Microsoft (R) Windows NT (TM) Version 4.00 DrWtsn32 Copyright (C) 1985-1996 Microsoft Corp. All rights reserved. Application exception occurred: App: (pid=99) When: 9/13/2004 @ 10:39:42.680 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 71 SPOOLSS.exe 68 NDDEAGNT.exe 60 EXPLORER.exe 83 RPCSS.exe 42 hotkey.exe 93 S3TRAY.exe 96 PSTORES.exe 99 mainapp.exe 106 DDHELP.exe 64 DRWTSN32.exe 111 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02e50000 - 02e50000) (02f80000 - 02f80000) (030f0000 - 030f0000) (50200000 - 50200000) (5f000000 - 5f000000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (50230000 - 50230000) (04410000 - 04410000) (04540000 - 04540000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04680000 - 04680000) (77c00000 - 77c18000) drv\winspool.dbg (04c40000 - 04c40000) (780a0000 - 780b2000) (04da0000 - 04da0000) (050c0000 - 050c0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (05240000 - 05240000) State Dump for Thread Id 0x62 eax=028d0c60 ebx=00000000 ecx=028d0c60 edx=00000000 esi=00407eb8 edi=00407eec eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f68be=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f68be=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00407eec 00000000 00000000 00000000 user32!GetWindowRect 00407eec 00000113 00002424 00000000 0005d6a6 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ec 7e 40 00 - 00 00 00 00 00 00 00 00 .&.w.~@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ec 7e 40 00 b8 7e 40 00 .........~@..~@. 0012fec0 b8 7e 40 00 ec 7e 40 00 - 01 13 40 5f ec 7e 40 00 .~@..~@...@_.~@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 b8 7e 40 00 5f 80 40 5f - b8 7e 40 00 b8 7e 40 00 .~@._.@_.~@..~@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 b8 7e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 .~@...@_...../.. 0012ff10 00 00 00 00 1f 4b 40 00 - 00 00 40 00 00 00 00 00 .....K@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - a6 4a 40 00 00 00 40 00 ./.......J@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 8d 02 00 00 00 00 - b8 33 3d e1 a0 01 8d 02 P........3=..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 20 20 65 80 F....t..<... e. 0012ffb0 e0 ff 12 00 fe 4a 40 00 - 10 5c 40 00 00 00 00 00 .....J@..\@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x68 eax=008510a6 ebx=00000001 ecx=0085d1a0 edx=00000000 esi=000001e8 edi=00000000 eip=77f6829b esp=02e4fc30 ebp=02e4fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:03d3e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 02e4fc54 1000a367 000001e8 ffffffff 00000001 0085d150 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 02e4fc30 bc cc f1 77 e8 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 02e4fc40 00 00 00 00 60 dc 85 00 - 60 dc 85 00 94 fc e4 02 ....`...`....... 02e4fc50 80 ed 00 10 78 fc e4 02 - 67 a3 00 10 e8 01 00 00 ....x...g....... 02e4fc60 ff ff ff ff 01 00 00 00 - 50 d1 85 00 00 00 00 00 ........P....... 02e4fc70 60 dc 85 00 27 bd 00 10 - 94 fc e4 02 94 65 00 10 `...'........e.. 02e4fc80 d0 fc e4 02 ff ff ff ff - 10 d0 85 00 f0 01 00 00 ................ 02e4fc90 50 d1 85 00 d8 fc e4 02 - 37 e3 24 03 a7 10 e4 02 P.......7.$..... 02e4fca0 d0 fc e4 02 cc fc e4 02 - ff ff ff ff c0 fc e4 02 ................ 02e4fcb0 00 00 00 00 60 dc 85 00 - 60 dc 85 00 a7 10 e4 02 ....`...`....... 02e4fcc0 00 00 00 10 68 5f 72 03 - a0 d1 85 00 a0 d1 85 00 ....h_r......... 02e4fcd0 a0 d1 85 00 3c 00 e4 02 - 30 fd e4 02 dc e3 24 03 ....<...0.....$. 02e4fce0 04 fd e4 02 d0 91 25 03 - 00 fa 00 00 08 76 3b 03 ......%......v;. 02e4fcf0 9e 6c 72 03 10 5f 72 03 - 00 00 00 00 00 00 00 10 .lr.._r......... 02e4fd00 e0 d1 85 00 56 53 31 53 - 79 6e 63 54 68 72 65 61 ....VS1SyncThrea 02e4fd10 64 00 85 00 e0 d1 85 00 - e0 d1 85 00 41 00 00 00 d...........A... 02e4fd20 01 00 85 00 04 fd e4 02 - eb 2c 1f 03 a5 10 51 03 .........,....Q. 02e4fd30 80 fd e4 02 16 2d 1f 03 - a0 94 51 03 a0 94 51 03 .....-....Q...Q. 02e4fd40 00 00 00 00 00 00 ff 02 - 9c 10 e4 02 9d 10 f8 02 ................ 02e4fd50 9e 10 f1 77 3c 00 00 00 - 9f 10 e4 02 80 11 e5 02 ...w<........... 02e4fd60 06 00 f8 02 f4 40 f9 02 - 78 fd e4 02 3f 16 f8 02 .....@..x...?... State Dump for Thread Id 0x6d eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000160 edi=00000000 eip=77f6829b esp=04fbfd50 ebp=04fbfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05eae757=66500000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 04fbfd74 1000a367 00000160 ffffffff 00000001 0085dd70 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=050bfd50 ebp=050bfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05fae757=ffffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 050bfd74 1000a367 00000140 ffffffff 00000001 0085c0e0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 050bfd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 050bfd60 5c 5d 5e 5f 40 da 85 00 - 40 da 85 00 f8 fd 0b 05 \]^_@...@....... 050bfd70 11 8d 01 10 98 fd 0b 05 - 67 a3 00 10 40 01 00 00 ........g...@... 050bfd80 ff ff ff ff 01 00 00 00 - e0 c0 85 00 04 00 00 00 ................ 050bfd90 00 00 00 00 6c fd 0b 05 - b4 fd 0b 05 94 65 00 10 ....l........e.. 050bfda0 00 fe 0b 05 ff ff ff ff - 64 fd 0b 05 6c fd 0b 05 ........d...l... 050bfdb0 e0 c0 85 00 d4 fd 0b 05 - b0 66 00 10 95 10 ff ff .........f...... 050bfdc0 00 fe 0b 05 e8 fd 0b 05 - ff ff ff ff fc fd 0b 05 ................ 050bfdd0 ff ff ff ff 04 fe 0b 05 - cc 19 da 04 00 fe 0b 05 ................ 050bfde0 95 10 da 04 ff ff 00 00 - 00 00 00 00 fc fd 0b 05 ................ 050bfdf0 40 0e dc 04 26 00 00 00 - 01 f5 00 10 f0 aa 85 00 @...&........... 050bfe00 84 ff 0b 05 14 fe 0b 05 - 02 14 da 04 60 0e dc 04 ............`... 050bfe10 18 fe 0b 05 20 fe 0b 05 - e4 13 da 04 60 0e dc 04 .... .......`... 050bfe20 84 ff 0b 05 45 bc 00 10 - 60 0e dc 04 5c 5d 5e 5f ....E...`...\]^_ 050bfe30 40 da 85 00 40 da 85 00 - 0f 00 00 00 21 ce f6 77 @...@.......!..w 050bfe40 0c ff 0b 05 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 050bfe50 78 fe 0b 05 7c 13 23 50 - 07 00 00 00 d8 ee 13 00 x...|.#P........ 050bfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 0b 05 ..#P............ 050bfe70 00 f0 fd 7f ff ff ff ff - 98 fe 0b 05 00 00 00 00 ................ 050bfe80 00 00 0c 05 02 00 00 00 - 00 00 00 00 30 e1 13 00 ............0... State Dump for Thread Id 0x5a eax=1000edb9 ebx=00000001 ecx=05240000 edx=00000000 esi=000000b0 edi=00000000 eip=77f6829b esp=0546fd50 ebp=0546fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0635e757=00ffbf00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0546fd74 1000a367 000000b0 ffffffff 00000001 0085bc50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x42 eax=02e63f9c ebx=00000001 ecx=0556fa60 edx=00000000 esi=00000138 edi=00000000 eip=77f6829b esp=0556fca4 ebp=0556fcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0645e6ab=a9b6dc17 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0556fcc8 1000a367 00000138 ffffffff 00000001 0085c400 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x38 eax=0000c00c ebx=00000001 ecx=0000c00c edx=00000000 esi=00000118 edi=00000000 eip=77f6829b esp=0566fe0c ebp=0566fe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0655e813=d09edd9f 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0566fe30 1000a367 00000118 ffffffff 00000001 0085c570 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x48 eax=0577971c ebx=0085ef60 ecx=00000000 edx=0577f8b0 esi=008275b0 edi=02e4fb30 eip=031b1a8d esp=0577e404 ebp=0577e420 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 031b1a6d 8b4d0c mov ecx,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a70 dd19 fstp qword ptr [ecx] ds:00000000=???????????????? 031b1a72 eb0e jmp 031b1a82 031b1a74 8b1540814c03 mov edx,[034c8140] ds:034c8140=0577971c 031b1a7a d9420c fld dword ptr [edx+0xc] ds:0666e2b6=c8301302 031b1a7d 8b450c mov eax,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a80 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a82 8b0d9c7e4c03 mov ecx,[034c7e9c] ds:034c7e9c=00000000 031b1a88 8b550c mov edx,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a8b dd02 fld qword ptr [edx] ds:0577f8b0=4020000000000000 FAULT ->031b1a8d dc4104 fadd qword ptr [ecx+0x4] ds:00eeea06=0000000000000000 031b1a90 8b450c mov eax,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a93 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a95 8b4d08 mov ecx,[ebp+0x8] ss:0666ce26=65fb38bf 031b1a98 8b550c mov edx,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a9b 8b02 mov eax,[edx] ds:0577f8b0=00000000 031b1a9d 8901 mov [ecx],eax ds:00000000=???????? 031b1a9f 8b5204 mov edx,[edx+0x4] ds:0666e2b6=c8301302 031b1aa2 895104 mov [ecx+0x4],edx ds:00eeea06=00000000 031b1aa5 8b4510 mov eax,[ebp+0x10] ss:0666ce26=65fb38bf 031b1aa8 c70001000000 mov dword ptr [eax],0x1 ds:0577971c=00000000 031b1aae 8b4d24 mov ecx,[ebp+0x24] ss:0666ce26=65fb38bf *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0577e420 031b5faf 0577ebbc 0577f8b0 0577f31c 0577f8c0 *----> Raw Stack Dump <----* 0577e404 b0 75 82 00 38 f9 77 05 - e0 fa 77 05 ac e5 77 05 .u..8.w...w...w. 0577e414 2c ed 77 05 4c f5 77 05 - e8 fa 77 05 cc fd 77 05 ,.w.L.w...w...w. 0577e424 af 5f 1b 03 bc eb 77 05 - b0 f8 77 05 1c f3 77 05 ._....w...w...w. 0577e434 c0 f8 77 05 bc e9 77 05 - 00 00 00 00 00 00 00 00 ..w...w......... 0577e444 28 f7 77 05 00 00 00 00 - 00 00 18 c0 00 00 00 00 (.w............. 0577e454 00 00 32 40 30 fb e4 02 - 60 ef 85 00 60 ef 85 00 ..2@0...`...`... 0577e464 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e474 0e 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e484 01 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0577e494 00 00 00 00 00 00 00 00 - 65 cd bd 41 a8 11 7e 00 ........e..A..~. 0577e4a4 00 00 00 00 00 00 00 00 - 00 00 00 60 b8 13 fa 41 ...........`...A 0577e4b4 00 00 00 00 00 00 00 00 - 00 00 00 00 65 cd bd 41 ............e..A 0577e4c4 00 00 00 00 00 00 00 00 - 63 00 00 00 00 00 00 00 ........c....... 0577e4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e534 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x27 eax=1000edb9 ebx=0085ed10 ecx=00000000 edx=00000000 esi=0687fda0 edi=0687fdec eip=77f6793f esp=0687fd68 ebp=0687fdc4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0776e76f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0687fdc4 03165b9f 00000208 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile *----> Raw Stack Dump <----* 0687fd68 61 2c f0 77 08 02 00 00 - 00 00 00 00 00 00 00 00 a,.w............ 0687fd78 00 00 00 00 a0 fd 87 06 - 1c 20 00 80 00 00 00 00 ......... ...... 0687fd88 00 00 00 00 18 fe 87 06 - 04 00 00 00 ec fd 87 06 ................ 0687fd98 18 fe 87 06 10 ed 85 00 - 00 6c fd 7f 00 00 00 c0 .........l...... 0687fda8 03 00 00 00 94 fd 87 06 - 03 00 00 00 a8 ff 87 06 ................ 0687fdb8 44 b7 f3 77 68 ca f3 77 - ff ff ff ff ec fd 87 06 D..wh..w........ 0687fdc8 9f 5b 16 03 08 02 00 00 - 1c 20 00 80 00 00 00 00 .[....... ...... 0687fdd8 00 00 00 00 18 fe 87 06 - 04 00 00 00 80 56 3f 03 .............V?. 0687fde8 00 00 00 00 20 fe 87 06 - 14 dd 24 03 18 fe 87 06 .... .....$..... 0687fdf8 00 00 00 00 10 ed 85 00 - 00 00 87 06 00 00 00 00 ................ 0687fe08 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0687fe18 10 ed 85 00 00 00 00 00 - 84 ff 87 06 45 bc 00 10 ............E... 0687fe28 76 5f 72 03 00 00 00 00 - 10 ed 85 00 10 ed 85 00 v_r............. 0687fe38 0f 00 00 00 00 00 00 00 - 0c ff 87 06 44 b7 f3 77 ............D..w 0687fe48 c8 cd f3 77 ff ff ff ff - 78 fe 87 06 7c 13 23 50 ...w....x...|.#P 0687fe58 07 00 00 00 90 2b 14 00 - 00 00 23 50 00 00 00 00 .....+....#P.... 0687fe68 00 00 00 00 0c ff 87 06 - fb 0a 25 05 ff ff ff ff ..........%..... 0687fe78 98 fe 87 06 00 00 00 00 - 00 00 24 05 02 00 00 00 ..........$..... 0687fe88 00 00 00 00 b0 fa 13 00 - 00 f0 fd 7f 7d 9c 24 05 ............}.$. 0687fe98 a8 fa 13 00 1f 3e f6 77 - 00 00 24 05 01 00 00 00 .....>.w..$..... Application exception occurred: App: (pid=122) When: 9/13/2004 @ 10:59:13.463 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 71 SPOOLSS.exe 68 NDDEAGNT.exe 60 EXPLORER.exe 83 RPCSS.exe 42 hotkey.exe 93 S3TRAY.exe 96 PSTORES.exe 106 DDHELP.exe 122 mainapp.exe 123 DRWTSN32.exe 79 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02e50000 - 02e50000) (02f80000 - 02f80000) (030f0000 - 030f0000) (50200000 - 50200000) (5f000000 - 5f000000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (50230000 - 50230000) (04410000 - 04410000) (04540000 - 04540000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04680000 - 04680000) (77c00000 - 77c18000) drv\winspool.dbg (04c40000 - 04c40000) (780a0000 - 780b2000) (04da0000 - 04da0000) (050c0000 - 050c0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (05240000 - 05240000) State Dump for Thread Id 0x79 eax=028d0c60 ebx=00000000 ecx=028d0c60 edx=00000000 esi=00407eb8 edi=00407eec eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f68be=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f68be=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00407eec 00000000 00000000 00000000 user32!GetWindowRect 00407eec 00000113 00002424 00000000 0017b3d3 000001a5 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ec 7e 40 00 - 00 00 00 00 00 00 00 00 .&.w.~@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ec 7e 40 00 b8 7e 40 00 .........~@..~@. 0012fec0 b8 7e 40 00 ec 7e 40 00 - 01 13 40 5f ec 7e 40 00 .~@..~@...@_.~@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 b8 7e 40 00 5f 80 40 5f - b8 7e 40 00 b8 7e 40 00 .~@._.@_.~@..~@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 b8 7e 40 00 aa 99 40 5f - a4 e3 4f 01 87 2f 13 00 .~@...@_..O../.. 0012ff10 00 00 00 00 1f 4b 40 00 - 00 00 40 00 00 00 00 00 .....K@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - a6 4a 40 00 00 00 40 00 ./.......J@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 a4 e3 4f 01 ...../........O. 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 8d 02 00 00 00 00 - 8b 02 1a 80 a0 01 8d 02 P............... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 40 17 64 80 ............@.d. 0012ffa0 ac 17 64 80 0b 75 11 80 - 3c ff 12 00 40 17 64 80 ..d..u..<...@.d. 0012ffb0 e0 ff 12 00 fe 4a 40 00 - 10 5c 40 00 00 00 00 00 .....J@..\@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - a4 e3 4f 01 ba 48 c4 77 .......w..O..H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x71 eax=008510a6 ebx=00000001 ecx=0085d1a0 edx=00000000 esi=000001c4 edi=00000000 eip=77f6829b esp=02e4fc30 ebp=02e4fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:03d3e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 02e4fc54 1000a367 000001c4 ffffffff 00000001 0085d150 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 02e4fc30 bc cc f1 77 c4 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 02e4fc40 00 00 00 00 60 dc 85 00 - 60 dc 85 00 94 fc e4 02 ....`...`....... 02e4fc50 80 ed 00 10 78 fc e4 02 - 67 a3 00 10 c4 01 00 00 ....x...g....... 02e4fc60 ff ff ff ff 01 00 00 00 - 50 d1 85 00 00 00 00 00 ........P....... 02e4fc70 60 dc 85 00 27 bd 00 10 - 94 fc e4 02 94 65 00 10 `...'........e.. 02e4fc80 d0 fc e4 02 ff ff ff ff - 10 d0 85 00 cc 01 00 00 ................ 02e4fc90 50 d1 85 00 d8 fc e4 02 - 37 e3 24 03 a7 10 e4 02 P.......7.$..... 02e4fca0 d0 fc e4 02 cc fc e4 02 - ff ff ff ff c0 fc e4 02 ................ 02e4fcb0 00 00 00 00 60 dc 85 00 - 60 dc 85 00 a7 10 e4 02 ....`...`....... 02e4fcc0 00 00 00 10 68 5f 72 03 - a0 d1 85 00 a0 d1 85 00 ....h_r......... 02e4fcd0 a0 d1 85 00 3c 00 e4 02 - 30 fd e4 02 dc e3 24 03 ....<...0.....$. 02e4fce0 04 fd e4 02 d0 91 25 03 - 00 fa 00 00 08 76 3b 03 ......%......v;. 02e4fcf0 9e 6c 72 03 10 5f 72 03 - 00 00 00 00 00 00 00 10 .lr.._r......... 02e4fd00 e0 d1 85 00 56 53 31 53 - 79 6e 63 54 68 72 65 61 ....VS1SyncThrea 02e4fd10 64 00 85 00 e0 d1 85 00 - e0 d1 85 00 41 00 00 00 d...........A... 02e4fd20 01 00 85 00 04 fd e4 02 - eb 2c 1f 03 a5 10 51 03 .........,....Q. 02e4fd30 80 fd e4 02 16 2d 1f 03 - a0 94 51 03 a0 94 51 03 .....-....Q...Q. 02e4fd40 00 00 00 00 00 00 ff 02 - 9c 10 e4 02 9d 10 f8 02 ................ 02e4fd50 9e 10 f1 77 3c 00 00 00 - 9f 10 e4 02 80 11 e5 02 ...w<........... 02e4fd60 06 00 f8 02 f4 40 f9 02 - 78 fd e4 02 3f 16 f8 02 .....@..x...?... State Dump for Thread Id 0x62 eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000160 edi=00000000 eip=77f6829b esp=04fbfd50 ebp=04fbfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05eae757=66500000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 04fbfd74 1000a367 00000160 ffffffff 00000001 0085dd70 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x68 eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=050bfd50 ebp=050bfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05fae757=ffffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 050bfd74 1000a367 00000140 ffffffff 00000001 0085c0e0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 050bfd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 050bfd60 5c 5d 5e 5f 40 da 85 00 - 40 da 85 00 f8 fd 0b 05 \]^_@...@....... 050bfd70 11 8d 01 10 98 fd 0b 05 - 67 a3 00 10 40 01 00 00 ........g...@... 050bfd80 ff ff ff ff 01 00 00 00 - e0 c0 85 00 04 00 00 00 ................ 050bfd90 00 00 00 00 6c fd 0b 05 - b4 fd 0b 05 94 65 00 10 ....l........e.. 050bfda0 00 fe 0b 05 ff ff ff ff - 64 fd 0b 05 6c fd 0b 05 ........d...l... 050bfdb0 e0 c0 85 00 d4 fd 0b 05 - b0 66 00 10 95 10 ff ff .........f...... 050bfdc0 00 fe 0b 05 e8 fd 0b 05 - ff ff ff ff fc fd 0b 05 ................ 050bfdd0 ff ff ff ff 04 fe 0b 05 - cc 19 da 04 00 fe 0b 05 ................ 050bfde0 95 10 da 04 ff ff 00 00 - 00 00 00 00 fc fd 0b 05 ................ 050bfdf0 40 0e dc 04 26 00 00 00 - 01 f5 00 10 f0 aa 85 00 @...&........... 050bfe00 84 ff 0b 05 14 fe 0b 05 - 02 14 da 04 60 0e dc 04 ............`... 050bfe10 18 fe 0b 05 20 fe 0b 05 - e4 13 da 04 60 0e dc 04 .... .......`... 050bfe20 84 ff 0b 05 45 bc 00 10 - 60 0e dc 04 5c 5d 5e 5f ....E...`...\]^_ 050bfe30 40 da 85 00 40 da 85 00 - 0f 00 00 00 21 ce f6 77 @...@.......!..w 050bfe40 0c ff 0b 05 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 050bfe50 78 fe 0b 05 7c 13 23 50 - 07 00 00 00 40 ef 13 00 x...|.#P....@... 050bfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 0b 05 ..#P............ 050bfe70 00 f0 fd 7f ff ff ff ff - 98 fe 0b 05 00 00 00 00 ................ 050bfe80 00 00 0c 05 02 00 00 00 - 00 00 00 00 98 e1 13 00 ................ State Dump for Thread Id 0x5a eax=1000edb9 ebx=00000001 ecx=05240000 edx=00000000 esi=000000a8 edi=00000000 eip=77f6829b esp=0546fd50 ebp=0546fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0635e757=00ffbf00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0546fd74 1000a367 000000a8 ffffffff 00000001 0085bc50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6d eax=00000003 ebx=00000001 ecx=00000000 edx=00000000 esi=00000138 edi=00000000 eip=77f6829b esp=0556fca4 ebp=0556fcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0645e6ab=a9b6dc17 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0556fcc8 1000a367 00000138 ffffffff 00000001 0085c400 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=0000c00c ebx=00000001 ecx=0000c00c edx=00000000 esi=00000118 edi=00000000 eip=77f6829b esp=0566fe0c ebp=0566fe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0655e813=d09edd9f 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0566fe30 1000a367 00000118 ffffffff 00000001 0085c570 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x42 eax=0577971c ebx=0085ef60 ecx=00000000 edx=0577f8b0 esi=0082fdf0 edi=02e4fb30 eip=031b1a8d esp=0577e404 ebp=0577e420 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 031b1a6d 8b4d0c mov ecx,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a70 dd19 fstp qword ptr [ecx] ds:00000000=???????????????? 031b1a72 eb0e jmp 031b1a82 031b1a74 8b1540814c03 mov edx,[034c8140] ds:034c8140=0577971c 031b1a7a d9420c fld dword ptr [edx+0xc] ds:0666e2b6=c8301302 031b1a7d 8b450c mov eax,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a80 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a82 8b0d9c7e4c03 mov ecx,[034c7e9c] ds:034c7e9c=00000000 031b1a88 8b550c mov edx,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a8b dd02 fld qword ptr [edx] ds:0577f8b0=4020000000000000 FAULT ->031b1a8d dc4104 fadd qword ptr [ecx+0x4] ds:00eeea06=0000000000000000 031b1a90 8b450c mov eax,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a93 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a95 8b4d08 mov ecx,[ebp+0x8] ss:0666ce26=65fb38bf 031b1a98 8b550c mov edx,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a9b 8b02 mov eax,[edx] ds:0577f8b0=00000000 031b1a9d 8901 mov [ecx],eax ds:00000000=???????? 031b1a9f 8b5204 mov edx,[edx+0x4] ds:0666e2b6=c8301302 031b1aa2 895104 mov [ecx+0x4],edx ds:00eeea06=00000000 031b1aa5 8b4510 mov eax,[ebp+0x10] ss:0666ce26=65fb38bf 031b1aa8 c70001000000 mov dword ptr [eax],0x1 ds:0577971c=00000000 031b1aae 8b4d24 mov ecx,[ebp+0x24] ss:0666ce26=65fb38bf *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0577e420 031b5faf 0577ebbc 0577f8b0 0577f31c 0577f8c0 *----> Raw Stack Dump <----* 0577e404 f0 fd 82 00 38 e8 77 05 - 14 e6 77 05 20 f6 77 05 ....8.w...w. .w. 0577e414 b8 f3 77 05 78 e8 77 05 - 54 e6 77 05 cc fd 77 05 ..w.x.w.T.w...w. 0577e424 af 5f 1b 03 bc eb 77 05 - b0 f8 77 05 1c f3 77 05 ._....w...w...w. 0577e434 c0 f8 77 05 bc e9 77 05 - 00 00 00 00 00 00 00 00 ..w...w......... 0577e444 28 f7 77 05 00 00 00 00 - 00 00 18 c0 00 00 00 00 (.w............. 0577e454 00 00 32 40 30 fb e4 02 - 60 ef 85 00 60 ef 85 00 ..2@0...`...`... 0577e464 00 00 00 00 00 00 00 00 - 63 00 00 00 00 00 00 00 ........c....... 0577e474 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e484 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e494 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4c4 00 00 00 00 00 00 00 00 - 1f 00 00 00 00 00 00 00 ................ 0577e4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e534 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x38 eax=1000edb9 ebx=0085ed10 ecx=00000000 edx=00000000 esi=0687fda0 edi=0687fdec eip=77f6793f esp=0687fd68 ebp=0687fdc4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0776e76f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0687fdc4 03165b9f 000001d8 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile *----> Raw Stack Dump <----* 0687fd68 61 2c f0 77 d8 01 00 00 - 00 00 00 00 00 00 00 00 a,.w............ 0687fd78 00 00 00 00 a0 fd 87 06 - 1c 20 00 80 00 00 00 00 ......... ...... 0687fd88 00 00 00 00 18 fe 87 06 - 04 00 00 00 ec fd 87 06 ................ 0687fd98 18 fe 87 06 10 ed 85 00 - 00 6c fd 7f 00 00 00 c0 .........l...... 0687fda8 03 00 00 00 94 fd 87 06 - 03 00 00 00 a8 ff 87 06 ................ 0687fdb8 44 b7 f3 77 68 ca f3 77 - ff ff ff ff ec fd 87 06 D..wh..w........ 0687fdc8 9f 5b 16 03 d8 01 00 00 - 1c 20 00 80 00 00 00 00 .[....... ...... 0687fdd8 00 00 00 00 18 fe 87 06 - 04 00 00 00 80 56 3f 03 .............V?. 0687fde8 00 00 00 00 20 fe 87 06 - 14 dd 24 03 18 fe 87 06 .... .....$..... 0687fdf8 00 00 00 00 10 ed 85 00 - 00 00 87 06 00 00 00 00 ................ 0687fe08 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0687fe18 10 ed 85 00 00 00 00 00 - 84 ff 87 06 45 bc 00 10 ............E... 0687fe28 76 5f 72 03 00 00 00 00 - 10 ed 85 00 10 ed 85 00 v_r............. 0687fe38 0f 00 00 00 00 00 00 00 - 0c ff 87 06 44 b7 f3 77 ............D..w 0687fe48 c8 cd f3 77 ff ff ff ff - 78 fe 87 06 7c 13 23 50 ...w....x...|.#P 0687fe58 07 00 00 00 f8 2b 14 00 - 00 00 23 50 00 00 00 00 .....+....#P.... 0687fe68 00 00 00 00 0c ff 87 06 - fb 0a 25 05 ff ff ff ff ..........%..... 0687fe78 98 fe 87 06 00 00 00 00 - 00 00 24 05 02 00 00 00 ..........$..... 0687fe88 00 00 00 00 18 fb 13 00 - 00 f0 fd 7f 7d 9c 24 05 ............}.$. 0687fe98 10 fb 13 00 1f 3e f6 77 - 00 00 24 05 01 00 00 00 .....>.w..$..... Application exception occurred: App: (pid=101) When: 9/13/2004 @ 11:20:55.484 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 71 SPOOLSS.exe 42 RPCSS.exe 85 NDDEAGNT.exe 90 EXPLORER.exe 87 PSTORES.exe 97 hotkey.exe 99 S3TRAY.exe 101 mainapp.exe 106 DDHELP.exe 58 DRWTSN32.exe 116 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02e50000 - 02e50000) (02f80000 - 02f80000) (030f0000 - 030f0000) (50200000 - 50200000) (5f000000 - 5f000000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (50230000 - 50230000) (04410000 - 04410000) (04540000 - 04540000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04680000 - 04680000) (77c00000 - 77c18000) drv\winspool.dbg (04c20000 - 04c20000) (780a0000 - 780b2000) (04d80000 - 04d80000) (050a0000 - 050a0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (05220000 - 05220000) State Dump for Thread Id 0x64 eax=028d0c60 ebx=00000000 ecx=028d0c60 edx=00000000 esi=00407eb8 edi=00407eec eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f68be=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f68be=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00407eec 00000000 00000000 00000000 user32!GetWindowRect 00407eec 00000113 00002424 00000000 000633a2 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ec 7e 40 00 - 00 00 00 00 00 00 00 00 .&.w.~@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ec 7e 40 00 b8 7e 40 00 .........~@..~@. 0012fec0 b8 7e 40 00 ec 7e 40 00 - 01 13 40 5f ec 7e 40 00 .~@..~@...@_.~@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 b8 7e 40 00 5f 80 40 5f - b8 7e 40 00 b8 7e 40 00 .~@._.@_.~@..~@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 b8 7e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 .~@...@_...../.. 0012ff10 00 00 00 00 1f 4b 40 00 - 00 00 40 00 00 00 00 00 .....K@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - a6 4a 40 00 00 00 40 00 ./.......J@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 8d 02 00 00 00 00 - 18 aa 3d e1 a0 01 8d 02 P.........=..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 c0 5c 65 80 F....t..<....\e. 0012ffb0 e0 ff 12 00 fe 4a 40 00 - 10 5c 40 00 00 00 00 00 .....J@..\@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x68 eax=008510a7 ebx=00000001 ecx=0085d170 edx=00000000 esi=000001dc edi=00000000 eip=77f6829b esp=02e4fc30 ebp=02e4fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:03d3e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 02e4fc54 1000a367 000001dc ffffffff 00000001 0085d120 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 02e4fc30 bc cc f1 77 dc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 02e4fc40 00 00 00 00 60 dc 85 00 - 60 dc 85 00 94 fc e4 02 ....`...`....... 02e4fc50 80 ed 00 10 78 fc e4 02 - 67 a3 00 10 dc 01 00 00 ....x...g....... 02e4fc60 ff ff ff ff 01 00 00 00 - 20 d1 85 00 00 00 00 00 ........ ....... 02e4fc70 60 dc 85 00 27 bd 00 10 - 94 fc e4 02 94 65 00 10 `...'........e.. 02e4fc80 d0 fc e4 02 ff ff ff ff - d0 ef 85 00 c0 01 00 00 ................ 02e4fc90 20 d1 85 00 d8 fc e4 02 - 37 e3 24 03 a8 10 e4 02 .......7.$..... 02e4fca0 d0 fc e4 02 cc fc e4 02 - ff ff ff ff c0 fc e4 02 ................ 02e4fcb0 00 00 00 00 60 dc 85 00 - 60 dc 85 00 a8 10 e4 02 ....`...`....... 02e4fcc0 00 00 00 10 68 5f 72 03 - 70 d1 85 00 70 d1 85 00 ....h_r.p...p... 02e4fcd0 70 d1 85 00 3c 00 e4 02 - 30 fd e4 02 dc e3 24 03 p...<...0.....$. 02e4fce0 04 fd e4 02 d0 91 25 03 - 00 fa 00 00 08 76 3b 03 ......%......v;. 02e4fcf0 9e 6c 72 03 10 5f 72 03 - 00 00 00 00 00 00 00 10 .lr.._r......... 02e4fd00 b0 d1 85 00 56 53 31 53 - 79 6e 63 54 68 72 65 61 ....VS1SyncThrea 02e4fd10 64 00 85 00 b0 d1 85 00 - b0 d1 85 00 41 00 00 00 d...........A... 02e4fd20 01 00 85 00 04 fd e4 02 - eb 2c 1f 03 a6 10 51 03 .........,....Q. 02e4fd30 80 fd e4 02 16 2d 1f 03 - a0 94 51 03 a0 94 51 03 .....-....Q...Q. 02e4fd40 00 00 00 00 00 00 ff 02 - 9d 10 e4 02 9e 10 f8 02 ................ 02e4fd50 9f 10 f1 77 3c 00 00 00 - a0 10 e4 02 80 11 e5 02 ...w<........... 02e4fd60 06 00 f8 02 f4 40 f9 02 - 78 fd e4 02 3f 16 f8 02 .....@..x...?... State Dump for Thread Id 0x6d eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000160 edi=00000000 eip=77f6829b esp=04f9fd50 ebp=04f9fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05e8e757=66500000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 04f9fd74 1000a367 00000160 ffffffff 00000001 0085dd70 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0509fd50 ebp=0509fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05f8e757=ffffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0509fd74 1000a367 00000140 ffffffff 00000001 0085c0e0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0509fd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 0509fd60 5c 5d 5e 5f 40 da 85 00 - 40 da 85 00 f8 fd 09 05 \]^_@...@....... 0509fd70 11 8d 01 10 98 fd 09 05 - 67 a3 00 10 40 01 00 00 ........g...@... 0509fd80 ff ff ff ff 01 00 00 00 - e0 c0 85 00 04 00 00 00 ................ 0509fd90 00 00 00 00 6c fd 09 05 - b4 fd 09 05 94 65 00 10 ....l........e.. 0509fda0 00 fe 09 05 ff ff ff ff - 64 fd 09 05 6c fd 09 05 ........d...l... 0509fdb0 e0 c0 85 00 d4 fd 09 05 - b0 66 00 10 95 10 ff ff .........f...... 0509fdc0 00 fe 09 05 e8 fd 09 05 - ff ff ff ff fc fd 09 05 ................ 0509fdd0 ff ff ff ff 04 fe 09 05 - cc 19 d8 04 00 fe 09 05 ................ 0509fde0 95 10 d8 04 ff ff 00 00 - 00 00 00 00 fc fd 09 05 ................ 0509fdf0 40 0e da 04 26 00 00 00 - 01 f5 00 10 f0 aa 85 00 @...&........... 0509fe00 84 ff 09 05 14 fe 09 05 - 02 14 d8 04 60 0e da 04 ............`... 0509fe10 18 fe 09 05 20 fe 09 05 - e4 13 d8 04 60 0e da 04 .... .......`... 0509fe20 84 ff 09 05 45 bc 00 10 - 60 0e da 04 5c 5d 5e 5f ....E...`...\]^_ 0509fe30 40 da 85 00 40 da 85 00 - 0f 00 00 00 21 ce f6 77 @...@.......!..w 0509fe40 0c ff 09 05 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0509fe50 78 fe 09 05 7c 13 23 50 - 07 00 00 00 d8 ee 13 00 x...|.#P........ 0509fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 09 05 ..#P............ 0509fe70 00 f0 fd 7f ff ff ff ff - 98 fe 09 05 00 00 00 00 ................ 0509fe80 00 00 0a 05 02 00 00 00 - 00 00 00 00 30 e1 13 00 ............0... State Dump for Thread Id 0x3d eax=1000edb9 ebx=00000001 ecx=05220000 edx=00000000 esi=000000a8 edi=00000000 eip=77f6829b esp=0544fd50 ebp=0544fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0633e757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0544fd74 1000a367 000000a8 ffffffff 00000001 0085bc50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x48 eax=0000000a ebx=00000001 ecx=0554f8b0 edx=00000000 esi=00000138 edi=00000000 eip=77f6829b esp=0554fca4 ebp=0554fcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0643e6ab=a936dc17 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0554fcc8 1000a367 00000138 ffffffff 00000001 0085c400 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x27 eax=0000c00c ebx=00000001 ecx=0000c00c edx=00000000 esi=00000118 edi=00000000 eip=77f6829b esp=0564fe0c ebp=0564fe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0653e813=c096dd9f 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0564fe30 1000a367 00000118 ffffffff 00000001 0085c570 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0564fe0c bc cc f1 77 18 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0564fe1c 00 00 00 00 00 0f ff 02 - 00 0f ff 02 3c 00 00 00 ............<... 0564fe2c 32 a4 00 10 54 fe 64 05 - 67 a3 00 10 18 01 00 00 2...T.d.g....... 0564fe3c ff ff ff ff 01 00 00 00 - 70 c5 85 00 3c 00 00 00 ........p...<... 0564fe4c 01 00 00 00 00 00 00 00 - 70 fe 64 05 94 65 00 10 ........p.d..e.. 0564fe5c d0 fe 64 05 ff ff ff ff - 14 db 04 10 00 00 85 00 ..d............. 0564fe6c 70 c5 85 00 90 fe 64 05 - b0 66 00 10 8e 10 ff ff p.....d..f...... 0564fe7c d0 fe 64 05 a4 fe 64 05 - ff ff ff ff 08 ff 64 05 ..d...d.......d. 0564fe8c ff ff ff ff 84 ff 64 05 - 99 3e f8 02 d0 fe 64 05 ......d..>....d. 0564fe9c 8e 10 00 00 ff ff 00 00 - 00 00 00 00 08 ff 64 05 ..............d. 0564feac 00 00 00 00 00 0f ff 02 - 00 0f ff 02 60 55 fa 77 ............`U.w 0564febc 61 12 f6 77 30 ff 64 05 - 00 00 00 00 0b 00 00 00 a..w0.d......... 0564fecc 00 00 00 00 ea 05 00 00 - 00 00 00 00 50 ca 7d 00 ............P.}. 0564fedc 00 00 00 00 8e 10 00 00 - 00 00 00 00 00 00 00 00 ................ 0564feec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0564fefc 00 00 00 00 ff ff ff ff - c0 fe 64 05 00 00 00 00 ..........d..... 0564ff0c ff ff ff ff 90 ca 7d 00 - 00 00 00 00 89 03 ff ff ......}......... 0564ff1c 01 00 00 00 f4 c9 7d 00 - 00 00 00 00 00 00 00 00 ......}......... 0564ff2c 64 ca 7d 00 78 10 01 00 - 00 00 00 00 00 00 00 00 d.}.x........... 0564ff3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x5c eax=0575971c ebx=0085ef30 ecx=00000000 edx=0575f8b0 esi=0082fdf0 edi=02e4fb30 eip=031b1a8d esp=0575e404 ebp=0575e420 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 031b1a6d 8b4d0c mov ecx,[ebp+0xc] ss:0664ce26=6dfb289f 031b1a70 dd19 fstp qword ptr [ecx] ds:00000000=???????????????? 031b1a72 eb0e jmp 031b1a82 031b1a74 8b1540814c03 mov edx,[034c8140] ds:034c8140=0575971c 031b1a7a d9420c fld dword ptr [edx+0xc] ds:0664e2b6=48341302 031b1a7d 8b450c mov eax,[ebp+0xc] ss:0664ce26=6dfb289f 031b1a80 dd18 fstp qword ptr [eax] ds:0575971c=0000000000000000 031b1a82 8b0d9c7e4c03 mov ecx,[034c7e9c] ds:034c7e9c=00000000 031b1a88 8b550c mov edx,[ebp+0xc] ss:0664ce26=6dfb289f 031b1a8b dd02 fld qword ptr [edx] ds:0575f8b0=4020000000000000 FAULT ->031b1a8d dc4104 fadd qword ptr [ecx+0x4] ds:00eeea06=0000000000000000 031b1a90 8b450c mov eax,[ebp+0xc] ss:0664ce26=6dfb289f 031b1a93 dd18 fstp qword ptr [eax] ds:0575971c=0000000000000000 031b1a95 8b4d08 mov ecx,[ebp+0x8] ss:0664ce26=6dfb289f 031b1a98 8b550c mov edx,[ebp+0xc] ss:0664ce26=6dfb289f 031b1a9b 8b02 mov eax,[edx] ds:0575f8b0=00000000 031b1a9d 8901 mov [ecx],eax ds:00000000=???????? 031b1a9f 8b5204 mov edx,[edx+0x4] ds:0664e2b6=48341302 031b1aa2 895104 mov [ecx+0x4],edx ds:00eeea06=00000000 031b1aa5 8b4510 mov eax,[ebp+0x10] ss:0664ce26=6dfb289f 031b1aa8 c70001000000 mov dword ptr [eax],0x1 ds:0575971c=00000000 031b1aae 8b4d24 mov ecx,[ebp+0x24] ss:0664ce26=6dfb289f *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0575e420 031b5faf 0575ebbc 0575f8b0 0575f31c 0575f8c0 *----> Raw Stack Dump <----* 0575e404 f0 fd 82 00 38 e8 75 05 - 14 e6 75 05 20 f6 75 05 ....8.u...u. .u. 0575e414 b8 f3 75 05 78 e8 75 05 - 54 e6 75 05 cc fd 75 05 ..u.x.u.T.u...u. 0575e424 af 5f 1b 03 bc eb 75 05 - b0 f8 75 05 1c f3 75 05 ._....u...u...u. 0575e434 c0 f8 75 05 bc e9 75 05 - 00 00 00 00 00 00 00 00 ..u...u......... 0575e444 28 f7 75 05 00 00 00 00 - 00 00 18 c0 00 00 00 00 (.u............. 0575e454 00 00 32 40 30 fb e4 02 - 30 ef 85 00 30 ef 85 00 ..2@0...0...0... 0575e464 00 00 00 00 00 00 00 00 - 63 00 00 00 00 00 00 00 ........c....... 0575e474 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e484 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e494 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4c4 00 00 00 00 00 00 00 00 - 1f 00 00 00 00 00 00 00 ................ 0575e4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e534 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x5d eax=1000edb9 ebx=0085ecf0 ecx=00000000 edx=00000000 esi=0685fda0 edi=0685fdec eip=77f6793f esp=0685fd68 ebp=0685fdc4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0774e76f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0685fdc4 03165b9f 0000020c 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile Application exception occurred: App: (pid=104) When: 9/13/2004 @ 13:37:38.59 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 71 SPOOLSS.exe 68 NDDEAGNT.exe 60 EXPLORER.exe 84 RPCSS.exe 96 hotkey.exe 98 S3TRAY.exe 102 PSTORES.exe 104 mainapp.exe 100 DDHELP.exe 74 DRWTSN32.exe 113 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02e50000 - 02e50000) (02f80000 - 02f80000) (030f0000 - 030f0000) (50200000 - 50200000) (5f000000 - 5f000000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (50230000 - 50230000) (04410000 - 04410000) (04540000 - 04540000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04680000 - 04680000) (77c00000 - 77c18000) drv\winspool.dbg (04c40000 - 04c40000) (780a0000 - 780b2000) (04da0000 - 04da0000) (050c0000 - 050c0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (05240000 - 05240000) State Dump for Thread Id 0x67 eax=028d0c60 ebx=00000000 ecx=028d0c60 edx=00000000 esi=00407eb8 edi=00407eec eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f68be=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f68be=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00407eec 00000000 00000000 00000000 user32!GetWindowRect 00407eec 00000113 00002424 00000000 000641a3 00000108 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ec 7e 40 00 - 00 00 00 00 00 00 00 00 .&.w.~@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ec 7e 40 00 b8 7e 40 00 .........~@..~@. 0012fec0 b8 7e 40 00 ec 7e 40 00 - 01 13 40 5f ec 7e 40 00 .~@..~@...@_.~@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 b8 7e 40 00 5f 80 40 5f - b8 7e 40 00 b8 7e 40 00 .~@._.@_.~@..~@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 b8 7e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 .~@...@_...../.. 0012ff10 00 00 00 00 1f 4b 40 00 - 00 00 40 00 00 00 00 00 .....K@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - a6 4a 40 00 00 00 40 00 ./.......J@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 8d 02 00 00 00 00 - 67 20 05 03 a0 01 8d 02 P.......g ...... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 20 00 69 80 ............ .i. 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 20 30 65 80 F....t..<... 0e. 0012ffb0 e0 ff 12 00 fe 4a 40 00 - 10 5c 40 00 00 00 00 00 .....J@..\@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6e eax=00000000 ebx=00000001 ecx=007e7fe0 edx=00000000 esi=000001dc edi=00000000 eip=77f6829b esp=02e4fc30 ebp=02e4fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:03d3e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 02e4fc54 1000a367 000001dc ffffffff 00000001 0085d150 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 02e4fc30 bc cc f1 77 dc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 02e4fc40 00 00 00 00 60 dc 85 00 - 60 dc 85 00 94 fc e4 02 ....`...`....... 02e4fc50 80 ed 00 10 78 fc e4 02 - 67 a3 00 10 dc 01 00 00 ....x...g....... 02e4fc60 ff ff ff ff 01 00 00 00 - 50 d1 85 00 00 00 00 00 ........P....... 02e4fc70 60 dc 85 00 27 bd 00 10 - 94 fc e4 02 94 65 00 10 `...'........e.. 02e4fc80 d0 fc e4 02 ff ff ff ff - 10 d0 85 00 e4 01 00 00 ................ 02e4fc90 50 d1 85 00 d8 fc e4 02 - 37 e3 24 03 a7 10 e4 02 P.......7.$..... 02e4fca0 d0 fc e4 02 cc fc e4 02 - ff ff ff ff c0 fc e4 02 ................ 02e4fcb0 00 00 00 00 60 dc 85 00 - 60 dc 85 00 a7 10 e4 02 ....`...`....... 02e4fcc0 00 00 00 10 68 5f 72 03 - a0 d1 85 00 a0 d1 85 00 ....h_r......... 02e4fcd0 a0 d1 85 00 3c 00 e4 02 - 30 fd e4 02 dc e3 24 03 ....<...0.....$. 02e4fce0 04 fd e4 02 d0 91 25 03 - 00 fa 00 00 08 76 3b 03 ......%......v;. 02e4fcf0 9e 6c 72 03 10 5f 72 03 - 00 00 00 00 00 00 00 10 .lr.._r......... 02e4fd00 e0 d1 85 00 56 53 31 53 - 79 6e 63 54 68 72 65 61 ....VS1SyncThrea 02e4fd10 64 00 85 00 e0 d1 85 00 - e0 d1 85 00 41 00 00 00 d...........A... 02e4fd20 01 00 85 00 04 fd e4 02 - eb 2c 1f 03 a5 10 51 03 .........,....Q. 02e4fd30 80 fd e4 02 16 2d 1f 03 - a0 94 51 03 a0 94 51 03 .....-....Q...Q. 02e4fd40 00 00 00 00 00 00 ff 02 - 9c 10 e4 02 9d 10 f8 02 ................ 02e4fd50 9e 10 f1 77 3c 00 00 00 - 9f 10 e4 02 80 11 e5 02 ...w<........... 02e4fd60 06 00 f8 02 f4 40 f9 02 - 78 fd e4 02 3f 16 f8 02 .....@..x...?... State Dump for Thread Id 0x5d eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000160 edi=00000000 eip=77f6829b esp=04fbfd50 ebp=04fbfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05eae757=66500000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 04fbfd74 1000a367 00000160 ffffffff 00000001 0085dd70 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5e eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=050bfd50 ebp=050bfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05fae757=ffffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 050bfd74 1000a367 00000140 ffffffff 00000001 0085c0e0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 050bfd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 050bfd60 5c 5d 5e 5f 40 da 85 00 - 40 da 85 00 f8 fd 0b 05 \]^_@...@....... 050bfd70 11 8d 01 10 98 fd 0b 05 - 67 a3 00 10 40 01 00 00 ........g...@... 050bfd80 ff ff ff ff 01 00 00 00 - e0 c0 85 00 04 00 00 00 ................ 050bfd90 00 00 00 00 6c fd 0b 05 - b4 fd 0b 05 94 65 00 10 ....l........e.. 050bfda0 00 fe 0b 05 ff ff ff ff - 64 fd 0b 05 6c fd 0b 05 ........d...l... 050bfdb0 e0 c0 85 00 d4 fd 0b 05 - b0 66 00 10 95 10 ff ff .........f...... 050bfdc0 00 fe 0b 05 e8 fd 0b 05 - ff ff ff ff fc fd 0b 05 ................ 050bfdd0 ff ff ff ff 04 fe 0b 05 - cc 19 da 04 00 fe 0b 05 ................ 050bfde0 95 10 da 04 ff ff 00 00 - 00 00 00 00 fc fd 0b 05 ................ 050bfdf0 40 0e dc 04 26 00 00 00 - 01 f5 00 10 f0 aa 85 00 @...&........... 050bfe00 84 ff 0b 05 14 fe 0b 05 - 02 14 da 04 60 0e dc 04 ............`... 050bfe10 18 fe 0b 05 20 fe 0b 05 - e4 13 da 04 60 0e dc 04 .... .......`... 050bfe20 84 ff 0b 05 45 bc 00 10 - 60 0e dc 04 5c 5d 5e 5f ....E...`...\]^_ 050bfe30 40 da 85 00 40 da 85 00 - 0f 00 00 00 21 ce f6 77 @...@.......!..w 050bfe40 0c ff 0b 05 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 050bfe50 78 fe 0b 05 7c 13 23 50 - 07 00 00 00 d8 ee 13 00 x...|.#P........ 050bfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 0b 05 ..#P............ 050bfe70 00 f0 fd 7f ff ff ff ff - 98 fe 0b 05 00 00 00 00 ................ 050bfe80 00 00 0c 05 02 00 00 00 - 00 00 00 00 30 e1 13 00 ............0... State Dump for Thread Id 0x55 eax=1000edb9 ebx=00000001 ecx=05240000 edx=00000000 esi=000000b4 edi=00000000 eip=77f6829b esp=0546fd50 ebp=0546fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0635e757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0546fd74 1000a367 000000b4 ffffffff 00000001 0085bc50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5c eax=00000000 ebx=00000001 ecx=0000000a edx=00000000 esi=00000138 edi=00000000 eip=77f6829b esp=0556fca4 ebp=0556fcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0645e6ab=abbede17 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0556fcc8 1000a367 00000138 ffffffff 00000001 0085c400 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x38 eax=0000c00c ebx=00000001 ecx=0000c00c edx=00000000 esi=00000118 edi=00000000 eip=77f6829b esp=0566fe0c ebp=0566fe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0655e813=d09edd9f 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0566fe30 1000a367 00000118 ffffffff 00000001 0085c570 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x37 eax=007c7580 ebx=0085ef60 ecx=00000000 edx=0577f8b0 esi=007e2730 edi=02e4fb30 eip=031b1a8d esp=0577e404 ebp=0577e420 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 031b1a6d 8b4d0c mov ecx,[ebp+0xc] ss:0666ce26=6dfb38bf 031b1a70 dd19 fstp qword ptr [ecx] ds:00000000=???????????????? 031b1a72 eb0e jmp 031b1a82 031b1a74 8b1540814c03 mov edx,[034c8140] ds:034c8140=007c7580 031b1a7a d9420c fld dword ptr [edx+0xc] ds:0666e2b6=c8301302 031b1a7d 8b450c mov eax,[ebp+0xc] ss:0666ce26=6dfb38bf 031b1a80 dd18 fstp qword ptr [eax] ds:007c7580=0000000800040002 031b1a82 8b0d9c7e4c03 mov ecx,[034c7e9c] ds:034c7e9c=00000000 031b1a88 8b550c mov edx,[ebp+0xc] ss:0666ce26=6dfb38bf 031b1a8b dd02 fld qword ptr [edx] ds:0577f8b0=4000ccccc0000000 FAULT ->031b1a8d dc4104 fadd qword ptr [ecx+0x4] ds:00eeea06=0000000000000000 031b1a90 8b450c mov eax,[ebp+0xc] ss:0666ce26=6dfb38bf 031b1a93 dd18 fstp qword ptr [eax] ds:007c7580=0000000800040002 031b1a95 8b4d08 mov ecx,[ebp+0x8] ss:0666ce26=6dfb38bf 031b1a98 8b550c mov edx,[ebp+0xc] ss:0666ce26=6dfb38bf 031b1a9b 8b02 mov eax,[edx] ds:0577f8b0=c0000000 031b1a9d 8901 mov [ecx],eax ds:00000000=???????? 031b1a9f 8b5204 mov edx,[edx+0x4] ds:0666e2b6=c8301302 031b1aa2 895104 mov [ecx+0x4],edx ds:00eeea06=00000000 031b1aa5 8b4510 mov eax,[ebp+0x10] ss:0666ce26=6dfb38bf 031b1aa8 c70001000000 mov dword ptr [eax],0x1 ds:007c7580=00040002 031b1aae 8b4d24 mov ecx,[ebp+0x24] ss:0666ce26=6dfb38bf *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0577e420 031b5faf 0577ebbc 0577f8b0 0577f31c 0577f8c0 *----> Raw Stack Dump <----* 0577e404 30 27 7e 00 38 f9 77 05 - e0 fa 77 05 ac e5 77 05 0'~.8.w...w...w. 0577e414 2c ed 77 05 4c f5 77 05 - e8 fa 77 05 cc fd 77 05 ,.w.L.w...w...w. 0577e424 af 5f 1b 03 bc eb 77 05 - b0 f8 77 05 1c f3 77 05 ._....w...w...w. 0577e434 c0 f8 77 05 bc e9 77 05 - 00 00 00 00 00 00 00 00 ..w...w......... 0577e444 28 f7 77 05 00 00 00 00 - 00 00 18 c0 00 00 00 00 (.w............. 0577e454 00 00 32 40 30 fb e4 02 - 60 ef 85 00 60 ef 85 00 ..2@0...`...`... 0577e464 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e474 0e 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e484 01 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0577e494 00 00 00 00 00 00 00 00 - 65 cd bd 41 78 2d 7e 00 ........e..Ax-~. 0577e4a4 00 00 00 00 00 00 00 00 - 00 00 00 60 b8 13 fa 41 ...........`...A 0577e4b4 00 00 00 00 00 00 00 00 - 00 00 00 00 65 cd bd 41 ............e..A 0577e4c4 00 00 00 00 00 00 00 00 - 63 00 00 00 00 00 00 00 ........c....... 0577e4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e534 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x48 eax=1000edb9 ebx=0085ed10 ecx=00000000 edx=00000000 esi=0687fda0 edi=0687fdec eip=77f6793f esp=0687fd68 ebp=0687fdc4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0776e76f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0687fdc4 03165b9f 00000208 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile Application exception occurred: App: (pid=98) When: 10/25/2004 @ 10:5:36.670 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 71 SPOOLSS.exe 68 NDDEAGNT.exe 60 EXPLORER.exe 81 RPCSS.exe 78 hotkey.exe 91 PSTORES.exe 95 S3TRAY.exe 98 mainapp.exe 105 DDHELP.exe 39 DRWTSN32.exe 111 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02e50000 - 02e50000) (02f80000 - 02f80000) (030f0000 - 030f0000) (50200000 - 50200000) (5f000000 - 5f000000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (50230000 - 50230000) (04410000 - 04410000) (04540000 - 04540000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04680000 - 04680000) (77c00000 - 77c18000) drv\winspool.dbg (04c40000 - 04c40000) (780a0000 - 780b2000) (04da0000 - 04da0000) (050c0000 - 050c0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (05240000 - 05240000) State Dump for Thread Id 0x61 eax=028d0c60 ebx=00000000 ecx=028d0c60 edx=00000000 esi=00407eb8 edi=00407eec eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f68be=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f68be=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00407eec 00000000 00000000 00000000 user32!GetWindowRect 00407eec 00000113 00002424 00000000 0005d6a6 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ec 7e 40 00 - 00 00 00 00 00 00 00 00 .&.w.~@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ec 7e 40 00 b8 7e 40 00 .........~@..~@. 0012fec0 b8 7e 40 00 ec 7e 40 00 - 01 13 40 5f ec 7e 40 00 .~@..~@...@_.~@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 b8 7e 40 00 5f 80 40 5f - b8 7e 40 00 b8 7e 40 00 .~@._.@_.~@..