We experienced a problem in our application. After
executing our application, sometime if we quit IE by
pressing the x at the upper right corner. There were an
crash message shown in the windows. Here is the Dr Watson
dump. Would anybody help to tell me what have happened?
Thanks.
By the way, we are using Chinese Win2000
µo¥ÍÀ³¥Îµ{¦¡¨Ò¥~:
À³¥Îµ{¦¡: iexplore.exe (pid=304)
µo¥Í®É¶¡: 2003/3/25 @ 17:48:55.858
¨Ò¥~½s¸¹: c0000005 (¦s¨ú¹H³W)
*----> ¨t ²Î ¸ê °T <----*
¹q¸£¦WºÙ: TM
¨Ï¥ÎªÌ¦WºÙ: 2901
³B²z¾¹¦WºÙ: 1
³B²z¾¹Ãþ«¬: x86 Family 15 Model 2 Stepping 4
Windows 2000 ª©¥»: 5.0
¥Ø«eªºª©¥»: 2195
Service Pack: 3
¥Ø«eªºÃþ«¬: Uniprocessor Free
µn°Oªº¤½¥q:
µn°Oªº¾Ö¦³¤H:
*----> ¤u §@ ²M ³æ <----*
0 Idle.exe
8 System.exe
144 SMSS.exe
168 CSRSS.exe
188 WINLOGON.exe
216 SERVICES.exe
228 LSASS.exe
404 svchost.exe
444 spoolsv.exe
472 trcboot.exe
504 PCS_AGNT.exe
604 msdtc.exe
684 dklog.exe
704 svchost.exe
724 ldlcserv.exe
748 NMSSvc.exe
836 NTFSVC.exe
852 ntrtscan.exe
872 regsvc.exe
904 scardsvr.exe
936 mstask.exe
956 tmlisten.exe
1000 WinMgmt.exe
1100 wrmserv.exe
1124 svchost.exe
1148 dkcktkn.exe
1208 mqsvc.exe
1572 Explorer.exe
1720 igfxtray.exe
1748 hkcmd.exe
1760 DkAutoReg.exe
1780 Winampa.exe
1788 internat.exe
304 iexplore.exe
780 babylon.exe
1876 NLNOTES.exe
1480 nhldaemn.exe
1116 svchost.exe
964 IEXPLORE.exe
2144 winamp.exe
1980 pcsws.exe
2320 PCSCM.exe
2368 pcsws.exe
2432 drwtsn32.exe
0 _Total.exe
(00400000 - 00412000)
(77F80000 - 77FFB000)
(77E60000 - 77F36000)
(77DF0000 - 77E55000)
(77F40000 - 77F7C000)
(70BD0000 - 70C1C000)
(77D90000 - 77DED000)
(786F0000 - 78761000)
(75E00000 - 75E1A000)
(71500000 - 7161B000)
(78000000 - 78046000)
(71700000 - 7178A000)
(78F90000 - 791D6000)
(77A30000 - 77B25000)
(71110000 - 711D9000)
(6E260000 - 6E266000)
(72BF0000 - 72C75000)
(77990000 - 77A2B000)
(00C70000 - 00C7B000)
(77810000 - 7784D000)
(77080000 - 770A3000)
(10000000 - 10031000)
(6B710000 - 6B72B000)
(77400000 - 77477000)
(773F0000 - 77400000)
(6B6F0000 - 6B704000)
(75490000 - 75494000)
(77BC0000 - 77BCF000)
(75100000 - 7514F000)
(75150000 - 75156000)
(750E0000 - 750F0000)
(74FB0000 - 74FC3000)
(74FA0000 - 74FA8000)
(77930000 - 7795A000)
(77960000 - 77984000)
(74FD0000 - 74FDA000)
(6B640000 - 6B665000)
(6B900000 - 6B917000)
(6C170000 - 6C262000)
(773A0000 - 773B5000)
(6C140000 - 6C149000)
(70200000 - 70277000)
(774F0000 - 77512000)
(703B0000 - 703C7000)
(770F0000 - 772ED000)
(1A400000 - 1A473000)
(777E0000 - 777E7000)
(75950000 - 75956000)
(01300000 - 01362000)
(70420000 - 704A8000)
(74F50000 - 74F6D000)
(74F90000 - 74F97000)
(774A0000 - 774D2000)
(77480000 - 77491000)
(777F0000 - 777FE000)
(75A50000 - 75A55000)
(77BF0000 - 77C4E000)
(77800000 - 7780C000)
(77300000 - 77313000)
(774E0000 - 774E5000)
(01450000 - 01467000)
(77370000 - 7739E000)
(77340000 - 77362000)
(6DEC0000 - 6DF6B000)
(77320000 - 77339000)
(777A0000 - 777A8000)
(777B0000 - 777B5000)
(768D0000 - 768FB000)
(77900000 - 77923000)
(78160000 - 78186000)
(7CA00000 - 7CA23000)
(67400000 - 67427000)
(759C0000 - 759CE000)
(77BD0000 - 77BE1000)
(78280000 - 782B4000)
(76610000 - 7661E000)
(01770000 - 017A3000)
(70C30000 - 70ED1000)
(021A0000 - 02227000)
(75A60000 - 75A88000)
(64680000 - 64698000)
(77530000 - 77560000)
(77520000 - 77529000)
(773C0000 - 773C8000)
(773D0000 - 773E3000)
(75CE0000 - 75CE6000)
(6AE30000 - 6AF1A000)
(65D20000 - 65D68000)
(6D170000 - 6D19C000)
(6D320000 - 6D386000)
(6B5B0000 - 6B5D9000)
(6D3B0000 - 6D3DF000)
(6B7D0000 - 6B80A000)
(07490000 - 07504000)
(07510000 - 07533000)
(07540000 - 07550000)
(780A0000 - 780B2000)
(07660000 - 0767E000)
(766B0000 - 766B9000)
(76F60000 - 76F6F000)
(07C30000 - 07C9E000)
(75A40000 - 75A48000)
(777C0000 - 777DE000)
(75010000 - 75020000)
(09D00000 - 09D4E000)
(75FC0000 - 75FF3000)
(776F0000 - 77730000)
(750F0000 - 750FC000)
(751A0000 - 751B5000)
(75160000 - 75198000)
(742E0000 - 742E5000)
°õ¦æ¤Þ½uÃѧO½X 0x5c0 ªºª¬ºA¶É¦L
eax=00000000 ebx=02c9e740 ecx=70f11768 edx=0006daec esi=01c2c4f0 edi=0006db0c
eip=70d01e3b esp=0006da8c ebp=0006db18 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
¥\¯à: RNIGetCompatibleVersion
70d01e27 8d55e4 lea edx,[ebp+0xe4] ss:00c0b0ea=????????
70d01e2a 8b0b mov ecx,[ebx] ds:02c9e740=70f11768
70d01e2c 52 push edx
70d01e2d 8d55d4 lea edx,[ebp+0xd4] ss:00c0b0ea=????????
70d01e30 52 push edx
70d01e31 6a01 push 0x1
70d01e33 50 push eax
70d01e34 68288ec470 push 0x70c48e28
70d01e39 50 push eax
70d01e3a 53 push ebx
¿ù»~ ->70d01e3b ff5118 call dword ptr [ecx+0x18] ds:71aaed3a=????????
70d01e3e 8945fc mov [ebp+0xfc],eax ss:00c0b0ea=????????
70d01e41 8b06 mov eax,[esi] ds:01c2c4f0=70ccbba0
70d01e43 56 push esi
70d01e44 ff5008 call dword ptr [eax+0x8] ds:00b9d5d2=6f6f6f6f
70d01e47 8d45e4 lea eax,[ebp+0xe4] ss:00c0b0ea=????????
70d01e4a 50 push eax
70d01e4b e8236ff4ff call 70c48d73
70d01e50 33f6 xor esi,esi
70d01e52 8b45f8 mov eax,[ebp+0xf8] ss:00c0b0ea=????????
70d01e55 3bc6 cmp eax,esi
70d01e57 7406 jz RNIGetCompatibleVersion+0x157f1 (70d0a95f)
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0006DB18 70D01CE3 01C772F0 00000113 01BC0350 00020301 MSHTML!RNIGetCompatibleVersion
0006DB38 70C31C9D 01C2C4E0 01C2C515 70C319B4 000401AA MSHTML!RNIGetCompatibleVersion
0006DC70 77DF1D0A 000401AA 00000055 00020301 00000000 MSHTML!<nosymbols>
0006DC90 77DF1BC8 70C31930 000401AA 00000113 00020301 user32!DispatchMessageW
0006DD1C 77DF1CEF 0006DD58 00000000 71111FEA 0006DD58 user32!GetAppCompatFlags2
0006DD58 00000113 00020301 00000000 01D598EB 000002E9 user32!DispatchMessageW
*----> ¦C°ïÅ|¶É¦L <----*
0006da8c 40 e7 c9 02 00 00 00 00 - 28 8e c4 70 00 00 00 00 @.......(..p....
0006da9c 01 00 00 00 ec da 06 00 - fc da 06 00 bc da 06 00 ................
0006daac 00 00 00 00 00 00 00 00 - e0 c4 c2 01 14 c5 c2 01 ................
0006dabc 2c 7f 11 00 88 ed 0f 00 - f8 7e 11 00 90 ed 0f 00 ,........~......
0006dacc 00 7f 11 00 14 c5 c2 01 - 00 00 00 00 14 db 06 00 ................
0006dadc 80 ca c4 70 10 73 c7 01 - 14 73 c7 01 00 00 00 00 ...p.s...s......
0006daec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0006dafc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0006db0c e0 c4 c2 01 00 00 00 00 - 00 00 00 00 38 db 06 00 ............8...
0006db1c e3 1c d0 70 f0 72 c7 01 - 13 01 00 00 50 03 bc 01 ...p.r......P...
0006db2c 01 03 02 00 f0 c4 c2 01 - f0 72 c7 01 70 dc 06 00 .........r..p...
0006db3c 9d 1c c3 70 e0 c4 c2 01 - 15 c5 c2 01 b4 19 c3 70 ...p...........p
0006db4c aa 01 04 00 01 03 02 00 - 58 dd 06 00 60 dd 06 00 ........X...`...
0006db5c 00 00 00 c0 58 9e a5 77 - 00 00 61 6a 00 00 00 00 ....X..w..aj....
0006db6c 54 db 06 00 84 db 06 00 - 78 db 06 00 58 9e a5 77 T.......x...X..w
0006db7c 00 00 f1 70 00 00 00 00 - 6c db 06 00 9c db 06 00 ...p....l.......
0006db8c 90 db 06 00 58 9e a5 77 - 00 00 99 08 00 00 00 00 ....X..w........
0006db9c 84 db 06 00 b4 db 06 00 - a8 db 06 00 58 9e a5 77 ............X..w
0006dbac 00 00 a3 08 00 00 00 00 - 9c db 06 00 2c dc 06 00 ............,...
