| 1 |
|
|---|
| 2 | Microsoft (R) Windows NT (TM) Version 4.00 DrWtsn32
|
|---|
| 3 | Copyright (C) 1985-1996 Microsoft Corp. All rights reserved.
|
|---|
| 4 |
|
|---|
| 5 |
|
|---|
| 6 |
|
|---|
| 7 | Application exception occurred:
|
|---|
| 8 | App: (pid=123)
|
|---|
| 9 | When: 7/10/2022 @ 12:28:32.928
|
|---|
| 10 | Exception number: c0000005 (access violation)
|
|---|
| 11 |
|
|---|
| 12 | *----> System Information <----*
|
|---|
| 13 | Computer Name: M0017
|
|---|
| 14 | User Name: Administrator
|
|---|
| 15 | Number of Processors: 1
|
|---|
| 16 | Processor Type: x86 Family 6 Model 5 Stepping 4
|
|---|
| 17 | Windows Version: 4.0
|
|---|
| 18 | Current Build: 1381
|
|---|
| 19 | Service Pack: 6
|
|---|
| 20 | Current Type: Uniprocessor Free
|
|---|
| 21 | Registered Organization:
|
|---|
| 22 | Registered Owner: x
|
|---|
| 23 |
|
|---|
| 24 | *----> Task List <----*
|
|---|
| 25 | 0 Idle.exe
|
|---|
| 26 | 2 System.exe
|
|---|
| 27 | 20 SMSS.exe
|
|---|
| 28 | 24 CSRSS.exe
|
|---|
| 29 | 34 WINLOGON.exe
|
|---|
| 30 | 40 SERVICES.exe
|
|---|
| 31 | 43 LSASS.exe
|
|---|
| 32 | 62 VBoxService.exe
|
|---|
| 33 | 76 SPOOLSS.exe
|
|---|
| 34 | 85 RPCSS.exe
|
|---|
| 35 | 101 PSTORES.exe
|
|---|
| 36 | 110 NDDEAGNT.exe
|
|---|
| 37 | 111 EXPLORER.exe
|
|---|
| 38 | 123 VBoxTray.exe
|
|---|
| 39 | 60 DRWTSN32.exe
|
|---|
| 40 | 0 _Total.exe
|
|---|
| 41 |
|
|---|
| 42 | (00400000 - 0059f000)
|
|---|
| 43 | (77f60000 - 77fbe000) C:\WINNT\Symbols\dll\ntdll.dbg
|
|---|
| 44 | (77f00000 - 77f5e000) C:\WINNT\Symbols\dll\kernel32.dbg
|
|---|
| 45 | (77e70000 - 77ec5000) C:\WINNT\Symbols\dll\user32.dbg
|
|---|
| 46 | (77ed0000 - 77efc000) C:\WINNT\Symbols\dll\gdi32.dbg
|
|---|
| 47 | (77dc0000 - 77dff000) C:\WINNT\Symbols\dll\advapi32.dbg
|
|---|
| 48 | (77e10000 - 77e67000) C:\WINNT\Symbols\dll\rpcrt4.dbg
|
|---|
| 49 | (77c40000 - 77d7c000) C:\WINNT\Symbols\dll\shell32.dbg
|
|---|
| 50 | (77aa0000 - 77b15000) COMCTL32.dbg
|
|---|
| 51 | (77b20000 - 77bd7000) C:\WINNT\Symbols\dll\ole32.dbg
|
|---|
| 52 | (776b0000 - 776c4000) C:\WINNT\Symbols\dll\ws2_32.dbg
|
|---|
| 53 | (779f0000 - 77a36000) dll\msvcrt.dbg
|
|---|
| 54 | (776a0000 - 776a7000) C:\WINNT\Symbols\dll\ws2help.dbg
|
|---|
| 55 | (77bf0000 - 77bf7000) C:\WINNT\Symbols\dll\rpcltc1.dbg
|
|---|
| 56 |
|
|---|
| 57 | State Dump for Thread Id 0x7a
|
|---|
| 58 |
|
|---|
| 59 | eax=006037a8 ebx=0012fdd8 ecx=00030030 edx=00000000 esi=7ffdf000 edi=0012fdf8
|
|---|
| 60 | eip=77f682cb esp=0012fdb4 ebp=0012fe08 iopl=0 nv up ei pl nz ac pe cy
|
|---|
| 61 | cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213
|
|---|
| 62 |
|
|---|
| 63 |
|
|---|
| 64 | function: ZwWaitForMultipleObjects
|
|---|
| 65 | 77f682c0 b8c4000000 mov eax,0xc4
|
|---|
| 66 | 77f682c5 8d542404 lea edx,[esp+0x4] ss:0101e7bb=????????
