Question

Memory Read fault exceptions

Asked by: rupvis

Hello all,

I am trying to debug a dll i have received to maintain. This dll is loaded as a hook and reads socket info with iexplore.exe. However i get a memory read error which is intermittent. I am deperately trying to finding a lead for solving this issue.
I activated Dr Watson and have attached the log file .. I see a FAULT at getnameinfo pointing to ws2_32.dll. Has anyone experienced this case below?

I have attched the log file returned by dr watson... i am more than happy to attach the code if needed..

Microsoft (R) DrWtsn32
Copyright (C) 1985-2002 Microsoft Corp. All rights reserved.
 
 
 
Application exception occurred:
        App: C:\Program Files\Internet Explorer\iexplore.exe (pid=77500)
        When: 8/21/2009 @ 13:45:05.234
        Exception number: c0000005 (access violation)
 
*----> System Information <----*
        Computer Name: BSPTEST1
        User Name: Administrator
        Terminal Session Id: 0
        Number of Processors: 1
        Processor Type: x86 Family 6 Model 15 Stepping 8
        Windows Version: 5.2
        Current Build: 3790
        Service Pack: 2
        Current Type: Uniprocessor Free
        Registered Organization: ASG
        Registered Owner: AIDE
 
*----> Task List <----*
   0 System Process
   4 System
 296 smss.exe
 344 csrss.exe
 368 winlogon.exe
 416 services.exe
 428 lsass.exe
 616 svchost.exe
 684 svchost.exe
 740 svchost.exe
 768 svchost.exe
 804 svchost.exe
 992 spoolsv.exe
1016 msdtc.exe
1128 cisvc.exe
1184 inetinfo.exe
1216 FrameworkService.exe
1276 Mcshield.exe
1440 VsTskMgr.exe
1608 svchost.exe
1664 locator.exe
1736 sqlwriter.exe
1896 VMwareService.exe
2000 msftesql.exe
2032 svchost.exe
2412 svchost.exe
2804 wmiprvse.exe
2952 svchost.exe
1888 cidaemon.exe
1828 cidaemon.exe
2496 cidaemon.exe
3456 tomcat.exe
3040 sqlbrowser.exe
 764 sqlservr.exe
48272 E2EServerSvc.exe
49164 E2Esupervisor.exe
37832 tbsnt.exe
43740 tbsdagent.exe
43692 agentnt.exe
37360 naPrdMgr.exe
77284 Explorer.EXE
71740 udaterui.exe
74208 VMwareTray.exe
76660 VMwareUser.exe
22688 SHSTAT.EXE
21524 E2EMonitor.exe
19240 McTray.exe
29672 sqlmangr.exe
77772 ServiceControl.exe
77760 javaw.exe
77548 SNI_Datagram.exe
76136 SNI_Connection.exe
73396 wmiprvse.exe
75200 E2EService.exe
48980 E2EAgent.exe
74032 CSCRIPT.EXE
77500 iexplore.exe
50752 drwtsn32.exe
 
*----> Module List <----*
0000000000400000 - 000000000041a000: C:\Program Files\Internet Explorer\iexplore.exe
0000000001480000 - 0000000001745000: C:\WINDOWS\system32\xpsp2res.dll
0000000001e50000 - 0000000001e90000: C:\WINDOWS\system32\e2eapi.dll
0000000010000000 - 000000001000c000: C:\Program Files\VMware\VMware Tools\hook.dll
000000001c000000 - 000000001c008000: C:\Program Files\End-End\E2EAgent\E2EHook.dll
000000004b3c0000 - 000000004b410000: C:\WINDOWS\system32\MSCTF.dll
000000005f270000 - 000000005f2ca000: C:\WINDOWS\system32\hnetcfg.dll
0000000071ae0000 - 0000000071ae8000: C:\WINDOWS\System32\wshtcpip.dll
0000000071b20000 - 0000000071b61000: C:\WINDOWS\system32\mswsock.dll
0000000071b70000 - 0000000071ba6000: C:\WINDOWS\system32\UxTheme.dll
0000000071bb0000 - 0000000071bb9000: C:\WINDOWS\system32\wsock32.dll
0000000071bf0000 - 0000000071bf8000: C:\WINDOWS\system32\WS2HELP.dll
0000000071c00000 - 0000000071c17000: C:\WINDOWS\system32\WS2_32.dll
0000000071c40000 - 0000000071c97000: C:\WINDOWS\system32\NETAPI32.dll
00000000722f0000 - 00000000722f5000: C:\WINDOWS\system32\sensapi.dll
0000000072490000 - 00000000724a2000: C:\WINDOWS\system32\browselc.dll
0000000074490000 - 00000000744b7000: C:\WINDOWS\system32\msls31.dll
00000000744c0000 - 00000000744eb000: C:\WINDOWS\system32\msimtf.dll
0000000074540000 - 00000000745d3000: C:\WINDOWS\system32\MLANG.dll
00000000745e0000 - 000000007489d000: C:\WINDOWS\system32\msi.dll
0000000075360000 - 00000000753de000: C:\WINDOWS\system32\CRYPTUI.dll
0000000075da0000 - 0000000075e5d000: C:\WINDOWS\system32\SXS.DLL
0000000075e60000 - 0000000075e87000: C:\WINDOWS\system32\apphelp.dll
0000000075eb0000 - 0000000075faf000: C:\WINDOWS\system32\BROWSEUI.dll
0000000076050000 - 00000000760e5000: C:\WINDOWS\system32\shdoclc.dll
0000000076190000 - 00000000761a2000: C:\WINDOWS\system32\MSASN1.dll
00000000761b0000 - 0000000076243000: C:\WINDOWS\system32\CRYPT32.dll
0000000076290000 - 00000000762ad000: C:\WINDOWS\system32\IMM32.DLL
0000000076520000 - 000000007653d000: C:\WINDOWS\System32\CSCDLL.dll
0000000076920000 - 00000000769e2000: C:\WINDOWS\system32\USERENV.dll
0000000076aa0000 - 0000000076acd000: C:\WINDOWS\system32\WINMM.dll
0000000076b70000 - 0000000076b7b000: C:\WINDOWS\system32\PSAPI.DLL
0000000076bb0000 - 0000000076bdb000: C:\WINDOWS\system32\WINTRUST.dll
0000000076c10000 - 0000000076c38000: C:\WINDOWS\system32\imagehlp.dll
0000000076c90000 - 0000000076cb7000: C:\WINDOWS\system32\msv1_0.dll
0000000076cf0000 - 0000000076d0a000: C:\WINDOWS\system32\iphlpapi.dll
0000000076e30000 - 0000000076e3c000: C:\WINDOWS\system32\rtutils.dll
0000000076e40000 - 0000000076e52000: C:\WINDOWS\system32\rasman.dll
0000000076e60000 - 0000000076e8f000: C:\WINDOWS\system32\TAPI32.dll
0000000076e90000 - 0000000076ecf000: C:\WINDOWS\system32\RASAPI32.DLL
0000000076ed0000 - 0000000076efa000: C:\WINDOWS\system32\DNSAPI.dll
0000000076f10000 - 0000000076f3e000: C:\WINDOWS\system32\WLDAP32.dll
0000000076f50000 - 0000000076f63000: C:\WINDOWS\system32\Secur32.dll
0000000076f70000 - 0000000076f77000: C:\WINDOWS\System32\winrnr.dll
0000000076f80000 - 0000000076f85000: C:\WINDOWS\system32\rasadhlp.dll
0000000076f90000 - 0000000077001000: C:\WINDOWS\system32\JScript.dll
0000000077010000 - 00000000770d6000: C:\WINDOWS\system32\COMRes.dll
00000000770e0000 - 00000000771e8000: C:\WINDOWS\system32\SETUPAPI.dll
0000000077210000 - 00000000772bb000: C:\WINDOWS\system32\WININET.dll
00000000772c0000 - 000000007736f000: C:\WINDOWS\system32\urlmon.dll
0000000077380000 - 0000000077411000: C:\WINDOWS\system32\USER32.dll
0000000077420000 - 0000000077523000: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.3959_x-ww_D8713E55\Comctl32.dll
0000000077530000 - 00000000775c7000: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_5.82.3790.3959_x-ww_78FCF8D0\COMCTL32.dll
0000000077670000 - 00000000777a9000: C:\WINDOWS\system32\ole32.dll
00000000777b0000 - 0000000077833000: C:\WINDOWS\system32\CLBCatQ.DLL
0000000077980000 - 0000000077af3000: C:\WINDOWS\system32\SHDOCVW.dll
0000000077b00000 - 0000000077b54000: C:\WINDOWS\System32\cscui.dll
0000000077b90000 - 0000000077b98000: C:\WINDOWS\system32\VERSION.dll
0000000077ba0000 - 0000000077bfa000: C:\WINDOWS\system32\msvcrt.dll
0000000077c00000 - 0000000077c48000: C:\WINDOWS\system32\GDI32.dll
0000000077c50000 - 0000000077cef000: C:\WINDOWS\system32\RPCRT4.dll
0000000077d00000 - 0000000077d8b000: C:\WINDOWS\system32\OLEAUT32.dll
0000000077da0000 - 0000000077df2000: C:\WINDOWS\system32\SHLWAPI.dll
0000000077e40000 - 0000000077f42000: C:\WINDOWS\system32\kernel32.dll
0000000077f50000 - 0000000077feb000: C:\WINDOWS\system32\ADVAPI32.dll
000000007c800000 - 000000007c8c0000: C:\WINDOWS\system32\ntdll.dll
000000007c8d0000 - 000000007d0ce000: C:\WINDOWS\system32\SHELL32.dll
000000007f9e0000 - 000000007fce2000: C:\WINDOWS\system32\mshtml.dll
 
*----> State Dump for Thread Id 0xf9ac <----*
 
eax=00000070 ebx=00000000 ecx=00000000 edx=00000040 esi=00161f88 edi=00000000
eip=7c8285ec esp=0013eb3c ebp=0013ed98 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000202
 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll - 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\BROWSEUI.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\SHDOCVW.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\Internet Explorer\iexplore.exe - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll - 
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
0013ed98 75ec1c83 0015d768 0013ee50 0015d768 ntdll!KiFastSystemCallRet
0013ee24 75ec61ef 0015d768 0015d768 00000000 BROWSEUI!DllCanUnloadNow+0x12fc
0013fea8 779ba36e 0015d768 00000001 00000000 BROWSEUI!Ordinal102+0xc7
0013fec8 0040243d 0015253a 00000001 ffffffff SHDOCVW!Ordinal101+0xb4
0013ff1c 00402744 00400000 00000000 0015253a iexplore!DllGetLCID+0x327
0013ffc0 77e6f23b 00000000 00000000 7ffde000 iexplore!DllGetLCID+0x62e
0013fff0 00000000 004025c2 00000000 78746341 kernel32!ProcessIdToSessionId+0x209
 
*----> Raw Stack Dump <----*
000000000013eb3c  53 bf 39 77 d8 13 ed 75 - 50 ee 13 00 00 00 00 00  S.9w...uP.......
000000000013eb4c  00 00 00 00 e2 01 37 01 - 13 01 00 00 2e 16 00 00  ......7.........
000000000013eb5c  00 00 00 00 31 14 b5 43 - 25 02 00 00 3b 00 00 00  ....1..C%...;...
000000000013eb6c  01 00 00 00 01 44 00 90 - 88 1f 16 00 00 00 00 00  .....D..........
000000000013eb7c  50 02 b5 12 d0 56 15 00 - 01 00 00 00 00 00 00 00  P....V..........
000000000013eb8c  4d 00 69 00 63 00 72 00 - 6f 00 73 00 6f 00 66 00  M.i.c.r.o.s.o.f.
000000000013eb9c  74 00 20 00 49 00 6e 00 - 74 00 65 00 72 00 6e 00  t. .I.n.t.e.r.n.
000000000013ebac  65 00 74 00 20 00 45 00 - 78 00 70 00 6c 00 6f 00  e.t. .E.x.p.l.o.
000000000013ebbc  72 00 65 00 72 00 00 00 - 00 00 00 00 60 ed 13 00  r.e.r.......`...
000000000013ebcc  d4 eb 13 00 10 ed 13 00 - ff 76 82 7c 50 ec 13 00  .........v.|P...
000000000013ebdc  0c ec 13 00 d1 96 82 7c - d6 96 82 7c 50 ec 13 00  .......|...|P...
000000000013ebec  ff 76 82 7c 10 ed 13 00 - e8 eb 13 00 0b 77 82 7c  .v.|.........w.|
000000000013ebfc  b0 ff 13 00 70 82 82 7c - e0 96 82 7c ff ff ff ff  ....p..|...|....
000000000013ec0c  d6 96 82 7c 6d 6a f7 77 - 00 00 00 00 00 00 00 00  ...|mj.w........
000000000013ec1c  04 ee 13 00 78 6a f7 77 - 34 ed 13 00 cc 00 00 00  ....xj.w4.......
000000000013ec2c  2c ed 13 00 10 00 00 00 - 24 ed 13 00 00 00 00 00  ,.......$.......
000000000013ec3c  cc 00 00 00 00 00 00 00 - 04 ee 13 00 2a b0 82 7c  ............*..|
000000000013ec4c  10 ed 13 00 e4 fc 92 7c - 12 ed 13 00 1c ec 92 7c  .......|.......|
000000000013ec5c  ae 00 00 00 b0 ec 13 00 - 1c d8 82 7c 12 ed 13 00  ...........|....
000000000013ec6c  35 01 00 00 73 00 68 00 - 64 00 6f 00 63 00 76 00  5...s.h.d.o.c.v.
 
*----> State Dump for Thread Id 0x11fa0 <----*
 
eax=7c80e1fa ebx=00bffef0 ecx=00000000 edx=00000000 esi=00000002 edi=00000000
eip=7c8285ec esp=00bffea4 ebp=00bfff48 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
00bfff48 7c80e4a2 00000002 00bfff70 00000000 ntdll!KiFastSystemCallRet
00bfffb8 77e64829 00000000 00000000 00000000 ntdll!RtlSetLastWin32ErrorAndNtStatusFromNtStatus+0x301
00bfffec 00000000 7c80e1fa 00000000 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000000bffea4  fb 7c 82 7c bb e5 80 7c - 02 00 00 00 f0 fe bf 00  .|.|...|........
0000000000bffeb4  01 00 00 00 01 00 00 00 - 10 ff bf 00 00 10 00 00  ................
0000000000bffec4  90 2f a0 00 c0 83 88 7c - 24 00 00 00 01 00 00 00  ./.....|$.......
0000000000bffed4  00 00 00 00 00 00 00 00 - 30 00 00 00 ff ff ff ff  ........0.......
0000000000bffee4  ff ff ff ff 61 d3 80 7c - 00 00 00 00 80 00 00 00  ....a..|........
0000000000bffef4  88 00 00 00 08 00 00 c0 - 00 10 00 00 30 ff bf 00  ............0...
0000000000bfff04  d1 96 82 7c d6 96 82 7c - 00 10 00 00 00 a2 2f 4d  ...|...|....../M
0000000000bfff14  ff ff ff ff 00 e0 fd 7f - c0 83 88 7c 10 ff bf 00  ...........|....
0000000000bfff24  f0 fe bf 00 e0 96 82 7c - 02 00 00 00 c0 fe bf 00  .......|........
0000000000bfff34  ae e1 80 7c dc ff bf 00 - 70 82 82 7c c8 d3 80 7c  ...|....p..|...|
0000000000bfff44  00 00 00 00 b8 ff bf 00 - a2 e4 80 7c 02 00 00 00  ...........|....
0000000000bfff54  70 ff bf 00 00 00 00 00 - e0 93 04 00 01 00 00 00  p...............
0000000000bfff64  00 00 00 00 00 00 00 00 - 00 00 00 00 80 00 00 00  ................
0000000000bfff74  88 00 00 00 00 10 00 00 - 90 2f a0 00 00 10 00 00  ........./......
0000000000bfff84  88 1f a0 00 a0 70 88 7c - 00 00 00 00 28 00 00 00  .....p.|....(...
0000000000bfff94  80 70 88 7c 00 10 00 00 - a0 70 88 7c 90 2f a0 00  .p.|.....p.|./..
0000000000bfffa4  00 00 00 00 80 70 88 7c - e5 03 00 00 00 10 00 00  .....p.|........
0000000000bfffb4  88 1f a0 00 ec ff bf 00 - 29 48 e6 77 00 00 00 00  ........)H.w....
0000000000bfffc4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000000bfffd4  c4 ff bf 00 14 ff 82 80 - ff ff ff ff 60 1a e6 77  ............`..w
 
*----> State Dump for Thread Id 0x12654 <----*
 
eax=00150640 ebx=7c81a360 ecx=0184cde0 edx=00001000 esi=0000022c edi=00000000
eip=7c8285ec esp=0184ff0c ebp=0184ff7c iopl=0         nv up ei ng nz ac pe cy
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000293
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\mshtml.dll - 
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
0184ff7c 77e61c8d 0000022c 000927c0 00000000 ntdll!KiFastSystemCallRet
0184ff90 7fab0803 0000022c 000927c0 00000000 kernel32!WaitForSingleObject+0x12
0184ffb8 77e64829 010827a0 00000000 00000000 mshtml!DllGetClassObject+0x14ee8
0184ffec 00000000 7fab0fc1 010827a0 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
000000000184ff0c  0b 7d 82 7c 1e 1d e6 77 - 2c 02 00 00 00 00 00 00  .}.|...w,.......
000000000184ff1c  50 ff 84 01 00 00 00 00 - a0 27 08 01 60 a3 81 7c  P........'..`..|
000000000184ff2c  24 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00  $...............
000000000184ff3c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000184ff4c  00 00 00 00 00 44 5f 9a - fe ff ff ff 00 e0 fd 7f  .....D_.........
000000000184ff5c  50 ff 84 01 a0 27 08 01 - 20 ff 84 01 00 00 00 00  P....'.. .......
000000000184ff6c  dc ff 84 01 60 1a e6 77 - 48 1d e6 77 00 00 00 00  ....`..wH..w....
000000000184ff7c  90 ff 84 01 8d 1c e6 77 - 2c 02 00 00 c0 27 09 00  .......w,....'..
000000000184ff8c  00 00 00 00 b8 ff 84 01 - 03 08 ab 7f 2c 02 00 00  ............,...
000000000184ff9c  c0 27 09 00 00 00 00 00 - a0 27 08 01 a0 27 08 01  .'.......'...'..
000000000184ffac  fc 0f ab 7f 00 00 00 00 - ce 0f ab 7f ec ff 84 01  ................
000000000184ffbc  29 48 e6 77 a0 27 08 01 - 00 00 00 00 00 00 00 00  )H.w.'..........
000000000184ffcc  a0 27 08 01 00 00 00 00 - c4 ff 84 01 14 ff 82 80  .'..............
000000000184ffdc  ff ff ff ff 60 1a e6 77 - 30 48 e6 77 00 00 00 00  ....`..w0H.w....
000000000184ffec  00 00 00 00 00 00 00 00 - c1 0f ab 7f a0 27 08 01  .............'..
000000000184fffc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000185000c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000185001c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000185002c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000185003c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
 
