|
У меня материнка Aska чапсет Via и PCI модем DFM-560I+ у меня проблема. ответьте мне на mail. Пожалуйста
Я работаю в любом поисковике в инете и через некоторое время вылазиет ошибка (приложения будет закрыто)он закрывает svchost.exe
блокируется буфер обмена, везде начиная от копии текста так и копии документов. Становятся муртвые ссылки в поисковике. Думал операционка переустановил друю версию Win 2000 такая же проблема. Правда во всех остальных версиях Win все работает прекрасно.
вот журнал ошибок доктор ватсон
Заранее благодарю. Николай
Microsoft® Windows 2000™ версия 5.00 DrWtsn32
© Корпорация Майкрософт, 1985-1999. Все права защищены.
Исключение в приложении:
Прил.: (pid=1228)
Время: 06.04.2002 @ 20:27:34.817
Номер: c0000005 (нарушение прав доступа)
*----> Сведения о системе <----*
Имя компьютера: 637B2E67CE1A4D8
Имя пользователя: Администратор
Число процессоров: 1
Тип процессора: x86 Family 6 Model 8 Stepping 10
Версия Windows 2000: 5.0
Текущая сборка: 2195
Пакет обновления: 3
Текущий тип: Uniprocessor Free
Зарегистрированная организация:
Зарегистрированный пользователь: Ник
*----> Список задач <----*
0 Idle.exe
8 System.exe
132 smss.exe
160 csrss.exe
156 winlogon.exe
208 services.exe
220 lsass.exe
376 svchost.exe
408 ccEvtMgr.exe
492 spoolsv.exe
528 svchost.exe
548 navapsvc.exe
584 nvsvc32.exe
632 regsvc.exe
660 MSTask.exe
684 WinMgmt.exe
744 svchost.exe
892 Explorer.exe
992 ccApp.exe
1008 internat.exe
1016 RUNDLL32.exe
1500 LUCOMS~1.exe
904 netdde.exe
1316 clipsrv.exe
908 ntvdm.exe
1184 WINCMD32.exe
1424 WinRAR.exe
1228 WINWORD.exe
1108 AgentSvr.exe
840 drwtsn32.exe
0 _Total.exe
(30000000 - 30836000)
(77F80000 - 77FFC000)
(77DB0000 - 77E0D000)
(77E80000 - 77F37000)
(770F0000 - 77161000)
(77F40000 - 77F7C000)
(77E10000 - 77E75000)
(308C0000 - 30E19000)
(77A50000 - 77B45000)
(77560000 - 777A7000)
(77C70000 - 77CBA000)
(77B50000 - 77BD9000)
(777D0000 - 777EE000)
(75020000 - 75030000)
(6E380000 - 6E386000)
(75E00000 - 75E1A000)
(00A30000 - 00C2D000)
(68C10000 - 68C95000)
(779B0000 - 77A4B000)
(78000000 - 78046000)
(10000000 - 1000C000)
(768D0000 - 768FB000)
(773F0000 - 77467000)
(773E0000 - 773F0000)
(77920000 - 77943000)
(7CA00000 - 7CA23000)
(77C10000 - 77C6E000)
(77BE0000 - 77BEF000)
(75100000 - 7514F000)
(75150000 - 75156000)
(750E0000 - 750F0000)
(74FC0000 - 74FD3000)
(74FB0000 - 74FB8000)
(77950000 - 7797B000)
(77980000 - 779A4000)
(74FE0000 - 74FE9000)
(759C0000 - 759CE000)
(76BB0000 - 76C23000)
(77820000 - 7785D000)
(77070000 - 77093000)
(74BC0000 - 74BCE000)
(32A00000 - 32A22000)
(28750000 - 2875E000)
(32B10000 - 32B40000)
(77260000 - 772CC000)
(774E0000 - 77502000)
(02990000 - 029B2000)
Копия памяти для потока 0x5c0
eax=00000034 ebx=024830d0 ecx=0012e895 edx=000008dc esi=00000021 edi=00000004
eip=32b18ed5 esp=0012e828 ebp=0012e84c iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000297
функция: <nosymbols>
32b18ead 751c jnz 32b219cb
32b18eaf 8b8374030000 mov eax,[ebx+0x374] ds:02483444=001dcf30
32b18eb5 c745fc01000000 mov dword ptr [ebp+0xfc],0x1 ss:00bbbe1e=03b903b1
32b18ebc 8b04f8 mov eax,[eax+edi*8] ds:00000004=????????
32b18ebf 80243000 and byte ptr [eax+esi],0x0 ds:00000021=??
32b18ec3 83cfff or edi,0xff
32b18ec6 e9a7000000 jmp 32b18f72
32b18ecb 8b9374030000 mov edx,[ebx+0x374] ds:02483444=001dcf30
32b18ed1 51 push ecx
32b18ed2 8b14fa mov edx,[edx+edi*8] ds:00000004=????????
СБОЙ -> 32b18ed5 880432 mov [edx+esi],al ds:00000021=??
32b18ed8 46 inc esi
32b18ed9 ff15e411b132 call dword ptr [32b111e4] ds:32b111e4=77e14a55
32b18edf 2b4508 sub eax,[ebp+0x8] ss:00bbbe1e=03b903b1
32b18ee2 83f802 cmp eax,0x2
32b18ee5 0f8587000000 jne 32b18f72
32b18eeb 8b8374030000 mov eax,[ebx+0x374] ds:02483444=001dcf30
32b18ef1 8b4d08 mov ecx,[ebp+0x8] ss:00bbbe1e=03b903b1
32b18ef4 8b04f8 mov eax,[eax+edi*8] ds:00000004=????????
32b18ef7 8a4901 mov cl,[ecx+0x1] ds:00bbbe67=03
32b18efa 880c30 mov [eax+esi],cl ds:00000021=??
32b18efd 46 inc esi
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0012E84C 32B18E32 0012E895 00000000 024830D0 024906C0 !<nosymbols>
0012F870 32B18D5C 02490C40 32B17AB1 02490C40 00000000 !<nosymbols>
0012FCA8 32B1922C 32B10000 007422C0 30AD82FE 0012FCD0 !<nosymbols>
0012FE40 30946396 3092C5E3 008715A0 00871630 3092B7D1 !<nosymbols>
0012FE84 3092AEC5 00000000 00000002 00000000 00000000 !MsoGetWPPOriginalFileName
00000400 00000000 00000000 00000000 00000000 00000000 !MsoFGetButtonSize
*----> Копия необработанного стека <----*
0012e828 95 e8 12 00 d0 30 48 02 - 40 0c 49 02 2c 00 00 00 .....0H.@.I.,...
0012e838 54 45 00 00 68 f8 12 00 - 0a 00 00 00 00 00 00 00 TE..h...........
0012e848 03 00 00 00 70 f8 12 00 - 32 8e b1 32 95 e8 12 00 ....p...2..2....
0012e858 00 00 00 00 d0 30 48 02 - c0 06 49 02 37 3a 34 34 .....0H...I.7:44
0012e868 20 5b 54 49 3a 20 5d 20 - 5b 54 45 3a ec e5 e6 e4 [TI: ] [TE:....
0012e878 f3 ed e0 f0 ee e4 ed e0 - ff 20 eb e8 ed e8 ff 20 ......... .....
0012e888 2b 20 34 34 20 38 37 30 - 20 36 30 36 30 34 33 39 + 44 870 6060439
0012e898 5d 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ]...............
0012e8a8 00 00 00 00 00 00 00 00 - 00 00 00 00 c3 3e 00 3f .............>.?
0012e8b8 67 3f 8b 3f 90 3f f4 3f - 00 70 00 00 50 00 00 00 g?.?.?.?.p..P...
0012e8c8 b0 30 cc 30 6c 31 b4 31 - 31 32 42 32 78 32 8b 32 .0.0l1.112B2x2.2
0012e8d8 2f 33 47 33 7e 34 12 35 - 8d 35 0c 36 1a 36 2e 36 /3G3~4.5.5.6.6.6
0012e8e8 6e 36 ab 36 f9 36 7b 37 - a1 37 bf 37 d7 37 f4 37 n6.6.6{7.7.7.7.7
0012e8f8 4d 38 7d 38 cc 38 db 38 - ea 38 f6 39 9a 3a 00 3b M8}8.8.8.8.9.:.;
0012e908 c8 3c da 3c e9 3c d4 3d - 00 80 00 00 60 00 00 00 .<.<.<.=....`...
0012e918 1b 30 4c 30 51 30 56 30 - 62 30 67 30 6c 30 7c 30 .0L0Q0V0b0g0l0|0
0012e928 93 30 b6 30 63 32 e8 32 - f2 32 fc 32 77 33 a1 34 .0.0c2.2.2.2w3.4
0012e938 a8 34 af 34 bb 34 c2 34 - 8f 36 96 36 9d 36 a4 36 .4.4.4.4.6.6.6.6
0012e948 b0 36 b7 36 3b 38 92 38 - 35 39 81 39 a5 39 b7 39 .6.6;8.859.9.9.9
0012e958 03 3a 60 3a e2 3a 1d 3c - b5 3c eb 3d 72 3e fc 3e .:`:.:.<.<.=r>.>
Копия памяти для потока 0x344
eax=771024c2 ebx=77f8316d ecx=00156f9c edx=00000000 esi=00156070 edi=001527f8
eip=77f83197 esp=011bff78 ebp=011bffa8 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000286
функция: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,[esp+0x4] ss:01c4d54b=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
011BFFA8 771024DA 00152870 011BFFEC 77E887DD 00156F30 ntdll!NtDelayExecution
011BFFB4 77E887DD 00156F30 00000000 40156AE0 00156F30 rpcrt4!NdrConformantArrayMemorySize
011BFFEC 00000000 771024C2 00156F30 00000000 000000C8 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
011bff78 99 25 10 77 01 00 00 00 - 90 ff 1b 01 00 00 00 00 .%.w............
011bff88 e0 6a 15 40 30 6f 15 00 - 00 5d 1e ee ff ff ff ff .j.@0o...]......
011bff98 00 5d 1e ee ff ff ff ff - 30 75 00 00 30 6f 15 00 .]......0u..0o..
011bffa8 b4 ff 1b 01 da 24 10 77 - 70 28 15 00 ec ff 1b 01 .....$.wp(......
011bffb8 dd 87 e8 77 30 6f 15 00 - 00 00 00 00 e0 6a 15 40 ...w0o.......j.@
011bffc8 30 6f 15 00 00 d0 fd 7f - 9c 6f 15 00 c0 ff 1b 01 0o.......o......
011bffd8 9c 6f 15 00 ff ff ff ff - 56 18 ea 77 88 ae e8 77 .o......V..w...w
011bffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 c2 24 10 77 .............$.w
011bfff8 30 6f 15 00 00 00 00 00 - c8 00 00 00 00 01 00 00 0o..............
011c0008 ff ee ff ee 02 10 00 00 - 00 00 00 00 00 fe 00 00 ................
011c0018 00 00 10 00 00 20 00 00 - 00 02 00 00 00 20 00 00 ..... ....... ..
011c0028 2f 02 00 00 ff ef fd 7f - 06 00 08 06 00 00 00 00 /...............
011c0038 00 00 00 00 00 00 00 00 - 00 00 00 00 98 05 1c 01 ................
011c0048 0f 00 00 00 f8 ff ff ff - 50 00 1c 01 50 00 1c 01 ........P...P...
011c0058 40 06 1c 01 00 00 00 00 - 00 00 00 00 00 00 00 00 @...............