|
|---|
| 67 | 77f682c9 cd2e int 2e
|
|---|
| 68 | 77f682cb c21400 ret 0x14
|
|---|
| 69 | 77f682ce 8bc0 mov eax,eax
|
|---|
| 70 |
|
|---|
| 71 | *----> Stack Back Trace <----*
|
|---|
| 72 |
|
|---|
| 73 | FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
|
|---|
| 74 | 0012fdb0 77f1ce6b 00000002 0012fdd8 00000001 00000000 ntdll!ZwWaitForMultipleObjects (FPO: [5,0,0])
|
|---|
| 75 | 0012fe08 77e79de5 00000002 0012fe30 00000000 000001f4 kernel32!WaitForMultipleObjectsEx (FPO: Non-FPO [5,13,3])
|
|---|
| 76 | 0012fe64 004034ac 00000001 0012ff08 000001f4 000004ff user32!MsgWaitForMultipleObjectsEx [omap] (FPO: Non-FPO [5,14,3])
|
|---|
| 77 | 0012ff1c 00403a47 0012f52c 00000000 7ffdf000 0012ffc0 !RTCString::substr
|
|---|
| 78 | 0012ff30 00413859 00400000 00000000 001325a9 00000001 !RTCString::substr
|
|---|
| 79 | 0012ffc0 77f1b9ea 0012f52c 77c440e0 7ffdf000 7ffdf000 !RTCString::substr
|
|---|
| 80 | 0012fff0 00000000 004138ac 00000000 000000b0 00000100 kernel32!BaseProcessStart (FPO: Non-FPO [1,8,3])
|
|---|
| 81 | 00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
|
|---|
| 82 |
|
|---|
| 83 | *----> Raw Stack Dump <----*
|
|---|
| 84 | 0012fdb4 6b ce f1 77 02 00 00 00 - d8 fd 12 00 01 00 00 00 k..w............
|
|---|
| 85 | 0012fdc4 00 00 00 00 f8 fd 12 00 - 34 fe 12 00 00 00 00 00 ........4.......
|
|---|
| 86 | 0012fdd4 30 fe 12 00 8c 00 00 00 - 24 00 00 00 3c e0 46 00 0.......$...<.F.
|
|---|
| 87 | 0012fde4 20 fe 12 00 3b 4f 46 00 - 34 a0 22 00 18 00 00 00 ...;OF.4.".....
|
|---|
| 88 | 0012fdf4 48 4f 46 00 c0 b4 b3 ff - ff ff ff ff 00 00 00 00 HOF.............
|
|---|
| 89 | 0012fe04 01 00 00 00 64 fe 12 00 - e5 9d e7 77 02 00 00 00 ....d......w....
|
|---|
| 90 | 0012fe14 30 fe 12 00 00 00 00 00 - f4 01 00 00 00 00 00 00 0...............
|
|---|
| 91 | 0012fe24 8f 19 e7 77 01 00 00 00 - 02 1c e7 77 8c 00 00 00 ...w.......w....
|
|---|
| 92 | 0012fe34 24 00 00 00 7a 37 40 00 - 18 6a 60 00 ec fe 12 00 $...z7@..j`.....
|
|---|
| 93 | 0012fe44 f4 fe 12 00 4c 12 e7 77 - 70 00 02 00 92 1a e7 77 ....L..wp......w
|
|---|
| 94 | 0012fe54 00 00 00 00 00 00 00 00 - 44 e0 fd 7f 24 00 00 00 ........D...$...
|
|---|
| 95 | 0012fe64 1c ff 12 00 ac 34 40 00 - 01 00 00 00 08 ff 12 00 .....4@.........
|
|---|
| 96 | 0012fe74 f4 01 00 00 ff 04 00 00 - 00 00 00 00 7c 00 00 00 ............|...
|
|---|
| 97 | 0012fe84 70 00 02 00 00 00 00 00 - 00 00 40 00 78 fe 12 00 p.........@.x...