*----> State Dump for Thread Id 0xe76c <----*
 
eax=43b50b76 ebx=00000100 ecx=00000000 edx=00000001 esi=001ab6d0 edi=00000000
eip=7c8285ec esp=0194fe1c ebp=0194ff84 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll - 
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
0194ff84 77c88792 0194ffac 77c8872d 001ab6d0 ntdll!KiFastSystemCallRet
0194ff8c 77c8872d 001ab6d0 00000000 00000000 RPCRT4!I_RpcFree+0xbd0
0194ffac 77c7b110 00163540 0194ffec 77e64829 RPCRT4!I_RpcFree+0xb6b
0194ffb8 77e64829 0017c228 00000000 00000000 RPCRT4!NdrFullPointerInsertRefId+0x3ba
0194ffec 00000000 77c7b0f5 0017c228 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
000000000194fe1c  3b 78 82 7c ac 85 c8 77 - 5c 02 00 00 74 ff 94 01  ;x.|...w\...t...
000000000194fe2c  00 00 00 00 80 1a 1d 00 - 54 ff 94 01 00 00 00 00  ........T.......
000000000194fe3c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe4c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe5c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe6c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe7c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe8c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe9c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194feac  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194febc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fecc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fedc  00 00 00 00 00 00 00 00 - 00 00 00 00 38 38 bf 84  ............88..
000000000194feec  38 38 bf 84 00 f1 df ff - 00 00 00 00 38 38 bf 84  88..........88..
000000000194fefc  00 f1 df ff 00 00 00 00 - fc ab 6d f5 d0 21 a5 80  ..........m..!..
000000000194ff0c  20 f1 df ff 00 00 00 00 - 0c ac 6d f5 0d ed 82 80   .........m.....
000000000194ff1c  00 00 00 00 00 00 00 00 - 1c ac 6d f5 be 7b 82 80  ..........m..{..
000000000194ff2c  00 00 00 00 84 ff 94 01 - a6 84 c8 77 4c ff 94 01  ...........wL...
000000000194ff3c  b6 84 c8 77 ab a3 81 7c - 78 14 1b 00 28 c2 17 00  ...w...|x...(...
000000000194ff4c  00 a2 2f 4d ff ff ff ff - 00 17 5b ca ff ff ff ff  ../M......[.....
 
*----> State Dump for Thread Id 0x127e4 <----*
 
eax=776b16e4 ebx=00007530 ecx=00000000 edx=00000000 esi=00000000 edi=01a4ff4c
eip=7c8285ec esp=01a4ff0c ebp=01a4ff74 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000202
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\ole32.dll - 
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01a4ff74 77e424ed 0000ea60 00000000 01a4ffac ntdll!KiFastSystemCallRet
01a4ff84 776bbb0f 0000ea60 001b4cd8 776bbab4 kernel32!Sleep+0xf
01a4ffac 776b1704 00000000 01a4ffec 77e64829 ole32!CoFreeUnusedLibrariesEx+0x1c0
01a4ffb8 77e64829 001b4cd8 00000000 00000000 ole32!CoRegisterChannelHook+0x538
01a4ffec 00000000 776b16e4 001b4cd8 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000001a4ff0c  4b 6f 82 7c d1 1e e4 77 - 00 00 00 00 4c ff a4 01  Ko.|...w....L...
0000000001a4ff1c  96 1c e6 77 48 69 79 77 - 30 75 00 00 24 00 00 00  ...wHiyw0u..$...
0000000001a4ff2c  01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a4ff3c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a4ff4c  00 ba 3c dc ff ff ff ff - 34 66 79 77 4c ff a4 01  ..<.....4fywL...
0000000001a4ff5c  1c ff a4 01 49 f8 6b 77 - dc ff a4 01 60 1a e6 77  ....I.kw....`..w
0000000001a4ff6c  60 16 e6 77 00 00 00 00 - 84 ff a4 01 ed 24 e4 77  `..w.........$.w
0000000001a4ff7c  60 ea 00 00 00 00 00 00 - ac ff a4 01 0f bb 6b 77  `.............kw
0000000001a4ff8c  60 ea 00 00 d8 4c 1b 00 - b4 ba 6b 77 00 00 00 00  `....L....kw....
0000000001a4ff9c  00 00 00 00 d8 4c 1b 00 - 00 00 67 77 d8 4c 1b 00  .....L....gw.L..
0000000001a4ffac  b8 ff a4 01 04 17 6b 77 - 00 00 00 00 ec ff a4 01  ......kw........
0000000001a4ffbc  29 48 e6 77 d8 4c 1b 00 - 00 00 00 00 00 00 00 00  )H.w.L..........
0000000001a4ffcc  d8 4c 1b 00 00 00 00 00 - c4 ff a4 01 14 ff 82 80  .L..............
0000000001a4ffdc  ff ff ff ff 60 1a e6 77 - 30 48 e6 77 00 00 00 00  ....`..w0H.w....
0000000001a4ffec  00 00 00 00 00 00 00 00 - e4 16 6b 77 d8 4c 1b 00  ..........kw.L..
0000000001a4fffc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a5000c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a5001c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a5002c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a5003c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
 
*----> State Dump for Thread Id 0x8958 <----*
 
eax=77c7b0f5 ebx=00000100 ecx=00000000 edx=00000000 esi=001ab6d0 edi=00000000
eip=7c8285ec esp=01b4fe1c ebp=01b4ff84 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01b4ff84 77c88792 01b4ffac 77c8872d 001ab6d0 ntdll!KiFastSystemCallRet
01b4ff8c 77c8872d 001ab6d0 00000000 00000000 RPCRT4!I_RpcFree+0xbd0
01b4ffac 77c7b110 00163540 01b4ffec 77e64829 RPCRT4!I_RpcFree+0xb6b
01b4ffb8 77e64829 001b6db0 00000000 00000000 RPCRT4!NdrFullPointerInsertRefId+0x3ba
01b4ffec 00000000 77c7b0f5 001b6db0 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000001b4fe1c  3b 78 82 7c ac 85 c8 77 - 5c 02 00 00 74 ff b4 01  ;x.|...w\...t...
0000000001b4fe2c  00 00 00 00 48 87 1a 00 - 54 ff b4 01 16 9d d1 ff  ....H...T.......
0000000001b4fe3c  28 ad de ff 42 c1 ee ff - 5f d5 ff ff 5f d5 ff ff  (...B..._..._...
0000000001b4fe4c  c0 e9 f7 ff 1f 9a d3 ff - 00 00 00 00 bd 4b 00 ff  .............K..
0000000001b4fe5c  ff c7 93 ff 9f 95 89 ff - 9f 95 89 ff ff d9 b5 ff  ................
0000000001b4fe6c  ff dd bb ff 9f 98 92 ff - 9f 98 92 ff e6 d7 c7 ff  ................
0000000001b4fe7c  ff ef e0 ff 9f 9d 9a ff - 9f 9d 9a ff ff ff ff ff  ................
0000000001b4fe8c  ff ff ff ff bd 4b 00 ff - 00 00 00 00 00 00 00 00  .....K..........
0000000001b4fe9c  8c 5c 59 ff ff dd bd ff - ff eb d7 ff 96 65 5c ff  .\Y..........e\.
0000000001b4feac  00 00 00 00 00 00 00 00 - 00 00 00 00 00 81 00 df  ................
0000000001b4febc  00 81 00 ff 00 81 00 60 - 00 00 00 00 8c 5c 59 ff  .......`.....\Y.
0000000001b4fecc  ff dd bd ff ff eb d7 ff - 96 65 5c ff 8c 5c 59 ff  .........e\..\Y.
0000000001b4fedc  ff dd bd ff ff eb d7 ff - 96 65 5c ff e0 76 44 86  .........e\..vD.
0000000001b4feec  e0 76 44 86 00 f1 df ff - 00 00 00 00 e0 76 44 86  .vD..........vD.
0000000001b4fefc  00 f1 df ff 00 00 00 00 - fc ab e4 f2 d0 21 a5 80  .............!..
0000000001b4ff0c  20 f1 df ff 00 00 00 00 - 0c ac e4 f2 0d ed 82 80   ...............
0000000001b4ff1c  00 00 00 00 00 00 00 00 - 1c ac e4 f2 be 7b 82 80  .............{..
0000000001b4ff2c  00 00 00 00 84 ff b4 01 - a6 84 c8 77 4c ff b4 01  ...........wL...
0000000001b4ff3c  b6 84 c8 77 ab a3 81 7c - d0 94 16 00 b0 6d 1b 00  ...w...|.....m..
0000000001b4ff4c  00 a2 2f 4d ff ff ff ff - 00 17 5b ca ff ff ff ff  ../M......[.....
 
*----> State Dump for Thread Id 0x12370 <----*
 
eax=00000001 ebx=01c4fc7c ecx=71b21803 edx=01c4fe84 esi=001c8be0 edi=01c4fd80
eip=71c0283c esp=01c4fc24 ebp=01c4fc54 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\WS2_32.dll - 
function: WS2_32!select
        71c02821 0f84c1900000     je      WS2_32!GetNameInfoW+0x1e9a (71c0b8e8)
        71c02827 8b460c           mov     eax,[esi+0xc]
        71c0282a 8d4de4           lea     ecx,[ebp-0x1c]
        71c0282d 51               push    ecx
        71c0282e ff7518           push    dword ptr [ebp+0x18]
        71c02831 57               push    edi
        71c02832 53               push    ebx
        71c02833 ff750c           push    dword ptr [ebp+0xc]
        71c02836 ff7508           push    dword ptr [ebp+0x8]
        71c02839 ff5060           call    dword ptr [eax+0x60]
FAULT ->71c0283c 8bf8             mov     edi,eax
        71c0283e 8bce             mov     ecx,esi
        71c02840 e89bfbffff       call    WS2_32!Ordinal496+0x23e0 (71c023e0)
        71c02845 83ffff           cmp     edi,0xffffffff
        71c02848 0f848b900000     je      WS2_32!GetNameInfoW+0x1e8b (71c0b8d9)
        71c0284e 8bc7             mov     eax,edi
        71c02850 e8b8fcffff       call    WS2_32!WSASend+0xdd (71c0250d)
        71c02855 c21400           ret     0x14
        71c02858 ffff             ???
        71c0285a ffff             ???
        71c0285c ffb8c07108b9     ???
 
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\WININET.dll - 
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01c4fc54 77226314 00000002 01c4fe84 01c4fc7c WS2_32!select+0xa1
01c4ffb0 77238db4 01c4ffec 77e64829 001690a0 WININET!PrivacyGetZonePreferenceW+0x7a55
01c4ffb8 77e64829 001690a0 00000000 00000000 WININET!InternetSetStatusCallback+0x1d7
01c4ffec 00000000 77238da7 001690a0 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000001c4fc24  a0 90 16 00 01 00 00 00 - 00 00 00 00 1c 03 00 00  ................
0000000001c4fc34  01 00 00 00 00 00 00 00 - 24 fc c4 01 50 f8 c4 01  ........$...P...
0000000001c4fc44  dc ff c4 01 99 26 c1 71 - 58 28 c0 71 ff ff ff ff  .....&.qX(.q....
0000000001c4fc54  b0 ff c4 01 14 63 22 77 - 02 00 00 00 84 fe c4 01  .....c"w........
0000000001c4fc64  7c fc c4 01 80 fd c4 01 - 88 ff c4 01 00 00 00 00  |...............
0000000001c4fc74  a0 90 16 00 00 00 00 00 - 00 00 00 00 60 04 00 00  ............`...
0000000001c4fc84  35 ed 82 7c 00 00 00 00 - 00 00 00 00 68 f7 1a 00  5..|........h...
0000000001c4fc94  60 25 c0 71 00 e0 fd 7f - f4 77 88 7c 34 fc c4 01  `%.q.....w.|4...
0000000001c4fca4  00 00 00 00 04 fd c4 01 - 70 82 82 7c 58 ee 82 7c  ........p..|X..|
0000000001c4fcb4  ff ff ff ff ec ed 82 7c - 3b 7c 82 7c b1 ec 82 7c  .......|;|.|...|
0000000001c4fcc4  28 fd c4 01 00 00 00 00 - a0 90 16 00 00 00 00 00  (...............
0000000001c4fcd4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001c4fce4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001c4fcf4  00 00 00 00 00 00 00 00 - c4 fc c4 01 00 00 00 00  ................
0000000001c4fd04  f4 ff c4 01 70 82 82 7c - b8 ec 82 7c ff ff ff ff  ....p..|...|....
0000000001c4fd14  b1 ec 82 7c 9b 6d 82 7c - da 84 82 7c 28 fd c4 01  ...|.m.|...|(...
0000000001c4fd24  01 00 00 00 17 00 01 00 - 00 00 00 00 00 00 00 00  ................
0000000001c4fd34  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001c4fd44  80 76 00 c0 00 00 60 c0 - 58 80 01 00 80 76 00 c0  .v....`.X....v..
0000000001c4fd54  00 00 60 c0 00 6a 9f f2 - 54 6a 9f f2 d0 21 a5 80  ..`..j..Tj...!..
 
*----> State Dump for Thread Id 0x9524 <----*
 
eax=000000c0 ebx=00000000 ecx=00000000 edx=00000000 esi=00000000 edi=00000000
eip=7c8285ec esp=01d4ffa0 ebp=01d4ffb8 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01d4ffb8 77e64829 00000000 00000000 00000000 ntdll!KiFastSystemCallRet
01d4ffec 00000000 7c83d3dd 00000000 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000001d4ffa0  4b 6f 82 7c 24 d4 83 7c - 01 00 00 00 b0 ff d4 01  Ko.|$..|........
0000000001d4ffb0  00 00 00 00 00 00 00 80 - ec ff d4 01 29 48 e6 77  ............)H.w
0000000001d4ffc0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d4ffd0  00 00 00 00 c4 ff d4 01 - 14 ff 82 80 ff ff ff ff  ................
0000000001d4ffe0  60 1a e6 77 30 48 e6 77 - 00 00 00 00 00 00 00 00  `..w0H.w........
0000000001d4fff0  00 00 00 00 dd d3 83 7c - 00 00 00 00 00 00 00 00  .......|........
0000000001d50000  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50010  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50020  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50030  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50040  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50050  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50060  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50070  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50080  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50090  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d500a0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d500b0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d500c0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d500d0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
 
*----> State Dump for Thread Id 0x6b48 <----*
 
eax=001e70e8 ebx=00000000 ecx=0015d7f4 edx=0015d800 esi=7c889638 edi=7c889080
eip=7c8285ec esp=01e4ff74 ebp=01e4ffb8 iopl=0         nv up ei ng nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000286
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01e4ffb8 77e64829 00000000 00000000 00000000 ntdll!KiFastSystemCallRet
01e4ffec 00000000 7c839efb 00000000 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000001e4ff74  db 77 82 7c 38 9f 83 7c - 24 03 00 00 b0 ff e4 01  .w.|8..|$.......
0000000001e4ff84  b4 ff e4 01 9c ff e4 01 - a4 ff e4 01 00 00 00 00  ................
0000000001e4ff94  00 00 00 00 00 00 00 00 - 00 00 00 00 c0 7a 1f 00  .............z..
0000000001e4ffa4  00 7c 28 e8 ff ff ff ff - 00 00 00 00 ca a9 83 7c  .|(............|
0000000001e4ffb4  08 aa 1f 00 ec ff e4 01 - 29 48 e6 77 00 00 00 00  ........)H.w....
0000000001e4ffc4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001e4ffd4  c4 ff e4 01 14 ff 82 80 - ff ff ff ff 60 1a e6 77  ............`..w
0000000001e4ffe4  30 48 e6 77 00 00 00 00 - 00 00 00 00 00 00 00 00  0H.w............
0000000001e4fff4  fb 9e 83 7c 00 00 00 00 - 00 00 00 00 4d 5a 90 00  ...|........MZ..
0000000001e50004  03 00 00 00 04 00 00 00 - ff ff 00 00 b8 00 00 00  ................
0000000001e50014  00 00 00 00 40 00 00 00 - 00 00 00 00 00 00 00 00  ....@...........
0000000001e50024  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001e50034  00 00 00 00 00 00 00 00 - e0 00 00 00 0e 1f ba 0e  ................
0000000001e50044  00 b4 09 cd 21 b8 01 4c - cd 21 54 68 69 73 20 70  ....!..L.!This p
0000000001e50054  72 6f 67 72 61 6d 20 63 - 61 6e 6e 6f 74 20 62 65  rogram cannot be
0000000001e50064  20 72 75 6e 20 69 6e 20 - 44 4f 53 20 6d 6f 64 65   run in DOS mode
0000000001e50074  2e 0d 0d 0a 24 00 00 00 - 00 00 00 00 3a a5 43 ed  ....$.......:.C.
0000000001e50084  7e c4 2d be 7e c4 2d be - 7e c4 2d be 48 e2 26 be  ~.-.~.-.~.-.H.&.
0000000001e50094  76 c4 2d be fd d8 23 be - 68 c4 2d be 48 e2 27 be  v.-...#.h.-.H.'.
0000000001e500a4  1e c4 2d be 7e c4 2c be - 18 c4 2d be 1c db 3e be  ..-.~.,...-...>.
 
