 30 02 - f0 fe 55 02 18 06 65 00 .....}0...U...e.
000000000255feb8 ff ff ff ff 20 70 4f 00 - 80 e1 30 02 70 82 30 02 .... pO...0.p.0.
000000000255fec8 08 7d 30 02 c8 4d 45 00 - 00 00 00 00 a0 09 71 00 .}0..ME.......q.
000000000255fed8 ff ff ff ff 00 0a 71 00 - e1 06 4f 00 7c f9 12 00 ......q...O.|...
000000000255fee8 e8 c3 a5 01 80 ff 55 02 - 74 ff 55 02 9a c7 65 00 ......U.t.U...e.
000000000255fef8 00 00 00 00 7a 06 4f 00 - c0 02 00 00 93 8d 62 00 ....z.O.......b.
000000000255ff08 00 0a 71 00 32 07 91 7c - d8 86 fb 01 d8 86 fb 01 ..q.2..|........
000000000255ff18 24 5c c4 b4 d4 01 66 00 - 01 00 00 00 00 00 00 00 $\....f.........
000000000255ff28 00 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................
*----> State Dump for Thread Id 0x8e8 <----*
eax=00000102 ebx=000002d8 ecx=0275fe70 edx=7c90eb94 esi=000000c0 edi=00000000
eip=7c90eb94 esp=0275fe70 ebp=0275fed4 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0275fed4 7c802532 000000c0 000001f4 00000000 ntdll!KiFastSystemCallRet
0275fee8 0047a7f9 000000c0 000001f4 0012fb50 kernel32!WaitForSingleObject+0x12
0275ff80 006169b3 0012fb50 00000000 7c9105c8 Shareaza+0x7a7f9
0275ffb4 7c80b683 01adeed8 00000000 7c9105c8 Shareaza+0x2169b3
0275ffec 00000000 00616944 01adeed8 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000275fe70 c0 e9 90 7c cb 25 80 7c - c0 00 00 00 00 00 00 00 ...|.%.|........
000000000275fe80 a4 fe 75 02 20 25 80 7c - d8 e1 6e 00 d8 02 00 00 ..u. %.|..n.....
000000000275fe90 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000275fea0 10 00 00 00 c0 b4 b3 ff - ff ff ff ff 00 e0 fd 7f ................
000000000275feb0 00 e0 fa 7f a4 fe 75 02 - 73 97 60 00 84 fe 75 02 ......u.s.`...u.
000000000275fec0 fa 97 60 00 74 ff 75 02 - a8 9a 83 7c f8 25 80 7c ..`.t.u....|.%.|
000000000275fed0 00 00 00 00 e8 fe 75 02 - 32 25 80 7c c0 00 00 00 ......u.2%.|....
000000000275fee0 f4 01 00 00 00 00 00 00 - 80 ff 75 02 f9 a7 47 00 ..........u...G.
000000000275fef0 c0 00 00 00 f4 01 00 00 - 50 fb 12 00 ca a7 47 00 ........P.....G.
000000000275ff00 f8 9f a5 01 93 8d 62 00 - d8 e1 6e 00 00 00 00 00 ......b...n.....
000000000275ff10 d8 ee ad 01 d8 ee ad 01 - 24 5c c4 b4 d4 01 66 00 ........$\....f.
000000000275ff20 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000275ff30 01 00 00 00 00 00 00 00 - 32 00 04 00 00 c0 f6 88 ........2.......
000000000275ff40 00 00 00 00 00 00 00 00 - 44 01 66 00 b8 01 66 00 ........D.f...f.
000000000275ff50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000275ff60 00 00 00 00 00 00 00 00 - 00 00 00 00 f8 9f a5 01 ................
000000000275ff70 0c ff 75 02 a4 ff 75 02 - 9e 3a 64 00 00 00 00 00 ..u...u..:d.....
000000000275ff80 b4 ff 75 02 b3 69 61 00 - 50 fb 12 00 00 00 00 00 ..u..ia.P.......
000000000275ff90 c8 05 91 7c d8 ee ad 01 - 00 00 00 00 8c ff 75 02 ...|..........u.
000000000275ffa0 81 a8 4f 80 dc ff 75 02 - 6c 66 61 00 70 5b 66 00 ..O...u.lfa.p[f.
*----> State Dump for Thread Id 0x418 <----*
eax=028bfe40 ebx=00196d70 ecx=028bfe98 edx=0067526c esi=000000c4 edi=00000000
eip=7c90eb94 esp=028bf904 ebp=028bf968 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
028bf968 7c802532 000000c4 00000032 00000000 ntdll!KiFastSystemCallRet
028bf97c 006096b3 000000c4 00000032 006097e3 kernel32!WaitForSingleObject+0x12
006eff30 00000000 0067d154 01acd53c 01acd524 Shareaza+0x2096b3
*----> Raw Stack Dump <----*
00000000028bf904 c0 e9 90 7c cb 25 80 7c - c4 00 00 00 00 00 00 00 ...|.%.|........
00000000028bf914 38 f9 8b 02 2c fe 8b 02 - a8 f9 8b 02 70 6d 19 00 8...,.......pm..
00000000028bf924 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000028bf934 10 00 00 00 e0 5e f8 ff - ff ff ff ff 00 e0 fd 7f .....^..........
00000000028bf944 00 d0 fa 7f 38 f9 8b 02 - dc 06 00 00 18 f9 8b 02 ....8...........
00000000028bf954 1c 00 00 00 b4 f9 8b 02 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
00000000028bf964 00 00 00 00 7c f9 8b 02 - 32 25 80 7c c4 00 00 00 ....|...2%.|....
00000000028bf974 32 00 00 00 00 00 00 00 - 30 ff 6e 00 b3 96 60 00 2.......0.n...`.
00000000028bf984 c4 00 00 00 32 00 00 00 - e3 97 60 00 32 00 00 00 ....2.....`.2...
00000000028bf994 30 fe 8b 02 f0 3b 4c 00 - 32 00 00 00 78 fe 8b 02 0....;L.2...x...
00000000028bf9a4 00 00 00 00 b8 fd 6e 00 - c4 00 00 00 00 00 00 00 ......n.........
00000000028bf9b4 68 fe 8b 02 18 06 65 00 - 00 00 00 00 c9 f1 46 00 h.....e.......F.
00000000028bf9c4 30 ff 6e 00 30 fe 8b 02 - 00 00 00 00 00 00 00 00 0.n.0...........
00000000028bf9d4 ae bc a6 71 14 fb 8b 02 - 00 00 00 00 00 00 00 00 ...q............
00000000028bf9e4 00 00 00 00 1c fb 8b 02 - 00 00 00 00 78 fb 8b 02 ............x...
00000000028bf9f4 00 00 00 00 00 00 00 00 - 48 bc 19 00 88 cd 6e 00 ........H.....n.
00000000028bfa04 01 00 00 00 20 03 00 00 - 38 07 91 7c ff ff ff ff .... ...8..|....
00000000028bfa14 09 00 00 00 4c fa 8b 02 - 00 00 d8 00 32 07 91 7c ....L.......2..|
00000000028bfa24 14 00 00 00 48 0a d8 00 - 00 00 d8 00 30 92 92 01 ....H.......0...
00000000028bfa34 24 fa 8b 02 6c fa 8b 02 - 68 fc 8b 02 18 ee 90 7c $...l...h......|
*----> State Dump for Thread Id 0x8f4 <----*
eax=00000000 ebx=00000000 ecx=006efdb8 edx=00052f37 esi=00710a74 edi=00000000
eip=7c90eb94 esp=029bfcc0 ebp=029bfd48 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
029bfd48 7c90104b 00710a74 0040909a 00710a74 ntdll!KiFastSystemCallRet
029bfd80 006097e3 00710a6c 029bfdb0 0060990f ntdll!RtlEnterCriticalSection+0x46
01af5268 ca180002 975cb351 00000000 00000000 Shareaza+0x2097e3
00674748 004194e0 004194b0 00419770 00419850 0xca180002
00461e20 00000018 082444f6 56097401 1c5985e8 Shareaza+0x194e0
*----> Raw Stack Dump <----*
00000000029bfcc0 c0 e9 90 7c 1b 90 91 7c - 88 08 00 00 00 00 00 00 ...|...|........
00000000029bfcd0 00 00 00 00 68 0a 71 00 - b0 fd 9b 02 a0 3d 94 01 ....h.q......=..
00000000029bfce0 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000029bfcf0 10 00 00 00 00 00 00 00 - c3 3a 61 00 00 e0 fd 7f .........:a.....
00000000029bfd00 00 c0 fa 7f 00 00 00 00 - 00 00 00 00 d4 fc 9b 02 ................
00000000029bfd10 00 00 00 00 88 fd 9b 02 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
00000000029bfd20 ff ff ff ff f0 25 80 7c - 32 25 80 7c d0 00 00 00 .....%.|2%.|....
00000000029bfd30 00 00 00 00 00 00 00 00 - 00 00 00 00 b3 96 60 00 ..............`.
00000000029bfd40 00 00 00 00 88 08 00 00 - 80 fd 9b 02 4b 10 90 7c ............K..|
00000000029bfd50 74 0a 71 00 9a 90 40 00 - 74 0a 71 00 68 0a 71 00 t.q...@.t.q.h.q.
