Microsoft (R) Windows NT (TM) Version 4.00 DrWtsn32 Copyright (C) 1985-1996 Microsoft Corp. All rights reserved. Application exception occurred: App: (pid=166) When: 10/21/2002 @ 17:3:41.647 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: OOOQA User Name: Administrator Number of Processors: 1 Processor Type: x86 Family 6 Model 6 Stepping 5 Windows Version: 4.0 Current Build: 1381 Service Pack: 6 Current Type: Uniprocessor Free Registered Organization: oooqa Registered Owner: oooqa *----> Task List <----* 0 Idle.exe 2 System.exe 20 SMSS.exe 26 CSRSS.exe 34 WINLOGON.exe 40 SERVICES.exe 43 LSASS.exe 70 SPOOLSS.exe 63 NDDEAGNT.exe 79 Avsynmgr.exe 83 EXPLORER.exe 93 RPCSS.exe 106 PSTORES.exe 110 mstask.exe 121 VSStat.exe 124 vshwin32.exe 129 LOADWC.exe 133 Avconsol.exe 141 WebScanX.exe 56 Mcshield.exe 164 AlogServ.exe 171 VirtuaWin.exe 61 WinList.exe 95 IEXPLORE.exe 200 notepad.exe 166 soffice.exe 59 DRWTSN32.exe 0 _Total.exe (01100000 - 01100000) (77f60000 - 77fbe000) dll\ntdll.dbg (00230000 - 00230000) (003d0000 - 003d0000) (77f00000 - 77f5e000) dll\kernel32.dbg (77e70000 - 77ec5000) dll\user32.dbg (77ed0000 - 77efc000) dll\gdi32.dbg (77dc0000 - 77dff000) dll\advapi32.dbg (77e10000 - 77e67000) dll\rpcrt4.dbg (77a90000 - 77a9b000) dll\version.dbg (77c40000 - 77d7c000) dll\shell32.dbg (716f0000 - 7177a000) COMCTL32.dbg (779c0000 - 779c8000) dll\lz32.dbg (78000000 - 78044000) (776d0000 - 776d8000) dll\wsock32.dbg (776b0000 - 776c4000) dll\ws2_32.dbg (776a0000 - 776a7000) dll\ws2help.dbg (77720000 - 77731000) dll\mpr.dbg (77b20000 - 77bd7000) dll\ole32.dbg (1c200000 - 1c200000) (10000000 - 10000000) (1c800000 - 1c800000) (003f0000 - 003f0000) (00420000 - 00420000) (1cb00000 - 1cb00000) (00460000 - 00460000) (004b0000 - 004b0000) (00500000 - 00500000) (00550000 - 00550000) (1c600000 - 1c600000) (1c900000 - 1c900000) (77c00000 - 77c18000) drv\winspool.dbg (76ab0000 - 76ab5000) dll\imm32.dbg (00bc0000 - 00bc0000) (00be0000 - 00be0000) (00bf0000 - 00bf0000) (00c00000 - 00c00000) (00c10000 - 00c10000) (00c20000 - 00c20000) (00c30000 - 00c30000) (00c50000 - 00c50000) (00c70000 - 00c70000) (01e20000 - 01e20000) (01fd0000 - 01fd0000) (02160000 - 02160000) (02180000 - 02180000) (02430000 - 02430000) (02470000 - 02470000) (024c0000 - 024c0000) (1d500000 - 1d500000) (024d0000 - 024d0000) (1d380000 - 1d380000) (02510000 - 02510000) (02720000 - 02720000) (4a800000 - 4a800000) (4ad00000 - 4ad00000) (02830000 - 02830000) (1d400000 - 1d400000) (02880000 - 02880000) (02890000 - 02890000) (1d290000 - 1d290000) (1de00000 - 1de00000) (1d800000 - 1d800000) (02a80000 - 02a80000) (02d90000 - 02d90000) (4a900000 - 4a900000) (02fa0000 - 02fa0000) (02fc0000 - 02fc0000) (03000000 - 03000000) (03090000 - 03090000) (03110000 - 03110000) (03220000 - 03220000) (13000000 - 13000000) (032b0000 - 032b0000) (032d0000 - 032d0000) (65340000 - 653d5000) oleaut32.dbg (1e000000 - 1e000000) (03810000 - 03810000) (03820000 - 03820000) (775a0000 - 775b4000) dll\rasddui.dbg (038c0000 - 038c0000) (03d00000 - 