*----> State Dump for Thread Id 0x12f64 <----*
 
eax=00000084 ebx=01fcfefc ecx=00000010 edx=01ff1f80 esi=01fcff00 edi=7ffde000
eip=7c8285ec esp=01fcfeb0 ebp=01fcff58 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01fcff58 77e62fbe 00000002 01fcffac 00000000 ntdll!KiFastSystemCallRet
01fcff74 77226690 00000002 01fcffac 00000000 kernel32!WaitForMultipleObjects+0x18
01fcffb4 77238a1a 77e64829 001cc2a0 00000000 WININET!PrivacyGetZonePreferenceW+0x7dd1
01fcffec 00000000 77238a0f 001cc2a0 00000000 WININET!InternetOpenUrlA+0xa44
 
*----> Raw Stack Dump <----*
0000000001fcfeb0  fb 7c 82 7c 2c 20 e6 77 - 02 00 00 00 fc fe fc 01  .|.|, .w........
0000000001fcfec0  01 00 00 00 00 00 00 00 - 1c ff fc 01 00 00 00 00  ................
0000000001fcfed0  a0 c2 1c 00 00 c2 1c 00 - 24 00 00 00 01 00 00 00  ........$.......
0000000001fcfee0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001fcfef0  00 00 00 00 00 00 00 00 - 00 00 00 00 e8 03 00 00  ................
0000000001fcff00  e4 03 00 00 cc 0a 23 77 - 44 ff fc 01 e6 6d 21 77  ......#wD....m!w
0000000001fcff10  e5 03 00 00 e5 03 00 00 - f8 c3 1f 00 00 5d 1e ee  .............]..
0000000001fcff20  ff ff ff ff 00 e0 fd 7f - 5b 0f 23 77 1c ff fc 01  ........[.#w....
0000000001fcff30  fc fe fc 01 a0 c2 1c 00 - ac 90 16 00 02 00 00 00  ................
0000000001fcff40  cc fe fc 01 60 ff fc 01 - dc ff fc 01 60 1a e6 77  ....`.......`..w
0000000001fcff50  f8 1f e6 77 00 00 00 00 - 74 ff fc 01 be 2f e6 77  ...w....t..../.w
0000000001fcff60  02 00 00 00 ac ff fc 01 - 00 00 00 00 30 75 00 00  ............0u..
0000000001fcff70  00 00 00 00 b4 ff fc 01 - 90 66 22 77 02 00 00 00  .........f"w....
0000000001fcff80  ac ff fc 01 00 00 00 00 - 30 75 00 00 00 00 00 00  ........0u......
0000000001fcff90  18 6c 1d 00 03 01 00 00 - 00 00 00 00 01 00 00 00  .l..............
0000000001fcffa0  c4 6c 83 f2 e4 03 00 00 - 9d 7b b0 43 e8 03 00 00  .l.......{.C....
0000000001fcffb0  e4 03 00 00 ec ff fc 01 - 1a 8a 23 77 29 48 e6 77  ..........#w)H.w
0000000001fcffc0  a0 c2 1c 00 00 00 00 00 - 00 00 00 00 a0 c2 1c 00  ................
0000000001fcffd0  00 00 00 00 c4 ff fc 01 - 14 ff 82 80 ff ff ff ff  ................
0000000001fcffe0  60 1a e6 77 30 48 e6 77 - 00 00 00 00 00 00 00 00  `..w0H.w........
 
*----> State Dump for Thread Id 0xa5c <----*
 
eax=71b258ab ebx=c0000000 ecx=00000000 edx=00000000 esi=00000000 edi=71b591fc
eip=7c8285ec esp=0212ff80 ebp=0212ffb8 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
0212ffb8 77e64829 71b259de 00000000 00000000 ntdll!KiFastSystemCallRet
0212ffec 00000000 71b258ab 001d6218 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
000000000212ff80  db 77 82 7c 14 59 b2 71 - 34 04 00 00 c0 ff 12 02  .w.|.Y.q4.......
000000000212ff90  b4 ff 12 02 a8 ff 12 02 - 60 59 b2 71 00 00 00 00  ........`Y.q....
000000000212ffa0  00 00 00 00 18 62 1d 00 - 00 00 00 00 00 00 00 00  .....b..........
000000000212ffb0  00 00 b2 71 58 10 1c 00 - ec ff 12 02 29 48 e6 77  ...qX.......)H.w
000000000212ffc0  de 59 b2 71 00 00 00 00 - 00 00 00 00 18 62 1d 00  .Y.q.........b..
000000000212ffd0  00 00 00 00 c4 ff 12 02 - 14 ff 82 80 ff ff ff ff  ................
000000000212ffe0  60 1a e6 77 30 48 e6 77 - 00 00 00 00 00 00 00 00  `..w0H.w........
000000000212fff0  00 00 00 00 ab 58 b2 71 - 18 62 1d 00 00 00 00 00  .....X.q.b......
0000000002130000  0d 00 af 6f 01 00 3f 00 - 3f 00 3f 00 3f 00 00 00  ...o..?.?.?.?...
0000000002130010  00 00 00 00 00 00 00 00 - 00 00 03 01 00 00 01 00  ................
0000000002130020  02 00 03 00 04 00 05 00 - 06 00 07 00 08 00 09 00  ................
0000000002130030  0a 00 0b 00 0c 00 0d 00 - 0e 00 0f 00 10 00 11 00  ................
0000000002130040  12 00 13 00 14 00 15 00 - 16 00 17 00 18 00 19 00  ................
0000000002130050  1a 00 1b 00 1c 00 1d 00 - 1e 00 1f 00 20 00 21 00  ............ .!.
0000000002130060  22 00 23 00 24 00 25 00 - 26 00 27 00 28 00 29 00  ".#.$.%.&.'.(.).
0000000002130070  2a 00 2b 00 2c 00 2d 00 - 2e 00 2f 00 30 00 31 00  *.+.,.-.../.0.1.
0000000002130080  32 00 33 00 34 00 35 00 - 36 00 37 00 38 00 39 00  2.3.4.5.6.7.8.9.
0000000002130090  3a 00 3b 00 3c 00 3d 00 - 3e 00 3f 00 40 00 41 00  :.;.<.=.>.?.@.A.
00000000021300a0  42 00 43 00 44 00 45 00 - 46 00 47 00 48 00 49 00  B.C.D.E.F.G.H.I.
00000000021300b0  4a 00 4b 00 4c 00 4d 00 - 4e 00 4f 00 50 00 51 00  J.K.L.M.N.O.P.Q.
 
*----> State Dump for Thread Id 0x126a8 <----*
 
eax=00000401 ebx=7c81a360 ecx=00000410 edx=0003fca6 esi=000002fc edi=00000000
eip=7c8285ec esp=0225ff0c ebp=0225ff7c iopl=0         nv up ei ng nz ac pe cy
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000293
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
0225ff7c 77e61c8d 000002fc 000927c0 00000000 ntdll!KiFastSystemCallRet
0225ff90 7fab0803 000002fc 000927c0 00000000 kernel32!WaitForSingleObject+0x12
0225ffb8 77e64829 0109a630 00000000 00000000 mshtml!DllGetClassObject+0x14ee8
0225ffec 00000000 7fab0fc1 0109a630 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
000000000225ff0c  0b 7d 82 7c 1e 1d e6 77 - fc 02 00 00 00 00 00 00  .}.|...w........
000000000225ff1c  50 ff 25 02 00 00 00 00 - 30 a6 09 01 60 a3 81 7c  P.%.....0...`..|
000000000225ff2c  24 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00  $...............
000000000225ff3c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000225ff4c  00 00 00 00 00 44 5f 9a - fe ff ff ff 00 e0 fd 7f  .....D_.........
000000000225ff5c  50 ff 25 02 70 ff 25 02 - 20 ff 25 02 70 12 1c 00  P.%.p.%. .%.p...
000000000225ff6c  dc ff 25 02 60 1a e6 77 - 48 1d e6 77 00 00 00 00  ..%.`..wH..w....
000000000225ff7c  90 ff 25 02 8d 1c e6 77 - fc 02 00 00 c0 27 09 00  ..%....w.....'..
000000000225ff8c  00 00 00 00 b8 ff 25 02 - 03 08 ab 7f fc 02 00 00  ......%.........
000000000225ff9c  c0 27 09 00 00 00 00 00 - 30 a6 09 01 30 a6 09 01  .'......0...0...
000000000225ffac  fc 0f ab 7f 00 00 00 00 - ce 0f ab 7f ec ff 25 02  ..............%.
000000000225ffbc  29 48 e6 77 30 a6 09 01 - 00 00 00 00 00 00 00 00  )H.w0...........
000000000225ffcc  30 a6 09 01 00 00 00 00 - c4 ff 25 02 14 ff 82 80  0.........%.....
000000000225ffdc  ff ff ff ff 60 1a e6 77 - 30 48 e6 77 00 00 00 00  ....`..w0H.w....
000000000225ffec  00 00 00 00 00 00 00 00 - c1 0f ab 7f 30 a6 09 01  ............0...
000000000225fffc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000226000c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000226001c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000226002c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000226003c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
 