00000000029bfd60 b0 fd 9b 02 a0 3d 94 01 - 5c fd 9b 02 5c c0 ec 00 .....=..\...\...
00000000029bfd70 30 fe 9b 02 6c 66 61 00 - 18 ea 6a 00 00 00 00 00 0...lfa...j.....
00000000029bfd80 68 52 af 01 e3 97 60 00 - 6c 0a 71 00 b0 fd 9b 02 hR....`.l.q.....
00000000029bfd90 0f 99 60 00 ff ff ff ff - dc fd 9b 02 06 2d 4f 00 ..`..........-O.
00000000029bfda0 6c 0a 71 00 01 00 00 00 - ff ff ff ff dc fd 9b 02 l.q.............
00000000029bfdb0 6c 0a 71 00 00 00 00 00 - 00 00 00 00 35 f9 48 00 l.q.........5.H.
00000000029bfdc0 01 00 00 00 30 fe 9b 02 - 74 43 46 00 68 52 af 01 ....0...tCF.hR..
00000000029bfdd0 0a 00 00 00 e1 f2 01 02 - 00 00 00 00 a0 7d 67 00 .............}g.
00000000029bfde0 a0 3d 94 01 68 52 af 01 - 00 00 00 00 00 00 00 00 .=..hR..........
00000000029bfdf0 07 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
*----> State Dump for Thread Id 0x900 <----*
eax=0000010f ebx=0019f680 ecx=0300fdbc edx=7c90eb94 esi=7fffffff edi=ffffffff
eip=7c90eb94 esp=0300fd98 ebp=0300fdd4 iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000293
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\mswsock.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\WS2_32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\System32\WINHTTP.dll -
ChildEBP RetAddr Args to Child
0300fdd4 71a55fa7 000003bc 000003a0 00000000 ntdll!KiFastSystemCallRet
0300fec8 71ab2e67 00000001 0138c0b0 0138c4b4 mswsock+0x5fa7
0300ff18 4d506091 00000001 0138c0b0 0138c4b4 WS2_32!select+0xa7
0300ffa0 4d506525 00000000 00000000 0138c000 WINHTTP!WinHttpReceiveResponse+0x5f10
0300ffb4 7c80b683 0138c000 00000000 00000000 WINHTTP!WinHttpReceiveResponse+0x63a4
0300ffec 00000000 4d50650d 0138c000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000300fd98 c0 e9 90 7c 33 40 a5 71 - bc 03 00 00 01 00 00 00 ...|3@.q........
000000000300fda8 c0 fd 00 03 78 fe 00 03 - b0 c0 38 01 68 fe 00 03 ....x.....8.h...
000000000300fdb8 a6 8b 95 b7 3a 55 c7 01 - ff ff ff ff ff ff ff 7f ....:U..........
000000000300fdc8 80 f6 19 00 00 00 00 00 - 00 00 00 00 c8 fe 00 03 ................
000000000300fdd8 a7 5f a5 71 bc 03 00 00 - a0 03 00 00 00 00 00 00 ._.q............
000000000300fde8 04 00 00 00 b8 c8 38 01 - 08 7f 1a 00 b4 c4 38 01 ......8.......8.
000000000300fdf8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000300fe08 01 00 00 00 80 0f 05 fd - ff ff ff ff 13 44 a5 71 .............D.q
000000000300fe18 00 00 00 00 10 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000300fe28 64 fe 00 03 17 20 01 00 - 4c fe 00 03 10 00 00 00 d.... ..L.......
000000000300fe38 fc fe 00 03 b0 44 a5 71 - 01 00 00 00 1c 00 00 00 .....D.q........
000000000300fe48 80 f6 19 00 84 fe 00 03 - b4 c4 38 01 b8 c8 38 01 ..........8...8.
000000000300fe58 00 00 00 00 68 fe 00 03 - 00 00 00 00 00 00 00 00 ....h...........
000000000300fe68 80 0f 05 fd ff ff ff ff - 01 00 00 00 00 00 00 00 ................
000000000300fe78 a0 03 00 00 19 00 00 00 - 80 f6 19 00 00 00 00 00 ................
000000000300fe88 40 fe 00 03 80 49 1a 00 - dc ff 00 03 c8 71 a7 71 @....I.......q.q
000000000300fe98 b8 44 a5 71 ff ff ff ff - b0 44 a5 71 c9 61 ab 71 .D.q.....D.q.a.q
000000000300fea8 a0 03 00 00 92 20 00 00 - ec fd 00 03 0c 15 aa 71 ..... .........q
000000000300feb8 08 ff 00 03 c8 71 a7 71 - 68 2e a5 71 ff ff ff ff .....q.qh..q....
000000000300fec8 18 ff 00 03 67 2e ab 71 - 01 00 00 00 b0 c0 38 01 ....g..q......8.
*----> State Dump for Thread Id 0xd40 <----*
eax=01384200 ebx=00000000 ecx=01384018 edx=013810a8 esi=0138f000 edi=00000001
eip=7c90eb94 esp=0310ff08 ebp=0310ff34 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0310ff34 4d5066cd 000003ac 0310ffa8 0310ffac ntdll!KiFastSystemCallRet
0310ffb4 7c80b683 4d4f0000 0012e0d8 7c90ee18 WINHTTP!WinHttpReceiveResponse+0x654c
0310ffec 00000000 4d506686 4d4f0000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000310ff08 1b e3 90 7c 46 a7 80 7c - ac 03 00 00 ac ff 10 03 ...|F..|........
000000000310ff18 4c ff 10 03 2c ff 10 03 - 00 00 00 00 5d 09 50 4d L...,.......].PM
000000000310ff28 fe ff ff ff 00 00 00 00 - 01 00 00 00 b4 ff 10 03 ................
000000000310ff38 cd 66 50 4d ac 03 00 00 - a8 ff 10 03 ac ff 10 03 .fPM............
000000000310ff48 9c ff 10 03 ff ff ff ff - d8 e0 12 00 18 ee 90 7c ...............|
000000000310ff58 00 00 4f 4d 00 00 00 00 - b8 18 4f 80 00 00 00 00 ..OM......O.....
000000000310ff68 00 00 00 00 58 53 4e 80 - e7 e2 6e 80 20 00 11 89 ....XSN...n. ...
000000000310ff78 50 9d d0 b4 00 00 00 00 - 00 00 00 00 01 00 00 00 P...............
000000000310ff88 00 00 00 00 08 4b 0f 89 - a1 a8 4f 80 00 00 00 00 .....K....O.....
000000000310ff98 00 00 00 00 00 b0 38 01 - 00 00 00 00 00 00 00 00 ......8.........
000000000310ffa8 ff ff ff ff 00 f0 38 01 - 00 00 22 03 ec ff 10 03 ......8...".....
000000000310ffb8 83 b6 80 7c 00 00 4f 4d - d8 e0 12 00 18 ee 90 7c ...|..OM.......|
000000000310ffc8 00 00 4f 4d 00 a0 fa 7f - 00 d6 8f 89 c0 ff 10 03 ..OM............
000000000310ffd8 a0 1e 01 89 ff ff ff ff - a8 9a 83 7c 90 b6 80 7c ...........|...|
000000000310ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 86 66 50 4d .............fPM
000000000310fff8 00 00 4f 4d 00 00 00 00 - ff ff ff ff ff ff ff ff ..OM............
0000000003110008 00 00 00 00 00 10 00 00 - 00 01 00 00 00 00 00 00 ................
0000000003110018 00 00 00 00 00 00 00 00 - 01 00 00 00 00 01 00 00 ................
0000000003110028 a4 1a 11 03 54 1a 11 03 - 34 12 11 03 d8 19 11 03 ....T...4.......
0000000003110038 50 ed 53 4d 00 00 00 00 - 04 00 00 00 20 00 00 00 P.SM........ ...
*----> State Dump for Thread Id 0x818 <----*
eax=00000001 ebx=c0000000 ecx=001c8da8 edx=001c8e40 esi=00000000 edi=71a87558
eip=7c90eb94 esp=0334ff7c ebp=0334ffb4 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0334ffb4 7c80b683 71a5d8ec 0310f100 7c90ee18 ntdll!KiFastSystemCallRet
0334ffec 00000000 71a5d5af 001a8518 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000334ff7c 1b e3 90 7c 09 d6 a5 71 - d0 03 00 00 bc ff 34 03 ...|...q......4.
000000000334ff8c b0 ff 34 03 a4 ff 34 03 - 50 d6 a5 71 00 f1 10 03 ..4...4.P..q....
000000000334ff9c 18 ee 90 7c 18 85 1a 00 - 00 00 00 00 00 00 00 00 ...|............
000000000334ffac 00 00 a5 71 58 4e 1c 00 - ec ff 34 03 83 b6 80 7c ...qXN....4....|
000000000334ffbc ec d8 a5 71 00 f1 10 03 - 18 ee 90 7c 18 85 1a 00 ...q.......|....
000000000334ffcc 00 90 fa 7f 00 d6 8f 89 - c0 ff 34 03 a0 1e 01 89 ..........4.....
000000000334ffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|....
000000000334ffec 00 00 00 00 00 00 00 00 - af d5 a5 71 18 85 1a 00 ...........q....