~@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 b8 7e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 .~@...@_...../.. 0012ff10 00 00 00 00 1f 4b 40 00 - 00 00 40 00 00 00 00 00 .....K@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - a6 4a 40 00 00 00 40 00 ./.......J@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 8d 02 00 00 00 00 - 98 0d 3e e1 a0 01 8d 02 P.........>..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 80 6a 65 80 F....t..<....je. 0012ffb0 e0 ff 12 00 fe 4a 40 00 - 10 5c 40 00 00 00 00 00 .....J@..\@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x67 eax=008510a6 ebx=00000001 ecx=0085d1a0 edx=00000000 esi=000001d0 edi=00000000 eip=77f6829b esp=02e4fc30 ebp=02e4fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:03d3e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 02e4fc54 1000a367 000001d0 ffffffff 00000001 0085d150 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 02e4fc30 bc cc f1 77 d0 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 02e4fc40 00 00 00 00 60 dc 85 00 - 60 dc 85 00 94 fc e4 02 ....`...`....... 02e4fc50 80 ed 00 10 78 fc e4 02 - 67 a3 00 10 d0 01 00 00 ....x...g....... 02e4fc60 ff ff ff ff 01 00 00 00 - 50 d1 85 00 00 00 00 00 ........P....... 02e4fc70 60 dc 85 00 27 bd 00 10 - 94 fc e4 02 94 65 00 10 `...'........e.. 02e4fc80 d0 fc e4 02 ff ff ff ff - 10 d0 85 00 bc 01 00 00 ................ 02e4fc90 50 d1 85 00 d8 fc e4 02 - 37 e3 24 03 a7 10 e4 02 P.......7.$..... 02e4fca0 d0 fc e4 02 cc fc e4 02 - ff ff ff ff c0 fc e4 02 ................ 02e4fcb0 00 00 00 00 60 dc 85 00 - 60 dc 85 00 a7 10 e4 02 ....`...`....... 02e4fcc0 00 00 00 10 68 5f 72 03 - a0 d1 85 00 a0 d1 85 00 ....h_r......... 02e4fcd0 a0 d1 85 00 3c 00 e4 02 - 30 fd e4 02 dc e3 24 03 ....<...0.....$. 02e4fce0 04 fd e4 02 d0 91 25 03 - 00 fa 00 00 08 76 3b 03 ......%......v;. 02e4fcf0 9e 6c 72 03 10 5f 72 03 - 00 00 00 00 00 00 00 10 .lr.._r......... 02e4fd00 e0 d1 85 00 56 53 31 53 - 79 6e 63 54 68 72 65 61 ....VS1SyncThrea 02e4fd10 64 00 85 00 e0 d1 85 00 - e0 d1 85 00 41 00 00 00 d...........A... 02e4fd20 01 00 85 00 04 fd e4 02 - eb 2c 1f 03 a5 10 51 03 .........,....Q. 02e4fd30 80 fd e4 02 16 2d 1f 03 - a0 94 51 03 a0 94 51 03 .....-....Q...Q. 02e4fd40 00 00 00 00 00 00 ff 02 - 9c 10 e4 02 9d 10 f8 02 ................ 02e4fd50 9e 10 f1 77 3c 00 00 00 - 9f 10 e4 02 80 11 e5 02 ...w<........... 02e4fd60 06 00 f8 02 f4 40 f9 02 - 78 fd e4 02 3f 16 f8 02 .....@..x...?... State Dump for Thread Id 0x6c eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000160 edi=00000000 eip=77f6829b esp=04fbfd50 ebp=04fbfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05eae757=66100000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 04fbfd74 1000a367 00000160 ffffffff 00000001 0085dd70 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6d eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=050bfd50 ebp=050bfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05fae757=ffffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 050bfd74 1000a367 00000140 ffffffff 00000001 0085c0e0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 050bfd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 050bfd60 5c 5d 5e 5f 40 da 85 00 - 40 da 85 00 f8 fd 0b 05 \]^_@...@....... 050bfd70 11 8d 01 10 98 fd 0b 05 - 67 a3 00 10 40 01 00 00 ........g...@... 050bfd80 ff ff ff ff 01 00 00 00 - e0 c0 85 00 04 00 00 00 ................ 050bfd90 00 00 00 00 6c fd 0b 05 - b4 fd 0b 05 94 65 00 10 ....l........e.. 050bfda0 00 fe 0b 05 ff ff ff ff - 64 fd 0b 05 6c fd 0b 05 ........d...l... 050bfdb0 e0 c0 85 00 d4 fd 0b 05 - b0 66 00 10 95 10 ff ff .........f...... 050bfdc0 00 fe 0b 05 e8 fd 0b 05 - ff ff ff ff fc fd 0b 05 ................ 050bfdd0 ff ff ff ff 04 fe 0b 05 - cc 19 da 04 00 fe 0b 05 ................ 050bfde0 95 10 da 04 ff ff 00 00 - 00 00 00 00 fc fd 0b 05 ................ 050bfdf0 40 0e dc 04 26 00 00 00 - 01 f5 00 10 f0 aa 85 00 @...&........... 050bfe00 84 ff 0b 05 14 fe 0b 05 - 02 14 da 04 60 0e dc 04 ............`... 050bfe10 18 fe 0b 05 20 fe 0b 05 - e4 13 da 04 60 0e dc 04 .... .......`... 050bfe20 84 ff 0b 05 45 bc 00 10 - 60 0e dc 04 5c 5d 5e 5f ....E...`...\]^_ 050bfe30 40 da 85 00 40 da 85 00 - 0f 00 00 00 21 ce f6 77 @...@.......!..w 050bfe40 0c ff 0b 05 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 050bfe50 78 fe 0b 05 7c 13 23 50 - 07 00 00 00 d8 ee 13 00 x...|.#P........ 050bfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 0b 05 ..#P............ 050bfe70 00 f0 fd 7f ff ff ff ff - 98 fe 0b 05 00 00 00 00 ................ 050bfe80 00 00 0c 05 02 00 00 00 - 00 00 00 00 30 e1 13 00 ............0... State Dump for Thread Id 0x6e eax=1000edb9 ebx=00000001 ecx=05240000 edx=00000000 esi=000000b4 edi=00000000 eip=77f6829b esp=0546fd50 ebp=0546fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0635e757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0546fd74 1000a367 000000b4 ffffffff 00000001 0085bc50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x52 eax=0556f8b8 ebx=00000001 ecx=0556f8f4 edx=00000000 esi=00000138 edi=00000000 eip=77f6829b esp=0556fca4 ebp=0556fcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0645e6ab=b936de17 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0556fcc8 1000a367 00000138 ffffffff 00000001 0085c400 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5a eax=0000c00c ebx=00000001 ecx=0000c00c edx=00000000 esi=00000118 edi=00000000 eip=77f6829b esp=0566fe0c ebp=0566fe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0655e813=c09add9f 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0566fe30 1000a367 00000118 ffffffff 00000001 0085c570 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2e eax=0577971c ebx=0085ef60 ecx=00000000 edx=0577f8b0 esi=008273a0 edi=02e4fb30 eip=031b1a8d esp=0577e404 ebp=0577e420 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 031b1a6d 8b4d0c mov ecx,[ebp+0xc] ss:0666ce26=6df228ff 031b1a70 dd19 fstp qword ptr [ecx] ds:00000000=???????????????? 031b1a72 eb0e jmp 031b1a82 031b1a74 8b1540814c03 mov edx,[034c8140] ds:034c8140=0577971c 031b1a7a d9420c fld dword ptr [edx+0xc] ds:0666e2b6=c8305302 031b1a7d 8b450c mov eax,[ebp+0xc] ss:0666ce26=6df228ff 031b1a80 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a82 8b0d9c7e4c03 mov ecx,[034c7e9c] ds:034c7e9c=00000000 031b1a88 8b550c mov edx,[ebp+0xc] ss:0666ce26=6df228ff 031b1a8b dd02 fld qword ptr [edx] ds:0577f8b0=4020000000000000 FAULT ->031b1a8d dc4104 fadd qword ptr [ecx+0x4] ds:00eeea06=0000000000000000 031b1a90 8b450c mov eax,[ebp+0xc] ss:0666ce26=6df228ff 031b1a93 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a95 8b4d08 mov ecx,[ebp+0x8] ss:0666ce26=6df228ff 031b1a98 8b550c mov edx,[ebp+0xc] ss:0666ce26=6df228ff 031b1a9b 8b02 mov eax,[edx] ds:0577f8b0=00000000 031b1a9d 8901 mov [ecx],eax ds:00000000=???????? 031b1a9f 8b5204 mov edx,[edx+0x4] ds:0666e2b6=c8305302 031b1aa2 895104 mov [ecx+0x4],edx ds:00eeea06=00000000 031b1aa5 8b4510 mov eax,[ebp+0x10] ss:0666ce26=6df228ff 031b1aa8 c70001000000 mov dword ptr [eax],0x1 ds:0577971c=00000000 031b1aae 8b4d24 mov ecx,[ebp+0x24] ss:0666ce26=6df228ff *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0577e420 031b5faf 0577ebbc 0577f8b0 0577f31c 0577f8c0 *----> Raw Stack Dump <----* 0577e404 a0 73 82 00 38 f9 77 05 - e0 fa 77 05 ac e5 77 05 .s..8.w...w...w. 0577e414 2c ed 77 05 4c f5 77 05 - e8 fa 77 05 cc fd 77 05 ,.w.L.w...w...w. 0577e424 af 5f 1b 03 bc eb 77 05 - b0 f8 77 05 1c f3 77 05 ._....w...w...w. 0577e434 c0 f8 77 05 bc e9 77 05 - 00 00 00 00 00 00 00 00 ..w...w......... 0577e444 28 f7 77 05 00 00 00 00 - 00 00 18 c0 00 00 00 00 (.w............. 0577e454 00 00 32 40 30 fb e4 02 - 60 ef 85 00 60 ef 85 00 ..2@0...`...`... 0577e464 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e474 63 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 c............... 0577e484 01 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0577e494 00 00 00 00 eb 57 0a d4 - 2a 15 b8 41 d8 52 82 00 .....W..*..A.R.. 0577e4a4 00 00 00 00 00 00 00 00 - 00 00 00 20 5f a0 22 42 ........... _."B 0577e4b4 00 00 00 00 00 00 00 00 - eb 57 0a d4 2a 15 b8 41 .........W..*..A 0577e4c4 00 00 00 00 00 00 00 00 - 63 00 00 00 00 00 00 00 ........c....... 0577e4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e534 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x3d eax=1000edb9 ebx=0085ed10 ecx=00000000 edx=00000000 esi=0687fda0 edi=0687fdec eip=77f6793f esp=0687fd68 ebp=0687fdc4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0776e76f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0687fdc4 03165b9f 00000208 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile Application exception occurred: App: (pid=100) When: 10/25/2004 @ 10:55:11.802 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 71 SPOOLSS.exe 68 RPCSS.exe 84 NDDEAGNT.exe 88 EXPLORER.exe 89 PSTORES.exe 96 hotkey.exe 98 S3TRAY.exe 100 mainapp.exe 105 DDHELP.exe 62 DRWTSN32.exe 113 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02e50000 - 02e50000) (02f80000 - 02f80000) (030f0000 - 030f0000) (50200000 - 50200000) (5f000000 - 5f000000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (50230000 - 50230000) (04410000 - 04410000) (04540000 - 04540000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04680000 - 04680000) (77c00000 - 77c18000) drv\winspool.dbg (04c20000 - 04c20000) (780a0000 - 780b2000) (04d80000 - 04d80000) (050a0000 - 050a0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (05220000 - 05220000) State Dump for Thread Id 0x63 eax=028d0c60 ebx=00000000 ecx=028d0c60 edx=00000000 esi=00407eb8 edi=00407eec eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f68be=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f68be=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00407eec 00000000 00000000 00000000 user32!GetWindowRect 00407eec 00000113 00002424 00000000 00062d10 0000013e !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ec 7e 40 00 - 00 00 00 00 00 00 00 00 .&.w.~@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ec 7e 40 00 b8 7e 40 00 .........~@..~@. 0012fec0 b8 7e 40 00 ec 7e 40 00 - 01 13 40 5f ec 7e 40 00 .~@..~@...@_.~@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 b8 7e 40 00 5f 80 40 5f - b8 7e 40 00 b8 7e 40 00 .~@._.@_.~@..~@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 b8 7e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 .~@...@_...../.. 0012ff10 00 00 00 00 1f 4b 40 00 - 00 00 40 00 00 00 00 00 .....K@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - a6 4a 40 00 00 00 40 00 ./.......J@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 8d 02 00 00 00 00 - 00 00 00 00 a0 01 8d 02 P............... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 e0 35 65 80 F....t..<....5e. 0012ffb0 e0 ff 12 00 fe 4a 40 00 - 10 5c 40 00 00 00 00 00 .....J@..\@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x67 eax=008510a7 ebx=00000001 ecx=0085d170 edx=00000000 esi=000001ec edi=00000000 eip=77f6829b esp=02e4fc30 ebp=02e4fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:03d3e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 02e4fc54 1000a367 000001ec ffffffff 00000001 0085d120 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 02e4fc30 bc cc f1 77 ec 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 02e4fc40 00 00 00 00 60 dc 85 00 - 60 dc 85 00 94 fc e4 02 ....`...`....... 02e4fc50 80 ed 00 10 78 fc e4 02 - 67 a3 00 10 ec 01 00 00 ....x...g....... 02e4fc60 ff ff ff ff 01 00 00 00 - 20 d1 85 00 00 00 00 00 ........ ....... 02e4fc70 60 dc 85 00 27 bd 00 10 - 94 fc e4 02 94 65 00 10 `...'........e.. 02e4fc80 d0 fc e4 02 ff ff ff ff - d0 ef 85 00 f0 01 00 00 ................ 02e4fc90 20 d1 85 00 d8 fc e4 02 - 37 e3 24 03 a8 10 e4 02 .......7.$..... 02e4fca0 d0 fc e4 02 cc fc e4 02 - ff ff ff ff c0 fc e4 02 ................ 02e4fcb0 00 00 00 00 60 dc 85 00 - 60 dc 85 00 a8 10 e4 02 ....`...`....... 02e4fcc0 00 00 00 10 68 5f 72 03 - 70 d1 85 00 70 d1 85 00 ....h_r.p...p... 02e4fcd0 70 d1 85 00 3c 00 e4 02 - 30 fd e4 02 dc e3 24 03 p...<...0.....$. 02e4fce0 04 fd e4 02 d0 91 25 03 - 00 fa 00 00 08 76 3b 03 ......%......v;. 02e4fcf0 9e 6c 72 03 10 5f 72 03 - 00 00 00 00 00 00 00 10 .lr.._r......... 02e4fd00 b0 d1 85 00 56 53 31 53 - 79 6e 63 54 68 72 65 61 ....VS1SyncThrea 02e4fd10 64 00 85 00 b0 d1 85 00 - b0 d1 85 00 41 00 00 00 d...........A... 02e4fd20 01 00 85 00 04 fd e4 02 - eb 2c 1f 03 a6 10 51 03 .........,....Q. 02e4fd30 80 fd e4 02 16 2d 1f 03 - a0 94 51 03 a0 94 51 03 .....-....Q...Q. 02e4fd40 00 00 00 00 00 00 ff 02 - 9d 10 e4 02 9e 10 f8 02 ................ 02e4fd50 9f 10 f1 77 3c 00 00 00 - a0 10 e4 02 80 11 e5 02 ...w<........... 02e4fd60 06 00 f8 02 f4 40 f9 02 - 78 fd e4 02 3f 16 f8 02 .....@..x...?... State Dump for Thread Id 0x6c eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000160 edi=00000000 eip=77f6829b esp=04f9fd50 ebp=04f9fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05e8e757=66100000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 04f9fd74 1000a367 00000160 ffffffff 00000001 0085dd70 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6d eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0509fd50 ebp=0509fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05f8e757=ffffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0509fd74 1000a367 00000140 ffffffff 00000001 0085c0e0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0509fd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 0509fd60 5c 5d 5e 5f 40 da 85 00 - 40 da 85 00 f8 fd 09 05 \]^_@...@....... 0509fd70 11 8d 01 10 98 fd 09 05 - 67 a3 00 10 40 01 00 00 ........g...@... 0509fd80 ff ff ff ff 01 00 00 00 - e0 c0 85 00 04 00 00 00 ................ 0509fd90 00 00 00 00 6c fd 09 05 - b4 fd 09 05 94 65 00 10 ....l........e.. 0509fda0 00 fe 09 05 ff ff ff ff - 64 fd 09 05 6c fd 09 05 ........d...l... 0509fdb0 e0 c0 85 00 d4 fd 09 05 - b0 66 00 10 95 10 ff ff .........f...... 0509fdc0 00 fe 09 05 e8 fd 09 05 - ff ff ff ff fc fd 09 05 ................ 0509fdd0 ff ff ff ff 04 fe 09 05 - cc 19 d8 04 00 fe 09 05 ................ 0509fde0 95 10 d8 04 ff ff 00 00 - 00 00 00 00 fc fd 09 05 ................ 0509fdf0 40 0e da 04 26 00 00 00 - 01 f5 00 10 f0 aa 85 00 @...&........... 0509fe00 84 ff 09 05 14 fe 09 05 - 02 14 d8 04 60 0e da 04 ............`... 0509fe10 18 fe 09 05 20 fe 09 05 - e4 13 d8 04 60 0e da 04 .... .......`... 0509fe20 84 ff 09 05 45 bc 00 10 - 60 0e da 04 5c 5d 5e 5f ....E...`...\]^_ 0509fe30 40 da 85 00 40 da 85 00 - 0f 00 00 00 21 ce f6 77 @...@.......!..w 0509fe40 0c ff 09 05 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0509fe50 78 fe 09 05 7c 13 23 50 - 07 00 00 00 d8 ee 13 00 x...|.#P........ 0509fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 09 05 ..#P............ 0509fe70 00 f0 fd 7f ff ff ff ff - 98 fe 09 05 00 00 00 00 ................ 0509fe80 00 00 0a 05 02 00 00 00 - 00 00 00 00 30 e1 13 00 ............0... State Dump for Thread Id 0x6e eax=1000edb9 ebx=00000001 ecx=05220000 edx=00000000 esi=000000b4 edi=00000000 eip=77f6829b esp=0544fd50 ebp=0544fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0633e757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0544fd74 1000a367 000000b4 ffffffff 00000001 0085bc50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x38 eax=00000000 ebx=00000001 ecx=0000000a edx=00000000 esi=00000138 edi=00000000 eip=77f6829b esp=0554fca4 ebp=0554fcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0643e6ab=a9bedc37 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0554fcc8 1000a367 00000138 ffffffff 00000001 0085c400 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x40 eax=0000c00c ebx=00000001 ecx=0000c00c edx=00000000 esi=00000118 edi=00000000 eip=77f6829b esp=0564fe0c ebp=0564fe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0653e813=d09e519f 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0564fe30 1000a367 00000118 ffffffff 00000001 0085c570 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x27 eax=0575971c ebx=0085ef30 ecx=00000000 edx=0575f8b0 esi=0082fbe0 edi=02e4fb30 eip=031b1a8d esp=0575e404 ebp=0575e420 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 031b1a6d 8b4d0c mov ecx,[ebp+0xc] ss:0664ce26=6dfb38bf 031b1a70 dd19 fstp qword ptr [ecx] ds:00000000=???????????????? 031b1a72 eb0e jmp 031b1a82 031b1a74 8b1540814c03 mov edx,[034c8140] ds:034c8140=0575971c 031b1a7a d9420c fld dword ptr [edx+0xc] ds:0664e2b6=c8301342 031b1a7d 8b450c mov eax,[ebp+0xc] ss:0664ce26=6dfb38bf 031b1a80 dd18 fstp qword ptr [eax] ds:0575971c=0000000000000000 031b1a82 8b0d9c7e4c03 mov ecx,[034c7e9c] ds:034c7e9c=00000000 031b1a88 8b550c mov edx,[ebp+0xc] ss:0664ce26=6dfb38bf 031b1a8b dd02 fld qword ptr [edx] ds:0575f8b0=4020000000000000 FAULT ->031b1a8d dc4104 fadd qword ptr [ecx+0x4] ds:00eeea06=0000000000000000 031b1a90 8b450c mov eax,[ebp+0xc] ss:0664ce26=6dfb38bf 031b1a93 dd18 fstp qword ptr [eax] ds:0575971c=0000000000000000 031b1a95 8b4d08 mov ecx,[ebp+0x8] ss:0664ce26=6dfb38bf 031b1a98 8b550c mov edx,[ebp+0xc] ss:0664ce26=6dfb38bf 031b1a9b 8b02 mov eax,[edx] ds:0575f8b0=00000000 031b1a9d 8901 mov [ecx],eax ds:00000000=???????? 031b1a9f 8b5204 mov edx,[edx+0x4] ds:0664e2b6=c8301342 031b1aa2 895104 mov [ecx+0x4],edx ds:00eeea06=00000000 031b1aa5 8b4510 mov eax,[ebp+0x10] ss:0664ce26=6dfb38bf 031b1aa8 c70001000000 mov dword ptr [eax],0x1 ds:0575971c=00000000 031b1aae 8b4d24 mov ecx,[ebp+0x24] ss:0664ce26=6dfb38bf *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0575e420 031b5faf 0575ebbc 0575f8b0 0575f31c 0575f8c0 *----> Raw Stack Dump <----* 0575e404 e0 fb 82 00 38 e8 75 05 - 14 e6 75 05 20 f6 75 05 ....8.u...u. .u. 0575e414 b8 f3 75 05 78 e8 75 05 - 54 e6 75 05 cc fd 75 05 ..u.x.u.T.u...u. 0575e424 af 5f 1b 03 bc eb 75 05 - b0 f8 75 05 1c f3 75 05 ._....u...u...u. 0575e434 c0 f8 75 05 bc e9 75 05 - 00 00 00 00 00 00 00 00 ..u...u......... 0575e444 28 f7 75 05 00 00 00 00 - 00 00 18 c0 00 00 00 00 (.u............. 0575e454 00 00 32 40 30 fb e4 02 - 30 ef 85 00 30 ef 85 00 ..2@0...0...0... 0575e464 00 00 00 00 00 00 00 00 - 63 00 00 00 00 00 00 00 ........c....... 0575e474 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e484 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e494 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4c4 00 00 00 00 00 00 00 00 - 1f 00 00 00 00 00 00 00 ................ 0575e4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e534 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x5b eax=1000edb9 ebx=0085ecf0 ecx=00000000 edx=00000000 esi=0685fda0 edi=0685fdec eip=77f6793f esp=0685fd68 ebp=0685fdc4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0774e76f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0685fdc4 03165b9f 0000020c 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile Application exception occurred: App: (pid=101) When: 10/29/2004 @ 9:25:46.150 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 71 SPOOLSS.exe 68 RPCSS.exe 85 NDDEAGNT.exe 89 EXPLORER.exe 86 PSTORES.exe 97 hotkey.exe 99 S3TRAY.exe 101 mainapp.exe 106 DDHELP.exe 91 DRWTSN32.exe 115 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02e50000 - 02e50000) (02f80000 - 02f80000) (030f0000 - 030f0000) (50200000 - 50200000) (5f000000 - 5f000000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (50230000 - 50230000) (04410000 - 04410000) (04540000 - 04540000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04680000 - 04680000) (77c00000 - 77c18000) drv\winspool.dbg (04c40000 - 04c40000) (780a0000 - 780b2000) (04da0000 - 04da0000) (050c0000 - 050c0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (05240000 - 05240000) State Dump for Thread Id 0x64 eax=028d0c60 ebx=00000000 ecx=028d0c60 edx=00000000 esi=00407eb8 edi=00407eec eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f68be=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f68be=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00407eec 00000000 00000000 00000000 user32!GetWindowRect 00407eec 00000113 00002424 00000000 0006af67 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ec 7e 40 00 - 00 00 00 00 00 00 00 00 .&.w.~@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ec 7e 40 00 b8 7e 40 00 .........~@..~@. 0012fec0 b8 7e 40 00 ec 7e 40 00 - 01 13 40 5f ec 7e 40 00 .~@..~@...@_.~@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 b8 7e 40 00 5f 80 40 5f - b8 7e 40 00 b8 7e 40 00 .~@._.@_.~@..~@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 b8 7e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 .~@...@_...../.. 0012ff10 00 00 00 00 1f 4b 40 00 - 00 00 40 00 00 00 00 00 .....K@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - a6 4a 40 00 00 00 40 00 ./.......J@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 8d 02 00 00 00 00 - 00 00 00 00 a0 01 8d 02 P............... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 20 10 65 80 F....t..<... .e. 0012ffb0 e0 ff 12 00 fe 4a 40 00 - 10 5c 40 00 00 00 00 00 .....J@..\@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x68 eax=008510a6 ebx=00000001 ecx=0085d230 edx=00000000 esi=000001d8 edi=00000000 eip=77f6829b esp=02e4fc30 ebp=02e4fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:03d3e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 02e4fc54 1000a367 000001d8 ffffffff 00000001 0085d130 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 02e4fc30 bc cc f1 77 d8 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 02e4fc40 00 00 00 00 60 dc 85 00 - 60 dc 85 00 94 fc e4 02 ....`...`....... 02e4fc50 80 ed 00 10 78 fc e4 02 - 67 a3 00 10 d8 01 00 00 ....x...g....... 02e4fc60 ff ff ff ff 01 00 00 00 - 30 d1 85 00 00 00 00 00 ........0....... 02e4fc70 60 dc 85 00 27 bd 00 10 - 94 fc e4 02 94 65 00 10 `...'........e.. 02e4fc80 d0 fc e4 02 ff ff ff ff - 10 d0 85 00 f8 01 00 00 ................ 02e4fc90 30 d1 85 00 d8 fc e4 02 - 37 e3 24 03 a7 10 e4 02 0.......7.$..... 02e4fca0 d0 fc e4 02 cc fc e4 02 - ff ff ff ff c0 fc e4 02 ................ 02e4fcb0 00 00 00 00 60 dc 85 00 - 60 dc 85 00 a7 10 e4 02 ....`...`....... 02e4fcc0 00 00 00 10 68 5f 72 03 - 30 d2 85 00 30 d2 85 00 ....h_r.0...0... 02e4fcd0 30 d2 85 00 3c 00 e4 02 - 30 fd e4 02 dc e3 24 03 0...<...0.....$. 02e4fce0 04 fd e4 02 d0 91 25 03 - 00 fa 00 00 08 76 3b 03 ......%......v;. 02e4fcf0 9e 6c 72 03 10 5f 72 03 - 00 00 00 00 00 00 00 10 .lr.._r......... 02e4fd00 70 d2 85 00 56 53 31 53 - 79 6e 63 54 68 72 65 61 p...VS1SyncThrea 02e4fd10 64 00 85 00 70 d2 85 00 - 70 d2 85 00 41 00 00 00 d...p...p...A... 02e4fd20 01 00 85 00 04 fd e4 02 - eb 2c 1f 03 a5 10 51 03 .........,....Q. 02e4fd30 80 fd e4 02 16 2d 1f 03 - a0 94 51 03 a0 94 51 03 .....-....Q...Q. 02e4fd40 00 00 00 00 00 00 ff 02 - 9c 10 e4 02 9d 10 f8 02 ................ 02e4fd50 9e 10 f1 77 3c 00 00 00 - 9f 10 e4 02 80 11 e5 02 ...w<........... 02e4fd60 06 00 f8 02 f4 40 f9 02 - 78 fd e4 02 3f 16 f8 02 .....@..x...?... State Dump for Thread Id 0x6d eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000160 edi=00000000 eip=77f6829b esp=04fbfd50 ebp=04fbfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05eae757=66500000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 04fbfd74 1000a367 00000160 ffffffff 00000001 0085dd70 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=050bfd50 ebp=050bfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05fae757=ffffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 050bfd74 1000a367 00000140 ffffffff 00000001 0085c0e0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 050bfd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 050bfd60 5c 5d 5e 5f 40 da 85 00 - 40 da 85 00 f8 fd 0b 05 \]^_@...@....... 050bfd70 11 8d 01 10 98 fd 0b 05 - 67 a3 00 10 40 01 00 00 ........g...@... 050bfd80 ff ff ff ff 01 00 00 00 - e0 c0 85 00 04 00 00 00 ................ 050bfd90 00 00 00 00 6c fd 0b 05 - b4 fd 0b 05 94 65 00 10 ....l........e.. 050bfda0 00 fe 0b 05 ff ff ff ff - 64 fd 0b 05 6c fd 0b 05 ........d...l... 050bfdb0 e0 c0 85 00 d4 fd 0b 05 - b0 66 00 10 95 10 ff ff .........f...... 050bfdc0 00 fe 0b 05 e8 fd 0b 05 - ff ff ff ff fc fd 0b 05 ................ 050bfdd0 ff ff ff ff 04 fe 0b 05 - cc 19 da 04 00 fe 0b 05 ................ 050bfde0 95 10 da 04 ff ff 00 00 - 00 00 00 00 fc fd 0b 05 ................ 050bfdf0 40 0e dc 04 26 00 00 00 - 01 f5 00 10 f0 aa 85 00 @...&........... 050bfe00 84 ff 0b 05 14 fe 0b 05 - 02 14 da 04 60 0e dc 04 ............`... 050bfe10 18 fe 0b 05 20 fe 0b 05 - e4 13 da 04 60 0e dc 04 .... .......`... 050bfe20 84 ff 0b 05 45 bc 00 10 - 60 0e dc 04 5c 5d 5e 5f ....E...`...\]^_ 050bfe30 40 da 85 00 40 da 85 00 - 0f 00 00 00 21 ce f6 77 @...@.......!..w 050bfe40 0c ff 0b 05 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 050bfe50 78 fe 0b 05 7c 13 23 50 - 07 00 00 00 d8 ee 13 00 x...|.#P........ 050bfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 0b 05 ..#P............ 050bfe70 00 f0 fd 7f ff ff ff ff - 98 fe 0b 05 00 00 00 00 ................ 050bfe80 00 00 0c 05 02 00 00 00 - 00 00 00 00 30 e1 13 00 ............0... State Dump for Thread Id 0x38 eax=1000edb9 ebx=00000001 ecx=05240000 edx=00000000 esi=000000b4 edi=00000000 eip=77f6829b esp=0546fd50 ebp=0546fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0635e757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0546fd74 1000a367 000000b4 ffffffff 00000001 0085bc50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x48 eax=00000000 ebx=00000001 ecx=7ffd9000 edx=00000000 esi=00000138 edi=00000000 eip=77f6829b esp=0556fca4 ebp=0556fcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0645e6ab=a9b6de17 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0556fcc8 1000a367 00000138 ffffffff 00000001 0085c400 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x27 eax=0000c00c ebx=00000001 ecx=0000c00c edx=00000000 esi=00000118 edi=00000000 eip=77f6829b esp=0566fe0c ebp=0566fe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0655e813=c09ad19e 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0566fe30 1000a367 00000118 ffffffff 00000001 0085c570 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5d eax=0577971c ebx=0085ef60 ecx=00000000 edx=0577f8b0 esi=0082fdf0 edi=02e4fb30 eip=031b1a8d esp=0577e404 ebp=0577e420 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 031b1a6d 8b4d0c mov ecx,[ebp+0xc] ss:0666ce26=65fb28ff 031b1a70 dd19 fstp qword ptr [ecx] ds:00000000=???????????????? 031b1a72 eb0e jmp 031b1a82 031b1a74 8b1540814c03 mov edx,[034c8140] ds:034c8140=0577971c 031b1a7a d9420c fld dword ptr [edx+0xc] ds:0666e2b6=48301302 031b1a7d 8b450c mov eax,[ebp+0xc] ss:0666ce26=65fb28ff 031b1a80 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a82 8b0d9c7e4c03 mov ecx,[034c7e9c] ds:034c7e9c=00000000 031b1a88 8b550c mov edx,[ebp+0xc] ss:0666ce26=65fb28ff 031b1a8b dd02 fld qword ptr [edx] ds:0577f8b0=4020000000000000 FAULT ->031b1a8d dc4104 fadd qword ptr [ecx+0x4] ds:00eeea06=0000000000000000 031b1a90 8b450c mov eax,[ebp+0xc] ss:0666ce26=65fb28ff 031b1a93 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a95 8b4d08 mov ecx,[ebp+0x8] ss:0666ce26=65fb28ff 031b1a98 8b550c mov edx,[ebp+0xc] ss:0666ce26=65fb28ff 031b1a9b 8b02 mov eax,[edx] ds:0577f8b0=00000000 031b1a9d 8901 mov [ecx],eax ds:00000000=???????? 031b1a9f 8b5204 mov edx,[edx+0x4] ds:0666e2b6=48301302 031b1aa2 895104 mov [ecx+0x4],edx ds:00eeea06=00000000 031b1aa5 8b4510 mov eax,[ebp+0x10] ss:0666ce26=65fb28ff 031b1aa8 c70001000000 mov dword ptr [eax],0x1 ds:0577971c=00000000 031b1aae 8b4d24 mov ecx,[ebp+0x24] ss:0666ce26=65fb28ff *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0577e420 031b5faf 0577ebbc 0577f8b0 0577f31c 0577f8c0 *----> Raw Stack Dump <----* 0577e404 f0 fd 82 00 38 e8 77 05 - 14 e6 77 05 20 f6 77 05 ....8.w...w. .w. 0577e414 b8 f3 77 05 78 e8 77 05 - 54 e6 77 05 cc fd 77 05 ..w.x.w.T.w...w. 0577e424 af 5f 1b 03 bc eb 77 05 - b0 f8 77 05 1c f3 77 05 ._....w...w...w. 0577e434 c0 f8 77 05 bc e9 77 05 - 00 00 00 00 00 00 00 00 ..w...w......... 0577e444 28 f7 77 05 00 00 00 00 - 00 00 18 c0 00 00 00 00 (.w............. 0577e454 00 00 32 40 30 fb e4 02 - 60 ef 85 00 60 ef 85 00 ..2@0...`...`... 0577e464 00 00 00 00 00 00 00 00 - 63 00 00 00 00 00 00 00 ........c....... 0577e474 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e484 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e494 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4c4 00 00 00 00 00 00 00 00 - 1f 00 00 00 00 00 00 00 ................ 0577e4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e534 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x5f eax=1000edb9 ebx=0085ed10 ecx=00000000 edx=00000000 esi=0687fda0 edi=0687fdec eip=77f6793f esp=0687fd68 ebp=0687fdc4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0776e76f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0687fdc4 03165b9f 0000020c 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile *----> Raw Stack Dump <----* 0687fd68 61 2c f0 77 0c 02 00 00 - 00 00 00 00 00 00 00 00 a,.w............ 0687fd78 00 00 00 00 a0 fd 87 06 - 1c 20 00 80 00 00 00 00 ......... ...... 0687fd88 00 00 00 00 18 fe 87 06 - 04 00 00 00 ec fd 87 06 ................ 0687fd98 18 fe 87 06 10 ed 85 00 - 00 6c fd 7f 00 00 00 c0 .........l...... 0687fda8 03 00 00 00 94 fd 87 06 - 03 00 00 00 a8 ff 87 06 ................ 0687fdb8 44 b7 f3 77 68 ca f3 77 - ff ff ff ff ec fd 87 06 D..wh..w........ 0687fdc8 9f 5b 16 03 0c 02 00 00 - 1c 20 00 80 00 00 00 00 .[....... ...... 0687fdd8 00 00 00 00 18 fe 87 06 - 04 00 00 00 80 56 3f 03 .............V?. 0687fde8 00 00 00 00 20 fe 87 06 - 14 dd 24 03 18 fe 87 06 .... .....$..... 0687fdf8 00 00 00 00 10 ed 85 00 - 00 00 87 06 00 00 00 00 ................ 0687fe08 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0687fe18 10 ed 85 00 00 00 00 00 - 84 ff 87 06 45 bc 00 10 ............E... 0687fe28 76 5f 72 03 00 00 00 00 - 10 ed 85 00 10 ed 85 00 v_r............. 0687fe38 0f 00 00 00 00 00 00 00 - 0c ff 87 06 44 b7 f3 77 ............D..w 0687fe48 c8 cd f3 77 ff ff ff ff - 78 fe 87 06 7c 13 23 50 ...w....x...|.#P 0687fe58 07 00 00 00 90 2b 14 00 - 00 00 23 50 00 00 00 00 .....+....#P.... 0687fe68 00 00 00 00 0c ff 87 06 - fb 0a 25 05 ff ff ff ff ..........%..... 0687fe78 98 fe 87 06 00 00 00 00 - 00 00 24 05 02 00 00 00 ..........$..... 0687fe88 00 00 00 00 b0 fa 13 00 - 00 f0 fd 7f 7d 9c 24 05 ............}.$. 0687fe98 a8 fa 13 00 1f 3e f6 77 - 00 00 24 05 01 00 00 00 .....>.w..$..... Application exception occurred: App: (pid=106) When: 10/29/2004 @ 9:43:41.470 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 71 SPOOLSS.exe 68 RPCSS.exe 84 NDDEAGNT.exe 89 EXPLORER.exe 66 PSTORES.exe 102 hotkey.exe 104 S3TRAY.exe 106 mainapp.exe 86 DDHELP.exe 60 DRWTSN32.exe 111 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02e50000 - 02e50000) (02f80000 - 02f80000) (030f0000 - 030f0000) (50200000 - 50200000) (5f000000 - 5f000000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (50230000 - 50230000) (04410000 - 04410000) (04540000 - 04540000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04680000 - 04680000) (77c00000 - 77c18000) drv\winspool.dbg (04c40000 - 04c40000) (780a0000 - 780b2000) (04da0000 - 04da0000) (050c0000 - 050c0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (05240000 - 05240000) State Dump for Thread Id 0x69 eax=028d0c60 ebx=00000000 ecx=028d0c60 edx=00000000 esi=00407eb8 edi=00407eec eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f68be=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f68be=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00407eec 00000000 00000000 00000000 user32!GetWindowRect 00407eec 00000113 00002424 00000000 000627dc 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ec 7e 40 00 - 00 00 00 00 00 00 00 00 .&.w.~@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ec 7e 40 00 b8 7e 40 00 .........~@..~@. 0012fec0 b8 7e 40 00 ec 7e 40 00 - 01 13 40 5f ec 7e 40 00 .~@..~@...@_.~@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 b8 7e 40 00 5f 80 40 5f - b8 7e 40 00 b8 7e 40 00 .~@._.@_.~@..~@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 b8 7e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 .~@...@_...../.. 0012ff10 00 00 00 00 1f 4b 40 00 - 00 00 40 00 00 00 00 00 .....K@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - a6 4a 40 00 00 00 40 00 ./.......J@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 8d 02 00 00 00 00 - 67 20 3c 02 a0 01 8d 02 P.......g <..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 20 11 69 80 ............ .i. 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 c0 4d 65 80 F....t..<....Me. 0012ffb0 e0 ff 12 00 fe 4a 40 00 - 10 5c 40 00 00 00 00 00 .....J@..\@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6d eax=00000000 ebx=00000001 ecx=007d3360 edx=00000000 esi=000001d8 edi=00000000 eip=77f6829b esp=02e4fc30 ebp=02e4fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:03d3e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 02e4fc54 1000a367 000001d8 ffffffff 00000001 0085d150 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 02e4fc30 bc cc f1 77 d8 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 02e4fc40 00 00 00 00 60 dc 85 00 - 60 dc 85 00 94 fc e4 02 ....`...`....... 02e4fc50 80 ed 00 10 78 fc e4 02 - 67 a3 00 10 d8 01 00 00 ....x...g....... 02e4fc60 ff ff ff ff 01 00 00 00 - 50 d1 85 00 00 00 00 00 ........P....... 02e4fc70 60 dc 85 00 27 bd 00 10 - 94 fc e4 02 94 65 00 10 `...'........e.. 02e4fc80 d0 fc e4 02 ff ff ff ff - 10 d0 85 00 bc 01 00 00 ................ 02e4fc90 50 d1 85 00 d8 fc e4 02 - 37 e3 24 03 a7 10 e4 02 P.......7.$..... 02e4fca0 d0 fc e4 02 cc fc e4 02 - ff ff ff ff c0 fc e4 02 ................ 02e4fcb0 00 00 00 00 60 dc 85 00 - 60 dc 85 00 a7 10 e4 02 ....`...`....... 02e4fcc0 00 00 00 10 68 5f 72 03 - a0 d1 85 00 a0 d1 85 00 ....h_r......... 02e4fcd0 a0 d1 85 00 3c 00 e4 02 - 30 fd e4 02 dc e3 24 03 ....<...0.....$. 02e4fce0 04 fd e4 02 d0 91 25 03 - 00 fa 00 00 08 76 3b 03 ......%......v;. 02e4fcf0 9e 6c 72 03 10 5f 72 03 - 00 00 00 00 00 00 00 10 .lr.._r......... 02e4fd00 e0 d1 85 00 56 53 31 53 - 79 6e 63 54 68 72 65 61 ....VS1SyncThrea 02e4fd10 64 00 85 00 e0 d1 85 00 - e0 d1 85 00 41 00 00 00 d...........A... 02e4fd20 01 00 85 00 04 fd e4 02 - eb 2c 1f 03 a5 10 51 03 .........,....Q. 02e4fd30 80 fd e4 02 16 2d 1f 03 - a0 94 51 03 a0 94 51 03 .....-....Q...Q. 02e4fd40 00 00 00 00 00 00 ff 02 - 9c 10 e4 02 9d 10 f8 02 ................ 02e4fd50 9e 10 f1 77 3c 00 00 00 - 9f 10 e4 02 80 11 e5 02 ...w<........... 02e4fd60 06 00 f8 02 f4 40 f9 02 - 78 fd e4 02 3f 16 f8 02 .....@..x...?... State Dump for Thread Id 0x52 eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000160 edi=00000000 eip=77f6829b esp=04fbfd50 ebp=04fbfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05eae757=5ec96a00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 04fbfd74 1000a367 00000160 ffffffff 00000001 0085dd70 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5b eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=050bfd50 ebp=050bfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05fae757=ffffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 050bfd74 1000a367 00000140 ffffffff 00000001 0085c0e0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 050bfd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 050bfd60 5c 5d 5e 5f 40 da 85 00 - 40 da 85 00 f8 fd 0b 05 \]^_@...@....... 050bfd70 11 8d 01 10 98 fd 0b 05 - 67 a3 00 10 40 01 00 00 ........g...@... 050bfd80 ff ff ff ff 01 00 00 00 - e0 c0 85 00 04 00 00 00 ................ 050bfd90 00 00 00 00 6c fd 0b 05 - b4 fd 0b 05 94 65 00 10 ....l........e.. 050bfda0 00 fe 0b 05 ff ff ff ff - 64 fd 0b 05 6c fd 0b 05 ........d...l... 050bfdb0 e0 c0 85 00 d4 fd 0b 05 - b0 66 00 10 95 10 ff ff .........f...... 050bfdc0 00 fe 0b 05 e8 fd 0b 05 - ff ff ff ff fc fd 0b 05 ................ 050bfdd0 ff ff ff ff 04 fe 0b 05 - cc 19 da 04 00 fe 0b 05 ................ 050bfde0 95 10 da 04 ff ff 00 00 - 00 00 00 00 fc fd 0b 05 ................ 050bfdf0 40 0e dc 04 26 00 00 00 - 01 f5 00 10 f0 aa 85 00 @...&........... 050bfe00 84 ff 0b 05 14 fe 0b 05 - 02 14 da 04 60 0e dc 04 ............`... 050bfe10 18 fe 0b 05 20 fe 0b 05 - e4 13 da 04 60 0e dc 04 .... .......`... 050bfe20 84 ff 0b 05 45 bc 00 10 - 60 0e dc 04 5c 5d 5e 5f ....E...`...\]^_ 050bfe30 40 da 85 00 40 da 85 00 - 0f 00 00 00 21 ce f6 77 @...@.......!..w 050bfe40 0c ff 0b 05 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 050bfe50 78 fe 0b 05 7c 13 23 50 - 07 00 00 00 d8 ee 13 00 x...|.#P........ 050bfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 0b 05 ..#P............ 050bfe70 00 f0 fd 7f ff ff ff ff - 98 fe 0b 05 00 00 00 00 ................ 050bfe80 00 00 0c 05 02 00 00 00 - 00 00 00 00 30 e1 13 00 ............0... State Dump for Thread Id 0x5c eax=1000edb9 ebx=00000001 ecx=05240000 edx=00000000 esi=000000b4 edi=00000000 eip=77f6829b esp=0546fd50 ebp=0546fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0635e757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0546fd74 1000a367 000000b4 ffffffff 00000001 0085bc50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x38 eax=0000001f ebx=00000001 ecx=02e630e0 edx=00000000 esi=00000138 edi=00000000 eip=77f6829b esp=0556fca4 ebp=0556fcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0645e6ab=0c95bbc1 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0556fcc8 1000a367 00000138 ffffffff 00000001 0085c400 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x3f eax=0000c00c ebx=00000001 ecx=0000c00c edx=00000000 esi=00000118 edi=00000000 eip=77f6829b esp=0566fe0c ebp=0566fe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0655e813=0125b483 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0566fe30 1000a367 00000118 ffffffff 00000001 0085c570 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x27 eax=0578971c ebx=0085ef60 ecx=00000000 edx=0578f8b0 esi=0082fbe0 edi=02e4fb30 eip=031b1a8d esp=0578e404 ebp=0578e420 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 031b1a6d 8b4d0c mov ecx,[ebp+0xc] ss:0667ce26=65fb28df 031b1a70 dd19 fstp qword ptr [ecx] ds:00000000=???????????????? 031b1a72 eb0e jmp 031b1a82 031b1a74 8b1540814c03 mov edx,[034c8140] ds:034c8140=0578971c 031b1a7a d9420c fld dword ptr [edx+0xc] ds:0667e2b6=e8301302 031b1a7d 8b450c mov eax,[ebp+0xc] ss:0667ce26=65fb28df 031b1a80 dd18 fstp qword ptr [eax] ds:0578971c=0000000000000000 031b1a82 8b0d9c7e4c03 mov ecx,[034c7e9c] ds:034c7e9c=00000000 031b1a88 8b550c mov edx,[ebp+0xc] ss:0667ce26=65fb28df 031b1a8b dd02 fld qword ptr [edx] ds:0578f8b0=4020000000000000 FAULT ->031b1a8d dc4104 fadd qword ptr [ecx+0x4] ds:00eeea06=0000000000000000 031b1a90 8b450c mov eax,[ebp+0xc] ss:0667ce26=65fb28df 031b1a93 dd18 fstp qword ptr [eax] ds:0578971c=0000000000000000 031b1a95 8b4d08 mov ecx,[ebp+0x8] ss:0667ce26=65fb28df 031b1a98 8b550c mov edx,[ebp+0xc] ss:0667ce26=65fb28df 031b1a9b 8b02 mov eax,[edx] ds:0578f8b0=00000000 031b1a9d 8901 mov [ecx],eax ds:00000000=???????? 031b1a9f 8b5204 mov edx,[edx+0x4] ds:0667e2b6=e8301302 031b1aa2 895104 mov [ecx+0x4],edx ds:00eeea06=00000000 031b1aa5 8b4510 mov eax,[ebp+0x10] ss:0667ce26=65fb28df 031b1aa8 c70001000000 mov dword ptr [eax],0x1 ds:0578971c=00000000 031b1aae 8b4d24 mov ecx,[ebp+0x24] ss:0667ce26=65fb28df *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0578e420 031b5faf 0578ebbc 0578f8b0 0578f31c 0578f8c0 *----> Raw Stack Dump <----* 0578e404 e0 fb 82 00 38 e8 78 05 - 14 e6 78 05 20 f6 78 05 ....8.x...x. .x. 0578e414 b8 f3 78 05 78 e8 78 05 - 54 e6 78 05 cc fd 78 05 ..x.x.x.T.x...x. 0578e424 af 5f 1b 03 bc eb 78 05 - b0 f8 78 05 1c f3 78 05 ._....x...x...x. 0578e434 c0 f8 78 05 bc e9 78 05 - 00 00 00 00 00 00 00 00 ..x...x......... 0578e444 28 f7 78 05 00 00 00 00 - 00 00 18 c0 00 00 00 00 (.x............. 0578e454 00 00 32 40 30 fb e4 02 - 60 ef 85 00 60 ef 85 00 ..2@0...`...`... 0578e464 00 00 00 00 00 00 00 00 - 63 00 00 00 00 00 00 00 ........c....... 0578e474 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0578e484 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0578e494 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0578e4a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0578e4b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0578e4c4 00 00 00 00 00 00 00 00 - 1f 00 00 00 00 00 00 00 ................ 0578e4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0578e4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0578e4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0578e504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0578e514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0578e524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0578e534 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x63 eax=1000edb9 ebx=0085ed10 ecx=00000000 edx=00000000 esi=0688fda0 edi=0688fdec eip=77f6793f esp=0688fd68 ebp=0688fdc4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0777e76f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0688fdc4 03165b9f 00000208 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile Application exception occurred: App: (pid=101) When: 10/29/2004 @ 9:51:29.962 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 71 SPOOLSS.exe 68 RPCSS.exe 85 NDDEAGNT.exe 90 EXPLORER.exe 87 PSTORES.exe 96 hotkey.exe 99 S3TRAY.exe 101 mainapp.exe 106 DDHELP.exe 56 DRWTSN32.exe 112 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02e50000 - 02e50000) (02f80000 - 02f80000) (030f0000 - 030f0000) (50200000 - 50200000) (5f000000 - 5f000000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (50230000 - 50230000) (04410000 - 04410000) (04540000 - 04540000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04680000 - 04680000) (77c00000 - 77c18000) drv\winspool.dbg (04c40000 - 04c40000) (780a0000 - 780b2000) (04da0000 - 04da0000) (050c0000 - 050c0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (05240000 - 05240000) State Dump for Thread Id 0x64 eax=028d0c60 ebx=00000000 ecx=028d0c60 edx=00000000 esi=00407eb8 edi=00407eec eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f68be=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f68be=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00407eec 00000000 00000000 00000000 user32!GetWindowRect 00407eec 00000113 00002424 00000000 00062dba 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ec 7e 40 00 - 00 00 00 00 00 00 00 00 .&.w.~@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ec 7e 40 00 b8 7e 40 00 .........~@..~@. 0012fec0 b8 7e 40 00 ec 7e 40 00 - 01 13 40 5f ec 7e 40 00 .~@..~@...@_.~@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 b8 7e 40 00 5f 80 40 5f - b8 7e 40 00 b8 7e 40 00 .~@._.@_.~@..~@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 b8 7e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 .~@...@_...../.. 0012ff10 00 00 00 00 1f 4b 40 00 - 00 00 40 00 00 00 00 00 .....K@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - a6 4a 40 00 00 00 40 00 ./.......J@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 8d 02 00 00 00 00 - d8 4a 3e e1 a0 01 8d 02 P........J>..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 20 20 65 80 F....t..<... e. 0012ffb0 e0 ff 12 00 fe 4a 40 00 - 10 5c 40 00 00 00 00 00 .....J@..\@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x68 eax=008510a6 ebx=00000001 ecx=0085d1a0 edx=00000000 esi=000001dc edi=00000000 eip=77f6829b esp=02e4fc30 ebp=02e4fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:03d3e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 02e4fc54 1000a367 000001dc ffffffff 00000001 0085d150 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 02e4fc30 bc cc f1 77 dc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 02e4fc40 00 00 00 00 60 dc 85 00 - 60 dc 85 00 94 fc e4 02 ....`...`....... 02e4fc50 80 ed 00 10 78 fc e4 02 - 67 a3 00 10 dc 01 00 00 ....x...g....... 02e4fc60 ff ff ff ff 01 00 00 00 - 50 d1 85 00 00 00 00 00 ........P....... 02e4fc70 60 dc 85 00 27 bd 00 10 - 94 fc e4 02 94 65 00 10 `...'........e.. 02e4fc80 d0 fc e4 02 ff ff ff ff - 10 d0 85 00 e4 01 00 00 ................ 02e4fc90 50 d1 85 00 d8 fc e4 02 - 37 e3 24 03 a7 10 e4 02 P.......7.$..... 02e4fca0 d0 fc e4 02 cc fc e4 02 - ff ff ff ff c0 fc e4 02 ................ 02e4fcb0 00 00 00 00 60 dc 85 00 - 60 dc 85 00 a7 10 e4 02 ....`...`....... 02e4fcc0 00 00 00 10 68 5f 72 03 - a0 d1 85 00 a0 d1 85 00 ....h_r......... 02e4fcd0 a0 d1 85 00 3c 00 e4 02 - 30 fd e4 02 dc e3 24 03 ....<...0.....$. 02e4fce0 04 fd e4 02 d0 91 25 03 - 00 fa 00 00 08 76 3b 03 ......%......v;. 02e4fcf0 9e 6c 72 03 10 5f 72 03 - 00 00 00 00 00 00 00 10 .lr.._r......... 02e4fd00 e0 d1 85 00 56 53 31 53 - 79 6e 63 54 68 72 65 61 ....VS1SyncThrea 02e4fd10 64 00 85 00 e0 d1 85 00 - e0 d1 85 00 41 00 00 00 d...........A... 02e4fd20 01 00 85 00 04 fd e4 02 - eb 2c 1f 03 a5 10 51 03 .........,....Q. 02e4fd30 80 fd e4 02 16 2d 1f 03 - a0 94 51 03 a0 94 51 03 .....-....Q...Q. 02e4fd40 00 00 00 00 00 00 ff 02 - 9c 10 e4 02 9d 10 f8 02 ................ 02e4fd50 9e 10 f1 77 3c 00 00 00 - 9f 10 e4 02 80 11 e5 02 ...w<........... 02e4fd60 06 00 f8 02 f4 40 f9 02 - 78 fd e4 02 3f 16 f8 02 .....@..x...?... State Dump for Thread Id 0x6d eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000160 edi=00000000 eip=77f6829b esp=04fbfd50 ebp=04fbfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05eae757=66100000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 04fbfd74 1000a367 00000160 ffffffff 00000001 0085dd70 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=050bfd50 ebp=050bfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05fae757=ffffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 050bfd74 1000a367 00000140 ffffffff 00000001 0085c0e0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 050bfd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 050bfd60 5c 5d 5e 5f 40 da 85 00 - 40 da 85 00 f8 fd 0b 05 \]^_@...@....... 050bfd70 11 8d 01 10 98 fd 0b 05 - 67 a3 00 10 40 01 00 00 ........g...@... 050bfd80 ff ff ff ff 01 00 00 00 - e0 c0 85 00 04 00 00 00 ................ 050bfd90 00 00 00 00 6c fd 0b 05 - b4 fd 0b 05 94 65 00 10 ....l........e.. 050bfda0 00 fe 0b 05 ff ff ff ff - 64 fd 0b 05 6c fd 0b 05 ........d...l... 050bfdb0 e0 c0 85 00 d4 fd 0b 05 - b0 66 00 10 95 10 ff ff .........f...... 050bfdc0 00 fe 0b 05 e8 fd 0b 05 - ff ff ff ff fc fd 0b 05 ................ 050bfdd0 ff ff ff ff 04 fe 0b 05 - cc 19 da 04 00 fe 0b 05 ................ 050bfde0 95 10 da 04 ff ff 00 00 - 00 00 00 00 fc fd 0b 05 ................ 050bfdf0 40 0e dc 04 26 00 00 00 - 01 f5 00 10 f0 aa 85 00 @...&........... 050bfe00 84 ff 0b 05 14 fe 0b 05 - 02 14 da 04 60 0e dc 04 ............`... 050bfe10 18 fe 0b 05 20 fe 0b 05 - e4 13 da 04 60 0e dc 04 .... .......`... 050bfe20 84 ff 0b 05 45 bc 00 10 - 60 0e dc 04 5c 5d 5e 5f ....E...`...\]^_ 050bfe30 40 da 85 00 40 da 85 00 - 0f 00 00 00 21 ce f6 77 @...@.......!..w 050bfe40 0c ff 0b 05 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 050bfe50 78 fe 0b 05 7c 13 23 50 - 07 00 00 00 d8 ee 13 00 x...|.#P........ 050bfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 0b 05 ..#P............ 050bfe70 00 f0 fd 7f ff ff ff ff - 98 fe 0b 05 00 00 00 00 ................ 