*----> Symbol Table <----*
C:\WINDOWS\system32\WS2_32.dll
 
71c00000  WS2_32!Ordinal364 
71c00000  WS2_32!Ordinal499 
71c00000  WS2_32!Ordinal498 
71c00000  WS2_32!Ordinal100 
71c00000  WS2_32!Ordinal117 
71c00000  WS2_32!Ordinal118 
71c00000  WS2_32!Ordinal119 
71c00000  WS2_32!Ordinal120 
71c00000  WS2_32!Ordinal121 
71c00000  WS2_32!Ordinal122 
71c00000  WS2_32!Ordinal123 
71c00000  WS2_32!Ordinal124 
71c00000  WS2_32!Ordinal125 
71c00000  WS2_32!Ordinal126 
71c00000  WS2_32!Ordinal127 
71c00000  WS2_32!Ordinal128 
71c00000  WS2_32!Ordinal129 
71c00000  WS2_32!Ordinal130 
71c00000  WS2_32!Ordinal131 
71c00000  WS2_32!Ordinal132 
71c00000  WS2_32!Ordinal133 
71c00000  WS2_32!Ordinal134 
71c00000  WS2_32!Ordinal135 
71c00000  WS2_32!Ordinal136 
71c00000  WS2_32!Ordinal137 
71c00000  WS2_32!Ordinal138 
71c00000  WS2_32!Ordinal139 
71c00000  WS2_32!Ordinal140 
71c00000  WS2_32!Ordinal141 
71c00000  WS2_32!Ordinal142 
71c00000  WS2_32!Ordinal143 
71c00000  WS2_32!Ordinal144 
71c00000  WS2_32!Ordinal145 
71c00000  WS2_32!Ordinal146 
71c00000  WS2_32!Ordinal147 
71c00000  WS2_32!Ordinal148 
71c00000  WS2_32!Ordinal149 
71c00000  WS2_32!Ordinal150 
71c00000  WS2_32!Ordinal152 
71c00000  WS2_32!Ordinal153 
71c00000  WS2_32!Ordinal154 
71c00000  WS2_32!Ordinal155 
71c00000  WS2_32!Ordinal156 
71c00000  WS2_32!Ordinal157 
71c00000  WS2_32!Ordinal158 
71c00000  WS2_32!Ordinal159 
71c00000  WS2_32!Ordinal160 
71c00000  WS2_32!Ordinal161 
71c00000  WS2_32!Ordinal162 
71c00000  WS2_32!Ordinal163 
71c00000  WS2_32!Ordinal164 
71c00000  WS2_32!Ordinal165 
71c00000  WS2_32!Ordinal166 
71c00000  WS2_32!Ordinal167 
71c00000  WS2_32!Ordinal168 
71c00000  WS2_32!Ordinal169 
71c00000  WS2_32!Ordinal170 
71c00000  WS2_32!Ordinal171 
71c00000  WS2_32!Ordinal172 
71c00000  WS2_32!Ordinal173 
71c00000  WS2_32!Ordinal174 
71c00000  WS2_32!Ordinal175 
71c00000  WS2_32!Ordinal176 
71c00000  WS2_32!Ordinal177 
71c00000  WS2_32!Ordinal178 
71c00000  WS2_32!Ordinal179 
71c00000  WS2_32!Ordinal180 
71c00000  WS2_32!Ordinal181 
71c00000  WS2_32!Ordinal182 
71c00000  WS2_32!Ordinal183 
71c00000  WS2_32!Ordinal184 
71c00000  WS2_32!Ordinal185 
71c00000  WS2_32!Ordinal186 
71c00000  WS2_32!Ordinal187 
71c00000  WS2_32!Ordinal188 
71c00000  WS2_32!Ordinal189 
71c00000  WS2_32!Ordinal190 
71c00000  WS2_32!Ordinal191 
71c00000  WS2_32!Ordinal192 
71c00000  WS2_32!Ordinal193 
71c00000  WS2_32!Ordinal194 
71c00000  WS2_32!Ordinal195 
71c00000  WS2_32!Ordinal196 
71c00000  WS2_32!Ordinal197 
71c00000  WS2_32!Ordinal198 
71c00000  WS2_32!Ordinal199 
71c00000  WS2_32!Ordinal200 
71c00000  WS2_32!Ordinal201 
71c00000  WS2_32!Ordinal202 
71c00000  WS2_32!Ordinal203 
71c00000  WS2_32!Ordinal204 
71c00000  WS2_32!Ordinal205 
71c00000  WS2_32!Ordinal206 
71c00000  WS2_32!Ordinal207 
71c00000  WS2_32!Ordinal208 
71c00000  WS2_32!Ordinal209 
71c00000  WS2_32!Ordinal210 
71c00000  WS2_32!Ordinal211 
71c00000  WS2_32!Ordinal212 
71c00000  WS2_32!Ordinal213 
71c00000  WS2_32!Ordinal214 
71c00000  WS2_32!Ordinal215 
71c00000  WS2_32!Ordinal216 
71c00000  WS2_32!Ordinal217 
71c00000  WS2_32!Ordinal218 
71c00000  WS2_32!Ordinal219 
71c00000  WS2_32!Ordinal220 
71c00000  WS2_32!Ordinal221 
71c00000  WS2_32!Ordinal222 
71c00000  WS2_32!Ordinal223 
71c00000  WS2_32!Ordinal224 
71c00000  WS2_32!Ordinal225 
71c00000  WS2_32!Ordinal226 
71c00000  WS2_32!Ordinal227 
71c00000  WS2_32!Ordinal228 
71c00000  WS2_32!Ordinal229 
71c00000  WS2_32!Ordinal230 
71c00000  WS2_32!Ordinal231 
71c00000  WS2_32!Ordinal232 
71c00000  WS2_32!Ordinal233 
71c00000  WS2_32!Ordinal234 
71c00000  WS2_32!Ordinal235 
71c00000  WS2_32!Ordinal236 
71c00000  WS2_32!Ordinal237 
71c00000  WS2_32!Ordinal238 
71c00000  WS2_32!Ordinal239 
71c00000  WS2_32!Ordinal240 
71c00000  WS2_32!Ordinal241 
71c00000  WS2_32!Ordinal242 
71c00000  WS2_32!Ordinal243 
71c00000  WS2_32!Ordinal244 
71c00000  WS2_32!Ordinal245 
71c00000  WS2_32!Ordinal246 
71c00000  WS2_32!Ordinal247 
71c00000  WS2_32!Ordinal248 
71c00000  WS2_32!Ordinal249 
71c00000  WS2_32!Ordinal250 
71c00000  WS2_32!Ordinal251 
71c00000  WS2_32!Ordinal252 
71c00000  WS2_32!Ordinal253 
71c00000  WS2_32!Ordinal254 
71c00000  WS2_32!Ordinal255 
71c00000  WS2_32!Ordinal256 
71c00000  WS2_32!Ordinal257 
71c00000  WS2_32!Ordinal258 
71c00000  WS2_32!Ordinal259 
71c00000  WS2_32!Ordinal260 
71c00000  WS2_32!Ordinal261 
71c00000  WS2_32!Ordinal262 
71c00000  WS2_32!Ordinal263 
71c00000  WS2_32!Ordinal264 
71c00000  WS2_32!Ordinal265 
71c00000  WS2_32!Ordinal266 
71c00000  WS2_32!Ordinal267 
71c00000  WS2_32!Ordinal268 
71c00000  WS2_32!Ordinal269 
71c00000  WS2_32!Ordinal270 
71c00000  WS2_32!Ordinal271 
71c00000  WS2_32!Ordinal272 
71c00000  WS2_32!Ordinal273 
71c00000  WS2_32!Ordinal274 
71c00000  WS2_32!Ordinal275 
71c00000  WS2_32!Ordinal276 
71c00000  WS2_32!Ordinal277 
71c00000  WS2_32!Ordinal278 
71c00000  WS2_32!Ordinal279 
71c00000  WS2_32!Ordinal280 
71c00000  WS2_32!Ordinal281 
71c00000  WS2_32!Ordinal282 
71c00000  WS2_32!Ordinal283 
71c00000  WS2_32!Ordinal284 
71c00000  WS2_32!Ordinal285 
71c00000  WS2_32!Ordinal286 
71c00000  WS2_32!Ordinal287 
71c00000  WS2_32!Ordinal288 
71c00000  WS2_32!Ordinal289 
71c00000  WS2_32!Ordinal290 
71c00000  WS2_32!Ordinal291 
71c00000  WS2_32!Ordinal292 
71c00000  WS2_32!Ordinal293 
71c00000  WS2_32!Ordinal294 
71c00000  WS2_32!Ordinal295 
71c00000  WS2_32!Ordinal296 
71c00000  WS2_32!Ordinal297 
71c00000  WS2_32!Ordinal298 
71c00000  WS2_32!Ordinal299 
71c00000  WS2_32!Ordinal300 
71c00000  WS2_32!Ordinal301 
71c00000  WS2_32!Ordinal302 
71c00000  WS2_32!Ordinal303 
71c00000  WS2_32!Ordinal304 
71c00000  WS2_32!Ordinal305 
71c00000  WS2_32!Ordinal306 
71c00000  WS2_32!Ordinal307 
71c00000  WS2_32!Ordinal308 
71c00000  WS2_32!Ordinal309 
71c00000  WS2_32!Ordinal310 
71c00000  WS2_32!Ordinal311 
71c00000  WS2_32!Ordinal312 
71c00000  WS2_32!Ordinal313 
71c00000  WS2_32!Ordinal314 
71c00000  WS2_32!Ordinal315 
71c00000  WS2_32!Ordinal316 
71c00000  WS2_32!Ordinal317 
71c00000  WS2_32!Ordinal318 
71c00000  WS2_32!Ordinal319 
71c00000  WS2_32!Ordinal320 
71c00000  WS2_32!Ordinal321 
71c00000  WS2_32!Ordinal322 
71c00000  WS2_32!Ordinal323 
71c00000  WS2_32!Ordinal324 
71c00000  WS2_32!Ordinal325 
71c00000  WS2_32!Ordinal326 
71c00000  WS2_32!Ordinal327 
71c00000  WS2_32!Ordinal328 
71c00000  WS2_32!Ordinal329 
71c00000  WS2_32!Ordinal330 
71c00000  WS2_32!Ordinal331 
71c00000  WS2_32!Ordinal332 
71c00000  WS2_32!Ordinal333 
71c00000  WS2_32!Ordinal334 
71c00000  WS2_32!Ordinal335 
71c00000  WS2_32!Ordinal336 
71c00000  WS2_32!Ordinal337 
71c00000  WS2_32!Ordinal338 
71c00000  WS2_32!Ordinal339 
71c00000  WS2_32!Ordinal340 
71c00000  WS2_32!Ordinal341 
71c00000  WS2_32!Ordinal342 
71c00000  WS2_32!Ordinal343 
71c00000  WS2_32!Ordinal344 
71c00000  WS2_32!Ordinal345 
71c00000  WS2_32!Ordinal346 
71c00000  WS2_32!Ordinal347 
71c00000  WS2_32!Ordinal348 
71c00000  WS2_32!Ordinal349 
71c00000  WS2_32!Ordinal350 
71c00000  WS2_32!Ordinal351 
71c00000  WS2_32!Ordinal352 
71c00000  WS2_32!Ordinal353 
71c00000  WS2_32!Ordinal354 
71c00000  WS2_32!Ordinal355 
71c00000  WS2_32!Ordinal356 
71c00000  WS2_32!Ordinal357 
71c00000  WS2_32!Ordinal358 
71c00000  WS2_32!Ordinal359 
71c00000  WS2_32!Ordinal360 
71c00000  WS2_32!Ordinal361 
71c00000  WS2_32!Ordinal362 
71c00000  WS2_32!Ordinal363 
71c00000  WS2_32!Ordinal497 
71c00000  WS2_32!Ordinal365 
71c00000  WS2_32!Ordinal366 
71c00000  WS2_32!Ordinal367 
71c00000  WS2_32!Ordinal368 
71c00000  WS2_32!Ordinal369 
71c00000  WS2_32!Ordinal370 
71c00000  WS2_32!Ordinal371 
71c00000  WS2_32!Ordinal372 
71c00000  WS2_32!Ordinal373 
71c00000  WS2_32!Ordinal374 
71c00000  WS2_32!Ordinal375 
71c00000  WS2_32!Ordinal376 
71c00000  WS2_32!Ordinal377 
71c00000  WS2_32!Ordinal378 
71c00000  WS2_32!Ordinal379 
71c00000  WS2_32!Ordinal380 
71c00000  WS2_32!Ordinal381 
71c00000  WS2_32!Ordinal382 
71c00000  WS2_32!Ordinal383 
71c00000  WS2_32!Ordinal384 
71c00000  WS2_32!Ordinal385 
71c00000  WS2_32!Ordinal386 
71c00000  WS2_32!Ordinal387 
71c00000  WS2_32!Ordinal388 
71c00000  WS2_32!Ordinal389 
71c00000  WS2_32!Ordinal390 
71c00000  WS2_32!Ordinal391 
71c00000  WS2_32!Ordinal392 
71c00000  WS2_32!Ordinal393 
71c00000  WS2_32!Ordinal394 
71c00000  WS2_32!Ordinal395 
71c00000  WS2_32!Ordinal396 
71c00000  WS2_32!Ordinal397 
71c00000  WS2_32!Ordinal398 
71c00000  WS2_32!Ordinal399 
71c00000  WS2_32!Ordinal400 
71c00000  WS2_32!Ordinal401 
71c00000  WS2_32!Ordinal402 
71c00000  WS2_32!Ordinal403 
71c00000  WS2_32!Ordinal404 
71c00000  WS2_32!Ordinal405 
71c00000  WS2_32!Ordinal406 
71c00000  WS2_32!Ordinal407 
71c00000  WS2_32!Ordinal408 
71c00000  WS2_32!Ordinal409 
71c00000  WS2_32!Ordinal410 
71c00000  WS2_32!Ordinal411 
71c00000  WS2_32!Ordinal412 
71c00000  WS2_32!Ordinal413 
71c00000  WS2_32!Ordinal414 
71c00000  WS2_32!Ordinal415 
71c00000  WS2_32!Ordinal416 
71c00000  WS2_32!Ordinal417 
71c00000  WS2_32!Ordinal418 
71c00000  WS2_32!Ordinal419 
71c00000  WS2_32!Ordinal420 
71c00000  WS2_32!Ordinal421 
71c00000  WS2_32!Ordinal422 
71c00000  WS2_32!Ordinal423 
71c00000  WS2_32!Ordinal424 
71c00000  WS2_32!Ordinal425 
71c00000  WS2_32!Ordinal426 
71c00000  WS2_32!Ordinal427 
71c00000  WS2_32!Ordinal428 
71c00000  WS2_32!Ordinal429 
71c00000  WS2_32!Ordinal430 
71c00000  WS2_32!Ordinal431 
71c00000  WS2_32!Ordinal432 
71c00000  WS2_32!Ordinal433 
71c00000  WS2_32!Ordinal434 
71c00000  WS2_32!Ordinal435 
71c00000  WS2_32!Ordinal436 
71c00000  WS2_32!Ordinal437 
71c00000  WS2_32!Ordinal438 
71c00000  WS2_32!Ordinal439 
71c00000  WS2_32!Ordinal440 
71c00000  WS2_32!Ordinal441 
71c00000  WS2_32!Ordinal442 
71c00000  WS2_32!Ordinal443 
71c00000  WS2_32!Ordinal444 
71c00000  WS2_32!Ordinal445 
71c00000  WS2_32!Ordinal446 
71c00000  WS2_32!Ordinal447 
71c00000  WS2_32!Ordinal448 
71c00000  WS2_32!Ordinal449 
71c00000  WS2_32!Ordinal450 
71c00000  WS2_32!Ordinal451 
71c00000  WS2_32!Ordinal452 
71c00000  WS2_32!Ordinal453 
71c00000  WS2_32!Ordinal454 
71c00000  WS2_32!Ordinal455 
71c00000  WS2_32!Ordinal456 
71c00000  WS2_32!Ordinal457 
71c00000  WS2_32!Ordinal458 
71c00000  WS2_32!Ordinal459 
71c00000  WS2_32!Ordinal460 
71c00000  WS2_32!Ordinal461 
71c00000  WS2_32!Ordinal462 
71c00000  WS2_32!Ordinal463 
71c00000  WS2_32!Ordinal464 
71c00000  WS2_32!Ordinal465 
71c00000  WS2_32!Ordinal466 
71c00000  WS2_32!Ordinal467 
71c00000  WS2_32!Ordinal468 
71c00000  WS2_32!Ordinal469 
71c00000  WS2_32!Ordinal470 
71c00000  WS2_32!Ordinal471 
71c00000  WS2_32!Ordinal472 
71c00000  WS2_32!Ordinal473 
71c00000  WS2_32!Ordinal474 
71c00000  WS2_32!Ordinal475 
71c00000  WS2_32!Ordinal476 
71c00000  WS2_32!Ordinal477 
71c00000  WS2_32!Ordinal478 
71c00000  WS2_32!Ordinal479 
71c00000  WS2_32!Ordinal480 
71c00000  WS2_32!Ordinal481 
71c00000  WS2_32!Ordinal482 
71c00000  WS2_32!Ordinal483 
71c00000  WS2_32!Ordinal484 
71c00000  WS2_32!Ordinal485 
71c00000  WS2_32!Ordinal486 
71c00000  WS2_32!Ordinal487 
71c00000  WS2_32!Ordinal488 
71c00000  WS2_32!Ordinal489 
71c00000  WS2_32!Ordinal490 
71c00000  WS2_32!Ordinal491 
71c00000  WS2_32!Ordinal492 
71c00000  WS2_32!Ordinal493 
71c00000  WS2_32!Ordinal494 
71c00000  WS2_32!Ordinal495 
71c00000  WS2_32!Ordinal496 
71c02425  WS2_32!WSAGetLastError 
71c02430  WS2_32!WSASend 
71c0279b  WS2_32!select 
71c028bc  WS2_32!htons 
71c028bc  WS2_32!ntohs 
71c028da  WS2_32!ntohl 
71c028da  WS2_32!htonl 
71c0290e  WS2_32!WSASendTo 
71c02a2b  WS2_32!WSAStringToAddressW 
71c02cb2  WS2_32!closesocket 
71c02d47  WS2_32!setsockopt 
71c02e12  WS2_32!WSAIoctl 
71c02e97  WS2_32!ioctlsocket 
71c02ec2  WS2_32!send 
71c02f50  WS2_32!_WSAFDIsSet 
71c02f7f  WS2_32!recv 
71c03075  WS2_32!GetAddrInfoW 
71c0325d  WS2_32!WSASetLastError 
71c032e5  WS2_32!getaddrinfo 
71c033e7  WS2_32!FreeAddrInfoW 
71c033e7  WS2_32!freeaddrinfo 
71c03450  WS2_32!WSAAddressToStringW 
71c035e2  WS2_32!inet_ntoa 
71c03aad  WS2_32!getsockopt 
71c03c04  WS2_32!WSAGetOverlappedResult 
71c03c75  WS2_32!recvfrom 
71c03d14  WS2_32!sendto 
71c03da8  WS2_32!WSACleanup 
71c03f38  WS2_32!WSASocketW 
71c0410c  WS2_32!socket 
71c0438d  WS2_32!bind 
71c043f9  WS2_32!inet_addr 
71c0446a  WS2_32!connect 
71c044ea  WS2_32!getsockname 
71c04f3b  WS2_32!WSAStartup 
71c06162  WS2_32!shutdown 
71c069e9  WS2_32!WSALookupServiceBeginW 
71c06c91  WS2_32!WSALookupServiceNextW 
71c06ecd  WS2_32!WSALookupServiceEnd 
71c074c1  WS2_32!WSALookupServiceBeginA 
71c0788b  WS2_32!WSALookupServiceNextA 
71c07b5b  WS2_32!gethostname 
71c07ca1  WS2_32!gethostbyname 
71c08558  WS2_32!WSANSPIoctl 
71c08756  WS2_32!WSAAddressToStringA 
71c08911  WS2_32!WSCEnumProtocols 
71c08b01  WS2_32!WSAProviderConfigChange 
71c08ffd  WS2_32!listen 
71c090be  WS2_32!WSAEventSelect 
71c09129  WS2_32!WSACreateEvent 
71c09230  WS2_32!WSAEnumProtocolsW 
71c0938e  WS2_32!WSACloseEvent 
71c093d9  WS2_32!WSAWaitForMultipleEvents 
71c093ea  WS2_32!WSAEnumNetworkEvents 
71c09455  WS2_32!WSAResetEvent 
71c09466  WS2_32!WSASetEvent 
71c09480  WS2_32!WSARecv 
71c097d0  WS2_32!WSAStringToAddressA 
71c09938  WS2_32!getnameinfo 
71c09a4e  WS2_32!GetNameInfoW 
71c0c039  WS2_32!WSANtohl 
71c0c039  WS2_32!WSAHtonl 
71c0c121  WS2_32!WSANtohs 
71c0c121  WS2_32!WSAHtons 
71c0d2db  WS2_32!WSACancelBlockingCall 
71c0d32a  WS2_32!WSAIsBlocking 
71c0d37d  WS2_32!WSASetBlockingHook 
71c0d3d9  WS2_32!WSAUnhookBlockingHook 
71c0db79  WS2_32!WSADuplicateSocketW 
71c0dc07  WS2_32!WSADuplicateSocketA 
71c0dee9  WS2_32!WSCGetProviderPath 
71c0def9  WS2_32!WSAEnumProtocolsA 
71c0e44c  WS2_32!getprotobynumber 
71c0e509  WS2_32!getprotobyname 
71c0e745  WS2_32!gethostbyaddr 
71c0e869  WS2_32!getservbyport 
71c0e9b7  WS2_32!getservbyname 
71c0eb1b  WS2_32!WSAAsyncGetServByName 
71c0ebc7  WS2_32!WSAAsyncGetServByPort 
71c0ec51  WS2_32!WSAAsyncGetHostByName 
71c0ecf7  WS2_32!WSAAsyncGetHostByAddr 
71c0eda1  WS2_32!WSAAsyncGetProtoByName 
71c0ee47  WS2_32!WSAAsyncGetProtoByNumber 
71c0eecb  WS2_32!WSACancelAsyncRequest 
71c0f1e1  WS2_32!WSCEnableNSProvider 
71c0f3a1  WS2_32!WSCWriteNameSpaceOrder 
71c0f4d5  WS2_32!WSCInstallNameSpace 
71c0f6a1  WS2_32!WSCUnInstallNameSpace 
71c0f7f8  WS2_32!WSAGetQOSByName 
71c0f976  WS2_32!WSARecvDisconnect 
71c0fa01  WS2_32!WSARecvFrom 
71c0fd79  WS2_32!WSAEnumNameSpaceProvidersA 
71c0fdd9  WS2_32!WSAEnumNameSpaceProvidersW 
71c0ff61  WS2_32!WSAInstallServiceClassW 
71c1004c  WS2_32!WSARemoveServiceClass 
71c10137  WS2_32!WSAGetServiceClassNameByClassIdA 
71c10319  WS2_32!WSAGetServiceClassNameByClassIdW 
71c104f1  WS2_32!WSAGetServiceClassInfoW 
71c10619  WS2_32!WSASetServiceW 
71c10759  WS2_32!WSAInstallServiceClassA 
71c107d8  WS2_32!WSAGetServiceClassInfoA 
71c1086a  WS2_32!WSASetServiceA 
71c10d39  WS2_32!WSAAsyncSelect 
71c10dca  WS2_32!WSASendDisconnect 
71c10e55  WS2_32!getpeername 
71c10ee3  WS2_32!WSAConnect 
71c10f9f  WS2_32!WSAAccept 
71c1115d  WS2_32!WSAJoinLeaf 
71c11240  WS2_32!WSASocketA 
71c112ab  WS2_32!accept 
71c11501  WS2_32!WSCUpdateProvider 
71c11739  WS2_32!WSCWriteProviderOrder 
71c1186d  WS2_32!WSCInstallProvider 
71c11ba9  WS2_32!WSCDeinstallProvider 
71c11e97  WS2_32!WPUCompleteOverlappedRequest 
71c12045  WS2_32!WSApSetPostRoutine 
71c122fd  WS2_32!WEP 
 
 
Application exception occurred:
        App: C:\Program Files\Internet Explorer\iexplore.exe (pid=67940)
        When: 8/21/2009 @ 13:50:04.765
        Exception number: c0000005 (access violation)
 
*----> System Information <----*
        Computer Name: BSPTEST1
        User Name: Administrator
        Terminal Session Id: 0
        Number of Processors: 1
        Processor Type: x86 Family 6 Model 15 Stepping 8
        Windows Version: 5.2
        Current Build: 3790
        Service Pack: 2
        Current Type: Uniprocessor Free
        Registered Organization: ASG
        Registered Owner: AIDE
 
*----> Task List <----*
   0 System Process
   4 System
 296 smss.exe
 344 csrss.exe
 368 winlogon.exe
 416 services.exe
 428 lsass.exe
 616 svchost.exe
 684 svchost.exe
 740 svchost.exe
 768 svchost.exe
 804 svchost.exe
 992 spoolsv.exe
1016 msdtc.exe
1128 cisvc.exe
1184 inetinfo.exe
1216 FrameworkService.exe
1276 Mcshield.exe
1440 VsTskMgr.exe
1608 svchost.exe
1664 locator.exe
1736 sqlwriter.exe
1896 VMwareService.exe
2000 msftesql.exe
2032 svchost.exe
2412 svchost.exe
2804 wmiprvse.exe
2952 svchost.exe
1888 cidaemon.exe
1828 cidaemon.exe
2496 cidaemon.exe
3456 tomcat.exe
3040 sqlbrowser.exe
 764 sqlservr.exe
48272 E2EServerSvc.exe
49164 E2Esupervisor.exe
37832 tbsnt.exe
43740 tbsdagent.exe
43692 agentnt.exe
37360 naPrdMgr.exe
77284 Explorer.EXE
71740 udaterui.exe
74208 VMwareTray.exe
76660 VMwareUser.exe
22688 SHSTAT.EXE
21524 E2EMonitor.exe
19240 McTray.exe
29672 sqlmangr.exe
77772 ServiceControl.exe
77760 javaw.exe
77548 SNI_Datagram.exe
76136 SNI_Connection.exe
73396 wmiprvse.exe
75200 E2EService.exe
48980 E2EAgent.exe
20848 NOTEPAD.EXE
77148 CSCRIPT.EXE
67940 iexplore.exe
73976 drwtsn32.exe
 