000000000334fffc 00 00 00 00 48 54 54 50 - 2f 31 2e 30 20 32 30 30 ....HTTP/1.0 200
000000000335000c 20 4f 4b 0d 0a 53 45 52 - 56 45 52 3a 20 4c 49 4e OK..SERVER: LIN
000000000335001c 55 58 2f 32 2e 34 20 55 - 50 6e 50 2f 31 2e 30 20 UX/2.4 UPnP/1.0
000000000335002c 42 52 43 4d 34 30 30 2f - 31 2e 30 0d 0a 44 41 54 BRCM400/1.0..DAT
000000000335003c 45 3a 20 54 75 65 2c 20 - 32 30 20 46 65 62 20 32 E: Tue, 20 Feb 2
000000000335004c 30 30 37 20 31 33 3a 33 - 37 3a 33 31 20 47 4d 54 007 13:37:31 GMT
000000000335005c 0d 0a 43 4f 4e 54 45 4e - 54 2d 54 59 50 45 3a 20 ..CONTENT-TYPE:
000000000335006c 61 70 70 6c 69 63 61 74 - 69 6f 6e 2f 6f 63 74 65 application/octe
000000000335007c 74 2d 73 74 72 65 61 6d - 0d 0a 43 61 63 68 65 2d t-stream..Cache-
000000000335008c 43 6f 6e 74 72 6f 6c 3a - 20 6d 61 78 2d 61 67 65 Control: max-age
000000000335009c 3d 31 0d 0a 50 52 41 47 - 4d 41 3a 20 6e 6f 2d 63 =1..PRAGMA: no-c
00000000033500ac 61 63 68 65 0d 0a 43 6f - 6e 6e 65 63 74 69 6f 6e ache..Connection
*----> State Dump for Thread Id 0xd44 <----*
eax=7ffde000 ebx=001863d8 ecx=00000000 edx=001c43f8 esi=034afbc8 edi=034afb9c
eip=7c90eb94 esp=034afb14 ebp=034afb60 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
034afb60 77e7a716 00185f18 034afb80 77e7a747 ntdll!KiFastSystemCallRet
034afb6c 77e7a747 034afb9c 74f01830 034aff78 RPCRT4!I_RpcSendReceive+0x23
034afb80 77ef3675 034afbc8 00185f2c 00000000 RPCRT4!NdrSendReceive+0x28
034aff5c 74f0500d 74f01830 74f015fc 034aff78 RPCRT4!NdrClientCall2+0x1a5
034aff70 74f02586 001b8038 034aff98 00000000 SSDPAPI!FindServices+0x1e9
034affb4 7c80b683 001b8038 00000000 00000000 SSDPAPI!DeregisterNotification+0x5de
034affec 00000000 74f02555 001b8038 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000034afb14 ed e3 90 7c 68 c9 e7 77 - 3c 02 00 00 e0 5e 18 00 ...|h..w<....^..
00000000034afb24 e0 5e 18 00 9c fb 4a 03 - c8 fb 4a 03 01 00 00 00 .^....J...J.....
00000000034afb34 2d 39 ea 77 08 2a 1c 00 - 00 00 00 00 00 00 00 00 -9.w.*..........
00000000034afb44 1e cf e7 77 38 80 1b 00 - 18 5f 18 00 38 80 1b 00 ...w8...._..8...
00000000034afb54 80 fb 4a 03 dc 8e e7 77 - 00 00 00 00 6c fb 4a 03 ..J....w....l.J.
00000000034afb64 16 a7 e7 77 18 5f 18 00 - 80 fb 4a 03 47 a7 e7 77 ...w._....J.G..w
00000000034afb74 9c fb 4a 03 30 18 f0 74 - 78 ff 4a 03 5c ff 4a 03 ..J.0..tx.J.\.J.
00000000034afb84 75 36 ef 77 c8 fb 4a 03 - 2c 5f 18 00 00 00 00 00 u6.w..J.,_......
00000000034afb94 00 00 00 00 38 80 1b 00 - d8 63 18 00 10 00 00 00 ....8....c......
00000000034afba4 18 5f 18 00 14 00 00 00 - 09 00 00 00 9c 4c 18 00 ._...........L..
00000000034afbb4 38 14 f0 74 16 1e 4e 77 - 05 00 00 00 32 1e 4e 77 8..t..Nw....2.Nw
00000000034afbc4 00 00 00 00 9c fb 4a 03 - 2c 5f 18 00 00 00 00 00 ......J.,_......
00000000034afbd4 00 00 00 00 00 00 00 00 - 24 00 00 00 00 00 00 00 ........$.......
00000000034afbe4 00 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000034afbf4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000034afc04 00 00 00 00 00 00 00 00 - 00 00 00 00 be 52 f0 74 .............R.t
00000000034afc14 ce 52 f0 74 78 ff 4a 03 - 18 fc 4a 03 00 02 00 00 .R.tx.J...J.....
00000000034afc24 c8 d8 1b 00 30 18 f0 74 - 00 00 00 00 00 00 00 00 ....0..t........
00000000034afc34 00 00 00 00 30 00 00 00 - 02 00 00 00 00 00 00 00 ....0...........
00000000034afc44 80 01 0d 00 30 5b 9f 00 - 00 00 00 00 00 00 00 00 ....0[..........
*----> State Dump for Thread Id 0x9c0 <----*
eax=77e76bf0 ebx=00000000 ecx=00000000 edx=00000008 esi=00153130 edi=00000000
eip=7c90eb94 esp=018cfe1c ebp=018cff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
018cff80 77e76c22 018cffa8 77e76a3b 00153130 ntdll!KiFastSystemCallRet
018cff88 77e76a3b 00153130 00000007 00000000 RPCRT4!I_RpcBCacheFree+0x5ea
018cffa8 77e76c0a 00167f80 018cffec 7c80b683 RPCRT4!I_RpcBCacheFree+0x403
018cffb4 7c80b683 00187010 00000007 00000000 RPCRT4!I_RpcBCacheFree+0x5d2
018cffec 00000000 77e76bf0 00187010 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000018cfe1c 99 e3 90 7c 03 67 e7 77 - 74 01 00 00 70 ff 8c 01 ...|.g.wt...p...
00000000018cfe2c 00 00 00 00 a8 e4 1b 00 - 54 ff 8c 01 a8 0f ee 88 ........T.......
00000000018cfe3c 00 30 06 00 00 00 00 00 - 18 d6 08 89 00 00 00 00 .0..............
00000000018cfe4c 00 10 05 00 02 00 00 00 - 00 00 06 00 00 00 00 00 ................
00000000018cfe5c d0 0e ee 88 d4 3b 6b b4 - a7 71 58 80 d8 32 10 89 .....;k..qX..2..
00000000018cfe6c 01 00 00 00 11 8c 57 80 - c8 3c 6b b4 90 2d 2a e1 ......W..<k..-*.
00000000018cfe7c d8 32 10 89 00 10 05 00 - 00 00 00 00 00 10 05 00 .2..............
00000000018cfe8c 00 00 00 00 00 00 08 00 - 90 96 e7 88 00 20 00 00 ............. ..
00000000018cfe9c 18 d6 08 89 a8 0f ee 88 - 0e 00 00 00 00 00 00 00 ................
00000000018cfeac 00 20 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 . ..............
00000000018cfebc 00 00 00 00 d0 0e ee 88 - ff ff ff ff 00 30 45 d3 .............0E.
00000000018cfecc 00 00 00 00 00 10 00 00 - 00 00 00 00 01 00 00 00 ................
00000000018cfedc 54 3b 6b b4 02 00 00 00 - 1c 3c 6b b4 90 24 4e 80 T;k......<k..$N.
00000000018cfeec a8 e1 4e 80 ff ff ff ff - 11 8c 57 80 c8 2c b7 f7 ..N.......W..,..
00000000018cfefc d8 32 10 89 00 10 05 00 - c8 3c 6b b4 90 2d 2a e1 .2.......<k..-*.
00000000018cff0c d8 32 10 89 12 2d b7 f7 - cc bb ff 88 24 3c 6b b4 .2...-......$<k.
00000000018cff1c b2 c2 4d 80 ba c2 4d 80 - 9c bb ff 88 30 ba ff 88 ..M...M.....0...
00000000018cff2c 64 ba ff 88 80 ff 8c 01 - 99 66 e7 77 4c ff 8c 01 d........f.wL...
00000000018cff3c a9 66 e7 77 ed 10 90 7c - b8 99 1c 00 10 70 18 00 .f.w...|.....p..
00000000018cff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......
*----> State Dump for Thread Id 0x80c <----*
eax=00000b46 ebx=71ac408c ecx=00150178 edx=00150608 esi=00000834 edi=00000000
eip=7c90eb94 esp=035aff20 ebp=035aff84 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
035aff84 7c802532 00000834 ffffffff 00000000 ntdll!KiFastSystemCallRet
035aff98 71abd174 00000834 ffffffff 0012f66c kernel32!WaitForSingleObject+0x12
035affb4 7c80b683 00000834 0012f66c 7c90ee18 WS2_32!getnameinfo+0xb03
035affec 00000000 71abd149 001f3130 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000035aff20 c0 e9 90 7c cb 25 80 7c - 34 08 00 00 00 00 00 00 ...|.%.|4.......