|
|---|
| 98 | 0012fe94 f8 eb fd 7f b0 ff 12 00 - 44 b9 f3 77 68 ca f3 77 ........D..wh..w
|
|---|
| 99 | 0012fea4 00 00 00 00 c0 fe 12 00 - b6 2a dc 77 04 ff 12 00 .........*.w....
|
|---|
| 100 | 0012feb4 01 00 00 00 00 00 00 00 - 00 00 00 00 1c ff 12 00 ................
|
|---|
| 101 | 0012fec4 ef 21 40 00 00 00 00 00 - 1c ff 12 00 da 22 40 00 .!@.........."@.
|
|---|
| 102 | 0012fed4 00 00 00 00 70 00 02 00 - e9 22 40 00 18 00 00 00 ....p...."@.....
|
|---|
| 103 | 0012fee4 48 4f 46 00 0c 00 00 00 - 70 00 02 00 04 20 00 00 HOF.....p.... ..
|
|---|
| 104 |
|
|---|
| 105 | State Dump for Thread Id 0x5a
|
|---|
| 106 |
|
|---|
| 107 | eax=0012fe9c ebx=00000000 ecx=5fe29cb3 edx=ffffffff esi=0012fe9c edi=00000000
|
|---|
| 108 | eip=004123aa esp=00f6f584 ebp=00f6f6e4 iopl=0 nv up ei pl nz na pe nc
|
|---|
| 109 | cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
|
|---|
| 110 |
|
|---|
| 111 |
|
|---|
| 112 | function: RTCString::substr
|
|---|
| 113 | 0041238f cc int 3
|
|---|
| 114 | 00412390 55 push ebp
|
|---|
| 115 | 00412391 8bec mov ebp,esp
|
|---|
| 116 | 00412393 81ec5c010000 sub esp,0x15c
|
|---|
| 117 | 00412399 a110de5500 mov eax,[0055de10] ds:0055de10=5fe29cb3
|
|---|
| 118 | 0041239e 33c5 xor eax,ebp
|
|---|
| 119 | 004123a0 8945fc mov [ebp-0x4],eax ss:01e5e0ea=????????
|
|---|
| 120 | 004123a3 8b450c mov eax,[ebp+0xc] ss:01e5e0ea=????????
|
|---|
| 121 | 004123a6 53 push ebx
|
|---|
| 122 | 004123a7 8b5d08 mov ebx,[ebp+0x8] ss:01e5e0ea=????????
|
|---|
| 123 | FAULT ->004123aa 837b0402 cmp dword ptr [ebx+0x4],0x2 ds:00eeea06=????????
|
|---|
| 124 | 004123ae 8985a4feffff mov [ebp+0xfffffea4],eax ss:00f6f588=00000000
|
|---|
| 125 | 004123b4 7d14 jge RTCString::substr+0xf3aa (004123ca)
|
|---|
| 126 | 004123b6 b801400080 mov eax,0x80004001
|
|---|
| 127 | 004123bb 5b pop ebx
|
|---|
| 128 | 004123bc 8b4dfc mov ecx,[ebp-0x4] ss:01e5e0ea=????????
|
|---|
| 129 | 004123bf 33cd xor ecx,ebp
|
|---|
| 130 | 004123c1 e8b4090000 call RTCString::substr+0xfd5a (00412d7a)
|
|---|
| 131 | 004123c6 8be5 mov esp,ebp
|
|---|
| 132 | 004123c8 5d pop ebp
|
|---|
| 133 | 004123c9 c3 ret
|
|---|
| 134 | 004123ca 6840010000 push 0x140
|
|---|
| 135 |
|
|---|
| 136 | *----> Stack Back Trace <----*
|
|---|
| 137 |
|
|---|
| 138 | FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
|
|---|
| 139 | 00f6f6e4 004124f1 00000000 0012fe9c 00000001 00f6f730 !RTCString::substr
|
|---|
| 140 | 00f6f6fc 0040495b 0012fe9c 00f6f734 00000001 00000001 !RTCString::substr
|
|---|
| 141 | 00f6f71c 0040591d 00f6f820 00000001 0055c01d 0012fe90 !RTCString::substr
|
|---|
| 142 | 00f6f7ac 00409664 0012fe90 00000001 00f6f7f0 0046e320 !RTCString::substr
|
|---|
| 143 | 00f6fef4 004097e3 0055c01d 0000005a 00944b00 004371e6 !RTCString::substr
|
|---|
| 144 | 00f6ff10 004019c8 00000004 0055c01d 0000005a 00d8bd58 !RTCString::substr
|
|---|
| 145 | 00f6ff2c 00429120 00d8bd58 0055c010 00d8bd58 00000004 !RTCString::copyFromN
|
|---|
| 146 | 00f6ff54 00431e49 00d8bd58 0000005a 00d8c2d4 00944b10 !RTThreadFromNative
|
|---|
| 147 | 00f6ff74 0046a712 00d8bd58 5f14631f 00133350 00944b10 !RTSemEventRemoveSignaller
|
|---|
| 148 | 00f6ffac 0046a79c 0012fc8c 00f6ffec 77f04ede 00944b10 !??_VRTCString@@SAXPAX@Z
|
|---|
| 149 | 00f6ffb8 77f04ede 00944b10 00133350 0012fc8c 00944b10 !??_VRTCString@@SAXPAX@Z
|
|---|
| 150 | 00f6ffec 00000000 00000000 00000000 00000000 00000000 kernel32!BaseThreadStart (FPO: Non-FPO [2,8,3])
|
|---|
| 151 | 00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
|
|---|
| 152 |
|
|---|
| 153 | *----> Raw Stack Dump <----*
|
|---|
| 154 | 00f6f584 34 f7 f6 00 00 00 00 00 - 00 00 00 00 00 00 00 00 4...............