*----> Module List <----*
0000000000400000 - 000000000041a000: C:\Program Files\Internet Explorer\iexplore.exe
0000000001480000 - 0000000001745000: C:\WINDOWS\system32\xpsp2res.dll
0000000001e50000 - 0000000001e90000: C:\WINDOWS\system32\e2eapi.dll
0000000010000000 - 000000001000c000: C:\Program Files\VMware\VMware Tools\hook.dll
000000001c000000 - 000000001c008000: C:\Program Files\End-End\E2EAgent\E2EHook.dll
000000004b3c0000 - 000000004b410000: C:\WINDOWS\system32\MSCTF.dll
000000005f270000 - 000000005f2ca000: C:\WINDOWS\system32\hnetcfg.dll
0000000071ae0000 - 0000000071ae8000: C:\WINDOWS\System32\wshtcpip.dll
0000000071b20000 - 0000000071b61000: C:\WINDOWS\system32\mswsock.dll
0000000071b70000 - 0000000071ba6000: C:\WINDOWS\system32\UxTheme.dll
0000000071bb0000 - 0000000071bb9000: C:\WINDOWS\system32\wsock32.dll
0000000071bf0000 - 0000000071bf8000: C:\WINDOWS\system32\WS2HELP.dll
0000000071c00000 - 0000000071c17000: C:\WINDOWS\system32\WS2_32.dll
0000000071c40000 - 0000000071c97000: C:\WINDOWS\system32\NETAPI32.dll
00000000722f0000 - 00000000722f5000: C:\WINDOWS\system32\sensapi.dll
0000000072490000 - 00000000724a2000: C:\WINDOWS\system32\browselc.dll
0000000074490000 - 00000000744b7000: C:\WINDOWS\system32\msls31.dll
00000000744c0000 - 00000000744eb000: C:\WINDOWS\system32\msimtf.dll
0000000074540000 - 00000000745d3000: C:\WINDOWS\system32\MLANG.dll
00000000745e0000 - 000000007489d000: C:\WINDOWS\system32\msi.dll
0000000075360000 - 00000000753de000: C:\WINDOWS\system32\CRYPTUI.dll
0000000075da0000 - 0000000075e5d000: C:\WINDOWS\system32\SXS.DLL
0000000075e60000 - 0000000075e87000: C:\WINDOWS\system32\apphelp.dll
0000000075eb0000 - 0000000075faf000: C:\WINDOWS\system32\BROWSEUI.dll
0000000076050000 - 00000000760e5000: C:\WINDOWS\system32\shdoclc.dll
0000000076190000 - 00000000761a2000: C:\WINDOWS\system32\MSASN1.dll
00000000761b0000 - 0000000076243000: C:\WINDOWS\system32\CRYPT32.dll
0000000076290000 - 00000000762ad000: C:\WINDOWS\system32\IMM32.DLL
0000000076520000 - 000000007653d000: C:\WINDOWS\System32\CSCDLL.dll
0000000076920000 - 00000000769e2000: C:\WINDOWS\system32\USERENV.dll
0000000076aa0000 - 0000000076acd000: C:\WINDOWS\system32\WINMM.dll
0000000076b70000 - 0000000076b7b000: C:\WINDOWS\system32\PSAPI.DLL
0000000076bb0000 - 0000000076bdb000: C:\WINDOWS\system32\WINTRUST.dll
0000000076c10000 - 0000000076c38000: C:\WINDOWS\system32\imagehlp.dll
0000000076c90000 - 0000000076cb7000: C:\WINDOWS\system32\msv1_0.dll
0000000076cf0000 - 0000000076d0a000: C:\WINDOWS\system32\iphlpapi.dll
0000000076e30000 - 0000000076e3c000: C:\WINDOWS\system32\rtutils.dll
0000000076e40000 - 0000000076e52000: C:\WINDOWS\system32\rasman.dll
0000000076e60000 - 0000000076e8f000: C:\WINDOWS\system32\TAPI32.dll
0000000076e90000 - 0000000076ecf000: C:\WINDOWS\system32\RASAPI32.DLL
0000000076ed0000 - 0000000076efa000: C:\WINDOWS\system32\DNSAPI.dll
0000000076f10000 - 0000000076f3e000: C:\WINDOWS\system32\WLDAP32.dll
0000000076f50000 - 0000000076f63000: C:\WINDOWS\system32\Secur32.dll
0000000076f70000 - 0000000076f77000: C:\WINDOWS\System32\winrnr.dll
0000000076f80000 - 0000000076f85000: C:\WINDOWS\system32\rasadhlp.dll
0000000076f90000 - 0000000077001000: C:\WINDOWS\system32\JScript.dll
0000000077010000 - 00000000770d6000: C:\WINDOWS\system32\COMRes.dll
00000000770e0000 - 00000000771e8000: C:\WINDOWS\system32\SETUPAPI.dll
0000000077210000 - 00000000772bb000: C:\WINDOWS\system32\WININET.dll
00000000772c0000 - 000000007736f000: C:\WINDOWS\system32\urlmon.dll
0000000077380000 - 0000000077411000: C:\WINDOWS\system32\USER32.dll
0000000077420000 - 0000000077523000: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.3959_x-ww_D8713E55\Comctl32.dll
0000000077530000 - 00000000775c7000: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_5.82.3790.3959_x-ww_78FCF8D0\COMCTL32.dll
0000000077670000 - 00000000777a9000: C:\WINDOWS\system32\ole32.dll
00000000777b0000 - 0000000077833000: C:\WINDOWS\system32\CLBCatQ.DLL
0000000077980000 - 0000000077af3000: C:\WINDOWS\system32\SHDOCVW.dll
0000000077b00000 - 0000000077b54000: C:\WINDOWS\System32\cscui.dll
0000000077b90000 - 0000000077b98000: C:\WINDOWS\system32\VERSION.dll
0000000077ba0000 - 0000000077bfa000: C:\WINDOWS\system32\msvcrt.dll
0000000077c00000 - 0000000077c48000: C:\WINDOWS\system32\GDI32.dll
0000000077c50000 - 0000000077cef000: C:\WINDOWS\system32\RPCRT4.dll
0000000077d00000 - 0000000077d8b000: C:\WINDOWS\system32\OLEAUT32.dll
0000000077da0000 - 0000000077df2000: C:\WINDOWS\system32\SHLWAPI.dll
0000000077e40000 - 0000000077f42000: C:\WINDOWS\system32\kernel32.dll
0000000077f50000 - 0000000077feb000: C:\WINDOWS\system32\ADVAPI32.dll
000000007c800000 - 000000007c8c0000: C:\WINDOWS\system32\ntdll.dll
000000007c8d0000 - 000000007d0ce000: C:\WINDOWS\system32\SHELL32.dll
000000007f9e0000 - 000000007fce2000: C:\WINDOWS\system32\mshtml.dll
 
*----> State Dump for Thread Id 0x12164 <----*
 
eax=00000070 ebx=00000000 ecx=00000000 edx=00000040 esi=0015d718 edi=00000000
eip=7c8285ec esp=0013eb3c ebp=0013ed98 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000202
 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll - 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\BROWSEUI.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\SHDOCVW.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\Internet Explorer\iexplore.exe - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll - 
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
0013ed98 75ec1c83 0015dcf8 0013ee50 0015dcf8 ntdll!KiFastSystemCallRet
0013ee24 75ec61ef 0015dcf8 0015dcf8 00000000 BROWSEUI!DllCanUnloadNow+0x12fc
0013fea8 779ba36e 0015dcf8 00000001 00000000 BROWSEUI!Ordinal102+0xc7
0013fec8 0040243d 0015253a 00000001 ffffffff SHDOCVW!Ordinal101+0xb4
0013ff1c 00402744 00400000 00000000 0015253a iexplore!DllGetLCID+0x327
0013ffc0 77e6f23b 00000000 00000000 7ffdf000 iexplore!DllGetLCID+0x62e
0013fff0 00000000 004025c2 00000000 78746341 kernel32!ProcessIdToSessionId+0x209
 
*----> Raw Stack Dump <----*
000000000013eb3c  53 bf 39 77 d8 13 ed 75 - 50 ee 13 00 00 00 00 00  S.9w...uP.......
000000000013eb4c  00 00 00 00 76 02 69 11 - 13 01 00 00 2e 16 00 00  ....v.i.........
000000000013eb5c  00 00 00 00 3c a6 b9 43 - 25 02 00 00 3b 00 00 00  ....<..C%...;...
000000000013eb6c  01 00 00 00 01 44 00 90 - 18 d7 15 00 00 00 00 00  .....D..........
000000000013eb7c  86 01 f1 00 d0 56 15 00 - 01 00 00 00 00 00 00 00  .....V..........
000000000013eb8c  4d 00 69 00 63 00 72 00 - 6f 00 73 00 6f 00 66 00  M.i.c.r.o.s.o.f.
000000000013eb9c  74 00 20 00 49 00 6e 00 - 74 00 65 00 72 00 6e 00  t. .I.n.t.e.r.n.
000000000013ebac  65 00 74 00 20 00 45 00 - 78 00 70 00 6c 00 6f 00  e.t. .E.x.p.l.o.
000000000013ebbc  72 00 65 00 72 00 00 00 - 00 00 00 00 60 ed 13 00  r.e.r.......`...
000000000013ebcc  d4 eb 13 00 10 ed 13 00 - ff 76 82 7c 50 ec 13 00  .........v.|P...
000000000013ebdc  0c ec 13 00 d1 96 82 7c - d6 96 82 7c 50 ec 13 00  .......|...|P...
000000000013ebec  ff 76 82 7c 10 ed 13 00 - e8 eb 13 00 0b 77 82 7c  .v.|.........w.|
000000000013ebfc  b0 ff 13 00 70 82 82 7c - e0 96 82 7c ff ff ff ff  ....p..|...|....
000000000013ec0c  d6 96 82 7c 6d 6a f7 77 - 00 00 00 00 00 00 00 00  ...|mj.w........
000000000013ec1c  04 ee 13 00 78 6a f7 77 - 34 ed 13 00 c8 00 00 00  ....xj.w4.......
000000000013ec2c  2c ed 13 00 10 00 00 00 - 24 ed 13 00 00 00 00 00  ,.......$.......
000000000013ec3c  c8 00 00 00 00 00 00 00 - 04 ee 13 00 2a b0 82 7c  ............*..|
000000000013ec4c  10 ed 13 00 e4 fc 92 7c - 12 ed 13 00 1c ec 92 7c  .......|.......|
000000000013ec5c  ae 00 00 00 b0 ec 13 00 - 1c d8 82 7c 12 ed 13 00  ...........|....
000000000013ec6c  35 01 00 00 73 00 68 00 - 64 00 6f 00 63 00 76 00  5...s.h.d.o.c.v.
 
*----> State Dump for Thread Id 0x127e0 <----*
 
eax=7c80e1fa ebx=00bffef0 ecx=00000000 edx=00000000 esi=00000002 edi=00000000
eip=7c8285ec esp=00bffea4 ebp=00bfff48 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
00bfff48 7c80e4a2 00000002 00bfff70 00000000 ntdll!KiFastSystemCallRet
00bfffb8 77e64829 00000000 00000000 00000000 ntdll!RtlSetLastWin32ErrorAndNtStatusFromNtStatus+0x301
00bfffec 00000000 7c80e1fa 00000000 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000000bffea4  fb 7c 82 7c bb e5 80 7c - 02 00 00 00 f0 fe bf 00  .|.|...|........
0000000000bffeb4  01 00 00 00 01 00 00 00 - 10 ff bf 00 00 10 00 00  ................
0000000000bffec4  90 2f a0 00 c0 83 88 7c - 24 00 00 00 01 00 00 00  ./.....|$.......
0000000000bffed4  00 00 00 00 00 00 00 00 - 30 00 00 00 ff ff ff ff  ........0.......
0000000000bffee4  ff ff ff ff 61 d3 80 7c - 00 00 00 00 80 00 00 00  ....a..|........
0000000000bffef4  88 00 00 00 08 00 00 c0 - 00 10 00 00 30 ff bf 00  ............0...
0000000000bfff04  d1 96 82 7c d6 96 82 7c - 00 10 00 00 00 a2 2f 4d  ...|...|....../M
0000000000bfff14  ff ff ff ff 00 f0 fd 7f - c0 83 88 7c 10 ff bf 00  ...........|....
0000000000bfff24  f0 fe bf 00 e0 96 82 7c - 02 00 00 00 c0 fe bf 00  .......|........
0000000000bfff34  ae e1 80 7c dc ff bf 00 - 70 82 82 7c c8 d3 80 7c  ...|....p..|...|
0000000000bfff44  00 00 00 00 b8 ff bf 00 - a2 e4 80 7c 02 00 00 00  ...........|....
0000000000bfff54  70 ff bf 00 00 00 00 00 - e0 93 04 00 01 00 00 00  p...............
0000000000bfff64  00 00 00 00 00 00 00 00 - 00 00 00 00 80 00 00 00  ................
0000000000bfff74  88 00 00 00 00 10 00 00 - 90 2f a0 00 00 10 00 00  ........./......
0000000000bfff84  88 1f a0 00 a0 70 88 7c - 00 00 00 00 28 00 00 00  .....p.|....(...
0000000000bfff94  80 70 88 7c 00 10 00 00 - a0 70 88 7c 90 2f a0 00  .p.|.....p.|./..
0000000000bfffa4  00 00 00 00 80 70 88 7c - e5 03 00 00 00 10 00 00  .....p.|........
0000000000bfffb4  88 1f a0 00 ec ff bf 00 - 29 48 e6 77 00 00 00 00  ........)H.w....
0000000000bfffc4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000000bfffd4  c4 ff bf 00 14 ff 82 80 - ff ff ff ff 60 1a e6 77  ............`..w
 
*----> State Dump for Thread Id 0x127f4 <----*
 
eax=00150640 ebx=7c81a360 ecx=0184cde0 edx=00001000 esi=00000230 edi=00000000
eip=7c8285ec esp=0184ff0c ebp=0184ff7c iopl=0         nv up ei ng nz ac pe cy
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000293
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\mshtml.dll - 
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
0184ff7c 77e61c8d 00000230 000927c0 00000000 ntdll!KiFastSystemCallRet
0184ff90 7fab0803 00000230 000927c0 00000000 kernel32!WaitForSingleObject+0x12
0184ffb8 77e64829 010827a0 00000000 00000000 mshtml!DllGetClassObject+0x14ee8
0184ffec 00000000 7fab0fc1 010827a0 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
000000000184ff0c  0b 7d 82 7c 1e 1d e6 77 - 30 02 00 00 00 00 00 00  .}.|...w0.......
000000000184ff1c  50 ff 84 01 00 00 00 00 - a0 27 08 01 60 a3 81 7c  P........'..`..|
000000000184ff2c  24 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00  $...............
000000000184ff3c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000184ff4c  00 00 00 00 00 44 5f 9a - fe ff ff ff 00 f0 fd 7f  .....D_.........
000000000184ff5c  50 ff 84 01 a0 27 08 01 - 20 ff 84 01 00 00 00 00  P....'.. .......
000000000184ff6c  dc ff 84 01 60 1a e6 77 - 48 1d e6 77 00 00 00 00  ....`..wH..w....
000000000184ff7c  90 ff 84 01 8d 1c e6 77 - 30 02 00 00 c0 27 09 00  .......w0....'..
000000000184ff8c  00 00 00 00 b8 ff 84 01 - 03 08 ab 7f 30 02 00 00  ............0...
000000000184ff9c  c0 27 09 00 00 00 00 00 - a0 27 08 01 a0 27 08 01  .'.......'...'..
000000000184ffac  fc 0f ab 7f 00 00 00 00 - ce 0f ab 7f ec ff 84 01  ................
000000000184ffbc  29 48 e6 77 a0 27 08 01 - 00 00 00 00 00 00 00 00  )H.w.'..........
000000000184ffcc  a0 27 08 01 00 00 00 00 - c4 ff 84 01 14 ff 82 80  .'..............
000000000184ffdc  ff ff ff ff 60 1a e6 77 - 30 48 e6 77 00 00 00 00  ....`..w0H.w....
000000000184ffec  00 00 00 00 00 00 00 00 - c1 0f ab 7f a0 27 08 01  .............'..
000000000184fffc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000185000c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000185001c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000185002c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000185003c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
 
*----> State Dump for Thread Id 0x12d58 <----*
 
eax=43b99f56 ebx=00000100 ecx=00000000 edx=00000001 esi=001ab6e0 edi=00000000
eip=7c8285ec esp=0194fe1c ebp=0194ff84 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll - 
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
0194ff84 77c88792 0194ffac 77c8872d 001ab6e0 ntdll!KiFastSystemCallRet
0194ff8c 77c8872d 001ab6e0 00000000 00000000 RPCRT4!I_RpcFree+0xbd0
0194ffac 77c7b110 00163360 0194ffec 77e64829 RPCRT4!I_RpcFree+0xb6b
0194ffb8 77e64829 00175fe8 00000000 00000000 RPCRT4!NdrFullPointerInsertRefId+0x3ba
0194ffec 00000000 77c7b0f5 00175fe8 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
000000000194fe1c  3b 78 82 7c ac 85 c8 77 - 60 02 00 00 74 ff 94 01  ;x.|...w`...t...
000000000194fe2c  00 00 00 00 50 1a 1d 00 - 54 ff 94 01 00 00 00 00  ....P...T.......
000000000194fe3c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe4c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe5c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe6c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe7c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe8c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fe9c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194feac  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194febc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fecc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000194fedc  00 00 00 00 00 00 00 00 - 00 00 00 00 b0 9d 94 84  ................
000000000194feec  b0 9d 94 84 00 f1 df ff - 00 00 00 00 b0 9d 94 84  ................
000000000194fefc  00 f1 df ff 00 00 00 00 - fc ab 96 f2 d0 21 a5 80  .............!..
000000000194ff0c  20 f1 df ff 00 00 00 00 - 0c ac 96 f2 0d ed 82 80   ...............
000000000194ff1c  00 00 00 00 00 00 00 00 - 1c ac 96 f2 be 7b 82 80  .............{..
000000000194ff2c  00 00 00 00 84 ff 94 01 - a6 84 c8 77 4c ff 94 01  ...........wL...
000000000194ff3c  b6 84 c8 77 ab a3 81 7c - 80 15 1b 00 e8 5f 17 00  ...w...|....._..
000000000194ff4c  00 a2 2f 4d ff ff ff ff - 00 17 5b ca ff ff ff ff  ../M......[.....
 