0006dbbc c0 db 06 00 58 9e a5 77 - 00 00 00 7b 00 00 00 00 ....X..w...{....
°õ¦æ¤Þ½uÃѧO½X 0x708 ªºª¬ºA¶É¦L
eax=00000005 ebx=77f8377b ecx=000003e8 edx=00000000 esi=00000000 edi=00000001
eip=77f83786 esp=013ffacc ebp=013ffb04 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000286
¥\¯à: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,[esp+0x4] ss:01f9d09f=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
013FFB04 74F57EE6 00000230 00000234 00000001 00000004 ntdll!NtWaitForSingleObject
013FFBF0 74FB1DA9 00000001 013FFE84 013FFC7C 013FFD80 msafd!WSPSetSockOpt
013FFC54 702186F8 00000001 013FFE84 013FFC7C 013FFD80 ws2_32!select
013FFFB0 702184BE 77E687DD 000AF208 7FFDE000 00000040 WININET!InternetSetStatusCallback
013FFFEC 00000000 702184B5 000AF208 00000000 4E9F000D WININET!InternetSetStatusCallback
*----> ¦C°ïÅ|¶É¦L <----*
013ffacc 62 bb f5 74 30 02 00 00 - 01 00 00 00 f0 fa 3f 01 b..t0.........?.
013ffadc 84 fe 3f 01 78 fb 3f 01 - 68 fb 3f 01 d2 fb c8 bc ..?.x.?.h.?.....
013ffaec b3 f2 c2 01 c0 b4 b3 ff - ff ff ff ff 50 e9 09 00 ............P...
013ffafc 00 00 00 00 00 00 00 00 - f0 fb 3f 01 e6 7e f5 74 ..........?..~.t
013ffb0c 30 02 00 00 34 02 00 00 - 01 00 00 00 04 00 00 00 0...4...........
013ffb1c 80 fd 3f 01 98 fb 09 00 - 7c fc 3f 01 00 00 00 00 ..?.....|.?.....
013ffb2c 00 00 00 00 80 0f 05 fd - ff ff ff ff 50 e9 09 00 ............P...
013ffb3c 30 02 00 00 00 00 00 00 - e8 fb 3f 01 01 00 00 00 0.........?.....
013ffb4c 00 00 00 00 a0 00 00 00 - 03 01 00 00 00 00 00 00 ................
013ffb5c 00 00 00 00 00 00 00 00 - 00 00 00 00 80 0f 05 fd ................
013ffb6c ff ff ff ff 01 00 00 00 - 00 fb 3f 01 34 02 00 00 ..........?.4...
013ffb7c 19 00 00 00 c0 11 f5 74 - ff ff ff ff c4 fb 3f 01 .......t......?.
013ffb8c 65 12 fb 74 a8 10 00 00 - e8 fb 3f 01 01 00 00 00 e..t......?.....
013ffb9c 00 fc 3f 01 fc fb 3f 01 - 00 00 00 00 c4 fb 3f 01 ..?...?.......?.
013ffbac 50 e9 09 00 33 27 00 00 - 00 00 00 00 68 fb 3f 01 P...3'......h.?.
013ffbbc 2c 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ,...............
013ffbcc a8 10 00 00 e8 fb 3f 01 - 84 fb 3f 01 1c fb 3f 01 ......?...?...?.
013ffbdc 24 fc 3f 01 44 fc 3f 01 - 36 df f5 74 78 30 f5 74 $.?.D.?.6..tx0.t
013ffbec ff ff ff ff 54 fc 3f 01 - a9 1d fb 74 01 00 00 00 ....T.?....t....
013ffbfc 84 fe 3f 01 7c fc 3f 01 - 80 fd 3f 01 90 ff 3f 01 ..?.|.?...?...?.
°õ¦æ¤Þ½uÃѧO½X 0x710 ªºª¬ºA¶É¦L
eax=000000c0 ebx=0000003f ecx=0165ef50 edx=00000000 esi=0165ec00 edi=00000001
eip=77f837b2 esp=0165ebe8 ebp=0165ffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:021fc1bb=0220e370
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0165FFB4 77E687DD 0143FC8C 00530020 00740065 0143FC8C ntdll!NtWaitForMultipleObjects
0165FFEC 00000000 77F81E0B 0143FC8C 00000000 00000380 kernel32!GetModuleFileNameA
*----> ¦C°ïÅ|¶É¦L <----*
0165ebe8 a4 c3 f8 77 10 00 00 00 - 18 ec 65 01 01 00 00 00 ...w......e.....
0165ebf8 01 00 00 00 00 00 00 00 - 68 f3 fc 77 68 f3 fc 77 ........h..wh..w
0165ec08 08 03 00 00 10 07 00 00 - 10 00 00 00 10 00 00 00 ................
0165ec18 0c 03 00 00 38 01 00 00 - 44 04 00 00 00 03 00 00 ....8...D.......
0165ec28 34 04 00 00 68 03 00 00 - 74 03 00 00 84 03 00 00 4...h...t.......
0165ec38 9c 03 00 00 ac 03 00 00 - bc 03 00 00 d0 03 00 00 ................
0165ec48 e8 03 00 00 f8 03 00 00 - 08 04 00 00 1c 04 00 00 ................
0165ec58 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ec68 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ec78 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ec88 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ec98 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165eca8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ecb8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ecc8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ecd8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ece8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ecf8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ed08 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ed18 00 00 00 00 70 a1 0c 00 - b0 fe 11 00 f8 fc 09 00 ....p...........
°õ¦æ¤Þ½uÃѧO½X 0x644 ªºª¬ºA¶É¦L
eax=6b642244 ebx=00000002 ecx=00000000 edx=00000000 esi=77f837a7 edi=00000002
eip=77f837b2 esp=030cff1c ebp=030cff68 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:03c6d4ef=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
030CFF68 77E6A31D 030CFF40 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
030CFFB0 6B64224D 77E687DD 6B64DB48 00000000 00000000 kernel32!WaitForMultipleObjects
030CFFEC 00000000 6B642244 6B64DB48 00000000 00040000 mqutil!CCancelRpc::CancelThread
*----> ¦C°ïÅ|¶É¦L <----*
030cff1c b7 7a e6 77 02 00 00 00 - 40 ff 0c 03 01 00 00 00 .z.w....@.......
030cff2c 00 00 00 00 00 00 00 00 - 00 00 00 00 48 db 64 6b ............H.dk
030cff3c ff ff ff ff 3c 01 00 00 - 40 01 00 00 a4 da 42 80 ....<...@.....B.
030cff4c d4 4b 06 80 80 41 44 81 - 20 40 44 81 85 26 40 80 .K...AD. @D..&@.
030cff5c 70 cc b1 b6 00 00 00 00 - 20 62 44 81 b0 ff 0c 03 p....... bD.....
030cff6c 1d a3 e6 77 40 ff 0c 03 - 01 00 00 00 00 00 00 00 ...w@...........
030cff7c 00 00 00 00 00 00 00 00 - cc 23 64 6b 02 00 00 00 .........#dk....
030cff8c a4 ff 0c 03 00 00 00 00 - ff ff ff ff 00 00 00 00 ................
030cff9c 00 00 00 00 48 db 64 6b - 3c 01 00 00 40 01 00 00 ....H.dk<...@...
030cffac 2c 01 00 00 ec ff 0c 03 - 4d 22 64 6b dd 87 e6 77 ,.......M"dk...w
030cffbc 48 db 64 6b 00 00 00 00 - 00 00 00 00 48 db 64 6b H.dk........H.dk
030cffcc 00 c0 fd 7f 00 00 00 00 - c0 ff 0c 03 00 00 00 00 ................
030cffdc ff ff ff ff 56 18 e8 77 - 88 ae e6 77 00 00 00 00 ....V..w...w....
030cffec 00 00 00 00 00 00 00 00 - 44 22 64 6b 48 db 64 6b ........D"dkH.dk
030cfffc 00 00 00 00 00 00 04 00 - 01 00 00 00 01 00 00 00 ................
030d000c 1c 00 01 00 05 00 00 00 - 00 00 00 00 00 00 00 00 ................
030d001c 00 00 00 00 00 00 00 00 - 5c 00 5c 00 3f 00 5c 00 ........\.\.?.\.
030d002c 70 00 63 00 69 00 23 00 - 76 00 65 00 6e 00 5f 00 p.c.i.#.v.e.n._.
030d003c 38 00 30 00 38 00 36 00 - 26 00 64 00 65 00 76 00 8.0.8.6.&.d.e.v.
030d004c 5f 00 32 00 34 00 63 00 - 35 00 26 00 73 00 75 00 _.2.4.c.5.&.s.u.
°õ¦æ¤Þ½uÃѧO½X 0x694 ªºª¬ºA¶É¦L
eax=77522bda ebx=00000002 ecx=00000045 edx=00000000 esi=77f837a7 edi=00000002
eip=77f837b2 esp=0315ff24 ebp=0315ff70 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:03cfd4f7=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0315FF70 77E6A31D 0315FF48 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
0315FFB4 77E687DD 00000000 7FFDEBF8 00000000 00000000 kernel32!WaitForMultipleObjects
0315FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
°õ¦æ¤Þ½uÃѧO½X 0x1b0 ªºª¬ºA¶É¦L
eax=087330b8 ebx=00000570 ecx=37a0004e edx=00000000 esi=0319ff98 edi=77df7c12
eip=77df1d6b esp=0319ff58 ebp=0319ff78 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: TranslateMessageEx
77df1d48 0f85cad90200 jne CallMsgFilter+0xeb8 (77e1f718)
77df1d4e 33c0 xor eax,eax
77df1d50 c20800 ret 0x8
77df1d53 ff742408 push dword ptr [esp+0x8] ss:03d3d52b=????????
77df1d57 51 push ecx
77df1d58 e861090000 call GetKeyState+0x92 (77df26be)
77df1d5d c20800 ret 0x8
77df1d60 b89a110000 mov eax,0x119a
77df1d65 8d542404 lea edx,[esp+0x4] ss:03d3d52b=????????
77df1d69 cd2e int 2e
77df1d6b c21000 ret 0x10
77df1d6e 8b442404 mov eax,[esp+0x4] ss:03d3d52b=????????
77df1d72 cd2b int 2b
77df1d74 e939990300 jmp SetClassLongW+0x654 (77e2b6b2)
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0319FF78 77535C36 0319FF98 00000000 00000000 00000000 user32!TranslateMessageEx
0319FFB4 77E687DD 00000570 77555428 00066884 00000570 winmm!midiOutGetNumDevs
0319FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
°õ¦æ¤Þ½uÃѧO½X 0x67c ªºª¬ºA¶É¦L
eax=00000002 ebx=00000000 ecx=032bf274 edx=00000000 esi=039aff94 edi=77df7c12
eip=77df1d6b esp=039aff50 ebp=039aff70 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: TranslateMessageEx
77df1d48 0f85cad90200 jne CallMsgFilter+0xeb8 (77e1f718)
77df1d4e 33c0 xor eax,eax
77df1d50 c20800 ret 0x8
77df1d53 ff742408 push dword ptr [esp+0x8] ss:0454d523=????????