03d00000) (04030000 - 04030000) (04040000 - 04040000) (04070000 - 04070000) (11c00000 - 11c00000) (041c0000 - 041c0000) (71280000 - 71286000) dll\msidle.dbg (04270000 - 04270000) (77d80000 - 77db2000) dll\comdlg32.dbg (77a40000 - 77a4d000) dll\ntshrui.dbg (77800000 - 7783a000) dll\netapi32.dbg (77840000 - 77849000) dll\NetRap.dbg (777e0000 - 777ed000) dll\samlib.dbg (77bf0000 - 77bf7000) dll\rpcltc1.dbg (046a0000 - 046a0000) (046f0000 - 046f0000) (04720000 - 04720000) (047c0000 - 047c0000) (048a0000 - 048a0000) (048c0000 - 048c0000) (049e0000 - 049e0000) State Dump for Thread Id 0xd4 eax=00000001 ebx=00000008 ecx=00000000 edx=00000001 esi=0012ce20 edi=04a526d0 eip=1e18d783 esp=0012cd98 ebp=00000000 iopl=0 nv up ei ng nz ac po cy cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297 function: 1e18d76e c20400 ret 0x4 1e18d771 25ffff0000 and eax,0xffff 1e18d776 5f pop edi 1e18d777 5e pop esi 1e18d778 668b0441 mov ax,[ecx+eax*2] ds:00000001=???? 1e18d77c c20400 ret 0x4 1e18d77f 90 nop 1e18d780 53 push ebx 1e18d781 56 push esi 1e18d782 57 push edi FAULT ->1e18d783 668b7906 mov di,[ecx+0x6] ds:00efea07=???? 1e18d787 33c0 xor eax,eax 1e18d789 6685ff test di,di 1e18d78c 761b jbe 1e18d7a9 1e18d78e 8b11 mov edx,[ecx] ds:00000000=???????? 1e18d790 668b742410 mov si,[esp+0x10] ss:0102b7a0=???? 1e18d795 8bd8 mov ebx,eax 1e18d797 81e3ffff0000 and ebx,0xffff 1e18d79d 663b345a cmp si,[edx+ebx*2] ds:00000008=???? 1e18d7a1 7220 jb 1e18d7c3 1e18d7a3 40 inc eax 1e18d7a4 663bc7 cmp ax,di *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 00000000 00000000 00000000 00000000 00000000 00000000 *----> Raw Stack Dump <----* 0012cd98 d0 26 a5 04 20 ce 12 00 - 08 00 00 00 44 bb 1c 1e .&.. .......D... 0012cda8 01 00 00 00 2c 5c 84 03 - 00 00 00 00 d0 a6 a4 04 ....,\.......... 0012cdb8 34 00 00 00 01 00 00 00 - 0c 00 12 00 00 00 00 00 4............... 0012cdc8 9c ce 12 00 01 00 00 00 - b8 2c a5 04 60 2a a5 04 .........,..`*.. 0012cdd8 00 00 00 00 0c 00 12 00 - 4d 12 00 00 e1 90 00 00 ........M....... 0012cde8 19 05 00 00 f7 00 00 00 - f0 f9 1d 1e 00 00 00 00 ................ 0012cdf8 00 d0 12 00 d0 a6 a4 04 - 90 cf 12 00 d0 a6 a4 04 ................ 0012ce08 2c 5c 84 03 00 00 00 00 - 34 00 00 00 58 01 00 00 ,\......4...X... 0012ce18 c8 01 00 00 57 00 00 00 - 38 82 84 03 a0 f6 a2 04 ....W...8....... 0012ce28 48 02 96 03 00 00 00 00 - 24 d0 12 00 9c ce 12 00 H.......$....... 0012ce38 00 00 00 00 8b 54 82 1c - d0 26 a5 04 b8 2c a5 04 .....T...&...,.. 0012ce48 d5 54 82 1c 00 00 00 00 - 01 00 00 00 38 02 00 00 .T..........8... 0012ce58 a2 30 00 00 00 00 00 00 - 00 00 0c 00 98 ce 1c 05 .0.............. 0012ce68 1e 16 00 00 00 00 00 00 - 34 00 23 00 ff eb 22 1e ........4.#...". 0012ce78 9c ce 12 00 d0 a6 a4 04 - 00 00 12 00 0c 00 84 03 ................ 0012ce88 00 00 00 00 00 00 00 00 - 90 cf 12 00 d0 a6 a4 04 ................ 0012ce98 88 f1 71 04 38 15 75 04 - 34 01 01 00 01 a6 a4 04 ..q.8.u.4....... 0012cea8 90 cf 12 00 37 e2 19 1e - 90 cf 12 00 00 00 00 00 ....7........... 