*----> State Dump for Thread Id 0x12ca8 <----*
 
eax=776b16e4 ebx=00007530 ecx=00000000 edx=00000000 esi=00000000 edi=01a4ff4c
eip=7c8285ec esp=01a4ff0c ebp=01a4ff74 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000202
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\ole32.dll - 
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01a4ff74 77e424ed 0000ea60 00000000 01a4ffac ntdll!KiFastSystemCallRet
01a4ff84 776bbb0f 0000ea60 001b4dd0 776bbab4 kernel32!Sleep+0xf
01a4ffac 776b1704 00000000 01a4ffec 77e64829 ole32!CoFreeUnusedLibrariesEx+0x1c0
01a4ffb8 77e64829 001b4dd0 00000000 00000000 ole32!CoRegisterChannelHook+0x538
01a4ffec 00000000 776b16e4 001b4dd0 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000001a4ff0c  4b 6f 82 7c d1 1e e4 77 - 00 00 00 00 4c ff a4 01  Ko.|...w....L...
0000000001a4ff1c  96 1c e6 77 48 69 79 77 - 30 75 00 00 24 00 00 00  ...wHiyw0u..$...
0000000001a4ff2c  01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a4ff3c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a4ff4c  00 ba 3c dc ff ff ff ff - 34 66 79 77 4c ff a4 01  ..<.....4fywL...
0000000001a4ff5c  1c ff a4 01 49 f8 6b 77 - dc ff a4 01 60 1a e6 77  ....I.kw....`..w
0000000001a4ff6c  60 16 e6 77 00 00 00 00 - 84 ff a4 01 ed 24 e4 77  `..w.........$.w
0000000001a4ff7c  60 ea 00 00 00 00 00 00 - ac ff a4 01 0f bb 6b 77  `.............kw
0000000001a4ff8c  60 ea 00 00 d0 4d 1b 00 - b4 ba 6b 77 00 00 00 00  `....M....kw....
0000000001a4ff9c  00 00 00 00 d0 4d 1b 00 - 00 00 67 77 d0 4d 1b 00  .....M....gw.M..
0000000001a4ffac  b8 ff a4 01 04 17 6b 77 - 00 00 00 00 ec ff a4 01  ......kw........
0000000001a4ffbc  29 48 e6 77 d0 4d 1b 00 - 00 00 00 00 00 00 00 00  )H.w.M..........
0000000001a4ffcc  d0 4d 1b 00 00 00 00 00 - c4 ff a4 01 14 ff 82 80  .M..............
0000000001a4ffdc  ff ff ff ff 60 1a e6 77 - 30 48 e6 77 00 00 00 00  ....`..w0H.w....
0000000001a4ffec  00 00 00 00 00 00 00 00 - e4 16 6b 77 d0 4d 1b 00  ..........kw.M..
0000000001a4fffc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a5000c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a5001c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a5002c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001a5003c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
 
*----> State Dump for Thread Id 0xcc90 <----*
 
eax=77c7b0f5 ebx=00000100 ecx=00000000 edx=00000000 esi=001ab6e0 edi=00000000
eip=7c8285ec esp=01b4fe1c ebp=01b4ff84 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01b4ff84 77c88792 01b4ffac 77c8872d 001ab6e0 ntdll!KiFastSystemCallRet
01b4ff8c 77c8872d 001ab6e0 00000000 00000000 RPCRT4!I_RpcFree+0xbd0
01b4ffac 77c7b110 00163360 01b4ffec 77e64829 RPCRT4!I_RpcFree+0xb6b
01b4ffb8 77e64829 001b6e28 00000000 00000000 RPCRT4!NdrFullPointerInsertRefId+0x3ba
01b4ffec 00000000 77c7b0f5 001b6e28 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000001b4fe1c  3b 78 82 7c ac 85 c8 77 - 60 02 00 00 74 ff b4 01  ;x.|...w`...t...
0000000001b4fe2c  00 00 00 00 18 87 1a 00 - 54 ff b4 01 00 00 00 00  ........T.......
0000000001b4fe3c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001b4fe4c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001b4fe5c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001b4fe6c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001b4fe7c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001b4fe8c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001b4fe9c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001b4feac  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001b4febc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001b4fecc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001b4fedc  00 00 00 00 00 00 00 00 - 00 00 00 00 60 c5 63 84  ............`.c.
0000000001b4feec  60 c5 63 84 00 f1 df ff - 00 00 00 00 60 c5 63 84  `.c.........`.c.
0000000001b4fefc  00 f1 df ff 00 00 00 00 - fc ab a0 f2 d0 21 a5 80  .............!..
0000000001b4ff0c  20 f1 df ff 00 00 00 00 - 0c ac a0 f2 0d ed 82 80   ...............
0000000001b4ff1c  00 00 00 00 00 00 00 00 - 1c ac a0 f2 be 7b 82 80  .............{..
0000000001b4ff2c  00 00 00 00 84 ff b4 01 - a6 84 c8 77 4c ff b4 01  ...........wL...
0000000001b4ff3c  b6 84 c8 77 ab a3 81 7c - e0 92 16 00 28 6e 1b 00  ...w...|....(n..
0000000001b4ff4c  00 a2 2f 4d ff ff ff ff - 00 17 5b ca ff ff ff ff  ../M......[.....
 
*----> State Dump for Thread Id 0x127d8 <----*
 
eax=00000001 ebx=01c4fc7c ecx=71b21803 edx=01c4fe84 esi=001c8c80 edi=01c4fd80
eip=71c0283c esp=01c4fc24 ebp=01c4fc54 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\WS2_32.dll - 
function: WS2_32!select
        71c02821 0f84c1900000     je      WS2_32!GetNameInfoW+0x1e9a (71c0b8e8)
        71c02827 8b460c           mov     eax,[esi+0xc]
        71c0282a 8d4de4           lea     ecx,[ebp-0x1c]
        71c0282d 51               push    ecx
        71c0282e ff7518           push    dword ptr [ebp+0x18]
        71c02831 57               push    edi
        71c02832 53               push    ebx
        71c02833 ff750c           push    dword ptr [ebp+0xc]
        71c02836 ff7508           push    dword ptr [ebp+0x8]
        71c02839 ff5060           call    dword ptr [eax+0x60]
FAULT ->71c0283c 8bf8             mov     edi,eax
        71c0283e 8bce             mov     ecx,esi
        71c02840 e89bfbffff       call    WS2_32!Ordinal496+0x23e0 (71c023e0)
        71c02845 83ffff           cmp     edi,0xffffffff
        71c02848 0f848b900000     je      WS2_32!GetNameInfoW+0x1e8b (71c0b8d9)
        71c0284e 8bc7             mov     eax,edi
        71c02850 e8b8fcffff       call    WS2_32!WSASend+0xdd (71c0250d)
        71c02855 c21400           ret     0x14
        71c02858 ffff             ???
        71c0285a ffff             ???
        71c0285c ffb8c07108b9     ???
 
*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\system32\WININET.dll - 
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01c4fc54 77226314 00000002 01c4fe84 01c4fc7c WS2_32!select+0xa1
01c4ffb0 77238db4 01c4ffec 77e64829 00168eb0 WININET!PrivacyGetZonePreferenceW+0x7a55
01c4ffb8 77e64829 00168eb0 00000000 00000000 WININET!InternetSetStatusCallback+0x1d7
01c4ffec 00000000 77238da7 00168eb0 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000001c4fc24  b0 8e 16 00 01 00 00 00 - 00 00 00 00 18 03 00 00  ................
0000000001c4fc34  01 00 00 00 00 00 00 00 - 24 fc c4 01 50 f8 c4 01  ........$...P...
0000000001c4fc44  dc ff c4 01 99 26 c1 71 - 58 28 c0 71 ff ff ff ff  .....&.qX(.q....
0000000001c4fc54  b0 ff c4 01 14 63 22 77 - 02 00 00 00 84 fe c4 01  .....c"w........
0000000001c4fc64  7c fc c4 01 80 fd c4 01 - 88 ff c4 01 00 00 00 00  |...............
0000000001c4fc74  b0 8e 16 00 00 00 00 00 - 00 00 00 00 b0 04 00 00  ................
0000000001c4fc84  35 ed 82 7c 00 00 00 00 - 00 00 00 00 10 f9 1a 00  5..|............
0000000001c4fc94  60 25 c0 71 00 f0 fd 7f - f4 77 88 7c 34 fc c4 01  `%.q.....w.|4...
0000000001c4fca4  00 00 00 00 04 fd c4 01 - 70 82 82 7c 58 ee 82 7c  ........p..|X..|
0000000001c4fcb4  ff ff ff ff ec ed 82 7c - 3b 7c 82 7c b1 ec 82 7c  .......|;|.|...|
0000000001c4fcc4  28 fd c4 01 00 00 00 00 - b0 8e 16 00 00 00 00 00  (...............
0000000001c4fcd4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001c4fce4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001c4fcf4  00 00 00 00 00 00 00 00 - c4 fc c4 01 00 00 00 00  ................
0000000001c4fd04  f4 ff c4 01 70 82 82 7c - b8 ec 82 7c ff ff ff ff  ....p..|...|....
0000000001c4fd14  b1 ec 82 7c 9b 6d 82 7c - da 84 82 7c 28 fd c4 01  ...|.m.|...|(...
0000000001c4fd24  01 00 00 00 17 00 01 00 - 00 00 00 00 00 00 00 00  ................
0000000001c4fd34  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001c4fd44  80 76 00 c0 00 00 60 c0 - 6e f5 02 00 80 76 00 c0  .v....`.n....v..
0000000001c4fd54  00 00 60 c0 00 7a f5 f6 - 54 7a f5 f6 d0 21 a5 80  ..`..z..Tz...!..
 
*----> State Dump for Thread Id 0x12064 <----*
 
eax=000000c0 ebx=00000000 ecx=00000000 edx=00000000 esi=00000000 edi=00000000
eip=7c8285ec esp=01d4ffa0 ebp=01d4ffb8 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01d4ffb8 77e64829 00000000 00000000 00000000 ntdll!KiFastSystemCallRet
01d4ffec 00000000 7c83d3dd 00000000 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000001d4ffa0  4b 6f 82 7c 24 d4 83 7c - 01 00 00 00 b0 ff d4 01  Ko.|$..|........
0000000001d4ffb0  00 00 00 00 00 00 00 80 - ec ff d4 01 29 48 e6 77  ............)H.w
0000000001d4ffc0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d4ffd0  00 00 00 00 c4 ff d4 01 - 14 ff 82 80 ff ff ff ff  ................
0000000001d4ffe0  60 1a e6 77 30 48 e6 77 - 00 00 00 00 00 00 00 00  `..w0H.w........
0000000001d4fff0  00 00 00 00 dd d3 83 7c - 00 00 00 00 00 00 00 00  .......|........
0000000001d50000  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50010  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50020  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50030  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50040  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50050  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50060  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50070  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50080  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d50090  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d500a0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d500b0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d500c0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001d500d0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
 
*----> State Dump for Thread Id 0x903c <----*
 
eax=00000002 ebx=00000000 ecx=001aa934 edx=00000000 esi=7c889638 edi=7c889080
eip=7c8285ec esp=01e4ff74 ebp=01e4ffb8 iopl=0         nv up ei ng nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000286
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01e4ffb8 77e64829 00000000 00000000 00000000 ntdll!KiFastSystemCallRet
01e4ffec 00000000 7c839efb 00000000 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
0000000001e4ff74  db 77 82 7c 38 9f 83 7c - 20 03 00 00 b0 ff e4 01  .w.|8..| .......
0000000001e4ff84  b4 ff e4 01 9c ff e4 01 - a4 ff e4 01 00 00 00 00  ................
0000000001e4ff94  00 00 00 00 00 00 00 00 - 00 00 00 00 00 50 1f 00  .............P..
0000000001e4ffa4  00 7c 28 e8 ff ff ff ff - 00 00 00 00 ca a9 83 7c  .|(............|
0000000001e4ffb4  c8 a5 1a 00 ec ff e4 01 - 29 48 e6 77 00 00 00 00  ........)H.w....
0000000001e4ffc4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001e4ffd4  c4 ff e4 01 14 ff 82 80 - ff ff ff ff 60 1a e6 77  ............`..w
0000000001e4ffe4  30 48 e6 77 00 00 00 00 - 00 00 00 00 00 00 00 00  0H.w............
0000000001e4fff4  fb 9e 83 7c 00 00 00 00 - 00 00 00 00 4d 5a 90 00  ...|........MZ..
0000000001e50004  03 00 00 00 04 00 00 00 - ff ff 00 00 b8 00 00 00  ................
0000000001e50014  00 00 00 00 40 00 00 00 - 00 00 00 00 00 00 00 00  ....@...........
0000000001e50024  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001e50034  00 00 00 00 00 00 00 00 - e0 00 00 00 0e 1f ba 0e  ................
0000000001e50044  00 b4 09 cd 21 b8 01 4c - cd 21 54 68 69 73 20 70  ....!..L.!This p
0000000001e50054  72 6f 67 72 61 6d 20 63 - 61 6e 6e 6f 74 20 62 65  rogram cannot be
0000000001e50064  20 72 75 6e 20 69 6e 20 - 44 4f 53 20 6d 6f 64 65   run in DOS mode
0000000001e50074  2e 0d 0d 0a 24 00 00 00 - 00 00 00 00 3a a5 43 ed  ....$.......:.C.
0000000001e50084  7e c4 2d be 7e c4 2d be - 7e c4 2d be 48 e2 26 be  ~.-.~.-.~.-.H.&.
0000000001e50094  76 c4 2d be fd d8 23 be - 68 c4 2d be 48 e2 27 be  v.-...#.h.-.H.'.
0000000001e500a4  1e c4 2d be 7e c4 2c be - 18 c4 2d be 1c db 3e be  ..-.~.,...-...>.
 
*----> State Dump for Thread Id 0x1284c <----*
 
eax=00000084 ebx=01fcfefc ecx=00000010 edx=01ff1f80 esi=01fcff00 edi=7ffdf000
eip=7c8285ec esp=01fcfeb0 ebp=01fcff58 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
01fcff58 77e62fbe 00000002 01fcffac 00000000 ntdll!KiFastSystemCallRet
01fcff74 77226690 00000002 01fcffac 00000000 kernel32!WaitForMultipleObjects+0x18
01fcffb4 77238a1a 77e64829 001cc2a8 00000000 WININET!PrivacyGetZonePreferenceW+0x7dd1
01fcffec 00000000 77238a0f 001cc2a8 00000000 WININET!InternetOpenUrlA+0xa44
 
*----> Raw Stack Dump <----*
0000000001fcfeb0  fb 7c 82 7c 2c 20 e6 77 - 02 00 00 00 fc fe fc 01  .|.|, .w........
0000000001fcfec0  01 00 00 00 00 00 00 00 - 1c ff fc 01 00 00 00 00  ................
0000000001fcfed0  a8 c2 1c 00 00 c2 1c 00 - 24 00 00 00 01 00 00 00  ........$.......
0000000001fcfee0  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0000000001fcfef0  00 00 00 00 00 00 00 00 - 00 00 00 00 e4 03 00 00  ................
0000000001fcff00  e0 03 00 00 cc 0a 23 77 - 44 ff fc 01 e6 6d 21 77  ......#wD....m!w
0000000001fcff10  e5 03 00 00 e5 03 00 00 - 58 44 1f 00 00 5d 1e ee  ........XD...]..
0000000001fcff20  ff ff ff ff 00 f0 fd 7f - 5b 0f 23 77 1c ff fc 01  ........[.#w....
0000000001fcff30  fc fe fc 01 a8 c2 1c 00 - bc 8e 16 00 02 00 00 00  ................
0000000001fcff40  cc fe fc 01 60 ff fc 01 - dc ff fc 01 60 1a e6 77  ....`.......`..w
0000000001fcff50  f8 1f e6 77 00 00 00 00 - 74 ff fc 01 be 2f e6 77  ...w....t..../.w
0000000001fcff60  02 00 00 00 ac ff fc 01 - 00 00 00 00 30 75 00 00  ............0u..
0000000001fcff70  00 00 00 00 b4 ff fc 01 - 90 66 22 77 02 00 00 00  .........f"w....
0000000001fcff80  ac ff fc 01 00 00 00 00 - 30 75 00 00 00 00 00 00  ........0u......
0000000001fcff90  30 6c 1d 00 03 01 00 00 - 00 00 00 00 01 00 00 00  0l..............
0000000001fcffa0  c4 0c b5 f4 e0 03 00 00 - 83 0e b5 43 e4 03 00 00  ...........C....
0000000001fcffb0  e0 03 00 00 ec ff fc 01 - 1a 8a 23 77 29 48 e6 77  ..........#w)H.w
0000000001fcffc0  a8 c2 1c 00 00 00 00 00 - 00 00 00 00 a8 c2 1c 00  ................
0000000001fcffd0  00 00 00 00 c4 ff fc 01 - 14 ff 82 80 ff ff ff ff  ................
0000000001fcffe0  60 1a e6 77 30 48 e6 77 - 00 00 00 00 00 00 00 00  `..w0H.w........
 
*----> State Dump for Thread Id 0x1111c <----*
 
eax=71b258ab ebx=c0000000 ecx=00000000 edx=00000000 esi=00000000 edi=71b591fc
eip=7c8285ec esp=0212ff80 ebp=0212ffb8 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
0212ffb8 77e64829 71b259de 00000000 00000000 ntdll!KiFastSystemCallRet
0212ffec 00000000 71b258ab 001d6230 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
000000000212ff80  db 77 82 7c 14 59 b2 71 - 30 04 00 00 c0 ff 12 02  .w.|.Y.q0.......
000000000212ff90  b4 ff 12 02 a8 ff 12 02 - 60 59 b2 71 00 00 00 00  ........`Y.q....
000000000212ffa0  00 00 00 00 30 62 1d 00 - 00 00 00 00 00 00 00 00  ....0b..........
000000000212ffb0  00 00 b2 71 10 ff 1a 00 - ec ff 12 02 29 48 e6 77  ...q........)H.w
000000000212ffc0  de 59 b2 71 00 00 00 00 - 00 00 00 00 30 62 1d 00  .Y.q........0b..
000000000212ffd0  00 00 00 00 c4 ff 12 02 - 14 ff 82 80 ff ff ff ff  ................
000000000212ffe0  60 1a e6 77 30 48 e6 77 - 00 00 00 00 00 00 00 00  `..w0H.w........
000000000212fff0  00 00 00 00 ab 58 b2 71 - 30 62 1d 00 00 00 00 00  .....X.q0b......
0000000002130000  0d 00 af 6f 01 00 3f 00 - 3f 00 3f 00 3f 00 00 00  ...o..?.?.?.?...
0000000002130010  00 00 00 00 00 00 00 00 - 00 00 03 01 00 00 01 00  ................
0000000002130020  02 00 03 00 04 00 05 00 - 06 00 07 00 08 00 09 00  ................
0000000002130030  0a 00 0b 00 0c 00 0d 00 - 0e 00 0f 00 10 00 11 00  ................
0000000002130040  12 00 13 00 14 00 15 00 - 16 00 17 00 18 00 19 00  ................
0000000002130050  1a 00 1b 00 1c 00 1d 00 - 1e 00 1f 00 20 00 21 00  ............ .!.
0000000002130060  22 00 23 00 24 00 25 00 - 26 00 27 00 28 00 29 00  ".#.$.%.&.'.(.).
0000000002130070  2a 00 2b 00 2c 00 2d 00 - 2e 00 2f 00 30 00 31 00  *.+.,.-.../.0.1.
0000000002130080  32 00 33 00 34 00 35 00 - 36 00 37 00 38 00 39 00  2.3.4.5.6.7.8.9.
0000000002130090  3a 00 3b 00 3c 00 3d 00 - 3e 00 3f 00 40 00 41 00  :.;.<.=.>.?.@.A.
00000000021300a0  42 00 43 00 44 00 45 00 - 46 00 47 00 48 00 49 00  B.C.D.E.F.G.H.I.
00000000021300b0  4a 00 4b 00 4c 00 4d 00 - 4e 00 4f 00 50 00 51 00  J.K.L.M.N.O.P.Q.
 