77df1d57 51 push ecx
77df1d58 e861090000 call GetKeyState+0x92 (77df26be)
77df1d5d c20800 ret 0x8
77df1d60 b89a110000 mov eax,0x119a
77df1d65 8d542404 lea edx,[esp+0x4] ss:0454d523=????????
77df1d69 cd2e int 2e
77df1d6b c21000 ret 0x10
77df1d6e 8b442404 mov eax,[esp+0x4] ss:0454d523=????????
77df1d72 cd2b int 2b
77df1d74 e939990300 jmp SetClassLongW+0x654 (77e2b6b2)
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
039AFF70 6AE5E75C 039AFF94 00000000 00000000 00000000 user32!TranslateMessageEx
039AFFB4 77E687DD 000004AC 00068A03 000688C4 000004AC msjava!DllGetClassObject
039AFFEC 00000000 6AE5E6D6 000004AC 00000000 00000000 kernel32!GetModuleFileNameA
*----> ¦C°ïÅ|¶É¦L <----*
039aff50 4e 7c df 77 94 ff 9a 03 - 00 00 00 00 00 00 00 00 N|.w............
039aff60 00 00 00 00 00 00 00 00 - a0 54 26 03 12 7c df 77 .........T&..|.w
039aff70 b4 ff 9a 03 5c e7 e5 6a - 94 ff 9a 03 00 00 00 00 ....\..j........
039aff80 00 00 00 00 00 00 00 00 - 03 8a 06 00 c4 88 06 00 ................
039aff90 ac 04 00 00 de 01 04 00 - 39 04 00 00 00 00 00 00 ........9.......
039affa0 00 00 00 00 69 77 d5 01 - f5 03 00 00 07 00 00 00 ....iw..........
039affb0 a0 54 26 03 ec ff 9a 03 - dd 87 e6 77 ac 04 00 00 .T&........w....
039affc0 03 8a 06 00 c4 88 06 00 - ac 04 00 00 00 30 fd 7f .............0..
039affd0 00 00 07 00 c0 ff 9a 03 - 00 00 07 00 ff ff ff ff ................
039affe0 56 18 e8 77 88 ae e6 77 - 00 00 00 00 00 00 00 00 V..w...w........
039afff0 00 00 00 00 d6 e6 e5 6a - ac 04 00 00 00 00 00 00 .......j........
039b0000 00 00 00 00 b9 00 00 00 - 00 00 00 00 00 00 00 00 ................
039b0010 00 00 00 00 62 00 56 03 - 68 18 96 03 00 00 00 00 ....b.V.h.......
039b0020 08 00 bb 03 28 01 bb 03 - 48 00 00 00 00 00 00 00 ....(...H.......
039b0030 0c 00 00 00 00 00 00 00 - 00 00 00 00 0c 00 00 00 ................
039b0040 00 00 00 00 00 00 00 00 - e0 00 9b 03 10 56 28 03 .............V(.
039b0050 48 00 00 00 2c 00 00 00 - 21 00 38 c2 00 04 00 00 H...,...!.8.....
039b0060 c0 00 9b 03 00 00 00 00 - a8 4a 26 03 00 00 00 00 .........J&.....
039b0070 b8 6f e3 6a 00 00 00 00 - 00 00 00 00 01 00 00 00 .o.j............
039b0080 60 56 28 03 60 56 28 03 - ff ff ff ff 00 00 00 00 `V(.`V(.........
°õ¦æ¤Þ½uÃѧO½X 0x468 ªºª¬ºA¶É¦L
eax=063eff08 ebx=00000000 ecx=00000001 edx=00000000 esi=77f8377b edi=000005d8
eip=77f83786 esp=063eff44 ebp=063eff68 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,[esp+0x4] ss:06f8d517=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
063EFF68 77E67837 000005D8 FFFFFFFF 00000000 6AE5FC30 ntdll!NtWaitForSingleObject
77E67828 74FF0C24 7EE80C24 C2FFFFFF 74FF0008 15FF0424 kernel32!WaitForSingleObject
74FF006A 00000000 00000000 00000000 00000000 00000000 <nosymbols>
*----> ¦C°ïÅ|¶É¦L <----*
063eff44 0f 78 e6 77 d8 05 00 00 - 00 00 00 00 00 00 00 00 .x.w............
063eff54 00 00 00 00 98 65 28 03 - 47 77 e6 77 d8 05 00 00 .....e(.Gw.w....
063eff64 d8 05 00 00 28 78 e6 77 - 37 78 e6 77 d8 05 00 00 ....(x.w7x.w....
063eff74 ff ff ff ff 00 00 00 00 - 30 fc e5 6a d8 05 00 00 ........0..j....
063eff84 ff ff ff ff 00 00 00 00 - ec ff 3e 06 98 65 28 03 ..........>..e(.
063eff94 98 65 28 03 f0 fb e5 6a - 98 65 28 03 7c 89 06 00 .e(....j.e(.|...
063effa4 48 4d 9b 03 00 00 00 00 - 00 00 00 00 00 00 00 00 HM..............
063effb4 a4 67 f8 77 dd 87 e6 77 - 00 00 00 00 7c 89 06 00 .g.w...w....|...
063effc4 48 4d 9b 03 00 00 00 00 - 00 f0 f9 7f b6 02 56 03 HM............V.
063effd4 c0 ff 3e 06 b6 02 56 03 - ff ff ff ff 56 18 e8 77 ..>...V.....V..w
063effe4 88 ae e6 77 00 00 00 00 - 00 00 00 00 00 00 00 00 ...w............
063efff4 a6 fb e5 6a 00 00 00 00 - 00 00 00 00 00 00 00 00 ...j............
063f0004 29 00 00 00 00 00 00 00 - 40 82 29 03 2c 00 3f 06 ).......@.).,.?.
063f0014 3c 6c 42 06 95 05 00 00 - 95 05 00 00 00 00 3f 06 <lB...........?.
063f0024 08 00 8f 06 95 05 00 00 - 29 00 00 00 50 40 90 06 ........)...P@..
063f0034 00 00 00 00 68 55 9b 03 - ff 74 24 04 ff 15 50 7d ....hU...t$...P}
063f0044 29 03 c2 04 00 00 00 00 - 00 00 00 00 00 00 00 00 )...............
063f0054 29 00 00 00 68 40 90 06 - 00 00 00 00 a0 56 9b 03 )...h@.......V..
063f0064 ff 74 24 04 ff 15 f0 7c - 29 03 c2 04 00 00 00 00 .t$....|).......
063f0074 00 00 00 00 00 00 00 00 - 29 00 00 00 80 40 90 06 ........)....@..
°õ¦æ¤Þ½uÃѧO½X 0x258 ªºª¬ºA¶É¦L
eax=04405910 ebx=00000001 ecx=0000002e edx=00000000 esi=77f837a7 edi=00000001
eip=77f837b2 esp=0718fd10 ebp=0718fd5c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:07d2d2e3=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0718FD5C 6AE316C0 0718FD34 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
00000000 00000000 00000000 00000000 00000000 00000000 msjava!GCEnable
°õ¦æ¤Þ½uÃѧO½X 0x780 ªºª¬ºA¶É¦L
eax=00000000 ebx=032aec90 ecx=00000030 edx=00000000 esi=071cfda4 edi=00000000
eip=77df1d6b esp=071cfd64 ebp=071cfd84 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: TranslateMessageEx
77df1d48 0f85cad90200 jne CallMsgFilter+0xeb8 (77e1f718)
77df1d4e 33c0 xor eax,eax
77df1d50 c20800 ret 0x8
77df1d53 ff742408 push dword ptr [esp+0x8] ss:07d6d337=????????
77df1d57 51 push ecx
77df1d58 e861090000 call GetKeyState+0x92 (77df26be)
77df1d5d c20800 ret 0x8
77df1d60 b89a110000 mov eax,0x119a
77df1d65 8d542404 lea edx,[esp+0x4] ss:07d6d337=????????
77df1d69 cd2e int 2e
77df1d6b c21000 ret 0x10
77df1d6e 8b442404 mov eax,[esp+0x4] ss:07d6d337=????????
77df1d72 cd2b int 2b
77df1d74 e939990300 jmp SetClassLongW+0x654 (77e2b6b2)
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
071CFD84 6B5B6A5E 071CFDA4 00000000 00000000 00000000 user32!TranslateMessageEx
071CFDC0 6B5B6987 00000002 032AE890 032AEB64 80004005 msawt!com_ms_awt_WToolkit_createNativeToolkit
071CFDD8 6AE4E64C 000AF480 032AEC90 071CFEA4 6AE4E50F msawt!com_ms_awt_WToolkit_createNativeToolkit
071CFDE8 6AE4E50F 6B5B6942 071CFE04 00000002 000AF480 msjava!convert_Java_Object_to_IUnknown
071CFEA4 03461525 071CFEC8 00000001 00000000 032AE894 msjava!convert_Java_Object_to_IUnknown
071CFEC8 FFFFFFFF 032AEB64 063FE1FF 04404C48 04404C60 <nosymbols>
00000003 00000000 00000000 00000000 00000000 00000000 <nosymbols>
°õ¦æ¤Þ½uÃѧO½X 0x794 ªºª¬ºA¶É¦L
eax=02267d2c ebx=00000001 ecx=00000000 edx=00000000 esi=77f837a7 edi=00000001
eip=77f837b2 esp=0748ff2c ebp=0748ff78 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:0802d4ff=00001000
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0748FF78 77E6A31D 0748FF50 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
77E6783A 140415FF C08577E6 0A928C0F 016A0002 0004C258 kernel32!WaitForMultipleObjects
042474FF 00000000 00000000 00000000 00000000 00000000 <nosymbols>
*----> ¦C°ïÅ|¶É¦L <----*
0748ff2c b7 7a e6 77 01 00 00 00 - 50 ff 48 07 01 00 00 00 .z.w....P.H.....
0748ff3c 00 00 00 00 00 00 00 00 - 01 00 00 00 01 00 00 00 ................
0748ff4c 98 70 72 6b 30 07 00 00 - 9c ff 48 07 5c 11 00 78 .prk0.....H.\..x
0748ff5c 00 00 74 00 00 00 00 00 - a0 55 38 02 01 00 00 00 ..t......U8.....
0748ff6c a0 55 38 02 98 70 72 6b - 00 00 00 00 3a 78 e6 77 .U8..prk....:x.w
0748ff7c 1d a3 e6 77 50 ff 48 07 - 01 00 00 00 00 00 00 00 ...wP.H.........