|
|---|
| 155 | 00f6f594 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 156 | 00f6f5a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 157 | 00f6f5b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 158 | 00f6f5c4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 159 | 00f6f5d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 160 | 00f6f5e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 161 | 00f6f5f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 162 | 00f6f604 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 163 | 00f6f614 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 164 | 00f6f624 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 165 | 00f6f634 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 166 | 00f6f644 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 167 | 00f6f654 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 168 | 00f6f664 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 169 | 00f6f674 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 170 | 00f6f684 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 171 | 00f6f694 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 172 | 00f6f6a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 173 | 00f6f6b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
|
|---|
| 174 |
|
|---|
| 175 | State Dump for Thread Id 0x75
|
|---|
| 176 |
|
|---|
| 177 | eax=0046e400 ebx=77e71ed5 ecx=0002006a edx=00000000 esi=77e726e5 edi=0106ff08
|
|---|
| 178 | eip=77e72397 esp=0106fec0 ebp=0106fee4 iopl=0 nv up ei pl zr na po nc
|
|---|
| 179 | cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
|
|---|
| 180 |
|
|---|
| 181 |
|
|---|
| 182 | function: NtUserGetMessage
|
|---|
| 183 | 77e7238c b885110000 mov eax,0x1185
|
|---|
| 184 | 77e72391 8d542404 lea edx,[esp+0x4] ss:01f5e8c7=????????
|
|---|
| 185 | 77e72395 cd2e int 2e
|
|---|
| 186 | 77e72397 c21400 ret 0x14
|
|---|
| 187 |
|
|---|
| 188 | *----> Stack Back Trace <----*
|
|---|
| 189 |
|
|---|
| 190 | FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
|
|---|
| 191 | 0106febc 77e72715 0106ff08 00000000 00000000 00000000 user32!NtUserGetMessage [omap] (FPO: [5,0,0])
|
|---|
| 192 | 0106fee4 0040b90a 0106ff08 00000000 00000000 00000000 user32!GetMessageA [omap] (FPO: Non-FPO [4,2,2])
|
|---|
| 193 | 0106ff2c 00429120 00d8c2f0 0146e3e0 00d8c2f0 00000009 !RTCString::substr
|
|---|
| 194 | 0106ff54 00431e49 00d8c2f0 00000075 00d8c86c 00d8c888 !RTThreadFromNative
|
|---|
| 195 | 0106ff74 0046a712 00d8c2f0 5ee4631f 77eb5228 00d8c888 !RTSemEventRemoveSignaller
|
|---|
| 196 | 0106ffac 0046a79c 0012ffb0 0106ffec 77f04ede 00d8c888 !??_VRTCString@@SAXPAX@Z
|
|---|
| 197 | 0106ffb8 77f04ede 00d8c888 77eb5228 0012ffb0 00d8c888 !??_VRTCString@@SAXPAX@Z
|
|---|
| 198 | 0106ffec 00000000 00000000 00000000 00000000 00000000 kernel32!BaseThreadStart (FPO: Non-FPO [2,8,3])
|
|---|
| 199 | 00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
|
|---|
| 200 |
|
|---|
| 201 | State Dump for Thread Id 0x6b
|
|---|
| 202 |
|
|---|
| 203 | eax=0046a738 ebx=00000000 ecx=0012fcd4 edx=00000000 esi=0116fe10 edi=0046e3e8
|
|---|
| 204 | eip=77f6797f esp=0116fdd8 ebp=0116fe34 iopl=0 nv up ei pl nz na pe nc
|
|---|
| 205 | cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
|
|---|
| 206 |
|
|---|
| 207 |
|
|---|
| 208 | function: ZwDeviceIoControlFile
|
|---|
| 209 | 77f67974 b82d000000 mov eax,0x2d
|
|---|
| 210 | 77f67979 8d542404 lea edx,[esp+0x4] ss:0205e7df=????????