011c0068 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
011c0078 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
011c0088 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
011c0098 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
011c00a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
Копия памяти для потока 0x474
eax=773fb4dc ebx=00000001 ecx=77ee0798 edx=00000000 esi=77f837a7 edi=00000001
eip=77f837b2 esp=013fff40 ebp=013fff8c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
функция: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:01e8d513=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
013FFF8C 773FB501 013FFF64 00000001 00000000 013FFF84 ntdll!NtWaitForMultipleObjects
00000001 00000000 00000000 00000000 00000000 00000000 crypt32!CryptSIPLoad
Копия памяти для потока 0x5bc
eax=000000c0 ebx=0000003f ecx=014fef50 edx=00000000 esi=014fec00 edi=00000001
eip=77f837b2 esp=014febe8 ebp=014fffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
функция: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:01f8c1bb=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
014FFFB4 77E887DD 0012CC74 00000000 00000000 0012CC74 ntdll!NtWaitForMultipleObjects
014FFFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
014febe8 a4 c3 f8 77 0f 00 00 00 - 18 ec 4f 01 01 00 00 00 ...w......O.....
014febf8 01 00 00 00 00 00 00 00 - 68 f3 fc 77 68 f3 fc 77 ........h..wh..w
014fec08 d8 01 00 00 bc 05 00 00 - 0f 00 00 00 0f 00 00 00 ................
014fec18 dc 01 00 00 a4 01 00 00 - 34 02 00 00 40 02 00 00 ........4...@...
014fec28 54 02 00 00 74 02 00 00 - 84 02 00 00 98 02 00 00 T...t...........
014fec38 b0 02 00 00 c8 02 00 00 - d8 02 00 00 ec 02 00 00 ................
014fec48 00 03 00 00 18 03 00 00 - 28 03 00 00 00 00 00 00 ........(.......
014fec58 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fec68 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fec78 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fec88 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fec98 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014feca8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fecb8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fecc8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fecd8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fece8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fecf8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fed08 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fed18 00 00 00 00 68 85 18 00 - 60 55 1e 00 90 43 1e 00 ....h...`U...C..
Копия памяти для потока 0x2c0
eax=77c1eba0 ebx=00000003 ecx=00000000 edx=00000000 esi=77f837a7 edi=00000003
eip=77f837b2 esp=0161ff20 ebp=0161ff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
функция: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:020ad4f3=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0161FF6C 77E8A31D 0161FF44 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
00000000 00000000 00000000 00000000 00000000 00000000 kernel32!WaitForMultipleObjects
*----> Копия необработанного стека <----*
0161ff20 b7 7a e8 77 03 00 00 00 - 44 ff 61 01 01 00 00 00 .z.w....D.a.....
0161ff30 00 00 00 00 00 00 00 00 - b0 00 c6 77 00 00 00 00 ...........w....
0161ff40 f6 76 e8 77 58 02 00 00 - 5c 02 00 00 9c 02 00 00 .v.wX...\.......
0161ff50 00 00 00 00 00 00 00 00 - 90 90 14 00 16 00 18 00 ................
0161ff60 24 ed c1 77 00 00 00 00 - 08 ff 61 01 00 00 00 00 $..w......a.....
0161ff70 1d a3 e8 77 44 ff 61 01 - 01 00 00 00 00 00 00 00 ...wD.a.........
0161ff80 00 00 00 00 00 00 00 00 - 2c ec c1 77 03 00 00 00 ........,..w....
0161ff90 4c 01 c6 77 00 00 00 00 - ff ff ff ff 58 c9 12 00 L..w........X...
0161ffa0 e6 7e f8 77 ec ff 61 01 - 00 00 00 00 00 00 00 00 .~.w..a.........
0161ffb0 03 00 00 00 00 00 c1 77 - dd 87 e8 77 00 00 00 00 .......w...w....
0161ffc0 58 c9 12 00 e6 7e f8 77 - 00 00 00 00 00 a0 fd 7f X....~.w........
0161ffd0 00 00 00 00 c0 ff 61 01 - 00 00 00 00 ff ff ff ff ......a.........
0161ffe0 56 18 ea 77 88 ae e8 77 - 00 00 00 00 00 00 00 00 V..w...w........
0161fff0 00 00 00 00 a0 eb c1 77 - 00 00 00 00 00 00 00 00 .......w........
01620000 43 6c 69 65 6e 74 20 55 - 72 6c 43 61 63 68 65 20 Client UrlCache
01620010 4d 4d 46 20 56 65 72 20 - 35 2e 32 00 00 00 02 00 MMF Ver 5.2.....
01620020 00 50 00 00 80 03 00 00 - 46 02 00 00 00 00 00 00 .P......F.......
01620030 00 00 10 00 00 00 00 00 - 00 c0 12 00 00 00 00 00 ................
01620040 00 10 00 00 00 00 00 00 - 04 00 00 00 26 00 00 00 ............&...
01620050 4f 58 45 5a 53 4c 59 33 - 26 00 00 00 4b 39 4d 4e OXEZSLY3&...K9MN
Копия памяти для потока 0x58c
eax=0000000d ebx=00000d00 ecx=0000000e edx=00000000 esi=01e0ff98 edi=77e12745
eip=77e11d6b esp=01e0ff38 ebp=01e0ff58 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
функция: TranslateMessageEx
77e11d48 0f85cad90200 jne CallMsgFilter+0xeb8 (77e3f718)
77e11d4e 33c0 xor eax,eax
77e11d50 c20800 ret 0x8
77e11d53 ff742408 push dword ptr [esp+0x8] ss:0289d50b=????????
77e11d57 51 push ecx
77e11d58 e861090000 call GetKeyState+0x92 (77e126be)
77e11d5d c20800 ret 0x8
77e11d60 b89a110000 mov eax,0x119a
77e11d65 8d542404 lea edx,[esp+0x4] ss:0289d50b=????????
77e11d69 cd2e int 2e
77e11d6b c21000 ret 0x10
77e11d6e 8b442404 mov eax,[esp+0x4] ss:0289d50b=????????
77e11d72 cd2b int 2b
77e11d74 e939990300 jmp SetClassLongW+0x654 (77e4b6b2)
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
01E0FF58 30A62BF7 01E0FF98 00000000 00000000 00000000 user32!TranslateMessageEx
01E0FFB4 77E887DD 00000000 00000000 3019004A 00000000 !MsoFCustomAWDatabases
01E0FFEC 00000000 30A62B4A 00000000 00000000 00000008 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
01e0ff38 4e 7c e1 77 98 ff e0 01 - 00 00 00 00 00 00 00 00 N|.w............
01e0ff48 00 00 00 00 00 0d 00 00 - 00 00 00 00 45 27 e1 77 ............E'.w
01e0ff58 b4 ff e0 01 f7 2b a6 30 - 98 ff e0 01 00 00 00 00 .....+.0........
01e0ff68 00 00 00 00 00 00 00 00 - 00 00 00 00 4a 00 19 30 ............J..0
01e0ff78 00 00 00 00 6c 01 04 00 - c3 c0 00 00 01 00 00 00 ....l...........
01e0ff88 cc 04 00 00 3b fa 2f 00 - b0 01 00 00 62 01 00 00 ....;./.....b...
01e0ff98 00 00 00 00 00 0d 00 00 - 0b 00 00 00 00 00 00 00 ................
01e0ffa8 31 01 30 00 c2 02 00 00 - 85 01 00 00 ec ff e0 01 1.0.............
01e0ffb8 dd 87 e8 77 00 00 00 00 - 00 00 00 00 4a 00 19 30 ...w........J..0
01e0ffc8 00 00 00 00 00 90 fd 7f - 10 32 13 00 c0 ff e0 01 .........2......
01e0ffd8 10 32 13 00 ff ff ff ff - 56 18 ea 77 88 ae e8 77 .2......V..w...w
01e0ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 4a 2b a6 30 ............J+.0
01e0fff8 00 00 00 00 00 00 00 00 - 08 00 00 00 01 01 00 00 ................
01e10008 ee ff ee ff 00 00 00 00 - 00 00 13 00 00 f0 09 00 ................
01e10018 00 00 e1 01 00 01 00 00 - 40 00 e1 01 00 00 f1 01 ........@.......
01e10028 bb 00 00 00 02 00 00 00 - a8 05 13 00 00 00 00 00 ................
01e10038 b0 af e3 01 00 00 00 00 - 5a 29 08 00 01 01 0c 00 ........Z)......
01e10048 00 e0 80 30 00 00 00 00 - 00 00 00 00 00 00 00 00 ...0............
01e10058 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
01e10068 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
Копия памяти для потока 0x3d8
eax=771024c2 ebx=001e8da0 ecx=00000143 edx=00000000 esi=00157038 edi=00000100
eip=77f83bb8 esp=0200fe28 ebp=0200ff74 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
функция: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:02a9d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0200FF74 771020D9 77102528 00157038 00130000 001595E8 ntdll!NtReplyWaitReceivePortEx
0200FFA8 771024DA 001EE9A8 0200FFEC 77E887DD 001E8DA0 rpcrt4!NdrConformantArrayMemorySize
0200FFB4 77E887DD 001E8DA0 00130000 001595E8 001E8DA0 rpcrt4!NdrConformantArrayMemorySize
0200FFEC 00000000 771024C2 001E8DA0 00000000 000000C1 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
0200fe28 85 22 10 77 8c 01 00 00 - 54 ff 00 02 00 00 00 00 .".w....T.......
0200fe38 08 e9 1f 00 58 ff 00 02 - f8 27 15 00 a8 e9 1e 00 ....X....'......
0200fe48 a0 8d 1e 00 08 55 3b c0 - a8 06 00 00 2c ec 55 81 .....U;.....,.U.
0200fe58 8b 7d 43 80 90 92 8e 81 - 46 02 00 00 2c cb a2 bc .}C.....F...,...
0200fe68 40 50 8a 81 03 00 1f 00 - 28 ec 55 81 24 1a 38 81 @P......(.U.$.8.
0200fe78 c0 cb a2 bc 54 1d 49 80 - 93 20 49 80 08 1a 38 81 ....T.I.. I...8.
0200fe88 77 20 49 80 40 50 8a 81 - 03 00 1f 00 28 ec 55 81 w I.@P......(.U.
0200fe98 38 cb a2 bc 00 ec 55 81 - 28 1a 8e e2 14 01 00 00 8.....U.(.......
0200fea8 28 ec 55 81 28 ec 55 81 - 38 cd a2 bc 01 00 00 00 (.U.(.U.8.......
0200feb8 01 00 00 00 c8 c5 58 81 - 08 02 00 c0 55 54 4a 80 ......X.....UTJ.
0200fec8 08 1a 38 81 f4 cb a2 bc - 28 ec 55 81 08 00 3c 81 ..8.....(.U...<.
0200fed8 01 00 00 00 00 00 00 00 - c8 c5 58 81 08 02 00 c0 ..........X.....
0200fee8 44 cd a2 bc 67 13 4a 80 - 00 00 30 c0 a0 99 3e 81 D...g.J...0...>.
0200fef8 e3 18 4a 80 64 cd a2 bc - 50 fa b4 00 9c 2d 50 c0 ..J.d...P....-P.
0200ff08 eb 01 00 00 00 20 50 c0 - 82 00 00 00 82 00 00 00 ..... P.........
0200ff18 eb 01 00 00 01 00 00 00 - 00 20 50 c0 a0 99 3e 81 ......... P...>.
0200ff28 e0 99 2e 81 60 2c 55 81 - 00 74 2e 81 00 00 00 00 ....`,U..t......
0200ff38 90 75 2e 81 60 cc a2 bc - 46 02 00 00 a4 da 42 80 .u..`...F.....B.
0200ff48 e0 95 06 80 60 75 2e 81 - 00 74 2e 81 00 20 50 c0 ....`u...t... P.