00000000035aff30 00 00 00 00 30 31 1f 00 - 88 dc 1f 00 8c 40 ac 71 ....01.......@.q
00000000035aff40 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000035aff50 10 00 00 00 30 00 00 00 - 7c ff 5a 03 00 e0 fd 7f ....0...|.Z.....
00000000035aff60 00 f0 fa 7f 00 00 00 00 - 09 00 00 00 34 ff 5a 03 ............4.Z.
00000000035aff70 18 ee 90 7c dc ff 5a 03 - a8 9a 83 7c f8 25 80 7c ...|..Z....|.%.|
00000000035aff80 00 00 00 00 98 ff 5a 03 - 32 25 80 7c 34 08 00 00 ......Z.2%.|4...
00000000035aff90 ff ff ff ff 00 00 00 00 - b4 ff 5a 03 74 d1 ab 71 ..........Z.t..q
00000000035affa0 34 08 00 00 ff ff ff ff - 6c f6 12 00 18 ee 90 7c 4.......l......|
00000000035affb0 30 31 1f 00 ec ff 5a 03 - 83 b6 80 7c 34 08 00 00 01....Z....|4...
00000000035affc0 6c f6 12 00 18 ee 90 7c - 30 31 1f 00 00 f0 fa 7f l......|01......
00000000035affd0 00 d6 8f 89 c0 ff 5a 03 - 78 79 fe 88 ff ff ff ff ......Z.xy......
00000000035affe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
00000000035afff0 00 00 00 00 49 d1 ab 71 - 30 31 1f 00 00 00 00 00 ....I..q01......
00000000035b0000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000035b0010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000035b0020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000035b0030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000035b0040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000035b0050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
Application exception occurred:
App: C:\Program Files\Shareaza\Shareaza.exe (pid=1900)
When: 2/20/2007 @ 20:52:29.859
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: NUMBER1
User Name: Administrator
Terminal Session Id: 0
Number of Processors: 1
Processor Type: x86 Family 6 Model 8 Stepping 1
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Uniprocessor Free
Registered Organization:
Registered Owner: Number 1
*----> Task List <----*
0 System Process
4 System
664 smss.exe
724 csrss.exe
752 winlogon.exe
796 services.exe
808 lsass.exe
956 svchost.exe
1056 svchost.exe
1144 svchost.exe
1264 svchost.exe
1344 svchost.exe
1560 spoolsv.exe
1760 Explorer.EXE
1852 avgamsvr.exe
1888 avgupsvc.exe
1968 nvsvc32.exe
172 wdfmgr.exe
348 avgcc.exe
720 qttask.exe
1304 V CAST Music Monitor.exe
1612 alg.exe
1580 svchost.exe
1748 wuauclt.exe
652 msmsgs.exe
2816 FIREFOX.EXE
1900 Shareaza.exe
3812 wordpad.exe
1872 drwtsn32.exe
*----> Module List <----*
(0000000000400000 - 0000000000859000: C:\Program Files\Shareaza\Shareaza.exe
(0000000001c10000 - 0000000001c24000: C:\Program Files\Shareaza\Plugins\ImageViewer.dll
(0000000020000000 - 00000000202c5000: C:\WINDOWS\system32\xpsp2res.dll
(000000004d4f0000 - 000000004d548000: C:\WINDOWS\System32\WINHTTP.dll
(000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32\uxtheme.dll
(000000005b860000 - 000000005b8b4000: C:\WINDOWS\system32\NETAPI32.dll
(00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll
(0000000071a50000 - 0000000071a8f000: C:\WINDOWS\system32\mswsock.dll
(0000000071a90000 - 0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll
(0000000071aa0000 - 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll
(0000000071ab0000 - 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll
(0000000071ad0000 - 0000000071ad9000: C:\WINDOWS\system32\wsock32.dll
(0000000071bf0000 - 0000000071c03000: C:\WINDOWS\system32\SAMLIB.dll
(00000000722b0000 - 00000000722b5000: C:\WINDOWS\system32\sensapi.dll
(0000000073000000 - 0000000073026000: C:\WINDOWS\system32\WINSPOOL.DRV
(00000000745e0000 - 00000000748a6000: C:\WINDOWS\system32\msi.dll
(0000000074980000 - 0000000074a8e000: C:\WINDOWS\System32\msxml3.dll
(0000000074ad0000 - 0000000074ad8000: C:\WINDOWS\system32\PowrProf.dll
(0000000074f00000 - 0000000074f0c000: C:\WINDOWS\System32\SSDPAPI.dll
(0000000075e90000 - 0000000075f40000: C:\WINDOWS\system32\SXS.DLL
(00000000769c0000 - 0000000076a73000: C:\WINDOWS\system32\USERENV.dll
(0000000076b20000 - 0000000076b31000: C:\WINDOWS\system32\ATL.DLL
(0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll
(0000000076d40000 - 0000000076d58000: C:\WINDOWS\system32\MPRAPI.dll
(0000000076d60000 - 0000000076d79000: C:\WINDOWS\system32\iphlpapi.dll
(0000000076de0000 - 0000000076e03000: C:\WINDOWS\System32\upnp.dll
(0000000076e10000 - 0000000076e35000: C:\WINDOWS\system32\adsldpc.dll
(0000000076e80000 - 0000000076e8e000: C:\WINDOWS\system32\rtutils.dll
(0000000076e90000 - 0000000076ea2000: C:\WINDOWS\system32\rasman.dll
(0000000076eb0000 - 0000000076edf000: C:\WINDOWS\system32\TAPI32.dll
(0000000076ee0000 - 0000000076f1c000: C:\WINDOWS\system32\RASAPI32.DLL
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll
(0000000076fd0000 - 000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL
(0000000077050000 - 0000000077115000: C:\WINDOWS\system32\COMRes.dll
(0000000077120000 - 00000000771ac000: C:\WINDOWS\system32\OLEAUT32.dll
(00000000771b0000 - 0000000077256000: C:\WINDOWS\system32\WININET.dll
(00000000773d0000 - 00000000774d3000: C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll
(0000000077920000 - 0000000077a13000: C:\WINDOWS\system32\SETUPAPI.dll
(0000000077a80000 - 0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll
(0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll
(0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32\Apphelp.dll
(0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32\VERSION.dll
(0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32\msvcrt.dll
(0000000077cc0000 - 0000000077cf2000: C:\WINDOWS\system32\ACTIVEDS.dll
(0000000077d40000 - 0000000077dd0000: C:\WINDOWS\system32\USER32.dll
(0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll
(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll
(0000000077f10000 - 0000000077f57000: C:\WINDOWS\system32\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\system32\Secur32.dll
(000000007c800000 - 000000007c8f4000: C:\WINDOWS\system32\kernel32.dll
(000000007c900000 - 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll
(000000007c9c0000 - 000000007d1d5000: C:\WINDOWS\system32\SHELL32.dll
(000000007e1e0000 - 000000007e280000: C:\WINDOWS\system32\urlmon.dll
*----> State Dump for Thread Id 0x614 <----*
eax=00000000 ebx=000002bc ecx=0000adfc edx=00000000 esi=000000d4 edi=00000000
eip=7c90eb94 esp=0012facc ebp=0012fb30 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll -
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Module load completed but symbols could not be loaded for C:\Program Files\Shareaza\Shareaza.exe
ChildEBP RetAddr Args to Child
0012fb30 7c802532 000000d4 ffffffff 00000000 ntdll!KiFastSystemCallRet
0012fb44 006096b3 000000d4 ffffffff 006097e3 kernel32!WaitForSingleObject+0x12
00000000 00000000 00000000 00000000 00000000 Shareaza+0x2096b3
*----> Raw Stack Dump <----*
000000000012facc c0 e9 90 7c cb 25 80 7c - d4 00 00 00 00 00 00 00 ...|.%.|........
000000000012fadc 00 00 00 00 07 00 00 00 - 90 fb 12 00 bc 02 00 00 ................
000000000012faec 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000012fafc 10 00 00 00 00 00 00 00 - 00 00 00 00 00 60 fd 7f .............`..
000000000012fb0c 00 f0 fd 7f 00 00 00 00 - 1c fb 12 00 e0 fa 12 00 ................
000000000012fb1c 90 15 9d 00 f4 fb 12 00 - a8 9a 83 7c f8 25 80 7c ...........|.%.|
000000000012fb2c 00 00 00 00 44 fb 12 00 - 32 25 80 7c d4 00 00 00 ....D...2%.|....
000000000012fb3c ff ff ff ff 00 00 00 00 - 00 00 00 00 b3 96 60 00 ..............`.
000000000012fb4c d4 00 00 00 ff ff ff ff - e3 97 60 00 ff ff ff ff ..........`.....
000000000012fb5c 90 fb 12 00 0f 99 60 00 - ff ff ff ff 3c 5b eb 00 ......`.....<[..
000000000012fb6c 6f f9 56 00 04 0a 71 00 - 01 00 00 00 85 99 96 05 o.V...q.........
000000000012fb7c 30 5a eb 00 b8 fc 12 00 - 80 e7 5d 00 00 00 00 00 0Z........].....