0748ff8c 00 00 00 00 00 00 00 00 - b8 34 71 6b 01 00 00 00 .........4qk....
0748ff9c b0 3c 23 02 00 00 00 00 - ff ff ff ff 50 4b 06 00 .<#.........PK..
0748ffac 00 00 00 00 ec ff 48 07 - 00 00 00 00 dd 87 e6 77 ......H........w
0748ffbc 00 00 00 00 50 4b 06 00 - 00 00 00 00 00 00 00 00 ....PK..........
0748ffcc 00 70 f9 7f 90 f1 fc 77 - c0 ff 48 07 90 f1 fc 77 .p.....w..H....w
0748ffdc ff ff ff ff 56 18 e8 77 - 88 ae e6 77 00 00 00 00 ....V..w...w....
0748ffec 00 00 00 00 00 00 00 00 - 45 34 71 6b 00 00 00 00 ........E4qk....
0748fffc 00 00 00 00 4d 5a 90 00 - 03 00 00 00 04 00 00 00 ....MZ..........
0749000c ff ff 00 00 b8 00 00 00 - 00 00 00 00 40 00 00 00 ............@...
0749001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0749002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0749003c 38 01 00 00 0e 1f ba 0e - 00 b4 09 cd 21 b8 01 4c 8...........!..L
0749004c cd 21 54 68 69 73 20 70 - 72 6f 67 72 61 6d 20 63 .!This program c
0749005c 61 6e 6e 6f 74 20 62 65 - 20 72 75 6e 20 69 6e 20 annot be run in
°õ¦æ¤Þ½uÃѧO½X 0x8d4 ªºª¬ºA¶É¦L
eax=02a71280 ebx=00040002 ecx=00000006 edx=00000000 esi=0007e990 edi=00000100
eip=77f83bb8 esp=031dfe28 ebp=031dff74 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
¥\¯à: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:03d7d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
031DFF74 787020D9 78702528 0007E990 0205FA94 00000000 ntdll!NtReplyWaitReceivePortEx
031DFFA8 787024DA 07B39998 031DFFEC 77E687DD 000A27B8 rpcrt4!NdrConformantArrayMemorySize
031DFFB4 77E687DD 000A27B8 0205FA94 00000000 000A27B8 rpcrt4!NdrConformantArrayMemorySize
031DFFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
°õ¦æ¤Þ½uÃѧO½X 0x7dc ªºª¬ºA¶É¦L
eax=07ab5608 ebx=0e3dff74 ecx=00000000 edx=00000000 esi=77f8377b edi=000009e8
eip=77f83786 esp=0e3dff58 ebp=0e3dff7c iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000293
¥\¯à: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,[esp+0x4] ss:0ef7d52b=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0E3DFF7C 77E67837 000009E8 000927C0 00000000 70CCC94F ntdll!NtWaitForSingleObject
77F8316D 4AFFC033 E0850F08 89000005 FF900C42 8D0F044A kernel32!WaitForSingleObject
0424548B 00000000 00000000 00000000 00000000 00000000 <nosymbols>
°õ¦æ¤Þ½uÃѧO½X 0x7f4 ªºª¬ºA¶É¦L
eax=000000ff ebx=0e49ff74 ecx=07af4d62 edx=00000000 esi=77f8377b edi=00000cb4
eip=77f83786 esp=0e49ff58 ebp=0e49ff7c iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000293
¥\¯à: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,[esp+0x4] ss:0f03d52b=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0E49FF7C 77E67837 00000CB4 000927C0 00000000 70CCC94F ntdll!NtWaitForSingleObject
77F8316D 4AFFC033 E0850F08 89000005 FF900C42 8D0F044A kernel32!WaitForSingleObject
0424548B 00000000 00000000 00000000 00000000 00000000 <nosymbols>
°õ¦æ¤Þ½uÃѧO½X 0x9a8 ªºª¬ºA¶É¦L
eax=74f54766 ebx=021993b0 ecx=70201e0a edx=00000000 esi=74f693a0 edi=00000000
eip=77f837dc esp=0e88ff84 ebp=0e88ffb4 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
¥\¯à: ZwRemoveIoCompletion
77f837d1 b8a8000000 mov eax,0xa8
77f837d6 8d542404 lea edx,[esp+0x4] ss:0f42d557=????????
77f837da cd2e int 2e
77f837dc c21400 ret 0x14
77f837df 53 push ebx
77f837e0 f7e1 mul ecx
77f837e2 8bd8 mov ebx,eax
77f837e4 8b442408 mov eax,[esp+0x8] ss:0f42d557=????????
77f837e8 f7642414 mul dword ptr [esp+0x14] ss:0f42d557=????????
77f837ec 03d8 add ebx,eax
77f837ee 8b442408 mov eax,[esp+0x8] ss:0f42d557=????????
77f837f2 f7e1 mul ecx
77f837f4 03d3 add edx,ebx
77f837f6 5b pop ebx
77f837f7 c21000 ret 0x10
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0E88FFB4 77E687DD 74F55F4B 7FF9B000 00000000 021993B0 ntdll!ZwRemoveIoCompletion
0E88FFEC 00000000 74F54766 021993B0 00000000 00000000 kernel32!GetModuleFileNameA
*----> ¦C°ïÅ|¶É¦L <----*
0e88ff84 b8 47 f5 74 c0 02 00 00 - bc ff 88 0e b0 ff 88 0e .G.t............
0e88ff94 a4 ff 88 0e 28 2c f5 74 - 00 b0 f9 7f 00 00 00 00 ....(,.t........
0e88ffa4 00 00 00 00 00 00 00 00 - 00 00 f5 74 40 00 96 0a ...........t@...
0e88ffb4 ec ff 88 0e dd 87 e6 77 - 4b 5f f5 74 00 b0 f9 7f .......wK_.t....
0e88ffc4 00 00 00 00 b0 93 19 02 - 00 40 fd 7f 0a 1e 20 70 .........@.... p
0e88ffd4 c0 ff 88 0e 0a 1e 20 70 - ff ff ff ff 56 18 e8 77 ...... p....V..w
0e88ffe4 88 ae e6 77 00 00 00 00 - 00 00 00 00 00 00 00 00 ...w............
0e88fff4 66 47 f5 74 b0 93 19 02 - 00 00 00 00 00 00 00 00 fG.t............
0e890004 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0e890014 00 00 00 00 00 00 00 00 - 00 00 04 00 00 40 00 00 .............@..
0e890024 80 00 00 00 6b 00 00 00 - 00 00 00 00 00 00 00 00 ....k...........
0e890034 00 00 00 00 00 e0 06 00 - 00 00 00 00 00 00 00 00 ................
0e890044 00 00 00 00 04 00 00 00 - 06 00 00 00 43 35 59 42 ............C5YB
0e890054 57 54 4d 4a 07 00 00 00 - 30 31 36 4a 47 48 45 33 WTMJ....016JGHE3
0e890064 06 00 00 00 38 54 32 5a - 34 58 32 52 06 00 00 00 ....8T2Z4X2R....
0e890074 43 48 59 42 47 31 4d 37 - 00 00 00 00 00 00 00 00 CHYBG1M7........
0e890084 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0e890094 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0e8900a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0e8900b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
°õ¦æ¤Þ½uÃѧO½X 0x834 ªºª¬ºA¶É¦L
eax=00000000 ebx=00000002 ecx=0e90fd78 edx=00000000 esi=77f837a7 edi=00000002
eip=77f837b2 esp=0e90fe5c ebp=0e90fea8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:0f4ad42f=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0E90FEA8 77DF2A00 0E90FE80 00000001 00000000 0E90FEA0 ntdll!NtWaitForMultipleObjects
0E90FF04 77DF2A77 0E90FED0 70C16078 0000E9B4 00000041 user32!MsgWaitForMultipleObjectsEx
0E90FF20 70BD18E4 00000001 70C16078 00000000 0000E9B4 user32!MsgWaitForMultipleObjects
0E90FF74 70BD4461 0E90FFA0 0E90FFA4 0E90FFA8 0E90FF9C SHLWAPI!Ordinal117
0E90FFAC 70BD43C7 77F8B1CE 77E687DD 00000000 77FCF170 SHLWAPI!PathRemoveFileSpecW
0E90FFEC 00000000 00000000 00000000 00000000 00000000 SHLWAPI!PathRemoveFileSpecW
°õ¦æ¤Þ½uÃѧO½X 0x238 ªºª¬ºA¶É¦L
eax=80090318 ebx=00000002 ecx=00001a61 edx=00000000 esi=77f837a7 edi=00000002
eip=77f837b2 esp=0ea0fe5c ebp=0ea0fea8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:0f5ad42f=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0EA0FEA8 77DF2A00 0EA0FE80 00000001 00000000 0EA0FEA0 ntdll!NtWaitForMultipleObjects
0EA0FF04 77DF2A77 0EA0FED0 70C16078 0000EA60 00000041 user32!MsgWaitForMultipleObjectsEx
0EA0FF20 70BD18E4 00000001 70C16078 00000000 0000EA60 user32!MsgWaitForMultipleObjects
0EA0FF74 70BD4461 0EA0FFA0 0EA0FFA4 0EA0FFA8 0EA0FF9C SHLWAPI!Ordinal117
0EA0FFAC 70BD43C7 00066C94 77E687DD 00000000 00000001 SHLWAPI!PathRemoveFileSpecW
0EA0FFEC 00000000 00000000 00000000 00000000 00000000 SHLWAPI!PathRemoveFileSpecW
°õ¦æ¤Þ½uÃѧO½X 0x64c ªºª¬ºA¶É¦L
eax=77a7d4f1 ebx=00000102 ecx=00310037 edx=00000000 esi=77f8318c edi=00e4ff74
eip=77f83197 esp=00e4ff60 ebp=00e4ff7c iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
¥\¯à: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,[esp+0x4] ss:019ed533=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00E4FF7C 77E675EB 0000EA60 00000000 77A64D37 0000EA60 ntdll!NtDelayExecution
00007530 00000000 00000000 00000000 00000000 00000000 kernel32!Sleep
°õ¦æ¤Þ½uÃѧO½X 0x7e4 ªºª¬ºA¶É¦L
eax=02abb478 ebx=00040002 ecx=00000006 edx=00000000 esi=0007e990 edi=00000100
eip=77f83bb8 esp=02b1fe28 ebp=02b1ff74 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
¥\¯à: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:036bd3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
02B1FF74 787020D9 78702528 0007E990 021630F0 031DFAEC ntdll!NtReplyWaitReceivePortEx
02B1FFA8 787024DA 07AD3578 02B1FFEC 77E687DD 02182338 rpcrt4!NdrConformantArrayMemorySize
02B1FFB4 77E687DD 02182338 021630F0 031DFAEC 02182338 rpcrt4!NdrConformantArrayMemorySize
02B1FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
executing our application, sometime if we quit IE by
pressing the x at the upper right corner. There were an
crash message shown in the windows. Here is the Dr Watson
dump. Would anybody help to tell me what have happened?