050bfe80 00 00 0c 05 02 00 00 00 - 00 00 00 00 30 e1 13 00 ............0... State Dump for Thread Id 0x2e eax=1000edb9 ebx=00000001 ecx=05240000 edx=00000000 esi=000000b4 edi=00000000 eip=77f6829b esp=0546fd50 ebp=0546fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0635e757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0546fd74 1000a367 000000b4 ffffffff 00000001 0085bc50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x48 eax=0000001b ebx=00000001 ecx=02e760e0 edx=00000000 esi=00000138 edi=00000000 eip=77f6829b esp=0556fca4 ebp=0556fcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0645e6ab=a9bedc17 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0556fcc8 1000a367 00000138 ffffffff 00000001 0085c400 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x27 eax=0000c00c ebx=00000001 ecx=0000c00c edx=00000000 esi=00000118 edi=00000000 eip=77f6829b esp=0566fe0c ebp=0566fe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0655e813=d09eddbf 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0566fe30 1000a367 00000118 ffffffff 00000001 0085c570 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5c eax=0577971c ebx=0085ef60 ecx=00000000 edx=0577f8b0 esi=0082fdf0 edi=02e4fb30 eip=031b1a8d esp=0577e404 ebp=0577e420 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 031b1a6d 8b4d0c mov ecx,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a70 dd19 fstp qword ptr [ecx] ds:00000000=???????????????? 031b1a72 eb0e jmp 031b1a82 031b1a74 8b1540814c03 mov edx,[034c8140] ds:034c8140=0577971c 031b1a7a d9420c fld dword ptr [edx+0xc] ds:0666e2b6=c8305302 031b1a7d 8b450c mov eax,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a80 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a82 8b0d9c7e4c03 mov ecx,[034c7e9c] ds:034c7e9c=00000000 031b1a88 8b550c mov edx,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a8b dd02 fld qword ptr [edx] ds:0577f8b0=4020000000000000 FAULT ->031b1a8d dc4104 fadd qword ptr [ecx+0x4] ds:00eeea06=0000000000000000 031b1a90 8b450c mov eax,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a93 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a95 8b4d08 mov ecx,[ebp+0x8] ss:0666ce26=65fb38bf 031b1a98 8b550c mov edx,[ebp+0xc] ss:0666ce26=65fb38bf 031b1a9b 8b02 mov eax,[edx] ds:0577f8b0=00000000 031b1a9d 8901 mov [ecx],eax ds:00000000=???????? 031b1a9f 8b5204 mov edx,[edx+0x4] ds:0666e2b6=c8305302 031b1aa2 895104 mov [ecx+0x4],edx ds:00eeea06=00000000 031b1aa5 8b4510 mov eax,[ebp+0x10] ss:0666ce26=65fb38bf 031b1aa8 c70001000000 mov dword ptr [eax],0x1 ds:0577971c=00000000 031b1aae 8b4d24 mov ecx,[ebp+0x24] ss:0666ce26=65fb38bf *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0577e420 031b5faf 0577ebbc 0577f8b0 0577f31c 0577f8c0 *----> Raw Stack Dump <----* 0577e404 f0 fd 82 00 38 e8 77 05 - 14 e6 77 05 20 f6 77 05 ....8.w...w. .w. 0577e414 b8 f3 77 05 78 e8 77 05 - 54 e6 77 05 cc fd 77 05 ..w.x.w.T.w...w. 0577e424 af 5f 1b 03 bc eb 77 05 - b0 f8 77 05 1c f3 77 05 ._....w...w...w. 0577e434 c0 f8 77 05 bc e9 77 05 - 00 00 00 00 00 00 00 00 ..w...w......... 0577e444 28 f7 77 05 00 00 00 00 - 00 00 18 c0 00 00 00 00 (.w............. 0577e454 00 00 32 40 30 fb e4 02 - 60 ef 85 00 60 ef 85 00 ..2@0...`...`... 0577e464 00 00 00 00 00 00 00 00 - 63 00 00 00 00 00 00 00 ........c....... 0577e474 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e484 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e494 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4c4 00 00 00 00 00 00 00 00 - 1f 00 00 00 00 00 00 00 ................ 0577e4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e534 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x5d eax=1000edb9 ebx=0085ed10 ecx=00000000 edx=00000000 esi=0687fda0 edi=0687fdec eip=77f6793f esp=0687fd68 ebp=0687fdc4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0776e76f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0687fdc4 03165b9f 00000208 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile Application exception occurred: App: (pid=101) When: 10/29/2004 @ 9:59:36.620 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 71 SPOOLSS.exe 68 RPCSS.exe 42 NDDEAGNT.exe 84 EXPLORER.exe 85 PSTORES.exe 97 hotkey.exe 99 S3TRAY.exe 101 mainapp.exe 107 DDHELP.exe 59 DRWTSN32.exe 112 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02e50000 - 02e50000) (02f80000 - 02f80000) (030f0000 - 030f0000) (50200000 - 50200000) (5f000000 - 5f000000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (50230000 - 50230000) (04410000 - 04410000) (04540000 - 04540000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04680000 - 04680000) (77c00000 - 77c18000) drv\winspool.dbg (04c40000 - 04c40000) (780a0000 - 780b2000) (04da0000 - 04da0000) (050c0000 - 050c0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (05240000 - 05240000) State Dump for Thread Id 0x64 eax=028d0c60 ebx=00000000 ecx=028d0c60 edx=00000000 esi=00407eb8 edi=00407eec eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f68be=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f68be=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00407eec 00000000 00000000 00000000 user32!GetWindowRect 00407eec 00000113 00002424 00000000 0005cb8a 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ec 7e 40 00 - 00 00 00 00 00 00 00 00 .&.w.~@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ec 7e 40 00 b8 7e 40 00 .........~@..~@. 0012fec0 b8 7e 40 00 ec 7e 40 00 - 01 13 40 5f ec 7e 40 00 .~@..~@...@_.~@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 b8 7e 40 00 5f 80 40 5f - b8 7e 40 00 b8 7e 40 00 .~@._.@_.~@..~@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 b8 7e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 .~@...@_...../.. 0012ff10 00 00 00 00 1f 4b 40 00 - 00 00 40 00 00 00 00 00 .....K@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - a6 4a 40 00 00 00 40 00 ./.......J@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 8d 02 00 00 00 00 - 8b 02 1a 80 a0 01 8d 02 P............... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 20 20 65 80 F....t..<... e. 0012ffb0 e0 ff 12 00 fe 4a 40 00 - 10 5c 40 00 00 00 00 00 .....J@..\@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x69 eax=008510a6 ebx=00000001 ecx=0085d1a0 edx=00000000 esi=000001d0 edi=00000000 eip=77f6829b esp=02e4fc30 ebp=02e4fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:03d3e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 02e4fc54 1000a367 000001d0 ffffffff 00000001 0085d150 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 02e4fc30 bc cc f1 77 d0 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 02e4fc40 00 00 00 00 60 dc 85 00 - 60 dc 85 00 94 fc e4 02 ....`...`....... 02e4fc50 80 ed 00 10 78 fc e4 02 - 67 a3 00 10 d0 01 00 00 ....x...g....... 02e4fc60 ff ff ff ff 01 00 00 00 - 50 d1 85 00 00 00 00 00 ........P....... 02e4fc70 60 dc 85 00 27 bd 00 10 - 94 fc e4 02 94 65 00 10 `...'........e.. 02e4fc80 d0 fc e4 02 ff ff ff ff - 10 d0 85 00 bc 01 00 00 ................ 02e4fc90 50 d1 85 00 d8 fc e4 02 - 37 e3 24 03 a7 10 e4 02 P.......7.$..... 02e4fca0 d0 fc e4 02 cc fc e4 02 - ff ff ff ff c0 fc e4 02 ................ 02e4fcb0 00 00 00 00 60 dc 85 00 - 60 dc 85 00 a7 10 e4 02 ....`...`....... 02e4fcc0 00 00 00 10 68 5f 72 03 - a0 d1 85 00 a0 d1 85 00 ....h_r......... 02e4fcd0 a0 d1 85 00 3c 00 e4 02 - 30 fd e4 02 dc e3 24 03 ....<...0.....$. 02e4fce0 04 fd e4 02 d0 91 25 03 - 00 fa 00 00 08 76 3b 03 ......%......v;. 02e4fcf0 9e 6c 72 03 10 5f 72 03 - 00 00 00 00 00 00 00 10 .lr.._r......... 02e4fd00 e0 d1 85 00 56 53 31 53 - 79 6e 63 54 68 72 65 61 ....VS1SyncThrea 02e4fd10 64 00 85 00 e0 d1 85 00 - e0 d1 85 00 41 00 00 00 d...........A... 02e4fd20 01 00 85 00 04 fd e4 02 - eb 2c 1f 03 a5 10 51 03 .........,....Q. 02e4fd30 80 fd e4 02 16 2d 1f 03 - a0 94 51 03 a0 94 51 03 .....-....Q...Q. 02e4fd40 00 00 00 00 00 00 ff 02 - 9c 10 e4 02 9d 10 f8 02 ................ 02e4fd50 9e 10 f1 77 3c 00 00 00 - 9f 10 e4 02 80 11 e5 02 ...w<........... 02e4fd60 06 00 f8 02 f4 40 f9 02 - 78 fd e4 02 3f 16 f8 02 .....@..x...?... State Dump for Thread Id 0x6e eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000160 edi=00000000 eip=77f6829b esp=04fbfd50 ebp=04fbfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05eae757=66100000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 04fbfd74 1000a367 00000160 ffffffff 00000001 0085dd70 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5b eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=050bfd50 ebp=050bfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05fae757=ffffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 050bfd74 1000a367 00000140 ffffffff 00000001 0085c0e0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 050bfd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 050bfd60 5c 5d 5e 5f 40 da 85 00 - 40 da 85 00 f8 fd 0b 05 \]^_@...@....... 050bfd70 11 8d 01 10 98 fd 0b 05 - 67 a3 00 10 40 01 00 00 ........g...@... 050bfd80 ff ff ff ff 01 00 00 00 - e0 c0 85 00 04 00 00 00 ................ 050bfd90 00 00 00 00 6c fd 0b 05 - b4 fd 0b 05 94 65 00 10 ....l........e.. 050bfda0 00 fe 0b 05 ff ff ff ff - 64 fd 0b 05 6c fd 0b 05 ........d...l... 050bfdb0 e0 c0 85 00 d4 fd 0b 05 - b0 66 00 10 95 10 ff ff .........f...... 050bfdc0 00 fe 0b 05 e8 fd 0b 05 - ff ff ff ff fc fd 0b 05 ................ 050bfdd0 ff ff ff ff 04 fe 0b 05 - cc 19 da 04 00 fe 0b 05 ................ 050bfde0 95 10 da 04 ff ff 00 00 - 00 00 00 00 fc fd 0b 05 ................ 050bfdf0 40 0e dc 04 26 00 00 00 - 01 f5 00 10 f0 aa 85 00 @...&........... 050bfe00 84 ff 0b 05 14 fe 0b 05 - 02 14 da 04 60 0e dc 04 ............`... 050bfe10 18 fe 0b 05 20 fe 0b 05 - e4 13 da 04 60 0e dc 04 .... .......`... 050bfe20 84 ff 0b 05 45 bc 00 10 - 60 0e dc 04 5c 5d 5e 5f ....E...`...\]^_ 050bfe30 40 da 85 00 40 da 85 00 - 0f 00 00 00 21 ce f6 77 @...@.......!..w 050bfe40 0c ff 0b 05 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 050bfe50 78 fe 0b 05 7c 13 23 50 - 07 00 00 00 d8 ee 13 00 x...|.#P........ 050bfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 0b 05 ..#P............ 050bfe70 00 f0 fd 7f ff ff ff ff - 98 fe 0b 05 00 00 00 00 ................ 050bfe80 00 00 0c 05 02 00 00 00 - 00 00 00 00 30 e1 13 00 ............0... State Dump for Thread Id 0x5f eax=1000edb9 ebx=00000001 ecx=05240000 edx=00000000 esi=000000b4 edi=00000000 eip=77f6829b esp=0546fd50 ebp=0546fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0635e757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0546fd74 1000a367 000000b4 ffffffff 00000001 0085bc50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x38 eax=00000035 ebx=00000001 ecx=0000000a edx=00000000 esi=00000138 edi=00000000 eip=77f6829b esp=0556fca4 ebp=0556fcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0645e6ab=a9bedc17 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0556fcc8 1000a367 00000138 ffffffff 00000001 0085c400 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x50 eax=0000c00c ebx=00000001 ecx=0000c00c edx=00000000 esi=00000118 edi=00000000 eip=77f6829b esp=0566fe0c ebp=0566fe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0655e813=c09add9f 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0566fe30 1000a367 00000118 ffffffff 00000001 0085c570 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x27 eax=0577971c ebx=0085ef60 ecx=00000000 edx=0577f8b0 esi=008273a0 edi=02e4fb30 eip=031b1a8d esp=0577e404 ebp=0577e420 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 031b1a6d 8b4d0c mov ecx,[ebp+0xc] ss:0666ce26=6df338bf 031b1a70 dd19 fstp qword ptr [ecx] ds:00000000=???????????????? 031b1a72 eb0e jmp 031b1a82 031b1a74 8b1540814c03 mov edx,[034c8140] ds:034c8140=0577971c 031b1a7a d9420c fld dword ptr [edx+0xc] ds:0666e2b6=c8305302 031b1a7d 8b450c mov eax,[ebp+0xc] ss:0666ce26=6df338bf 031b1a80 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a82 8b0d9c7e4c03 mov ecx,[034c7e9c] ds:034c7e9c=00000000 031b1a88 8b550c mov edx,[ebp+0xc] ss:0666ce26=6df338bf 031b1a8b dd02 fld qword ptr [edx] ds:0577f8b0=4020000000000000 FAULT ->031b1a8d dc4104 fadd qword ptr [ecx+0x4] ds:00eeea06=0000000000000000 031b1a90 8b450c mov eax,[ebp+0xc] ss:0666ce26=6df338bf 031b1a93 dd18 fstp qword ptr [eax] ds:0577971c=0000000000000000 031b1a95 8b4d08 mov ecx,[ebp+0x8] ss:0666ce26=6df338bf 031b1a98 8b550c mov edx,[ebp+0xc] ss:0666ce26=6df338bf 031b1a9b 8b02 mov eax,[edx] ds:0577f8b0=00000000 031b1a9d 8901 mov [ecx],eax ds:00000000=???????? 031b1a9f 8b5204 mov edx,[edx+0x4] ds:0666e2b6=c8305302 031b1aa2 895104 mov [ecx+0x4],edx ds:00eeea06=00000000 031b1aa5 8b4510 mov eax,[ebp+0x10] ss:0666ce26=6df338bf 031b1aa8 c70001000000 mov dword ptr [eax],0x1 ds:0577971c=00000000 031b1aae 8b4d24 mov ecx,[ebp+0x24] ss:0666ce26=6df338bf *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0577e420 031b5faf 0577ebbc 0577f8b0 0577f31c 0577f8c0 *----> Raw Stack Dump <----* 0577e404 a0 73 82 00 38 f9 77 05 - e0 fa 77 05 ac e5 77 05 .s..8.w...w...w. 0577e414 2c ed 77 05 4c f5 77 05 - e8 fa 77 05 cc fd 77 05 ,.w.L.w...w...w. 0577e424 af 5f 1b 03 bc eb 77 05 - b0 f8 77 05 1c f3 77 05 ._....w...w...w. 0577e434 c0 f8 77 05 bc e9 77 05 - 00 00 00 00 00 00 00 00 ..w...w......... 0577e444 28 f7 77 05 00 00 00 00 - 00 00 18 c0 00 00 00 00 (.w............. 0577e454 00 00 32 40 30 fb e4 02 - 60 ef 85 00 60 ef 85 00 ..2@0...`...`... 0577e464 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e474 63 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 c............... 0577e484 01 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0577e494 00 00 00 00 eb 57 0a d4 - 2a 15 b8 41 d8 52 82 00 .....W..*..A.R.. 0577e4a4 00 00 00 00 00 00 00 00 - 00 00 00 20 5f a0 22 42 ........... _."B 0577e4b4 00 00 00 00 00 00 00 00 - eb 57 0a d4 2a 15 b8 41 .........W..*..A 0577e4c4 00 00 00 00 00 00 00 00 - 63 00 00 00 00 00 00 00 ........c....... 0577e4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0577e534 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x43 eax=1000edb9 ebx=0085ed10 ecx=00000000 edx=00000000 esi=0687fda0 edi=0687fdec eip=77f6793f esp=0687fd68 ebp=0687fdc4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0776e76f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0687fdc4 03165b9f 00000208 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile Application exception occurred: App: (pid=102) When: 10/29/2004 @ 10:16:41.820 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 72 SPOOLSS.exe 67 RPCSS.exe 86 NDDEAGNT.exe 91 EXPLORER.exe 92 PSTORES.exe 97 hotkey.exe 99 S3TRAY.exe 102 mainapp.exe 107 DDHELP.exe 64 DRWTSN32.exe 112 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02e50000 - 02e50000) (02f80000 - 02f80000) (030f0000 - 030f0000) (50200000 - 50200000) (5f000000 - 5f000000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (50230000 - 50230000) (04410000 - 04410000) (04540000 - 04540000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04680000 - 04680000) (77c00000 - 77c18000) drv\winspool.dbg (04c20000 - 04c20000) (780a0000 - 780b2000) (04d80000 - 04d80000) (050a0000 - 050a0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (05220000 - 05220000) State Dump for Thread Id 0x65 eax=028d0c60 ebx=00000000 ecx=028d0c60 edx=00000000 esi=00407eb8 edi=00407eec eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f68be=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f68be=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00407eec 00000000 00000000 00000000 user32!GetWindowRect 00407eec 00000113 00002424 00000000 0005d746 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ec 7e 40 00 - 00 00 00 00 00 00 00 00 .&.w.~@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ec 7e 40 00 b8 7e 40 00 .........~@..~@. 0012fec0 b8 7e 40 00 ec 7e 40 00 - 01 13 40 5f ec 7e 40 00 .~@..~@...@_.~@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 b8 7e 40 00 5f 80 40 5f - b8 7e 40 00 b8 7e 40 00 .~@._.@_.~@..~@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 b8 7e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 .~@...@_...../.. 0012ff10 00 00 00 00 1f 4b 40 00 - 00 00 40 00 00 00 00 00 .....K@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - a6 4a 40 00 00 00 40 00 ./.......J@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 8d 02 00 00 00 00 - d8 fd 3f e1 a0 01 8d 02 P.........?..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 c0 29 65 80 F....t..<....)e. 0012ffb0 e0 ff 12 00 fe 4a 40 00 - 10 5c 40 00 00 00 00 00 .....J@..\@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x69 eax=008510a7 ebx=00000001 ecx=0085d170 edx=00000000 esi=000001ec edi=00000000 eip=77f6829b esp=02e4fc30 ebp=02e4fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:03d3e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 02e4fc54 1000a367 000001ec ffffffff 00000001 0085d120 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 02e4fc30 bc cc f1 77 ec 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 02e4fc40 00 00 00 00 60 dc 85 00 - 60 dc 85 00 94 fc e4 02 ....`...`....... 02e4fc50 80 ed 00 10 78 fc e4 02 - 67 a3 00 10 ec 01 00 00 ....x...g....... 02e4fc60 ff ff ff ff 01 00 00 00 - 20 d1 85 00 00 00 00 00 ........ ....... 02e4fc70 60 dc 85 00 27 bd 00 10 - 94 fc e4 02 94 65 00 10 `...'........e.. 02e4fc80 d0 fc e4 02 ff ff ff ff - d0 ef 85 00 f0 01 00 00 ................ 02e4fc90 20 d1 85 00 d8 fc e4 02 - 37 e3 24 03 a8 10 e4 02 .......7.$..... 02e4fca0 d0 fc e4 02 cc fc e4 02 - ff ff ff ff c0 fc e4 02 ................ 02e4fcb0 00 00 00 00 60 dc 85 00 - 60 dc 85 00 a8 10 e4 02 ....`...`....... 02e4fcc0 00 00 00 10 68 5f 72 03 - 70 d1 85 00 70 d1 85 00 ....h_r.p...p... 02e4fcd0 70 d1 85 00 3c 00 e4 02 - 30 fd e4 02 dc e3 24 03 p...<...0.....$. 02e4fce0 04 fd e4 02 d0 91 25 03 - 00 fa 00 00 08 76 3b 03 ......%......v;. 02e4fcf0 9e 6c 72 03 10 5f 72 03 - 00 00 00 00 00 00 00 10 .lr.._r......... 02e4fd00 b0 d1 85 00 56 53 31 53 - 79 6e 63 54 68 72 65 61 ....VS1SyncThrea 02e4fd10 64 00 85 00 b0 d1 85 00 - b0 d1 85 00 41 00 00 00 d...........A... 02e4fd20 01 00 85 00 04 fd e4 02 - eb 2c 1f 03 a6 10 51 03 .........,....Q. 02e4fd30 80 fd e4 02 16 2d 1f 03 - a0 94 51 03 a0 94 51 03 .....-....Q...Q. 02e4fd40 00 00 00 00 00 00 ff 02 - 9d 10 e4 02 9e 10 f8 02 ................ 02e4fd50 9f 10 f1 77 3c 00 00 00 - a0 10 e4 02 80 11 e5 02 ...w<........... 02e4fd60 06 00 f8 02 f4 40 f9 02 - 78 fd e4 02 3f 16 f8 02 .....@..x...?... State Dump for Thread Id 0x6e eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000160 edi=00000000 eip=77f6829b esp=04f9fd50 ebp=04f9fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05e8e757=66500000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 04f9fd74 1000a367 00000160 ffffffff 00000001 0085dd70 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2e eax=1000edb9 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0509fd50 ebp=0509fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:05f8e757=ffffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0509fd74 1000a367 00000140 ffffffff 00000001 0085c0e0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0509fd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 0509fd60 5c 5d 5e 5f 40 da 85 00 - 40 da 85 00 f8 fd 09 05 \]^_@...@....... 0509fd70 11 8d 01 10 98 fd 09 05 - 67 a3 00 10 40 01 00 00 ........g...@... 0509fd80 ff ff ff ff 01 00 00 00 - e0 c0 85 00 04 00 00 00 ................ 0509fd90 00 00 00 00 6c fd 09 05 - b4 fd 09 05 94 65 00 10 ....l........e.. 0509fda0 00 fe 09 05 ff ff ff ff - 64 fd 09 05 6c fd 09 05 ........d...l... 0509fdb0 e0 c0 85 00 d4 fd 09 05 - b0 66 00 10 95 10 ff ff .........f...... 0509fdc0 00 fe 09 05 e8 fd 09 05 - ff ff ff ff fc fd 09 05 ................ 0509fdd0 ff ff ff ff 04 fe 09 05 - cc 19 d8 04 00 fe 09 05 ................ 0509fde0 95 10 d8 04 ff ff 00 00 - 00 00 00 00 fc fd 09 05 ................ 0509fdf0 40 0e da 04 26 00 00 00 - 01 f5 00 10 f0 aa 85 00 @...&........... 0509fe00 84 ff 09 05 14 fe 09 05 - 02 14 d8 04 60 0e da 04 ............`... 0509fe10 18 fe 09 05 20 fe 09 05 - e4 13 d8 04 60 0e da 04 .... .......`... 0509fe20 84 ff 09 05 45 bc 00 10 - 60 0e da 04 5c 5d 5e 5f ....E...`...\]^_ 0509fe30 40 da 85 00 40 da 85 00 - 0f 00 00 00 21 ce f6 77 @...@.......!..w 0509fe40 0c ff 09 05 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0509fe50 78 fe 09 05 7c 13 23 50 - 07 00 00 00 d8 ee 13 00 x...|.#P........ 0509fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 09 05 ..#P............ 0509fe70 00 f0 fd 7f ff ff ff ff - 98 fe 09 05 00 00 00 00 ................ 0509fe80 00 00 0a 05 02 00 00 00 - 00 00 00 00 30 e1 13 00 ............0... State Dump for Thread Id 0x3e eax=1000edb9 ebx=00000001 ecx=05220000 edx=00000000 esi=000000b4 edi=00000000 eip=77f6829b esp=0544fd50 ebp=0544fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0633e757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0544fd74 1000a367 000000b4 ffffffff 00000001 0085bc50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2c eax=00000000 ebx=00000001 ecx=0000000a edx=00000000 esi=00000138 edi=00000000 eip=77f6829b esp=0554fca4 ebp=0554fcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0643e6ab=a9b6dc17 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0554fcc8 1000a367 00000138 ffffffff 00000001 0085c400 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5e eax=0000c00c ebx=00000001 ecx=0000c00c edx=00000000 esi=00000118 edi=00000000 eip=77f6829b esp=0564fe0c ebp=0564fe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0653e813=c09e9d9f 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0564fe30 1000a367 00000118 ffffffff 00000001 0085c570 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5f eax=0575971c ebx=0085ef30 ecx=00000000 edx=0575f8b0 esi=008275b0 edi=02e4fb30 eip=031b1a8d esp=0575e404 ebp=0575e420 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 031b1a6d 8b4d0c mov ecx,[ebp+0xc] ss:0664ce26=65fb38bf 031b1a70 dd19 fstp qword ptr [ecx] ds:00000000=???????????????? 031b1a72 eb0e jmp 031b1a82 031b1a74 8b1540814c03 mov edx,[034c8140] ds:034c8140=0575971c 031b1a7a d9420c fld dword ptr [edx+0xc] ds:0664e2b6=c8301302 031b1a7d 8b450c mov eax,[ebp+0xc] ss:0664ce26=65fb38bf 031b1a80 dd18 fstp qword ptr [eax] ds:0575971c=0000000000000000 031b1a82 8b0d9c7e4c03 mov ecx,[034c7e9c] ds:034c7e9c=00000000 031b1a88 8b550c mov edx,[ebp+0xc] ss:0664ce26=65fb38bf 031b1a8b dd02 fld qword ptr [edx] ds:0575f8b0=4020000000000000 FAULT ->031b1a8d dc4104 fadd qword ptr [ecx+0x4] ds:00eeea06=0000000000000000 031b1a90 8b450c mov eax,[ebp+0xc] ss:0664ce26=65fb38bf 031b1a93 dd18 fstp qword ptr [eax] ds:0575971c=0000000000000000 031b1a95 8b4d08 mov ecx,[ebp+0x8] ss:0664ce26=65fb38bf 031b1a98 8b550c mov edx,[ebp+0xc] ss:0664ce26=65fb38bf 031b1a9b 8b02 mov eax,[edx] ds:0575f8b0=00000000 031b1a9d 8901 mov [ecx],eax ds:00000000=???????? 031b1a9f 8b5204 mov edx,[edx+0x4] ds:0664e2b6=c8301302 031b1aa2 895104 mov [ecx+0x4],edx ds:00eeea06=00000000 031b1aa5 8b4510 mov eax,[ebp+0x10] ss:0664ce26=65fb38bf 031b1aa8 c70001000000 mov dword ptr [eax],0x1 ds:0575971c=00000000 031b1aae 8b4d24 mov ecx,[ebp+0x24] ss:0664ce26=65fb38bf *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0575e420 031b5faf 0575ebbc 0575f8b0 0575f31c 0575f8c0 *----> Raw Stack Dump <----* 0575e404 b0 75 82 00 38 f9 75 05 - e0 fa 75 05 ac e5 75 05 .u..8.u...u...u. 0575e414 2c ed 75 05 4c f5 75 05 - e8 fa 75 05 cc fd 75 05 ,.u.L.u...u...u. 0575e424 af 5f 1b 03 bc eb 75 05 - b0 f8 75 05 1c f3 75 05 ._....u...u...u. 0575e434 c0 f8 75 05 bc e9 75 05 - 00 00 00 00 00 00 00 00 ..u...u......... 0575e444 28 f7 75 05 00 00 00 00 - 00 00 18 c0 00 00 00 00 (.u............. 0575e454 00 00 32 40 30 fb e4 02 - 30 ef 85 00 30 ef 85 00 ..2@0...0...0... 0575e464 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e474 0e 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e484 01 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0575e494 00 00 00 00 00 00 00 00 - 65 cd bd 41 a8 11 7e 00 ........e..A..~. 0575e4a4 00 00 00 00 00 00 00 00 - 00 00 00 60 b8 13 fa 41 ...........`...A 0575e4b4 00 00 00 00 00 00 00 00 - 00 00 00 00 65 cd bd 41 ............e..A 0575e4c4 00 00 00 00 00 00 00 00 - 63 00 00 00 00 00 00 00 ........c....... 0575e4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0575e534 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x27 eax=1000edb9 ebx=0085ecf0 ecx=00000000 edx=00000000 esi=0685fda0 edi=0685fdec eip=77f6793f esp=0685fd68 ebp=0685fdc4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0774e76f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0685fdc4 03165b9f 0000020c 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile Application exception occurred: App: (pid=99) When: 1/21/2005 @ 8:56:25.569 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 73 SPOOLSS.exe 69 NDDEAGNT.exe 74 EXPLORER.exe 85 RPCSS.exe 45 PSTORES.exe 95 hotkey.exe 97 S3TRAY.exe 99 mainapp.exe 106 DDHELP.exe 43 DRWTSN32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x62 eax=02920000 ebx=00000000 ecx=00000000 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 00013329 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - d8 da 40 e1 a0 01 93 02 P.........@..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 20 23 65 80 F....t..<... #e. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6d eax=000000c0 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=00007600 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=00005600 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 a8 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 d8 34 14 00 .............4.. State Dump for Thread Id 0x46 eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00006100 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5d eax=00002525 ebx=00000001 ecx=03565a8c edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x39 eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x40 eax=00000000 ebx=00000001 ecx=000001f5 edx=00000000 esi=000001cc edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001cc ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 cc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 34 00 00 00 ...w.H...H..4... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 cc 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 11 01 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 ................ 068ffdc0 14 fe 8f 06 ff ff ff ff - b0 60 7e 00 e0 fd 8f 06 .........`~..... 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 60 04 87 00 ...w.H...H..`... 068ffe00 84 ff 8f 06 4a d2 f1 77 - fe ff ff ff 00 00 00 00 ....J..w........ 068ffe10 18 fe 8f 06 00 09 00 00 - 00 00 87 00 80 60 7e 00 .............`~. 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 48 72 14 00 x...|.#P....Hr.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 70 36 14 00 1f 3e f6 77 ......<.p6...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x59 eax=00000001 ebx=00874660 ecx=00000000 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000210 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x2f eax=00000003 ebx=00000001 ecx=3f800000 edx=00000000 esi=00000208 edi=00000000 eip=77f6829b esp=08d5fd08 ebp=08d5fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09c4e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd2c 1000dbba 00000208 ffffffff 00000001 00874440 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x28 eax=00000809 ebx=00000001 ecx=00b9a000 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x51 eax=00874090 ebx=00000001 ecx=00000002 edx=00000000 esi=0000023c edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 0000023c ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x53 eax=00000001 ebx=00000001 ecx=00000000 edx=00000000 esi=00000250 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000250 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x4c eax=038f1fa0 ebx=00000001 ecx=038f1fa0 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000264 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=038f2100 ebx=00000001 ecx=0128e168 edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 00000278 ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=0d29ad92 ebx=00000001 ecx=03bbaf38 edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=0d2bd612 ebx=00000001 ecx=03bbaf68 edx=00000000 esi=0000025c edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 0000025c ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=00000000 ebx=00000001 ecx=1005a7a0 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 0000028c ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=00000000 ebx=00000001 ecx=0087513a edx=00000000 esi=000002a0 edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002a0 ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=1001537f ebx=00000001 ecx=007b4cac edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=03dda3aa ebx=00000001 ecx=000002b5 edx=00000000 esi=000001b4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=00000000 ebx=00000001 ecx=007e8bf0 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=1001537f ebx=00000001 ecx=00000000 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=00000001 ebx=00000001 ecx=00258501 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7b eax=00008004 ebx=00876320 ecx=00000016 edx=09e5fac4 esi=00876320 edi=10003114 eip=04f3fb5c esp=09e5f8dc ebp=09e5f8e4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: 04f3fb31 81ea20030000 sub edx,0x320 04f3fb37 8955fc mov [ebp-0x4],edx ss:0ad4e2ea=???????? 04f3fb3a 837dfc28 cmp dword ptr [ebp-0x4],0x28 ss:0ad4e2ea=???????? 04f3fb3e 0f8703010000 jnbe 04f3fc47 04f3fb44 8b4dfc mov ecx,[ebp-0x4] ss:0ad4e2ea=???????? 04f3fb47 33c0 xor eax,eax 04f3fb49 8a8158fcf304 mov al,[ecx+0x4f3fc58] ds:04f3fc6e=01 04f3fb4f ff248550fcf304 jmp dword ptr [04f3fc50+eax*4] ds:00008004=???????? 04f3fb56 8b5510 mov edx,[ebp+0x10] ss:0ad4e2ea=???????? 04f3fb59 8b450c mov eax,[ebp+0xc] ss:0ad4e2ea=???????? FAULT ->04f3fb5c 668b08 mov cx,[eax] ds:00008004=???? 04f3fb5f 66890a mov [edx],cx ds:09e5fac4=ffff 04f3fb62 8b5510 mov edx,[ebp+0x10] ss:0ad4e2ea=???????? 04f3fb65 33c0 xor eax,eax 04f3fb67 668b02 mov ax,[edx] ds:09e5fac4=ffff 04f3fb6a 8945f8 mov [ebp-0x8],eax ss:0ad4e2ea=???????? 04f3fb6d 8b4df8 mov ecx,[ebp-0x8] ss:0ad4e2ea=???????? 04f3fb70 81e98a000000 sub ecx,0x8a 04f3fb76 894df8 mov [ebp-0x8],ecx ss:0ad4e2ea=???????? 04f3fb79 837df815 cmp dword ptr [ebp-0x8],0x15 ss:0ad4e2ea=???????? 04f3fb7d 0f87b6000000 jnbe 04f3fc39 04f3fb83 8b55f8 mov edx,[ebp-0x8] ss:0ad4e2ea=???????? *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5f8e4 04f413df 00000336 00008004 09e5fac4 00000000 *----> Raw Stack Dump <----* 09e5f8dc 02 00 00 00 16 00 00 00 - d8 fc e5 09 df 13 f4 04 ................ 09e5f8ec 36 03 00 00 04 80 00 00 - c4 fa e5 09 00 00 00 00 6............... 09e5f8fc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f90c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f91c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f92c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f93c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f94c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f95c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f96c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f97c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f98c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f99c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f9ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f9bc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f9cc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f9dc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f9ec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5f9fc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09e5fa0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x7c eax=00000014 ebx=00000001 ecx=00000005 edx=00000000 esi=000002e4 edi=00000000 eip=77f6829b esp=09f5f844 ebp=09f5f868 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ae4e24b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5f868 1000dbba 000002e4 ffffffff 00000001 008762d0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09f5f844 bc cc f1 77 e4 02 00 00 - 01 00 00 00 00 00 00 00 ...w............ 09f5f854 ff ff ff ff 20 60 87 00 - 20 60 87 00 3c 00 00 00 .... `.. `..<... 09f5f864 85 dc 00 10 8c f8 f5 09 - ba db 00 10 e4 02 00 00 ................ 09f5f874 ff ff ff ff 01 00 00 00 - d0 62 87 00 74 01 00 00 .........b..t... 09f5f884 01 00 00 00 00 00 00 00 - a8 f8 f5 09 e4 9a 00 10 ................ 09f5f894 ec f8 f5 09 ff ff ff ff - 6c 99 00 10 26 0b 87 00 ........l...&... 09f5f8a4 d0 62 87 00 c8 f8 f5 09 - 00 9c 00 10 9d 15 ff ff .b.............. 09f5f8b4 ec f8 f5 09 dc f8 f5 09 - ff ff ff ff e4 f8 f5 09 ................ 09f5f8c4 ff ff ff ff f0 f8 f5 09 - 4a 01 c7 05 ec f8 f5 09 ........J....... 09f5f8d4 9d 15 00 00 ff ff 00 00 - 00 00 00 00 e4 f8 f5 09 ................ 09f5f8e4 00 00 12 00 30 5b 7f 00 - 26 0b 12 00 0c f9 f5 09 ....0[..&....... 09f5f8f4 f5 06 c7 05 65 15 3e 0c - 9d 15 d0 05 f0 9b 3e 0c ....e.>.......>. 09f5f904 20 00 3e 0c 01 00 d0 05 - 38 f9 f5 09 43 70 c8 05 .>.....8...Cp.. 09f5f914 f0 9b 3e 0c 20 00 d0 05 - 01 00 00 00 fc 01 db 05 ..>. ........... 09f5f924 c8 45 d0 05 71 00 00 00 - 00 00 00 00 00 00 00 00 .E..q........... 09f5f934 00 00 00 00 a0 f9 f5 09 - ad 72 c8 05 f0 9b 3e 0c .........r....>. 09f5f944 20 00 db 05 01 00 00 00 - 8c f9 f5 09 00 00 db 05 ............... 09f5f954 a0 82 3e 0c 5a 88 3e 0c - 70 89 3e 0c e0 01 db 05 ..>.Z.>.p.>..... 09f5f964 30 89 3e 0c ff ff ff ff - 20 00 00 00 20 60 87 00 0.>..... ... `.. 09f5f974 f8 fa f5 09 30 00 00 00 - fc be ce 05 50 76 d8 05 ....0.......Pv.. State Dump for Thread Id 0x7d eax=1001537f ebx=00000001 ecx=77f669c8 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=0a05fd74 ebp=0a05fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0af4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7e eax=1001537f ebx=00000001 ecx=00876020 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a15fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a15fd2c 20 00 00 00 c0 7c 87 00 - c0 7c 87 00 74 01 00 00 ....|...|..t... 0a15fd3c 01 00 00 00 64 fd 15 0a - ba db 00 10 c4 00 00 00 ....d........... 0a15fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a15fd5c 01 00 00 00 00 00 00 00 - 80 fd 15 0a e4 9a 00 10 ................ 0a15fd6c e8 fd 15 0a ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0a15fd7c 00 18 87 00 a0 fd 15 0a - 00 9c 00 10 47 15 ff ff ............G... 0a15fd8c e8 fd 15 0a b4 fd 15 0a - ff ff ff ff ec fd 15 0a ................ 0a15fd9c ff ff ff ff 20 fe 15 0a - 89 97 23 06 e8 fd 15 0a .... .....#..... 0a15fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 15 0a G............... 0a15fdbc 00 80 00 00 48 d2 01 10 - 01 00 00 00 00 00 00 00 ....H........... 0a15fdcc 04 00 00 00 38 f3 27 06 - 50 4d 7e 00 50 28 7e 00 ....8.'.PM~.P(~. 0a15fddc 18 03 00 00 0b 00 00 00 - 38 9d 02 10 1b 08 01 10 ........8....... 0a15fdec 00 00 00 00 98 09 84 01 - b4 4d 7e 00 00 01 01 10 .........M~..... 0a15fdfc 00 04 87 00 84 ff 15 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a15fe0c 00 00 00 00 18 fe 15 0a - 04 00 00 00 14 03 00 00 ................ 0a15fe1c ff ff ff ff 84 ff 15 0a - 95 f5 00 10 00 00 00 00 ................ 0a15fe2c 20 00 00 00 c0 7c 87 00 - c0 7c 87 00 1e 00 00 00 ....|...|...... 0a15fe3c 00 00 00 00 0c ff 15 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a15fe4c ff ff ff ff 78 fe 15 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7f eax=00000e18 ebx=00877bf0 ecx=10020e19 edx=00000000 esi=0a76fdb0 edi=00000000 eip=77f6793f esp=0a76fd78 ebp=0a76fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b65e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fdd4 062373cb 0000030c 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x80 eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000358 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000358 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 58 03 00 00 - 00 00 00 00 00 00 00 00 ...wX........... 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 58 03 00 00 .z.. ...AO.wX... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 58 03 00 00 ........*.#.X... 0a86f9c4 ff ff ff ff 20 77 61 69 - 58 03 00 00 63 5f 74 68 .... waiX...c_th 0a86f9d4 00 00 61 64 a7 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a7 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x81 eax=00000a56 ebx=00000000 ecx=10020a57 edx=00000000 esi=00000368 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000368 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x82 eax=00000052 ebx=00877750 ecx=0aa6fda8 edx=00000000 esi=00000334 edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 00000334 0a662000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 34 03 00 00 - 00 00 00 00 00 00 00 00 ...w4........... 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 20 66 0a 00 10 00 00 ....4.... f..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 50 77 87 00 ............Pw.. 0aa6fd28 50 77 87 00 50 77 87 00 - 15 c9 f1 77 68 fd a6 0a Pw..Pw.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 34 03 00 00 00 20 66 0a - 00 10 00 00 d5 0e 2c 06 4.... f.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 50 77 87 00 ....V.'.....Pw.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 94 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 ....pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 50 77 87 00 50 77 87 00 pm+.....Pw..Pw.. State Dump for Thread Id 0x83 eax=062c0e10 ebx=00000001 ecx=062c0e10 edx=00000000 esi=000002f8 edi=00000000 eip=77f6829b esp=0b07fd18 ebp=0b07fd3c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0bf6e71f=10101010 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fd3c 1000dbba 000002f8 ffffffff 00000001 00877fb0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x84 eax=0000039a ebx=00000001 ecx=000003a1 edx=00000000 esi=000003c0 edi=00000000 eip=77f6829b esp=0b17ed5c ebp=0b17ed80 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c06d763=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17ed80 1000dbba 000003c0 ffffffff 00000001 00878f30 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0b17ed5c bc cc f1 77 c0 03 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0b17ed6c f8 fc 17 0b b0 75 87 00 - b0 75 87 00 f8 fc 17 0b .....u...u...... 0b17ed7c 10 d4 28 06 a4 ed 17 0b - ba db 00 10 c0 03 00 00 ..(............. 0b17ed8c ff ff ff ff 01 00 00 00 - 30 8f 87 00 a4 1f f9 77 ........0......w 0b17ed9c d0 d4 f9 77 ff ff ff ff - c0 ed 17 0b e4 9a 00 10 ...w............ 0b17edac 00 ee 17 0b ff ff ff ff - b0 75 87 00 97 20 f6 77 .........u... .w 0b17edbc 30 8f 87 00 e0 ed 17 0b - 78 d7 23 06 ac 15 ff ff 0.......x.#..... 0b17edcc 00 ee 17 0b 00 00 00 00 - ff ff ff ff fc ed 17 0b ................ 0b17eddc fc ed 17 0b 10 ee 17 0b - 83 1e 1d 06 ac 15 00 00 ................ 0b17edec 00 ee 17 0b 00 00 00 00 - ff ff ff ff fc ed 17 0b ................ 0b17edfc 00 00 00 00 00 00 00 00 - 10 0b 17 0b e0 44 7f 00 .............D.. 0b17ee0c 30 ee 17 0b 30 ee 17 0b - aa 20 1d 06 10 0b 7f 00 0...0.... ...... 0b17ee1c 3c d3 27 06 ac 15 7f 00 - 10 0b 00 00 f4 44 7f 00 <.'..........D.. 0b17ee2c 38 ee 17 0b 44 fd 17 0b - b8 bf 1e 06 e8 61 00 00 8...D........a.. 0b17ee3c ff ff 00 00 00 00 00 00 - 01 00 00 00 ac 15 00 00 ................ 0b17ee4c 00 00 00 00 b0 75 87 00 - 03 00 00 00 00 00 00 00 .....u.......... 0b17ee5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17ee6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17ee7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17ee8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x85 eax=1001537f ebx=008774e0 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003d0 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 d0 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 e0 74 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .t.......... .'. 0b27fdd8 2f 86 23 06 d0 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 d0 03 00 00 d4 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - e0 74 87 00 e0 74 87 00 .........t...t.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 78 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....x6........<. 0b27fe98 70 36 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 p6...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 e0 74 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .t.............. State Dump for Thread Id 0x86 eax=1001537f ebx=00000000 ecx=206b636f edx=00000000 esi=00000380 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000380 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x87 eax=00000002 ebx=008772a0 ecx=00000002 edx=00000000 esi=008772a0 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x88 eax=1001537f ebx=00000000 ecx=00000000 edx=00000000 esi=00000384 edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 00000384 ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x89 eax=00000026 ebx=00000001 ecx=0000cff8 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x8a eax=1001537f ebx=00000001 ecx=1005b250 edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 60 2c 40 00 .5..........`,@. 0bc7fd70 72 00 01 00 98 fd c7 0b - ba db 00 10 a0 00 00 00 r............... 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bc7fd90 01 00 00 00 00 00 00 00 - b4 fd c7 0b e4 9a 00 10 ................ 0bc7fda0 00 fe c7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 90 12 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 .....2~..e...... 0bc7fe00 60 08 c7 0b 14 fe c7 0b - 92 13 40 00 a0 12 93 02 `.........@..... 0bc7fe10 01 fe c7 0b 20 fe c7 0b - 74 13 40 00 a0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - a0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 88 13 16 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. State Dump for Thread Id 0x8b eax=1001537f ebx=0ca7f0dc ecx=00000000 edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - 00 71 87 00 d0 b1 87 00 .........q...... 0ca7f0d8 d0 b1 87 00 cc 03 00 00 - b8 03 00 00 00 71 87 00 .............q.. 0ca7f0e8 d0 b1 87 00 d0 b1 87 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: (pid=100) When: 3/9/2005 @ 13:29:52.576 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 72 SPOOLSS.exe 68 RPCSS.exe 81 NDDEAGNT.exe 85 EXPLORER.exe 82 PSTORES.exe 96 hotkey.exe 98 S3TRAY.exe 100 mainapp.exe 106 DDHELP.exe 78 DRWTSN32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x63 eax=02920000 ebx=00000000 ecx=77a2ea48 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 00013fc1 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - 58 f5 3f e1 a0 01 93 02 P.......X.?..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 20 20 65 80 F....t..<... e. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6d eax=000000c0 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=00007600 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=00012700 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 a8 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 d8 34 14 00 .............4.. State Dump for Thread Id 0x5b eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00002e00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5c eax=0000000a ebx=00000001 ecx=007e1956 edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=6de00000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x39 eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=6de00000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2d eax=038bc812 ebx=00000001 ecx=00000001 edx=00000000 esi=000001dc edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=6de00000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001dc ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 dc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 34 00 00 00 ...w.H...H..4... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 dc 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 e7 01 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 ................ 068ffdc0 14 fe 8f 06 ff ff ff ff - c0 b1 7d 00 e0 fd 8f 06 ..........}..... 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 70 fd 7d 00 ...w.H...H..p.}. 068ffe00 84 ff 8f 06 72 07 f1 77 - 00 00 ff ff 00 00 00 00 ....r..w........ 068ffe10 18 fe 8f 06 cc 06 00 00 - 00 00 87 00 90 b1 7d 00 ..............}. 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 48 72 14 00 x...|.#P....Hr.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 70 36 14 00 1f 3e f6 77 ......<.p6...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x28 eax=03e77bfe ebx=00874660 ecx=00341576 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000210 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x3d eax=034e3e78 ebx=00000001 ecx=034f2a10 edx=00000000 esi=00000208 edi=00000000 eip=77f6829b esp=08d5fd08 ebp=08d5fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09c4e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd2c 1000dbba 00000208 ffffffff 00000001 00874440 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x4b eax=0d2a84a2 ebx=00000001 ecx=00000000 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x3b eax=00000000 ebx=00000001 ecx=00205c01 edx=00000000 esi=0000023c edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 0000023c ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x45 eax=00b27de6 ebx=00000001 ecx=00000504 edx=00000000 esi=00000250 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000250 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x41 eax=00000014 ebx=00000001 ecx=038f1fa0 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000264 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x42 eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 00000278 ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=0d29ad92 ebx=00000001 ecx=03bbaf38 edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=00000000 ebx=00000001 ecx=00000000 edx=00000000 esi=0000025c edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 0000025c ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=0955fd90 ebx=00000001 ecx=0955fd88 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 0000028c ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=000000d8 ebx=00000001 ecx=00000024 edx=00000000 esi=000002a0 edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002a0 ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=007df050 ebx=00000001 ecx=00000000 edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=1005a796 ebx=00000001 ecx=000000a3 edx=00000000 esi=000001b4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=04a2ee40 ebx=00000001 ecx=04a2ee01 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=000000f8 ebx=00000001 ecx=00000000 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=00000001 ebx=00000001 ecx=089bc401 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=00000000 ebx=00000001 ecx=00000017 edx=00000000 esi=00000174 edi=09e5fc0c eip=77f6829b esp=09e5fbf0 ebp=09e5fc14 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e5f7=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fc14 1000dbba 00000174 000000c8 00000001 00873920 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09e5fbf0 bc cc f1 77 74 01 00 00 - 01 00 00 00 0c fc e5 09 ...wt........... 09e5fc00 14 31 00 10 20 63 87 00 - 20 63 87 00 80 7b e1 ff .1.. c.. c...{.. 09e5fc10 ff ff ff ff 38 fc e5 09 - ba db 00 10 74 01 00 00 ....8.......t... 09e5fc20 c8 00 00 00 01 00 00 00 - 20 39 87 00 02 01 00 00 ........ 9...... 09e5fc30 01 00 00 00 00 00 00 00 - 54 fc e5 09 e4 9a 00 10 ........T....... 09e5fc40 ca 87 22 05 c8 00 00 00 - 54 a7 05 10 00 00 00 00 ..".....T....... 09e5fc50 20 39 87 00 74 fc e5 09 - 00 9c 00 10 65 15 00 00 9..t.......e... 09e5fc60 ca 87 22 05 88 fc e5 09 - c8 00 00 00 bc fc e5 09 .."............. 09e5fc70 c8 00 00 00 dc fc e5 09 - 6d 42 f6 04 ca 87 22 05 ........mB....". 