000000000012fb8c 5c c0 ec 00 04 0a 71 00 - d4 00 00 00 00 00 00 00 \.....q.........
000000000012fb9c 00 00 00 00 00 00 00 00 - ee 03 00 00 d9 00 00 00 ................
000000000012fbac 1c 00 00 00 03 00 00 00 - 00 00 00 00 bc 02 00 00 ................
000000000012fbbc ee 03 00 00 00 00 00 00 - 00 00 00 00 01 00 00 00 ................
000000000012fbcc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000012fbdc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000012fbec 00 00 00 00 00 00 00 00 - 24 fc 12 00 28 6f 64 00 ........$...(od.
000000000012fbfc ff ff ff ff 14 e9 5d 00 - be 07 00 00 00 00 00 00 ......].........
*----> State Dump for Thread Id 0xd54 <----*
eax=0101ff54 ebx=00000000 ecx=00153130 edx=7c90eb94 esi=00153130 edi=0015316c
eip=7c90eb94 esp=0101fe1c ebp=0101ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0101ff80 77e76c22 0101ffa8 77e76a3b 00153130 ntdll!KiFastSystemCallRet
0101ff88 77e76a3b 00153130 00000000 0012f5f8 RPCRT4!I_RpcBCacheFree+0x5ea
0101ffa8 77e76c0a 00167f80 0101ffec 7c80b683 RPCRT4!I_RpcBCacheFree+0x403
0101ffb4 7c80b683 00166a80 00000000 0012f5f8 RPCRT4!I_RpcBCacheFree+0x5d2
0101ffec 00000000 77e76bf0 00166a80 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000101fe1c 99 e3 90 7c 03 67 e7 77 - 74 01 00 00 70 ff 01 01 ...|.g.wt...p...
000000000101fe2c 00 00 00 00 b8 bb 1b 00 - 00 00 00 00 2f c5 57 80 ............/.W.
000000000101fe3c 4a c5 57 80 64 9d fc b7 - 78 f4 12 00 aa c4 57 80 J.W.d...x.....W.
000000000101fe4c 37 40 56 80 02 00 00 00 - 00 00 f7 88 08 00 00 00 7@V.............
000000000101fe5c 20 e0 f7 88 20 e0 f7 88 - 58 9b fc b7 8c 39 4e 80 ... ...X....9N.
000000000101fe6c 02 00 00 00 02 15 53 89 - 00 00 00 00 74 9b fc b7 ......S.....t...
000000000101fe7c b5 46 4e 80 00 00 00 00 - ce 39 4e 80 d8 26 2b 89 .FN......9N..&+.
000000000101fe8c 88 c5 1d 89 80 15 53 89 - 88 9b fc b7 8b f6 7b f7 ......S.......{.
000000000101fe9c ec c5 1d 89 00 00 00 00 - 00 00 00 00 9c 9b fc b7 ................
000000000101feac 1a 24 6b b9 e8 c5 1d 89 - 00 00 00 00 30 11 53 89 .$k.........0.S.
000000000101febc c4 9b fc b7 9a 31 97 f7 - b0 09 2b 89 88 c5 1d 89 .....1....+.....
000000000101fecc a9 31 97 f7 60 11 53 89 - 30 11 53 89 00 00 00 00 .1..`.S.0.S.....
000000000101fedc d8 26 2b 89 00 00 00 00 - dc 9b fc b7 49 39 97 f7 .&+.........I9..
000000000101feec 6c 39 97 f7 dc 9b fc b7 - 00 00 00 00 51 54 9e ba l9..........QT..
000000000101fefc f8 9b fc b7 5d c9 9e ba - 00 2c 9f ba 60 8a 53 89 ....]....,..`.S.
000000000101ff0c e8 a3 51 89 c0 26 8c 89 - f4 b5 20 89 24 9c fc b7 ..Q..&.... .$...
000000000101ff1c b2 c2 4d 80 ba c2 4d 80 - c4 b5 20 89 58 b4 20 89 ..M...M... .X. .
000000000101ff2c 8c b4 20 89 80 ff 01 01 - 99 66 e7 77 4c ff 01 01 .. ......f.wL...
000000000101ff3c a9 66 e7 77 ed 10 90 7c - b0 67 16 00 80 6a 16 00 .f.w...|.g...j..
000000000101ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......
*----> State Dump for Thread Id 0x480 <----*
eax=000000c0 ebx=00000000 ecx=00174b08 edx=00174ac8 esi=0012eab0 edi=00001000
eip=7c90eb94 esp=0148ff9c ebp=0148ffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0148ffb4 7c80b683 00000000 00001000 0012eab0 ntdll!KiFastSystemCallRet
0148ffec 00000000 7c92798d 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000148ff9c 5c d8 90 7c d4 79 92 7c - 01 00 00 00 ac ff 48 01 \..|.y.|......H.
000000000148ffac 00 00 00 00 00 00 00 80 - ec ff 48 01 83 b6 80 7c ..........H....|
000000000148ffbc 00 00 00 00 00 10 00 00 - b0 ea 12 00 00 00 00 00 ................
000000000148ffcc 00 c0 fd 7f 00 d6 8f 89 - c0 ff 48 01 80 3a 88 89 ..........H..:..
000000000148ffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|....
000000000148ffec 00 00 00 00 00 00 00 00 - 8d 79 92 7c 00 00 00 00 .........y.|....
000000000148fffc 00 00 00 00 00 00 00 00 - 9f 00 13 00 10 00 90 01 ................
000000000149000c 17 00 b0 01 ff ff ff 00 - ff ff ff 00 00 00 00 00 ................
000000000149001c 00 00 00 00 ff ff ff 00 - ff ff ff 00 00 00 00 00 ................
000000000149002c 00 00 00 00 00 00 00 00 - 01 00 00 00 0d 02 01 01 ................
000000000149003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000149004c 02 00 00 00 01 00 00 00 - 01 00 00 00 00 00 00 00 ................
000000000149005c 00 00 00 00 00 00 00 00 - 1f 00 89 01 00 00 00 00 ................
000000000149006c ff ff ff ff ff ff ff ff - 00 00 00 00 00 00 00 00 ................
000000000149007c 00 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................
000000000149008c 00 00 00 00 21 00 8a 01 - 00 00 00 40 06 00 00 00 ....!......@....
000000000149009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000014900ac 00 00 00 40 06 00 00 00 - 00 00 00 00 00 00 00 00 ...@............
00000000014900bc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000014900cc 4b 00 00 00 00 00 00 40 - fe ff ff ff 00 00 00 00 K......@........
*----> State Dump for Thread Id 0x4c8 <----*
eax=001899bc ebx=00000000 ecx=00000001 edx=76dfbb8c esi=7c97c380 edi=7c97c3a0
eip=7c90eb94 esp=015cff70 ebp=015cffb4 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000286
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
015cffb4 7c80b683 00000000 0012f864 7c915a00 ntdll!KiFastSystemCallRet
015cffec 00000000 7c910760 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000015cff70 1b e3 90 7c 9d 07 91 7c - f0 01 00 00 ac ff 5c 01 ...|...|......\.
00000000015cff80 b0 ff 5c 01 98 ff 5c 01 - a0 ff 5c 01 64 f8 12 00 ..\...\...\.d...
00000000015cff90 00 5a 91 7c 00 00 00 00 - 00 00 00 00 b0 88 18 00 .Z.|............
00000000015cffa0 00 7c 28 e8 ff ff ff ff - 35 ec 6e 80 69 75 92 7c .|(.....5.n.iu.|
00000000015cffb0 50 08 1b 00 ec ff 5c 01 - 83 b6 80 7c 00 00 00 00 P.....\....|....
00000000015cffc0 64 f8 12 00 00 5a 91 7c - 00 00 00 00 00 b0 fd 7f d....Z.|........
00000000015cffd0 00 d6 8f 89 c0 ff 5c 01 - 80 3a 88 89 ff ff ff ff ......\..:......
00000000015cffe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
00000000015cfff0 00 00 00 00 60 07 91 7c - 00 00 00 00 00 00 00 00 ....`..|........
00000000015d0000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0060 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0070 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0080 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d0090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000015d00a0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
*----> State Dump for Thread Id 0x838 <----*
eax=000000c0 ebx=00000000 ecx=0012f8f0 edx=00000000 esi=00000000 edi=00000001
eip=7c90eb94 esp=016cfcec ebp=016cffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
016cffb4 7c80b683 00000000 00000020 0012f864 ntdll!KiFastSystemCallRet
016cffec 00000000 7c929fae 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000016cfcec ab e9 90 7c d5 a0 92 7c - 02 00 00 00 30 fd 6c 01 ...|...|....0.l.
00000000016cfcfc 01 00 00 00 01 00 00 00 - 00 00 00 00 20 00 00 00 ............ ...
00000000016cfd0c 64 f8 12 00 00 00 00 00 - 08 e5 97 7c 08 e5 97 7c d..........|...|
00000000016cfd1c f8 01 00 00 38 08 00 00 - 02 00 00 00 02 00 00 00 ....8...........
00000000016cfd2c 01 00 00 00 f4 01 00 00 - ec 01 00 00 00 00 00 00 ................