0012ceb8 40 d0 12 00 40 d0 12 00 - 00 00 00 00 2d 9b 1e 1e @...@.......-... 0012cec8 d1 9b 1e 1e 90 cf 12 00 - 04 d5 12 00 38 82 84 03 ............8... State Dump for Thread Id 0x51 eax=00000000 ebx=00000000 ecx=00139ce0 edx=00000000 esi=00000078 edi=0183ff34 eip=77f682db esp=0183ff18 ebp=0183ff3c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f682d0 b8c5000000 mov eax,0xc5 77f682d5 8d542404 lea edx,[esp+0x4] ss:0273e91f=89645000 77f682d9 cd2e int 2e 77f682db c20c00 ret 0xc 77f682de 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0183ff3c 77f04f37 00000078 00002710 00000000 00245ca2 ntdll!NtWaitForSingleObject 0183ffb8 77f04ede 00aa9c70 00000000 00000000 00aa9c70 kernel32!WaitForSingleObject 0183ffec 00000000 780037c5 00aa9c70 00000000 484d5343 kernel32!lstrcmpiW 00000000 00000000 00000000 00000000 00000000 00000000 ! *----> Raw Stack Dump <----* 0183ff18 a0 cc f1 77 78 00 00 00 - 00 00 00 00 34 ff 83 01 ...wx.......4... 0183ff28 00 00 00 00 70 4d bb 00 - 70 9c aa 00 00 1f 0a fa ....pM..p....... 0183ff38 ff ff ff ff b8 ff 83 01 - 37 4f f0 77 78 00 00 00 ........7O.wx... 0183ff48 10 27 00 00 00 00 00 00 - a2 5c 24 00 78 00 00 00 .'.......\$.x... 0183ff58 10 27 00 00 4e a7 c7 00 - 78 00 00 00 6c ff 83 01 .'..N...x...l... 0183ff68 70 4d bb 00 0a 00 00 00 - 00 00 00 00 db 9e c7 00 pM.............. 0183ff78 70 4d bb 00 70 9c aa 00 - 25 34 23 00 70 4d bb 00 pM..p...%4#.pM.. 0183ff88 20 38 00 78 60 80 aa 00 - 00 00 00 00 00 00 00 00 8.x`........... 0183ff98 70 9c aa 00 a5 dd 11 80 - 90 ff 83 01 8b 74 11 80 p............t.. 0183ffa8 dc ff 83 01 bc e9 00 78 - c0 12 03 78 00 00 00 00 .......x...x.... 0183ffb8 ec ff 83 01 de 4e f0 77 - 70 9c aa 00 00 00 00 00 .....N.wp....... 0183ffc8 00 00 00 00 70 9c aa 00 - 00 00 00 00 c4 ff 83 01 ....p........... 0183ffd8 00 00 00 00 ff ff ff ff - 44 b9 f3 77 38 d2 f3 77 ........D..w8..w 0183ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 c5 37 00 78 .............7.x 0183fff8 70 9c aa 00 00 00 00 00 - 43 53 4d 48 98 83 6b 56 p.......CSMH..kV 01840008 00 ec 5d 00 00 02 00 02 - 00 00 00 00 00 00 00 00 ..]............. 01840018 00 00 00 00 00 00 00 00 - 43 53 4d 48 98 83 6b 56 ........CSMH..kV 01840028 00 ec 5d 00 00 02 00 02 - 00 00 00 00 00 00 00 00 ..]............. 01840038 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 01840048 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x4d eax=780037c5 ebx=00000000 ecx=00000000 edx=00000000 esi=000000b0 edi=00000000 eip=77f682db esp=01f3f60c ebp=01f3f630 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: NtWaitForSingleObject 77f682d0 b8c5000000 mov eax,0xc5 77f682d5 8d542404 lea edx,[esp+0x4] ss:02e3e013=07000700 77f682d9 cd2e int 2e 77f682db c20c00 ret 0xc 77f682de 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 01f3f630 77f04f37 000000b0 ffffffff 00000000 77f0c32c ntdll!NtWaitForSingleObject 01f3f654 00238e22 000000b8 01f3f680 01f3f67c 00000001 kernel32!WaitForSingleObject *----> Raw Stack Dump <----* 01f3f60c a0 cc f1 77 b0 00 00 00 - 00 00 00 00 00 00 00 00 ...w............ 01f3f61c e0 4a bb 00 80 f6 f3 01 - 00 00 00 00 00 00 00 00 .J.............. 01f3f62c 9c 8d f8 77 54 f6 f3 01 - 37 4f f0 77 b0 00 00 00 ...wT...7O.w.... 01f3f63c ff ff ff ff 00 00 00 00 - 2c c3 f0 77 b0 00 00 00 ........,..w.... 01f3f64c ff ff ff ff 8b 17 f0 77 - 50 1a bb 00 22 8e 23 00 .......wP...".