09e5fc80 65 15 00 00 c8 00 00 00 - 00 00 00 00 bc fc e5 09 e............... 09e5fc90 14 31 00 10 20 63 87 00 - 20 63 87 00 a8 fc e5 09 .1.. c.. c...... 09e5fca0 df 3a d0 04 e4 ee 0a 05 - c4 fc e5 09 94 33 d0 04 .:...........3.. 09e5fcb0 00 00 00 00 c8 ee 0a 05 - 00 00 00 00 01 00 00 00 ................ 09e5fcc0 00 00 e5 09 d4 fc e5 09 - a7 26 d0 04 20 02 00 00 .........&.. ... 09e5fcd0 00 00 00 00 20 fe e5 09 - 43 c9 f5 04 20 fe e5 09 .... ...C... ... 09e5fce0 e5 ba f5 04 14 31 00 10 - 20 63 87 00 20 63 87 00 .....1.. c.. c.. 09e5fcf0 06 00 00 00 3f 00 00 00 - 14 31 00 10 c0 7b 87 00 ....?....1...{.. 09e5fd00 1c fe e5 09 20 fe e5 09 - 91 f1 00 10 20 fe e5 09 .... ....... ... 09e5fd10 0b f2 00 10 20 fd e5 09 - 00 00 00 00 00 00 00 00 .... ........... 09e5fd20 2c 20 50 72 69 6f 72 69 - 74 79 20 00 65 61 64 00 , Priority .ead. State Dump for Thread Id 0x7b eax=0bca5138 ebx=1807e498 ecx=0000003f edx=00734290 esi=0000000b edi=0000003f eip=05cefdb6 esp=09f5fbe8 ebp=09f5fc08 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: 05cefd94 80d3eb adc bl,0xeb 05cefd97 8b4d08 mov ecx,[ebp+0x8] ss:0ae4e60e=???????? 05cefd9a 095904 or [ecx+0x4],ebx ds:00eeea45=e400ffff 05cefd9d 8d4fe0 lea ecx,[edi-0x20] ds:00eeea45=e400ffff 05cefda0 bf00000080 mov edi,0x80000000 05cefda5 d3ef shr edi,cl 05cefda7 8d84b0c4000000 lea eax,[eax+esi*4+0xc4] ds:000000cf=???????? 05cefdae 0938 or [eax],edi ds:0bca5138=0000016c 05cefdb0 8b5df4 mov ebx,[ebp-0xc] ss:0ae4e60e=???????? 05cefdb3 8b45f0 mov eax,[ebp-0x10] ss:0ae4e60e=???????? FAULT ->05cefdb6 891a mov [edx],ebx ds:00734290=???????? 05cefdb8 895c13fc mov [ebx+edx-0x4],ebx ds:01622c97=00000000 05cefdbc ff08 dec dword ptr [eax] ds:0bca5138=0000016c 05cefdbe 0f85fa000000 jne 05cefebe 05cefdc4 a19088d805 mov eax,[05d88890] ds:05d88890=00000000 05cefdc9 85c0 test eax,eax 05cefdcb 0f84df000000 je 05cefeb0 05cefdd1 8b0d8888d805 mov ecx,[05d88888] ds:05d88888=00000000 05cefdd7 8b3d1401d005 mov edi,[05d00114] ds:05d00114=77f121f5 05cefddd c1e10f shl ecx,0xf 05cefde0 03480c add ecx,[eax+0xc] ds:0cb93b3e=00000000 05cefde3 bb00800000 mov ebx,0x8000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fc08 05ce9582 05da1e2c 0000003f 00876020 05ce46cf *----> Raw Stack Dump <----* 09f5fbe8 ff ff ff ff cc 93 3d 0c - 20 60 87 00 00 00 00 00 ......=. `...... 09f5fbf8 38 51 ca 0b 98 e4 07 18 - 90 42 73 00 38 51 ca 0b 8Q.......Bs.8Q.. 09f5fc08 3c fc f5 09 82 95 ce 05 - 2c 1e da 05 3f 00 00 00 <.......,...?... 09f5fc18 20 60 87 00 cf 46 ce 05 - cc 93 3d 0c 0d 4b c6 05 `...F....=..K.. 09f5fc28 cc 93 3d 0c b0 ab 3d 0c - d0 90 3d 0c cc 93 3d 0c ..=...=...=...=. 09f5fc38 01 00 3d 0c 48 fc f5 09 - 7f 4a c6 05 b0 ab 3d 0c ..=.H....J....=. 09f5fc48 70 fc f5 09 42 7d bf 05 - 01 00 00 00 70 90 3d 0c p...B}......p.=. 09f5fc58 a0 f0 3d 0c b0 ab 3d 0c - b0 ab 3d 0c b4 fc f5 09 ..=...=...=..... 09f5fc68 f9 64 cf 05 00 00 00 00 - 7c fc f5 09 af 92 c6 05 .d......|....... 09f5fc78 a0 f0 3d 0c 88 fc f5 09 - 52 94 c6 05 a0 f0 3d 0c ..=.....R.....=. 09f5fc88 94 fc f5 09 0f 94 c6 05 - a0 f0 3d 0c c0 fc f5 09 ..........=..... 09f5fc98 af 93 bf 05 01 00 00 00 - f0 fc f5 09 f0 ab 3d 0c ..............=. 09f5fca8 a0 f0 3d 0c a0 f0 3d 0c - a0 f0 3d 0c 08 fd f5 09 ..=...=...=..... 09f5fcb8 86 67 cf 05 00 00 00 00 - cc fc f5 09 cf 01 c0 05 .g.............. 09f5fcc8 f0 ab 3d 0c f0 fc f5 09 - 08 12 cc 05 01 00 00 00 ..=............. 09f5fcd8 f0 61 c8 0b 02 f8 3d 0c - f0 ab 3d 0c f0 ab 3d 0c .a....=...=...=. 09f5fce8 90 94 3d 0c f0 ab 3d 0c - fc fc f5 09 65 0e cc 05 ..=...=.....e... 09f5fcf8 02 f8 3d 0c 14 fd f5 09 - 5e 02 c0 05 e0 f7 3d 0c ..=.....^.....=. 09f5fd08 68 fd f5 09 69 6f cf 05 - 00 00 00 00 20 fd f5 09 h...io...... ... 09f5fd18 0f 02 c0 05 e0 f7 3d 0c - 74 fd f5 09 9b 56 c8 05 ......=.t....V.. State Dump for Thread Id 0x7c eax=007f2db0 ebx=00000001 ecx=007f2db0 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a05fd1c ebp=0a05fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0af4e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a05fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a05fd2c 20 00 00 00 c0 7e 87 00 - c0 7e 87 00 c0 03 00 00 ....~...~...... 0a05fd3c 01 00 00 00 64 fd 05 0a - ba db 00 10 c4 00 00 00 ....d........... 0a05fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a05fd5c 01 00 00 00 00 00 00 00 - 80 fd 05 0a e4 9a 00 10 ................ 0a05fd6c e8 fd 05 0a ff ff ff ff - 12 a7 05 10 00 00 7d 00 ..............}. 0a05fd7c 00 18 87 00 a0 fd 05 0a - 00 9c 00 10 47 15 ff ff ............G... 0a05fd8c e8 fd 05 0a b4 fd 05 0a - ff ff ff ff ec fd 05 0a ................ 0a05fd9c ff ff ff ff 20 fe 05 0a - 89 97 23 06 e8 fd 05 0a .... .....#..... 0a05fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 05 0a G............... 0a05fdbc 02 80 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0a05fdcc 4c 41 91 00 38 f3 27 06 - 90 4e 7e 00 f0 c5 7d 00 LA..8.'..N~...}. 0a05fddc 1c 03 00 00 0b 00 00 00 - 05 00 02 10 f1 06 01 10 ................ 0a05fdec 00 00 00 00 04 00 84 01 - f4 4e 7e 00 00 01 01 10 .........N~..... 0a05fdfc 00 04 87 00 84 ff 05 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a05fe0c 20 00 00 00 74 56 7f 00 - 24 7e 7f 00 28 03 00 00 ...tV..$~..(... 0a05fe1c 99 ff ff ff 84 ff 05 0a - 95 f5 00 10 00 00 00 00 ................ 0a05fe2c 20 00 00 00 c0 7e 87 00 - c0 7e 87 00 1e 00 00 00 ....~...~...... 0a05fe3c 00 00 00 00 0c ff 05 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a05fe4c ff ff ff ff 78 fe 05 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7d eax=1001537f ebx=00877df0 ecx=00000000 edx=00000000 esi=0a66fdb0 edi=00000000 eip=77f6793f esp=0a66fd78 ebp=0a66fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b55e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a66fdd4 062373cb 00000308 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x7e eax=1001537f ebx=00000001 ecx=77f669c8 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=0a76fd74 ebp=0a76fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b65e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7f eax=00001487 ebx=00000000 ecx=10021487 edx=00000000 esi=00000384 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000384 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 84 03 00 00 - 00 00 00 00 00 00 00 00 ...w............ 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 84 03 00 00 .z.. ...AO.w.... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 84 03 00 00 ........*.#..... 0a86f9c4 ff ff ff ff 20 77 61 69 - 84 03 00 00 63 5f 74 68 .... wai....c_th 0a86f9d4 00 00 61 64 a8 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a8 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x80 eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000348 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000348 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x81 eax=00000052 ebx=00877860 ecx=0aa6fda8 edx=00000000 esi=000002fc edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 000002fc 0a562000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 fc 02 00 00 - 00 00 00 00 00 00 00 00 ...w............ 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 20 56 0a 00 10 00 00 ....4.... V..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 60 78 87 00 ............`x.. 0aa6fd28 60 78 87 00 60 78 87 00 - 15 c9 f1 77 68 fd a6 0a `x..`x.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 fc 02 00 00 00 20 56 0a - 00 10 00 00 d5 0e 2c 06 ..... V.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 60 78 87 00 ....V.'.....`x.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 80 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 ....pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 60 78 87 00 60 78 87 00 pm+.....`x..`x.. State Dump for Thread Id 0x82 eax=0087f010 ebx=00877790 ecx=0087f000 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=10101010 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 00000364 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x83 eax=0b17f0cc ebx=00000001 ecx=00000002 edx=00000000 esi=000003c0 edi=00000000 eip=77f6829b esp=0b17ed5c ebp=0b17ed80 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c06d763=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17ed80 1000dbba 000003c0 ffffffff 00000001 00878f30 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0b17ed5c bc cc f1 77 c0 03 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0b17ed6c f8 fc 17 0b c0 76 87 00 - c0 76 87 00 00 00 00 00 .....v...v...... 0b17ed7c 00 00 00 00 a4 ed 17 0b - ba db 00 10 c0 03 00 00 ................ 0b17ed8c ff ff ff ff 01 00 00 00 - 30 8f 87 00 74 01 00 00 ........0...t... 0b17ed9c 01 00 00 00 00 00 00 00 - c0 ed 17 0b e4 9a 00 10 ................ 0b17edac 00 ee 17 0b ff ff ff ff - 6c 99 00 10 aa 0b 87 00 ........l....... 0b17edbc 30 8f 87 00 e0 ed 17 0b - 78 d7 23 06 ac 15 ff ff 0.......x.#..... 0b17edcc 00 ee 17 0b 00 00 00 00 - ff ff ff ff fc ed 17 0b ................ 0b17eddc fc ed 17 0b 10 ee 17 0b - 83 1e 1d 06 ac 15 00 00 ................ 0b17edec 00 ee 17 0b 00 00 00 00 - ff ff ff ff fc ed 17 0b ................ 0b17edfc 00 00 00 00 00 00 00 00 - aa 0b 81 00 20 81 7f 00 ............ ... 0b17ee0c 30 ee 17 0b 30 ee 17 0b - aa 20 1d 06 aa 0b 7f 00 0...0.... ...... 0b17ee1c 3c d3 27 06 ac 15 7f 00 - aa 0b 00 00 34 81 7f 00 <.'.........4... 0b17ee2c 00 00 17 0b 44 fd 17 0b - b8 bf 1e 06 20 02 00 00 ....D....... ... 0b17ee3c 00 00 00 00 00 00 00 00 - 00 00 00 00 ac 15 00 00 ................ 0b17ee4c 00 00 00 00 c0 76 87 00 - 03 00 00 00 00 00 00 00 .....v.......... 0b17ee5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17ee6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17ee7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17ee8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x84 eax=1001537f ebx=008775f0 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003d0 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 d0 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 f0 75 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .u.......... .'. 0b27fdd8 2f 86 23 06 d0 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 d0 03 00 00 d4 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - f0 75 87 00 f0 75 87 00 .........u...u.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 78 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....x6........<. 0b27fe98 70 36 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 p6...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 f0 75 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .u.............. State Dump for Thread Id 0x85 eax=1001537f ebx=00000000 ecx=206b636f edx=00000000 esi=00000340 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000340 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x86 eax=00000002 ebx=008773b0 ecx=00000002 edx=00000000 esi=008773b0 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x87 eax=00000000 ebx=00000000 ecx=007c81c0 edx=00000000 esi=0000033c edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 0000033c ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x88 eax=00000026 ebx=00000001 ecx=0000cff8 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x89 eax=1001537f ebx=00000001 ecx=1005b250 edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 60 2c 40 00 .5..........`,@. 0bc7fd70 70 00 01 00 98 fd c7 0b - ba db 00 10 a0 00 00 00 p............... 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bc7fd90 01 00 00 00 00 00 00 00 - b4 fd c7 0b e4 9a 00 10 ................ 0bc7fda0 00 fe c7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 90 12 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 .....2~..e...... 0bc7fe00 60 08 c7 0b 14 fe c7 0b - 92 13 40 00 a0 12 93 02 `.........@..... 0bc7fe10 01 fe c7 0b 20 fe c7 0b - 74 13 40 00 a0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - a0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 a8 8f 13 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. State Dump for Thread Id 0x8a eax=000002fc ebx=0ca7f0dc ecx=007cc9c0 edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - 10 72 87 00 a0 b9 87 00 .........r...... 0ca7f0d8 a0 b9 87 00 94 03 00 00 - a4 03 00 00 10 72 87 00 .............r.. 0ca7f0e8 a0 b9 87 00 a0 b9 87 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: (pid=101) When: 5/3/2005 @ 11:8:15.286 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 73 SPOOLSS.exe 66 RPCSS.exe 79 NDDEAGNT.exe 87 EXPLORER.exe 88 PSTORES.exe 97 hotkey.exe 99 S3TRAY.exe 101 mainapp.exe 107 DDHELP.exe 43 DRWTSN32.exe 146 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x64 eax=00000000 ebx=00000000 ecx=02930d00 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 000195b3 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - 18 dc 43 e1 a0 01 93 02 P.........C..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 a0 c5 64 80 F....t..<.....d. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6e eax=000000c0 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=00007d00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5d eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=00005e00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 a8 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 d8 34 14 00 .............4.. State Dump for Thread Id 0x5f eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x40 eax=00000000 ebx=00000001 ecx=02ec59cc edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=0002ab00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2f eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=0002ab00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x53 eax=00000000 ebx=00000001 ecx=000001f5 edx=00000000 esi=000001cc edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=0002ab00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001cc ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 cc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 34 00 00 00 ...w.H...H..4... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 cc 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 48 01 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 H............... 068ffdc0 14 fe 8f 06 ff ff ff ff - 20 69 7e 00 e0 fd 8f 06 ........ i~..... 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 a0 ea 7d 00 ...w.H...H....}. 068ffe00 84 ff 8f 06 48 07 f1 77 - 00 00 ff ff 00 00 00 00 ....H..w........ 068ffe10 18 fe 8f 06 e5 08 00 00 - 00 00 87 00 f0 68 7e 00 .............h~. 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 48 72 14 00 x...|.#P....Hr.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 70 36 14 00 1f 3e f6 77 ......<.p6...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x39 eax=089ffd8c ebx=00874660 ecx=089ffdb8 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000210 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x4c eax=40200000 ebx=008742c0 ecx=40100000 edx=08d5fbec esi=0d2aab95 edi=e0000000 eip=03488a2c esp=08d5fbe0 ebp=08d5fc00 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: 03488a1c cc int 3 03488a1d cc int 3 03488a1e cc int 3 03488a1f cc int 3 03488a20 d9c0 fld st(0) 03488a22 d9fc frndint 03488a24 dce1 fsub st(1),st 03488a26 d9c9 fxch st(1) 03488a28 d9e0 fchs 03488a2a d9f0 f2xm1 03488a2c d9e8 fld1 03488a2e dec1 faddp st(1),st 03488a30 d9fd fscale 03488a32 ddd9 fstp st(1) 03488a34 c3 ret 03488a35 8b542404 mov edx,[esp+0x4] ss:09c4e5e7=???????? 03488a39 81e200030000 and edx,0x300 03488a3f 83ca7f or edx,0x7f 03488a42 6689542406 mov [esp+0x6],dx ss:09c4e5e8=???? 03488a47 d96c2406 fldcw [esp+0x6] ss:09c4e5e7=???????? 03488a4b c3 ret 03488a4c a900000800 test eax,0x80000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fc00 0321c634 41200000 c0c950f7 0d2aab95 000000be *----> Raw Stack Dump <----* 08d5fbe0 b6 2c 48 03 7f 03 7f 03 - 8b 9f 1a 03 00 00 00 00 .,H............. 08d5fbf0 00 00 24 40 00 00 00 e0 - 1e 2a 19 c0 be 00 00 00 ..$@.....*...... 08d5fc00 1c fc d5 08 34 c6 21 03 - 00 00 20 41 f7 50 c9 c0 ....4.!... A.P.. 08d5fc10 95 ab 2a 0d be 00 00 00 - ff 35 7d 37 5c fc d5 08 ..*......5}7\... 08d5fc20 6d c9 21 03 01 c0 2a 0d - 38 d9 91 04 38 d9 91 04 m.!...*.8...8... 08d5fc30 04 00 00 00 cb 00 00 00 - 18 3c 16 42 00 00 48 42 .........<.B..HB 08d5fc40 01 00 00 00 f0 7c 2d 0d - 58 77 42 43 95 ab 2a 0d .....|-.XwBC..*. 08d5fc50 00 00 00 00 00 00 00 00 - 01 00 00 00 2c fd d5 08 ............,... 08d5fc60 da f5 21 03 b4 fc d5 08 - 38 d9 91 04 38 d9 91 04 ..!.....8...8... 08d5fc70 04 00 00 00 cb 00 00 00 - f5 01 00 00 18 3c 16 42 .............<.B 08d5fc80 00 00 48 42 01 00 00 00 - f0 7c 2d 0d 58 77 42 43 ..HB.....|-.XwBC 08d5fc90 a8 78 e7 03 f5 01 00 00 - 98 ad 29 0d 58 90 4b 03 .x........).X.K. 08d5fca0 70 3e 4e 03 00 00 48 42 - 00 00 48 42 00 00 48 42 p>N...HB..HB..HB 08d5fcb0 95 ab 2a 0d 00 00 00 e0 - 2e da 24 c0 01 00 00 00 ..*.......$..... 08d5fcc0 00 00 00 00 72 ed 4a c0 - 01 00 00 00 00 00 00 e0 ....r.J......... 08d5fcd0 31 cf 12 40 01 00 00 00 - 98 ad 29 0d 38 d9 91 04 1..@......).8... 08d5fce0 58 90 4b 03 01 00 00 00 - 00 00 00 00 ac fc d5 08 X.K............. 08d5fcf0 58 78 e7 03 a8 ff d5 08 - 6c 90 48 03 08 1f 4b 03 Xx......l.H...K. 08d5fd00 ff ff ff ff 2c fd d5 08 - 21 a5 23 03 f5 01 00 00 ....,...!.#..... 08d5fd10 2c fd d5 08 42 a5 23 03 - f5 01 00 00 f5 01 00 00 ,...B.#......... State Dump for Thread Id 0x50 eax=0d2a84a2 ebx=00000001 ecx=00000000 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x3f eax=00000000 ebx=00000001 ecx=00001589 edx=00000000 esi=0000023c edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 0000023c ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x28 eax=007e19c0 ebx=00000001 ecx=007e19c0 edx=00000000 esi=00000250 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000250 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5c eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000264 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x43 eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 00000278 ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=00000f7f ebx=00000001 ecx=fffff818 edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=00000000 ebx=00000001 ecx=00000000 edx=00000000 esi=0000025c edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 0000025c ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=0355eea8 ebx=00000001 ecx=00001000 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 0000028c ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=007fb2e0 ebx=00000001 ecx=007fb2e0 edx=00000000 esi=000002a0 edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002a0 ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=007dbbe0 ebx=00000001 ecx=00000000 edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=00000000 ebx=00000001 ecx=dd2a754b edx=00000000 esi=000001b4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=00000000 ebx=00000001 ecx=0086c740 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=09a5fdf4 ebx=00000001 ecx=007ded20 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=00000000 ebx=00000001 ecx=00848970 edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=00000001 ebx=00000001 ecx=005c1101 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7b eax=1001537f ebx=00000001 ecx=77f669c8 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=09f5fd74 ebp=09f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ae4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=00000000 ebx=00000001 ecx=0000005a edx=00000000 esi=00000174 edi=09e5fc0c eip=77f6829b esp=09e5fbf0 ebp=09e5fc14 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e5f7=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fc14 1000dbba 00000174 000000c8 00000001 00873920 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09e5fbf0 bc cc f1 77 74 01 00 00 - 01 00 00 00 0c fc e5 09 ...wt........... 09e5fc00 14 31 00 10 20 63 87 00 - 20 63 87 00 80 7b e1 ff .1.. c.. c...{.. 09e5fc10 ff ff ff ff 38 fc e5 09 - ba db 00 10 74 01 00 00 ....8.......t... 09e5fc20 c8 00 00 00 01 00 00 00 - 20 39 87 00 02 01 00 00 ........ 9...... 09e5fc30 01 00 00 00 00 00 00 00 - 54 fc e5 09 e4 9a 00 10 ........T....... 09e5fc40 ca 87 22 05 c8 00 00 00 - 54 a7 05 10 00 00 00 00 ..".....T....... 09e5fc50 20 39 87 00 74 fc e5 09 - 00 9c 00 10 65 15 00 00 9..t.......e... 09e5fc60 ca 87 22 05 88 fc e5 09 - c8 00 00 00 bc fc e5 09 .."............. 09e5fc70 c8 00 00 00 dc fc e5 09 - 6d 42 f6 04 ca 87 22 05 ........mB....". 09e5fc80 65 15 00 00 c8 00 00 00 - 00 00 00 00 bc fc e5 09 e............... 09e5fc90 14 31 00 10 20 63 87 00 - 20 63 87 00 a8 fc e5 09 .1.. c.. c...... 09e5fca0 df 3a d0 04 e4 ee 0a 05 - c4 fc e5 09 94 33 d0 04 .:...........3.. 09e5fcb0 00 00 00 00 c8 ee 0a 05 - 00 00 00 00 01 00 00 00 ................ 09e5fcc0 00 00 e5 09 d4 fc e5 09 - a7 26 d0 04 41 4e 00 00 .........&..AN.. 09e5fcd0 00 00 00 00 20 fe e5 09 - 43 c9 f5 04 20 fe e5 09 .... ...C... ... 09e5fce0 e5 ba f5 04 14 31 00 10 - 20 63 87 00 20 63 87 00 .....1.. c.. c.. 09e5fcf0 06 00 00 00 3f 00 00 00 - 14 31 00 10 d0 7b 87 00 ....?....1...{.. 09e5fd00 1c fe e5 09 20 fe e5 09 - 91 f1 00 10 20 fe e5 09 .... ....... ... 09e5fd10 0b f2 00 10 20 fd e5 09 - 00 00 00 00 00 00 00 00 .... ........... 09e5fd20 2c 20 50 72 69 6f 72 69 - 74 79 20 00 65 61 64 00 , Priority .ead. State Dump for Thread Id 0x7c eax=0c3d1160 ebx=00877e80 ecx=0c3d1160 edx=00000000 esi=00877e80 edi=ffffffff eip=05c9f510 esp=0a05f758 ebp=0a05f77c iopl=0 nv up ei pl nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206 function: 05c9f4f4 8b481a mov ecx,[eax+0x1a] ds:0d2bfb66=00000000 05c9f4f7 894dec mov [ebp-0x14],ecx ss:0af4e182=???????? 05c9f4fa 8b55ec mov edx,[ebp-0x14] ss:0af4e182=???????? 05c9f4fd 8955f0 mov [ebp-0x10],edx ss:0af4e182=???????? 05c9f500 837df000 cmp dword ptr [ebp-0x10],0x0 ss:0af4e182=???????? 05c9f504 7411 jz 05c9f517 05c9f506 6a01 push 0x1 05c9f508 8b45f0 mov eax,[ebp-0x10] ss:0af4e182=???????? 05c9f50b 8b10 mov edx,[eax] ds:0c3d1160=00000000 05c9f50d 8b4df0 mov ecx,[ebp-0x10] ss:0af4e182=???????? FAULT ->05c9f510 ff12 call dword ptr [edx] ds:00000000=???????? 05c9f512 8945e0 mov [ebp-0x20],eax ss:0af4e182=???????? 05c9f515 eb07 jmp 05c9f51e 05c9f517 c745e000000000 mov dword ptr [ebp-0x20],0x0 ss:0af4e182=???????? 05c9f51e 8b45e4 mov eax,[ebp-0x1c] ss:0af4e182=???????? 05c9f521 83781e00 cmp dword ptr [eax+0x1e],0x0 ds:0d2bfb66=00000000 05c9f525 7415 jz 05c9f53c 05c9f527 8b4de4 mov ecx,[ebp-0x1c] ss:0af4e182=???????? 05c9f52a 8b511e mov edx,[ecx+0x1e] ds:0d2bfb66=00000000 05c9f52d 8955e8 mov [ebp-0x18],edx ss:0af4e182=???????? 05c9f530 8b45e8 mov eax,[ebp-0x18] ss:0af4e182=???????? 05c9f533 50 push eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05f77c 05c5c65f 0c3d1180 0a05f7c0 05ca5131 00000001 *----> Raw Stack Dump <----* 0a05f758 01 00 00 00 80 7e 87 00 - 80 11 3d 0c 10 73 3d 0c .....~....=..s=. 0a05f768 60 11 3d 0c 60 11 3d 0c - b4 f7 05 0a 29 d2 cf 05 `.=.`.=.....)... 0a05f778 00 00 00 00 88 f7 05 0a - 5f c6 c5 05 80 11 3d 0c ........_.....=. 0a05f788 c0 f7 05 0a 31 51 ca 05 - 01 00 00 00 10 73 3d 0c ....1Q.......s=. 0a05f798 f0 fe 3c 0c b0 f7 05 0a - 10 9d 3c 0c f0 fe 3c 0c ..<.......<...<. 0a05f7a8 65 0e cc 05 80 11 3d 0c - 80 11 3d 0c ec f7 05 0a e.....=...=..... 0a05f7b8 f2 d5 cf 05 01 00 00 00 - cc f7 05 0a 5f 64 ca 05 ............_d.. 0a05f7c8 10 9d 3c 0c f8 f7 05 0a - 40 5f ca 05 01 00 00 00 ..<.....@_...... 0a05f7d8 30 4d ca 0b fc be ce 05 - e0 fd 3c 0c 10 9d 3c 0c 0M........<...<. 0a05f7e8 10 9d 3c 0c 6c f8 05 0a - c5 d6 cf 05 01 00 00 00 ..<.l........... 0a05f7f8 04 f8 05 0a 11 64 ca 05 - e0 fd 3c 0c 10 f8 05 0a .....d....<..... 0a05f808 2f 65 ca 05 e0 fd 3c 0c - 78 f8 05 0a ff 88 c8 05 /e....<.x....... 0a05f818 01 00 00 00 00 00 00 00 - 01 00 00 00 f0 fe 3c 0c ..............<. 0a05f828 10 da 3d 0c 70 c8 3d 0c - 80 86 3d 0c 00 00 00 00 ..=.p.=...=..... 0a05f838 ec ff 00 00 c0 f8 05 0a - 8f e3 cf 05 ff ff ff ff ................ 0a05f848 80 f8 05 0a 7e e1 cc 05 - e0 fd 3c 0c e0 fd 3c 0c ....~.....<...<. 0a05f858 10 da 3d 0c 10 da 3d 0c - 70 c8 3d 0c 70 c8 3d 0c ..=...=.p.=.p.=. 0a05f868 05 00 00 00 c0 f8 05 0a - ea bd cf 05 01 00 00 00 ................ 0a05f878 84 f8 05 0a 4e 8a c8 05 - 80 86 3d 0c 90 f8 05 0a ....N.....=..... 0a05f888 ef 97 c8 05 80 86 3d 0c - cc f8 05 0a 24 39 c7 05 ......=.....$9.. State Dump for Thread Id 0x7d eax=0627f338 ebx=00000001 ecx=0a150000 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a15fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a15fd2c 20 00 00 00 40 7d 87 00 - 40 7d 87 00 a0 03 00 00 ...@}..@}...... 0a15fd3c 01 00 00 00 64 fd 15 0a - ba db 00 10 c4 00 00 00 ....d........... 0a15fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a15fd5c 01 00 00 00 00 00 00 00 - 80 fd 15 0a e4 9a 00 10 ................ 0a15fd6c e8 fd 15 0a ff ff ff ff - 12 a7 05 10 00 00 7d 00 ..............}. 0a15fd7c 00 18 87 00 a0 fd 15 0a - 00 9c 00 10 47 15 ff ff ............G... 0a15fd8c e8 fd 15 0a b4 fd 15 0a - ff ff ff ff ec fd 15 0a ................ 0a15fd9c ff ff ff ff 20 fe 15 0a - 89 97 23 06 e8 fd 15 0a .... .....#..... 0a15fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 15 0a G............... 0a15fdbc 02 80 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0a15fdcc 24 dd 8f 00 38 f3 27 06 - 90 4e 7e 00 30 bc 7d 00 $...8.'..N~.0.}. 0a15fddc 08 03 00 00 0b 00 00 00 - 05 00 02 10 aa 06 01 10 ................ 0a15fdec 00 00 00 00 27 00 84 01 - 34 4b 7e 00 00 01 01 10 ....'...4K~..... 0a15fdfc 00 04 87 00 84 ff 15 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a15fe0c 10 00 00 00 34 43 7f 00 - b4 8b 7f 00 00 03 00 00 ....4C.......... 0a15fe1c 22 ff ff ff 84 ff 15 0a - 95 f5 00 10 00 00 00 00 "............... 0a15fe2c 20 00 00 00 40 7d 87 00 - 40 7d 87 00 1e 00 00 00 ...@}..@}...... 0a15fe3c 00 00 00 00 0c ff 15 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a15fe4c ff ff ff ff 78 fe 15 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7e eax=1001537f ebx=00877c70 ecx=00000000 edx=00000000 esi=0a76fdb0 edi=00000000 eip=77f6793f esp=0a76fd78 ebp=0a76fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b65e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fdd4 062373cb 00000334 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x7f eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000358 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000358 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 58 03 00 00 - 00 00 00 00 00 00 00 00 ...wX........... 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 58 03 00 00 .z.. ...AO.wX... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 58 03 00 00 ........*.#.X... 0a86f9c4 ff ff ff ff 20 77 61 69 - 58 03 00 00 63 5f 74 68 .... waiX...c_th 0a86f9d4 00 00 61 64 a7 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a7 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x80 eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000368 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000368 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x81 eax=00000052 ebx=00877750 ecx=0aa6fda8 edx=00000000 esi=00000328 edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 00000328 0a662000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 28 03 00 00 - 00 00 00 00 00 00 00 00 ...w(........... 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 20 66 0a 00 10 00 00 ....4.... f..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 50 77 87 00 ............Pw.. 0aa6fd28 50 77 87 00 50 77 87 00 - 15 c9 f1 77 68 fd a6 0a Pw..Pw.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 28 03 00 00 00 20 66 0a - 00 10 00 00 d5 0e 2c 06 (.... f.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 50 77 87 00 ....V.'.....Pw.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 60 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 `...pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 50 77 87 00 50 77 87 00 pm+.....Pw..Pw.. State Dump for Thread Id 0x82 eax=00000001 ebx=00877680 ecx=0b07ffa8 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=10101010 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 0000033c 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x83 eax=0b17f0cc ebx=00000001 ecx=00000001 edx=00000000 esi=000003a0 edi=00000000 eip=77f6829b esp=0b17f004 ebp=0b17f028 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c06da0b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17f028 1000dbba 000003a0 ffffffff 00000001 007c0f30 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0b17f004 bc cc f1 77 a0 03 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0b17f014 d0 fc 17 0b 50 74 87 00 - 50 74 87 00 00 00 00 00 ....Pt..Pt...... 0b17f024 00 00 00 00 4c f0 17 0b - ba db 00 10 a0 03 00 00 ....L........... 0b17f034 ff ff ff ff 01 00 00 00 - 30 0f 7c 00 74 01 00 00 ........0.|.t... 0b17f044 01 00 00 00 00 00 00 00 - 68 f0 17 0b e4 9a 00 10 ........h....... 0b17f054 a8 f0 17 0b ff ff ff ff - 6c 99 00 10 08 0b 87 00 ........l....... 0b17f064 30 0f 7c 00 88 f0 17 0b - 78 d7 23 06 ac 15 ff ff 0.|.....x.#..... 0b17f074 a8 f0 17 0b 00 00 00 00 - ff ff ff ff a4 f0 17 0b ................ 0b17f084 a4 f0 17 0b b8 f0 17 0b - 83 1e 1d 06 ac 15 00 00 ................ 0b17f094 a8 f0 17 0b 00 00 00 00 - ff ff ff ff a4 f0 17 0b ................ 0b17f0a4 00 00 00 00 00 00 17 0b - 08 0b 24 06 60 48 7f 00 ..........$.`H.. 0b17f0b4 dc f0 17 0b dc f0 17 0b - 8b 1f 1d 06 08 0b 7f 00 ................ 0b17f0c4 20 d3 27 06 ac 15 7f 00 - 08 0b 17 0b 74 48 7f 00 .'.........tH.. 0b17f0d4 02 00 00 00 02 00 00 00 - 40 fd 17 0b 10 ec 1f 06 ........@....... 0b17f0e4 e9 07 2b 06 00 00 00 00 - 00 00 00 00 00 00 2b 06 ..+...........+. 0b17f0f4 8e 89 2b 06 ac 15 00 00 - 00 00 00 00 50 74 87 00 ..+.........Pt.. 0b17f104 00 00 00 00 02 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17f114 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17f124 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17f134 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x84 eax=1001537f ebx=00877380 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003c4 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 c4 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 80 73 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .s.......... .'. 0b27fdd8 2f 86 23 06 c4 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 c4 03 00 00 c8 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - 80 73 87 00 80 73 87 00 .........s...s.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 78 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....x6........<. 0b27fe98 70 36 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 p6...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 80 73 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .s.............. State Dump for Thread Id 0x85 eax=1001537f ebx=00000000 ecx=206b636f edx=00000000 esi=00000394 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000394 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x86 eax=00000002 ebx=00877140 ecx=00000002 edx=00000000 esi=00877140 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x87 eax=00001222 ebx=00000000 ecx=10021223 edx=00000000 esi=00000398 edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 00000398 ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x88 eax=00000026 ebx=00000001 ecx=0000cff8 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x89 eax=00000002 ebx=00000001 ecx=00000200 edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 60 2c 40 00 .5..........`,@. 0bc7fd70 70 00 01 00 98 fd c7 0b - ba db 00 10 a0 00 00 00 p............... 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bc7fd90 01 00 00 00 00 00 00 00 - b4 fd c7 0b e4 9a 00 10 ................ 0bc7fda0 00 fe c7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 90 12 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 .....2~..e...... 0bc7fe00 60 08 c7 0b 14 fe c7 0b - 92 13 40 00 a0 12 93 02 `.........@..... 0bc7fe10 01 fe c7 0b 20 fe c7 0b - 74 13 40 00 a0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - a0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 a8 8f 13 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. State Dump for Thread Id 0x8a eax=1001537f ebx=0ca7f0dc ecx=00000000 edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - b0 8d 87 00 00 ba 87 00 ................ 0ca7f0d8 00 ba 87 00 f4 03 00 00 - b8 03 00 00 b0 8d 87 00 ................ 0ca7f0e8 00 ba 87 00 00 ba 87 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: (pid=101) When: 5/4/2005 @ 18:21:21.332 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 72 SPOOLSS.exe 67 RPCSS.exe 85 NDDEAGNT.exe 90 EXPLORER.exe 87 PSTORES.exe 97 hotkey.exe 99 S3TRAY.exe 101 mainapp.exe 106 DDHELP.exe 78 DRWTSN32.exe 146 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x64 eax=02920000 ebx=00000000 ecx=77a2ea48 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 0001dbf5 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - 67 20 48 02 a0 01 93 02 P.......g H..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 20 80 68 80 ............ .h. 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 40 37 65 80 F....t..<...@7e. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6d eax=000000c0 ebx=00000001 ecx=00000868 edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=00003200 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=0000c600 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 a8 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 d8 34 14 00 .............4.. State Dump for Thread Id 0x39 eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2d eax=00000261 ebx=00000001 ecx=00000003 edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x4b eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2f eax=0000a7e9 ebx=008748d0 ecx=00000000 edx=00000001 esi=00000055 edi=77f1ccbc eip=032e6b96 esp=068ff930 ebp=068ff934 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 032e6b79 85d2 test edx,edx 032e6b7b 7402 jz 032e6b7f 032e6b7d eb02 jmp 032e6b81 032e6b7f ebde jmp 032e6b5f 032e6b81 680c1cb800 push 0xb81c0c 032e6b86 e8a368ffff call 032dd42e 032e6b8b 83c404 add esp,0x4 032e6b8e 234508 and eax,[ebp+0x8] ss:077ee33a=00000000 032e6b91 8b4dfc mov ecx,[ebp-0x4] ss:077ee33a=00000000 032e6b94 d3e8 shr eax,cl 032e6b96 8be5 mov esp,ebp 032e6b98 5d pop ebp 032e6b99 c3 ret 032e6b9a 55 push ebp 032e6b9b 8bec mov ebp,esp 032e6b9d 51 push ecx 032e6b9e c745fc00000000 mov dword ptr [ebp-0x4],0x0 ss:077ee33a=00000000 032e6ba5 c745fc00000000 mov dword ptr [ebp-0x4],0x0 ss:077ee33a=00000000 032e6bac eb09 jmp 032e6bb7 032e6bae 8b45fc mov eax,[ebp-0x4] ss:077ee33a=00000000 032e6bb1 83c001 add eax,0x1 032e6bb4 8945fc mov [ebp-0x4],eax ss:077ee33a=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ff934 033bfc05 07ffffff 77f1ccbc 00000055 008748d0 *----> Raw Stack Dump <----* 068ff930 00 00 00 00 5c f9 8f 06 - 05 fc 3b 03 ff ff ff 07 ....\.....;..... 068ff940 bc cc f1 77 55 00 00 00 - d0 48 87 00 82 04 00 00 ...wU....H...... 068ff950 00 fa 00 00 fa a7 00 00 - 00 00 00 00 f8 f9 8f 06 ................ 068ff960 68 89 35 03 fc a9 f1 d2 - 4d 62 60 3f bc cc f1 77 h.5.....Mb`?...w 068ff970 d0 48 87 00 d0 48 87 00 - 00 00 00 00 00 00 00 00 .H...H.......... 068ff980 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 068ff990 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 068ff9a0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 068ff9b0 00 00 00 00 14 00 00 00 - 55 00 00 00 00 00 00 00 ........U....... 068ff9c0 00 00 00 00 06 00 00 00 - fc a9 f1 d2 4d 62 60 3f ............Mb`? 068ff9d0 20 00 00 00 40 00 00 00 - 01 00 00 00 00 00 00 00 ...@........... 068ff9e0 00 00 00 00 00 00 00 00 - 00 00 00 00 01 00 00 00 ................ 068ff9f0 01 00 00 00 01 00 00 00 - 80 fb 8f 06 77 45 35 03 ............wE5. 068ffa00 00 00 8f 06 40 cc 25 01 - 00 00 00 00 c4 fb 8f 06 ....@.%......... 068ffa10 00 00 00 00 00 00 00 00 - bc cc f1 77 d0 48 87 00 ...........w.H.. 068ffa20 d0 48 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .H.............. 068ffa30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 068ffa40 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 068ffa50 00 00 00 00 00 00 00 00 - 7f 13 bb 41 7c fa 8f 06 ...........A|... 068ffa60 00 00 00 00 00 00 00 00 - 7f 03 bb 41 bc cc f1 77 ...........A...w State Dump for Thread Id 0x28 eax=00000000 ebx=00874660 ecx=000f1701 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000210 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x5d eax=049224f0 ebx=008742c0 ecx=034f2b00 edx=00000000 esi=03e778a8 edi=00806a34 eip=77f67f27 esp=08d5fd68 ebp=08d5fd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReleaseSemaphore 77f67f1c b88c000000 mov eax,0x8c 77f67f21 8d542404 lea edx,[esp+0x4] ss:09c4e76f=???????? 77f67f25 cd2e int 2e 77f67f27 c20c00 ret 0xc 77f67f2a 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd94 1000996c 00870ce4 00000003 08d5fe20 00875130 ntdll!ZwReleaseSemaphore State Dump for Thread Id 0x5f eax=0d2a84a2 ebx=00000001 ecx=00000000 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x56 eax=00802414 ebx=00000001 ecx=00802414 edx=00000000 esi=0000023c edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 0000023c ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5c eax=00e0d9c6 ebx=00000001 ecx=000011f1 edx=00000000 esi=00000250 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000250 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x3b eax=009b0f7f ebx=00000001 ecx=009b3278 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000264 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x42 eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 00000278 ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=0d29ad92 ebx=00000001 ecx=03bbaf38 edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=049223d0 ebx=00000001 ecx=0945fcc4 edx=00000000 esi=0000025c edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 0000025c ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=09550000 ebx=00000001 ecx=00000007 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 0000028c ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=0965fd04 ebx=00000001 ecx=0965fd04 edx=00000000 esi=000002a0 edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002a0 ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=007db9b0 ebx=00000001 ecx=00000000 edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=00000000 ebx=00000001 ecx=00000000 edx=00000000 esi=000001b4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=000005d0 ebx=00000001 ecx=007d7360 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=00000021 ebx=00000001 ecx=00000021 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=00000000 ebx=00000001 ecx=00803b90 edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=00000001 ebx=00000001 ecx=01725001 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=00000001 ebx=00000001 ecx=00001a01 edx=00000000 esi=00000174 edi=09e5fc0c eip=77f6829b esp=09e5fbf0 ebp=09e5fc14 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e5f7=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fc14 1000dbba 00000174 000000c8 00000001 00873920 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09e5fbf0 bc cc f1 77 74 01 00 00 - 01 00 00 00 0c fc e5 09 ...wt........... 09e5fc00 14 31 00 10 20 63 87 00 - 20 63 87 00 80 7b e1 ff .1.. c.. c...{.. 09e5fc10 ff ff ff ff 38 fc e5 09 - ba db 00 10 74 01 00 00 ....8.......t... 09e5fc20 c8 00 00 00 01 00 00 00 - 20 39 87 00 02 01 00 00 ........ 9...... 09e5fc30 01 00 00 00 00 00 00 00 - 54 fc e5 09 e4 9a 00 10 ........T....... 09e5fc40 ca 87 22 05 c8 00 00 00 - 54 a7 05 10 00 00 00 00 ..".....T....... 09e5fc50 20 39 87 00 74 fc e5 09 - 00 9c 00 10 65 15 00 00 9..t.......e... 09e5fc60 ca 87 22 05 88 fc e5 09 - c8 00 00 00 bc fc e5 09 .."............. 09e5fc70 c8 00 00 00 dc fc e5 09 - 6d 42 f6 04 ca 87 22 05 ........mB....". 09e5fc80 65 15 00 00 c8 00 00 00 - 00 00 00 00 bc fc e5 09 e............... 09e5fc90 14 31 00 10 20 63 87 00 - 20 63 87 00 a8 fc e5 09 .1.. c.. c...... 09e5fca0 df 3a d0 04 e4 ee 0a 05 - c4 fc e5 09 94 33 d0 04 .:...........3.. 09e5fcb0 00 00 00 00 c8 ee 0a 05 - 00 00 00 00 01 00 00 00 ................ 09e5fcc0 00 00 e5 09 d4 fc e5 09 - a7 26 d0 04 5a 00 00 00 .........&..Z... 09e5fcd0 00 00 00 00 20 fe e5 09 - 43 c9 f5 04 20 fe e5 09 .... ...C... ... 09e5fce0 e5 ba f5 04 14 31 00 10 - 20 63 87 00 20 63 87 00 .....1.. c.. c.. 09e5fcf0 06 00 00 00 3f 00 00 00 - 14 31 00 10 60 7d 87 00 ....?....1..`}.. 09e5fd00 1c fe e5 09 20 fe e5 09 - 91 f1 00 10 20 fe e5 09 .... ....... ... 09e5fd10 0b f2 00 10 20 fd e5 09 - 00 00 00 00 00 00 00 00 .... ........... 09e5fd20 2c 20 50 72 69 6f 72 69 - 74 79 20 00 65 61 64 00 , Priority .ead. State Dump for Thread Id 0x7b eax=0bba39c8 ebx=00000f9f ecx=00000000 edx=0c3d205c esi=0000000a edi=000000ff eip=05cefc4a esp=09f5f7d8 ebp=09f5f7f8 iopl=0 nv up ei pl nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206 function: 05cefc2c 4c dec esp 05cefc2d 0104f7 add [edi+esi*8],eax ds:0000000a=???????? 05cefc30 d7 xlat 05cefc31 21bcb0c4000000 and [eax+esi*4+0xc4],edi ds:000000ce=???????? 05cefc38 fe09 dec byte ptr [ecx] ds:00000000=?? 05cefc3a 7506 jnz 05cefc42 05cefc3c 8b4d08 mov ecx,[ebp+0x8] ss:0ae4e1fe=???????? 05cefc3f 217904 and [ecx+0x4],edi ds:00eeea06=af6c00f4 05cefc42 8b4c1308 mov ecx,[ebx+edx+0x8] ds:0d2c0a63=00000000 05cefc46 8b7c1304 mov edi,[ebx+edx+0x4] ds:0d2c0a63=00000000 FAULT ->05cefc4a 897904 mov [ecx+0x4],edi ds:00eeea06=af6c00f4 05cefc4d 8b4c1304 mov ecx,[ebx+edx+0x4] ds:0d2c0a63=00000000 05cefc51 8b7c1308 mov edi,[ebx+edx+0x8] ds:0d2c0a63=00000000 05cefc55 035df8 add ebx,[ebp-0x8] ss:0ae4e1fe=???????? 05cefc58 897908 mov [ecx+0x8],edi ds:00eeea06=af6c00f4 05cefc5b 895df4 mov [ebp-0xc],ebx ss:0ae4e1fe=???????? 05cefc5e 8bfb mov edi,ebx 05cefc60 c1ff04 sar edi,0x4 05cefc63 4f dec edi 05cefc64 83ff3f cmp edi,0x3f 05cefc67 7603 jbe 05cefc6c 05cefc69 6a3f push 0x3f *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5f7f8 05ce9582 05da1e2c 0000003f 00876020 05ce46cf *----> Raw Stack Dump <----* 09f5f7d8 ff ff ff ff 60 20 3d 0c - 20 60 87 00 00 00 00 00 ....` =. `...... 09f5f7e8 34 4f ba 0b 9f 0f 00 00 - 00 ff ff ff 21 00 00 00 4O..........!... 09f5f7f8 78 f8 f5 09 82 95 ce 05 - 2c 1e da 05 3f 00 00 00 x.......,...?... 09f5f808 20 60 87 00 cf 46 ce 05 - 60 20 3d 0c a6 89 c8 05 `...F..` =..... 09f5f818 60 20 3d 0c 00 00 00 00 - 40 9f 3d 0c 00 cb 3d 0c ` =.....@.=...=. 09f5f828 90 60 3d 0c b0 61 3d 0c - e0 59 3d 0c 00 00 00 00 .`=..a=..Y=..... 09f5f838 ec ff 00 00 60 20 3d 0c - d0 1b 3d 0c 40 01 3d 0c ....` =...=.@.=. 09f5f848 40 9f 3d 0c 40 9f 3d 0c - 00 cb 3d 0c 00 cb 3d 0c @.=.@.=...=...=. 09f5f858 90 60 3d 0c 90 60 3d 0c - b0 61 3d 0c b0 61 3d 0c .`=..`=..a=..a=. 09f5f868 05 00 00 00 c0 f8 f5 09 - ea bd cf 05 01 00 00 00 ................ 09f5f878 84 f8 f5 09 4e 8a c8 05 - e0 59 3d 0c 90 f8 f5 09 ....N....Y=..... 09f5f888 ef 97 c8 05 e0 59 3d 0c - cc f8 f5 09 24 39 c7 05 .....Y=.....$9.. 09f5f898 01 00 00 00 09 00 00 00 - 2c 1e da 05 a0 15 db 05 ........,....... 09f5f8a8 20 60 87 00 cf 46 ce 05 - e0 59 3d 0c e0 59 3d 0c `...F...Y=..Y=. 09f5f8b8 80 53 3d 0c a0 71 3d 0c - 3c fa f5 09 61 b2 cf 05 .S=..q=.<...a... 09f5f8c8 ff ff ff ff 78 f9 f5 09 - 1d 1b c7 05 fc fa f5 09 ....x........... 09f5f8d8 20 54 3d 0c 29 00 00 00 - a0 15 db 05 20 54 3d 0c T=.)....... T=. 09f5f8e8 78 27 3d 0c bc f9 f5 09 - 10 c1 c3 05 f8 f9 f5 09 x'=............. 09f5f8f8 20 54 3d 0c 3f 00 00 00 - ff ff ff ff 20 54 3d 0c T=.?....... T=. 09f5f908 20 60 87 00 20 00 00 00 - 0c 5d 3d 0c 24 f9 f5 09 `.. ....]=.$... State Dump for Thread Id 0x7c eax=1001537f ebx=00000001 ecx=77f669c8 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=0a05fd74 ebp=0a05fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0af4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7d eax=00000001 ebx=00000001 ecx=0a15fd48 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a15fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a15fd2c 20 00 00 00 c0 7c 87 00 - c0 7c 87 00 d0 03 00 00 ....|...|...... 0a15fd3c 01 00 00 00 64 fd 15 0a - ba db 00 10 c4 00 00 00 ....d........... 0a15fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a15fd5c 01 00 00 00 00 00 00 00 - 80 fd 15 0a e4 9a 00 10 ................ 0a15fd6c e8 fd 15 0a ff ff ff ff - 12 a7 05 10 00 00 7d 00 ..............}. 0a15fd7c 00 18 87 00 a0 fd 15 0a - 00 9c 00 10 47 15 ff ff ............G... 0a15fd8c e8 fd 15 0a b4 fd 15 0a - ff ff ff ff ec fd 15 0a ................ 0a15fd9c ff ff ff ff 20 fe 15 0a - 89 97 23 06 e8 fd 15 0a .... .....#..... 0a15fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 15 0a G............... 0a15fdbc 02 80 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0a15fdcc 04 00 00 00 38 f3 27 06 - 90 4e 7e 00 00 ca 7d 00 ....8.'..N~...}. 0a15fddc 18 03 00 00 0b 00 00 00 - 38 9d 02 10 e4 06 01 10 ........8....... 0a15fdec 00 00 00 00 04 00 84 01 - f4 4e 7e 00 00 01 01 10 .........N~..... 0a15fdfc 00 04 87 00 84 ff 15 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a15fe0c 20 00 00 00 64 53 7f 00 - 64 3b 7f 00 14 03 00 00 ...dS..d;...... 0a15fe1c 99 ff ff ff 84 ff 15 0a - 95 f5 00 10 00 00 00 00 ................ 0a15fe2c 20 00 00 00 c0 7c 87 00 - c0 7c 87 00 1e 00 00 00 ....|...|...... 0a15fe3c 00 00 00 00 0c ff 15 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a15fe4c ff ff ff ff 78 fe 15 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7e eax=00000000 ebx=00877bf0 ecx=00000001 edx=00000000 esi=0a76fdb0 edi=00000000 eip=77f6793f esp=0a76fd78 ebp=0a76fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b65e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fdd4 062373cb 0000030c 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x7f eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000358 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000358 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 58 03 00 00 - 00 00 00 00 00 00 00 00 ...wX........... 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 58 03 00 00 .z.. ...AO.wX... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 58 03 00 00 ........*.#.X... 0a86f9c4 ff ff ff ff 20 77 61 69 - 58 03 00 00 63 5f 74 68 .... waiX...c_th 0a86f9d4 00 00 61 64 a7 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a7 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x80 eax=0000019a ebx=00000000 ecx=1002019a edx=00000000 esi=00000368 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000368 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x81 eax=00000052 ebx=00877750 ecx=0aa6fda8 edx=00000000 esi=00000334 edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 00000334 0a662000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 34 03 00 00 - 00 00 00 00 00 00 00 00 ...w4........... 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 20 66 0a 00 10 00 00 ....4.... f..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 50 77 87 00 ............Pw.. 0aa6fd28 50 77 87 00 50 77 87 00 - 15 c9 f1 77 68 fd a6 0a Pw..Pw.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 34 03 00 00 00 20 66 0a - 00 10 00 00 d5 0e 2c 06 4.... f.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 50 77 87 00 ....V.'.....Pw.