0200ff58 00 a2 2f 4d ff ff ff ff - 50 fe 00 02 ff ff ff ff ../M....P.......
Исключение в приложении:
Прил.: (pid=984)
Время: 06.04.2002 @ 20:27:46.063
Номер: c0000005 (нарушение прав доступа)
*----> Сведения о системе <----*
Имя компьютера: 637B2E67CE1A4D8
Имя пользователя: Администратор
Число процессоров: 1
Тип процессора: x86 Family 6 Model 8 Stepping 10
Версия Windows 2000: 5.0
Текущая сборка: 2195
Пакет обновления: 3
Текущий тип: Uniprocessor Free
Зарегистрированная организация:
Зарегистрированный пользователь: Ник
*----> Список задач <----*
0 Idle.exe
8 System.exe
132 smss.exe
160 csrss.exe
156 winlogon.exe
208 services.exe
220 lsass.exe
376 svchost.exe
408 ccEvtMgr.exe
492 spoolsv.exe
528 svchost.exe
548 navapsvc.exe
584 nvsvc32.exe
632 regsvc.exe
660 MSTask.exe
684 WinMgmt.exe
744 svchost.exe
892 Explorer.exe
992 ccApp.exe
1008 internat.exe
1016 RUNDLL32.exe
1500 LUCOMS~1.exe
904 netdde.exe
1316 clipsrv.exe
908 ntvdm.exe
1184 WINCMD32.exe
1424 WinRAR.exe
1472 WinRAR.exe
984 WINWORD.exe
1092 drwtsn32.exe
0 _Total.exe
(30000000 - 30836000)
(77F80000 - 77FFC000)
(77DB0000 - 77E0D000)
(77E80000 - 77F37000)
(770F0000 - 77161000)
(77F40000 - 77F7C000)
(77E10000 - 77E75000)
(308C0000 - 30E19000)
(77A50000 - 77B45000)
(77560000 - 777A7000)
(77C70000 - 77CBA000)
(77B50000 - 77BD9000)
(777D0000 - 777EE000)
(75020000 - 75030000)
(6E380000 - 6E386000)
(75E00000 - 75E1A000)
(00A10000 - 00C0D000)
(68C10000 - 68C95000)
(779B0000 - 77A4B000)
(78000000 - 78046000)
(10000000 - 1000C000)
(768D0000 - 768FB000)
(773F0000 - 77467000)
(773E0000 - 773F0000)
(77920000 - 77943000)
(7CA00000 - 7CA23000)
(77C10000 - 77C6E000)
(77BE0000 - 77BEF000)
(75100000 - 7514F000)
(75150000 - 75156000)
(750E0000 - 750F0000)
(74FC0000 - 74FD3000)
(74FB0000 - 74FB8000)
(77950000 - 7797B000)
(77980000 - 779A4000)
(74FE0000 - 74FE9000)
(759C0000 - 759CE000)
(76BB0000 - 76C23000)
(77820000 - 7785D000)
(77070000 - 77093000)
(32B10000 - 32B40000)
(77260000 - 772CC000)
(774E0000 - 77502000)
(02850000 - 02872000)
Копия памяти для потока 0x550
eax=001f5c70 ebx=00000007 ecx=000a0003 edx=00000002 esi=02350c50 edi=02343120
eip=32b18e6b esp=0012e854 ebp=0012f870 iopl=0 nv up ei pl nz ac pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000212
функция: <nosymbols>
32b18e52 5e pop esi
32b18e53 5b pop ebx
32b18e54 c9 leave
32b18e55 c3 ret
32b18e56 8b917c030000 mov edx,[ecx+0x37c] ds:000a037f=????????
32b18e5c 85d2 test edx,edx
32b18e5e 7e11 jle 32b21971
32b18e60 8b8174030000 mov eax,[ecx+0x374] ds:000a0377=????????
32b18e66 8b08 mov ecx,[eax] ds:001f5c70=f220eeef
32b18e68 83c008 add eax,0x8
СБОЙ -> 32b18e6b 802100 and byte ptr [ecx],0x0 ds:000a0003=??
32b18e6e 4a dec edx
32b18e6f 75f5 jnz 32b25266
32b18e71 c3 ret
32b18e72 55 push ebp
32b18e73 8bec mov ebp,esp
32b18e75 83ec14 sub esp,0x14
32b18e78 8b4508 mov eax,[ebp+0x8] ss:00bbce42=00100000
32b18e7b 53 push ebx
32b18e7c 56 push esi
32b18e7d 33f6 xor esi,esi
32b18e7f 57 push edi
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0012F870 32B18BF9 02350C50 32B17B32 000000A9 00000000 !<nosymbols>
0012FCA8 32B1922C 32B10000 007422F0 30AD82FE 0012FCD0 !<nosymbols>
0012FE40 30946396 3092C5E3 0087224C 008722DC 3092B7D1 !<nosymbols>
0012FE84 3092AEC5 00000000 00000002 00000000 00000000 !MsoGetWPPOriginalFileName
00000400 00000000 00000000 00000000 00000000 00000000 !MsoFGetButtonSize
*----> Копия необработанного стека <----*
0012e854 b7 8d b1 32 00 00 00 00 - 50 0c 35 02 d0 06 35 02 ...2....P.5...5.
0012e864 20 f3 f1 f2 e0 ed ee e2 - eb e5 ed ed ee ec 20 ef ............. .
0012e874 f0 ee e4 f3 ea f2 e5 20 - e8 20 ea ee ec ef fc fe ....... . ......
0012e884 f2 e5 f0 e5 2c 20 e0 20 - f2 e0 ea e6 e5 20 ee 20 ...., . ..... .
0012e894 f2 ee ec 2c 20 ea e0 ea - 20 ee e1 f0 e0 f2 e8 f2 ..., ... .......
0012e8a4 fc f1 ff 20 e2 20 e1 eb - e8 e6 e0 e9 f8 e8 e9 20 ... . .........
0012e8b4 f0 e5 e3 e8 f1 f2 f0 e0 - f6 e8 ee ed ed fb e9 20 ...............
0012e8c4 f6 e5 ed f2 f0 20 cc e0 - e9 ea f0 ee f1 ee f4 f2 ..... ..........
0012e8d4 2e 00 e4 e5 f2 20 e7 e0 - f0 e5 e3 e8 f1 f2 f0 e8 ..... ..........
0012e8e4 f0 ee e2 e0 f2 fc f1 ff - 20 ef ee 20 f2 e5 eb e5 ........ .. ....
0012e8f4 f4 ee ed f3 20 e8 eb e8 - 20 eb fe e1 fb ec 20 e4 .... ... ..... .
0012e904 f0 f3 e3 e8 ec 20 f1 ef - ee f1 ee e1 ee ec 2e 00 ..... ..........
0012e914 f7 f2 e5 2e 20 0a 0a c5 - f1 eb e8 20 fd eb e5 ea .... ...... ....
0012e924 f2 f0 ee ed ed ee e9 20 - ef ee f7 f2 fb 20 f3 20 ....... ..... .
0012e934 e2 e0 f1 20 ed e5 f2 2c - 20 ec ee e6 ed ee 20 e1 ... ..., ..... .
0012e944 f3 e4 e5 f2 20 e7 e0 f0 - e5 e3 e8 f1 f2 f0 e8 f0 .... ...........
0012e954 ee e2 e0 f2 fc f1 ff 20 - ef ee 20 f2 e5 eb e5 f4 ....... .. .....
0012e964 ee ed f3 2e 00 3f a8 3f - bd 3f 00 00 00 90 00 00 .....?.?.?......
0012e974 74 00 00 00 19 30 28 30 - 37 30 55 30 89 30 ba 30 t....0(070U0.0.0
0012e984 c9 30 93 31 30 32 59 32 - 7f 32 a2 32 d1 32 46 34 .0.102Y2.2.2.2F4
Копия памяти для потока 0x58c
eax=771024c2 ebx=001564a0 ecx=0015650c edx=00000000 esi=001565a8 edi=00000100
eip=77f83bb8 esp=0119fe28 ebp=0119ff74 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
функция: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:01c2d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0119FF74 771020D9 77102528 001565A8 00000000 40156050 ntdll!NtReplyWaitReceivePortEx
0119FFA8 771024DA 001555E0 0119FFEC 77E887DD 001564A0 rpcrt4!NdrConformantArrayMemorySize
0119FFB4 77E887DD 001564A0 00000000 40156050 001564A0 rpcrt4!NdrConformantArrayMemorySize
0119FFEC 00000000 771024C2 001564A0 00000000 000000C8 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
0119fe28 85 22 10 77 88 01 00 00 - 54 ff 19 01 00 00 00 00 .".w....T.......
0119fe38 18 de 16 00 58 ff 19 01 - c0 15 15 00 e0 55 15 00 ....X........U..
0119fe48 a0 64 15 00 1f 00 00 00 - d0 7d 8a 81 d0 7d 8a 81 .d.......}...}..
0119fe58 00 00 00 00 01 00 00 00 - b4 7b dc bb 00 00 00 00 .........{......
0119fe68 f8 bc 21 e3 78 7b dc bb - 00 00 00 00 72 4f 41 80 ..!.x{......rOA.
0119fe78 d0 7e 8a 81 40 41 8a 81 - 68 7c dc bb ca 08 45 80 .~..@A..h|....E.
0119fe88 04 00 00 00 88 f5 5f 81 - 66 41 4a 80 80 f3 12 00 ......_.fAJ.....
0119fe98 00 00 00 00 48 f3 12 00 - 03 b4 0c 00 00 00 00 00 ....H...........
0119fea8 00 00 00 00 01 00 00 00 - 19 00 02 00 00 00 00 00 ................
0119feb8 19 00 02 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0119fec8 d8 03 00 00 00 00 00 00 - 0c 7c dc bb 00 00 00 00 .........|......
0119fed8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0119fee8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0119fef8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0119ff08 00 00 00 00 14 29 50 c0 - 7c 00 00 00 00 20 50 c0 .....)P.|.... P.
0119ff18 14 29 50 c0 7c 00 00 00 - 7c 00 00 00 98 28 50 c0 .)P.|...|....(P.
0119ff28 01 10 f4 77 60 56 2f 81 - e0 11 4d 81 00 00 00 00 ...w`V/...M.....
0119ff38 70 13 4d 81 60 7c dc bb - 46 02 00 00 a4 da 42 80 p.M.`|..F.....B.
0119ff48 e0 95 06 80 40 13 4d 81 - e0 11 4d 81 70 7c dc bb ....@.M...M.p|..
0119ff58 00 a2 2f 4d ff ff ff ff - 50 fe 19 01 ff ff ff ff ../M....P.......
Копия памяти для потока 0x3c4
eax=773fb4dc ebx=00000001 ecx=77ee0798 edx=00000000 esi=77f837a7 edi=00000001
eip=77f837b2 esp=013fff40 ebp=013fff8c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
функция: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:01e8d513=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
013FFF8C 773FB501 013FFF64 00000001 00000000 013FFF84 ntdll!NtWaitForMultipleObjects
00000001 00000000 00000000 00000000 00000000 00000000 crypt32!CryptSIPLoad
Копия памяти для потока 0x2c0
eax=000000c0 ebx=0000003f ecx=014fef50 edx=00000000 esi=014fec00 edi=00000001
eip=77f837b2 esp=014febe8 ebp=014fffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
функция: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:01f8c1bb=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
014FFFB4 77E887DD 0012CC74 00000000 00000000 0012CC74 ntdll!NtWaitForMultipleObjects
014FFFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
014febe8 a4 c3 f8 77 0f 00 00 00 - 18 ec 4f 01 01 00 00 00 ...w......O.....