Thanks.
By the way, we are using Chinese Win2000
µo¥ÍÀ³¥Îµ{¦¡¨Ò¥~:
À³¥Îµ{¦¡: iexplore.exe (pid=304)
µo¥Í®É¶¡: 2003/3/25 @ 17:48:55.858
¨Ò¥~½s¸¹: c0000005 (¦s¨ú¹H³W)
*----> ¨t ²Î ¸ê °T <----*
¹q¸£¦WºÙ: TM
¨Ï¥ÎªÌ¦WºÙ: 2901
³B²z¾¹¦WºÙ: 1
³B²z¾¹Ãþ«¬: x86 Family 15 Model 2 Stepping 4
Windows 2000 ª©¥»: 5.0
¥Ø«eªºª©¥»: 2195
Service Pack: 3
¥Ø«eªºÃþ«¬: Uniprocessor Free
µn°Oªº¤½¥q:
µn°Oªº¾Ö¦³¤H:
*----> ¤u §@ ²M ³æ <----*
0 Idle.exe
8 System.exe
144 SMSS.exe
168 CSRSS.exe
188 WINLOGON.exe
216 SERVICES.exe
228 LSASS.exe
404 svchost.exe
444 spoolsv.exe
472 trcboot.exe
504 PCS_AGNT.exe
604 msdtc.exe
684 dklog.exe
704 svchost.exe
724 ldlcserv.exe
748 NMSSvc.exe
836 NTFSVC.exe
852 ntrtscan.exe
872 regsvc.exe
904 scardsvr.exe
936 mstask.exe
956 tmlisten.exe
1000 WinMgmt.exe
1100 wrmserv.exe
1124 svchost.exe
1148 dkcktkn.exe
1208 mqsvc.exe
1572 Explorer.exe
1720 igfxtray.exe
1748 hkcmd.exe
1760 DkAutoReg.exe
1780 Winampa.exe
1788 internat.exe
304 iexplore.exe
780 babylon.exe
1876 NLNOTES.exe
1480 nhldaemn.exe
1116 svchost.exe
964 IEXPLORE.exe
2144 winamp.exe
1980 pcsws.exe
2320 PCSCM.exe
2368 pcsws.exe
2432 drwtsn32.exe
0 _Total.exe
(00400000 - 00412000)
(77F80000 - 77FFB000)
(77E60000 - 77F36000)
(77DF0000 - 77E55000)
(77F40000 - 77F7C000)
(70BD0000 - 70C1C000)
(77D90000 - 77DED000)
(786F0000 - 78761000)
(75E00000 - 75E1A000)
(71500000 - 7161B000)
(78000000 - 78046000)
(71700000 - 7178A000)
(78F90000 - 791D6000)
(77A30000 - 77B25000)
(71110000 - 711D9000)
(6E260000 - 6E266000)
(72BF0000 - 72C75000)
(77990000 - 77A2B000)
(00C70000 - 00C7B000)
(77810000 - 7784D000)
(77080000 - 770A3000)
(10000000 - 10031000)
(6B710000 - 6B72B000)
(77400000 - 77477000)
(773F0000 - 77400000)
(6B6F0000 - 6B704000)
(75490000 - 75494000)
(77BC0000 - 77BCF000)
(75100000 - 7514F000)
(75150000 - 75156000)
(750E0000 - 750F0000)
(74FB0000 - 74FC3000)
(74FA0000 - 74FA8000)
(77930000 - 7795A000)
(77960000 - 77984000)
(74FD0000 - 74FDA000)
(6B640000 - 6B665000)
(6B900000 - 6B917000)
(6C170000 - 6C262000)
(773A0000 - 773B5000)
(6C140000 - 6C149000)
(70200000 - 70277000)
(774F0000 - 77512000)
(703B0000 - 703C7000)
(770F0000 - 772ED000)
(1A400000 - 1A473000)
(777E0000 - 777E7000)
(75950000 - 75956000)
(01300000 - 01362000)
(70420000 - 704A8000)
(74F50000 - 74F6D000)
(74F90000 - 74F97000)
(774A0000 - 774D2000)
(77480000 - 77491000)
(777F0000 - 777FE000)
(75A50000 - 75A55000)
(77BF0000 - 77C4E000)
(77800000 - 7780C000)
(77300000 - 77313000)
(774E0000 - 774E5000)
(01450000 - 01467000)
(77370000 - 7739E000)
(77340000 - 77362000)
(6DEC0000 - 6DF6B000)
(77320000 - 77339000)
(777A0000 - 777A8000)
(777B0000 - 777B5000)
(768D0000 - 768FB000)
(77900000 - 77923000)
(78160000 - 78186000)
(7CA00000 - 7CA23000)
(67400000 - 67427000)
(759C0000 - 759CE000)
(77BD0000 - 77BE1000)
(78280000 - 782B4000)
(76610000 - 7661E000)
(01770000 - 017A3000)
(70C30000 - 70ED1000)
(021A0000 - 02227000)
(75A60000 - 75A88000)
(64680000 - 64698000)
(77530000 - 77560000)
(77520000 - 77529000)
(773C0000 - 773C8000)
(773D0000 - 773E3000)
(75CE0000 - 75CE6000)
(6AE30000 - 6AF1A000)
(65D20000 - 65D68000)
(6D170000 - 6D19C000)
(6D320000 - 6D386000)
(6B5B0000 - 6B5D9000)
(6D3B0000 - 6D3DF000)
(6B7D0000 - 6B80A000)
(07490000 - 07504000)
(07510000 - 07533000)
(07540000 - 07550000)
(780A0000 - 780B2000)
(07660000 - 0767E000)
(766B0000 - 766B9000)
(76F60000 - 76F6F000)
(07C30000 - 07C9E000)
(75A40000 - 75A48000)
(777C0000 - 777DE000)
(75010000 - 75020000)
(09D00000 - 09D4E000)
(75FC0000 - 75FF3000)
(776F0000 - 77730000)
(750F0000 - 750FC000)
(751A0000 - 751B5000)
(75160000 - 75198000)
(742E0000 - 742E5000)
°õ¦æ¤Þ½uÃѧO½X 0x5c0 ªºª¬ºA¶É¦L
eax=00000000 ebx=02c9e740 ecx=70f11768 edx=0006daec esi=01c2c4f0 edi=0006db0c
eip=70d01e3b esp=0006da8c ebp=0006db18 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
¥\¯à: RNIGetCompatibleVersion
70d01e27 8d55e4 lea edx,[ebp+0xe4] ss:00c0b0ea=????????
70d01e2a 8b0b mov ecx,[ebx] ds:02c9e740=70f11768
70d01e2c 52 push edx
70d01e2d 8d55d4 lea edx,[ebp+0xd4] ss:00c0b0ea=????????
70d01e30 52 push edx
70d01e31 6a01 push 0x1
70d01e33 50 push eax
70d01e34 68288ec470 push 0x70c48e28
70d01e39 50 push eax
70d01e3a 53 push ebx
¿ù»~ ->70d01e3b ff5118 call dword ptr [ecx+0x18] ds:71aaed3a=????????
70d01e3e 8945fc mov [ebp+0xfc],eax ss:00c0b0ea=????????
70d01e41 8b06 mov eax,[esi] ds:01c2c4f0=70ccbba0
70d01e43 56 push esi
70d01e44 ff5008 call dword ptr [eax+0x8] ds:00b9d5d2=6f6f6f6f
70d01e47 8d45e4 lea eax,[ebp+0xe4] ss:00c0b0ea=????????
70d01e4a 50 push eax
70d01e4b e8236ff4ff call 70c48d73
70d01e50 33f6 xor esi,esi
70d01e52 8b45f8 mov eax,[ebp+0xf8] ss:00c0b0ea=????????
70d01e55 3bc6 cmp eax,esi
70d01e57 7406 jz RNIGetCompatibleVersion+0x157f1 (70d0a95f)
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0006DB18 70D01CE3 01C772F0 00000113 01BC0350 00020301 MSHTML!RNIGetCompatibleVersion
0006DB38 70C31C9D 01C2C4E0 01C2C515 70C319B4 000401AA MSHTML!RNIGetCompatibleVersion
0006DC70 77DF1D0A 000401AA 00000055 00020301 00000000 MSHTML!<nosymbols>
0006DC90 77DF1BC8 70C31930 000401AA 00000113 00020301 user32!DispatchMessageW
0006DD1C 77DF1CEF 0006DD58 00000000 71111FEA 0006DD58 user32!GetAppCompatFlags2
0006DD58 00000113 00020301 00000000 01D598EB 000002E9 user32!DispatchMessageW
*----> ¦C°ïÅ|¶É¦L <----*
0006da8c 40 e7 c9 02 00 00 00 00 - 28 8e c4 70 00 00 00 00 @.......(..p....
0006da9c 01 00 00 00 ec da 06 00 - fc da 06 00 bc da 06 00 ................
0006daac 00 00 00 00 00 00 00 00 - e0 c4 c2 01 14 c5 c2 01 ................
0006dabc 2c 7f 11 00 88 ed 0f 00 - f8 7e 11 00 90 ed 0f 00 ,........~......
0006dacc 00 7f 11 00 14 c5 c2 01 - 00 00 00 00 14 db 06 00 ................
0006dadc 80 ca c4 70 10 73 c7 01 - 14 73 c7 01 00 00 00 00 ...p.s...s......
0006daec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0006dafc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0006db0c e0 c4 c2 01 00 00 00 00 - 00 00 00 00 38 db 06 00 ............8...
0006db1c e3 1c d0 70 f0 72 c7 01 - 13 01 00 00 50 03 bc 01 ...p.r......P...
0006db2c 01 03 02 00 f0 c4 c2 01 - f0 72 c7 01 70 dc 06 00 .........r..p...
0006db3c 9d 1c c3 70 e0 c4 c2 01 - 15 c5 c2 01 b4 19 c3 70 ...p...........p
0006db4c aa 01 04 00 01 03 02 00 - 58 dd 06 00 60 dd 06 00 ........X...`...
0006db5c 00 00 00 c0 58 9e a5 77 - 00 00 61 6a 00 00 00 00 ....X..w..aj....
0006db6c 54 db 06 00 84 db 06 00 - 78 db 06 00 58 9e a5 77 T.......x...X..w
0006db7c 00 00 f1 70 00 00 00 00 - 6c db 06 00 9c db 06 00 ...p....l.......
0006db8c 90 db 06 00 58 9e a5 77 - 00 00 99 08 00 00 00 00 ....X..w........
0006db9c 84 db 06 00 b4 db 06 00 - a8 db 06 00 58 9e a5 77 ............X..w
0006dbac 00 00 a3 08 00 00 00 00 - 9c db 06 00 2c dc 06 00 ............,...