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 8c 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 ....pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 50 77 87 00 50 77 87 00 pm+.....Pw..Pw.. State Dump for Thread Id 0x82 eax=00000001 ebx=00877680 ecx=0b07ffa8 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=10101010 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 0000033c 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x83 eax=0b17f0cc ebx=00000001 ecx=00000002 edx=00000000 esi=000003d0 edi=00000000 eip=77f6829b esp=0b17ed5c ebp=0b17ed80 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c06d763=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17ed80 1000dbba 000003d0 ffffffff 00000001 00878f30 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0b17ed5c bc cc f1 77 d0 03 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0b17ed6c f8 fc 17 0b b0 75 87 00 - b0 75 87 00 00 00 00 00 .....u...u...... 0b17ed7c 00 00 00 00 a4 ed 17 0b - ba db 00 10 d0 03 00 00 ................ 0b17ed8c ff ff ff ff 01 00 00 00 - 30 8f 87 00 74 01 00 00 ........0...t... 0b17ed9c 01 00 00 00 00 00 00 00 - c0 ed 17 0b e4 9a 00 10 ................ 0b17edac 00 ee 17 0b ff ff ff ff - 6c 99 00 10 37 0b 87 00 ........l...7... 0b17edbc 30 8f 87 00 e0 ed 17 0b - 78 d7 23 06 ac 15 ff ff 0.......x.#..... 0b17edcc 00 ee 17 0b 00 00 00 00 - ff ff ff ff fc ed 17 0b ................ 0b17eddc fc ed 17 0b 10 ee 17 0b - 83 1e 1d 06 ac 15 00 00 ................ 0b17edec 00 ee 17 0b 00 00 00 00 - ff ff ff ff fc ed 17 0b ................ 0b17edfc 00 00 00 00 00 00 00 00 - 37 0b 17 0b c0 53 7f 00 ........7....S.. 0b17ee0c 30 ee 17 0b 30 ee 17 0b - aa 20 1d 06 37 0b 7f 00 0...0.... ..7... 0b17ee1c 3c d3 27 06 ac 15 7f 00 - 37 0b 00 00 d4 53 7f 00 <.'.....7....S.. 0b17ee2c 38 ee 17 0b 44 fd 17 0b - b8 bf 1e 06 e8 61 00 00 8...D........a.. 0b17ee3c ff ff 00 00 00 00 00 00 - 01 00 00 00 ac 15 00 00 ................ 0b17ee4c 00 00 00 00 b0 75 87 00 - 03 00 00 00 00 00 00 00 .....u.......... 0b17ee5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17ee6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17ee7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17ee8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x84 eax=1001537f ebx=008774e0 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003e0 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 e0 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 e0 74 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .t.......... .'. 0b27fdd8 2f 86 23 06 e0 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 e0 03 00 00 e4 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - e0 74 87 00 e0 74 87 00 .........t...t.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 78 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....x6........<. 0b27fe98 70 36 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 p6...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 e0 74 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .t.............. State Dump for Thread Id 0x85 eax=1001537f ebx=00000000 ecx=206b636f edx=00000000 esi=00000380 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000380 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x86 eax=00000000 ebx=008772a0 ecx=0000000c edx=00000000 esi=008772a0 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x87 eax=1001537f ebx=00000000 ecx=00000000 edx=00000000 esi=00000384 edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 00000384 ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x88 eax=00000026 ebx=00000001 ecx=0000cff8 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bb7fd50 bc cc f1 77 40 01 00 00 - 01 00 00 00 00 00 00 00 ...w@........... 0bb7fd60 65 00 00 00 00 71 87 00 - 00 71 87 00 00 00 00 00 e....q...q...... 0bb7fd70 d0 fd b7 0b 98 fd b7 0b - ba db 00 10 40 01 00 00 ............@... 0bb7fd80 ff ff ff ff 01 00 00 00 - d0 3a 87 00 34 00 00 00 .........:..4... 0bb7fd90 01 00 00 00 00 00 00 00 - b4 fd b7 0b e4 9a 00 10 ................ 0bb7fda0 00 fe b7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bb7fdb0 d0 3a 87 00 d4 fd b7 0b - 00 9c 00 10 62 15 ff ff .:..........b... 0bb7fdc0 00 fe b7 0b e8 fd b7 0b - ff ff ff ff fc fd b7 0b ................ 0bb7fdd0 ff ff ff ff 04 fe b7 0b - 5c cc 22 06 00 fe b7 0b ........\."..... 0bb7fde0 62 15 27 06 ff ff 00 00 - 00 00 00 00 fc fd b7 0b b.'............. 0bb7fdf0 d0 0d 2c 06 a0 4d 7e 00 - 01 65 01 10 00 00 87 00 ..,..M~..e...... 0bb7fe00 70 08 b7 0b 14 fe b7 0b - 92 c9 22 06 f0 0d 2c 06 p........."...,. 0bb7fe10 01 fe b7 0b 20 fe b7 0b - 74 c9 22 06 f0 0d 2c 06 .... ...t."...,. 0bb7fe20 84 ff b7 0b 95 f5 00 10 - f0 0d 2c 06 65 00 00 00 ..........,.e... 0bb7fe30 00 71 87 00 00 71 87 00 - 0f 00 00 00 00 00 00 00 .q...q.......... 0bb7fe40 0c ff b7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bb7fe50 78 fe b7 0b 7c 13 23 50 - 07 00 00 00 e0 f7 15 00 x...|.#P........ 0bb7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff b7 0b ..#P............ 0bb7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe b7 0b 00 00 00 00 ..=............. 0bb7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. State Dump for Thread Id 0x89 eax=007b7ad8 ebx=00000001 ecx=0000019e edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bd7fd50 ebp=0bd7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cc6e757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bd7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bd7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bd7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 60 2c 40 00 .5..........`,@. 0bd7fd70 72 00 01 00 98 fd d7 0b - ba db 00 10 a0 00 00 00 r............... 0bd7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bd7fd90 01 00 00 00 00 00 00 00 - b4 fd d7 0b e4 9a 00 10 ................ 0bd7fda0 00 fe d7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bd7fdb0 b0 19 87 00 d4 fd d7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bd7fdc0 00 fe d7 0b e8 fd d7 0b - ff ff ff ff fc fd d7 0b ................ 0bd7fdd0 ff ff ff ff 04 fe d7 0b - cc 45 40 00 00 fe d7 0b .........E@..... 0bd7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd d7 0b D.@............. 0bd7fdf0 30 13 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 0....2~..e...... 0bd7fe00 60 08 d7 0b 14 fe d7 0b - 92 13 40 00 40 13 93 02 `.........@.@... 0bd7fe10 01 fe d7 0b 20 fe d7 0b - 74 13 40 00 40 13 93 02 .... ...t.@.@... 0bd7fe20 84 ff d7 0b 95 f5 00 10 - 40 13 93 02 d0 35 87 00 ........@....5.. 0bd7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bd7fe40 0c ff d7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bd7fe50 78 fe d7 0b 7c 13 23 50 - 07 00 00 00 a8 8f 13 00 x...|.#P........ 0bd7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff d7 0b ..#P............ 0bd7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe d7 0b 02 00 00 00 ..=............. 0bd7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. State Dump for Thread Id 0x8a eax=00000000 ebx=0ca7f0dc ecx=007d0140 edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - 00 71 87 00 c0 b9 87 00 .........q...... 0ca7f0d8 c0 b9 87 00 58 01 00 00 - b8 03 00 00 00 71 87 00 ....X........q.. 0ca7f0e8 c0 b9 87 00 c0 b9 87 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: (pid=98) When: 12/1/2005 @ 11:14:9.815 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 72 SPOOLSS.exe 69 NDDEAGNT.exe 61 EXPLORER.exe 85 RPCSS.exe 63 hotkey.exe 96 S3TRAY.exe 98 mainapp.exe 100 PSTORES.exe 108 DDHELP.exe 140 DRWTSN32.exe 146 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x61 eax=02920000 ebx=00000000 ecx=77a2ea48 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 000190e3 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - 98 87 44 e1 a0 01 93 02 P.........D..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 80 53 65 80 F....t..<....Se. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x49 eax=000000c0 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=0000d600 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5c eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=00014b00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 a8 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 d8 34 14 00 .............4.. State Dump for Thread Id 0x5d eax=000802b8 ebx=00000001 ecx=0d3a0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x53 eax=00000000 ebx=00000001 ecx=007e09a4 edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5b eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2f eax=011fabe0 ebx=00000001 ecx=00000707 edx=00000000 esi=000001cc edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001cc ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 cc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 3c 00 00 00 ...w.H...H..<... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 cc 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 45 01 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 E............... 068ffdc0 14 fe 8f 06 ff ff ff ff - b0 37 7f 00 e0 fd 8f 06 .........7...... 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 80 6f 7e 00 ...w.H...H...o~. 068ffe00 84 ff 8f 06 d0 08 f1 77 - 00 00 ff ff 00 00 00 00 .......w........ 068ffe10 18 fe 8f 06 e6 0a 00 00 - 00 00 87 00 60 37 7f 00 ............`7.. 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 48 72 14 00 x...|.#P....Hr.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 70 36 14 00 1f 3e f6 77 ......<.p6...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x3e eax=00000001 ebx=00874660 ecx=089fffa8 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000210 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x41 eax=00000082 ebx=008742c0 ecx=04920fc0 edx=0d29add9 esi=03e77858 edi=03e778a8 eip=00000001 esp=08d5fd4c ebp=0323d562 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd48 04920fc0 04921100 00000752 04922750 0d29add9 State Dump for Thread Id 0x58 eax=0d2a84a2 ebx=00000001 ecx=00000000 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x4b eax=00000000 ebx=00000001 ecx=00001e01 edx=00000000 esi=0000023c edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 0000023c ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x28 eax=0364f3b0 ebx=00000001 ecx=0364f3b0 edx=00000000 esi=00000250 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000250 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5e eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000264 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 00000278 ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=40200000 ebx=00000001 ecx=0366eee8 edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=00000001 ebx=00000001 ecx=0000ffff edx=00000000 esi=0000025c edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 0000025c ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=00000000 ebx=00000001 ecx=0955fe18 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 0000028c ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=00000000 ebx=00000001 ecx=00000601 edx=00000000 esi=000002a0 edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002a0 ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=007e51c0 ebx=00000001 ecx=00000000 edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=007efa90 ebx=00000001 ecx=007efa90 edx=00000000 esi=000001b4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=00000000 ebx=00000001 ecx=00861300 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=00000000 ebx=00000001 ecx=00000b01 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000000 ebx=00000001 ecx=007cf620 edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=00000299 ebx=00000001 ecx=007ca2c0 edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=00000001 ebx=00000001 ecx=00162a01 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7b eax=011cb07f ebx=00000001 ecx=00001796 edx=00000000 esi=00000174 edi=09e5fc0c eip=77f6829b esp=09e5fbf0 ebp=09e5fc14 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e5f7=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fc14 1000dbba 00000174 000000c8 00000001 00873920 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09e5fbf0 bc cc f1 77 74 01 00 00 - 01 00 00 00 0c fc e5 09 ...wt........... 09e5fc00 14 31 00 10 20 63 87 00 - 20 63 87 00 80 7b e1 ff .1.. c.. c...{.. 09e5fc10 ff ff ff ff 38 fc e5 09 - ba db 00 10 74 01 00 00 ....8.......t... 09e5fc20 c8 00 00 00 01 00 00 00 - 20 39 87 00 02 01 00 00 ........ 9...... 09e5fc30 01 00 e5 09 df cb d0 04 - 54 fc e5 09 e4 9a 00 10 ........T....... 09e5fc40 ca 87 22 05 c8 00 00 00 - 54 fc e5 09 00 00 00 00 ..".....T....... 09e5fc50 20 39 87 00 74 fc e5 09 - 00 9c 00 10 65 15 00 00 9..t.......e... 09e5fc60 ca 87 22 05 88 fc e5 09 - c8 00 00 00 bc fc e5 09 .."............. 09e5fc70 c8 00 00 00 dc fc e5 09 - 6d 42 f6 04 ca 87 22 05 ........mB....". 09e5fc80 65 15 00 00 c8 00 00 00 - 00 00 00 00 bc fc e5 09 e............... 09e5fc90 14 31 00 10 20 63 87 00 - 20 63 87 00 a8 fc e5 09 .1.. c.. c...... 09e5fca0 df 3a d0 04 e4 ee 0a 05 - c4 fc e5 09 94 33 d0 04 .:...........3.. 09e5fcb0 00 00 00 00 c8 ee 0a 05 - 00 00 00 00 01 00 00 00 ................ 09e5fcc0 00 00 e5 09 d4 fc e5 09 - a7 26 d0 04 f4 01 00 00 .........&...... 09e5fcd0 00 00 00 00 20 fe e5 09 - 43 c9 f5 04 20 fe e5 09 .... ...C... ... 09e5fce0 e5 ba f5 04 14 31 00 10 - 20 63 87 00 20 63 87 00 .....1.. c.. c.. 09e5fcf0 06 00 00 00 3f 00 00 00 - 14 31 00 10 e0 7d 87 00 ....?....1...}.. 09e5fd00 1c fe e5 09 20 fe e5 09 - 91 f1 00 10 20 fe e5 09 .... ....... ... 09e5fd10 0b f2 00 10 20 fd e5 09 - 00 00 00 00 00 00 00 00 .... ........... 09e5fd20 2c 20 50 72 69 6f 72 69 - 74 79 20 00 65 61 64 00 , Priority .ead. State Dump for Thread Id 0x7d eax=1001537f ebx=00000001 ecx=77f669c8 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=0a05fd74 ebp=0a05fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0af4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7c eax=00003aa2 ebx=00000001 ecx=00003e3a edx=00000000 esi=000000f8 edi=00000000 eip=77f6829b esp=09f5fc30 ebp=09f5fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ae4e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fc54 1000dbba 000000f8 ffffffff 00000001 00872220 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7e eax=062b9b34 ebx=00000001 ecx=7ff9d000 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a15fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a15fd2c 20 00 00 00 c0 7c 87 00 - c0 7c 87 00 50 fd 15 0a ....|...|..P... 0a15fd3c 43 ca f1 77 64 fd 15 0a - ba db 00 10 c4 00 00 00 C..wd........... 0a15fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a15fd5c 01 00 00 00 00 00 00 00 - 80 fd 15 0a e4 9a 00 10 ................ 0a15fd6c e8 fd 15 0a ff ff ff ff - 12 a7 05 10 00 00 7d 00 ..............}. 0a15fd7c 00 18 87 00 a0 fd 15 0a - 00 9c 00 10 47 15 ff ff ............G... 0a15fd8c e8 fd 15 0a b4 fd 15 0a - ff ff ff ff ec fd 15 0a ................ 0a15fd9c ff ff ff ff 20 fe 15 0a - 89 97 23 06 e8 fd 15 0a .... .....#..... 0a15fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 15 0a G............... 0a15fdbc 02 80 00 00 48 d2 01 10 - 01 00 00 00 00 00 00 00 ....H........... 0a15fdcc 64 5a 8d 00 20 f3 27 06 - 40 4e 7e 00 a0 ff 7d 00 dZ.. .'.@N~...}. 0a15fddc 14 03 00 00 44 00 00 00 - 05 00 02 10 6b 07 01 10 ....D.......k... 0a15fdec 00 00 00 00 27 00 84 01 - a4 4e 7e 00 00 01 01 10 ....'....N~..... 0a15fdfc 00 04 87 00 84 ff 15 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a15fe0c 10 00 00 00 04 67 7f 00 - 04 00 00 00 00 03 00 00 .....g.......... 0a15fe1c 22 ff ff ff 84 ff 15 0a - 95 f5 00 10 00 00 00 00 "............... 0a15fe2c 20 00 00 00 c0 7c 87 00 - c0 7c 87 00 1e 00 00 00 ....|...|...... 0a15fe3c 00 00 00 00 0c ff 15 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a15fe4c ff ff ff ff 78 fe 15 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7f eax=00000035 ebx=00877bf0 ecx=10020035 edx=00000000 esi=0a76fdb0 edi=00000000 eip=77f6793f esp=0a76fd78 ebp=0a76fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b65e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fdd4 062373cb 00000330 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x80 eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000358 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000358 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 58 03 00 00 - 00 00 00 00 00 00 00 00 ...wX........... 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 58 03 00 00 .z.. ...AO.wX... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 58 03 00 00 ........*.#.X... 0a86f9c4 ff ff ff ff 20 77 61 69 - 58 03 00 00 63 5f 74 68 .... waiX...c_th 0a86f9d4 00 00 61 64 a7 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a7 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x81 eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000368 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000368 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x82 eax=00000052 ebx=00877750 ecx=0aa6fda8 edx=00000000 esi=00000320 edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 00000320 0a663000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 20 03 00 00 - 00 00 00 00 00 00 00 00 ...w ........... 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 30 66 0a 00 10 00 00 ....4....0f..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 50 77 87 00 ............Pw.. 0aa6fd28 50 77 87 00 50 77 87 00 - 15 c9 f1 77 68 fd a6 0a Pw..Pw.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 20 03 00 00 00 30 66 0a - 00 10 00 00 d5 0e 2c 06 ....0f.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 50 77 87 00 ....V.'.....Pw.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 9c 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 ....pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 50 77 87 00 50 77 87 00 pm+.....Pw..Pw.. State Dump for Thread Id 0x83 eax=00000001 ebx=00877680 ecx=0b07ffa8 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=10101010 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 0000033c 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x84 eax=0b17f0cc ebx=008775b0 ecx=00000002 edx=00000000 esi=00000374 edi=00000000 eip=77f67ec7 esp=0b17fcf8 ebp=0b17fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0c06e6ff=00000000 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17fd60 06236f32 00000374 0af77000 00001000 062c0e65 ntdll!ZwReadFile State Dump for Thread Id 0x85 eax=1001537f ebx=008774e0 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 0000037c 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 7c 03 00 00 - 00 00 00 00 00 00 00 00 #V.w|........... 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 e0 74 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .t.......... .'. 0b27fdd8 2f 86 23 06 7c 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.|.......8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 7c 03 00 00 5c 03 00 00 - 18 fe 27 0b a8 ff 27 0b |...\.....'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - e0 74 87 00 e0 74 87 00 .........t...t.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 78 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....x6........<. 0b27fe98 70 36 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 p6...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 e0 74 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .t.............. State Dump for Thread Id 0x86 eax=0087f010 ebx=00000000 ecx=0087f000 edx=00000000 esi=00000388 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000388 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x87 eax=00000002 ebx=008772a0 ecx=00000002 edx=00000000 esi=008772a0 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x88 eax=00000000 ebx=00000000 ecx=007eb190 edx=00000000 esi=0000038c edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 0000038c ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x89 eax=00000026 ebx=00000001 ecx=0000cff8 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x8a eax=00000010 ebx=00000001 ecx=00000000 edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 60 2c 40 00 .5..........`,@. 0bc7fd70 76 00 01 00 98 fd c7 0b - ba db 00 10 a0 00 00 00 v............... 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bc7fd90 01 00 00 00 00 00 00 00 - b4 fd c7 0b e4 9a 00 10 ................ 0bc7fda0 00 fe c7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 b0 12 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 .....2~..e...... 0bc7fe00 60 08 c7 0b 14 fe c7 0b - 92 13 40 00 c0 12 93 02 `.........@..... 0bc7fe10 01 fe c7 0b 20 fe c7 0b - 74 13 40 00 c0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - c0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 88 13 16 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. State Dump for Thread Id 0x8b eax=00000000 ebx=0ca7f0dc ecx=007c3e60 edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - 60 8e 87 00 c0 b4 87 00 ........`....... 0ca7f0d8 c0 b4 87 00 b0 03 00 00 - d8 03 00 00 60 8e 87 00 ............`... 0ca7f0e8 c0 b4 87 00 c0 b4 87 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: (pid=99) When: 2/23/2006 @ 22:44:31.527 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 72 SPOOLSS.exe 63 NDDEAGNT.exe 61 RPCSS.exe 82 EXPLORER.exe 83 PSTORES.exe 93 hotkey.exe 96 S3TRAY.exe 99 mainapp.exe 105 DDHELP.exe 142 DRWTSN32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x62 eax=02920000 ebx=00000000 ecx=77a2ea48 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 00014ef9 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - f8 68 44 e1 a0 01 93 02 P........hD..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 c0 ed 64 80 F....t..<.....d. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6c eax=000000c0 ebx=00000001 ecx=008736e0 edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=00008c00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6d eax=00000001 ebx=00000001 ecx=0000000f edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=00009300 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 00 00 00 00 \]^_.3...3...... 061cfd70 01 00 00 00 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 30 06 87 00 ........@:..0... 061cfd90 00 33 87 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 .3..l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 21 ce f6 77 90 01 00 00 ........!..w.... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 00 00 00 00 .3...3.......... 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 78 40 14 00 x...|.#P....x@.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 62 79 eb 05 ff ff ff ff - 98 fe 1c 06 00 00 00 00 by.............. 061cfe80 00 00 eb 05 02 00 00 00 - 00 00 00 00 00 33 14 00 .............3.. State Dump for Thread Id 0x6e eax=7ffdf000 ebx=00000001 ecx=065efdbc edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00004b00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2b eax=00000e0b ebx=00000001 ecx=00000000 edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x45 eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2f eax=00000000 ebx=00000001 ecx=000001f5 edx=00000000 esi=000001d8 edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001d8 ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 d8 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 34 00 00 00 ...w.H...H..4... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 d8 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 99 00 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 ................ 068ffdc0 14 fe 8f 06 ff ff ff ff - 10 e7 7d 00 e0 fd 8f 06 ..........}..... 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 90 19 7e 00 ...w.H...H....~. 068ffe00 84 ff 8f 06 e4 07 f1 77 - 00 00 ff ff 00 00 00 00 .......w........ 068ffe10 18 fe 8f 06 54 07 00 00 - 00 00 87 00 e0 e6 7d 00 ....T.........}. 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 00 73 14 00 x...|.#P.....s.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 10 4d 14 00 ..<..........M.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 08 4d 14 00 1f 3e f6 77 ......<..M...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x57 eax=00000000 ebx=00874660 ecx=089ffd8c edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000214 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x3e eax=034a3508 ebx=008742c0 ecx=0d29add9 edx=04922670 esi=034b92d8 edi=03e778a8 eip=77f1b2c1 esp=08d5fce0 ebp=08d5fd3c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: IsBadReadPtr 77f1b2c1 64a100000000 mov eax,fs:[00000000] fs:00000000=???????? 77f1b2c7 55 push ebp 77f1b2c8 8bec mov ebp,esp 77f1b2ca 6aff push 0xff 77f1b2cc 68e8d1f377 push 0x77f3d1e8 77f1b2d1 6844b7f377 push 0x77f3b744 77f1b2d6 50 push eax 77f1b2d7 a1f864f477 mov eax,[77f464f8] ds:77f464f8=7f6f0810 77f1b2dc 64892500000000 mov fs:[00000000],esp fs:00000000=???????? 77f1b2e3 83ec10 sub esp,0x10 77f1b2e6 53 push ebx 77f1b2e7 56 push esi *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd3c 0323d511 0d29add9 0000009a 04920fc0 04921100 kernel32!IsBadReadPtr State Dump for Thread Id 0x4b eax=0d2a84a2 ebx=00000001 ecx=00000000 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x54 eax=00000000 ebx=00000001 ecx=004bcd01 edx=00000000 esi=00000240 edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 00000240 ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x41 eax=00000014 ebx=00000001 ecx=00000004 edx=00000000 esi=00000254 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000254 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x28 eax=00000024 ebx=00000001 ecx=00000c60 edx=00000000 esi=00000268 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000268 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x49 eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=0000024c edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 0000024c ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x42 eax=00000000 ebx=00000001 ecx=00000001 edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=00000000 ebx=00000001 ecx=7ffaa000 edx=00000000 esi=00000284 edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 00000284 ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=00000000 ebx=00000001 ecx=00000000 edx=00000000 esi=00000298 edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 00000298 ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=00000001 ebx=00000001 ecx=00000001 edx=00000000 esi=000002ac edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002ac ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=008701c0 ebx=00000001 ecx=fffffffe edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=00000000 ebx=00000001 ecx=3c000000 edx=00000000 esi=000001b0 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b0 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=00000001 ebx=00000001 ecx=00000011 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=00000000 ebx=00000001 ecx=00850510 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000001 ebx=00000001 ecx=1fc28a01 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=000000c8 ebx=00000001 ecx=00873920 edx=00000000 esi=00000174 edi=09e5fc0c eip=77f6829b esp=09e5fbf0 ebp=09e5fc14 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e5f7=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fc14 1000dbba 00000174 000000c8 00000001 00873920 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09e5fbf0 bc cc f1 77 74 01 00 00 - 01 00 00 00 0c fc e5 09 ...wt........... 09e5fc00 14 31 00 10 20 63 87 00 - 20 63 87 00 80 7b e1 ff .1.. c.. c...{.. 09e5fc10 ff ff ff ff 38 fc e5 09 - ba db 00 10 74 01 00 00 ....8.......t... 09e5fc20 c8 00 00 00 01 00 00 00 - 20 39 87 00 02 01 00 00 ........ 9...... 09e5fc30 01 00 00 00 00 00 00 00 - 54 fc e5 09 e4 9a 00 10 ........T....... 09e5fc40 ca 87 22 05 c8 00 00 00 - 54 a7 05 10 00 00 00 00 ..".....T....... 09e5fc50 20 39 87 00 74 fc e5 09 - 00 9c 00 10 65 15 00 00 9..t.......e... 09e5fc60 ca 87 22 05 88 fc e5 09 - c8 00 00 00 bc fc e5 09 .."............. 09e5fc70 c8 00 00 00 dc fc e5 09 - 6d 42 f6 04 ca 87 22 05 ........mB....". 09e5fc80 65 15 00 00 c8 00 00 00 - 00 00 00 00 bc fc e5 09 e............... 09e5fc90 14 31 00 10 20 63 87 00 - 20 63 87 00 a8 fc e5 09 .1.. c.. c...... 09e5fca0 df 3a d0 04 e4 ee 0a 05 - c4 fc e5 09 94 33 d0 04 .:...........3.. 09e5fcb0 00 00 00 00 c8 ee 0a 05 - 00 00 00 00 01 00 00 00 ................ 09e5fcc0 00 00 e5 09 d4 fc e5 09 - a7 26 d0 04 41 4e 00 00 .........&..AN.. 09e5fcd0 00 00 00 00 20 fe e5 09 - 43 c9 f5 04 20 fe e5 09 .... ...C... ... 09e5fce0 e5 ba f5 04 14 31 00 10 - 20 63 87 00 20 63 87 00 .....1.. c.. c.. 09e5fcf0 06 00 00 00 3f 00 00 00 - 14 31 00 10 00 7b 87 00 ....?....1...{.. 09e5fd00 1c fe e5 09 20 fe e5 09 - 91 f1 00 10 20 fe e5 09 .... ....... ... 09e5fd10 0b f2 00 10 20 fd e5 09 - 00 00 00 00 00 00 00 00 .... ........... 09e5fd20 2c 20 50 72 69 6f 72 69 - 74 79 20 00 65 61 64 00 , Priority .ead. State Dump for Thread Id 0x7a eax=1001537f ebx=00000001 ecx=00876870 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=09f5fd74 ebp=09f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ae4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7b eax=0bca39c8 ebx=05da1e2c ecx=0bca5318 edx=0bca5330 esi=00000001 edi=0bca3ab8 eip=05cf0180 esp=0a05fa20 ebp=0a05fa40 iopl=0 nv up ei pl nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206 function: 05cf0161 8b4dfc mov ecx,[ebp-0x4] ss:0af4e446=???????? 05cf0164 8dbc88c4000000 lea edi,[eax+ecx*4+0xc4] ds:0bca53dc=00000000 05cf016b 8d4ee0 lea ecx,[esi-0x20] ds:00eeea07=f8af6c00 05cf016e be00000080 mov esi,0x80000000 05cf0173 d3ee shr esi,cl 05cf0175 0937 or [edi],esi ds:0bca3ab8=00000001 05cf0177 8b4df8 mov ecx,[ebp-0x8] ss:0af4e446=???????? 05cf017a 85c9 test ecx,ecx 05cf017c 740b jz 05cf0189 05cf017e 890a mov [edx],ecx ds:0bca5330=0bca5318 FAULT ->05cf0180 894c11fc mov [ecx+edx-0x4],ecx ds:0cb93d37=00000000 05cf0184 eb03 jmp 05cf0189 05cf0186 8b4df8 mov ecx,[ebp-0x8] ss:0af4e446=???????? 05cf0189 8b75f0 mov esi,[ebp-0x10] ss:0af4e446=???????? 05cf018c 03d1 add edx,ecx 05cf018e 8d4e01 lea ecx,[esi+0x1] ds:00eeea07=f8af6c00 05cf0191 890a mov [edx],ecx ds:0bca5330=0bca5318 05cf0193 894c32fc mov [edx+esi-0x4],ecx ds:00eeea08=00f8af6c 05cf0197 8b75f4 mov esi,[ebp-0xc] ss:0af4e446=???????? 05cf019a 8b0e mov ecx,[esi] ds:00000001=???????? 05cf019c 85c9 test ecx,ecx 05cf019e 8d7901 lea edi,[ecx+0x1] ds:0cb93d1e=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05fa40 05ce960b 01da1e2c 00000009 0c3d2c68 00000000 *----> Raw Stack Dump <----* 0a05fa20 68 2c 3d 0c 02 00 00 00 - 50 60 87 00 5c fa 05 0a h,=.....P`..\... 0a05fa30 10 00 00 00 38 51 ca 0b - 18 53 ca 0b 0b 00 00 00 ....8Q...S...... 0a05fa40 c0 fa 05 0a 0b 96 ce 05 - 2c 1e da 01 09 00 00 00 ........,....... 0a05fa50 68 2c 3d 0c 00 00 00 00 - d4 95 ce 05 02 00 00 00 h,=............. 0a05fa60 f6 73 ce 05 02 00 00 00 - 01 00 00 00 f9 04 c3 05 .s.............. 0a05fa70 02 00 00 00 68 2c 3d 0c - 00 00 00 00 b0 82 3d 0c ....h,=.......=. 0a05fa80 50 60 87 00 f0 d8 3d 0c - fc d8 3d 0c 9c fa 05 0a P`....=...=..... 0a05fa90 60 ea 3d 0c fc d8 3d 0c - f0 9f 3d 0c b4 fa 05 0a `.=...=...=..... 0a05faa0 b0 82 3d 0c b0 82 3d 0c - e0 fa 05 0a 9c 90 cf 05 ..=...=......... 0a05fab0 ff ff ff ff e0 fa 05 0a - e5 81 cf 05 ff ff ff ff ................ 0a05fac0 ec fa 05 0a 46 06 c3 05 - 60 22 3c 0c f0 d8 3d 0c ....F...`"<...=. 0a05fad0 60 22 3c 0c f0 d8 3d 0c - f0 d8 3d 0c f0 d8 3d 0c `"<...=...=...=. 0a05fae0 88 fd 05 0a fa 81 cf 05 - ff ff ff ff 84 fb 05 0a ................ 0a05faf0 94 6b c1 05 36 d8 3d 0c - 00 00 00 00 00 c8 80 40 .k..6.=........@ 0a05fb00 84 fb 05 0a 39 35 c1 05 - 00 00 00 00 98 7b ca 0b ....95.......{.. 0a05fb10 02 00 00 00 e0 1e e6 0b - ac cd c4 05 50 fb 05 0a ............P... 0a05fb20 00 00 00 00 36 ff 00 00 - 00 00 00 00 90 f4 3d 0c ....6.........=. 0a05fb30 be 01 00 00 8e 00 3d 00 - 07 01 32 00 63 01 32 00 ......=...2.c.2. 0a05fb40 25 00 32 00 38 01 3d 00 - 19 02 3d 00 01 00 fc 00 %.2.8.=...=..... 0a05fb50 b3 01 42 01 00 00 00 00 - 00 00 3d 0c 00 00 d3 05 ..B.......=..... State Dump for Thread Id 0x7c eax=0627f338 ebx=00000001 ecx=0a150000 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a15fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a15fd2c 20 00 00 00 80 7d 87 00 - 80 7d 87 00 e4 03 00 00 ....}...}...... 0a15fd3c 01 00 00 00 64 fd 15 0a - ba db 00 10 c4 00 00 00 ....d........... 0a15fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a15fd5c 01 00 00 00 00 00 00 00 - 80 fd 15 0a e4 9a 00 10 ................ 0a15fd6c e8 fd 15 0a ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0a15fd7c 00 18 87 00 a0 fd 15 0a - 00 9c 00 10 47 15 ff ff ............G... 0a15fd8c e8 fd 15 0a b4 fd 15 0a - ff ff ff ff ec fd 15 0a ................ 0a15fd9c ff ff ff ff 20 fe 15 0a - 89 97 23 06 e8 fd 15 0a .... .....#..... 0a15fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 15 0a G............... 0a15fdbc 02 80 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0a15fdcc 8c be 8e 00 38 f3 27 06 - 90 4e 7e 00 40 59 7e 00 ....8.'..N~.@Y~. 0a15fddc 10 03 00 00 0b 00 00 00 - 05 00 02 10 b1 08 01 10 ................ 0a15fdec 00 00 00 00 04 00 84 01 - f4 4e 7e 00 00 01 01 10 .........N~..... 0a15fdfc 00 04 87 00 84 ff 15 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a15fe0c 20 00 00 00 94 55 7f 00 - f4 9a 7f 00 3c 03 00 00 ....U......<... 0a15fe1c 99 ff ff ff 84 ff 15 0a - 95 f5 00 10 00 00 00 00 ................ 0a15fe2c 20 00 00 00 80 7d 87 00 - 80 7d 87 00 1e 00 00 00 ....}...}...... 0a15fe3c 00 00 00 00 0c ff 15 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a15fe4c ff ff ff ff 78 fe 15 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7d eax=00877940 ebx=00877cb0 ecx=0000001b edx=00000000 esi=0a76fdb0 edi=00000000 eip=77f6793f esp=0a76fd78 ebp=0a76fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b65e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fdd4 062373cb 00000334 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x7e eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000364 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000364 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a50 00877a50 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 64 03 00 00 - 00 00 00 00 00 00 00 00 ...wd........... 0a86f994 04 00 00 00 50 7a 87 00 - 50 7a 87 00 00 bc f9 7f ....Pz..Pz...... 0a86f9a4 50 7a 87 00 20 fe 86 0a - 41 4f f0 77 64 03 00 00 Pz.. ...AO.wd... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 64 03 00 00 ........*.#.d... 0a86f9c4 ff ff ff ff 20 77 61 69 - 64 03 00 00 63 5f 74 68 .... waid...c_th 0a86f9d4 00 00 61 64 a7 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a7 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x7f eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000374 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000374 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 00877970 00877970 kernel32!WaitForSingleObject State Dump for Thread Id 0x80 eax=00000052 ebx=00877750 ecx=0aa6fda8 edx=00000000 esi=000002fc edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 000002fc 0a663000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 fc 02 00 00 - 00 00 00 00 00 00 00 00 ...w............ 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 30 66 0a 00 10 00 00 ....4....0f..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 50 77 87 00 ............Pw.. 0aa6fd28 50 77 87 00 50 77 87 00 - 15 c9 f1 77 68 fd a6 0a Pw..Pw.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 fc 02 00 00 00 30 66 0a - 00 10 00 00 d5 0e 2c 06 .....0f.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 50 77 87 00 ....V.'.....Pw.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 cc 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 ....pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 50 77 87 00 50 77 87 00 pm+.....Pw..Pw.. State Dump for Thread Id 0x81 eax=062baa60 ebx=00877680 ecx=062baa60 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=10101010 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 0000036c 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x82 eax=0b17f0cc ebx=00000001 ecx=00000004 edx=00000000 esi=000003e4 edi=00000000 eip=77f6829b esp=0b17f004 ebp=0b17f028 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c06da0b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17f028 1000dbba 000003e4 ffffffff 00000001 00878f30 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0b17f004 bc cc f1 77 e4 03 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0b17f014 d0 fc 17 0b b0 75 87 00 - b0 75 87 00 00 00 00 00 .....u...u...... 0b17f024 00 00 00 00 4c f0 17 0b - ba db 00 10 e4 03 00 00 ....L........... 0b17f034 ff ff ff ff 01 00 00 00 - 30 8f 87 00 74 01 00 00 ........0...t... 0b17f044 01 00 00 00 00 00 00 00 - 68 f0 17 0b e4 9a 00 10 ........h....... 0b17f054 a8 f0 17 0b ff ff ff ff - 6c 99 00 10 e6 0a 87 00 ........l....... 0b17f064 30 8f 87 00 88 f0 17 0b - 78 d7 23 06 ac 15 ff ff 0.......x.#..... 0b17f074 a8 f0 17 0b 00 00 00 00 - ff ff ff ff a4 f0 17 0b ................ 0b17f084 a4 f0 17 0b b8 f0 17 0b - 83 1e 1d 06 ac 15 00 00 ................ 0b17f094 a8 f0 17 0b 00 00 00 00 - ff ff ff ff a4 f0 17 0b ................ 0b17f0a4 00 00 00 00 00 00 17 0b - e6 0a 24 06 60 37 7f 00 ..........$.`7.. 0b17f0b4 dc f0 17 0b dc f0 17 0b - 8b 1f 1d 06 e6 0a 7f 00 ................ 0b17f0c4 20 d3 27 06 ac 15 7f 00 - e6 0a 17 0b 74 37 7f 00 .'.........t7.. 0b17f0d4 05 00 00 00 09 00 00 00 - 40 fd 17 0b 10 ec 1f 06 ........@....... 0b17f0e4 54 07 2b 06 00 00 00 00 - 00 00 00 00 00 00 2b 06 T.+...........+. 0b17f0f4 8e 89 2b 06 ac 15 00 00 - 00 00 00 00 b0 75 87 00 ..+..........u.. 0b17f104 00 00 00 00 02 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17f114 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17f124 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0b17f134 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x83 eax=1001537f ebx=008774e0 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003f4 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 f4 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 e0 74 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .t.......... .'. 0b27fdd8 2f 86 23 06 f4 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 f4 03 00 00 f8 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - e0 74 87 00 e0 74 87 00 .........t...t.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 10 4d 14 00 - 00 f0 fd 7f 9d a1 3c 06 .....M........<. 0b27fe98 08 4d 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 .M...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 e0 74 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .t.............. State Dump for Thread Id 0x84 eax=1001537f ebx=00000000 ecx=206b636f edx=00000000 esi=0000038c edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 0000038c ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x85 eax=00000002 ebx=008772a0 ecx=00000002 edx=00000000 esi=008772a0 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x86 eax=00000000 ebx=00000000 ecx=007c02dd edx=00000000 esi=00000390 edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 00000390 ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x87 eax=00000026 ebx=00000001 ecx=0000cff8 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x88 eax=1001537f ebx=00000001 ecx=1005b250 edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 60 2c 40 00 .5..........`,@. 0bc7fd70 70 00 01 00 98 fd c7 0b - ba db 00 10 a0 00 00 00 p............... 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bc7fd90 01 00 00 00 00 00 00 00 - b4 fd c7 0b e4 9a 00 10 ................ 0bc7fda0 00 fe c7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 b0 12 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 .....2~..e...... 0bc7fe00 60 08 c7 0b 14 fe c7 0b - 92 13 40 00 c0 12 93 02 `.........@..... 0bc7fe10 01 fe c7 0b 20 fe c7 0b - 74 13 40 00 c0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - c0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 a8 8f 13 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 10 4d 14 00 ..<..........M.. State Dump for Thread Id 0x89 eax=00000000 ebx=0ca7f0dc ecx=007ef6f0 edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - 00 71 87 00 80 b9 87 00 .........q...... 0ca7f0d8 80 b9 87 00 20 04 00 00 - b0 03 00 00 00 71 87 00 .... ........q.. 0ca7f0e8 80 b9 87 00 80 b9 87 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: (pid=100) When: 6/7/2006 @ 12:32:14.641 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 72 SPOOLSS.exe 67 RPCSS.exe 83 NDDEAGNT.exe 87 EXPLORER.exe 88 PSTORES.exe 96 hotkey.exe 98 S3TRAY.exe 100 mainapp.exe 105 DDHELP.exe 66 DRWTSN32.exe 145 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x63 eax=00000000 ebx=00000000 ecx=02930d00 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 0001e44a 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - 38 e7 42 e1 a0 01 93 02 P.......8.B..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 60 34 65 80 F....t..<...`4e. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6c eax=000000c0 ebx=00000001 ecx=05ebae88 edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=00010600 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6d eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=00019900 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 a8 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 d8 34 14 00 .............4.. State Dump for Thread Id 0x6e eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x39 eax=00000000 ebx=00000001 ecx=00000000 edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x49 eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x4b eax=037d1c48 ebx=00000001 ecx=037d1c48 edx=00000000 esi=000001dc edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001dc ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 dc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 3c 00 00 00 ...w.H...H..<... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 dc 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 e4 01 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 ................ 068ffdc0 14 fe 8f 06 ff ff ff ff - b0 11 7f 00 e0 fd 8f 06 ................ 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 50 c0 7d 00 ...w.H...H..P.}. 068ffe00 84 ff 8f 06 03 07 f1 77 - 00 00 ff ff 00 00 00 00 .......w........ 068ffe10 18 fe 8f 06 ab 0a 00 00 - 00 00 87 00 60 11 7f 00 ............`... 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 48 72 14 00 x...|.#P....Hr.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 70 36 14 00 1f 3e f6 77 ......<.p6...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x2f eax=00000946 ebx=00874660 ecx=089ffd8c edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000210 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x3b eax=015a79de ebx=00000001 ecx=00000030 edx=00000000 esi=00000208 edi=00000000 eip=77f6829b esp=08d5fd48 ebp=08d5fd6c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09c4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd6c 1000dbba 00000208 ffffffff 00000001 00874440 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x28 eax=00000000 ebx=00000001 ecx=00007a10 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5a eax=00000002 ebx=00000001 ecx=08f5fd80 edx=00000000 esi=0000023c edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 0000023c ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5b eax=00875e50 ebx=00000001 ecx=00875e50 edx=00000000 esi=00000250 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000250 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x41 eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000264 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x51 eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 00000278 ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=00000000 ebx=00000001 ecx=0000ffff edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=0ca8ad92 ebx=00000001 ecx=03bbaf68 edx=00000000 esi=0000025c edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 0000025c ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=0355eea8 ebx=00000001 ecx=00000000 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 0000028c ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=00c56a34 ebx=00000001 ecx=00000883 edx=00000000 esi=000002a0 edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002a0 ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=1001537f ebx=00000001 ecx=007b4cac edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=00000000 ebx=00000001 ecx=35a6c8b4 edx=00000000 esi=000001b4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=00000000 ebx=00000001 ecx=007e50b0 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=0000000c ebx=00000001 ecx=09a5fd90 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=00000001 ebx=00000001 ecx=13e70701 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=00000011 ebx=00000001 ecx=09e5fd6c edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=09e5fd74 ebp=09e5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7b eax=00000001 ebx=00000001 ecx=0026dc01 edx=00000000 esi=00000174 edi=09f5fc0c eip=77f6829b esp=09f5fbf0 ebp=09f5fc14 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ae4e5f7=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fc14 1000dbba 00000174 000000c8 00000001 00873920 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09f5fbf0 bc cc f1 77 74 01 00 00 - 01 00 00 00 0c fc f5 09 ...wt........... 09f5fc00 14 31 00 10 a0 61 87 00 - a0 61 87 00 80 7b e1 ff .1...a...a...{.. 09f5fc10 ff ff ff ff 38 fc f5 09 - ba db 00 10 74 01 00 00 ....8.......t... 09f5fc20 c8 00 00 00 01 00 00 00 - 20 39 87 00 02 01 00 00 ........ 9...... 09f5fc30 01 00 00 00 00 00 00 00 - 54 fc f5 09 e4 9a 00 10 ........T....... 09f5fc40 ca 87 22 05 c8 00 00 00 - 54 a7 05 10 00 00 00 00 ..".....T....... 09f5fc50 20 39 87 00 74 fc f5 09 - 00 9c 00 10 65 15 00 00 9..t.......e... 09f5fc60 ca 87 22 05 88 fc f5 09 - c8 00 00 00 bc fc f5 09 .."............. 09f5fc70 c8 00 00 00 dc fc f5 09 - 6d 42 f6 04 ca 87 22 05 ........mB....". 09f5fc80 65 15 00 00 c8 00 00 00 - 00 00 00 00 bc fc f5 09 e............... 09f5fc90 14 31 00 10 a0 61 87 00 - a0 61 87 00 a8 fc f5 09 .1...a...a...... 09f5fca0 df 3a d0 04 e4 ee 0a 05 - c4 fc f5 09 94 33 d0 04 .:...........3.. 09f5fcb0 00 00 00 00 c8 ee 0a 05 - 00 00 00 00 01 00 00 00 ................ 09f5fcc0 00 00 f5 09 d4 fc f5 09 - a7 26 d0 04 58 04 00 00 .........&..X... 09f5fcd0 00 00 00 00 20 fe f5 09 - 43 c9 f5 04 20 fe f5 09 .... ...C... ... 09f5fce0 e5 ba f5 04 14 31 00 10 - a0 61 87 00 a0 61 87 00 .....1...a...a.. 09f5fcf0 06 00 00 00 3f 00 00 00 - 14 31 00 10 d0 7b 87 00 ....?....1...{.. 09f5fd00 1c fe f5 09 20 fe f5 09 - 91 f1 00 10 20 fe f5 09 .... ....... ... 09f5fd10 0b f2 00 10 20 fd f5 09 - 00 00 00 00 00 00 00 00 .... ........... 09f5fd20 2c 20 50 72 69 6f 72 69 - 74 79 20 00 65 61 64 00 , Priority .ead. State Dump for Thread Id 0x7c eax=00000000 ebx=00000000 ecx=00000009 edx=00040000 esi=05da0000 edi=0a05f960 eip=77f64d48 esp=0a05f8c4 ebp=0a05f8dc iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: RtlFreeHeap 77f64d28 85d2 test edx,edx 77f64d2a 53 push ebx 77f64d2b 56 push esi 77f64d2c 57 push edi 77f64d2d 0f8412020000 je RtlFreeHeap+0x227 (77f64f45) 77f64d33 8b7508 mov esi,[ebp+0x8] ss:0af4e2e2=???????? 77f64d36 8b5d0c mov ebx,[ebp+0xc] ss:0af4e2e2=???????? 77f64d39 0b5e10 or ebx,[esi+0x10] ds:06c8ea06=00020000 77f64d3c f7c3600f036f test ebx,0x6f030f60 77f64d42 0f85f3010000 jne RtlFreeHeap+0x21d (77f64f3b) FAULT ->77f64d48 8a42fd mov al,[edx-0x3] ds:00f2ea06=00 77f64d4b 8d7af8 lea edi,[edx-0x8] ds:00f2ea06=00000000 77f64d4e a801 test al,0x1 77f64d50 0f84bf010000 je RtlFreeHeap+0x1f7 (77f64f15) 77f64d56 f6c207 test dl,0x7 77f64d59 0f85b6010000 jne RtlFreeHeap+0x1f7 (77f64f15) 77f64d5f 807f0410 cmp byte ptr [edi+0x4],0x10 ds:0af4e366=?? 