00000000016cfd3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfd9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdcc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfddc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfdfc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfe0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000016cfe1c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
*----> State Dump for Thread Id 0xfb0 <----*
eax=74f0742e ebx=017cfed4 ecx=0000007e edx=7c910732 esi=00000000 edi=7ffd6000
eip=7c90eb94 esp=017cfeac ebp=017cff48 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\System32\SSDPAPI.dll -
ChildEBP RetAddr Args to Child
017cff48 7c80a075 00000002 017cff94 00000000 ntdll!KiFastSystemCallRet
017cff64 74f04b62 00000002 017cff94 00000000 kernel32!WaitForMultipleObjects+0x18
017cffa4 74f0743f 00150000 0012f88c 017cffec SSDPAPI!FindServicesClose+0x1232
017cffb4 7c80b683 00184bb0 00150000 0012f88c SSDPAPI+0x743f
017cffec 00000000 74f0742e 00184bb0 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000017cfeac ab e9 90 7c e2 94 80 7c - 02 00 00 00 d4 fe 7c 01 ...|...|......|.
00000000017cfebc 01 00 00 00 00 00 00 00 - 00 00 00 00 b0 4b 18 00 .............K..
00000000017cfecc 5d a0 80 7c 00 00 00 00 - fc 01 00 00 e8 01 00 00 ]..|............
00000000017cfedc d7 d1 4f 77 68 68 60 77 - e1 f5 4f 77 0c 72 60 77 ..Owhh`w..Ow.r`w
00000000017cfeec 68 ff 7c 01 08 72 60 77 - 14 00 00 00 01 00 00 00 h.|..r`w........
00000000017cfefc 00 00 00 00 00 00 00 00 - 10 00 00 00 66 97 80 7c ............f..|
00000000017cff0c 68 ff 7c 01 3c 68 60 77 - 00 60 fd 7f 00 90 fd 7f h.|.<h`w.`......
00000000017cff1c b4 2f 51 77 00 00 00 00 - d4 fe 7c 01 68 ff 7c 01 ./Qw......|.h.|.
00000000017cff2c 02 00 00 00 c8 fe 7c 01 - 3c 68 60 77 dc ff 7c 01 ......|.<h`w..|.
00000000017cff3c a8 9a 83 7c d8 95 80 7c - 00 00 00 00 64 ff 7c 01 ...|...|....d.|.
00000000017cff4c 75 a0 80 7c 02 00 00 00 - 94 ff 7c 01 00 00 00 00 u..|......|.....
00000000017cff5c ff ff ff ff 00 00 00 00 - a4 ff 7c 01 62 4b f0 74 ..........|.bK.t
00000000017cff6c 02 00 00 00 94 ff 7c 01 - 00 00 00 00 ff ff ff ff ......|.........
00000000017cff7c b0 4b 18 00 00 00 15 00 - b0 4b 18 00 00 00 00 00 .K.......K......
00000000017cff8c 00 00 00 00 00 00 00 00 - fc 01 00 00 e8 01 00 00 ................
00000000017cff9c 00 00 00 00 01 00 00 00 - b4 ff 7c 01 3f 74 f0 74 ..........|.?t.t
00000000017cffac 00 00 15 00 8c f8 12 00 - ec ff 7c 01 83 b6 80 7c ..........|....|
00000000017cffbc b0 4b 18 00 00 00 15 00 - 8c f8 12 00 b0 4b 18 00 .K...........K..
00000000017cffcc 00 90 fd 7f 00 d6 8f 89 - c0 ff 7c 01 40 4b 08 89 ..........|.@K..
00000000017cffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|....
*----> State Dump for Thread Id 0xa2c <----*
eax=ffffffff ebx=034e8054 ecx=00000004 edx=7c90eb94 esi=02270570 edi=00000000
eip=00419946 esp=0238fdd4 ebp=034e7b70 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
function: Shareaza
00419926 57 push edi
00419927 52 push edx
00419928 ff15ace66500 call dword ptr [Shareaza+0x25e6ac (0065e6ac)]
0041992e 8b4624 mov eax,[esi+0x24]
00419931 50 push eax
00419932 ff15a8e66500 call dword ptr [Shareaza+0x25e6a8 (0065e6a8)]
00419938 c74624ffffffff mov dword ptr [esi+0x24],0xffffffff
0041993f 8b4e2c mov ecx,[esi+0x2c]
00419942 3bcf cmp ecx,edi
00419944 7406 jz Shareaza+0x1994c (0041994c)
FAULT ->00419946 8b11 mov edx,[ecx] ds:0023:00000004=????????
00419948 6a01 push 0x1
0041994a ff12 call dword ptr [edx]
0041994c 8b4e28 mov ecx,[esi+0x28]
0041994f 3bcf cmp ecx,edi
00419951 897e2c mov [esi+0x2c],edi
00419954 7406 jz Shareaza+0x1995c (0041995c)
00419956 8b01 mov eax,[ecx]
00419958 6a01 push 0x1
0041995a ff10 call dword ptr [eax]
0041995c 897e28 mov [esi+0x28],edi
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
034e7b70 36120002 a3638f3e 00000000 00000000 Shareaza+0x19946
0067207c 004ef490 004194b0 00419770 0044fb60 0x36120002
0044f600 00000018 082444f6 56097401 1d81a5e8 Shareaza+0xef490
*----> Raw Stack Dump <----*
000000000238fdd4 70 05 27 02 70 05 27 02 - 70 05 27 02 b7 fb 44 00 p.'.p.'.p.'...D.
000000000238fde4 70 05 27 02 70 05 27 02 - 87 f8 44 00 ac 4c 45 00 p.'.p.'...D..LE.
000000000238fdf4 66 2b ab 71 70 7b 4e 03 - 36 ff 44 00 d0 12 45 00 f+.qp{N.6.D...E.
000000000238fe04 70 7b 4e 03 e4 d7 ab 01 - 01 00 00 00 8c fe 38 02 p{N...........8.
000000000238fe14 01 00 00 00 03 fe 38 02 - fc 1f 6e 00 fb fe 38 02 ......8...n...8.
000000000238fe24 fc 1f 6e 00 00 bc 00 00 - 50 fe 38 02 90 92 65 00 ..n.....P.8...e.
000000000238fe34 ff ff ff ff b7 ff 44 00 - 00 00 00 00 e4 d7 ab 01 ......D.........
000000000238fe44 70 7b 4e 03 e4 d7 ab 01 - e4 d7 ab 01 80 fe 38 02 p{N...........8.
000000000238fe54 60 c9 65 00 ff ff ff ff - bc fe 44 00 00 00 00 00 `.e.......D.....
000000000238fe64 70 7b 4e 03 5c f3 a4 01 - 00 88 17 00 e4 d7 ab 01 p{N.\...........
000000000238fe74 70 7b 4e 03 01 00 00 00 - 60 fe 38 02 d4 fe 38 02 p{N.....`.8...8.
000000000238fe84 d0 bd 65 00 00 00 00 00 - 00 00 00 00 22 9a 41 00 ..e.........".A.
000000000238fe94 00 0a 71 00 00 00 00 00 - f0 25 80 7c 32 25 80 7c ..q......%.|2%.|
000000000238fea4 d4 00 00 00 ff ff ff ff - 00 00 00 00 ff ff ff ff ................
000000000238feb4 b3 96 60 00 d4 00 00 00 - ff ff ff ff b4 07 4f 00 ..`...........O.
000000000238fec4 94 08 4f 00 00 00 00 00 - ff ff ff ff 00 0a 71 00 ..O...........q.
000000000238fed4 f0 fe 38 02 a5 e4 64 00 - 00 00 00 00 fb 06 4f 00 ..8...d.......O.
000000000238fee4 7c f9 12 00 70 9f a5 01 - 80 ff 38 02 74 ff 38 02 |...p.....8.t.8.
000000000238fef4 9a c7 65 00 ff ff ff ff - 7a 06 4f 00 70 02 00 00 ..e.....z.O.p...
000000000238ff04 93 8d 62 00 00 0a 71 00 - 32 07 91 7c 10 26 a8 01 ..b...q.2..|.&..
*----> State Dump for Thread Id 0x384 <----*
eax=0248fe40 ebx=00000278 ecx=0248fe20 edx=7c90eb94 esi=000000c0 edi=00000000
eip=7c90eb94 esp=0248fe70 ebp=0248fed4 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0248fed4 7c802532 000000c0 000001f4 00000000 ntdll!KiFastSystemCallRet
0248fee8 0047a7f9 000000c0 000001f4 0012fb50 kernel32!WaitForSingleObject+0x12
0248ff80 006169b3 0012fb50 00000000 7c9105c8 Shareaza+0x7a7f9
0248ffb4 7c80b683 01ade5c0 00000000 7c9105c8 Shareaza+0x2169b3
0248ffec 00000000 00616944 01ade5c0 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
000000000248fe70 c0 e9 90 7c cb 25 80 7c - c0 00 00 00 00 00 00 00 ...|.%.|........
000000000248fe80 a4 fe 48 02 20 25 80 7c - d8 e1 6e 00 78 02 00 00 ..H. %.|..n.x...
000000000248fe90 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000248fea0 10 00 00 00 c0 b4 b3 ff - ff ff ff ff 00 60 fd 7f .............`..