*----> State Dump for Thread Id 0x4b34 <----*
 
eax=00001000 ebx=7c81a360 ecx=000000ea edx=00150000 esi=0000048c edi=00000000
eip=7c8285ec esp=0226ff0c ebp=0226ff7c iopl=0         nv up ei ng nz ac pe cy
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000293
 
function: ntdll!KiFastSystemCallRet
        7c8285ce e82c000000       call    ntdll!RtlRaiseException (7c8285ff)
        7c8285d3 8b0424           mov     eax,[esp]
        7c8285d6 8be5             mov     esp,ebp
        7c8285d8 5d               pop     ebp
        7c8285d9 c3               ret
        7c8285da 8da42400000000   lea     esp,[esp]
        7c8285e1 8da42400000000   lea     esp,[esp]
        ntdll!KiFastSystemCall:
        7c8285e8 8bd4             mov     edx,esp
        7c8285ea 0f34             sysenter
        ntdll!KiFastSystemCallRet:
        7c8285ec c3               ret
        7c8285ed 8da42400000000   lea     esp,[esp]
        7c8285f4 8d642400         lea     esp,[esp]
        ntdll!KiIntSystemCall:
        7c8285f8 8d542408         lea     edx,[esp+0x8]
        7c8285fc cd2e             int     2e
        7c8285fe c3               ret
        ntdll!RtlRaiseException:
        7c8285ff 55               push    ebp
        7c828600 8bec             mov     ebp,esp
        7c828602 8da42430fdffff   lea     esp,[esp-0x2d0]
 
*----> Stack Back Trace <----*
ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
0226ff7c 77e61c8d 0000048c 000927c0 00000000 ntdll!KiFastSystemCallRet
0226ff90 7fab0803 0000048c 000927c0 00000000 kernel32!WaitForSingleObject+0x12
0226ffb8 77e64829 0109a6b0 00000000 00000000 mshtml!DllGetClassObject+0x14ee8
0226ffec 00000000 7fab0fc1 0109a6b0 00000000 kernel32!GetModuleHandleA+0xdf
 
*----> Raw Stack Dump <----*
000000000226ff0c  0b 7d 82 7c 1e 1d e6 77 - 8c 04 00 00 00 00 00 00  .}.|...w........
000000000226ff1c  50 ff 26 02 00 00 00 00 - b0 a6 09 01 60 a3 81 7c  P.&.........`..|
000000000226ff2c  24 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00  $...............
000000000226ff3c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000226ff4c  00 00 00 00 00 44 5f 9a - fe ff ff ff 00 f0 fd 7f  .....D_.........
000000000226ff5c  50 ff 26 02 00 00 00 00 - 20 ff 26 02 70 12 1c 00  P.&..... .&.p...
000000000226ff6c  dc ff 26 02 60 1a e6 77 - 48 1d e6 77 00 00 00 00  ..&.`..wH..w....
000000000226ff7c  90 ff 26 02 8d 1c e6 77 - 8c 04 00 00 c0 27 09 00  ..&....w.....'..
000000000226ff8c  00 00 00 00 b8 ff 26 02 - 03 08 ab 7f 8c 04 00 00  ......&.........
000000000226ff9c  c0 27 09 00 00 00 00 00 - b0 a6 09 01 b0 a6 09 01  .'..............
000000000226ffac  fc 0f ab 7f 00 00 00 00 - ce 0f ab 7f ec ff 26 02  ..............&.
000000000226ffbc  29 48 e6 77 b0 a6 09 01 - 00 00 00 00 00 00 00 00  )H.w............
000000000226ffcc  b0 a6 09 01 00 00 00 00 - c4 ff 26 02 14 ff 82 80  ..........&.....
000000000226ffdc  ff ff ff ff 60 1a e6 77 - 30 48 e6 77 00 00 00 00  ....`..w0H.w....
000000000226ffec  00 00 00 00 00 00 00 00 - c1 0f ab 7f b0 a6 09 01  ................
000000000226fffc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000227000c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000227001c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000227002c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
000000000227003c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
 
*----> Symbol Table <----*
C:\WINDOWS\system32\WS2_32.dll
 
71c00000  WS2_32!Ordinal364 
71c00000  WS2_32!Ordinal499 
71c00000  WS2_32!Ordinal498 
71c00000  WS2_32!Ordinal100 
71c00000  WS2_32!Ordinal117 
71c00000  WS2_32!Ordinal118 
71c00000  WS2_32!Ordinal119 
71c00000  WS2_32!Ordinal120 
71c00000  WS2_32!Ordinal121 
71c00000  WS2_32!Ordinal122 
71c00000  WS2_32!Ordinal123 
71c00000  WS2_32!Ordinal124 
71c00000  WS2_32!Ordinal125 
71c00000  WS2_32!Ordinal126 
71c00000  WS2_32!Ordinal127 
71c00000  WS2_32!Ordinal128 
71c00000  WS2_32!Ordinal129 
71c00000  WS2_32!Ordinal130 
71c00000  WS2_32!Ordinal131 
71c00000  WS2_32!Ordinal132 
71c00000  WS2_32!Ordinal133 
71c00000  WS2_32!Ordinal134 
71c00000  WS2_32!Ordinal135 
71c00000  WS2_32!Ordinal136 
71c00000  WS2_32!Ordinal137 
71c00000  WS2_32!Ordinal138 
71c00000  WS2_32!Ordinal139 
71c00000  WS2_32!Ordinal140 
71c00000  WS2_32!Ordinal141 
71c00000  WS2_32!Ordinal142 
71c00000  WS2_32!Ordinal143 
71c00000  WS2_32!Ordinal144 
71c00000  WS2_32!Ordinal145 
71c00000  WS2_32!Ordinal146 
71c00000  WS2_32!Ordinal147 
71c00000  WS2_32!Ordinal148 
71c00000  WS2_32!Ordinal149 
71c00000  WS2_32!Ordinal150 
71c00000  WS2_32!Ordinal152 
71c00000  WS2_32!Ordinal153 
71c00000  WS2_32!Ordinal154 
71c00000  WS2_32!Ordinal155 
71c00000  WS2_32!Ordinal156 
71c00000  WS2_32!Ordinal157 
71c00000  WS2_32!Ordinal158 
71c00000  WS2_32!Ordinal159 
71c00000  WS2_32!Ordinal160 
71c00000  WS2_32!Ordinal161 
71c00000  WS2_32!Ordinal162 
71c00000  WS2_32!Ordinal163 
71c00000  WS2_32!Ordinal164 
71c00000  WS2_32!Ordinal165 
71c00000  WS2_32!Ordinal166 
71c00000  WS2_32!Ordinal167 
71c00000  WS2_32!Ordinal168 
71c00000  WS2_32!Ordinal169 
71c00000  WS2_32!Ordinal170 
71c00000  WS2_32!Ordinal171 
71c00000  WS2_32!Ordinal172 
71c00000  WS2_32!Ordinal173 
71c00000  WS2_32!Ordinal174 
71c00000  WS2_32!Ordinal175 
71c00000  WS2_32!Ordinal176 
71c00000  WS2_32!Ordinal177 
71c00000  WS2_32!Ordinal178 
71c00000  WS2_32!Ordinal179 
71c00000  WS2_32!Ordinal180 
71c00000  WS2_32!Ordinal181 
71c00000  WS2_32!Ordinal182 
71c00000  WS2_32!Ordinal183 
71c00000  WS2_32!Ordinal184 
71c00000  WS2_32!Ordinal185 
71c00000  WS2_32!Ordinal186 
71c00000  WS2_32!Ordinal187 
71c00000  WS2_32!Ordinal188 
71c00000  WS2_32!Ordinal189 
71c00000  WS2_32!Ordinal190 
71c00000  WS2_32!Ordinal191 
71c00000  WS2_32!Ordinal192 
71c00000  WS2_32!Ordinal193 
71c00000  WS2_32!Ordinal194 
71c00000  WS2_32!Ordinal195 
71c00000  WS2_32!Ordinal196 
71c00000  WS2_32!Ordinal197 
71c00000  WS2_32!Ordinal198 
71c00000  WS2_32!Ordinal199 
71c00000  WS2_32!Ordinal200 
71c00000  WS2_32!Ordinal201 
71c00000  WS2_32!Ordinal202 
71c00000  WS2_32!Ordinal203 
71c00000  WS2_32!Ordinal204 
71c00000  WS2_32!Ordinal205 
71c00000  WS2_32!Ordinal206 
71c00000  WS2_32!Ordinal207 
71c00000  WS2_32!Ordinal208 
71c00000  WS2_32!Ordinal209 
71c00000  WS2_32!Ordinal210 
71c00000  WS2_32!Ordinal211 
71c00000  WS2_32!Ordinal212 
71c00000  WS2_32!Ordinal213 
71c00000  WS2_32!Ordinal214 
71c00000  WS2_32!Ordinal215 
71c00000  WS2_32!Ordinal216 
71c00000  WS2_32!Ordinal217 
71c00000  WS2_32!Ordinal218 
71c00000  WS2_32!Ordinal219 
71c00000  WS2_32!Ordinal220 
71c00000  WS2_32!Ordinal221 
71c00000  WS2_32!Ordinal222 
71c00000  WS2_32!Ordinal223 
71c00000  WS2_32!Ordinal224 
71c00000  WS2_32!Ordinal225 
71c00000  WS2_32!Ordinal226 
71c00000  WS2_32!Ordinal227 
71c00000  WS2_32!Ordinal228 
71c00000  WS2_32!Ordinal229 
71c00000  WS2_32!Ordinal230 
71c00000  WS2_32!Ordinal231 
71c00000  WS2_32!Ordinal232 
71c00000  WS2_32!Ordinal233 
71c00000  WS2_32!Ordinal234 
71c00000  WS2_32!Ordinal235 
71c00000  WS2_32!Ordinal236 
71c00000  WS2_32!Ordinal237 
71c00000  WS2_32!Ordinal238 
71c00000  WS2_32!Ordinal239 
71c00000  WS2_32!Ordinal240 
71c00000  WS2_32!Ordinal241 
71c00000  WS2_32!Ordinal242 
71c00000  WS2_32!Ordinal243 
71c00000  WS2_32!Ordinal244 
71c00000  WS2_32!Ordinal245 
71c00000  WS2_32!Ordinal246 
71c00000  WS2_32!Ordinal247 
71c00000  WS2_32!Ordinal248 
71c00000  WS2_32!Ordinal249 
71c00000  WS2_32!Ordinal250 
71c00000  WS2_32!Ordinal251 
71c00000  WS2_32!Ordinal252 
71c00000  WS2_32!Ordinal253 
71c00000  WS2_32!Ordinal254 
71c00000  WS2_32!Ordinal255 
71c00000  WS2_32!Ordinal256 
71c00000  WS2_32!Ordinal257 
71c00000  WS2_32!Ordinal258 
71c00000  WS2_32!Ordinal259 
71c00000  WS2_32!Ordinal260 
71c00000  WS2_32!Ordinal261 
71c00000  WS2_32!Ordinal262 
71c00000  WS2_32!Ordinal263 
71c00000  WS2_32!Ordinal264 
71c00000  WS2_32!Ordinal265 
71c00000  WS2_32!Ordinal266 
71c00000  WS2_32!Ordinal267 
71c00000  WS2_32!Ordinal268 
71c00000  WS2_32!Ordinal269 
71c00000  WS2_32!Ordinal270 
71c00000  WS2_32!Ordinal271 
71c00000  WS2_32!Ordinal272 
71c00000  WS2_32!Ordinal273 
71c00000  WS2_32!Ordinal274 
71c00000  WS2_32!Ordinal275 
71c00000  WS2_32!Ordinal276 
71c00000  WS2_32!Ordinal277 
71c00000  WS2_32!Ordinal278 
71c00000  WS2_32!Ordinal279 
71c00000  WS2_32!Ordinal280 
71c00000  WS2_32!Ordinal281 
71c00000  WS2_32!Ordinal282 
71c00000  WS2_32!Ordinal283 
71c00000  WS2_32!Ordinal284 
71c00000  WS2_32!Ordinal285 
71c00000  WS2_32!Ordinal286 
71c00000  WS2_32!Ordinal287 
71c00000  WS2_32!Ordinal288 
71c00000  WS2_32!Ordinal289 
71c00000  WS2_32!Ordinal290 
71c00000  WS2_32!Ordinal291 
71c00000  WS2_32!Ordinal292 
71c00000  WS2_32!Ordinal293 
71c00000  WS2_32!Ordinal294 
71c00000  WS2_32!Ordinal295 
71c00000  WS2_32!Ordinal296 
71c00000  WS2_32!Ordinal297 
71c00000  WS2_32!Ordinal298 
71c00000  WS2_32!Ordinal299 
71c00000  WS2_32!Ordinal300 
71c00000  WS2_32!Ordinal301 
71c00000  WS2_32!Ordinal302 
71c00000  WS2_32!Ordinal303 
71c00000  WS2_32!Ordinal304 
71c00000  WS2_32!Ordinal305 
71c00000  WS2_32!Ordinal306 
71c00000  WS2_32!Ordinal307 
71c00000  WS2_32!Ordinal308 
71c00000  WS2_32!Ordinal309 
71c00000  WS2_32!Ordinal310 
71c00000  WS2_32!Ordinal311 
71c00000  WS2_32!Ordinal312 
71c00000  WS2_32!Ordinal313 
71c00000  WS2_32!Ordinal314 
71c00000  WS2_32!Ordinal315 
71c00000  WS2_32!Ordinal316 
71c00000  WS2_32!Ordinal317 
71c00000  WS2_32!Ordinal318 
71c00000  WS2_32!Ordinal319 
71c00000  WS2_32!Ordinal320 
71c00000  WS2_32!Ordinal321 
71c00000  WS2_32!Ordinal322 
71c00000  WS2_32!Ordinal323 
71c00000  WS2_32!Ordinal324 
71c00000  WS2_32!Ordinal325 
71c00000  WS2_32!Ordinal326 
71c00000  WS2_32!Ordinal327 
71c00000  WS2_32!Ordinal328 
71c00000  WS2_32!Ordinal329 
71c00000  WS2_32!Ordinal330 
71c00000  WS2_32!Ordinal331 
71c00000  WS2_32!Ordinal332 
71c00000  WS2_32!Ordinal333 
71c00000  WS2_32!Ordinal334 
71c00000  WS2_32!Ordinal335 
71c00000  WS2_32!Ordinal336 
71c00000  WS2_32!Ordinal337 
71c00000  WS2_32!Ordinal338 
71c00000  WS2_32!Ordinal339 
71c00000  WS2_32!Ordinal340 
71c00000  WS2_32!Ordinal341 
71c00000  WS2_32!Ordinal342 
71c00000  WS2_32!Ordinal343 
71c00000  WS2_32!Ordinal344 
71c00000  WS2_32!Ordinal345 
71c00000  WS2_32!Ordinal346 
71c00000  WS2_32!Ordinal347 
71c00000  WS2_32!Ordinal348 
71c00000  WS2_32!Ordinal349 
71c00000  WS2_32!Ordinal350 
71c00000  WS2_32!Ordinal351 
71c00000  WS2_32!Ordinal352 
71c00000  WS2_32!Ordinal353 
71c00000  WS2_32!Ordinal354 
71c00000  WS2_32!Ordinal355 
71c00000  WS2_32!Ordinal356 
71c00000  WS2_32!Ordinal357 
71c00000  WS2_32!Ordinal358 
71c00000  WS2_32!Ordinal359 
71c00000  WS2_32!Ordinal360 
71c00000  WS2_32!Ordinal361 
71c00000  WS2_32!Ordinal362 
71c00000  WS2_32!Ordinal363 
71c00000  WS2_32!Ordinal497 
71c00000  WS2_32!Ordinal365 
71c00000  WS2_32!Ordinal366 
71c00000  WS2_32!Ordinal367 
71c00000  WS2_32!Ordinal368 
71c00000  WS2_32!Ordinal369 
71c00000  WS2_32!Ordinal370 
71c00000  WS2_32!Ordinal371 
71c00000  WS2_32!Ordinal372 
71c00000  WS2_32!Ordinal373 
71c00000  WS2_32!Ordinal374 
71c00000  WS2_32!Ordinal375 
71c00000  WS2_32!Ordinal376 
71c00000  WS2_32!Ordinal377 
71c00000  WS2_32!Ordinal378 
71c00000  WS2_32!Ordinal379 
71c00000  WS2_32!Ordinal380 
71c00000  WS2_32!Ordinal381 
71c00000  WS2_32!Ordinal382 
71c00000  WS2_32!Ordinal383 
71c00000  WS2_32!Ordinal384 
71c00000  WS2_32!Ordinal385 
71c00000  WS2_32!Ordinal386 
71c00000  WS2_32!Ordinal387 
71c00000  WS2_32!Ordinal388 
71c00000  WS2_32!Ordinal389 
71c00000  WS2_32!Ordinal390 
71c00000  WS2_32!Ordinal391 
71c00000  WS2_32!Ordinal392 
71c00000  WS2_32!Ordinal393 
71c00000  WS2_32!Ordinal394 
71c00000  WS2_32!Ordinal395 
71c00000  WS2_32!Ordinal396 
71c00000  WS2_32!Ordinal397 
71c00000  WS2_32!Ordinal398 
71c00000  WS2_32!Ordinal399 
71c00000  WS2_32!Ordinal400 
71c00000  WS2_32!Ordinal401 
71c00000  WS2_32!Ordinal402 
71c00000  WS2_32!Ordinal403 
71c00000  WS2_32!Ordinal404 
71c00000  WS2_32!Ordinal405 
71c00000  WS2_32!Ordinal406 
71c00000  WS2_32!Ordinal407 
71c00000  WS2_32!Ordinal408 
71c00000  WS2_32!Ordinal409 
71c00000  WS2_32!Ordinal410 
71c00000  WS2_32!Ordinal411 
71c00000  WS2_32!Ordinal412 
71c00000  WS2_32!Ordinal413 
71c00000  WS2_32!Ordinal414 
71c00000  WS2_32!Ordinal415 
71c00000  WS2_32!Ordinal416 
71c00000  WS2_32!Ordinal417 
71c00000  WS2_32!Ordinal418 
71c00000  WS2_32!Ordinal419 
71c00000  WS2_32!Ordinal420 
71c00000  WS2_32!Ordinal421 
71c00000  WS2_32!Ordinal422 
71c00000  WS2_32!Ordinal423 
71c00000  WS2_32!Ordinal424 
71c00000  WS2_32!Ordinal425 
71c00000  WS2_32!Ordinal426 
71c00000  WS2_32!Ordinal427 
71c00000  WS2_32!Ordinal428 
71c00000  WS2_32!Ordinal429 
71c00000  WS2_32!Ordinal430 
71c00000  WS2_32!Ordinal431 
71c00000  WS2_32!Ordinal432 
71c00000  WS2_32!Ordinal433 
71c00000  WS2_32!Ordinal434 
71c00000  WS2_32!Ordinal435 
71c00000  WS2_32!Ordinal436 
71c00000  WS2_32!Ordinal437 
71c00000  WS2_32!Ordinal438 
71c00000  WS2_32!Ordinal439 
71c00000  WS2_32!Ordinal440 
71c00000  WS2_32!Ordinal441 
71c00000  WS2_32!Ordinal442 
71c00000  WS2_32!Ordinal443 
71c00000  WS2_32!Ordinal444 
71c00000  WS2_32!Ordinal445 
71c00000  WS2_32!Ordinal446 
71c00000  WS2_32!Ordinal447 
71c00000  WS2_32!Ordinal448 
71c00000  WS2_32!Ordinal449 
71c00000  WS2_32!Ordinal450 
71c00000  WS2_32!Ordinal451 
71c00000  WS2_32!Ordinal452 
71c00000  WS2_32!Ordinal453 
71c00000  WS2_32!Ordinal454 
71c00000  WS2_32!Ordinal455 
71c00000  WS2_32!Ordinal456 
71c00000  WS2_32!Ordinal457 
71c00000  WS2_32!Ordinal458 
71c00000  WS2_32!Ordinal459 
71c00000  WS2_32!Ordinal460 
71c00000  WS2_32!Ordinal461 
71c00000  WS2_32!Ordinal462 
71c00000  WS2_32!Ordinal463 
71c00000  WS2_32!Ordinal464 
71c00000  WS2_32!Ordinal465 
71c00000  WS2_32!Ordinal466 
71c00000  WS2_32!Ordinal467 
71c00000  WS2_32!Ordinal468 
71c00000  WS2_32!Ordinal469 
71c00000  WS2_32!Ordinal470 
71c00000  WS2_32!Ordinal471 
71c00000  WS2_32!Ordinal472 
71c00000  WS2_32!Ordinal473 
71c00000  WS2_32!Ordinal474 
71c00000  WS2_32!Ordinal475 
71c00000  WS2_32!Ordinal476 
71c00000  WS2_32!Ordinal477 
71c00000  WS2_32!Ordinal478 
71c00000  WS2_32!Ordinal479 
71c00000  WS2_32!Ordinal480 
71c00000  WS2_32!Ordinal481 
71c00000  WS2_32!Ordinal482 
71c00000  WS2_32!Ordinal483 
71c00000  WS2_32!Ordinal484 
71c00000  WS2_32!Ordinal485 
71c00000  WS2_32!Ordinal486 
71c00000  WS2_32!Ordinal487 
71c00000  WS2_32!Ordinal488 
71c00000  WS2_32!Ordinal489 
71c00000  WS2_32!Ordinal490 
71c00000  WS2_32!Ordinal491 
71c00000  WS2_32!Ordinal492 
71c00000  WS2_32!Ordinal493 
71c00000  WS2_32!Ordinal494 
71c00000  WS2_32!Ordinal495 
71c00000  WS2_32!Ordinal496 
71c02425  WS2_32!WSAGetLastError 
71c02430  WS2_32!WSASend 
71c0279b  WS2_32!select 
71c028bc  WS2_32!htons 
71c028bc  WS2_32!ntohs 
71c028da  WS2_32!ntohl 
71c028da  WS2_32!htonl 
71c0290e  WS2_32!WSASendTo 
71c02a2b  WS2_32!WSAStringToAddressW 
71c02cb2  WS2_32!closesocket 
71c02d47  WS2_32!setsockopt 
71c02e12  WS2_32!WSAIoctl 
71c02e97  WS2_32!ioctlsocket 
71c02ec2  WS2_32!send 
71c02f50  WS2_32!_WSAFDIsSet 
71c02f7f  WS2_32!recv 
71c03075  WS2_32!GetAddrInfoW 
71c0325d  WS2_32!WSASetLastError 
71c032e5  WS2_32!getaddrinfo 
71c033e7  WS2_32!FreeAddrInfoW 
71c033e7  WS2_32!freeaddrinfo 
71c03450  WS2_32!WSAAddressToStringW 
71c035e2  WS2_32!inet_ntoa 
71c03aad  WS2_32!getsockopt 
71c03c04  WS2_32!WSAGetOverlappedResult 
71c03c75  WS2_32!recvfrom 
71c03d14  WS2_32!sendto 
71c03da8  WS2_32!WSACleanup 
71c03f38  WS2_32!WSASocketW 
71c0410c  WS2_32!socket 
71c0438d  WS2_32!bind 
71c043f9  WS2_32!inet_addr 
71c0446a  WS2_32!connect 
71c044ea  WS2_32!getsockname 
71c04f3b  WS2_32!WSAStartup 
71c06162  WS2_32!shutdown 
71c069e9  WS2_32!WSALookupServiceBeginW 
71c06c91  WS2_32!WSALookupServiceNextW 
71c06ecd  WS2_32!WSALookupServiceEnd 
71c074c1  WS2_32!WSALookupServiceBeginA 
71c0788b  WS2_32!WSALookupServiceNextA 
71c07b5b  WS2_32!gethostname 
71c07ca1  WS2_32!gethostbyname 
71c08558  WS2_32!WSANSPIoctl 
71c08756  WS2_32!WSAAddressToStringA 
71c08911  WS2_32!WSCEnumProtocols 
71c08b01  WS2_32!WSAProviderConfigChange 
71c08ffd  WS2_32!listen 
71c090be  WS2_32!WSAEventSelect 
71c09129  WS2_32!WSACreateEvent 
71c09230  WS2_32!WSAEnumProtocolsW 
71c0938e  WS2_32!WSACloseEvent 
71c093d9  WS2_32!WSAWaitForMultipleEvents 
71c093ea  WS2_32!WSAEnumNetworkEvents 
71c09455  WS2_32!WSAResetEvent 
71c09466  WS2_32!WSASetEvent 
71c09480  WS2_32!WSARecv 
71c097d0  WS2_32!WSAStringToAddressA 
71c09938  WS2_32!getnameinfo 
71c09a4e  WS2_32!GetNameInfoW 
71c0c039  WS2_32!WSANtohl 
71c0c039  WS2_32!WSAHtonl 
71c0c121  WS2_32!WSANtohs 
71c0c121  WS2_32!WSAHtons 
71c0d2db  WS2_32!WSACancelBlockingCall 
71c0d32a  WS2_32!WSAIsBlocking 
71c0d37d  WS2_32!WSASetBlockingHook 
71c0d3d9  WS2_32!WSAUnhookBlockingHook 
71c0db79  WS2_32!WSADuplicateSocketW 
71c0dc07  WS2_32!WSADuplicateSocketA 
71c0dee9  WS2_32!WSCGetProviderPath 
71c0def9  WS2_32!WSAEnumProtocolsA 
71c0e44c  WS2_32!getprotobynumber 
71c0e509  WS2_32!getprotobyname 
71c0e745  WS2_32!gethostbyaddr 
71c0e869  WS2_32!getservbyport 
71c0e9b7  WS2_32!getservbyname 
71c0eb1b  WS2_32!WSAAsyncGetServByName 
71c0ebc7  WS2_32!WSAAsyncGetServByPort 
71c0ec51  WS2_32!WSAAsyncGetHostByName 
71c0ecf7  WS2_32!WSAAsyncGetHostByAddr 
71c0eda1  WS2_32!WSAAsyncGetProtoByName 
71c0ee47  WS2_32!WSAAsyncGetProtoByNumber 
71c0eecb  WS2_32!WSACancelAsyncRequest 
71c0f1e1  WS2_32!WSCEnableNSProvider 
71c0f3a1  WS2_32!WSCWriteNameSpaceOrder 
71c0f4d5  WS2_32!WSCInstallNameSpace 
71c0f6a1  WS2_32!WSCUnInstallNameSpace 
71c0f7f8  WS2_32!WSAGetQOSByName 
71c0f976  WS2_32!WSARecvDisconnect 
71c0fa01  WS2_32!WSARecvFrom 
71c0fd79  WS2_32!WSAEnumNameSpaceProvidersA 
71c0fdd9  WS2_32!WSAEnumNameSpaceProvidersW 
71c0ff61  WS2_32!WSAInstallServiceClassW 
71c1004c  WS2_32!WSARemoveServiceClass 
71c10137  WS2_32!WSAGetServiceClassNameByClassIdA 
71c10319  WS2_32!WSAGetServiceClassNameByClassIdW 
71c104f1  WS2_32!WSAGetServiceClassInfoW 
71c10619  WS2_32!WSASetServiceW 
71c10759  WS2_32!WSAInstallServiceClassA 
71c107d8  WS2_32!WSAGetServiceClassInfoA 
71c1086a  WS2_32!WSASetServiceA 
71c10d39  WS2_32!WSAAsyncSelect 
71c10dca  WS2_32!WSASendDisconnect 
71c10e55  WS2_32!getpeername 
71c10ee3  WS2_32!WSAConnect 
71c10f9f  WS2_32!WSAAccept 
71c1115d  WS2_32!WSAJoinLeaf 
71c11240  WS2_32!WSASocketA 
71c112ab  WS2_32!accept 
71c11501  WS2_32!WSCUpdateProvider 
71c11739  WS2_32!WSCWriteProviderOrder 
71c1186d  WS2_32!WSCInstallProvider 
71c11ba9  WS2_32!WSCDeinstallProvider 
71c11e97  WS2_32!WPUCompleteOverlappedRequest 
71c12045  WS2_32!WSApSetPostRoutine 
71c122fd  WS2_32!WEP