#. 01f3f65c b8 00 00 00 80 f6 f3 01 - 7c f6 f3 01 01 00 00 00 ........|....... 01f3f66c 3c 1a bb 00 28 1a bb 00 - 00 00 00 00 00 00 00 00 <...(........... 01f3f67c 00 00 00 00 03 01 00 00 - 00 00 00 00 00 00 00 00 ................ 01f3f68c 00 00 00 00 b0 00 00 00 - 92 96 20 1c e0 4a bb 00 .......... ..J.. 01f3f69c 28 1a bb 00 28 1a bb 00 - 1a b0 10 01 3c 1a bb 00 (...(.......<... 01f3f6ac 50 1a bb 00 00 00 00 00 - 28 1a bb 00 b8 ff f3 01 P.......(....... 01f3f6bc 10 af aa 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 01f3f6cc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 01f3f6dc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 01f3f6ec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 01f3f6fc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 01f3f70c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 01f3f71c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 01f3f72c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 01f3f73c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ State Dump for Thread Id 0x60 eax=022c1688 ebx=00000000 ecx=00a9e198 edx=00000000 esi=0000009c edi=022aff0c eip=77f682db esp=022afef0 ebp=022aff14 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtWaitForSingleObject 77f682d0 b8c5000000 mov eax,0xc5 77f682d5 8d542404 lea edx,[esp+0x4] ss:031ae8f7=70006100 77f682d9 cd2e int 2e 77f682db c20c00 ret 0xc 77f682de 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 022aff14 77f04f37 0000009c 000007d0 00000000 00245ca2 ntdll!NtWaitForSingleObject 022aff64 00000000 00000002 00000000 1c20a73b 0217b9c0 kernel32!WaitForSingleObject 00000002 00000000 00000000 00000000 00000000 00000000 ! *----> Raw Stack Dump <----* 022afef0 a0 cc f1 77 9c 00 00 00 - 00 00 00 00 0c ff 2a 02 ...w..........*. 022aff00 dc b9 17 02 c0 b9 17 02 - e8 b9 17 02 00 d3 ce fe ................ 022aff10 ff ff ff ff 64 ff 2a 02 - 37 4f f0 77 9c 00 00 00 ....d.*.7O.w.... 022aff20 d0 07 00 00 00 00 00 00 - a2 5c 24 00 9c 00 00 00 .........\$..... 022aff30 d0 07 00 00 a2 8b 20 1c - 9c 00 00 00 64 ff 2a 02 ...... .....d.*. 022aff40 51 c3 20 1c e8 b9 17 02 - 64 ff 2a 02 dc b9 17 02 Q. .....d.*..... 022aff50 e8 b9 17 02 18 00 00 00 - b8 ff 2a 02 60 33 ab 00 ..........*.`3.. 022aff60 c0 b9 17 02 02 00 00 00 - 00 00 00 00 02 00 00 00 ................ 022aff70 00 00 00 00 3b a7 20 1c - c0 b9 17 02 60 33 ab 00 ....;. .....`3.. 022aff80 25 34 23 00 c0 b9 17 02 - 20 38 00 78 e0 3c ab 00 %4#..... 8.x.<.. 022aff90 18 00 00 00 6c fb 12 00 - 60 33 ab 00 45 c2 11 80 ....l...`3..E... 022affa0 90 ff 2a 02 8b 74 11 80 - dc ff 2a 02 bc e9 00 78 ..*..t....*....x 022affb0 c0 12 03 78 00 00 00 00 - ec ff 2a 02 de 4e f0 77 ...x......*..N.w 022affc0 60 33 ab 00 18 00 00 00 - 6c fb 12 00 60 33 ab 00 `3......l...