000000000248feb0 00 50 fd 7f a4 fe 48 02 - 73 97 60 00 84 fe 48 02 .P....H.s.`...H.
000000000248fec0 fa 97 60 00 74 ff 48 02 - a8 9a 83 7c f8 25 80 7c ..`.t.H....|.%.|
000000000248fed0 00 00 00 00 e8 fe 48 02 - 32 25 80 7c c0 00 00 00 ......H.2%.|....
000000000248fee0 f4 01 00 00 00 00 00 00 - 80 ff 48 02 f9 a7 47 00 ..........H...G.
000000000248fef0 c0 00 00 00 f4 01 00 00 - 50 fb 12 00 ca a7 47 00 ........P.....G.
000000000248ff00 50 a0 a6 01 93 8d 62 00 - d8 e1 6e 00 00 00 00 00 P.....b...n.....
000000000248ff10 c0 e5 ad 01 c0 e5 ad 01 - 24 dc f4 b7 d4 01 66 00 ........$.....f.
000000000248ff20 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000248ff30 01 00 00 00 00 00 00 00 - 16 01 27 00 00 02 ea 88 ..........'.....
000000000248ff40 00 00 00 00 00 00 00 00 - 44 01 66 00 b8 01 66 00 ........D.f...f.
000000000248ff50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000248ff60 00 00 00 00 00 00 00 00 - 00 00 00 00 50 a0 a6 01 ............P...
000000000248ff70 0c ff 48 02 a4 ff 48 02 - 9e 3a 64 00 00 00 00 00 ..H...H..:d.....
000000000248ff80 b4 ff 48 02 b3 69 61 00 - 50 fb 12 00 00 00 00 00 ..H..ia.P.......
000000000248ff90 c8 05 91 7c c0 e5 ad 01 - 00 00 00 00 8c ff 48 02 ...|..........H.
000000000248ffa0 81 a8 4f 80 dc ff 48 02 - 6c 66 61 00 70 5b 66 00 ..O...H.lfa.p[f.
*----> State Dump for Thread Id 0xd5c <----*
eax=00000000 ebx=006ecd88 ecx=0000ffff edx=00000001 esi=000000b8 edi=00000000
eip=7c90eb94 esp=025efe6c ebp=025efed0 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
025efed0 7c802532 000000b8 000003e8 00000000 ntdll!KiFastSystemCallRet
025efee4 0046eebb 000000b8 000003e8 0012f890 kernel32!WaitForSingleObject+0x12
025eff80 006169b3 0012f890 ffffffff 7c910732 Shareaza+0x6eebb
025effb4 7c80b683 01b00308 ffffffff 7c910732 Shareaza+0x2169b3
025effec 00000000 00616944 01b00308 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000025efe6c c0 e9 90 7c cb 25 80 7c - b8 00 00 00 00 00 00 00 ...|.%.|........
00000000025efe7c a0 fe 5e 02 20 25 80 7c - 18 d0 6e 00 88 cd 6e 00 ..^. %.|..n...n.
00000000025efe8c 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000025efe9c 10 00 00 00 80 69 67 ff - ff ff ff ff 00 60 fd 7f .....ig......`..
00000000025efeac 00 40 fd 7f a0 fe 5e 02 - c4 00 00 00 80 fe 5e 02 .@....^.......^.
00000000025efebc 80 ff 5e 02 74 ff 5e 02 - a8 9a 83 7c f8 25 80 7c ..^.t.^....|.%.|
00000000025efecc 00 00 00 00 e4 fe 5e 02 - 32 25 80 7c b8 00 00 00 ......^.2%.|....
00000000025efedc e8 03 00 00 00 00 00 00 - 80 ff 5e 02 bb ee 46 00 ..........^...F.
00000000025efeec b8 00 00 00 e8 03 00 00 - 90 f8 12 00 d4 02 00 00 ................
00000000025efefc 9a ee 46 00 b8 98 a7 01 - 93 8d 62 00 18 d0 6e 00 ..F.......b...n.
00000000025eff0c ff ff ff ff 08 03 b0 01 - 08 03 b0 01 c8 9c 00 89 ................
00000000025eff1c d4 01 66 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ..f.............
00000000025eff2c 00 00 00 00 01 00 00 00 - 00 00 00 00 16 01 27 00 ..............'.
00000000025eff3c 00 9c 00 89 00 00 00 00 - 00 00 00 00 44 01 66 00 ............D.f.
00000000025eff4c b8 01 66 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ..f.............
00000000025eff5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000025eff6c b8 98 a7 01 0c ff 5e 02 - a4 ff 5e 02 9e 3a 64 00 ......^...^..:d.
00000000025eff7c 00 00 00 00 b4 ff 5e 02 - b3 69 61 00 90 f8 12 00 ......^..ia.....
00000000025eff8c ff ff ff ff 32 07 91 7c - 08 03 b0 01 00 00 00 00 ....2..|........
00000000025eff9c 8c ff 5e 02 81 a8 4f 80 - dc ff 5e 02 6c 66 61 00 ..^...O...^.lfa.
*----> State Dump for Thread Id 0x1d0 <----*
eax=06a7353d ebx=006efee8 ecx=000493e0 edx=00000000 esi=000000c8 edi=00000000
eip=7c90eb94 esp=026efe68 ebp=026efecc iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
026efecc 7c802532 000000c8 00000064 00000000 ntdll!KiFastSystemCallRet
026efee0 0049f934 000000c8 00000064 01a58070 kernel32!WaitForSingleObject+0x12
7c802442 ff006aec 4be80875 5dffffff 900004c2 Shareaza+0x9f934
8b55ff8b 00000000 00000000 00000000 00000000 0xff006aec
*----> Raw Stack Dump <----*
00000000026efe68 c0 e9 90 7c cb 25 80 7c - c8 00 00 00 00 00 00 00 ...|.%.|........
00000000026efe78 9c fe 6e 02 a8 fd 6e 00 - b8 fd 6e 00 e8 fe 6e 00 ..n...n...n...n.
00000000026efe88 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000026efe98 10 00 00 00 c0 bd f0 ff - ff ff ff ff 00 60 fd 7f .............`..
00000000026efea8 00 f0 fa 7f 9c fe 6e 02 - ff ff ff ff 7c fe 6e 02 ......n.....|.n.
00000000026efeb8 ac fe 6e 02 74 ff 6e 02 - a8 9a 83 7c f8 25 80 7c ..n.t.n....|.%.|
00000000026efec8 00 00 00 00 e0 fe 6e 02 - 32 25 80 7c c8 00 00 00 ......n.2%.|....
00000000026efed8 64 00 00 00 00 00 00 00 - 42 24 80 7c 34 f9 49 00 d.......B$.|4.I.
00000000026efee8 c8 00 00 00 64 00 00 00 - 70 80 a5 01 80 ff 6e 02 ....d...p.....n.
00000000026efef8 e8 02 00 00 0a f9 49 00 - dc f8 12 00 93 8d 62 00 ......I.......b.
00000000026eff08 a8 fd 6e 00 04 6d 2b 66 - 60 04 b0 01 60 04 b0 01 ..n..m+f`...`...
00000000026eff18 24 dc f4 b7 d4 01 66 00 - 01 00 00 00 00 00 00 00 $.....f.........
00000000026eff28 00 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................
00000000026eff38 16 01 27 00 00 6c ae 88 - 00 00 00 00 00 00 00 00 ..'..l..........
00000000026eff48 44 01 66 00 b8 01 66 00 - 00 00 00 00 00 00 00 00 D.f...f.........
00000000026eff58 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000026eff68 00 00 00 00 70 80 a5 01 - 0c ff 6e 02 a4 ff 6e 02 ....p.....n...n.
00000000026eff78 9e 3a 64 00 00 00 00 00 - b4 ff 6e 02 b3 69 61 00 .:d.......n..ia.
00000000026eff88 dc f8 12 00 04 6d 2b 66 - 32 6f 2b 66 60 04 b0 01 .....m+f2o+f`...
00000000026eff98 00 00 00 00 8c ff 6e 02 - 81 a8 4f 80 dc ff 6e 02 ......n...O...n.
*----> State Dump for Thread Id 0xcf8 <----*
eax=00000000 ebx=00186330 ecx=02d3fd98 edx=7c90eb94 esi=7fffffff edi=ffffffff
eip=7c90eb94 esp=02d3fd98 ebp=02d3fdd4 iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000293
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\mswsock.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\WS2_32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\System32\WINHTTP.dll -
ChildEBP RetAddr Args to Child
02d3fdd4 71a55fa7 0000035c 00000344 00000000 ntdll!KiFastSystemCallRet
02d3fec8 71ab2e67 00000001 0138c0b0 0138c4b4 mswsock+0x5fa7
02d3ff18 4d506091 00000001 0138c0b0 0138c4b4 WS2_32!select+0xa7
02d3ffa0 4d506525 00000000 00000000 0138c000 WINHTTP!WinHttpReceiveResponse+0x5f10
02d3ffb4 7c80b683 0138c000 00000000 00000000 WINHTTP!WinHttpReceiveResponse+0x63a4
02d3ffec 00000000 4d50650d 0138c000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
0000000002d3fd98 c0 e9 90 7c 33 40 a5 71 - 5c 03 00 00 01 00 00 00 ...|3@.q\.......