|
|---|
| 211 | 77f6797d cd2e int 2e
|
|---|
| 212 | 77f6797f c22800 ret 0x28
|
|---|
| 213 | 77f67982 8bc0 mov eax,eax
|
|---|
| 214 |
|
|---|
| 215 | *----> Stack Back Trace <----*
|
|---|
| 216 |
|
|---|
| 217 | FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
|
|---|
| 218 | 0116fdd4 77f02c58 00000084 00000000 00000000 00000000 ntdll!ZwDeviceIoControlFile (FPO: [10,0,0])
|
|---|
| 219 | 0116fe34 0046501a 00000084 0022a018 0116fe9c 00000040 kernel32!DeviceIoControl
|
|---|
| 220 | 0116fe60 0046a405 0022a018 00000040 00000040 0116fee0 !RTFileSetAllocationSize
|
|---|
| 221 | 0116fe74 00466466 0116fe9c 00000040 0046e3e8 00000000 !??_VRTCString@@SAXPAX@Z
|
|---|
| 222 | 0116fee0 0040abbe 0046e3e8 0116ff04 0116ff08 00000000 !RTFileSetAllocationSize
|
|---|
| 223 | 0116ff10 004019c8 0046e3e0 0055c031 0000006b 00944e20 !RTCString::substr
|
|---|
| 224 | 0116ff2c 00429120 00944e20 0055c024 00944e20 00000004 !RTCString::copyFromN
|
|---|
| 225 | 0116ff54 00431e49 00944e20 0000006b 0094539c 00d8cac8 !RTThreadFromNative
|
|---|
| 226 | 0116ff74 0046a712 00944e20 5ef4631f 00000598 00d8cac8 !RTSemEventRemoveSignaller
|
|---|
| 227 | 0116ffac 0046a79c 00940000 0116ffec 77f04ede 00d8cac8 !??_VRTCString@@SAXPAX@Z
|
|---|
| 228 | 0116ffb8 77f04ede 00d8cac8 00000598 00940000 00d8cac8 !??_VRTCString@@SAXPAX@Z
|
|---|
| 229 | 0116ffec 00000000 00000000 00000000 00000000 00000000 kernel32!BaseThreadStart (FPO: Non-FPO [2,8,3])
|
|---|
| 230 | 00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
|
|---|
| 231 |
|
|---|
| 232 | State Dump for Thread Id 0x6c
|
|---|
| 233 |
|
|---|
| 234 | eax=0126fd98 ebx=00000000 ecx=009404d0 edx=00000000 esi=0126fec0 edi=ffffffb2
|
|---|
| 235 | eip=77f6791f esp=0126feac ebp=0126fec8 iopl=0 nv up ei pl nz na po nc
|
|---|
| 236 | cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
|
|---|
| 237 |
|
|---|
| 238 |
|
|---|
| 239 | function: NtDelayExecution
|
|---|
| 240 | 77f67914 b827000000 mov eax,0x27
|
|---|
| 241 | 77f67919 8d542404 lea edx,[esp+0x4] ss:0215e8b3=????????