`3.. 022affd0 6c fb 12 00 c4 ff 2a 02 - 94 f9 12 00 ff ff ff ff l.....*......... 022affe0 44 b9 f3 77 38 d2 f3 77 - 00 00 00 00 00 00 00 00 D..w8..w........ 022afff0 00 00 00 00 c5 37 00 78 - 60 33 ab 00 00 00 00 00 .....7.x`3...... 022b0000 50 00 00 80 00 00 00 00 - 01 00 00 00 1d 00 00 00 P............... 022b0010 63 00 6f 00 6d 00 2e 00 - 73 00 75 00 6e 00 2e 00 c.o.m...s.u.n... 022b0020 73 00 74 00 61 00 72 00 - 2e 00 63 00 6f 00 6e 00 s.t.a.r...c.o.n. State Dump for Thread Id 0xd6 eax=7ffda000 ebx=00000000 ecx=00000001 edx=00000000 esi=00178598 edi=001889a8 eip=77f67fa7 esp=037ffdf0 ebp=037fff90 iopl=0 nv up ei pl nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206 function: ZwReplyWaitReceivePort 77f67f9c b890000000 mov eax,0x90 77f67fa1 8d542404 lea edx,[esp+0x4] ss:046fe7f7=00000100 77f67fa5 cd2e int 2e 77f67fa7 c21000 ret 0x10 77f67faa 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 037fff90 77e15a1d 77e160f7 00178598 037fffec ffffffff ntdll!ZwReplyWaitReceivePort 00003a98 00000000 00000000 00000000 00000000 00000000 rpcrt4!NdrOleAllocate *----> Raw Stack Dump <----* 037ffdf0 9f 5b e1 77 04 01 00 00 - 6c ff 7f 03 00 00 00 00 .[.w....l....... 037ffe00 90 a5 17 00 10 95 16 00 - 44 81 16 00 4c 81 16 00 ........D...L... 037ffe10 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 037ffe20 00 00 00 00 20 00 00 00 - 29 01 00 00 00 00 00 00 .... ...)....... 037ffe30 7c fe 7f 03 aa 28 f0 77 - 00 00 13 00 08 00 04 00 |....(.w........ 037ffe40 18 00 00 00 80 36 13 00 - 00 00 00 00 db 78 72 77 .....6.......xrw 037ffe50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 037ffe60 00 00 00 00 44 fe 7f 03 - 00 00 00 00 0c ff 7f 03 ....D........... 037ffe70 44 b9 f3 77 c8 cd f3 77 - 01 00 00 00 8c d0 34 65 D..w...w......4e 037ffe80 00 00 34 65 02 00 00 00 - 00 00 00 00 28 7f 16 00 ..4e........(... 037ffe90 00 f0 fd 7f 20 7f 16 00 - 3b d0 34 65 65 3e f6 77 .... ...;.4ee>.w 037ffea0 00 00 34 65 02 00 00 00 - 00 00 00 00 1c ff 7f 03 ..4e............ 037ffeb0 00 00 00 00 92 12 f6 77 - 60 55 fa 77 98 12 f6 77 .......w`U.w...w 037ffec0 30 ff 7f 03 00 ef 12 00 - 18 88 17 00 00 00 00 00 0............... 037ffed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 037ffee0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 037ffef0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 037fff00 00 00 00 00 c0 fe 7f 03 - 00 00 00 00 ff ff ff ff ................ 037fff10 d4 2c f9 77 e8 d0 f9 77 - ff ff ff ff 00 00 00 00 .,.w...w........ 037fff20 d3 63 f7 77 db 63 f7 77 - 30 ff 7f 03 01 00 00 00 .c.w.c.w0....... State Dump for Thread Id 0xdd eax=00180001 ebx=00b59270 ecx=00188e42 edx=00000000 esi=77e726e5 edi=03e1ff68 eip=77e72397 esp=03e1ff24 ebp=03e1ff48 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246 function: InvalidateRect 77e7237e b89e110000 mov eax,0x119e 77e72383 8d542404 lea edx,[esp+0x4] ss:04d1e92b=???????? 77e72387 cd2e int 2e 77e72389 c20c00 ret 0xc 77e7238c b885110000 mov eax,0x1185 77e72391 8d542404 lea edx,[esp+0x4] ss:04d1e92b=???????? 