0000000002d3fda8 c0 fd d3 02 78 fe d3 02 - b0 c0 38 01 68 fe d3 02 ....x.....8.h...
0000000002d3fdb8 24 8b 6b 16 74 55 c7 01 - ff ff ff ff ff ff ff 7f $.k.tU..........
0000000002d3fdc8 30 63 18 00 00 00 00 00 - 00 00 00 00 c8 fe d3 02 0c..............
0000000002d3fdd8 a7 5f a5 71 5c 03 00 00 - 44 03 00 00 00 00 00 00 ._.q\...D.......
0000000002d3fde8 04 00 00 00 b8 c8 38 01 - 98 10 1a 00 b4 c4 38 01 ......8.......8.
0000000002d3fdf8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000002d3fe08 01 00 00 00 80 0f 05 fd - ff ff ff ff 13 44 a5 71 .............D.q
0000000002d3fe18 00 00 00 00 10 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000002d3fe28 64 fe d3 02 17 20 01 00 - 4c fe d3 02 10 00 00 00 d.... ..L.......
0000000002d3fe38 fc fe d3 02 b0 44 a5 71 - 01 00 00 00 1c 00 00 00 .....D.q........
0000000002d3fe48 30 63 18 00 84 fe d3 02 - b4 c4 38 01 b8 c8 38 01 0c........8...8.
0000000002d3fe58 00 00 00 00 68 fe d3 02 - 00 00 00 00 00 00 00 00 ....h...........
0000000002d3fe68 80 0f 05 fd ff ff ff ff - 01 00 00 00 00 00 00 00 ................
0000000002d3fe78 44 03 00 00 19 00 00 00 - 30 63 18 00 00 00 00 00 D.......0c......
0000000002d3fe88 40 fe d3 02 00 00 00 00 - dc ff d3 02 c8 71 a7 71 @............q.q
0000000002d3fe98 b8 44 a5 71 ff ff ff ff - b0 44 a5 71 c9 61 ab 71 .D.q.....D.q.a.q
0000000002d3fea8 44 03 00 00 fa 3a 00 00 - ec fd d3 02 0c 15 aa 71 D....:.........q
0000000002d3feb8 08 ff d3 02 c8 71 a7 71 - 68 2e a5 71 ff ff ff ff .....q.qh..q....
0000000002d3fec8 18 ff d3 02 67 2e ab 71 - 01 00 00 00 b0 c0 38 01 ....g..q......8.
*----> State Dump for Thread Id 0xd6c <----*
eax=01384200 ebx=00000000 ecx=01384018 edx=013810a8 esi=02f5b000 edi=00000001
eip=7c90eb94 esp=02e3ff08 ebp=02e3ff34 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
02e3ff34 4d5066cd 00000350 02e3ffa8 02e3ffac ntdll!KiFastSystemCallRet
02e3ffb4 7c80b683 4d4f0000 0012e0d8 7c90ee18 WINHTTP!WinHttpReceiveResponse+0x654c
02e3ffec 00000000 4d506686 4d4f0000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
0000000002e3ff08 1b e3 90 7c 46 a7 80 7c - 50 03 00 00 ac ff e3 02 ...|F..|P.......
0000000002e3ff18 4c ff e3 02 2c ff e3 02 - 00 00 00 00 00 00 00 00 L...,...........
0000000002e3ff28 30 20 f5 02 38 ff e3 02 - bd 74 50 4d b4 ff e3 02 0 ..8....tPM....
0000000002e3ff38 cd 66 50 4d 50 03 00 00 - a8 ff e3 02 ac ff e3 02 .fPMP...........
0000000002e3ff48 9c ff e3 02 ff ff ff ff - d8 e0 12 00 18 ee 90 7c ...............|
0000000002e3ff58 00 00 4f 4d 00 00 00 00 - b8 18 4f 80 00 00 00 00 ..OM......O.....
0000000002e3ff68 00 00 00 00 58 53 4e 80 - e7 e2 6e 80 50 e4 f1 88 ....XSN...n.P...
0000000002e3ff78 50 9d d8 b7 c8 41 16 89 - 80 2a b6 88 01 9d 18 89 P....A...*......
0000000002e3ff88 00 00 00 00 20 20 f6 88 - a1 a8 4f 80 30 20 f5 02 .... ....O.0 ..
0000000002e3ff98 01 00 00 00 30 20 f5 02 - 00 00 00 00 00 00 00 00 ....0 ..........
0000000002e3ffa8 c7 00 00 00 00 60 f5 02 - 00 00 f5 02 ec ff e3 02 .....`..........
0000000002e3ffb8 83 b6 80 7c 00 00 4f 4d - d8 e0 12 00 18 ee 90 7c ...|..OM.......|
0000000002e3ffc8 00 00 4f 4d 00 d0 fa 7f - 00 d6 8f 89 c0 ff e3 02 ..OM............
0000000002e3ffd8 68 4c b3 88 ff ff ff ff - a8 9a 83 7c 90 b6 80 7c hL.........|...|
0000000002e3ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 86 66 50 4d .............fPM
0000000002e3fff8 00 00 4f 4d 00 00 00 00 - ff ff ff ff ff ff ff ff ..OM............
0000000002e40008 00 00 00 00 00 10 00 00 - 00 01 00 00 00 00 00 00 ................
0000000002e40018 00 00 00 00 00 00 00 00 - 01 00 00 00 00 01 00 00 ................
0000000002e40028 a4 1a e4 02 54 1a e4 02 - 34 12 e4 02 d8 19 e4 02 ....T...4.......
0000000002e40038 50 ed 53 4d 00 00 00 00 - 04 00 00 00 20 00 00 00 P.SM........ ...
*----> State Dump for Thread Id 0xfac <----*
eax=02703000 ebx=001863b0 ecx=001a6fa8 edx=00000004 esi=031dfbc8 edi=031dfb9c
eip=7c90eb94 esp=031dfb14 ebp=031dfb60 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
031dfb60 77e7a716 00185ef0 031dfb80 77e7a747 ntdll!KiFastSystemCallRet
031dfb6c 77e7a747 031dfb9c 74f01830 031dff78 RPCRT4!I_RpcSendReceive+0x23
031dfb80 77ef3675 031dfbc8 00185f04 00000000 RPCRT4!NdrSendReceive+0x28
031dff5c 74f0500d 74f01830 74f015fc 031dff78 RPCRT4!NdrClientCall2+0x1a5
031dff70 74f02586 001b0a00 031dff98 00000000 SSDPAPI!FindServices+0x1e9
031dffb4 7c80b683 001b0a00 00000000 00000000 SSDPAPI!DeregisterNotification+0x5de
031dffec 00000000 74f02555 001b0a00 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> Raw Stack Dump <----*
00000000031dfb14 ed e3 90 7c 68 c9 e7 77 - 38 02 00 00 b8 5e 18 00 ...|h..w8....^..
00000000031dfb24 b8 5e 18 00 9c fb 1d 03 - c8 fb 1d 03 01 00 00 00 .^..............
00000000031dfb34 2d 39 ea 77 48 c6 18 00 - 00 00 00 00 00 00 00 00 -9.wH...........
00000000031dfb44 1e cf e7 77 00 0a 1b 00 - f0 5e 18 00 00 0a 1b 00 ...w.....^......
00000000031dfb54 80 fb 1d 03 dc 8e e7 77 - 00 00 00 00 6c fb 1d 03 .......w....l...
00000000031dfb64 16 a7 e7 77 f0 5e 18 00 - 80 fb 1d 03 47 a7 e7 77 ...w.^......G..w
00000000031dfb74 9c fb 1d 03 30 18 f0 74 - 78 ff 1d 03 5c ff 1d 03 ....0..tx...\...
00000000031dfb84 75 36 ef 77 c8 fb 1d 03 - 04 5f 18 00 00 00 00 00 u6.w....._......
00000000031dfb94 00 00 00 00 00 0a 1b 00 - b0 63 18 00 10 00 00 00 .........c......
00000000031dfba4 f0 5e 18 00 14 00 00 00 - 09 00 00 00 74 4c 18 00 .^..........tL..
00000000031dfbb4 38 14 f0 74 16 1e 4e 77 - 05 00 00 00 32 1e 4e 77 8..t..Nw....2.Nw
00000000031dfbc4 00 00 00 00 9c fb 1d 03 - 04 5f 18 00 00 00 00 00 ........._......
00000000031dfbd4 00 00 00 00 00 00 00 00 - 24 00 00 00 00 00 00 00 ........$.......
00000000031dfbe4 00 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000031dfbf4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000031dfc04 00 00 00 00 00 00 00 00 - 00 00 00 00 be 52 f0 74 .............R.t
00000000031dfc14 ce 52 f0 74 78 ff 1d 03 - 18 fc 1d 03 00 02 00 00 .R.tx...........
00000000031dfc24 88 13 18 00 30 18 f0 74 - 00 00 00 00 00 00 00 00 ....0..t........
00000000031dfc34 00 00 00 00 30 00 00 00 - 02 00 00 00 00 00 00 00 ....0...........
00000000031dfc44 1c 01 11 00 68 55 9e 00 - 00 00 00 00 00 00 00 00 ....hU..........