014febf8 01 00 00 00 00 00 00 00 - 68 f3 fc 77 68 f3 fc 77 ........h..wh..w
014fec08 d4 01 00 00 c0 02 00 00 - 0f 00 00 00 0f 00 00 00 ................
014fec18 d8 01 00 00 a0 01 00 00 - 30 02 00 00 3c 02 00 00 ........0...<...
014fec28 50 02 00 00 70 02 00 00 - 80 02 00 00 94 02 00 00 P...p...........
014fec38 ac 02 00 00 c4 02 00 00 - d4 02 00 00 e8 02 00 00 ................
014fec48 fc 02 00 00 14 03 00 00 - 24 03 00 00 00 00 00 00 ........$.......
014fec58 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fec68 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fec78 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fec88 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fec98 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014feca8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fecb8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fecc8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fecd8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fece8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fecf8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fed08 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
014fed18 00 00 00 00 38 cf 19 00 - d8 4f 1e 00 08 3e 1e 00 ....8....O...>..
Копия памяти для потока 0x5bc
eax=77c1eba0 ebx=00000003 ecx=00000000 edx=00000000 esi=77f837a7 edi=00000003
eip=77f837b2 esp=0161ff20 ebp=0161ff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
функция: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:020ad4f3=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0161FF6C 77E8A31D 0161FF44 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
00000000 00000000 00000000 00000000 00000000 00000000 kernel32!WaitForMultipleObjects
*----> Копия необработанного стека <----*
0161ff20 b7 7a e8 77 03 00 00 00 - 44 ff 61 01 01 00 00 00 .z.w....D.a.....
0161ff30 00 00 00 00 00 00 00 00 - b0 00 c6 77 00 00 00 00 ...........w....
0161ff40 f6 76 e8 77 54 02 00 00 - 58 02 00 00 98 02 00 00 .v.wT...X.......
0161ff50 00 00 00 00 00 00 00 00 - f0 90 14 00 16 00 18 00 ................
0161ff60 24 ed c1 77 00 00 00 00 - 08 ff 61 01 00 00 00 00 $..w......a.....
0161ff70 1d a3 e8 77 44 ff 61 01 - 01 00 00 00 00 00 00 00 ...wD.a.........
0161ff80 00 00 00 00 00 00 00 00 - 2c ec c1 77 03 00 00 00 ........,..w....
0161ff90 4c 01 c6 77 00 00 00 00 - ff ff ff ff 58 c9 12 00 L..w........X...
0161ffa0 e6 7e f8 77 ec ff 61 01 - 00 00 00 00 00 00 00 00 .~.w..a.........
0161ffb0 03 00 00 00 00 00 c1 77 - dd 87 e8 77 00 00 00 00 .......w...w....
0161ffc0 58 c9 12 00 e6 7e f8 77 - 00 00 00 00 00 a0 fd 7f X....~.w........
0161ffd0 00 00 00 00 c0 ff 61 01 - 00 00 00 00 ff ff ff ff ......a.........
0161ffe0 56 18 ea 77 88 ae e8 77 - 00 00 00 00 00 00 00 00 V..w...w........
0161fff0 00 00 00 00 a0 eb c1 77 - 00 00 00 00 00 00 00 00 .......w........
01620000 43 6c 69 65 6e 74 20 55 - 72 6c 43 61 63 68 65 20 Client UrlCache
01620010 4d 4d 46 20 56 65 72 20 - 35 2e 32 00 00 00 02 00 MMF Ver 5.2.....
01620020 00 50 00 00 80 03 00 00 - 46 02 00 00 00 00 00 00 .P......F.......
01620030 00 00 10 00 00 00 00 00 - 00 c0 12 00 00 00 00 00 ................
01620040 00 10 00 00 00 00 00 00 - 04 00 00 00 26 00 00 00 ............&...
01620050 4f 58 45 5a 53 4c 59 33 - 26 00 00 00 4b 39 4d 4e OXEZSLY3&...K9MN
Исключение в приложении:
Прил.: svchost.exe (pid=380)
Время: 07.04.2004 @ 21:50:33.838
Номер: c0000005 (нарушение прав доступа)
*----> Сведения о системе <----*
Имя компьютера: 637B2E67CE1A4D8
Имя пользователя: SYSTEM
Число процессоров: 1
Тип процессора: x86 Family 6 Model 8 Stepping 10
Версия Windows 2000: 5.0
Текущая сборка: 2195
Пакет обновления: 3
Текущий тип: Uniprocessor Free
Зарегистрированная организация:
Зарегистрированный пользователь: Ник
*----> Список задач <----*
0 Idle.exe
8 System.exe
132 smss.exe
160 csrss.exe
156 winlogon.exe
208 services.exe
220 lsass.exe
380 svchost.exe
408 ccEvtMgr.exe
492 spoolsv.exe
524 DkService.exe
540 svchost.exe
576 navapsvc.exe
600 nvsvc32.exe
656 regsvc.exe
688 MSTask.exe
712 WinMgmt.exe
776 svchost.exe
904 Explorer.exe
988 ccApp.exe
1036 hpztsb07.exe
1068 internat.exe
956 THEBAT.exe
924 ntvdm.exe
792 winamp.exe
1412 AUpdate.exe
1428 LUCOMS~1.exe
1392 dmaster.exe
1560 drwtsn32.exe
0 _Total.exe
(01000000 - 01005000)
(77F80000 - 77FFC000)
(77DB0000 - 77E0D000)
(77E80000 - 77F37000)
(770F0000 - 77161000)
(77A50000 - 77B45000)
(77F40000 - 77F7C000)
(77E10000 - 77E75000)
(76130000 - 7616D000)
(78000000 - 78046000)
(77C10000 - 77C6E000)
(74FC0000 - 74FD3000)
(74FB0000 - 74FB8000)
(77BE0000 - 77BEF000)
(74F80000 - 74F93000)
(77980000 - 779A4000)
(74FE0000 - 74FE9000)
(74F60000 - 74F7D000)
(74FA0000 - 74FA7000)
(77810000 - 7781C000)
(772F0000 - 77303000)
(774D0000 - 774D5000)
(772D0000 - 772E7000)
(750E0000 - 750F0000)
(75100000 - 7514F000)
(75150000 - 75156000)
(77950000 - 7797B000)
(779B0000 - 77A4B000)
(77360000 - 7738F000)
(77330000 - 77352000)
(77800000 - 7780E000)
(77860000 - 778EE000)
(77490000 - 774C2000)
(77470000 - 77481000)
(774E0000 - 77502000)
(77B50000 - 77BD9000)
(77C70000 - 77CBA000)
(77310000 - 77329000)
(777B0000 - 777B8000)
(777C0000 - 777C5000)
(68C10000 - 68C95000)
(782D0000 - 782EE000)
(00C00000 - 00DFD000)
Копия памяти для потока 0x178
eax=00000004 ebx=00000000 ecx=00000000 edx=00000000 esi=00000000 edi=00000048
eip=77f839eb esp=0006fc38 ebp=0006fca8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
функция: NtReadFile
77f839e0 b8a1000000 mov eax,0xa1
77f839e5 8d542404 lea edx,[esp+0x4] ss:00aed20b=????????
77f839e9 cd2e int 2e
77f839eb c22400 ret 0x24
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0006FCA8 77DB2252 00000048 0006FD80 00000216 0006FCD0 ntdll!NtReadFile
0006FCD4 77DB20F2 00000048 0006FD80 00000216 0006FD0C advapi32!StartServiceCtrlDispatcherW
0006FD50 77DB1E43 00000048 0006FD80 00000216 00074920 advapi32!StartServiceCtrlDispatcherW
0006FFB0 0100113D 00074920 0000006E 00720044 77E9CA90 advapi32!StartServiceCtrlDispatcherW
0006FFF0 00000000 010010B8 00000000 000000C8 00000100 svchost!<nosymbols>
*----> Копия необработанного стека <----*
0006fc38 07 7f e8 77 48 00 00 00 - 00 00 00 00 00 00 00 00 ...wH...........
0006fc48 00 00 00 00 80 fc 06 00 - 80 fd 06 00 16 02 00 00 ................
0006fc58 00 00 00 00 00 00 00 00 - 0c fd 06 00 7c 7e e8 77 ............|~.w
0006fc68 80 fd 06 00 00 00 00 00 - 01 00 00 00 90 55 07 00 .............U..
0006fc78 94 fd 06 00 00 00 00 00 - 70 00 00 00 38 49 07 00 ........p...8I..
0006fc88 7c 01 00 00 00 00 00 00 - 60 fc 06 00 40 fd 06 00 |.......`...@...
0006fc98 40 fd 06 00 56 18 ea 77 - 38 7f e8 77 ff ff ff ff @...V..w8..w....
0006fca8 d4 fc 06 00 52 22 db 77 - 48 00 00 00 80 fd 06 00 ....R".wH.......
0006fcb8 16 02 00 00 d0 fc 06 00 - 00 00 00 00 90 55 07 00 .............U..
0006fcc8 80 fd 06 00 00 00 00 00 - 00 00 00 00 50 fd 06 00 ............P...
0006fcd8 f2 20 db 77 48 00 00 00 - 80 fd 06 00 16 02 00 00 . .wH...........
0006fce8 0c fd 06 00 20 49 07 00 - 00 00 00 00 00 f0 fd 7f .... I..........
0006fcf8 8b 96 0f 77 78 49 07 00 - 94 fd 06 00 00 00 00 00 ...wxI..........
0006fd08 3c fd 06 00 00 00 00 00 - 00 00 00 00 00 00 00 00 <...............
0006fd18 40 4f 07 00 38 49 07 00 - 80 01 00 00 70 00 65 00 @O..8I......p.e.
0006fd28 32 00 00 00 01 00 00 00 - 30 24 db 77 00 00 00 00 2.......0$.w....
0006fd38 ec fc 06 00 78 49 07 00 - a0 ff 06 00 fb 19 db 77 ....xI.........w
0006fd48 40 56 db 77 ff ff ff ff - b0 ff 06 00 43 1e db 77 @V.w........C..w
0006fd58 48 00 00 00 80 fd 06 00 - 16 02 00 00 20 49 07 00 H........... I..
0006fd68 88 48 07 00 00 f0 fd 7f - 00 00 00 00 64 fd 06 00 .H..........d...
Копия памяти для потока 0x180
eax=00000000 ebx=00000000 ecx=004622d8 edx=00000000 esi=77f8318c edi=0043fe88
eip=77f83197 esp=0043fe74 ebp=0043fe90 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
функция: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,[esp+0x4] ss:00ebd447=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0043FE90 7613F62A 00009F6C 00000000 000006B3 00000002 ntdll!NtDelayExecution
0043FEB8 7613D8FC 00000000 00074F4C 00000000 01003000 rpcss!<nosymbols>
0043FF84 0100157B 00000001 00074F48 00000000 00074F40 rpcss!<nosymbols>
7613D74E 0000B4EC 33565300 5D8957DB 019DE8FC 358B0000 svchost!<nosymbols>
*----> Копия необработанного стека <----*
0043fe74 17 76 e8 77 00 00 00 00 - 88 fe 43 00 00 00 00 00 .v.w......C.....
0043fe84 15 5c be 00 40 95 ac e7 - ff ff ff ff b8 fe 43 00 .\..@.........C.
0043fe94 2a f6 13 76 6c 9f 00 00 - 00 00 00 00 b3 06 00 00 *..vl...........
0043fea4 02 00 00 00 00 00 00 00 - 30 05 00 00 91 c0 bd 00 ........0.......
0043feb4 d5 bf bd 00 84 ff 43 00 - fc d8 13 76 00 00 00 00 ......C....v....