77f64d63 0f83ac010000 jnb RtlFreeHeap+0x1f7 (77f64f15) 77f64d69 8d8ec0040000 lea ecx,[esi+0x4c0] ds:05da04c0=05da05c0 77f64d6f 833900 cmp dword ptr [ecx],0x0 ds:00000009=???????? 77f64d72 742e jz RtlFreeHeap+0x84 (77f64da2) 77f64d74 83bec404000000 cmp dword ptr [esi+0x4c4],0x0 ds:05da04c4=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05f8dc 05ce95a5 05da0000 00000000 00040000 0c3c3df4 ntdll!RtlFreeHeap *----> Raw Stack Dump <----* 0a05f8c4 60 f9 05 0a 00 00 04 00 - 80 7e 87 00 6d 01 2c 00 `........~..m.,. 0a05f8d4 6d 01 8f 01 e6 be ce 05 - 60 f9 05 0a a5 95 ce 05 m.......`....... 0a05f8e4 00 00 da 05 00 00 00 00 - 00 00 04 00 f4 3d 3c 0c .............=<. 0a05f8f4 cf 46 ce 05 00 00 04 00 - 26 cf c4 05 00 00 04 00 .F......&....... 0a05f904 ff ff ff ff 80 7e 87 00 - e0 73 3d 0c 00 00 04 00 .....~...s=..... 0a05f914 ff ff 25 00 ae 03 e6 0b - 40 f9 05 0a 54 bb cc 05 ..%.....@...T... 0a05f924 6e 03 e6 0b be 01 00 00 - 0b 00 00 00 07 00 00 00 n............... 0a05f934 25 00 00 00 40 03 e6 0b - ff ff 00 00 60 f9 05 0a %...@.......`... 0a05f944 95 0c cc 05 02 00 00 00 - 20 00 2f 34 00 00 01 00 ........ ./4.... 0a05f954 1f 03 11 03 00 00 00 00 - 01 00 01 00 18 fa 05 0a ................ 0a05f964 ac f1 cb 05 98 fb 05 0a - 36 ff 00 00 ff ff ff ff ........6....... 0a05f974 84 f9 05 0a a1 f6 bf 05 - 50 00 00 00 c8 00 00 00 ........P....... 0a05f984 e0 73 3d 0c df 94 c6 05 - 50 e5 3c 0c 6c fa 05 0a .s=.....P.<.l... 0a05f994 a7 64 c6 05 82 07 80 00 - 74 07 80 00 b0 e5 3c 0c .d......t.....<. 0a05f9a4 58 07 80 00 4a 07 80 00 - 70 f8 3c 0c 21 00 8f 01 X...J...p.<.!... 0a05f9b4 2c 00 05 0a 12 00 12 00 - 12 00 12 00 80 83 d2 05 ,............... 0a05f9c4 36 ff 3b 0c 36 ff 8f 01 - 00 00 3c 0c 04 00 3b 0c 6.;.6.....<...;. 0a05f9d4 14 fa 05 0a 9a 69 cb 05 - c0 7f d2 05 fc 3d d3 05 .....i.......=.. 0a05f9e4 0d 00 00 00 12 00 00 00 - 12 00 00 00 12 00 00 00 ................ 0a05f9f4 12 00 00 00 80 7e 12 00 - e0 73 3d 0c 0d 00 12 00 .....~...s=..... State Dump for Thread Id 0x7d eax=00000000 ebx=00000001 ecx=7ff9d000 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a15fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a15fd2c 20 00 00 00 40 7d 87 00 - 40 7d 87 00 40 7d 87 00 ...@}..@}..@}.. 0a15fd3c 24 fd 15 0a 64 fd 15 0a - ba db 00 10 c4 00 00 00 $...d........... 0a15fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a15fd5c 01 00 00 00 00 00 00 00 - 80 fd 15 0a e4 9a 00 10 ................ 0a15fd6c e8 fd 15 0a ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0a15fd7c 00 18 87 00 a0 fd 15 0a - 00 9c 00 10 47 15 ff ff ............G... 0a15fd8c e8 fd 15 0a b4 fd 15 0a - ff ff ff ff ec fd 15 0a ................ 0a15fd9c ff ff ff ff 20 fe 15 0a - 89 97 23 06 e8 fd 15 0a .... .....#..... 0a15fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 15 0a G............... 0a15fdbc 26 00 00 00 48 d2 01 10 - 01 00 00 00 00 00 00 00 &...H........... 0a15fdcc 04 00 00 00 38 f3 27 06 - 90 4e 7e 00 80 60 7e 00 ....8.'..N~..`~. 0a15fddc 08 03 00 00 0b 00 00 00 - 38 9d 02 10 00 09 01 10 ........8....... 0a15fdec 00 00 00 00 98 09 84 01 - f4 4e 7e 00 00 01 01 10 .........N~..... 0a15fdfc 00 04 87 00 84 ff 15 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a15fe0c 00 00 00 00 18 fe 15 0a - 04 00 00 00 00 03 00 00 ................ 0a15fe1c ff ff ff ff 84 ff 15 0a - 95 f5 00 10 00 00 00 00 ................ 0a15fe2c 20 00 00 00 40 7d 87 00 - 40 7d 87 00 1e 00 00 00 ...@}..@}...... 0a15fe3c 00 00 00 00 0c ff 15 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a15fe4c ff ff ff ff 78 fe 15 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7e eax=1001537f ebx=00877c70 ecx=00000000 edx=00000000 esi=0a76fdb0 edi=00000000 eip=77f6793f esp=0a76fd78 ebp=0a76fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b65e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fdd4 062373cb 00000334 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x7f eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000358 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000358 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 58 03 00 00 - 00 00 00 00 00 00 00 00 ...wX........... 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 58 03 00 00 .z.. ...AO.wX... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 58 03 00 00 ........*.#.X... 0a86f9c4 ff ff ff ff 20 77 61 69 - 58 03 00 00 63 5f 74 68 .... waiX...c_th 0a86f9d4 00 00 61 64 a7 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a7 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x80 eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000368 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000368 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x81 eax=00000052 ebx=00877750 ecx=0aa6fda8 edx=00000000 esi=00000328 edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 00000328 0a663000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 28 03 00 00 - 00 00 00 00 00 00 00 00 ...w(........... 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 30 66 0a 00 10 00 00 ....4....0f..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 50 77 87 00 ............Pw.. 0aa6fd28 50 77 87 00 50 77 87 00 - 15 c9 f1 77 68 fd a6 0a Pw..Pw.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 28 03 00 00 00 30 66 0a - 00 10 00 00 d5 0e 2c 06 (....0f.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 50 77 87 00 ....V.'.....Pw.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 3c 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 <...pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 50 77 87 00 50 77 87 00 pm+.....Pw..Pw.. State Dump for Thread Id 0x82 eax=0087f010 ebx=00877590 ecx=0087f000 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=10101010 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 00000374 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x83 eax=00000000 ebx=008774c0 ecx=00806be0 edx=00000000 esi=0000034c edi=00000000 eip=77f67ec7 esp=0b17fcf8 ebp=0b17fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0c06e6ff=00000000 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17fd60 06236f32 0000034c 0af77000 00001000 062c0e65 ntdll!ZwReadFile State Dump for Thread Id 0x84 eax=1001537f ebx=008773f0 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003d4 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 d4 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 f0 73 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .s.......... .'. 0b27fdd8 2f 86 23 06 d4 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 d4 03 00 00 d8 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - f0 73 87 00 f0 73 87 00 .........s...s.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 78 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....x6........<. 0b27fe98 70 36 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 p6...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 f0 73 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .s.............. State Dump for Thread Id 0x85 eax=1001537f ebx=00000000 ecx=206b636f edx=00000000 esi=00000388 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000388 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x86 eax=00000002 ebx=008771c0 ecx=00000002 edx=00000000 esi=008771c0 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x87 eax=1001537f ebx=00000000 ecx=00000000 edx=00000000 esi=0000038c edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 0000038c ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x88 eax=00000026 ebx=00000001 ecx=0000cff8 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x89 eax=0bc7fcb8 ebx=00000001 ecx=0bc7fce4 edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 60 2c 40 00 .5..........`,@. 0bc7fd70 62 00 02 00 98 fd c7 0b - ba db 00 10 a0 00 00 00 b............... 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bc7fd90 01 00 00 00 00 00 00 00 - b4 fd c7 0b e4 9a 00 10 ................ 0bc7fda0 00 fe c7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 b0 12 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 .....2~..e...... 0bc7fe00 60 08 c7 0b 14 fe c7 0b - 92 13 40 00 c0 12 93 02 `.........@..... 0bc7fe10 01 fe c7 0b 20 fe c7 0b - 74 13 40 00 c0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - c0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 a8 8f 13 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. State Dump for Thread Id 0x8a eax=1001537f ebx=0ca7f0dc ecx=00000000 edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - 20 70 87 00 60 b8 87 00 ........ p..`... 0ca7f0d8 60 b8 87 00 58 01 00 00 - 9c 03 00 00 20 70 87 00 `...X....... p.. 0ca7f0e8 60 b8 87 00 60 b8 87 00 - 00 00 00 00 00 00 00 00 `...`........... 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: (pid=101) When: 9/21/2006 @ 16:40:54.488 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 73 SPOOLSS.exe 63 RPCSS.exe 82 NDDEAGNT.exe 87 EXPLORER.exe 88 PSTORES.exe 97 hotkey.exe 99 S3TRAY.exe 101 mainapp.exe 107 DDHELP.exe 43 DRWTSN32.exe 146 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x64 eax=00000000 ebx=00000000 ecx=02930d00 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=3f61c58c 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=004ae1c5 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=004ae1c5 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=3f61c58c 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=3f61c58c 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=3f61c58c *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 00018e6c 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - d8 84 44 e1 a0 01 93 02 P.........D..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 60 53 65 80 F....t..<...`Se. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6e eax=05ed0e80 ebx=00000001 ecx=05ed0f80 edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=00001d00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5c eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=00006700 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 a8 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 d8 34 14 00 .............4.. State Dump for Thread Id 0x5f eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00002f00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2f eax=676e6172 ebx=00000001 ecx=00000003 edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x3e eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x50 eax=00000000 ebx=00000001 ecx=000003e9 edx=00000000 esi=000001cc edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001cc ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 cc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 34 00 00 00 ...w.H...H..4... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 cc 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 72 02 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 r............... 068ffdc0 14 fe 8f 06 ff ff ff ff - 90 7c 7e 00 e0 fd 8f 06 .........|~..... 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 d0 cc 7d 00 ...w.H...H....}. 068ffe00 84 ff 8f 06 db 06 f1 77 - 00 00 ff ff 00 00 00 00 .......w........ 068ffe10 18 fe 8f 06 0d 09 00 00 - 00 00 87 00 60 7c 7e 00 ............`|~. 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 48 72 14 00 x...|.#P....Hr.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 70 36 14 00 1f 3e f6 77 ......<.p6...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x40 eax=00000000 ebx=00874660 ecx=08c75801 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000210 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x4c eax=00000000 ebx=c0000000 ecx=00000001 edx=c2a5cf96 esi=0d2cdb4b edi=c054b9f2 eip=03482afe esp=08d5fcd0 ebp=08d5fcd0 iopl=0 nv up ei pl nz ac po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000216 function: 03482aeb 6a0c push 0xc 03482aed 6a10 push 0x10 03482aef e88f520000 call 03487d83 03482af4 83c41c add esp,0x1c 03482af7 5e pop esi 03482af8 5b pop ebx 03482af9 c9 leave 03482afa c3 ret 03482afb 55 push ebp 03482afc 8bec mov ebp,esp 03482afe 51 push ecx 03482aff 51 push ecx 03482b00 53 push ebx 03482b01 56 push esi 03482b02 beffff0000 mov esi,0xffff 03482b07 56 push esi 03482b08 ff35d4ee6603 push dword ptr [0366eed4] ds:0366eed4=0000173f 03482b0e e8355a0000 call 03488548 03482b13 dd4508 fld qword ptr [ebp+0x8] ss:09c4e6d6=???????????????? 03482b16 59 pop ecx 03482b17 8bd8 mov ebx,eax 03482b19 8b450e mov eax,[ebp+0xe] ss:09c4e6d6=???????? *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fcd0 03222965 3828f5c3 4074eeb7 00000384 0d2cdb4b State Dump for Thread Id 0x53 eax=0d2c9f32 ebx=00000001 ecx=00000000 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x28 eax=00004e20 ebx=00000001 ecx=00874170 edx=00000000 esi=0000023c edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 0000023c ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5b eax=007fcc90 ebx=00000001 ecx=00000000 edx=00000000 esi=00000250 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000250 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x3b eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000264 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x43 eax=40000000 ebx=00000001 ecx=40100000 edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 00000278 ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=00000000 ebx=00000001 ecx=00872070 edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=00000f7f ebx=00000001 ecx=4074037f edx=00000000 esi=0000025c edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 0000025c ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=00000000 ebx=00000001 ecx=00827401 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 0000028c ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=00000050 ebx=00000001 ecx=00000006 edx=00000000 esi=000002a0 edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002a0 ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=00000000 ebx=00000001 ecx=007c7ca0 edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=00000000 ebx=00000001 ecx=00000000 edx=00000000 esi=000001b4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=00000000 ebx=00000001 ecx=007c6200 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=00871c6a ebx=00000001 ecx=00354501 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000c06 ebx=00000001 ecx=007fc430 edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=00000001 ebx=00000001 ecx=8a527f01 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=00001565 ebx=00000001 ecx=09e5fc88 edx=00000000 esi=00000174 edi=09e5fc0c eip=77f6829b esp=09e5fbf0 ebp=09e5fc14 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e5f7=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fc14 1000dbba 00000174 000000c8 00000001 00873920 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09e5fbf0 bc cc f1 77 74 01 00 00 - 01 00 00 00 0c fc e5 09 ...wt........... 09e5fc00 14 31 00 10 20 63 87 00 - 20 63 87 00 80 7b e1 ff .1.. c.. c...{.. 09e5fc10 ff ff ff ff 38 fc e5 09 - ba db 00 10 74 01 00 00 ....8.......t... 09e5fc20 c8 00 00 00 01 00 00 00 - 20 39 87 00 02 01 00 00 ........ 9...... 09e5fc30 01 00 00 00 00 00 00 00 - 54 fc e5 09 e4 9a 00 10 ........T....... 09e5fc40 ca 87 22 05 c8 00 00 00 - 54 a7 05 10 00 00 00 00 ..".....T....... 09e5fc50 20 39 87 00 74 fc e5 09 - 00 9c 00 10 65 15 00 00 9..t.......e... 09e5fc60 ca 87 22 05 88 fc e5 09 - c8 00 00 00 bc fc e5 09 .."............. 09e5fc70 c8 00 00 00 dc fc e5 09 - 6d 42 f6 04 ca 87 22 05 ........mB....". 09e5fc80 65 15 00 00 c8 00 10 00 - 00 00 00 00 bc fc e5 09 e............... 09e5fc90 14 31 00 10 20 63 87 00 - 20 63 87 00 a8 fc e5 09 .1.. c.. c...... 09e5fca0 df 3a d0 04 e4 ee 0a 05 - c4 fc e5 09 94 33 d0 04 .:...........3.. 09e5fcb0 00 00 00 00 c8 ee 0a 05 - 00 00 00 00 01 00 00 00 ................ 09e5fcc0 00 00 e5 09 d4 fc e5 09 - a7 26 d0 04 58 04 00 00 .........&..X... 09e5fcd0 00 00 00 00 20 fe e5 09 - 43 c9 f5 04 20 fe e5 09 .... ...C... ... 09e5fce0 e5 ba f5 04 14 31 00 10 - 20 63 87 00 20 63 87 00 .....1.. c.. c.. 09e5fcf0 06 00 00 00 3f 00 00 00 - 14 31 00 10 c0 7b 87 00 ....?....1...{.. 09e5fd00 1c fe e5 09 20 fe e5 09 - 91 f1 00 10 20 fe e5 09 .... ....... ... 09e5fd10 0b f2 00 10 20 fd e5 09 - 00 00 00 00 00 00 00 00 .... ........... 09e5fd20 2c 20 50 72 69 6f 72 69 - 74 79 20 00 65 61 64 00 , Priority .ead. State Dump for Thread Id 0x7b eax=0bca39c8 ebx=05da1e2c ecx=00000000 edx=0c3ee86c esi=ffffffff edi=05d006bc eip=05cf00e0 esp=09f5fca8 ebp=09f5fcc8 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 05cf00c3 895dec mov [ebp-0x14],ebx ss:0ae4e6ce=???????? 05cf00c6 750b jnz 05cf00d3 05cf00c8 8b5d08 mov ebx,[ebp+0x8] ss:0ae4e6ce=???????? 05cf00cb 8b4dec mov ecx,[ebp-0x14] ss:0ae4e6ce=???????? 05cf00ce 214b04 and [ebx+0x4],ecx ds:06c90832=00080000 05cf00d1 eb03 jmp 05cf00d6 05cf00d3 8b5d08 mov ebx,[ebp+0x8] ss:0ae4e6ce=???????? 05cf00d6 8b4a08 mov ecx,[edx+0x8] ds:0d2dd272=d31a49c6 05cf00d9 8b7a04 mov edi,[edx+0x4] ds:0d2dd272=d31a49c6 05cf00dc 837df800 cmp dword ptr [ebp-0x8],0x0 ss:0ae4e6ce=???????? FAULT ->05cf00e0 897904 mov [ecx+0x4],edi ds:00eeea06=af6c00f4 05cf00e3 8b4a04 mov ecx,[edx+0x4] ds:0d2dd272=d31a49c6 05cf00e6 8b7a08 mov edi,[edx+0x8] ds:0d2dd272=d31a49c6 05cf00e9 897908 mov [ecx+0x8],edi ds:00eeea06=af6c00f4 05cf00ec 0f8494000000 je 05cf0186 05cf00f2 8b4df4 mov ecx,[ebp-0xc] ss:0ae4e6ce=???????? 05cf00f5 8b7cf104 mov edi,[ecx+esi*8+0x4] ds:00eeea06=af6c00f4 05cf00f9 8d0cf1 lea ecx,[ecx+esi*8] ds:ffffffff=89f10c8d 05cf00fc 897a04 mov [edx+0x4],edi ds:0d2dd272=d31a49c6 05cf00ff 894a08 mov [edx+0x8],ecx ds:0d2dd272=d31a49c6 05cf0102 895104 mov [ecx+0x4],edx ds:00eeea06=af6c00f4 05cf0105 8b4a04 mov ecx,[edx+0x4] ds:0d2dd272=d31a49c6 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fcc8 05ce960b 05da1e2c 00000009 ffffffff 00876020 State Dump for Thread Id 0x7c eax=00000000 ebx=00000001 ecx=0000fe01 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a05fd1c ebp=0a05fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0af4e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a05fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a05fd2c 20 00 00 00 c0 7e 87 00 - c0 7e 87 00 c0 7e 87 00 ....~...~...~.. 0a05fd3c 24 fd 05 0a 64 fd 05 0a - ba db 00 10 c4 00 00 00 $...d........... 0a05fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a05fd5c 01 00 00 00 00 00 00 00 - 80 fd 05 0a e4 9a 00 10 ................ 0a05fd6c e8 fd 05 0a ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0a05fd7c 00 18 87 00 a0 fd 05 0a - 00 9c 00 10 47 15 ff ff ............G... 0a05fd8c e8 fd 05 0a b4 fd 05 0a - ff ff ff ff ec fd 05 0a ................ 0a05fd9c ff ff ff ff 20 fe 05 0a - 89 97 23 06 e8 fd 05 0a .... .....#..... 0a05fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 05 0a G............... 0a05fdbc 26 00 00 00 48 d2 01 10 - 01 00 00 00 00 00 00 00 &...H........... 0a05fdcc 64 e3 8e 00 38 f3 27 06 - 90 4e 7e 00 e0 14 7e 00 d...8.'..N~...~. 0a05fddc 1c 03 00 00 0b 00 00 00 - 05 00 02 10 f3 07 01 10 ................ 0a05fdec 00 00 00 00 98 09 84 01 - f4 4e 7e 00 00 01 01 10 .........N~..... 0a05fdfc 00 04 87 00 84 ff 05 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a05fe0c 00 00 00 00 18 fe 05 0a - 04 00 00 00 28 03 00 00 ............(... 0a05fe1c ff ff ff ff 84 ff 05 0a - 95 f5 00 10 00 00 00 00 ................ 0a05fe2c 20 00 00 00 c0 7e 87 00 - c0 7e 87 00 1e 00 00 00 ....~...~...... 0a05fe3c 00 00 00 00 0c ff 05 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a05fe4c ff ff ff ff 78 fe 05 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7d eax=1001537f ebx=00877df0 ecx=00000000 edx=00000000 esi=0a66fdb0 edi=00000000 eip=77f6793f esp=0a66fd78 ebp=0a66fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b55e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a66fdd4 062373cb 00000308 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x7e eax=00000000 ebx=00000001 ecx=ffffffff edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=0a76fd74 ebp=0a76fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b65e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7f eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000368 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000368 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 68 03 00 00 - 00 00 00 00 00 00 00 00 ...wh........... 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 68 03 00 00 .z.. ...AO.wh... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 68 03 00 00 ........*.#.h... 0a86f9c4 ff ff ff ff 20 77 61 69 - 68 03 00 00 63 5f 74 68 .... waih...c_th 0a86f9d4 00 00 61 64 a7 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a7 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x80 eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000378 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000378 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x81 eax=00000052 ebx=00877750 ecx=0aa6fda8 edx=00000000 esi=000002fc edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 000002fc 0a561000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 fc 02 00 00 - 00 00 00 00 00 00 00 00 ...w............ 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 10 56 0a 00 10 00 00 ....4.....V..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 50 77 87 00 ............Pw.. 0aa6fd28 50 77 87 00 50 77 87 00 - 15 c9 f1 77 68 fd a6 0a Pw..Pw.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 fc 02 00 00 00 10 56 0a - 00 10 00 00 d5 0e 2c 06 ......V.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 50 77 87 00 ....V.'.....Pw.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 94 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 ....pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 50 77 87 00 50 77 87 00 pm+.....Pw..Pw.. State Dump for Thread Id 0x82 eax=1001537f ebx=00877680 ecx=00000000 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=10101010 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 00000350 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x83 eax=00000000 ebx=008775b0 ecx=00143150 edx=00000000 esi=00000348 edi=00000000 eip=77f67ec7 esp=0b17fcf8 ebp=0b17fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0c06e6ff=00000000 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17fd60 06236f32 00000348 0af76000 00001000 062c0e65 ntdll!ZwReadFile State Dump for Thread Id 0x84 eax=1001537f ebx=008774e0 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003b0 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 b0 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 e0 74 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .t.......... .'. 0b27fdd8 2f 86 23 06 b0 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 b0 03 00 00 b8 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - e0 74 87 00 e0 74 87 00 .........t...t.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 78 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....x6........<. 0b27fe98 70 36 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 p6...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 e0 74 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .t.............. State Dump for Thread Id 0x85 eax=0087f010 ebx=00000000 ecx=0087f000 edx=00000000 esi=00000380 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000380 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x86 eax=00000002 ebx=008772a0 ecx=00000002 edx=00000000 esi=008772a0 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x87 eax=1001537f ebx=00000000 ecx=00000000 edx=00000000 esi=00000384 edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 00000384 ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x88 eax=00000026 ebx=00000001 ecx=0000cff8 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x89 eax=00000000 ebx=00000001 ecx=00000009 edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 60 2c 40 00 .5..........`,@. 0bc7fd70 72 00 01 00 98 fd c7 0b - ba db 00 10 a0 00 00 00 r............... 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bc7fd90 01 00 00 00 00 00 00 00 - b4 fd c7 0b e4 9a 00 10 ................ 0bc7fda0 00 fe c7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 90 12 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 .....2~..e...... 0bc7fe00 60 08 c7 0b 14 fe c7 0b - 92 13 40 00 a0 12 93 02 `.........@..... 0bc7fe10 01 fe c7 0b 20 fe c7 0b - 74 13 40 00 a0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - a0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 a8 8f 13 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. State Dump for Thread Id 0x8a eax=00000000 ebx=0ca7f0dc ecx=007cb0a0 edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - 60 8e 87 00 f0 b8 87 00 ........`....... 0ca7f0d8 f0 b8 87 00 58 01 00 00 - c8 03 00 00 60 8e 87 00 ....X.......`... 0ca7f0e8 f0 b8 87 00 f0 b8 87 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: (pid=100) When: 10/3/2006 @ 10:15:42.840 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 72 SPOOLSS.exe 69 RPCSS.exe 80 NDDEAGNT.exe 85 EXPLORER.exe 87 PSTORES.exe 95 hotkey.exe 98 S3TRAY.exe 100 mainapp.exe 105 DDHELP.exe 78 DRWTSN32.exe 144 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x63 eax=00000000 ebx=00000000 ecx=02930d00 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=385f0625 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=0943d596 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=0943d596 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=385f0625 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=385f0625 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=385f0625 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 0001e20f 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - d8 6b 44 e1 a0 01 93 02 P........kD..... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 b9 dd 11 80 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 20 28 65 80 F....t..<... (e. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6c eax=060cfd38 ebx=00000001 ecx=060cfd40 edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=00005d00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6d eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=00003600 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 a8 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 d8 34 14 00 .............4.. State Dump for Thread Id 0x6e eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00004500 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2f eax=0000042d ebx=00000001 ecx=00000007 edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x49 eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x3a eax=00000000 ebx=00000001 ecx=000003e9 edx=00000000 esi=000001cc edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001cc ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 cc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 34 00 00 00 ...w.H...H..4... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 cc 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 8e 02 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 ................ 068ffdc0 14 fe 8f 06 ff ff ff ff - 60 3a 7e 00 e0 fd 8f 06 ........`:~..... 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 b0 e4 7d 00 ...w.H...H....}. 068ffe00 84 ff 8f 06 5b 07 f1 77 - 00 00 ff ff 00 00 00 00 ....[..w........ 068ffe10 18 fe 8f 06 48 08 00 00 - 00 00 87 00 30 3a 7e 00 ....H.......0:~. 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 48 72 14 00 x...|.#P....Hr.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 70 36 14 00 1f 3e f6 77 ......<.p6...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x4b eax=089ffe08 ebx=00874660 ecx=00000000 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000210 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x41 eax=00000003 ebx=00000001 ecx=3f83bcd8 edx=00000000 esi=00000208 edi=00000000 eip=77f6829b esp=08d5fd08 ebp=08d5fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09c4e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd2c 1000dbba 00000208 ffffffff 00000001 00874440 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x28 eax=0caade7a ebx=00000001 ecx=00000127 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x43 eax=00000033 ebx=00000001 ecx=007fc220 edx=00000000 esi=0000023c edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 0000023c ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x59 eax=00000000 ebx=00000001 ecx=ffffffff edx=00000000 esi=00000250 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000250 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2d eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000264 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x42 eax=00000f7f ebx=00000001 ecx=0000000d edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 00000278 ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=00000009 ebx=00000001 ecx=1005a8e0 edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=00000f7f ebx=00000001 ecx=0cab2a78 edx=00000000 esi=0000025c edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 0000025c ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=0087bec0 ebx=00000001 ecx=0087bec0 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 0000028c ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=00875130 ebx=00000001 ecx=00000032 edx=00000000 esi=000002a0 edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002a0 ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=1001537f ebx=00000001 ecx=007b4cac edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=03647412 ebx=00000001 ecx=03647412 edx=00000000 esi=000001b4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=00000000 ebx=00000001 ecx=04a2ee40 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=007e2dd0 ebx=00000001 ecx=00000000 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=00000000 ebx=00000001 ecx=0084a0b0 edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=00000001 ebx=00000001 ecx=d9bd7401 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=011dcbc8 ebx=00000001 ecx=00000200 edx=00000000 esi=00000174 edi=09e5fc0c eip=77f6829b esp=09e5fbf0 ebp=09e5fc14 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e5f7=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fc14 1000dbba 00000174 000000c8 00000001 00873920 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09e5fbf0 bc cc f1 77 74 01 00 00 - 01 00 00 00 0c fc e5 09 ...wt........... 09e5fc00 14 31 00 10 20 63 87 00 - 20 63 87 00 80 7b e1 ff .1.. c.. c...{.. 09e5fc10 ff ff ff ff 38 fc e5 09 - ba db 00 10 74 01 00 00 ....8.......t... 09e5fc20 c8 00 00 00 01 00 00 00 - 20 39 87 00 02 01 00 00 ........ 9...... 09e5fc30 01 00 e5 09 df cb d0 04 - 54 fc e5 09 e4 9a 00 10 ........T....... 09e5fc40 ca 87 22 05 c8 00 00 00 - 54 fc e5 09 00 00 00 00 ..".....T....... 09e5fc50 20 39 87 00 74 fc e5 09 - 00 9c 00 10 65 15 00 00 9..t.......e... 09e5fc60 ca 87 22 05 88 fc e5 09 - c8 00 00 00 bc fc e5 09 .."............. 09e5fc70 c8 00 00 00 dc fc e5 09 - 6d 42 f6 04 ca 87 22 05 ........mB....". 09e5fc80 65 15 00 00 c8 00 00 00 - 00 00 00 00 bc fc e5 09 e............... 09e5fc90 14 31 00 10 20 63 87 00 - 20 63 87 00 a8 fc e5 09 .1.. c.. c...... 09e5fca0 df 3a d0 04 e4 ee 0a 05 - c4 fc e5 09 94 33 d0 04 .:...........3.. 09e5fcb0 00 00 00 00 c8 ee 0a 05 - 00 00 00 00 01 00 00 00 ................ 09e5fcc0 00 00 e5 09 d4 fc e5 09 - a7 26 d0 04 00 00 00 00 .........&...... 09e5fcd0 00 00 00 00 20 fe e5 09 - 43 c9 f5 04 20 fe e5 09 .... ...C... ... 09e5fce0 e5 ba f5 04 14 31 00 10 - 20 63 87 00 20 63 87 00 .....1.. c.. c.. 09e5fcf0 06 00 00 00 3f 00 00 00 - 14 31 00 10 f0 60 87 00 ....?....1...`.. 09e5fd00 1c fe e5 09 20 fe e5 09 - 91 f1 00 10 20 fe e5 09 .... ....... ... 09e5fd10 0b f2 00 10 20 fd e5 09 - 00 00 00 00 00 00 00 00 .... ........... 09e5fd20 2c 20 50 72 69 6f 72 69 - 74 79 20 00 65 61 64 00 , Priority .ead. State Dump for Thread Id 0x7b eax=007e1740 ebx=00000001 ecx=007e1740 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=09f5fd74 ebp=09f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ae4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7c eax=05da6d70 ebx=05da1ddc ecx=00000000 edx=0be6693c esi=00000000 edi=05d02b70 eip=05cf00e0 esp=0a05f864 ebp=0a05f884 iopl=0 nv up ei pl nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206 function: 05cf00c3 895dec mov [ebp-0x14],ebx ss:0af4e28a=???????? 05cf00c6 750b jnz 05cf00d3 05cf00c8 8b5d08 mov ebx,[ebp+0x8] ss:0af4e28a=???????? 05cf00cb 8b4dec mov ecx,[ebp-0x14] ss:0af4e28a=???????? 05cf00ce 214b04 and [ebx+0x4],ecx ds:06c907e2=004a0000 05cf00d1 eb03 jmp 05cf00d6 05cf00d3 8b5d08 mov ebx,[ebp+0x8] ss:0af4e28a=???????? 05cf00d6 8b4a08 mov ecx,[edx+0x8] ds:0cd55342=00000000 05cf00d9 8b7a04 mov edi,[edx+0x4] ds:0cd55342=00000000 05cf00dc 837df800 cmp dword ptr [ebp-0x8],0x0 ss:0af4e28a=???????? FAULT ->05cf00e0 897904 mov [ecx+0x4],edi ds:00eeea06=af6c00f4 05cf00e3 8b4a04 mov ecx,[edx+0x4] ds:0cd55342=00000000 05cf00e6 8b7a08 mov edi,[edx+0x8] ds:0cd55342=00000000 05cf00e9 897908 mov [ecx+0x8],edi ds:00eeea06=af6c00f4 05cf00ec 0f8494000000 je 05cf0186 05cf00f2 8b4df4 mov ecx,[ebp-0xc] ss:0af4e28a=???????? 05cf00f5 8b7cf104 mov edi,[ecx+esi*8+0x4] ds:00eeea07=f8af6c00 05cf00f9 8d0cf1 lea ecx,[ecx+esi*8] ds:00000000=???????? 05cf00fc 897a04 mov [edx+0x4],edi ds:0cd55342=00000000 05cf00ff 894a08 mov [edx+0x8],ecx ds:0cd55342=00000000 05cf0102 895104 mov [ecx+0x4],edx ds:00eeea06=af6c00f4 05cf0105 8b4a04 mov ecx,[edx+0x4] ds:0cd55342=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05f884 05ce960b 05da1ddc 00000009 ffffffff 00877e10 *----> Raw Stack Dump <----* 0a05f864 ff ff ff ff 0b 00 00 00 - 10 7e 87 00 10 7e 87 00 .........~...~.. 0a05f874 20 00 00 00 24 a7 da 05 - 11 00 00 00 1c 00 00 00 ...$........... 0a05f884 c8 f8 05 0a 0b 96 ce 05 - dc 1d da 05 09 00 00 00 ................ 0a05f894 ff ff ff ff 10 7e 87 00 - d4 95 ce 05 0b 00 00 00 .....~.......... 0a05f8a4 f6 73 ce 05 0b 00 00 00 - 01 00 00 00 0d 0d c5 05 .s.............. 0a05f8b4 0b 00 00 00 40 69 e6 0b - d8 f8 05 0a 00 00 00 00 ....@i.......... 0a05f8c4 00 00 00 00 e4 f8 05 0a - 78 07 c5 05 b0 69 e6 0b ........x....i.. 0a05f8d4 40 69 e6 0b 34 f9 05 0a - d5 90 cf 05 00 00 00 00 @i..4........... 0a05f8e4 40 f9 05 0a 38 06 c9 05 - b0 69 e6 0b ff ff ff ff @...8....i...... 0a05f8f4 0c f9 05 0a 89 03 c5 05 - 00 00 00 00 80 9e e5 05 ................ 0a05f904 d0 66 e6 0b 20 f9 05 0a - 40 69 e6 0b 00 00 00 00 .f.. ...@i...... 0a05f914 70 69 e6 0b 01 00 00 00 - 87 29 00 00 00 00 05 0a pi.......)...... 0a05f924 3f ae c8 05 d4 f9 05 0a - ba 6d e6 0b 00 00 00 00 ?........m...... 0a05f934 0c fa 05 0a f6 c5 cf 05 - 01 00 00 00 18 fa 05 0a ................ 0a05f944 2d df bf 05 00 00 00 00 - ba 6d e6 0b 70 f9 05 0a -........m..p... 0a05f954 70 f9 05 0a 10 7e 87 00 - 00 00 00 00 85 dc 00 10 p....~.......... 0a05f964 88 f9 05 0a c0 63 e6 0b - d4 02 00 00 b0 ab d0 05 .....c.......... 0a05f974 00 00 00 00 00 00 00 00 - e8 2b d0 05 00 00 00 00 .........+...... 0a05f984 3d 00 00 00 00 00 00 00 - 00 00 00 00 b0 0a ff ff =............... 0a05f994 ff ff 02 00 01 00 80 00 - 80 99 80 00 d0 60 87 00 .............`.. State Dump for Thread Id 0x7d eax=0a15fdec ebx=00000001 ecx=007e1760 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a15fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a15fd2c 20 00 00 00 c0 7c 87 00 - c0 7c 87 00 c0 7c 87 00 ....|...|...|.. 0a15fd3c 24 fd 15 0a 64 fd 15 0a - ba db 00 10 c4 00 00 00 $...d........... 0a15fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a15fd5c 01 00 00 00 00 00 00 00 - 80 fd 15 0a e4 9a 00 10 ................ 0a15fd6c e8 fd 15 0a ff ff ff ff - 12 a7 05 10 00 00 7d 00 ..............}. 0a15fd7c 00 18 87 00 a0 fd 15 0a - 00 9c 00 10 47 15 ff ff ............G... 0a15fd8c e8 fd 15 0a b4 fd 15 0a - ff ff ff ff ec fd 15 0a ................ 0a15fd9c ff ff ff ff 20 fe 15 0a - 89 97 23 06 e8 fd 15 0a .... .....#..... 0a15fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 15 0a G............... 0a15fdbc 26 00 00 00 48 d2 01 10 - 01 00 00 00 00 00 00 00 &...H........... 0a15fdcc b4 16 8e 00 38 f3 27 06 - 90 4e 7e 00 40 f6 7d 00 ....8.'..N~.@.}. 0a15fddc 18 03 00 00 0b 00 00 00 - 05 00 02 10 89 07 01 10 ................ 0a15fdec 00 00 00 00 98 09 84 01 - f4 4e 7e 00 00 01 01 10 .........N~..... 0a15fdfc 00 04 87 00 84 ff 15 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a15fe0c 00 00 00 00 18 fe 15 0a - 04 00 00 00 14 03 00 00 ................ 0a15fe1c ff ff ff ff 84 ff 15 0a - 95 f5 00 10 00 00 00 00 ................ 0a15fe2c 20 00 00 00 c0 7c 87 00 - c0 7c 87 00 1e 00 00 00 ....|...|...... 0a15fe3c 00 00 00 00 0c ff 15 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a15fe4c ff ff ff ff 78 fe 15 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7e eax=1001537f ebx=00877bf0 ecx=00000000 edx=00000000 esi=0a76fdb0 edi=00000000 eip=77f6793f esp=0a76fd78 ebp=0a76fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b65e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fdd4 062373cb 00000338 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x7f eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000358 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000358 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 58 03 00 00 - 00 00 00 00 00 00 00 00 ...wX........... 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 58 03 00 00 .z.. ...AO.wX... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 58 03 00 00 ........*.#.X... 0a86f9c4 ff ff ff ff 20 77 61 69 - 58 03 00 00 63 5f 74 68 .... waiX...c_th 0a86f9d4 00 00 61 64 a7 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a7 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x80 eax=000010b1 ebx=00000000 ecx=100210b1 edx=00000000 esi=00000368 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000368 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x81 eax=00000052 ebx=00877740 ecx=0aa6fda8 edx=00000000 esi=0000032c edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 0000032c 0a662000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 2c 03 00 00 - 00 00 00 00 00 00 00 00 ...w,........... 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 20 66 0a 00 10 00 00 ....4.... f..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 40 77 87 00 ............@w.. 0aa6fd28 40 77 87 00 40 77 87 00 - 15 c9 f1 77 68 fd a6 0a @w..@w.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 2c 03 00 00 00 20 66 0a - 00 10 00 00 d5 0e 2c 06 ,.... f.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 40 77 87 00 ....V.'.....@w.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 94 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 ....pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 40 77 87 00 40 77 87 00 pm+.....@w..@w.. State Dump for Thread Id 0x82 eax=1001537f ebx=00877670 ecx=00000000 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=10101010 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 00000348 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x83 eax=00000000 ebx=008775a0 ecx=00842150 edx=00000000 esi=00000340 edi=00000000 eip=77f67ec7 esp=0b17fcf8 ebp=0b17fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0c06e6ff=00000000 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17fd60 06236f32 00000340 0af76000 00001000 062c0e65 ntdll!ZwReadFile State Dump for Thread Id 0x84 eax=1001537f ebx=008774d0 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003a4 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 a4 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 d0 74 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .t.......... .'. 0b27fdd8 2f 86 23 06 a4 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 a4 03 00 00 a0 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - d0 74 87 00 d0 74 87 00 .........t...t.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 78 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....x6........<. 0b27fe98 70 36 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 p6...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 d0 74 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .t.............. State Dump for Thread Id 0x85 eax=0087f010 ebx=00000000 ecx=0087f000 edx=00000000 esi=00000380 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000380 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x86 eax=00000002 ebx=008772a0 ecx=00000002 edx=00000000 esi=008772a0 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x87 eax=0ba7fda0 ebx=00000000 ecx=ffffffff edx=00000000 esi=00000384 edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 00000384 ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x88 eax=06284258 ebx=00000001 ecx=00000010 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x89 eax=00000002 ebx=00000001 ecx=00000200 edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 60 2c 40 00 .5..........`,@. 0bc7fd70 66 00 02 00 98 fd c7 0b - ba db 00 10 a0 00 00 00 f............... 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bc7fd90 01 00 00 00 00 00 00 00 - b4 fd c7 0b e4 9a 00 10 ................ 0bc7fda0 00 fe c7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 90 12 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 .....2~..e...... 0bc7fe00 60 08 c7 0b 14 fe c7 0b - 92 13 40 00 a0 12 93 02 `.........@..... 0bc7fe10 01 fe c7 0b 20 fe c7 0b - 74 13 40 00 a0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - a0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 a8 8f 13 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. State Dump for Thread Id 0x8a eax=00000000 ebx=0ca7f0dc ecx=00838030 edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - 60 8e 87 00 40 b9 87 00 ........`...@... 0ca7f0d8 40 b9 87 00 ec 03 00 00 - d4 03 00 00 60 8e 87 00 @...........`... 0ca7f0e8 40 b9 87 00 40 b9 87 00 - 00 00 00 00 00 00 00 00 @...@........... 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: (pid=101) When: 3/1/2007 @ 4:1:19.478 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 72 SPOOLSS.exe 68 RPCSS.exe 80 NDDEAGNT.exe 86 EXPLORER.exe 82 PSTORES.exe 97 hotkey.exe 99 S3TRAY.exe 101 mainapp.exe 106 DDHELP.exe 142 DRWTSN32.exe 144 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x64 eax=02920000 ebx=00000000 ecx=77a2ea48 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 0001e074 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - 00 00 00 00 a0 01 93 02 P............... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 60 87 65 80 F....t..<...`.e. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6d eax=000000c0 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=00000800 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=00000d00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 a8 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 d8 34 14 00 .............4.. State Dump for Thread Id 0x39 eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x49 eax=0000042d ebx=00000001 ecx=00000001 edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x4b eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2f eax=037d1c48 ebx=00000001 ecx=037d1c48 edx=00000000 esi=000001cc edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001cc ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 cc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 3c 00 00 00 ...w.H...H..<... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 cc 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 dd 00 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 ................ 068ffdc0 14 fe 8f 06 ff ff ff ff - 00 43 7f 00 e0 fd 8f 06 .........C...... 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 30 f2 7d 00 ...w.H...H..0.}. 068ffe00 84 ff 8f 06 96 07 f1 77 - 00 00 ff ff 00 00 00 00 .......w........ 068ffe10 18 fe 8f 06 15 0b 00 00 - 00 00 87 00 b0 42 7f 00 .............B.. 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 48 72 14 00 x...|.#P....Hr.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 70 36 14 00 1f 3e f6 77 ......<.p6...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x3f eax=00000000 ebx=00874660 ecx=00000000 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000210 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x59 eax=0d290218 ebx=00000001 ecx=04921040 edx=00000000 esi=00000208 edi=00000000 eip=77f6829b esp=08d5fd48 ebp=08d5fd6c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09c4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd6c 1000dbba 00000208 ffffffff 00000001 00874440 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x28 eax=0d2a84a2 ebx=00000001 ecx=000001ae edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5b eax=00875c2a ebx=00000001 ecx=00875c20 edx=00000000 esi=0000023c edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 0000023c ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5f eax=00852b6a ebx=00000001 ecx=00000057 edx=00000000 esi=00000250 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000250 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x3b eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000264 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5a eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 00000278 ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x42 eax=00000f7f ebx=00000001 ecx=fffff818 edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=00000001 ebx=00000001 ecx=0000ffff edx=00000000 esi=0000025c edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 0000025c ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=00000001 ebx=00000001 ecx=00000000 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 0000028c ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=00000080 ebx=00000001 ecx=1005a796 edx=00000000 esi=000002a0 edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002a0 ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=1001537f ebx=00000001 ecx=007b4cac edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=00000000 ebx=00000001 ecx=df4d9168 edx=00000000 esi=000001b4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=00000000 ebx=00000001 ecx=00810e1e edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=00000000 ebx=00000001 ecx=00119e01 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=00000000 ebx=00000001 ecx=007c9560 edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000001 ebx=00000001 ecx=34a73b01 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=09e5fe14 ebx=00000001 ecx=00000782 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=09e5fd74 ebp=09e5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=00000001 ebx=00000001 ecx=00097401 edx=00000000 esi=00000174 edi=09f5fc0c eip=77f6829b esp=09f5fbf0 ebp=09f5fc14 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ae4e5f7=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fc14 1000dbba 00000174 000000c8 00000001 00873920 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09f5fbf0 bc cc f1 77 74 01 00 00 - 01 00 00 00 0c fc f5 09 ...wt........... 09f5fc00 14 31 00 10 a0 61 87 00 - a0 61 87 00 80 7b e1 ff .1...a...a...{.. 09f5fc10 ff ff ff ff 38 fc f5 09 - ba db 00 10 74 01 00 00 ....8.......t... 09f5fc20 c8 00 00 00 01 00 00 00 - 20 39 87 00 02 01 00 00 ........ 9...... 