77e72395 cd2e int 2e 77e72397 c21400 ret 0x14 *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 03e1ff48 03d0bdb3 03e1ff68 00000000 00000000 00000000 user32!InvalidateRect State Dump for Thread Id 0xb1 eax=780037c5 ebx=03f1ff14 ecx=ffffffff edx=00000000 esi=7ffdf000 edi=00000000 eip=77f682cb esp=03f1fef0 ebp=03f1ff44 iopl=0 nv up ei pl nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213 function: NtWaitForMultipleObjects 77f682c0 b8c4000000 mov eax,0xc4 77f682c5 8d542404 lea edx,[esp+0x4] ss:04e1e8f7=???????? 77f682c9 cd2e int 2e 77f682cb c21400 ret 0x14 77f682ce 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 03f1ff44 77f1cd76 00000002 00b2b0e8 00000000 ffffffff ntdll!NtWaitForMultipleObjects 03f1ff60 03d0be1e 00000002 00b2b0e8 00000000 ffffffff kernel32!WaitForMultipleObjects State Dump for Thread Id 0xc2 eax=77b20000 ebx=00000000 ecx=00188728 edx=00000000 esi=0401ff7c edi=0018872c eip=77f6791f esp=0401ff68 ebp=0401ff84 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202 function: NtDelayExecution 77f67914 b827000000 mov eax,0x27 77f67919 8d542404 lea edx,[esp+0x4] ss:04f1e96f=???????? 77f6791d cd2e int 2e 77f6791f c20800 ret 0x8 77f67922 8bc0 mov eax,eax *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0401ff84 77f1cebe 0000ea60 00000000 77b489f4 0000ea60 ntdll!NtDelayExecution 0401ffec 00000000 77b4f66d 00188728 00000000 80000038 kernel32!Sleep 00000000 00000000 00000000 00000000 00000000 00000000 ! *----> Raw Stack Dump <----* 0401ff68 f5 ce f1 77 00 00 00 00 - 7c ff 01 04 28 87 18 00 ...w....|...(... 0401ff78 00 00 00 00 00 ba 3c dc - ff ff ff ff ec ff 01 04 ......<......... 0401ff88 be ce f1 77 60 ea 00 00 - 00 00 00 00 f4 89 b4 77 ...w`..........w 0401ff98 60 ea 00 00 e9 f5 b4 77 - 00 00 00 00 00 00 b2 77 `......w.......w 0401ffa8 28 87 18 00 28 87 18 00 - 87 f6 b4 77 58 ce 16 00 (...(......wX... 0401ffb8 7c fc e1 03 de 4e f0 77 - 28 87 18 00 58 ce 16 00 |....N.w(...X... 0401ffc8 7c fc e1 03 28 87 18 00 - 7c fc e1 03 c4 ff 01 04 |...(...|....... 0401ffd8 62 16 e1 77 ff ff ff ff - 44 b9 f3 77 38 d2 f3 77 b..w....D..w8..w 0401ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 6d f6 b4 77 ............m..w 0401fff8 28 87 18 00 00 00 00 00 - 38 00 00 80 00 00 00 00 (.......8....... 04020008 f4 81 c0 00 01 00 00 00 - 00 00 00 00 73 75 6e 2e ............sun. 04020018 e0 81 c0 00 60 81 c0 00 - 90 03 02 04 00 00 00 00 ....`........... 04020028 48 4b bb 00 00 00 00 00 - 54 00 02 04 40 59 bb 00 HK......T...@Y.. 04020038 40 00 00 80 38 00 00 00 - ec 91 bf 00 01 00 00 00 @...8........... 04020048 00 00 00 00 4c 00 5f 00 - d8 91 bf 00 58 91 bf 00 ....L._.....X... 04020058 90 03 02 04 b0 32 c6 00 - b0 8e aa 00 c0 98 aa 00 .....2.......... 04020068 40 8f b6 00 40 59 bb 00 - 68 00 02 04 68 00 02 04 @...@Y..h...h... 04020078 70 00 00 80 40 00 00 00 - 02 00 00 00 2e 00 00 00 p...@........... 04020088 63 00 6f 00 6d 00 2e 00 - 73 00 75 00 6e 00 2e 00 c.o.m...s.u.n... 04020098 73 00 74 00 61 00 72 00 - 2e 00 64 00 61 00 74 00 s.t.a.r...d.a.t.