0043fec4 4c 4f 07 00 00 00 00 00 - 00 30 00 01 72 4f 41 80 LO.......0..rOA.
0043fed4 d0 7e 8a 81 40 41 8a 81 - c4 bc 4f bc ca 08 45 80 .~..@A....O...E.
0043fee4 04 00 00 00 48 bd 76 81 - 66 41 4a 80 80 f3 06 00 ....H.v.fAJ.....
0043fef4 02 00 00 00 4c 4f 07 00 - 00 00 00 00 f0 48 07 00 ....LO.......H..
0043ff04 00 00 00 00 01 00 00 00 - a0 27 50 c0 7c 00 00 00 .........'P.|...
0043ff14 00 20 50 c0 00 00 00 00 - 00 00 00 00 3e 00 00 00 . P.........>...
0043ff24 01 00 00 00 00 20 50 c0 - 60 47 66 81 20 10 66 81 ..... P.`Gf. .f.
0043ff34 00 00 00 00 b0 11 66 81 - 40 32 07 00 46 02 00 00 ......f.@2..F...
0043ff44 a4 da 42 80 e0 95 06 80 - 80 11 66 81 20 10 66 81 ..B.......f. .f.
0043ff54 70 bc 4f bc 28 11 f4 77 - 00 20 50 c0 00 00 00 00 p.O.(..w. P.....
0043ff64 c5 a0 e8 77 56 4f 07 00 - 01 00 00 00 80 00 00 00 ...wVO..........
0043ff74 ff ff ff ff f0 48 07 00 - fa 48 07 00 00 00 00 00 .....H...H......
0043ff84 4e d7 13 76 7b 15 00 01 - 01 00 00 00 48 4f 07 00 N..v{.......HO..
0043ff94 00 00 00 00 40 4f 07 00 - ec ff 43 00 40 4f 07 00 ....@O....C.@O..
0043ffa4 00 00 00 00 3e 24 db 77 - 01 00 00 00 48 4f 07 00 ....>$.w....HO..
Копия памяти для потока 0x188
eax=778021fe ebx=00000004 ecx=77db0260 edx=00000000 esi=77f837a7 edi=00000004
eip=77f837b2 esp=0090fd24 ebp=0090fd70 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
функция: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:0138d2f7=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0090FD70 77E8A31D 0090FD48 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
0090FFB4 77E887DD 00000005 00000000 000B000A 00096198 kernel32!WaitForMultipleObjects
0090FFEC 00000000 778021FE 00096198 00000000 000000C8 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
0090fd24 b7 7a e8 77 04 00 00 00 - 48 fd 90 00 01 00 00 00 .z.w....H.......
0090fd34 00 00 00 00 00 00 00 00 - 01 00 00 00 98 61 09 00 .............a..
0090fd44 01 00 00 00 08 01 00 00 - 0c 01 00 00 1c 01 00 00 ................
0090fd54 6c 01 00 00 00 00 00 00 - 00 6b 4a 80 00 00 00 00 l........kJ.....
0090fd64 30 fb 65 81 e0 39 8b 81 - 1c bc 4f bc b4 ff 90 00 0.e..9....O.....
0090fd74 1d a3 e8 77 48 fd 90 00 - 01 00 00 00 00 00 00 00 ...wH...........
0090fd84 00 00 00 00 00 00 00 00 - b2 22 80 77 04 00 00 00 .........".w....
0090fd94 b0 fe 90 00 00 00 00 00 - ff ff ff ff 98 61 09 00 .............a..
0090fda4 0a 00 0b 00 00 00 00 00 - 08 dd 32 e1 0c dd 32 e1 ..........2...2.
0090fdb4 40 41 8a 81 00 00 00 00 - 01 00 00 00 38 00 00 00 @A..........8...
0090fdc4 23 00 00 00 23 00 00 00 - 00 00 00 00 0a 00 0b 00 #...#...........
0090fdd4 98 61 09 00 00 6c f8 77 - 60 02 db 77 fe 21 80 77 .a...l.w`..w.!.w
0090fde4 00 00 00 00 85 87 e8 77 - 1b 00 00 00 00 02 00 00 .......w........
0090fdf4 fc ff 90 00 23 00 00 00 - 8c 4f 45 80 80 bb 4f bc ....#....OE...O.
0090fe04 68 c6 65 81 68 c6 65 81 - 40 00 00 00 24 bb 4f bc h.e.h.e.@...$.O.
0090fe14 d0 f8 44 80 00 47 66 81 - 00 00 00 00 00 00 00 00 ..D..Gf.........
0090fe24 28 3b 66 81 a6 24 49 80 - 28 3b 66 81 dc 00 00 00 (;f..$I.(;f.....
0090fe34 40 50 8a 81 03 00 10 00 - 68 c6 65 81 40 50 8a 81 @P......h.e.@P..
0090fe44 80 c6 65 81 68 c6 65 81 - 6c c6 65 81 40 41 8a 81 ..e.h.e.l.e.@A..
0090fe54 40 bd 4f bc 01 00 00 00 - 60 47 66 81 01 00 00 00 @.O.....`Gf.....
Копия памяти для потока 0x190
eax=000acc08 ebx=00451388 ecx=0095fd38 edx=000acc08 esi=000748f0 edi=0095f898
eip=e03c3a68 esp=0095f794 ebp=00580046 iopl=0 nv up ei pl nz ac po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000216
функция: <nosymbols>
e03c3a5e ???
e03c3a5f ???
e03c3a60 ???
e03c3a61 ???
e03c3a62 ???
e03c3a63 ???
e03c3a64 ???
e03c3a65 ???
e03c3a66 ???
e03c3a67 ???
СБОЙ -> e03c3a68 ???
e03c3a69 ???
e03c3a6a ???
e03c3a6b ???
e03c3a6c ???
e03c3a6d ???
e03c3a6e ???
e03c3a6f ???
e03c3a70 ???
e03c3a71 ???
e03c3a72 ???
e03c3a73 ???
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0095F790 0095F8A0 010013C0 000748F0 90909090 90909090 <nosymbols>
00580046 00000000 00000000 00000000 00000000 00000000 <nosymbols>
*----> Копия необработанного стека <----*
0095f794 a0 f8 95 00 c0 13 00 01 - f0 48 07 00 90 90 90 90 .........H......
0095f7a4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
0095f7b4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
0095f7c4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
0095f7d4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
0095f7e4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
0095f7f4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
0095f804 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
0095f814 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
0095f824 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
0095f834 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
0095f844 90 90 90 eb 19 5e 31 c9 - 81 e9 89 ff ff ff 81 36 .....^1........6
0095f854 80 bf 32 94 81 ee fc ff - ff ff e2 f2 eb 05 e8 e2 ..2.............
0095f864 ff ff ff 03 53 06 1f 74 - 57 75 95 80 bf bb 92 7f ....S..tWu......
0095f874 89 5a 1a ce b1 de 7c e1 - be 32 94 09 f9 3a 6b b6 .Z....|..2...:k.
0095f884 d7 9f 4d 85 71 da c6 81 - bf 32 1d c6 b3 5a f8 ec ..M.q....2...Z..
0095f894 bf 32 fc b3 8d 1c f0 e8 - c8 41 a6 df eb cd c2 88 .2.......A......
0095f8a4 36 74 90 7f 89 5a e6 7e - 0c 24 7c ad be 32 94 09 6t...Z.~.$|..2..
0095f8b4 f9 22 6b b6 d7 4c 4c 62 - cc da 8a 81 bf 32 1d c6 ."k..LLb.....2..
0095f8c4 ab cd e2 84 d7 f9 79 7c - 84 da 9a 81 bf 32 1d c6 ......y|.....2..
Копия памяти для потока 0x118
eax=00462b08 ebx=00bf9168 ecx=00000101 edx=00000000 esi=77f8318c edi=00a7ff88
eip=77f83197 esp=00a7ff74 ebp=00a7ff90 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
функция: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,[esp+0x4] ss:014fd547=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00A7FF90 76145902 0001D8A8 00000000 770F7D12 00077E50 ntdll!NtDelayExecution
00A7FFB4 77E887DD 00000000 770F7D12 00077E50 00000000 rpcss!<nosymbols>
00A7FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
Копия памяти для потока 0x220
eax=00abffb0 ebx=00bf9168 ecx=7ffd5000 edx=00000000 esi=77f8318c edi=00abff88
eip=77f83197 esp=00abff74 ebp=00abff90 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
функция: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,[esp+0x4] ss:0153d547=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00ABFF90 76145902 0001D8A8 00000000 770F7D12 00077E50 ntdll!NtDelayExecution
00ABFFB4 77E887DD 00000000 770F7D12 00077E50 00000000 rpcss!<nosymbols>
00ABFFEC 00000000 76145824 00000000 00000000 00000008 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
00abff74 17 76 e8 77 00 00 00 00 - 88 ff ab 00 8e 76 e8 77 .v.w.........v.w
00abff84 01 00 00 00 80 dd e0 b7 - ff ff ff ff b4 ff ab 00 ................
00abff94 02 59 14 76 a8 d8 01 00 - 00 00 00 00 12 7d 0f 77 .Y.v.........}.w
00abffa4 50 7e 07 00 00 00 00 00 - a8 bc bd 00 d5 bf bd 00 P~..............
00abffb4 ec ff ab 00 dd 87 e8 77 - 00 00 00 00 12 7d 0f 77 .......w.....}.w
00abffc4 50 7e 07 00 00 00 00 00 - 00 50 fd 7f 50 7e 07 00 P~.......P..P~..
00abffd4 c0 ff ab 00 50 7e 07 00 - ff ff ff ff 56 18 ea 77 ....P~......V..w
00abffe4 88 ae e8 77 00 00 00 00 - 00 00 00 00 00 00 00 00 ...w............
00abfff4 24 58 14 76 00 00 00 00 - 00 00 00 00 08 00 00 00 $X.v............
00ac0004 01 01 00 00 ee ff ee ff - 00 00 00 00 00 00 46 00 ..............F.
00ac0014 00 e0 0f 00 00 00 ac 00 - 00 01 00 00 40 00 ac 00 ............@...
00ac0024 00 00 bc 00 fe 00 00 00 - 01 00 00 00 88 05 46 00 ..............F.
00ac0034 00 00 00 00 48 0b ac 00 - 00 00 00 00 05 00 08 00 ....H...........
00ac0044 01 01 0c 00 80 01 ac 00 - 88 fd 46 00 4f 71 c2 72 ..........F.Oq.r
00ac0054 78 44 d3 11 b5 37 00 90 - 27 71 a4 35 3f 00 00 00 xD...7..'q.5?...
00ac0064 00 00 00 00 07 00 05 00 - 01 01 08 00 e0 e9 46 00 ..............F.
00ac0074 00 00 00 00 00 00 00 00 - 04 00 1c 00 7d 07 00 00 ............}...
00ac0084 3d 98 a5 2d d0 77 46 00 - 00 00 00 00 00 00 00 00 =..-.wF.........
00ac0094 23 c0 be 00 01 00 00 05 - 12 00 00 00 11 00 07 00 #...............
00ac00a4 01 01 08 00 90 35 13 76 - 01 00 00 00 70 40 46 00 .....5.v....p@F.