|
|---|
| 242 | 77f6791d cd2e int 2e
|
|---|
| 243 | 77f6791f c20800 ret 0x8
|
|---|
| 244 | 77f67922 8bc0 mov eax,eax
|
|---|
| 245 |
|
|---|
| 246 | *----> Stack Back Trace <----*
|
|---|
| 247 |
|
|---|
| 248 | FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
|
|---|
| 249 | 0126fea8 77f1cef5 00000000 0126fec0 0046e4c8 00000000 ntdll!NtDelayExecution (FPO: [2,0,0])
|
|---|
| 250 | 0126fec8 77f1cebe 00001388 00000000 004319ed 00001388 kernel32!SleepEx (FPO: Non-FPO [2,3,2])
|
|---|
| 251 | 0126fed4 004319ed 00001388 0126ff10 00411f6b 00001388 kernel32!Sleep (FPO: [1,0,0])
|
|---|
| 252 | 0126fee0 00411f6b 00001388 0000006c 0055c081 00945900 !RTThreadSleepNoLog
|
|---|
| 253 | 0126ff10 004019c8 00000000 0055c081 0000006c 009453b8 !RTCString::substr
|
|---|
| 254 | 0126ff2c 00429120 009453b8 0055c074 009453b8 00000004 !RTCString::copyFromN
|
|---|
| 255 | 0126ff54 00431e49 009453b8 0000006c 00945934 00945950 !RTThreadFromNative
|
|---|
| 256 | 0126ff74 0046a712 009453b8 5ec4631f 0012fcec 00945950 !RTSemEventRemoveSignaller
|
|---|
| 257 | 0126ffac 0046a79c 77f6adb3 0126ffec 77f04ede 00945950 !??_VRTCString@@SAXPAX@Z
|
|---|
| 258 | 0126ffb8 77f04ede 00945950 0012fcec 77f6adb3 00945950 !??_VRTCString@@SAXPAX@Z
|
|---|
| 259 | 0126ffec 00000000 00000000 00000000 00000000 00000000 kernel32!BaseThreadStart (FPO: Non-FPO [2,8,3])
|
|---|
| 260 | 00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
|
|---|
| 261 |
|
|---|
| 262 | State Dump for Thread Id 0x72
|
|---|
| 263 |
|
|---|
| 264 | eax=00139640 ebx=77e71ed5 ecx=77bcb350 edx=00000000 esi=77e726e5 edi=0136ff08
|
|---|
| 265 | eip=77e72397 esp=0136fe90 ebp=0136feb4 iopl=0 nv up ei pl zr na po nc
|
|---|
| 266 | cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
|
|---|
| 267 |
|
|---|
| 268 |
|
|---|
| 269 | function: NtUserGetMessage
|
|---|
| 270 | 77e7238c b885110000 mov eax,0x1185
|
|---|
| 271 | 77e72391 8d542404 lea edx,[esp+0x4] ss:0225e897=????????
|
|---|
| 272 | 77e72395 cd2e int 2e
|
|---|
| 273 | 77e72397 c21400 ret 0x14
|
|---|
| 274 |
|
|---|
| 275 | *----> Stack Back Trace <----*
|
|---|
| 276 |
|
|---|
| 277 | FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
|
|---|
| 278 | 0136fe8c 77e72715 0136ff08 00000000 00000000 00000000 user32!NtUserGetMessage [omap] (FPO: [5,0,0])
|
|---|
| 279 | 0136feb4 0040ea7c 0136ff08 00000000 00000000 00000000 user32!GetMessageA [omap] (FPO: Non-FPO [4,2,2])
|
|---|
| 280 | 0136ff2c 00429120 00945e90 00d8cef0 00945e90 00000009 !RTCString::substr
|
|---|
| 281 | 0136ff54 00431e49 00945e90 00000072 0094640c 00946428 !RTThreadFromNative
|
|---|
| 282 | 0136ff74 0046a712 00945e90 5ed4631f 00000598 00946428 !RTSemEventRemoveSignaller
|
|---|
| 283 | 0136ffac 0046a79c 00940000 0136ffec 77f04ede 00946428 !??_VRTCString@@SAXPAX@Z
|
|---|
| 284 | 0136ffb8 77f04ede 00946428 00000598 00940000 00946428 !??_VRTCString@@SAXPAX@Z
|
|---|
| 285 | 0136ffec 00000000 00000000 00000000 00000000 00000000 kernel32!BaseThreadStart (FPO: Non-FPO [2,8,3])
|
|---|
| 286 | 00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
|
|---|
| 287 |
|
|---|
| 288 | State Dump for Thread Id 0x73
|
|---|
| 289 |
|
|---|
| 290 | eax=7ffd8000 ebx=00000000 ecx=00000001 edx=00000000 esi=001396a0 edi=001397a0
|
|---|
| 291 | eip=77f67fa7 esp=0146fdf0 ebp=0146ff90 iopl=0 nv up ei pl nz na po nc
|
|---|
| 292 | cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
|
|---|
| 293 |
|
|---|
| 294 |
|
|---|
| 295 | function: NtReplyWaitReceivePort
|
|---|
| 296 | 77f67f9c b890000000 mov eax,0x90
|
|---|
| 297 | 77f67fa1 8d542404 lea edx,[esp+0x4] ss:0235e7f7=????????