0006dbbc c0 db 06 00 58 9e a5 77 - 00 00 00 7b 00 00 00 00 ....X..w...{....
°õ¦æ¤Þ½uÃѧO½X 0x708 ªºª¬ºA¶É¦L
eax=00000005 ebx=77f8377b ecx=000003e8 edx=00000000 esi=00000000 edi=00000001
eip=77f83786 esp=013ffacc ebp=013ffb04 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000286
¥\¯à: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,[esp+0x4] ss:01f9d09f=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
013FFB04 74F57EE6 00000230 00000234 00000001 00000004 ntdll!NtWaitForSingleObject
013FFBF0 74FB1DA9 00000001 013FFE84 013FFC7C 013FFD80 msafd!WSPSetSockOpt
013FFC54 702186F8 00000001 013FFE84 013FFC7C 013FFD80 ws2_32!select
013FFFB0 702184BE 77E687DD 000AF208 7FFDE000 00000040 WININET!InternetSetStatusCallback
013FFFEC 00000000 702184B5 000AF208 00000000 4E9F000D WININET!InternetSetStatusCallback
*----> ¦C°ïÅ|¶É¦L <----*
013ffacc 62 bb f5 74 30 02 00 00 - 01 00 00 00 f0 fa 3f 01 b..t0.........?.
013ffadc 84 fe 3f 01 78 fb 3f 01 - 68 fb 3f 01 d2 fb c8 bc ..?.x.?.h.?.....
013ffaec b3 f2 c2 01 c0 b4 b3 ff - ff ff ff ff 50 e9 09 00 ............P...
013ffafc 00 00 00 00 00 00 00 00 - f0 fb 3f 01 e6 7e f5 74 ..........?..~.t
013ffb0c 30 02 00 00 34 02 00 00 - 01 00 00 00 04 00 00 00 0...4...........
013ffb1c 80 fd 3f 01 98 fb 09 00 - 7c fc 3f 01 00 00 00 00 ..?.....|.?.....
013ffb2c 00 00 00 00 80 0f 05 fd - ff ff ff ff 50 e9 09 00 ............P...
013ffb3c 30 02 00 00 00 00 00 00 - e8 fb 3f 01 01 00 00 00 0.........?.....
013ffb4c 00 00 00 00 a0 00 00 00 - 03 01 00 00 00 00 00 00 ................
013ffb5c 00 00 00 00 00 00 00 00 - 00 00 00 00 80 0f 05 fd ................
013ffb6c ff ff ff ff 01 00 00 00 - 00 fb 3f 01 34 02 00 00 ..........?.4...
013ffb7c 19 00 00 00 c0 11 f5 74 - ff ff ff ff c4 fb 3f 01 .......t......?.
013ffb8c 65 12 fb 74 a8 10 00 00 - e8 fb 3f 01 01 00 00 00 e..t......?.....
013ffb9c 00 fc 3f 01 fc fb 3f 01 - 00 00 00 00 c4 fb 3f 01 ..?...?.......?.
013ffbac 50 e9 09 00 33 27 00 00 - 00 00 00 00 68 fb 3f 01 P...3'......h.?.
013ffbbc 2c 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ,...............
013ffbcc a8 10 00 00 e8 fb 3f 01 - 84 fb 3f 01 1c fb 3f 01 ......?...?...?.
013ffbdc 24 fc 3f 01 44 fc 3f 01 - 36 df f5 74 78 30 f5 74 $.?.D.?.6..tx0.t
013ffbec ff ff ff ff 54 fc 3f 01 - a9 1d fb 74 01 00 00 00 ....T.?....t....
013ffbfc 84 fe 3f 01 7c fc 3f 01 - 80 fd 3f 01 90 ff 3f 01 ..?.|.?...?...?.
°õ¦æ¤Þ½uÃѧO½X 0x710 ªºª¬ºA¶É¦L
eax=000000c0 ebx=0000003f ecx=0165ef50 edx=00000000 esi=0165ec00 edi=00000001
eip=77f837b2 esp=0165ebe8 ebp=0165ffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:021fc1bb=0220e370
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0165FFB4 77E687DD 0143FC8C 00530020 00740065 0143FC8C ntdll!NtWaitForMultipleObjects
0165FFEC 00000000 77F81E0B 0143FC8C 00000000 00000380 kernel32!GetModuleFileNameA
*----> ¦C°ïÅ|¶É¦L <----*
0165ebe8 a4 c3 f8 77 10 00 00 00 - 18 ec 65 01 01 00 00 00 ...w......e.....
0165ebf8 01 00 00 00 00 00 00 00 - 68 f3 fc 77 68 f3 fc 77 ........h..wh..w
0165ec08 08 03 00 00 10 07 00 00 - 10 00 00 00 10 00 00 00 ................
0165ec18 0c 03 00 00 38 01 00 00 - 44 04 00 00 00 03 00 00 ....8...D.......
0165ec28 34 04 00 00 68 03 00 00 - 74 03 00 00 84 03 00 00 4...h...t.......
0165ec38 9c 03 00 00 ac 03 00 00 - bc 03 00 00 d0 03 00 00 ................
0165ec48 e8 03 00 00 f8 03 00 00 - 08 04 00 00 1c 04 00 00 ................
0165ec58 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ec68 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ec78 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ec88 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ec98 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165eca8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ecb8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ecc8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ecd8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ece8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ecf8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ed08 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0165ed18 00 00 00 00 70 a1 0c 00 - b0 fe 11 00 f8 fc 09 00 ....p...........
°õ¦æ¤Þ½uÃѧO½X 0x644 ªºª¬ºA¶É¦L
eax=6b642244 ebx=00000002 ecx=00000000 edx=00000000 esi=77f837a7 edi=00000002
eip=77f837b2 esp=030cff1c ebp=030cff68 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:03c6d4ef=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
030CFF68 77E6A31D 030CFF40 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
030CFFB0 6B64224D 77E687DD 6B64DB48 00000000 00000000 kernel32!WaitForMultipleObjects
030CFFEC 00000000 6B642244 6B64DB48 00000000 00040000 mqutil!CCancelRpc::CancelThread
*----> ¦C°ïÅ|¶É¦L <----*
030cff1c b7 7a e6 77 02 00 00 00 - 40 ff 0c 03 01 00 00 00 .z.w....@.......
030cff2c 00 00 00 00 00 00 00 00 - 00 00 00 00 48 db 64 6b ............H.dk
030cff3c ff ff ff ff 3c 01 00 00 - 40 01 00 00 a4 da 42 80 ....<...@.....B.
030cff4c d4 4b 06 80 80 41 44 81 - 20 40 44 81 85 26 40 80 .K...AD. @D..&@.
030cff5c 70 cc b1 b6 00 00 00 00 - 20 62 44 81 b0 ff 0c 03 p....... bD.....
030cff6c 1d a3 e6 77 40 ff 0c 03 - 01 00 00 00 00 00 00 00 ...w@...........
030cff7c 00 00 00 00 00 00 00 00 - cc 23 64 6b 02 00 00 00 .........#dk....
030cff8c a4 ff 0c 03 00 00 00 00 - ff ff ff ff 00 00 00 00 ................
030cff9c 00 00 00 00 48 db 64 6b - 3c 01 00 00 40 01 00 00 ....H.dk<...@...
030cffac 2c 01 00 00 ec ff 0c 03 - 4d 22 64 6b dd 87 e6 77 ,.......M"dk...w
030cffbc 48 db 64 6b 00 00 00 00 - 00 00 00 00 48 db 64 6b H.dk........H.dk
030cffcc 00 c0 fd 7f 00 00 00 00 - c0 ff 0c 03 00 00 00 00 ................
030cffdc ff ff ff ff 56 18 e8 77 - 88 ae e6 77 00 00 00 00 ....V..w...w....
030cffec 00 00 00 00 00 00 00 00 - 44 22 64 6b 48 db 64 6b ........D"dkH.dk
030cfffc 00 00 00 00 00 00 04 00 - 01 00 00 00 01 00 00 00 ................
030d000c 1c 00 01 00 05 00 00 00 - 00 00 00 00 00 00 00 00 ................
030d001c 00 00 00 00 00 00 00 00 - 5c 00 5c 00 3f 00 5c 00 ........\.\.?.\.
030d002c 70 00 63 00 69 00 23 00 - 76 00 65 00 6e 00 5f 00 p.c.i.#.v.e.n._.
030d003c 38 00 30 00 38 00 36 00 - 26 00 64 00 65 00 76 00 8.0.8.6.&.d.e.v.
030d004c 5f 00 32 00 34 00 63 00 - 35 00 26 00 73 00 75 00 _.2.4.c.5.&.s.u.
°õ¦æ¤Þ½uÃѧO½X 0x694 ªºª¬ºA¶É¦L
eax=77522bda ebx=00000002 ecx=00000045 edx=00000000 esi=77f837a7 edi=00000002
eip=77f837b2 esp=0315ff24 ebp=0315ff70 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:03cfd4f7=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0315FF70 77E6A31D 0315FF48 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
0315FFB4 77E687DD 00000000 7FFDEBF8 00000000 00000000 kernel32!WaitForMultipleObjects
0315FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
°õ¦æ¤Þ½uÃѧO½X 0x1b0 ªºª¬ºA¶É¦L
eax=087330b8 ebx=00000570 ecx=37a0004e edx=00000000 esi=0319ff98 edi=77df7c12
eip=77df1d6b esp=0319ff58 ebp=0319ff78 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: TranslateMessageEx
77df1d48 0f85cad90200 jne CallMsgFilter+0xeb8 (77e1f718)
77df1d4e 33c0 xor eax,eax
77df1d50 c20800 ret 0x8
77df1d53 ff742408 push dword ptr [esp+0x8] ss:03d3d52b=????????
77df1d57 51 push ecx
77df1d58 e861090000 call GetKeyState+0x92 (77df26be)
77df1d5d c20800 ret 0x8
77df1d60 b89a110000 mov eax,0x119a
77df1d65 8d542404 lea edx,[esp+0x4] ss:03d3d52b=????????
77df1d69 cd2e int 2e
77df1d6b c21000 ret 0x10
77df1d6e 8b442404 mov eax,[esp+0x4] ss:03d3d52b=????????
77df1d72 cd2b int 2b
77df1d74 e939990300 jmp SetClassLongW+0x654 (77e2b6b2)
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0319FF78 77535C36 0319FF98 00000000 00000000 00000000 user32!TranslateMessageEx
0319FFB4 77E687DD 00000570 77555428 00066884 00000570 winmm!midiOutGetNumDevs
0319FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
°õ¦æ¤Þ½uÃѧO½X 0x67c ªºª¬ºA¶É¦L
eax=00000002 ebx=00000000 ecx=032bf274 edx=00000000 esi=039aff94 edi=77df7c12
eip=77df1d6b esp=039aff50 ebp=039aff70 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: TranslateMessageEx
77df1d48 0f85cad90200 jne CallMsgFilter+0xeb8 (77e1f718)
77df1d4e 33c0 xor eax,eax
77df1d50 c20800 ret 0x8
77df1d53 ff742408 push dword ptr [esp+0x8] ss:0454d523=????????