Копия памяти для потока 0x49c
eax=00000000 ebx=801b000e ecx=00462758 edx=00000000 esi=00079488 edi=000a1090
eip=77f83bb8 esp=00e4fe28 ebp=00e4ff74 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
функция: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:018cd3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00E4FF74 771020D9 77102528 00079488 76142C6E 00000000 ntdll!NtReplyWaitReceivePortEx
00E4FFA8 771024DA 00092B40 00E4FFEC 77E887DD 00090A48 rpcrt4!NdrConformantArrayMemorySize
00E4FFB4 77E887DD 00090A48 76142C6E 00000000 00090A48 rpcrt4!NdrConformantArrayMemorySize
00E4FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
Копия памяти для потока 0x4bc
eax=00000367 ebx=801b000e ecx=00000540 edx=00000000 esi=00079488 edi=000a1090
eip=77f83bb8 esp=00e8fe28 ebp=00e8ff74 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
функция: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:0190d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00E8FF74 771020D9 771025B9 00079488 00000000 00000000 ntdll!NtReplyWaitReceivePortEx
00E8FFA8 771024DA 00074D00 00E8FFEC 77E887DD 000863A8 rpcrt4!NdrConformantArrayMemorySize
00E8FFB4 77E887DD 000863A8 00000000 00000000 000863A8 rpcrt4!NdrConformantArrayMemorySize
00E8FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
Копия памяти для потока 0x4b8
eax=00ecfb6c ebx=801b000e ecx=00000000 edx=00000000 esi=00079488 edi=000a1090
eip=77f83bb8 esp=00ecfe28 ebp=00ecff74 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
функция: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:0194d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00ECFF74 771020D9 77102528 00079488 76143992 00000007 ntdll!NtReplyWaitReceivePortEx
00ECFFA8 771024DA 000ACC28 00ECFFEC 77E887DD 000893B8 rpcrt4!NdrConformantArrayMemorySize
00ECFFB4 77E887DD 000893B8 76143992 00000007 000893B8 rpcrt4!NdrConformantArrayMemorySize
00ECFFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
Копия памяти для потока 0x55c
eax=76131ad0 ebx=800e0009 ecx=00f0f8bc edx=00000000 esi=00079488 edi=0008f7f8
eip=77f83bb8 esp=00f0fe28 ebp=00f0ff74 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
функция: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:0198d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00F0FF74 771020D9 77102528 00079488 00000000 000AD2A0 ntdll!NtReplyWaitReceivePortEx
00F0FFA8 771024DA 0009F980 00F0FFEC 77E887DD 000ADF40 rpcrt4!NdrConformantArrayMemorySize
00F0FFB4 77E887DD 000ADF40 00000000 000AD2A0 000ADF40 rpcrt4!NdrConformantArrayMemorySize
00F0FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
Копия памяти для потока 0x5cc
eax=00000000 ebx=00007530 ecx=7ffd4000 edx=00000000 esi=00075090 edi=00007530
eip=77f837dc esp=004afebc ebp=004afee4 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000297
функция: ZwRemoveIoCompletion
77f837d1 b8a8000000 mov eax,0xa8
77f837d6 8d542404 lea edx,[esp+0x4] ss:00f2d48f=????????
77f837da cd2e int 2e
77f837dc c21400 ret 0x14
77f837df 53 push ebx
77f837e0 f7e1 mul ecx
77f837e2 8bd8 mov ebx,eax
77f837e4 8b442408 mov eax,[esp+0x8] ss:00f2d48f=????????
77f837e8 f7642414 mul dword ptr [esp+0x14] ss:00f2d48f=????????
77f837ec 03d8 add ebx,eax
77f837ee 8b442408 mov eax,[esp+0x8] ss:00f2d48f=????????
77f837f2 f7e1 mul ecx
77f837f4 03d3 add edx,ebx
77f837f6 5b pop ebx
77f837f7 c21000 ret 0x10
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
004AFEE4 77100090 0000005C 004AFF1C 004AFF0C 004AFF14 ntdll!ZwRemoveIoCompletion
004AFF20 77108565 00007530 004AFF60 004AFF5C 004AFF70 rpcrt4!PerformRpcInitialization
004AFF74 77108444 77102528 00075090 0007A080 74F79380 rpcrt4!NdrClientContextUnmarshall
004AFFA8 771024DA 0008DEE8 004AFFEC 77E887DD 00079688 rpcrt4!NdrClientContextUnmarshall
004AFFB4 77E887DD 00079688 0007A080 74F79380 00079688 rpcrt4!NdrConformantArrayMemorySize
004AFFEC 00000000 771024C2 00079688 00000000 000000C8 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
004afebc 2e 79 e8 77 5c 00 00 00 - 0c ff 4a 00 fc fe 4a 00 .y.w\.....J...J.
004afecc dc fe 4a 00 d4 fe 4a 00 - 00 5d 1e ee ff ff ff ff ..J...J..]......
004afedc 00 81 08 00 00 00 00 00 - 20 ff 4a 00 90 00 10 77 ........ .J....w
004afeec 5c 00 00 00 1c ff 4a 00 - 0c ff 4a 00 14 ff 4a 00 \.....J...J...J.
004afefc 30 75 00 00 30 75 00 00 - 90 50 07 00 b2 73 e8 77 0u..0u...P...s.w
004aff0c 00 00 00 00 5c 00 00 00 - b0 b9 0f 77 12 10 02 c0 ....\......w....
004aff1c 00 00 00 00 74 ff 4a 00 - 65 85 10 77 30 75 00 00 ....t.J.e..w0u..
004aff2c 60 ff 4a 00 5c ff 4a 00 - 70 ff 4a 00 58 ff 4a 00 `.J.\.J.p.J.X.J.
004aff3c 64 ff 4a 00 6c ff 4a 00 - 88 4c 07 00 e8 de 08 00 d.J.l.J..L......
004aff4c 88 96 07 00 5c 00 00 00 - 01 00 00 00 78 5c 2c bb ....\.......x\,.
004aff5c 12 10 02 c0 00 00 00 00 - 00 00 00 00 ac 5c 2c bb .............\,.
004aff6c 00 00 00 00 5c 00 00 00 - a8 ff 4a 00 44 84 10 77 ....\.....J.D..w
004aff7c 28 25 10 77 90 50 07 00 - 80 a0 07 00 80 93 f7 74 (%.w.P.........t
004aff8c 88 96 07 00 db 0d 43 80 - 60 47 66 81 a0 5d 4a 81 ......C.`Gf..]J.
004aff9c ff ff ff ff 47 0f 43 80 - 88 96 07 00 b4 ff 4a 00 ....G.C.......J.
004affac da 24 10 77 e8 de 08 00 - ec ff 4a 00 dd 87 e8 77 .$.w......J....w
004affbc 88 96 07 00 80 a0 07 00 - 80 93 f7 74 88 96 07 00 ...........t....
004affcc 00 40 fd 7f bc fc 95 00 - c0 ff 4a 00 bc fc 95 00 .@........J.....
004affdc ff ff ff ff 56 18 ea 77 - 88 ae e8 77 00 00 00 00 ....V..w...w....
004affec 00 00 00 00 00 00 00 00 - c2 24 10 77 88 96 07 00 .........$.w....
Исключение в приложении:
Прил.: svchost.exe (pid=380)
Время: 08.04.2004 @ 22:15:44.781
Номер: c0000005 (нарушение прав доступа)
*----> Сведения о системе <----*
Имя компьютера: 637B2E67CE1A4D8
Имя пользователя: SYSTEM
Число процессоров: 1
Тип процессора: x86 Family 6 Model 8 Stepping 10
Версия Windows 2000: 5.0
Текущая сборка: 2195
Пакет обновления: 3
Текущий тип: Uniprocessor Free
Зарегистрированная организация:
Зарегистрированный пользователь: Ник
*----> Список задач <----*
0 Idle.exe
8 System.exe
132 smss.exe
160 csrss.exe
156 winlogon.exe
208 services.exe
220 lsass.exe
380 svchost.exe
408 ccEvtMgr.exe
492 spoolsv.exe
524 DkService.exe
540 svchost.exe
576 navapsvc.exe
604 nvsvc32.exe
660 regsvc.exe
688 MSTask.exe
780 WinMgmt.exe
816 svchost.exe
960 ccApp.exe
984 internat.exe
1104 Explorer.exe
920 winamp.exe
324 mozilla.exe
924 dmaster.exe
1388 cmd.exe
1296 drwtsn32.exe
0 _Total.exe
(01000000 - 01005000)
(77F80000 - 77FFC000)
(77DB0000 - 77E0D000)
(77E80000 - 77F37000)
(770F0000 - 77161000)
(77A50000 - 77B45000)
(77F40000 - 77F7C000)
(77E10000 - 77E75000)
(76130000 - 7616D000)
(78000000 - 78046000)
(77C10000 - 77C6E000)
(74FC0000 - 74FD3000)
(74FB0000 - 74FB8000)
(77BE0000 - 77BEF000)
(74F80000 - 74F93000)
(77980000 - 779A4000)
(74FE0000 - 74FE9000)
(74F60000 - 74F7D000)
(74FA0000 - 74FA7000)
(77810000 - 7781C000)
(772F0000 - 77303000)
(774D0000 - 774D5000)
(772D0000 - 772E7000)
(750E0000 - 750F0000)
(75100000 - 7514F000)
(75150000 - 75156000)
(77950000 - 7797B000)
(779B0000 - 77A4B000)
(77360000 - 7738F000)
(77330000 - 77352000)
(77800000 - 7780E000)
(77860000 - 778EE000)
(77490000 - 774C2000)
(77470000 - 77481000)
(774E0000 - 77502000)
(77B50000 - 77BD9000)
(77C70000 - 77CBA000)
(77310000 - 77329000)
(777B0000 - 777B8000)
(777C0000 - 777C5000)
(68C10000 - 68C95000)
(782D0000 - 782EE000)
Копия памяти для потока 0x178
eax=00000004 ebx=00000000 ecx=00000000 edx=00000000 esi=00000000 edi=00000048
eip=77f839eb esp=0006fc38 ebp=0006fca8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
функция: NtReadFile
77f839e0 b8a1000000 mov eax,0xa1
77f839e5 8d542404 lea edx,[esp+0x4] ss:00aed20b=????????
77f839e9 cd2e int 2e
77f839eb c22400 ret 0x24
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0006FCA8 77DB2252 00000048 0006FD80 00000216 0006FCD0 ntdll!NtReadFile
0006FCD4 77DB20F2 00000048 0006FD80 00000216 0006FD0C advapi32!StartServiceCtrlDispatcherW
0006FD50 77DB1E43 00000048 0006FD80 00000216 00074920 advapi32!StartServiceCtrlDispatcherW
0006FFB0 0100113D 00074920 0000006E 00720044 77E9CA90 advapi32!StartServiceCtrlDispatcherW
0006FFF0 00000000 010010B8 00000000 000000C8 00000100 svchost!<nosymbols>
*----> Копия необработанного стека <----*
0006fc38 07 7f e8 77 48 00 00 00 - 00 00 00 00 00 00 00 00 ...wH...........
0006fc48 00 00 00 00 80 fc 06 00 - 80 fd 06 00 16 02 00 00 ................
0006fc58 00 00 00 00 00 00 00 00 - 0c fd 06 00 7c 7e e8 77 ............|~.w
0006fc68 80 fd 06 00 00 00 00 00 - 01 00 00 00 90 55 07 00 .............U..
0006fc78 94 fd 06 00 00 00 00 00 - 70 00 00 00 38 49 07 00 ........p...8I..
0006fc88 7c 01 00 00 00 00 00 00 - 60 fc 06 00 40 fd 06 00 |.......`...@...
0006fc98 40 fd 06 00 56 18 ea 77 - 38 7f e8 77 ff ff ff ff @...V..w8..w....
0006fca8 d4 fc 06 00 52 22 db 77 - 48 00 00 00 80 fd 06 00 ....R".wH.......
0006fcb8 16 02 00 00 d0 fc 06 00 - 00 00 00 00 90 55 07 00 .............U..
0006fcc8 80 fd 06 00 00 00 00 00 - 00 00 00 00 50 fd 06 00 ............P...