09f5fc30 01 00 00 00 00 00 00 00 - 54 fc f5 09 e4 9a 00 10 ........T....... 09f5fc40 ca 87 22 05 c8 00 00 00 - 54 a7 05 10 00 00 00 00 ..".....T....... 09f5fc50 20 39 87 00 74 fc f5 09 - 00 9c 00 10 65 15 00 00 9..t.......e... 09f5fc60 ca 87 22 05 88 fc f5 09 - c8 00 00 00 bc fc f5 09 .."............. 09f5fc70 c8 00 00 00 dc fc f5 09 - 6d 42 f6 04 ca 87 22 05 ........mB....". 09f5fc80 65 15 00 00 c8 00 00 00 - 00 00 00 00 bc fc f5 09 e............... 09f5fc90 14 31 00 10 a0 61 87 00 - a0 61 87 00 a8 fc f5 09 .1...a...a...... 09f5fca0 df 3a d0 04 e4 ee 0a 05 - c4 fc f5 09 94 33 d0 04 .:...........3.. 09f5fcb0 00 00 00 00 c8 ee 0a 05 - 00 00 00 00 01 00 00 00 ................ 09f5fcc0 00 00 f5 09 d4 fc f5 09 - a7 26 d0 04 58 04 00 00 .........&..X... 09f5fcd0 00 00 00 00 20 fe f5 09 - 43 c9 f5 04 20 fe f5 09 .... ...C... ... 09f5fce0 e5 ba f5 04 14 31 00 10 - a0 61 87 00 a0 61 87 00 .....1...a...a.. 09f5fcf0 06 00 00 00 3f 00 00 00 - 14 31 00 10 d0 7b 87 00 ....?....1...{.. 09f5fd00 1c fe f5 09 20 fe f5 09 - 91 f1 00 10 20 fe f5 09 .... ....... ... 09f5fd10 0b f2 00 10 20 fd f5 09 - 00 00 00 00 00 00 00 00 .... ........... 09f5fd20 2c 20 50 72 69 6f 72 69 - 74 79 20 00 65 61 64 00 , Priority .ead. State Dump for Thread Id 0x7b eax=0c3bbce0 ebx=00877e80 ecx=0c3ba170 edx=00000000 esi=00877e80 edi=ffffffff eip=05cc0f0b esp=0a05fb28 ebp=0a05fb40 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: 05cc0eed f8 clc 05cc0eee 8b55f8 mov edx,[ebp-0x8] ss:0af4e546=???????? 05cc0ef1 3b55ec cmp edx,[ebp-0x14] ss:0af4e546=???????? 05cc0ef4 0f848b000000 je 05cc0f85 05cc0efa 8b45f8 mov eax,[ebp-0x8] ss:0af4e546=???????? 05cc0efd 8945f0 mov [ebp-0x10],eax ss:0af4e546=???????? 05cc0f00 8b4dec mov ecx,[ebp-0x14] ss:0af4e546=???????? 05cc0f03 894df4 mov [ebp-0xc],ecx ss:0af4e546=???????? 05cc0f06 eb09 jmp 05cc0f11 05cc0f08 8b55f4 mov edx,[ebp-0xc] ss:0af4e546=???????? FAULT ->05cc0f0b 8b4204 mov eax,[edx+0x4] ds:00eeea06=af6c00f4 05cc0f0e 8945f4 mov [ebp-0xc],eax ss:0af4e546=???????? 05cc0f11 8b4df0 mov ecx,[ebp-0x10] ss:0af4e546=???????? 05cc0f14 3b4df4 cmp ecx,[ebp-0xc] ss:0af4e546=???????? 05cc0f17 7416 jz 05cc0f2f 05cc0f19 8b55f0 mov edx,[ebp-0x10] ss:0af4e546=???????? 05cc0f1c 8b4208 mov eax,[edx+0x8] ds:00eeea06=af6c00f4 05cc0f1f 3b45f4 cmp eax,[ebp-0xc] ss:0af4e546=???????? 05cc0f22 7409 jz 05cc0f2d 05cc0f24 8b4df0 mov ecx,[ebp-0x10] ss:0af4e546=???????? 05cc0f27 8b5108 mov edx,[ecx+0x8] ds:0d2a8b76=034a2ea4 05cc0f2a 8955f0 mov [ebp-0x10],edx ss:0af4e546=???????? *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05fb40 05c0efec 0c3b93f0 0c3c8860 00000020 05cebefc *----> Raw Stack Dump <----* 0a05fb28 6c 1f e6 0b a0 93 e6 0b - e0 bc 3b 0c 00 00 00 00 l.........;..... 0a05fb38 90 24 3d 0c 00 00 00 00 - d8 fb 05 0a ec ef c0 05 .$=............. 0a05fb48 f0 93 3b 0c 60 88 3c 0c - 20 00 00 00 fc be ce 05 ..;.`.<. ....... 0a05fb58 e0 1e e6 0b a8 fb 05 0a - 14 96 ce 05 09 00 00 00 ................ 0a05fb68 2c 1e da 05 09 00 00 00 - ff ff ff ff 80 7e 87 00 ,............~.. 0a05fb78 d4 95 ce 05 10 00 00 00 - 80 7e 87 00 cf 46 ce 05 .........~...F.. 0a05fb88 00 00 00 00 a9 57 c5 05 - 00 00 00 00 20 df 3c 0c .....W...... .<. 0a05fb98 00 00 00 00 20 b8 3c 0c - 08 00 05 0a ff ff ff ff .... .<......... 0a05fba8 08 00 00 00 80 7e 87 00 - 80 99 3c 0c 10 00 00 00 .....~....<..... 0a05fbb8 ff ff ff ff 0c 00 00 00 - 80 7e 87 00 ff ff ff bf .........~...... 0a05fbc8 ff ff ff ff 90 cd 3c 0c - 01 00 87 00 a0 93 e6 0b ......<......... 0a05fbd8 30 fc 05 0a 89 d5 c0 05 - f0 93 3b 0c ff ff ff ff 0.........;..... 0a05fbe8 80 7e 87 00 09 00 00 00 - e0 1e e6 0b 90 cd 3c 02 .~............<. 0a05fbf8 80 7e 87 00 cf 46 ce 05 - 90 cd 3c 0c 99 25 c2 05 .~...F....<..%.. 0a05fc08 90 cd 3c 0c 90 cd 3c 0c - d8 29 c9 0b 90 cd 3c 0c ..<...<..)....<. 0a05fc18 90 cd 3c 0c 00 00 3c 0c - 00 00 00 00 88 fd 05 0a ..<...<......... 0a05fc28 1a 79 cf 05 ff ff ff ff - a0 fc 05 0a 48 74 c2 05 .y..........Ht.. 0a05fc38 e0 95 3b 0c 01 00 00 00 - 80 29 c9 0b ba db 00 10 ..;......)...... 0a05fc48 64 00 00 00 85 dc 00 10 - f2 a9 05 10 e8 a9 05 10 d............... 0a05fc58 00 00 00 00 00 00 3c 0c - e0 dc 3c 0c 7c fc 05 0a ......<...<.|... State Dump for Thread Id 0x7c eax=00871800 ebx=00000001 ecx=008717b0 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a15fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a15fd2c 20 00 00 00 40 7d 87 00 - 40 7d 87 00 40 7d 87 00 ...@}..@}..@}.. 0a15fd3c 24 fd 15 0a 64 fd 15 0a - ba db 00 10 c4 00 00 00 $...d........... 0a15fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a15fd5c 01 00 00 00 00 00 00 00 - 80 fd 15 0a e4 9a 00 10 ................ 0a15fd6c e8 fd 15 0a ff ff ff ff - 12 a7 05 10 00 00 7d 00 ..............}. 0a15fd7c 00 18 87 00 a0 fd 15 0a - 00 9c 00 10 47 15 ff ff ............G... 0a15fd8c e8 fd 15 0a b4 fd 15 0a - ff ff ff ff ec fd 15 0a ................ 0a15fd9c ff ff ff ff 20 fe 15 0a - 89 97 23 06 e8 fd 15 0a .... .....#..... 0a15fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 15 0a G............... 0a15fdbc 26 00 00 00 48 d2 01 10 - 01 00 00 00 00 00 00 00 &...H........... 0a15fdcc 1c 4e 8d 00 38 f3 27 06 - e0 4e 7e 00 a0 d0 7d 00 .N..8.'..N~...}. 0a15fddc 08 03 00 00 0b 00 00 00 - 05 00 02 10 35 07 01 10 ............5... 0a15fdec 00 00 00 00 98 09 84 01 - e4 35 7e 00 00 01 01 10 .........5~..... 0a15fdfc 00 04 87 00 84 ff 15 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a15fe0c 00 00 00 00 18 fe 15 0a - 04 00 00 00 00 03 00 00 ................ 0a15fe1c ff ff ff ff 84 ff 15 0a - 95 f5 00 10 00 00 00 00 ................ 0a15fe2c 20 00 00 00 40 7d 87 00 - 40 7d 87 00 1e 00 00 00 ...@}..@}...... 0a15fe3c 00 00 00 00 0c ff 15 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a15fe4c ff ff ff ff 78 fe 15 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7d eax=00000035 ebx=00877c70 ecx=10020035 edx=00000000 esi=0a76fdb0 edi=00000000 eip=77f6793f esp=0a76fd78 ebp=0a76fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b65e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fdd4 062373cb 00000334 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x7e eax=00000027 ebx=00000000 ecx=1002a162 edx=00000000 esi=00000358 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000358 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 58 03 00 00 - 00 00 00 00 00 00 00 00 ...wX........... 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 58 03 00 00 .z.. ...AO.wX... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 58 03 00 00 ........*.#.X... 0a86f9c4 ff ff ff ff 20 77 61 69 - 58 03 00 00 63 5f 74 68 .... waiX...c_th 0a86f9d4 00 00 61 64 a7 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a7 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x7f eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000368 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000368 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x80 eax=00000052 ebx=00877750 ecx=0aa6fda8 edx=00000000 esi=00000328 edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 00000328 0a663000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 28 03 00 00 - 00 00 00 00 00 00 00 00 ...w(........... 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 30 66 0a 00 10 00 00 ....4....0f..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 50 77 87 00 ............Pw.. 0aa6fd28 50 77 87 00 50 77 87 00 - 15 c9 f1 77 68 fd a6 0a Pw..Pw.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 28 03 00 00 00 30 66 0a - 00 10 00 00 d5 0e 2c 06 (....0f.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 50 77 87 00 ....V.'.....Pw.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 60 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 `...pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 50 77 87 00 50 77 87 00 pm+.....Pw..Pw.. State Dump for Thread Id 0x81 eax=1001537f ebx=00877680 ecx=00000000 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=10101010 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 0000033c 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x82 eax=00000000 ebx=00877450 ecx=007c7960 edx=00000000 esi=00000374 edi=00000000 eip=77f67ec7 esp=0b17fcf8 ebp=0b17fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0c06e6ff=00000000 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17fd60 06236f32 00000374 0af77000 00001000 062c0e65 ntdll!ZwReadFile State Dump for Thread Id 0x83 eax=1001537f ebx=00877380 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003d0 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 d0 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 80 73 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .s.......... .'. 0b27fdd8 2f 86 23 06 d0 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 d0 03 00 00 d4 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - 80 73 87 00 80 73 87 00 .........s...s.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 78 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....x6........<. 0b27fe98 70 36 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 p6...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 80 73 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .s.............. State Dump for Thread Id 0x84 eax=1001537f ebx=00000000 ecx=206b636f edx=00000000 esi=00000394 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000394 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x85 eax=00000002 ebx=00877140 ecx=00000002 edx=00000000 esi=00877140 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x86 eax=000005d9 ebx=00000000 ecx=007d7120 edx=00000000 esi=00000398 edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 00000398 ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x87 eax=00000026 ebx=00000001 ecx=0000cff8 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x88 eax=007b7ad8 ebx=00000001 ecx=0000019d edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 60 2c 40 00 .5..........`,@. 0bc7fd70 70 00 01 00 98 fd c7 0b - ba db 00 10 a0 00 00 00 p............... 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bc7fd90 01 00 00 00 00 00 00 00 - b4 fd c7 0b e4 9a 00 10 ................ 0bc7fda0 00 fe c7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 b0 12 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 .....2~..e...... 0bc7fe00 60 08 c7 0b 14 fe c7 0b - 92 13 40 00 c0 12 93 02 `.........@..... 0bc7fe10 01 fe c7 0b 20 fe c7 0b - 74 13 40 00 c0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - c0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 a8 8f 13 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. State Dump for Thread Id 0x89 eax=1001537f ebx=0ca7f0dc ecx=00000000 edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - 00 0f 7c 00 50 ba 87 00 ..........|.P... 0ca7f0d8 50 ba 87 00 58 01 00 00 - a0 03 00 00 00 0f 7c 00 P...X.........|. 0ca7f0e8 50 ba 87 00 50 ba 87 00 - 00 00 00 00 00 00 00 00 P...P........... 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: (pid=101) When: 9/24/2007 @ 15:14:24.843 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 72 SPOOLSS.exe 67 RPCSS.exe 81 NDDEAGNT.exe 88 EXPLORER.exe 85 PSTORES.exe 97 hotkey.exe 99 S3TRAY.exe 101 mainapp.exe 106 DDHELP.exe 78 DRWTSN32.exe 144 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x64 eax=02920000 ebx=00000000 ecx=77a2ea48 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 000192d8 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - 00 00 00 00 a0 01 93 02 P............... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 60 5d 65 80 F....t..<...`]e. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6d eax=000000c0 ebx=00000001 ecx=00000001 edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=0003cf00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=00000001 ebx=00000001 ecx=0000000f edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=00053400 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 00 00 00 00 \]^_.3...3...... 061cfd70 01 00 00 00 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 30 06 87 00 ........@:..0... 061cfd90 00 33 87 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 .3..l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 21 ce f6 77 90 01 00 00 ........!..w.... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 00 00 00 00 .3...3.......... 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 78 40 14 00 x...|.#P....x@.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 62 79 eb 05 ff ff ff ff - 98 fe 1c 06 00 00 00 00 by.............. 061cfe80 00 00 eb 05 02 00 00 00 - 00 00 00 00 00 33 14 00 .............3.. State Dump for Thread Id 0x39 eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00ffff00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x49 eax=00000528 ebx=00000001 ecx=03563ad8 edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x4b eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2f eax=011fabe0 ebx=00000001 ecx=00000800 edx=00000000 esi=000001d8 edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001d8 ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 d8 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 3c 00 00 00 ...w.H...H..<... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 d8 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 ac 01 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 ................ 068ffdc0 14 fe 8f 06 ff ff ff ff - 20 38 7f 00 e0 fd 8f 06 ........ 8...... 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 10 37 7e 00 ...w.H...H...7~. 068ffe00 84 ff 8f 06 52 08 f1 77 - 00 00 ff ff 00 00 00 00 ....R..w........ 068ffe10 18 fe 8f 06 e5 0a 00 00 - 00 00 87 00 d0 37 7f 00 .............7.. 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 00 73 14 00 x...|.#P.....s.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 10 4d 14 00 ..<..........M.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 08 4d 14 00 1f 3e f6 77 ......<..M...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x3f eax=03e77bfe ebx=00874660 ecx=000e1576 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000214 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x3b eax=00000f7f ebx=00000001 ecx=fffff818 edx=00000000 esi=00000208 edi=00000000 eip=77f6829b esp=08d5fd48 ebp=08d5fd6c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09c4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd6c 1000dbba 00000208 ffffffff 00000001 00874440 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x28 eax=00000000 ebx=00000001 ecx=00000033 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5b eax=00000000 ebx=00000001 ecx=0087409a edx=00000000 esi=00000240 edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 00000240 ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5f eax=00c32ee6 ebx=00000001 ecx=0000096c edx=00000000 esi=00000254 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000254 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5a eax=009b0f7f ebx=00000001 ecx=00000119 edx=00000000 esi=00000268 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000268 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x42 eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=0000024c edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 0000024c ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=0cac4bca ebx=00875640 ecx=ffffffff edx=00000001 esi=00000000 edi=77f1ccbc eip=0322a46b esp=0935fbb8 ebp=0935fbbc iopl=0 ov up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000a13 function: 0322a454 51 push ecx 0322a455 894dfc mov [ebp-0x4],ecx ss:0a24e5c2=???????? 0322a458 8b45fc mov eax,[ebp-0x4] ss:0a24e5c2=???????? 0322a45b 8b4d08 mov ecx,[ebp+0x8] ss:0a24e5c2=???????? 0322a45e 894880 mov [eax-0x80],ecx ds:0d9b35d0=???????? 0322a461 841b test [ebx],bl ds:00875640=6f 0322a463 e140 loope 0322a4a5 0322a465 841b test [ebx],bl ds:00875640=6f 0322a467 e103 loope 0322a46c 0322a469 0000 add [eax],al ds:0cac4bca=76 FAULT ->0322a46b 0002 add [edx],al ds:00000001=?? 0322a46d 0000 add [eax],al ds:0cac4bca=76 0322a46f 00900a000000 add [eax+0xa],dl ds:0cac4bd4=92 0322a475 1100 adc [eax],eax ds:0cac4bca=034a2e76 0322a477 00900a000060 add [eax+0x6000000a],dl ds:6cac4bd4=?? 0322a47d 0e push cs 0322a47e 0000 add [eax],al ds:0cac4bca=76 0322a480 3251e8 xor dl,[ecx-0x18] ds:00eeea05=49 0322a483 d983250083c4 fld dword ptr [ebx+0xc4830025] ds:c50a5665=???????? 0322a489 088b5518528b or [ebx+0x8b521855],cl ds:8bd96e95=08 0322a48f 45 inc ebp 0322a490 fc cld *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fbbc 03234cd1 00000001 036c34ac 00000001 00000001 *----> Raw Stack Dump <----* 0935fbb8 ca 4b ac 0c 74 fc 35 09 - d1 4c 23 03 01 00 00 00 .K..t.5..L#..... 0935fbc8 ac 34 6c 03 01 00 00 00 - 01 00 00 00 08 45 4f 03 .4l..........EO. 0935fbd8 40 fc 35 09 40 56 87 00 - 37 81 ac 0c 08 45 4f 03 @.5.@V..7....EO. 0935fbe8 37 81 ac 0c 40 56 87 00 - 2c fc 35 09 38 27 22 03 7...@V..,.5.8'". 0935fbf8 00 00 00 00 00 00 00 00 - 00 00 00 00 27 81 ac 0c ............'... 0935fc08 00 00 00 00 00 00 00 00 - f8 6c ab 0c e3 26 23 03 .........l...&#. 0935fc18 e8 a6 bb 03 00 00 00 00 - 01 00 00 00 00 00 e0 3f ...............? 0935fc28 00 00 00 00 9d 80 ac 0c - ca 4b ac 0c 0a 45 ac 0c .........K...E.. 0935fc38 fa 6d ab 0c 00 00 80 3f - 00 56 87 00 40 56 87 00 .m.....?.V..@V.. 0935fc48 04 00 00 00 00 00 00 00 - f8 6c ab 0c ff ff 7f 7f .........l...... 0935fc58 f8 6c ab 0c 74 fc 35 09 - 00 00 00 00 48 32 bf 03 .l..t.5.....H2.. 0935fc68 00 00 00 00 00 00 ab 0c - 00 00 00 00 a4 fc 35 09 ..............5. 0935fc78 c1 34 23 03 00 00 00 00 - f8 6c ab 0c fa 6d ab 0c .4#......l...m.. 0935fc88 fa 6d ab 0c ff ff ff ff - 00 00 00 00 00 37 92 04 .m...........7.. 0935fc98 d0 fc 35 09 01 22 92 04 - d4 91 05 00 00 fd 35 09 ..5.."........5. 0935fca8 b0 d8 23 03 20 24 92 04 - b5 fd 1b 03 d4 fc 35 09 ..#. $........5. 0935fcb8 40 23 92 04 20 23 92 04 - 20 37 92 04 e8 fc 35 09 @#.. #.. 7....5. 0935fcc8 13 e8 23 03 dc fc 35 09 - 20 23 92 04 20 23 92 04 ..#...5. #.. #.. 0935fcd8 40 23 92 04 20 23 92 04 - e0 26 92 04 20 23 92 04 @#.. #...&.. #.. 0935fce8 f4 fc 35 09 bc d2 23 03 - c0 23 92 04 b4 fd 35 09 ..5...#..#....5. State Dump for Thread Id 0x70 eax=0945fccc ebx=00000001 ecx=094500f2 edx=00000000 esi=00000284 edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 00000284 ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=00000000 ebx=00000001 ecx=00000060 edx=00000000 esi=00000298 edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 00000298 ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=00000001 ebx=00000001 ecx=0000000a edx=00000000 esi=000002ac edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002ac ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=1001537f ebx=00000001 ecx=007b4cac edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=00000000 ebx=00000001 ecx=c0000000 edx=00000000 esi=000001b0 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b0 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=00000000 ebx=00000001 ecx=007c9a60 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=00000002 ebx=00000001 ecx=007e78d0 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=00000000 ebx=00000001 ecx=0086e7c0 edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=00000001 ebx=00000001 ecx=01ff0b01 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=00001565 ebx=00000001 ecx=09e5fc88 edx=00000000 esi=00000174 edi=09e5fc0c eip=77f6829b esp=09e5fbf0 ebp=09e5fc14 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e5f7=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fc14 1000dbba 00000174 000000c8 00000001 00873920 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09e5fbf0 bc cc f1 77 74 01 00 00 - 01 00 00 00 0c fc e5 09 ...wt........... 09e5fc00 14 31 00 10 20 63 87 00 - 20 63 87 00 80 7b e1 ff .1.. c.. c...{.. 09e5fc10 ff ff ff ff 38 fc e5 09 - ba db 00 10 74 01 00 00 ....8.......t... 09e5fc20 c8 00 00 00 01 00 00 00 - 20 39 87 00 02 01 00 00 ........ 9...... 09e5fc30 01 00 e5 09 df cb d0 04 - 54 fc e5 09 e4 9a 00 10 ........T....... 09e5fc40 ca 87 22 05 c8 00 00 00 - 54 fc e5 09 00 00 00 00 ..".....T....... 09e5fc50 20 39 87 00 74 fc e5 09 - 00 9c 00 10 65 15 00 00 9..t.......e... 09e5fc60 ca 87 22 05 88 fc e5 09 - c8 00 00 00 bc fc e5 09 .."............. 09e5fc70 c8 00 00 00 dc fc e5 09 - 6d 42 f6 04 ca 87 22 05 ........mB....". 09e5fc80 65 15 00 00 c8 00 00 00 - 00 00 00 00 bc fc e5 09 e............... 09e5fc90 14 31 00 10 20 63 87 00 - 20 63 87 00 a8 fc e5 09 .1.. c.. c...... 09e5fca0 df 3a d0 04 e4 ee 0a 05 - c4 fc e5 09 94 33 d0 04 .:...........3.. 09e5fcb0 00 00 00 00 c8 ee 0a 05 - 00 00 00 00 01 00 00 00 ................ 09e5fcc0 00 00 e5 09 d4 fc e5 09 - a7 26 d0 04 53 07 00 00 .........&..S... 09e5fcd0 00 00 00 00 20 fe e5 09 - 43 c9 f5 04 20 fe e5 09 .... ...C... ... 09e5fce0 e5 ba f5 04 14 31 00 10 - 20 63 87 00 20 63 87 00 .....1.. c.. c.. 09e5fcf0 06 00 00 00 3f 00 00 00 - 14 31 00 10 60 7d 87 00 ....?....1..`}.. 09e5fd00 1c fe e5 09 20 fe e5 09 - 91 f1 00 10 20 fe e5 09 .... ....... ... 09e5fd10 0b f2 00 10 20 fd e5 09 - 00 00 00 00 00 00 00 00 .... ........... 09e5fd20 2c 20 50 72 69 6f 72 69 - 74 79 20 00 65 61 64 00 , Priority .ead. State Dump for Thread Id 0x7b eax=00000006 ebx=00000001 ecx=00000006 edx=00000000 esi=000000f8 edi=00000000 eip=77f6829b esp=09f5fc30 ebp=09f5fc54 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ae4e637=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fc54 1000dbba 000000f8 ffffffff 00000001 00872220 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7c eax=00871bca ebx=00000001 ecx=00000101 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=0a05fd74 ebp=0a05fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0af4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7d eax=00000002 ebx=00000001 ecx=007e3740 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a15fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a15fd2c 20 00 00 00 c0 7c 87 00 - c0 7c 87 00 c0 7c 87 00 ....|...|...|.. 0a15fd3c 24 fd 15 0a 64 fd 15 0a - ba db 00 10 c4 00 00 00 $...d........... 0a15fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a15fd5c 01 00 00 00 00 00 00 00 - 80 fd 15 0a e4 9a 00 10 ................ 0a15fd6c e8 fd 15 0a ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0a15fd7c 00 18 87 00 a0 fd 15 0a - 00 9c 00 10 47 15 ff ff ............G... 0a15fd8c e8 fd 15 0a b4 fd 15 0a - ff ff ff ff ec fd 15 0a ................ 0a15fd9c ff ff ff ff 20 fe 15 0a - 89 97 23 06 e8 fd 15 0a .... .....#..... 0a15fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 15 0a G............... 0a15fdbc 26 00 00 00 48 d2 01 10 - 01 00 00 00 00 00 00 00 &...H........... 0a15fdcc 2c a8 8d 00 38 f3 27 06 - 90 4e 7e 00 e0 5e 7e 00 ,...8.'..N~..^~. 0a15fddc 38 03 00 00 0b 00 00 00 - 05 00 02 10 9f 08 01 10 8............... 0a15fdec 00 00 00 00 98 09 84 01 - e4 35 7e 00 00 01 01 10 .........5~..... 0a15fdfc 00 04 87 00 84 ff 15 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a15fe0c 00 00 00 00 18 fe 15 0a - 04 00 00 00 b8 02 00 00 ................ 0a15fe1c ff ff ff ff 84 ff 15 0a - 95 f5 00 10 00 00 00 00 ................ 0a15fe2c 20 00 00 00 c0 7c 87 00 - c0 7c 87 00 1e 00 00 00 ....|...|...... 0a15fe3c 00 00 00 00 0c ff 15 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a15fe4c ff ff ff ff 78 fe 15 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7e eax=1001537f ebx=00877bf0 ecx=00000000 edx=00000000 esi=0a76fdb0 edi=00000000 eip=77f6793f esp=0a76fd78 ebp=0a76fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b65e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fdd4 062373cb 00000330 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x7f eax=0a86fc2c ebx=00000000 ecx=0000001e edx=00000000 esi=0000035c edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 0000035c ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 5c 03 00 00 - 00 00 00 00 00 00 00 00 ...w\........... 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 5c 03 00 00 .z.. ...AO.w\... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 5c 03 00 00 ........*.#.\... 0a86f9c4 ff ff ff ff 20 77 61 69 - 5c 03 00 00 63 5f 74 68 .... wai\...c_th 0a86f9d4 00 00 61 64 a7 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a7 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x80 eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=0000036c edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 0000036c ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x81 eax=00000052 ebx=00877750 ecx=0aa6fda8 edx=00000000 esi=00000308 edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 00000308 0a663000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 08 03 00 00 - 00 00 00 00 00 00 00 00 ...w............ 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 30 66 0a 00 10 00 00 ....4....0f..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 50 77 87 00 ............Pw.. 0aa6fd28 50 77 87 00 50 77 87 00 - 15 c9 f1 77 68 fd a6 0a Pw..Pw.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 08 03 00 00 00 30 66 0a - 00 10 00 00 d5 0e 2c 06 .....0f.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 50 77 87 00 ....V.'.....Pw.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 64 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 d...pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 50 77 87 00 50 77 87 00 pm+.....Pw..Pw.. State Dump for Thread Id 0x82 eax=1001537f ebx=00877680 ecx=00000000 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=10101010 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 00000350 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x83 eax=0087f010 ebx=00877450 ecx=0087f000 edx=00000000 esi=00000378 edi=00000000 eip=77f67ec7 esp=0b17fcf8 ebp=0b17fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0c06e6ff=00000000 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17fd60 06236f32 00000378 0af77000 00001000 062c0e65 ntdll!ZwReadFile State Dump for Thread Id 0x84 eax=1001537f ebx=00877380 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003d8 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 d8 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 80 73 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .s.......... .'. 0b27fdd8 2f 86 23 06 d8 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 d8 03 00 00 dc 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - 80 73 87 00 80 73 87 00 .........s...s.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 98 c6 15 00 - 00 00 23 50 00 00 00 00 ..........#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 10 4d 14 00 - 00 f0 fd 7f 9d a1 3c 06 .....M........<. 0b27fe98 08 4d 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 .M...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 80 73 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .s.............. State Dump for Thread Id 0x85 eax=1001537f ebx=00000000 ecx=206b636f edx=00000000 esi=00000398 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000398 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x86 eax=00000002 ebx=00877140 ecx=00000002 edx=00000000 esi=00877140 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x87 eax=1001537f ebx=00000000 ecx=00000000 edx=00000000 esi=0000039c edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 0000039c ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x88 eax=00000026 ebx=00000001 ecx=0000cff8 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x89 eax=77a2ea48 ebx=00000001 ecx=00000044 edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 60 2c 40 00 .5..........`,@. 0bc7fd70 60 00 02 00 98 fd c7 0b - ba db 00 10 a0 00 00 00 `............... 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bc7fd90 01 00 00 00 00 00 00 00 - b4 fd c7 0b e4 9a 00 10 ................ 0bc7fda0 00 fe c7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 90 12 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 .....2~..e...... 0bc7fe00 60 08 c7 0b 14 fe c7 0b - 92 13 40 00 a0 12 93 02 `.........@..... 0bc7fe10 01 fe c7 0b 20 fe c7 0b - 74 13 40 00 a0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - a0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 a8 8f 13 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 10 4d 14 00 ..<..........M.. State Dump for Thread Id 0x8a eax=00000000 ebx=0ca7f0dc ecx=0081b050 edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - b0 8d 87 00 00 b3 87 00 ................ 0ca7f0d8 00 b3 87 00 08 04 00 00 - b8 03 00 00 b0 8d 87 00 ................ 0ca7f0e8 00 b3 87 00 00 b3 87 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: (pid=107) When: 12/25/2009 @ 16:21:52.600 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 72 SPOOLSS.exe 68 RPCSS.exe 83 NDDEAGNT.exe 90 EXPLORER.exe 93 PSTORES.exe 103 hotkey.exe 105 S3TRAY.exe 107 mainapp.exe 96 DDHELP.exe 140 DRWTSN32.exe 146 WINHLP32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x6a eax=02930c60 ebx=00000000 ecx=02930c60 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000113 00002424 00000000 00019884 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - 00 00 00 00 a0 01 93 02 P............... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 20 30 65 80 F....t..<... 0e. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x5e eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=49f19b00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x4f eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=49f19b00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 a8 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 80 40 14 00 .............@.. State Dump for Thread Id 0x2f eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00ffbf00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2d eax=00002525 ebx=00000001 ecx=03565a8c edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=a9bedc17 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x4b eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=c09a1d9f 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x39 eax=0002de51 ebx=00000001 ecx=00000016 edx=00000000 esi=000001dc edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=8183c3a0 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001dc ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 dc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 3c 00 00 00 ...w.H...H..<... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 dc 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 03 00 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 ................ 068ffdc0 14 fe 8f 06 ff ff ff ff - 90 2e 7f 00 e0 fd 8f 06 ................ 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 60 04 87 00 ...w.H...H..`... 068ffe00 84 ff 8f 06 4a d2 f1 77 - fe ff ff ff 00 00 00 00 ....J..w........ 068ffe10 18 fe 8f 06 b2 0a 00 00 - 00 00 87 00 40 2e 7f 00 ............@... 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 48 72 14 00 x...|.#P....Hr.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 20 42 14 00 ..<......... B.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 18 42 14 00 1f 3e f6 77 ......<..B...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x55 eax=00000000 ebx=00874660 ecx=000001f5 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000210 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x28 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000208 edi=00000000 eip=77f6829b esp=08d5fd48 ebp=08d5fd6c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09c4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd6c 1000dbba 00000208 ffffffff 00000001 00874440 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x64 eax=00000809 ebx=00000001 ecx=00b9a000 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x65 eax=1001537f ebx=00000001 ecx=00000000 edx=00000000 esi=0000023c edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 0000023c ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x63 eax=1001537f ebx=00000001 ecx=00000000 edx=00000000 esi=00000250 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000250 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x42 eax=1001537f ebx=00000001 ecx=00000000 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000264 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=1001537f ebx=00000001 ecx=00000000 edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 00000278 ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=1001537f ebx=00000001 ecx=00000000 edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=1001537f ebx=00000001 ecx=00000000 edx=00000000 esi=0000025c edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 0000025c ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=1001537f ebx=00000001 ecx=008735d0 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 0000028c ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=1001537f ebx=00000001 ecx=008735d0 edx=00000000 esi=000002a0 edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002a0 ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=1001537f ebx=00000001 ecx=007b4cac edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=1001537f ebx=00000001 ecx=00010001 edx=00000000 esi=000001b4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=0000131f ebx=00000001 ecx=0086edc0 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=1001537f ebx=00000001 ecx=00000000 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000000 ebx=00000001 ecx=00840fb8 edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=00000fec ebx=00000001 ecx=00000000 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7b eax=1001537f ebx=00000001 ecx=77f669c8 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=09e5fd74 ebp=09e5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7c eax=00000019 ebx=00000001 ecx=00870025 edx=00000000 esi=00000144 edi=00000000 eip=77f6829b esp=09f5f9f8 ebp=09f5fa1c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ae4e3ff=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fa1c 1000dbba 00000144 ffffffff 00000001 00873800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 09f5f9f8 bc cc f1 77 44 01 00 00 - 01 00 00 00 00 00 00 00 ...wD........... 09f5fa08 14 31 00 10 20 00 00 00 - a0 61 87 00 3c 00 00 00 .1.. ....a..<... 09f5fa18 85 dc 00 10 40 fa f5 09 - ba db 00 10 44 01 00 00 ....@.......D... 09f5fa28 ff ff ff ff 01 00 00 00 - 00 38 87 00 f8 00 00 00 .........8...... 09f5fa38 01 00 00 00 00 00 00 00 - 5c fa f5 09 e4 9a 00 10 ........\....... 09f5fa48 40 fc f5 09 ff ff ff ff - 6c 99 00 10 b5 0a 87 00 @.......l....... 09f5fa58 00 38 87 00 7c fa f5 09 - 00 9c 00 10 67 15 ff ff .8..|.......g... 09f5fa68 40 fc f5 09 90 fa f5 09 - ff ff ff ff 44 fc f5 09 @...........D... 09f5fa78 ff ff ff ff d0 fc f5 09 - d3 d5 f5 04 40 fc f5 09 ............@... 09f5fa88 67 15 00 00 ff ff 00 00 - 00 00 00 00 44 fc f5 09 g...........D... 09f5fa98 a0 61 87 00 a0 12 00 00 - a0 12 00 00 3f 00 00 00 .a..........?... 09f5faa8 14 31 00 10 e0 a6 87 00 - a0 61 87 00 00 00 00 00 .1.......a...... 09f5fab8 b0 4e 7b 00 2e 65 01 10 - 50 b2 05 10 f4 fa f5 09 .N{..e..P....... 09f5fac8 f9 2b 01 10 09 00 00 00 - 3f 00 00 00 14 31 00 10 .+......?....1.. 09f5fad8 a0 a6 87 00 a0 61 87 00 - 00 00 00 00 b0 4e 7b 00 .....a.......N{. 09f5fae8 2e 65 01 10 50 b2 05 10 - 20 fb f5 09 f9 2b 01 10 .e..P... ....+.. 09f5faf8 09 00 00 00 c8 1d 7b 00 - 3f 00 00 00 a0 61 87 00 ......{.?....a.. 09f5fb08 09 fc 00 10 a0 a6 87 00 - 14 31 00 10 a0 a6 87 00 .........1...... 09f5fb18 a0 fb f5 09 a0 a6 87 00 - 2c fb f5 09 88 30 00 10 ........,....0.. 09f5fb28 a0 fb f5 09 44 fb f5 09 - eb 8c 00 10 94 fb f5 09 ....D........... State Dump for Thread Id 0x7d eax=4e8b0000 ebx=00877e80 ecx=00000000 edx=05d62b5e esi=00877e80 edi=ffffffff eip=05c89b25 esp=0a05fa38 ebp=0a05fa3c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: 05c89b0e 64890d00000000 mov fs:[00000000],ecx fs:00000000=???????? 05c89b15 8be5 mov esp,ebp 05c89b17 5d pop ebp 05c89b18 c3 ret 05c89b19 55 push ebp 05c89b1a 8bec mov ebp,esp 05c89b1c 51 push ecx 05c89b1d 894dfc mov [ebp-0x4],ecx ss:0af4e442=???????? 05c89b20 8b45fc mov eax,[ebp-0x4] ss:0af4e442=???????? 05c89b23 33c9 xor ecx,ecx FAULT ->05c89b25 668b08 mov cx,[eax] ds:4e8b0000=???? 05c89b28 33c0 xor eax,eax 05c89b2a 81f9ffff0000 cmp ecx,0xffff 05c89b30 0f94c0 sete al 05c89b33 8be5 mov esp,ebp 05c89b35 5d pop ebp 05c89b36 c3 ret 05c89b37 55 push ebp 05c89b38 8bec mov ebp,esp 05c89b3a 51 push ecx 05c89b3b 894dfc mov [ebp-0x4],ecx ss:0af4e442=???????? 05c89b3e 8b45fc mov eax,[ebp-0x4] ss:0af4e442=???????? *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05fa3c 05c8f271 ffffffbf 0bd9d770 05cebefc 05d87650 *----> Raw Stack Dump <----* 0a05fa38 00 00 8b 4e e8 fa 05 0a - 71 f2 c8 05 bf ff ff ff ...N....q....... 0a05fa48 70 d7 d9 0b fc be ce 05 - 50 76 d8 05 a0 fa 05 0a p.......Pv...... 0a05fa58 14 96 ce 05 09 00 00 00 - 05 00 00 00 d0 d5 d9 0b ................ 0a05fa68 38 c2 d9 0b 10 d6 d9 0b - 00 00 00 00 09 00 00 00 8............... 0a05fa78 70 d6 d9 0b cf 46 ce 05 - 00 00 00 00 70 d7 d9 0b p....F......p... 0a05fa88 70 d7 d9 0b 38 c2 d9 0b - 00 00 00 00 90 c1 d9 0b p...8........... 0a05fa98 06 c2 d9 0b c4 fa 05 0a - 92 0e cc 05 00 00 00 00 ................ 0a05faa8 3f 00 00 00 ff ff ff ff - 4a 00 00 00 d0 d5 d9 0b ?.......J....... 0a05fab8 d0 d5 d9 0b 60 00 00 00 - fc be ce 05 10 d6 d9 0b ....`........... 0a05fac8 10 d6 d9 0b 14 96 ce 05 - 09 00 00 00 dc 1d da 05 ................ 0a05fad8 00 00 8b 4e 70 fb 05 0a - 71 c4 cf 05 00 00 00 00 ...Np...q....... 0a05fae8 7c fb 05 0a 0b da c8 05 - 5e 2b d6 05 60 c1 d9 0b |.......^+..`... 0a05faf8 24 c2 d9 0b d0 c1 d9 0b - 80 d8 d9 0b ff ff ff ff $............... 0a05fb08 30 fb 05 0a 84 93 c9 05 - 30 c1 d9 0b a4 13 db 05 0.......0....... 0a05fb18 60 c1 d9 0b ff ff 3f 00 - d0 c1 d9 0b 70 d6 d9 0b `.....?.....p... 0a05fb28 80 d8 d9 0b 50 1f d8 0b - 20 00 00 00 ff ff ff ff ....P... ....... 0a05fb38 a6 00 00 00 80 7e 87 00 - ff ff ff fd 30 c1 d9 0b .....~......0... 0a05fb48 30 c1 d9 0b 50 76 d8 05 - c4 fb 05 0a 60 c1 d9 0b 0...Pv......`... 0a05fb58 60 c1 d9 0b dc 1d da 00 - 09 00 00 00 80 d8 d9 0b `............... 0a05fb68 5e 2b d6 05 00 00 ce 05 - b8 fb 05 0a 37 c3 cf 05 ^+..........7... State Dump for Thread Id 0x7e eax=0000086f ebx=00000001 ecx=007e4e20 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a15fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a15fd2c 20 00 00 00 40 7d 87 00 - 40 7d 87 00 40 7d 87 00 ...@}..@}..@}.. 0a15fd3c 24 fd 15 0a 64 fd 15 0a - ba db 00 10 c4 00 00 00 $...d........... 0a15fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a15fd5c 01 00 00 00 00 00 00 00 - 80 fd 15 0a e4 9a 00 10 ................ 0a15fd6c e8 fd 15 0a ff ff ff ff - 12 a7 05 10 00 00 00 00 ................ 0a15fd7c 00 18 87 00 a0 fd 15 0a - 00 9c 00 10 47 15 ff ff ............G... 0a15fd8c e8 fd 15 0a b4 fd 15 0a - ff ff ff ff ec fd 15 0a ................ 0a15fd9c ff ff ff ff 20 fe 15 0a - 89 97 23 06 e8 fd 15 0a .... .....#..... 0a15fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 15 0a G............... 0a15fdbc 26 00 00 00 48 d2 01 10 - 00 00 00 00 49 6b 01 10 &...H.......Ik.. 0a15fdcc 04 00 00 00 00 00 00 00 - 98 09 84 01 20 36 7e 00 ............ 6~. 0a15fddc 08 03 00 00 25 00 00 00 - 38 9d 02 10 55 08 01 10 ....%...8...U... 0a15fdec 00 00 00 00 98 09 84 01 - 34 36 7e 00 2e 65 01 10 ........46~..e.. 0a15fdfc 00 04 87 00 84 ff 15 0a - b9 04 f1 77 fe ff ff ff ...........w.... 0a15fe0c 00 00 00 00 18 fe 15 0a - 04 00 00 00 00 03 00 00 ................ 0a15fe1c ff ff ff ff 84 ff 15 0a - 95 f5 00 10 00 00 00 00 ................ 0a15fe2c 20 00 00 00 40 7d 87 00 - 40 7d 87 00 1e 00 00 00 ...@}..@}...... 0a15fe3c 00 00 00 00 0c ff 15 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a15fe4c ff ff ff ff 78 fe 15 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7f eax=1001537f ebx=00877c70 ecx=00000000 edx=00000000 esi=0a76fdb0 edi=00000000 eip=77f6793f esp=0a76fd78 ebp=0a76fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b65e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fdd4 062373cb 00000334 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x80 eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000358 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000358 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 58 03 00 00 - 00 00 00 00 00 00 00 00 ...wX........... 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 58 03 00 00 .z.. ...AO.wX... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 58 03 00 00 ........*.#.X... 0a86f9c4 ff ff ff ff 20 77 61 69 - 58 03 00 00 63 5f 74 68 .... waiX...c_th 0a86f9d4 00 00 61 64 a7 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a7 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x81 eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000368 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000368 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x82 eax=00000052 ebx=00877750 ecx=0aa6fda8 edx=00000000 esi=00000328 edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 00000328 0a663000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 28 03 00 00 - 00 00 00 00 00 00 00 00 ...w(........... 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 30 66 0a 00 10 00 00 ....4....0f..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 50 77 87 00 ............Pw.. 0aa6fd28 50 77 87 00 50 77 87 00 - 15 c9 f1 77 68 fd a6 0a Pw..Pw.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 28 03 00 00 00 30 66 0a - 00 10 00 00 d5 0e 2c 06 (....0f.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 50 77 87 00 ....V.'.....Pw.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 8c 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 ....pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 50 77 87 00 50 77 87 00 pm+.....Pw..Pw.. State Dump for Thread Id 0x83 eax=0087f010 ebx=00877680 ecx=0087f000 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 0000033c 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x84 eax=1001537f ebx=008775b0 ecx=00000000 edx=00000000 esi=00000374 edi=00000000 eip=77f67ec7 esp=0b17fcf8 ebp=0b17fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0c06e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17fd60 06236f32 00000374 0af77000 00001000 062c0e65 ntdll!ZwReadFile State Dump for Thread Id 0x85 eax=1001537f ebx=008774e0 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=???????? 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003d0 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 d0 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 e0 74 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .t.......... .'. 0b27fdd8 2f 86 23 06 d0 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 d0 03 00 00 d4 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - e0 74 87 00 e0 74 87 00 .........t...t.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 20 42 14 00 - 00 f0 fd 7f 9d a1 3c 06 .... B........<. 0b27fe98 18 42 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 .B...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 e0 74 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .t.............. State Dump for Thread Id 0x86 eax=1001537f ebx=00000000 ecx=206b636f edx=00000000 esi=00000380 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000380 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x87 eax=00000002 ebx=008772a0 ecx=00000002 edx=00000000 esi=008772a0 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x88 eax=1001537f ebx=00000000 ecx=00000000 edx=00000000 esi=00000384 edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 00000384 ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x89 eax=1001537f ebx=00000001 ecx=00000028 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x8a eax=1001537f ebx=00000001 ecx=1005b250 edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 80 9f 87 00 - 80 9f 87 00 f8 fd c7 0b .5.............. 0bc7fd70 b1 12 02 10 98 fd c7 0b - ba db 00 10 a0 00 00 00 ................ 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 04 00 00 00 ................ 0bc7fd90 00 00 00 00 6c fd c7 0b - b4 fd c7 0b e4 9a 00 10 ....l........... 0bc7fda0 00 fe c7 0b ff ff ff ff - 64 fd c7 0b 6c fd c7 0b ........d...l... 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 b0 12 93 02 1d 00 00 00 - 01 65 01 10 60 04 87 00 .........e..`... 0bc7fe00 84 ff c7 0b 14 fe c7 0b - 92 13 40 00 c0 12 93 02 ..........@..... 0bc7fe10 18 fe c7 0b 20 fe c7 0b - 74 13 40 00 c0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - c0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 80 9f 87 00 80 9f 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 80 1f 16 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 20 42 14 00 ..<......... B.. Application exception occurred: App: (pid=147) When: 12/25/2009 @ 16:24:43.295 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 72 SPOOLSS.exe 68 RPCSS.exe 83 NDDEAGNT.exe 90 EXPLORER.exe 93 PSTORES.exe 103 hotkey.exe 105 S3TRAY.exe 96 DDHELP.exe 147 mainapp.exe 149 mainapp.exe 182 DRWTSN32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x8f eax=02930c60 ebx=00000000 ecx=02930c60 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000113 00002424 00000000 00043251 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - a4 e3 3f 01 87 2f 13 00 x.@...@_..?../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 a4 e3 3f 01 ...../........?. 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - 8b 02 1a 80 a0 01 93 02 P............... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 20 10 5c 80 F....t..<... .\. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - a4 e3 3f 01 ba 48 c4 77 .......w..?..H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x8e eax=01840998 ebx=00000001 ecx=007b6054 edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 90 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 c0 34 14 00 .............4.. State Dump for Thread Id 0x9a eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=000000ac edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00ffbf00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 000000ac ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x9b eax=00002525 ebx=00000001 ecx=03565a8c edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6a eax=0000000b ebx=00000001 ecx=0000000b edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x39 eax=00000000 ebx=00000001 ecx=03e77d98 edx=00000000 esi=000001d4 edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001d4 ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 d4 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 3c 00 00 00 ...w.H...H..<... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 d4 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 5e 02 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 ^............... 068ffdc0 14 fe 8f 06 ff ff ff ff - d0 10 7f 00 e0 fd 8f 06 ................ 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 60 04 87 00 ...w.H...H..`... 068ffe00 84 ff 8f 06 4a d2 f1 77 - fe ff ff ff 01 00 00 00 ....J..w........ 068ffe10 18 fe 8f 06 ad 0a 00 00 - 00 00 87 00 80 10 7f 00 ................ 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 30 72 14 00 x...|.#P....0r.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 60 36 14 00 ..<.........`6.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 58 36 14 00 1f 3e f6 77 ......<.X6...