77df1d57 51 push ecx
77df1d58 e861090000 call GetKeyState+0x92 (77df26be)
77df1d5d c20800 ret 0x8
77df1d60 b89a110000 mov eax,0x119a
77df1d65 8d542404 lea edx,[esp+0x4] ss:0454d523=????????
77df1d69 cd2e int 2e
77df1d6b c21000 ret 0x10
77df1d6e 8b442404 mov eax,[esp+0x4] ss:0454d523=????????
77df1d72 cd2b int 2b
77df1d74 e939990300 jmp SetClassLongW+0x654 (77e2b6b2)
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
039AFF70 6AE5E75C 039AFF94 00000000 00000000 00000000 user32!TranslateMessageEx
039AFFB4 77E687DD 000004AC 00068A03 000688C4 000004AC msjava!DllGetClassObject
039AFFEC 00000000 6AE5E6D6 000004AC 00000000 00000000 kernel32!GetModuleFileNameA
*----> ¦C°ïÅ|¶É¦L <----*
039aff50 4e 7c df 77 94 ff 9a 03 - 00 00 00 00 00 00 00 00 N|.w............
039aff60 00 00 00 00 00 00 00 00 - a0 54 26 03 12 7c df 77 .........T&..|.w
039aff70 b4 ff 9a 03 5c e7 e5 6a - 94 ff 9a 03 00 00 00 00 ....\..j........
039aff80 00 00 00 00 00 00 00 00 - 03 8a 06 00 c4 88 06 00 ................
039aff90 ac 04 00 00 de 01 04 00 - 39 04 00 00 00 00 00 00 ........9.......
039affa0 00 00 00 00 69 77 d5 01 - f5 03 00 00 07 00 00 00 ....iw..........
039affb0 a0 54 26 03 ec ff 9a 03 - dd 87 e6 77 ac 04 00 00 .T&........w....
039affc0 03 8a 06 00 c4 88 06 00 - ac 04 00 00 00 30 fd 7f .............0..
039affd0 00 00 07 00 c0 ff 9a 03 - 00 00 07 00 ff ff ff ff ................
039affe0 56 18 e8 77 88 ae e6 77 - 00 00 00 00 00 00 00 00 V..w...w........
039afff0 00 00 00 00 d6 e6 e5 6a - ac 04 00 00 00 00 00 00 .......j........
039b0000 00 00 00 00 b9 00 00 00 - 00 00 00 00 00 00 00 00 ................
039b0010 00 00 00 00 62 00 56 03 - 68 18 96 03 00 00 00 00 ....b.V.h.......
039b0020 08 00 bb 03 28 01 bb 03 - 48 00 00 00 00 00 00 00 ....(...H.......
039b0030 0c 00 00 00 00 00 00 00 - 00 00 00 00 0c 00 00 00 ................
039b0040 00 00 00 00 00 00 00 00 - e0 00 9b 03 10 56 28 03 .............V(.
039b0050 48 00 00 00 2c 00 00 00 - 21 00 38 c2 00 04 00 00 H...,...!.8.....
039b0060 c0 00 9b 03 00 00 00 00 - a8 4a 26 03 00 00 00 00 .........J&.....
039b0070 b8 6f e3 6a 00 00 00 00 - 00 00 00 00 01 00 00 00 .o.j............
039b0080 60 56 28 03 60 56 28 03 - ff ff ff ff 00 00 00 00 `V(.`V(.........
°õ¦æ¤Þ½uÃѧO½X 0x468 ªºª¬ºA¶É¦L
eax=063eff08 ebx=00000000 ecx=00000001 edx=00000000 esi=77f8377b edi=000005d8
eip=77f83786 esp=063eff44 ebp=063eff68 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,[esp+0x4] ss:06f8d517=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
063EFF68 77E67837 000005D8 FFFFFFFF 00000000 6AE5FC30 ntdll!NtWaitForSingleObject
77E67828 74FF0C24 7EE80C24 C2FFFFFF 74FF0008 15FF0424 kernel32!WaitForSingleObject
74FF006A 00000000 00000000 00000000 00000000 00000000 <nosymbols>
*----> ¦C°ïÅ|¶É¦L <----*
063eff44 0f 78 e6 77 d8 05 00 00 - 00 00 00 00 00 00 00 00 .x.w............
063eff54 00 00 00 00 98 65 28 03 - 47 77 e6 77 d8 05 00 00 .....e(.Gw.w....
063eff64 d8 05 00 00 28 78 e6 77 - 37 78 e6 77 d8 05 00 00 ....(x.w7x.w....
063eff74 ff ff ff ff 00 00 00 00 - 30 fc e5 6a d8 05 00 00 ........0..j....
063eff84 ff ff ff ff 00 00 00 00 - ec ff 3e 06 98 65 28 03 ..........>..e(.
063eff94 98 65 28 03 f0 fb e5 6a - 98 65 28 03 7c 89 06 00 .e(....j.e(.|...
063effa4 48 4d 9b 03 00 00 00 00 - 00 00 00 00 00 00 00 00 HM..............
063effb4 a4 67 f8 77 dd 87 e6 77 - 00 00 00 00 7c 89 06 00 .g.w...w....|...
063effc4 48 4d 9b 03 00 00 00 00 - 00 f0 f9 7f b6 02 56 03 HM............V.
063effd4 c0 ff 3e 06 b6 02 56 03 - ff ff ff ff 56 18 e8 77 ..>...V.....V..w
063effe4 88 ae e6 77 00 00 00 00 - 00 00 00 00 00 00 00 00 ...w............
063efff4 a6 fb e5 6a 00 00 00 00 - 00 00 00 00 00 00 00 00 ...j............
063f0004 29 00 00 00 00 00 00 00 - 40 82 29 03 2c 00 3f 06 ).......@.).,.?.
063f0014 3c 6c 42 06 95 05 00 00 - 95 05 00 00 00 00 3f 06 <lB...........?.
063f0024 08 00 8f 06 95 05 00 00 - 29 00 00 00 50 40 90 06 ........)...P@..
063f0034 00 00 00 00 68 55 9b 03 - ff 74 24 04 ff 15 50 7d ....hU...t$...P}
063f0044 29 03 c2 04 00 00 00 00 - 00 00 00 00 00 00 00 00 )...............
063f0054 29 00 00 00 68 40 90 06 - 00 00 00 00 a0 56 9b 03 )...h@.......V..
063f0064 ff 74 24 04 ff 15 f0 7c - 29 03 c2 04 00 00 00 00 .t$....|).......
063f0074 00 00 00 00 00 00 00 00 - 29 00 00 00 80 40 90 06 ........)....@..
°õ¦æ¤Þ½uÃѧO½X 0x258 ªºª¬ºA¶É¦L
eax=04405910 ebx=00000001 ecx=0000002e edx=00000000 esi=77f837a7 edi=00000001
eip=77f837b2 esp=0718fd10 ebp=0718fd5c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:07d2d2e3=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0718FD5C 6AE316C0 0718FD34 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
00000000 00000000 00000000 00000000 00000000 00000000 msjava!GCEnable
°õ¦æ¤Þ½uÃѧO½X 0x780 ªºª¬ºA¶É¦L
eax=00000000 ebx=032aec90 ecx=00000030 edx=00000000 esi=071cfda4 edi=00000000
eip=77df1d6b esp=071cfd64 ebp=071cfd84 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: TranslateMessageEx
77df1d48 0f85cad90200 jne CallMsgFilter+0xeb8 (77e1f718)
77df1d4e 33c0 xor eax,eax
77df1d50 c20800 ret 0x8
77df1d53 ff742408 push dword ptr [esp+0x8] ss:07d6d337=????????
77df1d57 51 push ecx
77df1d58 e861090000 call GetKeyState+0x92 (77df26be)
77df1d5d c20800 ret 0x8
77df1d60 b89a110000 mov eax,0x119a
77df1d65 8d542404 lea edx,[esp+0x4] ss:07d6d337=????????
77df1d69 cd2e int 2e
77df1d6b c21000 ret 0x10
77df1d6e 8b442404 mov eax,[esp+0x4] ss:07d6d337=????????
77df1d72 cd2b int 2b
77df1d74 e939990300 jmp SetClassLongW+0x654 (77e2b6b2)
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
071CFD84 6B5B6A5E 071CFDA4 00000000 00000000 00000000 user32!TranslateMessageEx
071CFDC0 6B5B6987 00000002 032AE890 032AEB64 80004005 msawt!com_ms_awt_WToolkit_createNativeToolkit
071CFDD8 6AE4E64C 000AF480 032AEC90 071CFEA4 6AE4E50F msawt!com_ms_awt_WToolkit_createNativeToolkit
071CFDE8 6AE4E50F 6B5B6942 071CFE04 00000002 000AF480 msjava!convert_Java_Object_to_IUnknown
071CFEA4 03461525 071CFEC8 00000001 00000000 032AE894 msjava!convert_Java_Object_to_IUnknown
071CFEC8 FFFFFFFF 032AEB64 063FE1FF 04404C48 04404C60 <nosymbols>
00000003 00000000 00000000 00000000 00000000 00000000 <nosymbols>
°õ¦æ¤Þ½uÃѧO½X 0x794 ªºª¬ºA¶É¦L
eax=02267d2c ebx=00000001 ecx=00000000 edx=00000000 esi=77f837a7 edi=00000001
eip=77f837b2 esp=0748ff2c ebp=0748ff78 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:0802d4ff=00001000
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0748FF78 77E6A31D 0748FF50 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
77E6783A 140415FF C08577E6 0A928C0F 016A0002 0004C258 kernel32!WaitForMultipleObjects
042474FF 00000000 00000000 00000000 00000000 00000000 <nosymbols>
*----> ¦C°ïÅ|¶É¦L <----*
0748ff2c b7 7a e6 77 01 00 00 00 - 50 ff 48 07 01 00 00 00 .z.w....P.H.....
0748ff3c 00 00 00 00 00 00 00 00 - 01 00 00 00 01 00 00 00 ................
0748ff4c 98 70 72 6b 30 07 00 00 - 9c ff 48 07 5c 11 00 78 .prk0.....H.\..x
0748ff5c 00 00 74 00 00 00 00 00 - a0 55 38 02 01 00 00 00 ..t......U8.....
0748ff6c a0 55 38 02 98 70 72 6b - 00 00 00 00 3a 78 e6 77 .U8..prk....:x.w
0748ff7c 1d a3 e6 77 50 ff 48 07 - 01 00 00 00 00 00 00 00 ...wP.H.........