0006fcd8 f2 20 db 77 48 00 00 00 - 80 fd 06 00 16 02 00 00 . .wH...........
0006fce8 0c fd 06 00 20 49 07 00 - 00 00 00 00 00 f0 fd 7f .... I..........
0006fcf8 8b 96 0f 77 78 49 07 00 - 94 fd 06 00 00 00 00 00 ...wxI..........
0006fd08 3c fd 06 00 00 00 00 00 - 00 00 00 00 00 00 00 00 <...............
0006fd18 40 4f 07 00 38 49 07 00 - 80 01 00 00 70 00 65 00 @O..8I......p.e.
0006fd28 32 00 00 00 01 00 00 00 - 30 24 db 77 00 00 00 00 2.......0$.w....
0006fd38 ec fc 06 00 78 49 07 00 - a0 ff 06 00 fb 19 db 77 ....xI.........w
0006fd48 40 56 db 77 ff ff ff ff - b0 ff 06 00 43 1e db 77 @V.w........C..w
0006fd58 48 00 00 00 80 fd 06 00 - 16 02 00 00 20 49 07 00 H........... I..
0006fd68 88 48 07 00 00 f0 fd 7f - 00 00 00 00 64 fd 06 00 .H..........d...
Копия памяти для потока 0x180
eax=00082eb8 ebx=00000000 ecx=00086290 edx=00000000 esi=77f8318c edi=0043fe88
eip=77f83197 esp=0043fe74 ebp=0043fe90 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
функция: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,[esp+0x4] ss:00ebd447=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0043FE90 7613F62A 0001D8A8 00000000 000006B3 00000002 ntdll!NtDelayExecution
0043FEB8 7613D8FC 00000000 00074F4C 00000000 01003000 rpcss!<nosymbols>
0043FF84 0100157B 00000001 00074F48 00000000 00074F40 rpcss!<nosymbols>
7613D74E 0000B4EC 33565300 5D8957DB 019DE8FC 358B0000 svchost!<nosymbols>
*----> Копия необработанного стека <----*
0043fe74 17 76 e8 77 00 00 00 00 - 88 fe 43 00 e4 c2 15 76 .v.w......C....v
0043fe84 71 80 d9 00 80 dd e0 b7 - ff ff ff ff b8 fe 43 00 q.............C.
0043fe94 2a f6 13 76 a8 d8 01 00 - 00 00 00 00 b3 06 00 00 *..v............
0043fea4 02 00 00 00 00 00 00 00 - 70 05 00 00 b1 ab d7 00 ........p.......
0043feb4 8d 0b d7 00 84 ff 43 00 - fc d8 13 76 00 00 00 00 ......C....v....
0043fec4 4c 4f 07 00 00 00 00 00 - 00 30 00 01 72 4f 41 80 LO.......0..rOA.
0043fed4 d0 7e 8a 81 40 41 8a 81 - c4 bc 4f bc ca 08 45 80 .~..@A....O...E.
0043fee4 04 00 00 00 c8 39 77 81 - 66 41 4a 80 80 f3 06 00 .....9w.fAJ.....
0043fef4 02 00 00 00 4c 4f 07 00 - 00 00 00 00 f0 48 07 00 ....LO.......H..
0043ff04 00 00 00 00 01 00 00 00 - a0 27 50 c0 7c 00 00 00 .........'P.|...
0043ff14 00 20 50 c0 00 00 00 00 - 00 00 00 00 3e 00 00 00 . P.........>...
0043ff24 01 00 00 00 00 20 50 c0 - 20 d4 66 81 e0 a5 66 81 ..... P. .f...f.
0043ff34 00 00 00 00 70 a7 66 81 - 40 32 07 00 46 02 00 00 ....p.f.@2..F...
0043ff44 a4 da 42 80 e0 95 06 80 - 40 a7 66 81 e0 a5 66 81 ..B.....@.f...f.
0043ff54 70 bc 4f bc 28 11 f4 77 - 00 20 50 c0 00 00 00 00 p.O.(..w. P.....
0043ff64 c5 a0 e8 77 56 4f 07 00 - 01 00 00 00 80 00 00 00 ...wVO..........
0043ff74 ff ff ff ff f0 48 07 00 - fa 48 07 00 00 00 00 00 .....H...H......
0043ff84 4e d7 13 76 7b 15 00 01 - 01 00 00 00 48 4f 07 00 N..v{.......HO..
0043ff94 00 00 00 00 40 4f 07 00 - ec ff 43 00 40 4f 07 00 ....@O....C.@O..
0043ffa4 00 00 00 00 3e 24 db 77 - 01 00 00 00 48 4f 07 00 ....>$.w....HO..
Копия памяти для потока 0x188
eax=778021fe ebx=00000004 ecx=77db0260 edx=00000000 esi=77f837a7 edi=00000004
eip=77f837b2 esp=0090fd24 ebp=0090fd70 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
функция: NtWaitForMultipleObjects
77f837a7 b8e9000000 mov eax,0xe9
77f837ac 8d542404 lea edx,[esp+0x4] ss:0138d2f7=????????
77f837b0 cd2e int 2e
77f837b2 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0090FD70 77E8A31D 0090FD48 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
0090FFB4 77E887DD 00000005 00000000 000B000A 00096198 kernel32!WaitForMultipleObjects
0090FFEC 00000000 778021FE 00096198 00000000 000000C8 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
0090fd24 b7 7a e8 77 04 00 00 00 - 48 fd 90 00 01 00 00 00 .z.w....H.......
0090fd34 00 00 00 00 00 00 00 00 - 01 00 00 00 98 61 09 00 .............a..
0090fd44 01 00 00 00 04 01 00 00 - 08 01 00 00 18 01 00 00 ................
0090fd54 6c 01 00 00 00 00 00 00 - 00 6b 4a 80 00 00 00 00 l........kJ.....
0090fd64 d0 96 66 81 20 27 8b 81 - 1c bc 4f bc b4 ff 90 00 ..f. '....O.....
0090fd74 1d a3 e8 77 48 fd 90 00 - 01 00 00 00 00 00 00 00 ...wH...........
0090fd84 00 00 00 00 00 00 00 00 - b2 22 80 77 04 00 00 00 .........".w....
0090fd94 b0 fe 90 00 00 00 00 00 - ff ff ff ff 98 61 09 00 .............a..
0090fda4 0a 00 0b 00 00 00 00 00 - c8 1f 35 e1 cc 1f 35 e1 ..........5...5.
0090fdb4 40 41 8a 81 00 00 00 00 - 01 00 00 00 38 00 00 00 @A..........8...
0090fdc4 23 00 00 00 23 00 00 00 - 00 00 00 00 0a 00 0b 00 #...#...........
0090fdd4 98 61 09 00 00 6c f8 77 - 60 02 db 77 fe 21 80 77 .a...l.w`..w.!.w
0090fde4 00 00 00 00 85 87 e8 77 - 1b 00 00 00 00 02 00 00 .......w........
0090fdf4 fc ff 90 00 23 00 00 00 - 8c 4f 45 80 80 bb 4f bc ....#....OE...O.
0090fe04 c8 4b 66 81 c8 4b 66 81 - 40 00 00 00 24 bb 4f bc .Kf..Kf.@...$.O.
0090fe14 d0 f8 44 80 00 d4 66 81 - 00 00 00 00 00 00 00 00 ..D...f.........
0090fe24 c8 d6 66 81 a6 24 49 80 - c8 d6 66 81 d8 00 00 00 ..f..$I...f.....
0090fe34 40 50 8a 81 03 00 10 00 - c8 4b 66 81 40 50 8a 81 @P.......Kf.@P..
0090fe44 e0 4b 66 81 c8 4b 66 81 - cc 4b 66 81 40 41 8a 81 .Kf..Kf..Kf.@A..
0090fe54 40 bd 4f bc 01 00 00 00 - 20 d4 66 81 01 00 00 00 @.O..... .f.....
Копия памяти для потока 0x190
eax=00fd0000 ebx=00000000 ecx=00001000 edx=00000000 esi=77f8377b edi=000003a0
eip=77f83786 esp=0095f4fc ebp=0095f520 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
функция: NtWaitForSingleObject
77f8377b b8ea000000 mov eax,0xea
77f83780 8d542404 lea edx,[esp+0x4] ss:013dcacf=????????
77f83784 cd2e int 2e
77f83786 c20c00 ret 0xc
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0095F520 77E87837 000003A0 FFFFFFFF 00000000 0095F9AF ntdll!NtWaitForSingleObject
00580046 00000000 00000000 00000000 00000000 00000000 kernel32!WaitForSingleObject
*----> Копия необработанного стека <----*
0095f4fc 0f 78 e8 77 a0 03 00 00 - 00 00 00 00 00 00 00 00 .x.w............
0095f50c 94 f5 95 00 68 f7 95 00 - ec 04 00 00 40 f5 95 00 ....h.......@...
0095f51c 40 f5 95 00 46 00 58 00 - 37 78 e8 77 a0 03 00 00 @...F.X.7x.w....
0095f52c ff ff ff ff 00 00 00 00 - af f9 95 00 a0 03 00 00 ................
0095f53c ff ff ff ff a0 03 00 00 - fc 03 00 00 6c 05 00 00 ............l...
0095f54c 68 05 00 00 44 00 00 00 - 00 00 00 00 00 00 00 00 h...D...........
0095f55c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0095f56c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0095f57c 00 01 00 00 00 00 00 00 - 00 00 00 00 88 01 00 00 ................
0095f58c 88 01 00 00 88 01 00 00 - 63 6d 64 2e 65 78 65 00 ........cmd.exe.
0095f59c 02 00 11 5c 00 00 00 00 - 00 00 00 00 00 00 00 00 ...\............
0095f5ac 57 69 6e 53 6f 63 6b 20 - 32 2e 30 00 00 a0 fd 7f WinSock 2.0.....
0095f5bc 50 5e 13 76 f0 f5 95 00 - 00 00 00 00 e5 38 f8 77 P^.v.........8.w
0095f5cc 00 00 07 00 58 47 09 00 - 00 00 00 00 cc f5 95 00 ....XG..........
0095f5dc 88 06 07 00 80 f6 95 00 - 95 2b f8 77 20 39 f8 77 .........+.w 9.w
0095f5ec ff ff ff ff 90 f6 95 00 - 40 b7 fc 77 68 0e 07 00 ........@..wh...
0095f5fc 60 47 09 00 00 00 00 00 - 00 00 00 00 60 47 09 00 `G..........`G..
0095f60c 00 00 00 00 d8 05 02 00 - 16 01 00 00 ff ff ff ff ................
0095f61c 22 00 00 00 40 b7 fc 77 - 12 06 02 00 00 ac fd 7f "...@..w........
0095f62c 00 ac fd 7f 0c f7 95 00 - 00 18 ea 77 20 f4 95 00 ...........w ...
Копия памяти для потока 0x368
eax=00463de8 ebx=00d7ed5d ecx=00462600 edx=00000000 esi=77f8318c edi=00abff88
eip=77f83197 esp=00abff74 ebp=00abff90 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
функция: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,[esp+0x4] ss:0153d547=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00ABFF90 76145902 0001D8A8 00000000 770F7D12 00077E50 ntdll!NtDelayExecution
00ABFFB4 77E887DD 00000000 770F7D12 00077E50 00000000 rpcss!<nosymbols>
00ABFFEC 00000000 76145824 00000000 00000000 00000380 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
00abff74 17 76 e8 77 00 00 00 00 - 88 ff ab 00 8e 76 e8 77 .v.w.........v.w
00abff84 01 00 00 00 80 dd e0 b7 - ff ff ff ff b4 ff ab 00 ................