|
|---|
| 298 | 77f67fa5 cd2e int 2e
|
|---|
| 299 | 77f67fa7 c21000 ret 0x10
|
|---|
| 300 | 77f67faa 8bc0 mov eax,eax
|
|---|
| 301 |
|
|---|
| 302 | *----> Stack Back Trace <----*
|
|---|
| 303 |
|
|---|
| 304 | FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
|
|---|
| 305 | 0146fdec 77e15b9f 000000f8 0146ff6c 00000000 00134450 ntdll!NtReplyWaitReceivePort (FPO: [4,0,0])
|
|---|
| 306 | 0146ff90 77e15a1d 77e160f7 001396a0 0146ffec 77f64d56 rpcrt4!WMSG_ADDRESS::ReceiveLotsaCalls [omap] (FPO: Non-FPO [0,97,3])
|
|---|
| 307 |
|
|---|
| 308 | State Dump for Thread Id 0x69
|
|---|
| 309 |
|
|---|
| 310 | eax=0046a738 ebx=00000000 ecx=0012fcd4 edx=00000000 esi=0156fdec edi=0156fedc
|
|---|
| 311 | eip=77f6797f esp=0156fdb4 ebp=0156fe10 iopl=0 nv up ei pl nz na pe nc
|
|---|
| 312 | cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
|
|---|
| 313 |
|
|---|
| 314 |
|
|---|
| 315 | function: ZwDeviceIoControlFile
|
|---|
| 316 | 77f67974 b82d000000 mov eax,0x2d
|
|---|
| 317 | 77f67979 8d542404 lea edx,[esp+0x4] ss:0245e7bb=????????
|
|---|
| 318 | 77f6797d cd2e int 2e
|
|---|
| 319 | 77f6797f c22800 ret 0x28
|
|---|
| 320 | 77f67982 8bc0 mov eax,eax
|
|---|
| 321 |
|
|---|
| 322 | *----> Stack Back Trace <----*
|
|---|
| 323 |
|
|---|
| 324 | FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
|
|---|
| 325 | 0156fdb0 77f02c58 00000084 00000000 00000000 00000000 ntdll!ZwDeviceIoControlFile (FPO: [10,0,0])
|
|---|
| 326 | 0156fe10 0046501a 00000084 0022a018 0156fe6c 0000004c kernel32!DeviceIoControl
|
|---|
| 327 | 0156fe3c 0046a405 0022a018 0000004c 0000004c 0156febc !RTFileSetAllocationSize
|
|---|
| 328 | 0156fe50 00466cb4 0156fe6c 0000004c 0046e490 00944d30 !??_VRTCString@@SAXPAX@Z
|
|---|
| 329 | 0156febc 00469638 0046e490 00000001 00946e68 00000000 !RTStrFree
|
|---|
| 330 | 0156fee4 0040e0b8 0046e490 0156ff0c 0055c095 00000069 !RTStrFree
|
|---|
| 331 | 0156ff10 004019c8 0046e460 0055c095 00000069 009466a0 !RTCString::substr
|
|---|
| 332 | 0156ff2c 00429120 009466a0 0055c088 009466a0 00000004 !RTCString::copyFromN
|
|---|
| 333 | 0156ff54 00431e49 009466a0 00000069 00946c1c 00946c48 !RTThreadFromNative
|
|---|
| 334 | 0156ff74 0046a712 009466a0 5eb4631f 00000000 00946c48 !RTSemEventRemoveSignaller
|
|---|
| 335 | 0156ffac 0046a79c 0012fe44 0156ffec 77f04ede 00946c48 !??_VRTCString@@SAXPAX@Z
|
|---|
| 336 | 0156ffb8 77f04ede 00946c48 00000000 0012fe44 00946c48 !??_VRTCString@@SAXPAX@Z
|
|---|
| 337 | 0156ffec 00000000 00000000 00000000 00000000 00000000 kernel32!BaseThreadStart (FPO: Non-FPO [2,8,3])
|
|---|
| 338 | 00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
|
|---|
| 339 |
|
|---|