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x55 eax=00000000 ebx=00874660 ecx=000001f5 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 000001d8 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x8c eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=0000020c edi=00000000 eip=77f6829b esp=08d5fd48 ebp=08d5fd6c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09c4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd6c 1000dbba 0000020c ffffffff 00000001 00874440 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x9d eax=00000809 ebx=00000001 ecx=00b9a000 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x9e eax=00000001 ebx=00000001 ecx=0000001f edx=00000000 esi=00000210 edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 00000210 ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x96 eax=1001537f ebx=00000001 ecx=00000000 edx=00000000 esi=00000244 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000244 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x4e eax=0915ffa8 ebx=00000001 ecx=0915fd64 edx=00000000 esi=00000258 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000258 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x3f eax=1001537f ebx=00000001 ecx=00000000 edx=00000000 esi=0000026c edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 0000026c ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x9f eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000230 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000230 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xa0 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 00000278 ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xa1 eax=1001537f ebx=00000001 ecx=008735d0 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 00000264 ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xa2 eax=1001537f ebx=00000001 ecx=008735d0 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 0000028c ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xa3 eax=00000000 ebx=00000001 ecx=00820af0 edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xa4 eax=1001537f ebx=00000001 ecx=00010001 edx=00000000 esi=000001a4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001a4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xa5 eax=007b1f10 ebx=00000001 ecx=0087700c edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xa6 eax=00000001 ebx=00000001 ecx=00000011 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xa7 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xa8 eax=00000001 ebx=00000001 ecx=0000000e edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xa9 eax=09d5fd8c ebx=008764f0 ecx=00000005 edx=ffffffff esi=0000000c edi=09d5fd8c eip=04b52c1a esp=09d5fd70 ebp=09d5fd78 iopl=0 nv up ei pl nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206 function: 04b52c02 5d pop ebp 04b52c03 c3 ret 04b52c04 55 push ebp 04b52c05 8bec mov ebp,esp 04b52c07 56 push esi 04b52c08 57 push edi 04b52c09 8b35d293b604 mov esi,[04b693d2] ds:04b693d2=00000000 04b52c0f 83c60c add esi,0xc 04b52c12 b905000000 mov ecx,0x5 04b52c17 8b7d08 mov edi,[ebp+0x8] ss:0ac4e77e=???????? FAULT ->04b52c1a f3a5 rep movsd ds:0000000c=???????? es:09d5fd8c=00000000 04b52c1c 8b4508 mov eax,[ebp+0x8] ss:0ac4e77e=???????? 04b52c1f 5f pop edi 04b52c20 5e pop esi 04b52c21 5d pop ebp 04b52c22 c3 ret 04b52c23 55 push ebp 04b52c24 8bec mov ebp,esp 04b52c26 a1d293b604 mov eax,[04b693d2] ds:04b693d2=00000000 04b52c2b 8a4020 mov al,[eax+0x20] ds:0ac4e792=?? 04b52c2e 5d pop ebp 04b52c2f c3 ret *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd78 04b56b50 09d5fd8c 00000000 008764f0 00000000 State Dump for Thread Id 0xaa eax=00000001 ebx=00000001 ecx=00000011 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=09e5fd74 ebp=09e5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xab eax=011bebc8 ebx=00000000 ecx=000002f8 edx=00000000 esi=09f5fc94 edi=05235a88 eip=77f678df esp=09f5fc80 ebp=09f5fc9c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtDelayExecution 77f678d4 b827000000 mov eax,0x27 77f678d9 8d542404 lea edx,[esp+0x4] ss:0ae4e687=???????? 77f678dd cd2e int 2e 77f678df c20800 ret 0x8 77f678e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fc9c 77f1ced8 0000000a 00000000 04d0c719 0000000a ntdll!NtDelayExecution 09f5fcc0 04f92554 10003114 008761b0 09f5fcdc 04eab2c3 kernel32!Sleep State Dump for Thread Id 0xac eax=000000c3 ebx=00000001 ecx=00000000 edx=00000000 esi=000002cc edi=00000000 eip=77f6829b esp=0a05fc0c ebp=0a05fc30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0af4e613=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05fc30 1000dbba 000002cc ffffffff 00000001 00876030 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xad eax=0627f2f0 ebx=00000001 ecx=00000000 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xae eax=00000a77 ebx=00000000 ecx=10020a78 edx=00000000 esi=00000318 edi=00000000 eip=77f6829b esp=0a25f984 ebp=0a25f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b14e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a25f9a8 77f04f41 00000318 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a25fe20 1000f595 00000000 00000004 00877b40 00877b40 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a25f984 bc cc f1 77 18 03 00 00 - 00 00 00 00 00 00 00 00 ...w............ 0a25f994 04 00 00 00 40 7b 87 00 - 40 7b 87 00 00 cc f9 7f ....@{..@{...... 0a25f9a4 40 7b 87 00 20 fe 25 0a - 41 4f f0 77 18 03 00 00 @{.. .%.AO.w.... 0a25f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 18 03 00 00 ........*.#..... 0a25f9c4 ff ff ff ff 20 77 61 69 - 18 03 00 00 63 5f 74 68 .... wai....c_th 0a25f9d4 00 00 61 64 a6 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a25f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a25f9f4 00 a6 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a25fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a25fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a25fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a25fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 25 0a ..............%. 0a25fa44 77 75 01 10 64 00 00 00 - e0 fc 25 0a b4 fc 25 0a wu..d.....%...%. 0a25fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 25 0a ..............%. 0a25fa64 cc fc 25 0a 86 6f 01 10 - 20 00 00 00 e4 fc 25 0a ..%..o.. .....%. 0a25fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a25fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a25fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a25faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a25fab4 2e 65 01 10 a0 04 87 00 - f4 fa 25 0a 66 57 01 10 .e........%.fW.. State Dump for Thread Id 0xaf eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000308 edi=00000000 eip=77f6829b esp=0a35fdc8 ebp=0a35fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b24e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a35fdec 77f04f41 00000308 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a35fe20 1000f595 00000000 00000004 00877a60 00877a60 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a35fdc8 bc cc f1 77 08 03 00 00 - 00 00 00 00 00 00 00 00 ...w............ 0a35fdd8 04 00 00 00 60 7a 87 00 - 60 7a 87 00 00 bc f9 7f ....`z..`z...... 0a35fde8 60 7a 87 00 20 fe 35 0a - 41 4f f0 77 08 03 00 00 `z.. .5.AO.w.... 0a35fdf8 ff ff ff ff 00 00 00 00 - 15 94 23 06 08 03 00 00 ..........#..... 0a35fe08 ff ff ff ff 0e 00 00 00 - 18 fe 35 0a 00 00 00 00 ..........5..... 0a35fe18 a7 15 87 00 08 03 00 00 - 84 ff 35 0a 95 f5 00 10 ..........5..... 0a35fe28 00 00 00 00 04 00 00 00 - 60 7a 87 00 60 7a 87 00 ........`z..`z.. 0a35fe38 0f 00 00 00 00 00 00 00 - 0c ff 35 0a 44 b7 f3 77 ..........5.D..w 0a35fe48 c8 cd f3 77 ff ff ff ff - 78 fe 35 0a 7c 13 23 50 ...w....x.5.|.#P 0a35fe58 07 00 00 00 f0 89 15 00 - 00 00 23 50 00 00 00 00 ..........#P.... 0a35fe68 00 00 00 00 0c ff 35 0a - bb 1f 3d 06 ff ff ff ff ......5...=..... 0a35fe78 98 fe 35 0a 00 00 00 00 - 00 00 3c 06 02 00 00 00 ..5.......<..... 0a35fe88 00 00 00 00 60 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....`6........<. 0a35fe98 58 36 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 X6...>.w..<..... 0a35fea8 00 00 00 00 1c ff 35 0a - 00 00 00 00 5b 12 f6 77 ......5.....[..w 0a35feb8 60 55 fa 77 61 12 f6 77 - 30 ff 35 0a b0 7c 87 00 `U.wa..w0.5..|.. 0a35fec8 60 7a 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 `z.............. 0a35fed8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a35fee8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a35fef8 00 00 00 00 00 00 00 00 - 00 00 00 00 c0 fe 35 0a ..............5. State Dump for Thread Id 0xb0 eax=000015a8 ebx=008778a0 ecx=00000000 edx=00000000 esi=0a96fdb0 edi=00000000 eip=77f6793f esp=0a96fd78 ebp=0a96fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b85e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdd4 062373cb 00000340 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0xb1 eax=062b6d70 ebx=00877750 ecx=062b6d70 edx=00000000 esi=00877750 edi=00000000 eip=77f6775f esp=0aa6fdcc ebp=0aa6fde0 iopl=0 nv up ei ng nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000293 function: NtClose 77f67754 b80f000000 mov eax,0xf 77f67759 8d542404 lea edx,[esp+0x4] ss:0b95e7d3=???????? 77f6775d cd2e int 2e 77f6775f c20400 ret 0x4 77f67762 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fde0 0623759f 062c0e80 0aa6fe18 06236167 00000001 ntdll!NtClose State Dump for Thread Id 0xb4 eax=1001537f ebx=008774e0 ecx=062b0000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=???????? 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 00000394 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 94 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 e0 74 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .t.......... .'. 0b27fdd8 2f 86 23 06 94 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 94 03 00 00 98 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - e0 74 87 00 e0 74 87 00 .........t...t.. 0b27fe38 11 00 00 00 21 ce f6 77 - 0c ff 27 0b 44 b7 f3 77 ....!..w..'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 48 bd 15 00 - 00 00 23 50 00 00 00 00 ....H.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 60 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....`6........<. 0b27fe98 58 36 14 00 31 cf f6 77 - a0 01 00 00 00 00 00 00 X6..1..w........ 0b27fea8 00 f0 fd 7f ed 75 f6 77 - 60 55 fa 77 5b 12 f6 77 .....u.w`U.w[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 e0 74 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .t.............. State Dump for Thread Id 0xb7 eax=062b8ae0 ebx=00000000 ecx=062b8ae0 edx=00000000 esi=00000348 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000348 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0xb8 eax=00000000 ebx=00877380 ecx=0000000c edx=00000000 esi=00877380 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0xb9 eax=062b8ae0 ebx=00000000 ecx=062b8ae0 edx=00000000 esi=00000370 edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 00000370 ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0xba eax=1001537f ebx=00000001 ecx=00000028 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0xbb eax=1001537f ebx=00000001 ecx=1005b250 edx=00000000 esi=0000009c edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 0000009c ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 9c 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 e0 83 87 00 - e0 83 87 00 f8 fd c7 0b .5.............. 0bc7fd70 b1 12 02 10 98 fd c7 0b - ba db 00 10 9c 00 00 00 ................ 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 04 00 00 00 ................ 0bc7fd90 00 00 00 00 6c fd c7 0b - b4 fd c7 0b e4 9a 00 10 ....l........... 0bc7fda0 00 fe c7 0b ff ff ff ff - 64 fd c7 0b 6c fd c7 0b ........d...l... 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 d0 13 93 02 1d 00 00 00 - 01 65 01 10 60 04 87 00 .........e..`... 0bc7fe00 84 ff c7 0b 14 fe c7 0b - 92 13 40 00 e0 13 93 02 ..........@..... 0bc7fe10 18 fe c7 0b 20 fe c7 0b - 74 13 40 00 e0 13 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - e0 13 93 02 d0 35 87 00 .............5.. 0bc7fe30 e0 83 87 00 e0 83 87 00 - 11 00 00 00 21 ce f6 77 ............!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 90 8f 13 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 60 36 14 00 ..<.........`6.. Application exception occurred: App: (pid=99) When: 2/14/2015 @ 1:12:28.288 Exception number: c0000096 (privileged instruction) *----> System Information <----* Computer Name: Analyzer User Name: instrument Number of Processors: 1 Processor Type: x86 Family 5 Model 8 Stepping 12 Windows Version: 4.0 Current Build: 1381 Service Pack: 5 Current Type: Uniprocessor Free Registered Organization: Rohde & Schwarz Registered Owner: Analyzer *----> Task List <----* 0 Idle.exe 2 System.exe 21 SMSS.exe 28 CSRSS.exe 35 WINLOGON.exe 41 SERVICES.exe 44 LSASS.exe 72 SPOOLSS.exe 69 RPCSS.exe 81 NDDEAGNT.exe 87 EXPLORER.exe 84 PSTORES.exe 95 hotkey.exe 97 S3TRAY.exe 99 mainapp.exe 104 DDHELP.exe 141 DRWTSN32.exe 0 _Total.exe (00400000 - 00400000) (77f60000 - 77fbe000) dll\ntdll.dbg (10000000 - 10000000) (77dc0000 - 77dff000) dll\advapi32.dbg (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec4000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (5f400000 - 5f4f2000) (779f0000 - 77a36000) dll\msvcrt.dbg (77aa0000 - 77b15000) COMCTL32.dbg (02eb0000 - 02eb0000) (02fe0000 - 02fe0000) (03190000 - 03190000) (50200000 - 50200000) (5f000000 - 5f000000) (041b0000 - 041b0000) (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (690a0000 - 690ab000) dll\psapi.dbg (50230000 - 50230000) (04a20000 - 04a20000) (04b50000 - 04b50000) (77130000 - 77156000) dll\ddraw.dbg (77fd0000 - 77ffa000) dll\winmm.dbg (04c80000 - 04c80000) (77c00000 - 77c18000) drv\winspool.dbg (65340000 - 653d2000) oleaut32.dbg (77b20000 - 77bd6000) dll\ole32.dbg (05bf0000 - 05bf0000) (05eb0000 - 05eb0000) (061d0000 - 061d0000) (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (063c0000 - 063c0000) State Dump for Thread Id 0x62 eax=02920000 ebx=00000000 ecx=00000000 edx=00000000 esi=00408e78 edi=00408eac eip=77e724b2 esp=0012fea0 ebp=0012fec4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: GetWindowRect 77e7248c 8945f4 mov [ebp-0xc],eax ss:0101e8ca=00000000 77e7248f e842f4ffff call DefWindowProcA+0x29 (77e718d6) 77e72494 e9c4a80100 jmp CreateAcceleratorTableA+0x66e (77e8cd5d) 77e72499 b818110000 mov eax,0x1118 77e7249e 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724a2 cd2e int 2e 77e724a4 c20400 ret 0x4 77e724a7 b87f110000 mov eax,0x117f 77e724ac 8d542404 lea edx,[esp+0x4] ss:0101e8a7=00000000 77e724b0 cd2e int 2e 77e724b2 c21400 ret 0x14 77e724b5 55 push ebp 77e724b6 8bec mov ebp,esp 77e724b8 83ec0c sub esp,0xc 77e724bb 53 push ebx 77e724bc 56 push esi 77e724bd 57 push edi 77e724be 8b7508 mov esi,[ebp+0x8] ss:0101e8ca=00000000 77e724c1 c745f814000000 mov dword ptr [ebp-0x8],0x14 ss:0101e8ca=00000000 77e724c8 8d7e14 lea edi,[esi+0x14] ds:012f787e=00000000 77e724cb 8b4e04 mov ecx,[esi+0x4] ds:012f787e=00000000 77e724ce 897dfc mov [ebp-0x4],edi ss:0101e8ca=00000000 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012fec4 5f401301 00408eac 00000000 00000000 00000000 user32!GetWindowRect 00408eac 00000111 000003e9 00000000 0001e9d8 00000140 !Ordinal5307 *----> Raw Stack Dump <----* 0012fea0 16 26 e7 77 ac 8e 40 00 - 00 00 00 00 00 00 00 00 .&.w..@......... 0012feb0 00 00 00 00 c0 fe 12 00 - ac 8e 40 00 78 8e 40 00 ..........@.x.@. 0012fec0 78 8e 40 00 ac 8e 40 00 - 01 13 40 5f ac 8e 40 00 x.@...@...@_..@. 0012fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012fee0 78 8e 40 00 5f 80 40 5f - 78 8e 40 00 78 8e 40 00 x.@._.@_x.@.x.@. 0012fef0 c0 ff 12 00 ff ff ff ff - 02 00 00 00 0f 80 40 5f ..............@_ 0012ff00 78 8e 40 00 aa 99 40 5f - ec da 12 00 87 2f 13 00 x.@...@_...../.. 0012ff10 00 00 00 00 ef 4d 40 00 - 00 00 40 00 00 00 00 00 .....M@...@..... 0012ff20 87 2f 13 00 01 00 00 00 - 76 4d 40 00 00 00 40 00 ./......vM@...@. 0012ff30 00 00 00 00 87 2f 13 00 - 01 00 00 00 ec da 12 00 ...../.......... 0012ff40 ba 48 c4 77 00 f0 fd 7f - 00 00 00 00 87 2f 13 00 .H.w........./.. 0012ff50 50 07 93 02 00 00 00 00 - 00 00 00 00 a0 01 93 02 P............... 0012ff60 01 00 00 00 44 00 00 00 - 90 3c 13 00 a0 3c 13 00 ....D....<...<.. 0012ff70 b8 3c 13 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .<.............. 0012ff80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ff90 01 08 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012ffa0 46 02 00 00 8b 74 11 80 - 3c ff 12 00 c0 4d 65 80 F....t..<....Me. 0012ffb0 e0 ff 12 00 ce 4d 40 00 - 20 6c 40 00 00 00 00 00 .....M@. l@..... 0012ffc0 f0 ff 12 00 06 ba f1 77 - ec da 12 00 ba 48 c4 77 .......w.....H.w 0012ffd0 00 f0 fd 7f 00 f0 fd 7f - c8 ff 12 00 00 00 00 00 ................ State Dump for Thread Id 0x6b eax=000000c0 ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=0000015c edi=00000000 eip=77f6829b esp=060cfd50 ebp=060cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:06fbe757=0f64eb00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 060cfd74 1000dbba 0000015c ffffffff 00000001 008736e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6c eax=1001537f ebx=00000001 ecx=6f6e6d6c edx=00000000 esi=00000168 edi=00000000 eip=77f6829b esp=061cfd50 ebp=061cfd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:070be757=0f64eb00 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 061cfd74 1000dbba 00000168 ffffffff 00000001 00873a40 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 061cfd50 bc cc f1 77 68 01 00 00 - 01 00 00 00 00 00 00 00 ...wh........... 061cfd60 5c 5d 5e 5f b0 33 87 00 - b0 33 87 00 f8 fd 1c 06 \]^_.3...3...... 061cfd70 b1 12 02 10 98 fd 1c 06 - ba db 00 10 68 01 00 00 ............h... 061cfd80 ff ff ff ff 01 00 00 00 - 40 3a 87 00 04 00 00 00 ........@:...... 061cfd90 00 00 00 00 6c fd 1c 06 - b4 fd 1c 06 e4 9a 00 10 ....l........... 061cfda0 00 fe 1c 06 ff ff ff ff - 64 fd 1c 06 6c fd 1c 06 ........d...l... 061cfdb0 40 3a 87 00 d4 fd 1c 06 - 00 9c 00 10 63 15 ff ff @:..........c... 061cfdc0 00 fe 1c 06 e8 fd 1c 06 - ff ff ff ff fc fd 1c 06 ................ 061cfdd0 ff ff ff ff 04 fe 1c 06 - 7c 1c eb 05 00 fe 1c 06 ........|....... 061cfde0 63 15 eb 05 ff ff 00 00 - 00 00 00 00 fc fd 1c 06 c............... 061cfdf0 40 0e ed 05 26 00 00 00 - 01 65 01 10 60 04 87 00 @...&....e..`... 061cfe00 84 ff 1c 06 14 fe 1c 06 - 82 14 eb 05 60 0e ed 05 ............`... 061cfe10 18 fe 1c 06 20 fe 1c 06 - 64 14 eb 05 60 0e ed 05 .... ...d...`... 061cfe20 84 ff 1c 06 95 f5 00 10 - 60 0e ed 05 5c 5d 5e 5f ........`...\]^_ 061cfe30 b0 33 87 00 b0 33 87 00 - 0f 00 00 00 21 ce f6 77 .3...3......!..w 061cfe40 0c ff 1c 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 061cfe50 78 fe 1c 06 7c 13 23 50 - 07 00 00 00 a8 43 14 00 x...|.#P.....C.. 061cfe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 1c 06 ..#P............ 061cfe70 00 f0 fd 7f ff ff ff ff - 98 fe 1c 06 00 00 00 00 ................ 061cfe80 00 00 1d 06 02 00 00 00 - 00 00 00 00 d8 34 14 00 .............4.. State Dump for Thread Id 0x6d eax=1001537f ebx=00000001 ecx=063c0000 edx=00000000 esi=00000094 edi=00000000 eip=77f6829b esp=065efd50 ebp=065efd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:074de757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 065efd74 1000dbba 00000094 ffffffff 00000001 008714e0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6e eax=04b651ba ebx=00000001 ecx=04b61f43 edx=00000000 esi=00000130 edi=00000000 eip=77f6829b esp=066efca4 ebp=066efcc8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:075de6ab=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 066efcc8 1000dbba 00000130 ffffffff 00000001 00873d60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x4b eax=0001800c ebx=00000001 ecx=0001800c edx=00000000 esi=000000fc edi=00000000 eip=77f6829b esp=067efe0c ebp=067efe30 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:076de813=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 067efe30 1000dbba 000000fc ffffffff 00000001 00873ed0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x2f eax=07180010 ebx=00000001 ecx=07180010 edx=00000000 esi=000001dc edi=00000000 eip=77f6829b esp=068ffd70 ebp=068ffd94 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:077ee777=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 068ffd94 1000dbba 000001dc ffffffff 00000001 00874a50 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 068ffd70 bc cc f1 77 dc 01 00 00 - 01 00 00 00 00 00 00 00 ...w............ 068ffd80 bc cc f1 77 d0 48 87 00 - d0 48 87 00 34 00 00 00 ...w.H...H..4... 068ffd90 01 00 00 00 b8 fd 8f 06 - ba db 00 10 dc 01 00 00 ................ 068ffda0 ff ff ff ff 01 00 00 00 - 50 4a 87 00 00 00 00 00 ........PJ...... 068ffdb0 e4 01 00 00 c4 fd 8f 06 - d4 fd 8f 06 e4 9a 00 10 ................ 068ffdc0 14 fe 8f 06 ff ff ff ff - 30 e0 7d 00 e0 fd 8f 06 ........0.}..... 068ffdd0 50 4a 87 00 20 fe 8f 06 - e4 ea 3b 03 76 15 8f 06 PJ.. .....;.v... 068ffde0 14 fe 8f 06 10 fe 8f 06 - ff ff ff ff 18 fe 8f 06 ................ 068ffdf0 bc cc f1 77 d0 48 87 00 - d0 48 87 00 d0 65 7e 00 ...w.H...H...e~. 068ffe00 84 ff 8f 06 ef 08 f1 77 - 00 00 ff ff 00 00 00 00 .......w........ 068ffe10 18 fe 8f 06 6a 07 00 00 - 00 00 87 00 d0 ff 7d 00 ....j.........}. 068ffe20 84 ff 8f 06 95 f5 00 10 - 40 7a e7 03 bc cc f1 77 ........@z.....w 068ffe30 d0 48 87 00 d0 48 87 00 - 0f 00 00 00 00 00 00 00 .H...H.......... 068ffe40 0c ff 8f 06 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 068ffe50 78 fe 8f 06 7c 13 23 50 - 07 00 00 00 48 72 14 00 x...|.#P....Hr.. 068ffe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff 8f 06 ..#P............ 068ffe70 bb 1f 3d 06 ff ff ff ff - 98 fe 8f 06 00 00 00 00 ..=............. 068ffe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. 068ffe90 00 f0 fd 7f 9d a1 3c 06 - 70 36 14 00 1f 3e f6 77 ......<.p6...>.w 068ffea0 00 00 3c 06 01 00 00 00 - 00 00 00 00 1c ff 8f 06 ..<............. State Dump for Thread Id 0x3f eax=00000000 ebx=00874660 ecx=1005a712 edx=00000000 esi=089ffd80 edi=089ffdc8 eip=77f6793f esp=089ffd48 ebp=089ffda4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:098ee74f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 089ffda4 032dda47 00000210 8000201c 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x59 eax=034a2de8 ebx=00000001 ecx=0d2ac29b edx=00000000 esi=00000208 edi=00000000 eip=77f6829b esp=08d5fd08 ebp=08d5fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09c4e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08d5fd2c 1000dbba 00000208 ffffffff 00000001 00874440 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x28 eax=00000000 ebx=00000001 ecx=0000dfd0 edx=00000000 esi=000000d8 edi=00000000 eip=77f6829b esp=08e5fd64 ebp=08e5fd88 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09d4e76b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08e5fd88 1000dbba 000000d8 ffffffff 00000001 00872340 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5b eax=00000000 ebx=00000001 ecx=03b2f0c0 edx=00000000 esi=0000023c edi=00000000 eip=77f6829b esp=08f5fd74 ebp=08f5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09e4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 08f5fd98 1000dbba 0000023c ffffffff 00000001 00874090 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x39 eax=00000000 ebx=00000001 ecx=00875e50 edx=00000000 esi=00000250 edi=00000000 eip=77f6829b esp=0905fd74 ebp=0905fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:09f4e77b=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0905fd98 1000dbba 00000250 ffffffff 00000001 00875e50 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x5a eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000264 edi=00000000 eip=77f6829b esp=0915fd4c ebp=0915fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a04e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0915fd70 1000dbba 00000264 ffffffff 00000001 00875c20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x42 eax=00000000 ebx=00000001 ecx=0394b7e8 edx=00000000 esi=00000278 edi=00000000 eip=77f6829b esp=0925fd4c ebp=0925fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a14e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0925fd70 1000dbba 00000278 ffffffff 00000001 008759f0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x6f eax=00000004 ebx=00000001 ecx=0d2a9b90 edx=00000000 esi=00000270 edi=00000000 eip=77f6829b esp=0935fd4c ebp=0935fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a24e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0935fd70 1000dbba 00000270 ffffffff 00000001 008757c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x70 eax=00000000 ebx=00000001 ecx=00000000 edx=00000000 esi=0000025c edi=00000000 eip=77f6829b esp=0945fd4c ebp=0945fd70 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a34e753=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0945fd70 1000dbba 0000025c ffffffff 00000001 00875590 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x71 eax=00000000 ebx=00000001 ecx=1005a6d0 edx=00000000 esi=0000028c edi=00000000 eip=77f6829b esp=0955fd80 ebp=0955fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a44e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0955fda4 1000dbba 0000028c ffffffff 00000001 00875360 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x72 eax=7ffdf000 ebx=00000001 ecx=1005a796 edx=00000000 esi=000002a0 edi=00000000 eip=77f6829b esp=0965fd80 ebp=0965fda4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a54e787=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0965fda4 1000dbba 000002a0 ffffffff 00000001 00875130 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x73 eax=1001537f ebx=00000001 ecx=007b4cac edx=00000000 esi=000000d0 edi=00000000 eip=77f6829b esp=0975fd2c ebp=0975fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a64e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0975fd50 1000dbba 000000d0 ffffffff 00000001 008701c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x74 eax=00000001 ebx=00000001 ecx=68000000 edx=00000000 esi=000001b4 edi=00000000 eip=77f6829b esp=0985fd90 ebp=0985fdb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a74e797=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0985fdb4 1000dbba 000001b4 ffffffff 00000001 008731c0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x75 eax=00000000 ebx=00000001 ecx=008195d0 edx=00000000 esi=00000134 edi=00000000 eip=77f6829b esp=0995fd2c ebp=0995fd50 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a84e733=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0995fd50 1000dbba 00000134 ffffffff 00000001 00871d00 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x76 eax=00000000 ebx=00000001 ecx=007e1ce0 edx=00000000 esi=00000108 edi=00000000 eip=77f6829b esp=09a5fd44 ebp=09a5fd68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0a94e74b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09a5fd68 1000dbba 00000108 ffffffff 00000001 00871c60 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x77 eax=00001190 ebx=00000001 ecx=0086a4e0 edx=00000000 esi=000000cc edi=00000000 eip=77f6829b esp=09b5fd28 ebp=09b5fd4c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0aa4e72f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09b5fd4c 1000dbba 000000cc ffffffff 00000001 00871d90 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x78 eax=00000000 ebx=00000001 ecx=007cba60 edx=00000000 esi=00000128 edi=00000000 eip=77f6829b esp=09c5fd50 ebp=09c5fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ab4e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09c5fd74 1000dbba 00000128 ffffffff 00000001 00871e20 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x79 eax=00000001 ebx=00000001 ecx=00030001 edx=00000000 esi=000000e4 edi=09d5fd64 eip=77f6829b esp=09d5fd48 ebp=09d5fd6c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ac4e74f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09d5fd6c 1000dbba 000000e4 00000032 00000001 00872070 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7a eax=1001537f ebx=00000001 ecx=77f669c8 edx=00000000 esi=00000104 edi=00000000 eip=77f6829b esp=09e5fd74 ebp=09e5fd98 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ad4e77b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09e5fd98 1000dbba 00000104 ffffffff 00000001 00871bc0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x7b eax=09f50001 ebx=008761a0 ecx=09f5fbac edx=0509f460 esi=008761a0 edi=10003114 eip=04c95081 esp=09f5fbb0 ebp=09f5fbed iopl=0 nv up ei pl nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206 function: 04c9506e 1300 adc eax,[eax] ds:09f50001=000000fa 04c95070 3000 xor [eax],al ds:09f50001=fa 04c95072 1e push ds 04c95073 0000 add [eax],al ds:09f50001=fa 04c95075 0000 add [eax],al ds:09f50001=fa 04c95077 0000 add [eax],al ds:09f50001=fa 04c95079 0000 add [eax],al ds:09f50001=fa 04c9507b 007905 add [ecx+0x5],bh ds:0ae4e5b2=?? 04c9507e 0c00 or al,0x0 04c95080 45 inc ebp FAULT ->04c95081 e48b in al,8b 04c95083 4d dec ebp 04c95084 e481 in al,81 04c95086 e1ff loope 04c95087 04c95088 ff00 inc dword ptr [eax] ds:09f50001=000000fa 04c9508a 0083f90d741b add [ebx+0x1b740df9],al ds:1bfb6f99=?? 04c95090 8b55e4 mov edx,[ebp-0x1c] ss:0ae4e5f3=???????? 04c95093 81e2ffff0000 and edx,0xffff 04c95099 83fa10 cmp edx,0x10 04c9509c 740d jz 04c950ab 04c9509e 8b45e4 mov eax,[ebp-0x1c] ss:0ae4e5f3=???????? 04c950a1 25ffff0000 and eax,0xffff *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 09f5fbed 3504c953 00011c03 00000000 00000000 4009f500 *----> Raw Stack Dump <----* 09f5fbb0 dc 5c f5 09 02 00 00 00 - dc fb f5 09 01 00 c9 04 .\.............. 09f5fbc0 00 00 22 05 01 00 00 00 - a4 13 f5 09 00 00 c9 04 .."............. 09f5fbd0 e0 12 f5 09 a0 12 c9 04 - 01 00 18 40 f0 fb f5 09 ...........@.... 09f5fbe0 01 00 c9 04 e0 12 1c 01 - a0 12 00 00 04 fc f5 09 ................ 09f5fbf0 0e 53 c9 04 35 03 1c 01 - 00 00 00 00 00 00 00 00 .S..5........... 09f5fc00 00 00 f5 09 40 fc f5 09 - e7 69 f5 04 35 03 00 00 ....@....i..5... 09f5fc10 01 00 00 00 00 00 00 00 - 00 00 00 00 a0 12 00 00 ................ 09f5fc20 0b 5a e6 41 01 00 00 00 - a0 12 00 00 00 00 c0 be .Z.A............ 09f5fc30 00 00 e6 41 00 00 f5 09 - 00 00 ea 04 53 07 00 00 ...A........S... 09f5fc40 90 fc f5 09 8a 2d d1 04 - 00 00 00 60 ab d7 97 41 .....-.....`...A 09f5fc50 e0 12 0a 05 a0 12 0a 05 - 01 00 00 60 e0 f3 24 05 ...........`..$. 09f5fc60 00 00 0a 05 01 00 00 00 - 01 00 00 00 a0 61 87 00 .............a.. 09f5fc70 01 00 00 00 00 00 00 00 - 00 00 00 60 ab d7 97 41 ...........`...A 09f5fc80 00 00 00 00 00 00 24 40 - 00 00 60 bf 0b 5a e6 41 ......$@..`..Z.A 09f5fc90 a4 fc f5 09 a4 0a d1 04 - 08 f1 0a 05 88 e8 fd 04 ................ 09f5fca0 54 9f 7f 00 dc fc f5 09 - 23 ae f5 04 07 00 00 00 T.......#....... 09f5fcb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 09f5fcc0 00 00 00 00 c0 e7 fd 04 - 00 00 00 00 00 00 00 00 ................ 09f5fcd0 14 0a d1 04 cf 00 f5 09 - 01 00 f5 09 20 fe f5 09 ............ ... 09f5fce0 d1 c0 f5 04 14 31 00 10 - a0 61 87 00 a0 61 87 00 .....1...a...a.. State Dump for Thread Id 0x7c eax=007d2a40 ebx=00000001 ecx=007d2a40 edx=00000000 esi=000002f4 edi=00000000 eip=77f6829b esp=0a05f9d0 ebp=0a05f9f4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0af4e3d7=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a05f9f4 1000dbba 000002f4 ffffffff 00000001 00876150 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a05f9d0 bc cc f1 77 f4 02 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a05f9e0 ff ff ff ff f0 14 db 05 - 80 7e 87 00 3c 00 00 00 .........~..<... 0a05f9f0 85 dc 00 10 18 fa 05 0a - ba db 00 10 f4 02 00 00 ................ 0a05fa00 ff ff ff ff 01 00 00 00 - 50 61 87 00 74 01 00 00 ........Pa..t... 0a05fa10 01 00 00 00 00 00 00 00 - 34 fa 05 0a e4 9a 00 10 ........4....... 0a05fa20 78 fa 05 0a ff ff ff ff - 6c 99 00 10 ae 0b 87 00 x.......l....... 0a05fa30 50 61 87 00 54 fa 05 0a - 00 9c 00 10 9f 15 ff ff Pa..T........... 0a05fa40 78 fa 05 0a 68 fa 05 0a - ff ff ff ff 70 fa 05 0a x...h.......p... 0a05fa50 ff ff ff ff 7c fa 05 0a - 4a 01 c7 05 78 fa 05 0a ....|...J...x... 0a05fa60 9f 15 00 00 ff ff 00 00 - 00 00 00 00 70 fa 05 0a ............p... 0a05fa70 00 00 3d 0c 40 9f 7f 00 - ae 0b cf 05 98 fa 05 0a ..=.@........... 0a05fa80 f5 06 c7 05 65 15 c9 0b - 9f 15 d0 05 f0 d7 c9 0b ....e........... 0a05fa90 1a 00 c9 0b 01 00 d0 05 - c4 fa 05 0a 43 70 c8 05 ............Cp.. 0a05faa0 f0 d7 c9 0b 1a 00 d0 05 - 01 00 00 00 fc 01 db 05 ................ 0a05fab0 c8 45 d0 05 53 07 c8 0b - 00 00 00 00 00 00 00 00 .E..S........... 0a05fac0 00 00 00 00 34 fb 05 0a - 46 50 c8 05 f0 d7 c9 0b ....4...FP...... 0a05fad0 1a 00 db 05 01 00 00 00 - 20 fb 05 0a 00 00 db 05 ........ ....... 0a05fae0 02 00 00 00 00 00 00 00 - 50 85 3d 0c e0 01 db 05 ........P.=..... 0a05faf0 80 01 00 00 50 85 3d 0c - 58 fb 05 0a 3b 96 ce 05 ....P.=.X...;... 0a05fb00 9c f9 3d 0c 14 fb 05 0a - 4a 29 c5 05 9c f9 3d 0c ..=.....J)....=. State Dump for Thread Id 0x7d eax=00000000 ebx=00000001 ecx=00821090 edx=00000000 esi=000000c4 edi=00000000 eip=77f6829b esp=0a15fd1c ebp=0a15fd40 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b04e723=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a15fd40 1000dbba 000000c4 ffffffff 00000001 00871800 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0a15fd1c bc cc f1 77 c4 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0a15fd2c 20 00 00 00 40 7d 87 00 - 40 7d 87 00 40 7d 87 00 ...@}..@}..@}.. 0a15fd3c 24 fd 15 0a 64 fd 15 0a - ba db 00 10 c4 00 00 00 $...d........... 0a15fd4c ff ff ff ff 01 00 00 00 - 00 18 87 00 34 00 00 00 ............4... 0a15fd5c 01 00 00 00 00 00 00 00 - 80 fd 15 0a e4 9a 00 10 ................ 0a15fd6c e8 fd 15 0a ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0a15fd7c 00 18 87 00 a0 fd 15 0a - 00 9c 00 10 47 15 ff ff ............G... 0a15fd8c e8 fd 15 0a b4 fd 15 0a - ff ff ff ff ec fd 15 0a ................ 0a15fd9c ff ff ff ff 20 fe 15 0a - 89 97 23 06 e8 fd 15 0a .... .....#..... 0a15fdac 47 15 00 00 ff ff 00 00 - 00 00 00 00 ec fd 15 0a G............... 0a15fdbc 26 00 00 00 48 d2 01 10 - 01 00 00 00 00 00 00 00 &...H........... 0a15fdcc ac 66 8d 00 38 f3 27 06 - e0 4e 7e 00 80 8f 7e 00 .f..8.'..N~...~. 0a15fddc 08 03 00 00 0b 00 00 00 - 05 00 02 10 36 09 01 10 ............6... 0a15fdec 00 00 00 00 98 09 84 01 - e4 35 7e 00 00 01 01 10 .........5~..... 0a15fdfc 00 04 87 00 84 ff 15 0a - 01 05 f1 77 00 00 00 00 ...........w.... 0a15fe0c 00 00 00 00 18 fe 15 0a - 04 00 00 00 00 03 00 00 ................ 0a15fe1c ff ff ff ff 84 ff 15 0a - 95 f5 00 10 00 00 00 00 ................ 0a15fe2c 20 00 00 00 40 7d 87 00 - 40 7d 87 00 1e 00 00 00 ...@}..@}...... 0a15fe3c 00 00 00 00 0c ff 15 0a - 44 b7 f3 77 c8 cd f3 77 ........D..w...w 0a15fe4c ff ff ff ff 78 fe 15 0a - 7c 13 23 50 07 00 00 00 ....x...|.#P.... State Dump for Thread Id 0x7e eax=1001537f ebx=00877c70 ecx=00000000 edx=00000000 esi=0a76fdb0 edi=00000000 eip=77f6793f esp=0a76fd78 ebp=0a76fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0b65e77f=???????? 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a76fdd4 062373cb 00000334 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x7f eax=00000001 ebx=00000000 ecx=0000001e edx=00000000 esi=00000368 edi=00000000 eip=77f6829b esp=0a86f984 ebp=0a86f9a8 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b75e38b=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a86f9a8 77f04f41 00000368 ffffffff 00000000 0623922a ntdll!NtWaitForSingleObject 0a86fe20 1000f595 00000000 00000004 00877a80 00877a80 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 0a86f984 bc cc f1 77 68 03 00 00 - 00 00 00 00 00 00 00 00 ...wh........... 0a86f994 04 00 00 00 80 7a 87 00 - 80 7a 87 00 00 bc f9 7f .....z...z...... 0a86f9a4 80 7a 87 00 20 fe 86 0a - 41 4f f0 77 68 03 00 00 .z.. ...AO.wh... 0a86f9b4 ff ff ff ff 00 00 00 00 - 2a 92 23 06 68 03 00 00 ........*.#.h... 0a86f9c4 ff ff ff ff 20 77 61 69 - 68 03 00 00 63 5f 74 68 .... waih...c_th 0a86f9d4 00 00 61 64 a8 15 00 00 - 00 00 00 00 00 00 00 00 ..ad............ 0a86f9e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86f9f4 00 a8 15 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa24 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0a86fa34 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 fc 86 0a ................ 0a86fa44 77 75 01 10 64 00 00 00 - e0 fc 86 0a b4 fc 86 0a wu..d........... 0a86fa54 88 96 02 10 f1 ff ff ff - 00 00 00 00 c8 fc 86 0a ................ 0a86fa64 cc fc 86 0a 86 6f 01 10 - 20 00 00 00 e4 fc 86 0a .....o.. ....... 0a86fa74 00 00 00 00 0b 00 00 00 - 48 d2 01 10 58 61 7b 00 ........H...Xa{. 0a86fa84 49 6b 01 10 03 00 00 00 - 00 00 00 00 a0 cc bc 00 Ik.............. 0a86fa94 0b 00 00 00 03 00 00 00 - 0b 00 00 00 18 9d 02 10 ................ 0a86faa4 5c 26 01 10 03 00 00 00 - a0 cc bc 00 0b 00 00 00 \&.............. 0a86fab4 2e 65 01 10 a0 04 87 00 - f4 fa 86 0a 66 57 01 10 .e..........fW.. State Dump for Thread Id 0x80 eax=1001537f ebx=00000000 ecx=00000020 edx=00000000 esi=00000354 edi=00000000 eip=77f6829b esp=0a96fdc8 ebp=0a96fdec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0b85e7cf=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0a96fdec 77f04f41 00000354 ffffffff 00000000 06239415 ntdll!NtWaitForSingleObject 0a96fe20 1000f595 00000000 00000004 008779a0 008779a0 kernel32!WaitForSingleObject State Dump for Thread Id 0x81 eax=00000052 ebx=00877750 ecx=0aa6fda8 edx=00000000 esi=00000328 edi=00000000 eip=77f67ec7 esp=0aa6fcf8 ebp=0aa6fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0b95e6ff=???????? 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0aa6fd60 06236f32 00000328 0a663000 00001000 062c0ed5 ntdll!ZwReadFile *----> Raw Stack Dump <----* 0aa6fcf8 af d2 f0 77 28 03 00 00 - 00 00 00 00 00 00 00 00 ...w(........... 0aa6fd08 00 00 00 00 34 fd a6 0a - 00 30 66 0a 00 10 00 00 ....4....0f..... 0aa6fd18 00 00 00 00 00 00 00 00 - 00 00 00 00 50 77 87 00 ............Pw.. 0aa6fd28 50 77 87 00 50 77 87 00 - 15 c9 f1 77 68 fd a6 0a Pw..Pw.....wh... 0aa6fd38 03 00 1f 00 00 00 00 00 - 2e c9 f1 77 00 00 00 38 ...........w...8 0aa6fd48 20 fd a6 0a 60 7f fa 77 - a8 ff a6 0a 44 b7 f3 77 ...`..w....D..w 0aa6fd58 40 ca f3 77 ff ff ff ff - 88 fd a6 0a 32 6f 23 06 @..w........2o#. 0aa6fd68 28 03 00 00 00 30 66 0a - 00 10 00 00 d5 0e 2c 06 (....0f.......,. 0aa6fd78 00 00 00 00 80 0e 2c 06 - ff ff ff ff 01 00 00 00 ......,......... 0aa6fd88 f0 fd a6 0a 29 4c 23 06 - c8 fd a6 0a 3d 7c 24 06 ....)L#.....=|$. 0aa6fd98 a8 fd a6 0a 56 f6 27 06 - dc fd a6 0a 50 77 87 00 ....V.'.....Pw.. 0aa6fda8 a6 03 29 06 fa ff ff 7f - a2 03 29 06 42 00 00 00 ..).......).B... 0aa6fdb8 a0 03 00 00 70 6d 2b 06 - c8 c6 f1 77 00 00 00 00 ....pm+....w.... 0aa6fdc8 e4 fd a6 0a 00 00 00 00 - 5b a4 22 06 ae 03 29 06 ........[."...). 0aa6fdd8 58 f6 27 06 00 00 00 00 - 00 00 00 00 f0 fd a6 0a X.'............. 0aa6fde8 c7 5f 23 06 00 00 00 00 - 18 fe a6 0a 18 61 23 06 ._#..........a#. 0aa6fdf8 2e 65 01 10 60 04 87 00 - 70 6d 2b 06 4a d2 f1 77 .e..`...pm+.J..w 0aa6fe08 fe ff ff ff 0e 00 00 00 - 18 fe a6 0a 00 00 00 00 ................ 0aa6fe18 20 fe a6 0a af 61 23 06 - 84 ff a6 0a 95 f5 00 10 ....a#......... 0aa6fe28 70 6d 2b 06 00 00 00 00 - 50 77 87 00 50 77 87 00 pm+.....Pw..Pw.. State Dump for Thread Id 0x82 eax=1001537f ebx=00877680 ecx=00000000 edx=00000000 esi=0b07fdb0 edi=00000000 eip=77f6793f esp=0b07fd78 ebp=0b07fdd4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwDeviceIoControlFile 77f67934 b82d000000 mov eax,0x2d 77f67939 8d542404 lea edx,[esp+0x4] ss:0bf6e77f=10101010 77f6793d cd2e int 2e 77f6793f c22800 ret 0x28 77f67942 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b07fdd4 062373cb 0000033c 830020d4 00000000 00000000 ntdll!ZwDeviceIoControlFile State Dump for Thread Id 0x83 eax=0000120a ebx=008775b0 ecx=1002120b edx=00000000 esi=00000374 edi=00000000 eip=77f67ec7 esp=0b17fcf8 ebp=0b17fd60 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwReadFile 77f67ebc b886000000 mov eax,0x86 77f67ec1 8d542404 lea edx,[esp+0x4] ss:0c06e6ff=00000000 77f67ec5 cd2e int 2e 77f67ec7 c22400 ret 0x24 77f67eca 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b17fd60 06236f32 00000374 0af77000 00001000 062c0e65 ntdll!ZwReadFile State Dump for Thread Id 0x84 eax=0087f010 ebx=008774e0 ecx=0087f000 edx=00000000 esi=00000000 edi=00000000 eip=77f67a1b esp=0b27fd98 ebp=0b27fdd4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: ZwFsControlFile 77f67a10 b83b000000 mov eax,0x3b 77f67a15 8d542404 lea edx,[esp+0x4] ss:0c16e79f=00000000 77f67a19 cd2e int 2e 77f67a1b c22800 ret 0x28 77f67a1e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b27fdd4 0623862f 000003c4 00000000 10029d38 1001265c ntdll!ZwFsControlFile *----> Raw Stack Dump <----* 0b27fd98 23 56 f1 77 c4 03 00 00 - 00 00 00 00 00 00 00 00 #V.w............ 0b27fda8 00 00 00 00 cc fd 27 0b - 08 00 11 00 00 00 00 00 ......'......... 0b27fdb8 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 0e 00 00 ................ 0b27fdc8 e0 74 87 00 00 00 00 00 - ff 00 00 00 20 fe 27 0b .t.......... .'. 0b27fdd8 2f 86 23 06 c4 03 00 00 - 00 00 00 00 38 9d 02 10 /.#.........8... 0b27fde8 5c 26 01 10 04 00 00 00 - 98 09 84 01 28 00 00 00 \&..........(... 0b27fdf8 2e 65 01 10 a0 8a 28 06 - 88 8a 28 06 00 00 00 00 .e....(...(..... 0b27fe08 c4 03 00 00 c8 03 00 00 - 18 fe 27 0b a8 ff 27 0b ..........'...'. 0b27fe18 b6 39 26 06 ff ff ff ff - 84 ff 27 0b 95 f5 00 10 .9&.......'..... 0b27fe28 00 00 00 00 b8 0e 00 00 - e0 74 87 00 e0 74 87 00 .........t...t.. 0b27fe38 11 00 00 00 00 00 00 00 - 0c ff 27 0b 44 b7 f3 77 ..........'.D..w 0b27fe48 c8 cd f3 77 ff ff ff ff - 78 fe 27 0b 7c 13 23 50 ...w....x.'.|.#P 0b27fe58 07 00 00 00 40 c6 15 00 - 00 00 23 50 00 00 00 00 ....@.....#P.... 0b27fe68 00 00 00 00 0c ff 27 0b - bb 1f 3d 06 ff ff ff ff ......'...=..... 0b27fe78 98 fe 27 0b 02 00 00 00 - 00 00 3c 06 02 00 00 00 ..'.......<..... 0b27fe88 00 00 00 00 78 36 14 00 - 00 f0 fd 7f 9d a1 3c 06 ....x6........<. 0b27fe98 70 36 14 00 1f 3e f6 77 - 00 00 3c 06 01 00 00 00 p6...>.w..<..... 0b27fea8 00 00 00 00 1c ff 27 0b - 00 00 00 00 5b 12 f6 77 ......'.....[..w 0b27feb8 60 55 fa 77 61 12 f6 77 - 30 ff 27 0b 00 35 87 00 `U.wa..w0.'..5.. 0b27fec8 e0 74 87 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .t.............. State Dump for Thread Id 0x85 eax=1001537f ebx=00000000 ecx=206b636f edx=00000000 esi=00000380 edi=00000000 eip=77f6829b esp=0b87fdcc ebp=0b87fdf0 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c76e7d3=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b87fdf0 77f04f41 00000380 ffffffff 00000000 0622b0ed ntdll!NtWaitForSingleObject 0b87fe18 0622afc7 0b87ff84 1000f595 062b8ae0 7ff70002 kernel32!WaitForSingleObject State Dump for Thread Id 0x86 eax=00000002 ebx=008772a0 ecx=00000002 edx=00000000 esi=008772a0 edi=7ff70002 eip=77f681df esp=0b97fdbc ebp=0b97fe00 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: ZwSuspendThread 77f681d4 b8b9000000 mov eax,0xb9 77f681d9 8d542404 lea edx,[esp+0x4] ss:0c86e7c3=???????? 77f681dd cd2e int 2e 77f681df c20800 ret 0x8 77f681e2 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0b97fe00 0622b123 0628743c 06287434 00000001 062b8ae0 ntdll!ZwSuspendThread State Dump for Thread Id 0x87 eax=000000b4 ebx=00000000 ecx=100200b5 edx=00000000 esi=00000384 edi=00000000 eip=77f6829b esp=0ba7fd08 ebp=0ba7fd2c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0c96e70f=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ba7fd2c 77f04f41 00000384 ffffffff 00000000 0622b2cf ntdll!NtWaitForSingleObject 0ba7fd60 0622ce5d 062b8b11 00000fff 062b9b11 062b8ae0 kernel32!WaitForSingleObject State Dump for Thread Id 0x88 eax=00000026 ebx=00000001 ecx=0000cff8 edx=00000000 esi=00000140 edi=00000000 eip=77f6829b esp=0bb7fd50 ebp=0bb7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0ca6e757=???????? 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bb7fd74 1000dbba 00000140 ffffffff 00000001 00873ad0 ntdll!NtWaitForSingleObject State Dump for Thread Id 0x89 eax=007b7ad8 ebx=00000001 ecx=0000019d edx=00000000 esi=000000a0 edi=00000000 eip=77f6829b esp=0bc7fd50 ebp=0bc7fd74 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f68290 b8c5000000 mov eax,0xc5 77f68295 8d542404 lea edx,[esp+0x4] ss:0cb6e757=00000000 77f68299 cd2e int 2e 77f6829b c20c00 ret 0xc 77f6829e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0bc7fd74 1000dbba 000000a0 ffffffff 00000001 008719b0 ntdll!NtWaitForSingleObject *----> Raw Stack Dump <----* 0bc7fd50 bc cc f1 77 a0 00 00 00 - 01 00 00 00 00 00 00 00 ...w............ 0bc7fd60 d0 35 87 00 20 80 87 00 - 20 80 87 00 60 2c 40 00 .5.. ... ...`,@. 0bc7fd70 70 00 01 00 98 fd c7 0b - ba db 00 10 a0 00 00 00 p............... 0bc7fd80 ff ff ff ff 01 00 00 00 - b0 19 87 00 34 00 00 00 ............4... 0bc7fd90 01 00 00 00 00 00 00 00 - b4 fd c7 0b e4 9a 00 10 ................ 0bc7fda0 00 fe c7 0b ff ff ff ff - 12 a7 05 10 00 00 7e 00 ..............~. 0bc7fdb0 b0 19 87 00 d4 fd c7 0b - 00 9c 00 10 44 15 ff ff ............D... 0bc7fdc0 00 fe c7 0b e8 fd c7 0b - ff ff ff ff fc fd c7 0b ................ 0bc7fdd0 ff ff ff ff 04 fe c7 0b - cc 45 40 00 00 fe c7 0b .........E@..... 0bc7fde0 44 15 40 00 ff ff 00 00 - 00 00 00 00 fc fd c7 0b D.@............. 0bc7fdf0 90 12 93 02 b0 32 7e 00 - 01 65 01 10 00 00 87 00 .....2~..e...... 0bc7fe00 60 08 c7 0b 14 fe c7 0b - 92 13 40 00 a0 12 93 02 `.........@..... 0bc7fe10 01 fe c7 0b 20 fe c7 0b - 74 13 40 00 a0 12 93 02 .... ...t.@..... 0bc7fe20 84 ff c7 0b 95 f5 00 10 - a0 12 93 02 d0 35 87 00 .............5.. 0bc7fe30 20 80 87 00 20 80 87 00 - 11 00 00 00 21 ce f6 77 ... .......!..w 0bc7fe40 0c ff c7 0b 44 b7 f3 77 - c8 cd f3 77 ff ff ff ff ....D..w...w.... 0bc7fe50 78 fe c7 0b 7c 13 23 50 - 07 00 00 00 a8 8f 13 00 x...|.#P........ 0bc7fe60 00 00 23 50 00 00 00 00 - 00 00 00 00 0c ff c7 0b ..#P............ 0bc7fe70 bb 1f 3d 06 ff ff ff ff - 98 fe c7 0b 02 00 00 00 ..=............. 0bc7fe80 00 00 3c 06 02 00 00 00 - 00 00 00 00 78 36 14 00 ..<.........x6.. State Dump for Thread Id 0x8a eax=00000000 ebx=0ca7f0dc ecx=007c033d edx=00000000 esi=7ffdf000 edi=00000001 eip=77f6828b esp=0ca7f0b8 ebp=0ca7f10c iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f68280 b8c4000000 mov eax,0xc4 77f68285 8d542404 lea edx,[esp+0x4] ss:0d96dabf=???????? 77f68289 cd2e int 2e 77f6828b c21400 ret 0x14 77f6828e 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0ca7f10c 77f1cd92 00000002 062bbadd 00000000 ffffffff ntdll!NtWaitForMultipleObjects 0ca7f128 06238e5b 00000002 062bbadd 00000000 ffffffff kernel32!WaitForMultipleObjects *----> Raw Stack Dump <----* 0ca7f0b8 85 ce f1 77 02 00 00 00 - dc f0 a7 0c 01 00 00 00 ...w............ 0ca7f0c8 00 00 00 00 00 00 00 00 - 40 8e 87 00 d0 ba 87 00 ........@....... 0ca7f0d8 d0 ba 87 00 f8 03 00 00 - b8 03 00 00 40 8e 87 00 ............@... 0ca7f0e8 d0 ba 87 00 d0 ba 87 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f0f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f108 00 00 00 00 28 f1 a7 0c - 92 cd f1 77 02 00 00 00 ....(......w.... 0ca7f118 dd ba 2b 06 00 00 00 00 - ff ff ff ff 00 00 00 00 ..+............. 0ca7f128 60 fd a7 0c 5b 8e 23 06 - 02 00 00 00 dd ba 2b 06 `...[.#.......+. 0ca7f138 00 00 00 00 ff ff ff ff - 00 00 00 00 60 aa 2b 06 ............`.+. 0ca7f148 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f158 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f168 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f178 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f188 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f198 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0ca7f1e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................