00abff94 02 59 14 76 a8 d8 01 00 - 00 00 00 00 12 7d 0f 77 .Y.v.........}.w
00abffa4 50 7e 07 00 00 00 00 00 - 9d 18 d6 00 8d 0b d7 00 P~..............
00abffb4 ec ff ab 00 dd 87 e8 77 - 00 00 00 00 12 7d 0f 77 .......w.....}.w
00abffc4 50 7e 07 00 00 00 00 00 - 00 70 fd 7f 50 7e 07 00 P~.......p..P~..
00abffd4 c0 ff ab 00 50 7e 07 00 - ff ff ff ff 56 18 ea 77 ....P~......V..w
00abffe4 88 ae e8 77 00 00 00 00 - 00 00 00 00 00 00 00 00 ...w............
00abfff4 24 58 14 76 00 00 00 00 - 00 00 00 00 80 03 00 00 $X.v............
00ac0004 00 10 00 00 00 00 00 00 - 04 00 00 00 00 00 00 00 ................
00ac0014 35 00 00 00 19 00 00 00 - 08 00 00 00 00 00 00 00 5...............
00ac0024 00 00 00 00 30 0e ac 00 - 30 00 ac 00 00 00 00 00 ....0...0.......
00ac0034 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00ac0044 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00ac0054 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00ac0064 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00ac0074 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00ac0084 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00ac0094 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00ac00a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
Копия памяти для потока 0x4b0
eax=004676d4 ebx=04910006 ecx=004676d4 edx=00000000 esi=00079488 edi=00000100
eip=77f83bb8 esp=00ecfe28 ebp=00ecff74 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
функция: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:0194d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00ECFF74 771020D9 77102528 00079488 76142C6E 00000000 ntdll!NtReplyWaitReceivePortEx
00ECFFA8 771024DA 000894A0 00ECFFEC 77E887DD 000894C8 rpcrt4!NdrConformantArrayMemorySize
00ECFFB4 77E887DD 000894C8 76142C6E 00000000 000894C8 rpcrt4!NdrConformantArrayMemorySize
00ECFFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
Копия памяти для потока 0x4e0
eax=00000001 ebx=00d7ed5d ecx=0009f2a8 edx=00000000 esi=77f8318c edi=00f0ff88
eip=77f83197 esp=00f0ff74 ebp=00f0ff90 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
функция: NtDelayExecution
77f8318c b832000000 mov eax,0x32
77f83191 8d542404 lea edx,[esp+0x4] ss:0198d547=????????
77f83195 cd2e int 2e
77f83197 c20800 ret 0x8
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00F0FF90 76145902 0001D8A8 00000000 770F7D12 00077E50 ntdll!NtDelayExecution
00F0FFB4 77E887DD 00000000 770F7D12 00077E50 00000000 rpcss!<nosymbols>
00F0FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
Копия памяти для потока 0x220
eax=00000180 ebx=03700009 ecx=00000002 edx=00000000 esi=00079488 edi=00000100
eip=77f83bb8 esp=00f4fe28 ebp=00f4ff74 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
функция: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:019cd3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00F4FF74 771020D9 77102528 00079488 00000000 00000000 ntdll!NtReplyWaitReceivePortEx
00F4FFA8 771024DA 0008E170 00F4FFEC 77E887DD 00079688 rpcrt4!NdrConformantArrayMemorySize
00F4FFB4 77E887DD 00079688 00000000 00000000 00079688 rpcrt4!NdrConformantArrayMemorySize
00F4FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
Копия памяти для потока 0x224
eax=00000038 ebx=804e000d ecx=004625d0 edx=00000000 esi=00079488 edi=000aef38
eip=77f83bb8 esp=00f8fe28 ebp=00f8ff74 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
функция: NtReplyWaitReceivePortEx
77f83bad b8ac000000 mov eax,0xac
77f83bb2 8d542404 lea edx,[esp+0x4] ss:01a0d3fb=????????
77f83bb6 cd2e int 2e
77f83bb8 c21400 ret 0x14
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00F8FF74 771020D9 77102528 00079488 00000000 00000000 ntdll!NtReplyWaitReceivePortEx
00F8FFA8 771024DA 000924A8 00F8FFEC 77E887DD 0008FCC0 rpcrt4!NdrConformantArrayMemorySize
00F8FFB4 77E887DD 0008FCC0 00000000 00000000 0008FCC0 rpcrt4!NdrConformantArrayMemorySize
00F8FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!GetModuleFileNameA
Копия памяти для потока 0x514
eax=000ae0f0 ebx=00452870 ecx=00fcfd38 edx=000ae0f0 esi=000748f0 edi=00fcf898
eip=e0a33a68 esp=00fcf794 ebp=00580046 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
функция: <nosymbols>
e0a33a5e ???
e0a33a5f ???
e0a33a60 ???
e0a33a61 ???
e0a33a62 ???
e0a33a63 ???
e0a33a64 ???
e0a33a65 ???
e0a33a66 ???
e0a33a67 ???
СБОЙ -> e0a33a68 ???
e0a33a69 ???
e0a33a6a ???
e0a33a6b ???
e0a33a6c ???
e0a33a6d ???
e0a33a6e ???
e0a33a6f ???
e0a33a70 ???
e0a33a71 ???
e0a33a72 ???
e0a33a73 ???
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00FCF790 00FCF8A0 010013C0 000748F0 90909090 90909090 <nosymbols>
00580046 00000000 00000000 00000000 00000000 00000000 <nosymbols>
*----> Копия необработанного стека <----*
00fcf794 a0 f8 fc 00 c0 13 00 01 - f0 48 07 00 90 90 90 90 .........H......
00fcf7a4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
00fcf7b4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
00fcf7c4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
00fcf7d4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
00fcf7e4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
00fcf7f4 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
00fcf804 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
00fcf814 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
00fcf824 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
00fcf834 90 90 90 90 90 90 90 90 - 90 90 90 90 90 90 90 90 ................
00fcf844 90 90 90 eb 19 5e 31 c9 - 81 e9 89 ff ff ff 81 36 .....^1........6
00fcf854 80 bf 32 94 81 ee fc ff - ff ff e2 f2 eb 05 e8 e2 ..2.............
00fcf864 ff ff ff 03 53 06 1f 74 - 57 75 95 80 bf bb 92 7f ....S..tWu......
00fcf874 89 5a 1a ce b1 de 7c e1 - be 32 94 09 f9 3a 6b b6 .Z....|..2...:k.
00fcf884 d7 9f 4d 85 71 da c6 81 - bf 32 1d c6 b3 5a f8 ec ..M.q....2...Z..
00fcf894 bf 32 fc b3 8d 1c f0 e8 - c8 41 a6 df eb cd c2 88 .2.......A......
00fcf8a4 36 74 90 7f 89 5a e6 7e - 0c 24 7c ad be 32 94 09 6t...Z.~.$|..2..
00fcf8b4 f9 22 6b b6 d7 4c 4c 62 - cc da 8a 81 bf 32 1d c6 ."k..LLb.....2..
00fcf8c4 ab cd e2 84 d7 f9 79 7c - 84 da 9a 81 bf 32 1d c6 ......y|.....2..
Копия памяти для потока 0x570
eax=771024c2 ebx=00007530 ecx=00000002 edx=00000000 esi=00075090 edi=00007530
eip=77f837dc esp=004afebc ebp=004afee4 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000297
функция: ZwRemoveIoCompletion
77f837d1 b8a8000000 mov eax,0xa8
77f837d6 8d542404 lea edx,[esp+0x4] ss:00f2d48f=????????
77f837da cd2e int 2e
77f837dc c21400 ret 0x14
77f837df 53 push ebx
77f837e0 f7e1 mul ecx
77f837e2 8bd8 mov ebx,eax
77f837e4 8b442408 mov eax,[esp+0x8] ss:00f2d48f=????????
77f837e8 f7642414 mul dword ptr [esp+0x14] ss:00f2d48f=????????
77f837ec 03d8 add ebx,eax
77f837ee 8b442408 mov eax,[esp+0x8] ss:00f2d48f=????????
77f837f2 f7e1 mul ecx
77f837f4 03d3 add edx,ebx
77f837f6 5b pop ebx
77f837f7 c21000 ret 0x10
*----> Обратная трассировка стека <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
004AFEE4 77100090 00000058 004AFF1C 004AFF0C 004AFF14 ntdll!ZwRemoveIoCompletion
004AFF20 77108565 00007530 004AFF60 004AFF5C 004AFF70 rpcrt4!PerformRpcInitialization
004AFF74 77108444 77102528 00075090 0007A080 74F79380 rpcrt4!NdrClientContextUnmarshall
004AFFA8 771024DA 000AC8C8 004AFFEC 77E887DD 000AEE98 rpcrt4!NdrClientContextUnmarshall
004AFFB4 77E887DD 000AEE98 0007A080 74F79380 000AEE98 rpcrt4!NdrConformantArrayMemorySize
004AFFEC 00000000 771024C2 000AEE98 00000000 000000C8 kernel32!GetModuleFileNameA
*----> Копия необработанного стека <----*
004afebc 2e 79 e8 77 58 00 00 00 - 0c ff 4a 00 fc fe 4a 00 .y.wX.....J...J.
004afecc dc fe 4a 00 d4 fe 4a 00 - 00 5d 1e ee ff ff ff ff ..J...J..]......
004afedc e8 0f 0b 00 00 00 00 00 - 20 ff 4a 00 90 00 10 77 ........ .J....w
004afeec 58 00 00 00 1c ff 4a 00 - 0c ff 4a 00 14 ff 4a 00 X.....J...J...J.
004afefc 30 75 00 00 30 75 00 00 - 90 50 07 00 b2 73 e8 77 0u..0u...P...s.w
004aff0c 00 00 00 00 58 00 00 00 - b0 b9 0f 77 12 10 02 c0 ....X......w....
004aff1c 00 00 00 00 74 ff 4a 00 - 65 85 10 77 30 75 00 00 ....t.J.e..w0u..
004aff2c 60 ff 4a 00 5c ff 4a 00 - 70 ff 4a 00 58 ff 4a 00 `.J.\.J.p.J.X.J.
004aff3c 64 ff 4a 00 6c ff 4a 00 - 88 4c 07 00 c8 c8 0a 00 d.J.l.J..L......
004aff4c 98 ee 0a 00 58 00 00 00 - 04 00 00 00 85 26 40 80 ....X........&@.
004aff5c 12 10 02 c0 00 00 00 00 - 00 00 00 00 ac ac 3a bc ..............:.
004aff6c 00 00 00 00 58 00 00 00 - a8 ff 4a 00 44 84 10 77 ....X.....J.D..w
004aff7c 28 25 10 77 90 50 07 00 - 80 a0 07 00 80 93 f7 74 (%.w.P.........t
004aff8c 98 ee 0a 00 db 0d 43 80 - 20 d4 66 81 00 1c 4f 81 ......C. .f...O.
004aff9c ff ff ff ff 47 0f 43 80 - 98 ee 0a 00 b4 ff 4a 00 ....G.C.......J.
004affac da 24 10 77 c8 c8 0a 00 - ec ff 4a 00 dd 87 e8 77 .$.w......J....w
004affbc 98 ee 0a 00 80 a0 07 00 - 80 93 f7 74 98 ee 0a 00 ...........t....
004affcc 00 40 fd 7f 02 00 00 00 - c0 ff 4a 00 02 00 00 00 .@........J.....
004affdc ff ff ff ff 56 18 ea 77 - 88 ae e8 77 00 00 00 00 ....V..w...w....
004affec 00 00 00 00 00 00 00 00 - c2 24 10 77 98 ee 0a 00 .........$.w....
|
Вход
Регистрация
FAQ
Поиск