0748ff8c 00 00 00 00 00 00 00 00 - b8 34 71 6b 01 00 00 00 .........4qk....
0748ff9c b0 3c 23 02 00 00 00 00 - ff ff ff ff 50 4b 06 00 .<#.........PK..
0748ffac 00 00 00 00 ec ff 48 07 - 00 00 00 00 dd 87 e6 77 ......H........w
0748ffbc 00 00 00 00 50 4b 06 00 - 00 00 00 00 00 00 00 00 ....PK..........
0748ffcc 00 70 f9 7f 90 f1 fc 77 - c0 ff 48 07 90 f1 fc 77 .p.....w..H....w
0748ffdc ff ff ff ff 56 18 e8 77 - 88 ae e6 77 00 00 00 00 ....V..w...w....
0748ffec 00 00 00 00 00 00 00 00 - 45 34 71 6b 00 00 00 00 ........E4qk....
0748fffc 00 00 00 00 4d 5a 90 00 - 03 00 00 00 04 00 00 00 ....MZ..........
0749000c ff ff 00 00 b8 00 00 00 - 00 00 00 00 40 00 00 00 ............@...
0749001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0749002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0749003c 38 01 00 00 0e 1f ba 0e - 00 b4 09 cd 21 b8 01 4c 8...........!..L
0749004c cd 21 54 68 69 73 20 70 - 72 6f 67 72 61 6d 20 63 .!This program c
0749005c 61 6e 6e 6f 74 20 62 65 - 20 72 75 6e 20 69 6e 20 annot be run in
°õ¦æ¤Þ½uÃѧO½X 0x8d4 ªºª¬ºA¶É¦L
eax=02a71280 ebx=00040002 ecx=00000006 edx=00000000 esi=0007e990 edi=00000100
eip=77f83bb8 esp=031dfe28 ebp=031dff74 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
¥\¯à: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:03d7d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
031DFF74 787020D9 78702528 0007E990 0205FA94 00000000 ntdll!NtReplyWaitReceivePortEx
031DFFA8 787024DA 07B39998 031DFFEC 77E687DD 000A27B8 rpcrt4!NdrConformantArrayMemorySize
031DFFB4 77E687DD 000A27B8 0205FA94 00000000 000A27B8 rpcrt4!NdrConformantArrayMemorySize
031DFFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
°õ¦æ¤Þ½uÃѧO½X 0x7dc ªºª¬ºA¶É¦L
eax=07ab5608 ebx=0e3dff74 ecx=00000000 edx=00000000 esi=77f8377b edi=000009e8
eip=77f83786 esp=0e3dff58 ebp=0e3dff7c iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000293
¥\¯à: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,[esp+0x4] ss:0ef7d52b=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0E3DFF7C 77E67837 000009E8 000927C0 00000000 70CCC94F ntdll!NtWaitForSingleObject
77F8316D 4AFFC033 E0850F08 89000005 FF900C42 8D0F044A kernel32!WaitForSingleObject
0424548B 00000000 00000000 00000000 00000000 00000000 <nosymbols>
°õ¦æ¤Þ½uÃѧO½X 0x7f4 ªºª¬ºA¶É¦L
eax=000000ff ebx=0e49ff74 ecx=07af4d62 edx=00000000 esi=77f8377b edi=00000cb4
eip=77f83786 esp=0e49ff58 ebp=0e49ff7c iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000293
¥\¯à: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,[esp+0x4] ss:0f03d52b=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0E49FF7C 77E67837 00000CB4 000927C0 00000000 70CCC94F ntdll!NtWaitForSingleObject
77F8316D 4AFFC033 E0850F08 89000005 FF900C42 8D0F044A kernel32!WaitForSingleObject
0424548B 00000000 00000000 00000000 00000000 00000000 <nosymbols>
°õ¦æ¤Þ½uÃѧO½X 0x9a8 ªºª¬ºA¶É¦L
eax=74f54766 ebx=021993b0 ecx=70201e0a edx=00000000 esi=74f693a0 edi=00000000
eip=77f837dc esp=0e88ff84 ebp=0e88ffb4 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
¥\¯à: ZwRemoveIoCompletion
77f837d1 b8a8000000 mov eax,0xa8
77f837d6 8d542404 lea edx,[esp+0x4] ss:0f42d557=????????
77f837da cd2e int 2e
77f837dc c21400 ret 0x14
77f837df 53 push ebx
77f837e0 f7e1 mul ecx
77f837e2 8bd8 mov ebx,eax
77f837e4 8b442408 mov eax,[esp+0x8] ss:0f42d557=????????
77f837e8 f7642414 mul dword ptr [esp+0x14] ss:0f42d557=????????
77f837ec 03d8 add ebx,eax
77f837ee 8b442408 mov eax,[esp+0x8] ss:0f42d557=????????
77f837f2 f7e1 mul ecx
77f837f4 03d3 add edx,ebx
77f837f6 5b pop ebx
77f837f7 c21000 ret 0x10
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0E88FFB4 77E687DD 74F55F4B 7FF9B000 00000000 021993B0 ntdll!ZwRemoveIoCompletion
0E88FFEC 00000000 74F54766 021993B0 00000000 00000000 kernel32!GetModuleFileNameA
*----> ¦C°ïÅ|¶É¦L <----*
0e88ff84 b8 47 f5 74 c0 02 00 00 - bc ff 88 0e b0 ff 88 0e .G.t............
0e88ff94 a4 ff 88 0e 28 2c f5 74 - 00 b0 f9 7f 00 00 00 00 ....(,.t........
0e88ffa4 00 00 00 00 00 00 00 00 - 00 00 f5 74 40 00 96 0a ...........t@...
0e88ffb4 ec ff 88 0e dd 87 e6 77 - 4b 5f f5 74 00 b0 f9 7f .......wK_.t....
0e88ffc4 00 00 00 00 b0 93 19 02 - 00 40 fd 7f 0a 1e 20 70 .........@.... p
0e88ffd4 c0 ff 88 0e 0a 1e 20 70 - ff ff ff ff 56 18 e8 77 ...... p....V..w
0e88ffe4 88 ae e6 77 00 00 00 00 - 00 00 00 00 00 00 00 00 ...w............
0e88fff4 66 47 f5 74 b0 93 19 02 - 00 00 00 00 00 00 00 00 fG.t............
0e890004 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0e890014 00 00 00 00 00 00 00 00 - 00 00 04 00 00 40 00 00 .............@..
0e890024 80 00 00 00 6b 00 00 00 - 00 00 00 00 00 00 00 00 ....k...........
0e890034 00 00 00 00 00 e0 06 00 - 00 00 00 00 00 00 00 00 ................
0e890044 00 00 00 00 04 00 00 00 - 06 00 00 00 43 35 59 42 ............C5YB
0e890054 57 54 4d 4a 07 00 00 00 - 30 31 36 4a 47 48 45 33 WTMJ....016JGHE3
0e890064 06 00 00 00 38 54 32 5a - 34 58 32 52 06 00 00 00 ....8T2Z4X2R....
0e890074 43 48 59 42 47 31 4d 37 - 00 00 00 00 00 00 00 00 CHYBG1M7........
0e890084 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0e890094 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0e8900a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0e8900b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
°õ¦æ¤Þ½uÃѧO½X 0x834 ªºª¬ºA¶É¦L
eax=00000000 ebx=00000002 ecx=0e90fd78 edx=00000000 esi=77f837a7 edi=00000002
eip=77f837b2 esp=0e90fe5c ebp=0e90fea8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:0f4ad42f=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0E90FEA8 77DF2A00 0E90FE80 00000001 00000000 0E90FEA0 ntdll!NtWaitForMultipleObjects
0E90FF04 77DF2A77 0E90FED0 70C16078 0000E9B4 00000041 user32!MsgWaitForMultipleObjectsEx
0E90FF20 70BD18E4 00000001 70C16078 00000000 0000E9B4 user32!MsgWaitForMultipleObjects
0E90FF74 70BD4461 0E90FFA0 0E90FFA4 0E90FFA8 0E90FF9C SHLWAPI!Ordinal117
0E90FFAC 70BD43C7 77F8B1CE 77E687DD 00000000 77FCF170 SHLWAPI!PathRemoveFileSpecW
0E90FFEC 00000000 00000000 00000000 00000000 00000000 SHLWAPI!PathRemoveFileSpecW
°õ¦æ¤Þ½uÃѧO½X 0x238 ªºª¬ºA¶É¦L
eax=80090318 ebx=00000002 ecx=00001a61 edx=00000000 esi=77f837a7 edi=00000002
eip=77f837b2 esp=0ea0fe5c ebp=0ea0fea8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
¥\¯à: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:0f5ad42f=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0EA0FEA8 77DF2A00 0EA0FE80 00000001 00000000 0EA0FEA0 ntdll!NtWaitForMultipleObjects
0EA0FF04 77DF2A77 0EA0FED0 70C16078 0000EA60 00000041 user32!MsgWaitForMultipleObjectsEx
0EA0FF20 70BD18E4 00000001 70C16078 00000000 0000EA60 user32!MsgWaitForMultipleObjects
0EA0FF74 70BD4461 0EA0FFA0 0EA0FFA4 0EA0FFA8 0EA0FF9C SHLWAPI!Ordinal117
0EA0FFAC 70BD43C7 00066C94 77E687DD 00000000 00000001 SHLWAPI!PathRemoveFileSpecW
0EA0FFEC 00000000 00000000 00000000 00000000 00000000 SHLWAPI!PathRemoveFileSpecW
°õ¦æ¤Þ½uÃѧO½X 0x64c ªºª¬ºA¶É¦L
eax=77a7d4f1 ebx=00000102 ecx=00310037 edx=00000000 esi=77f8318c edi=00e4ff74
eip=77f83197 esp=00e4ff60 ebp=00e4ff7c iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
¥\¯à: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,[esp+0x4] ss:019ed533=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00E4FF7C 77E675EB 0000EA60 00000000 77A64D37 0000EA60 ntdll!NtDelayExecution
00007530 00000000 00000000 00000000 00000000 00000000 kernel32!Sleep
°õ¦æ¤Þ½uÃѧO½X 0x7e4 ªºª¬ºA¶É¦L
eax=02abb478 ebx=00040002 ecx=00000006 edx=00000000 esi=0007e990 edi=00000100
eip=77f83bb8 esp=02b1fe28 ebp=02b1ff74 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
¥\¯à: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:036bd3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> °ï Å| ¤Ï ¦V °l ÂÜ <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
02B1FF74 787020D9 78702528 0007E990 021630F0 031DFAEC ntdll!NtReplyWaitReceivePortEx
02B1FFA8 787024DA 07AD3578 02B1FFEC 77E687DD 02182338 rpcrt4!NdrConformantArrayMemorySize
02B1FFB4 77E687DD 02182338 021630F0 031DFAEC 02182338 rpcrt4!NdrConformantArrayMemorySize
02B1FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