                                  
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
232:
233:
234:
235:
236:
237:
238:
239:
240:
241:
242:
243:
244:
245:
246:
247:
248:
249:
250:
251:
252:
253:
254:
255:
256:
257:
258:
259:
260:
261:
262:
263:
264:
265:
266:
267:
268:
269:
270:
271:
272:
273:
274:
275:
276:
277:
278:
279:
280:
281:
282:
283:
284:
285:
286:
287:
288:
289:
290:
291:
292:
293:
294:
295:
296:
297:
298:
299:
300:
301:
302:
303:
304:
305:
306:
307:
308:
309:
310:
311:
312:
313:
314:
315:
316:
317:
318:
319:
320:
321:
322:
323:
324:
325:
326:
327:
328:
329:
330:
331:
332:
333:
334:
335:
336:
337:
338:
339:
340:
341:
342:
343:
344:
345:
346:
347:
348:
349:
350:
351:
352:
353:
354:
355:
356:
357:
358:
359:
360:
361:
362:
363:
364:
365:
366:
367:
368:
369:
370:
371:
372:
373:
374:
375:
376:
377:
378:
379:
380:
381:
382:
383:
384:
385:
386:
387:
388:
389:
390:
391:
392:
393:
394:
395:
396:
397:
398:
399:
400:
401:
402:
403:
404:
405:
406:
407:
408:
409:
410:
411:
412:
413:
414:
415:
416:
417:
418:
419:
420:
421:
422:
423:
424:
425:
426:
427:
428:
429:
430:
431:
432:
433:
434:
435:
436:
437:
438:
439:
440:
441:
442:
443:
444:
445:
446:
447:
448:
449:
450:
451:
452:
453:
454:
455:
456:
457:
458:
459:
460:
461:
462:
463:
464:
465:
466:
467:
468:
469:
470:
471:
472:
473:
474:
475:
476:
477:
478:
479:
480:
481:
482:
483:
484:
485:
486:
487:
488:
489:
490:
491:
492:
493:
494:
495:
496:
497:
498:
499:
500:
501:
502:
503:
504:
505:
506:
507:
508:
509:
510:
511:
512:
513:
514:
515:
516:
517:
518:
519:
520:
521:
522:
523:
524:
525:
526:
527:
528:
529:
530:
531:
532:
533:
534:
535:
536:
537:
538:
539:
540:
541:
542:
543:
544:
545:
546:
547:
548:
549:
550:
551:
552:
553:
554:
555:
556:
557:
558:
559:
560:
561:
562:
563:
564:
565:
566:
567:
568:
569:
570:
571:
572:
573:
574:
575:
576:
577:
578:
579:
580:
581:
582:
583:
584:
585:
586:
587:
588:
589:
590:
591:
592:
593:
594:
595:
596:
597:
598:
599:
600:
601:
602:
603:
604:
605:
606:
607:
608:
609:
610:
611:
612:
613:
614:
615:
616:
617:
618:
619:
620:
621:
622:
623:
624:
625:
626:
627:
628:
629:
630:
631:
632:
633:
634:
635:
636:
637:
638:
639:
640:
641:
642:
643:
644:
645:
646:
647:
648:
649:
650:
651:
652:
653:
654:
655:
656:
657:
658:
659:
660:
661:
662:
663:
664:
665:
666:
667:
668:
669:
670:
671:
672:
673:
674:
675:
676:
677:
678:
679:
680:
681:
682:
683:
684:
685:
686:
687:
688:
689:
690:
691:
692:
693:
694:
695:
696:
697:
698:
699:
700:
701:
702:
703:
704:
705:
706:
707:
708:
709:
710:
711:
712:
713:
714:
715:
716:
717:
718:
719:
720:
721:
722:
723:
724:
725:
726:
727:
728:
729:
730:
731:
732:
733:
734:
735:
736:
737:
738:
739:
740:
741:
742:
743:
744:
745:
746:
747:
748:
749:
750:
751:
752:
753:
754:
755:
756:
757:
758:
759:
760:
761:
762:
763:
764:
765:
766:
767:
768:
769:
770:
771:
772:
773:
774:
775:
776:
777:
778:
779:
780:
781:
782:
783:
784:
785:
786:
787:
788:
789:
790:
791:
792:
793:
794:
795:
796:
797:
798:
799:
800:
801:
802:
803:
804:
805:
806:
807:
808:
809:
810:
811:
812:
813:
814:
815:
816:
817:
818:
819:
820:
821:
822:
823:
824:
825:
826:
827:
828:
829:
830:
831:
832:
833:
834:
835:
836:
837:
838:
839:
840:
841:
842:
843:
844:
845:
846:
847:
848:
849:
850:
851:
852:
853:
854:
855:
856:
857:
858:
859:
860:
861:
862:
863:
864:
865:
866:
867:
868:
869:
870:
871:
872:
873:
874:
875:
876:
877:
878:
879:
880:
881:
882:
883:
884:
885:
886:
887:
888:
889:
890:
891:
892:
893:
894:
895:
896:
897:
898:
899:
900:
901:
902:
903:
904:
905:
906:
907:
908:
909:
910:
911:
912:
913:
914:
915:
916:
917:
918:
919:
920:
921:
922:
923:
924:
925:
926:
927:
928:
929:
930:
931:
932:
933:
934:
935:
936:
937:
938:
939:
940:
941:
942:
943:
944:
945:
946:
947:
948:
949:
950:
951:
952:
953:
954:
955:
956:
957:
958:
959:
960:
961:
962:
963:
964:
965:
966:
967:
968:
969:
970:
971:
972:
973:
974:
975:
976:
977:
978:
979:
980:
981:
982:
983:
984:
985:
986:
987:
988:
989:
990:
991:
992:
993:
994:
995:
996:
997:
998:
999:
1000:
1001:
1002:
1003:
1004:
1005:
1006:
1007:
1008:
1009:
1010:
1011:
1012:
1013:
1014:
1015:
1016:
1017:
1018:
1019:
1020:
1021:
1022:
1023:
1024:
1025:
1026:
1027:
1028:
1029:
1030:
1031:
1032:
1033:
1034:
1035:
1036:
1037:
1038:
1039:
1040:
1041:
1042:
1043:
1044:
1045:
1046:
1047:
1048:
1049:
1050:
1051:
1052:
1053:
1054:
1055:
1056:
1057:
1058:
1059:
1060:
1061:
1062:
1063:
1064:
1065:
1066:
1067:
1068:
1069:
1070:
1071:
1072:
1073:
1074:
1075:
1076:
1077:
1078:
1079:
1080:
1081:
1082:
1083:
1084:
1085:
1086:
1087:
1088:
1089:
1090:
1091:
1092:
1093:
1094:
1095:
1096:
1097:
1098:
1099:
1100:
1101:
1102:
1103:
1104:
1105:
1106:
1107:
1108:
1109:
1110:
1111:
1112:
1113:
1114:
1115:
1116:
1117:
1118:
1119:
1120:
1121:
1122:
1123:
1124:
1125:
1126:
1127:
1128:
1129:
1130:
1131:
1132:
1133:
1134:
1135:
1136:
1137:
1138:
1139:
1140:
1141:
1142:
1143:
1144:
1145:
1146:
1147:
1148:
1149:
1150:
1151:
1152:
1153:
1154:
1155:
1156:
1157:
1158:
1159:
1160:
1161:
1162:
1163:
1164:
1165:
1166:
1167:
1168:
1169:
1170:
1171:
1172:
1173:
1174:
1175:
1176:
1177:
1178:
1179:
1180:
1181:
1182:
1183:
1184:
1185:
1186:
1187:
1188:
1189:
1190:
1191:
1192:
1193:
1194:
1195:
1196:
1197:
1198:
1199:
1200:
1201:
1202:
1203:
1204:
1205:
1206:
1207:
1208:
1209:
1210:
1211:
1212:
1213:
1214:
1215:
1216:
1217:
1218:
1219:
1220:
1221:
1222:
1223:
1224:
1225:
1226:
1227:
1228:
1229:
1230:
1231:
1232:
1233:
1234:
1235:
1236:
1237:
1238:
1239:
1240:
1241:
1242:
1243:
1244:
1245:
1246:
1247:
1248:
1249:
1250:
1251:
1252:
1253:
1254:
1255:
1256:
1257:
1258:
1259:
1260:
1261:
1262:
1263:
1264:
1265:
1266:
1267:
1268:
1269:
1270:
1271:
1272:
1273:
1274:
1275:
1276:
1277:
1278:
1279:
1280:
1281:
1282:
1283:
1284:
1285:
1286:
1287:
1288:
1289:
1290:
1291:
1292:
1293:
1294:
1295:
1296:
1297:
1298:
1299:
1300:
1301:
1302:
1303:
1304:
1305:
1306:
1307:
1308:
1309:
1310:
1311:
1312:
1313:
1314:
1315:
1316:
1317:
1318:
1319:
1320:
1321:
1322:
1323:
1324:
1325:
1326:
1327:
1328:
1329:
1330:
1331:
1332:
1333:
1334:
1335:
1336:
1337:
1338:
1339:
1340:
1341:
1342:
1343:
1344:
1345:
1346:
1347:
1348:
1349:
1350:
1351:
1352:
1353:
1354:
1355:
1356:
1357:
1358:
1359:
1360:
1361:
1362:
1363:
1364:
1365:
1366:
1367:
1368:
1369:
1370:
1371:
1372:
1373:
1374:
1375:
1376:
1377:
1378:
1379:
1380:
1381:
1382:
1383:
1384:
1385:
1386:
1387:
1388:
1389:
1390:
1391:
1392:
1393:
1394:
1395:
1396:
1397:
1398:
1399:
1400:
1401:
1402:
1403:
1404:
1405:
1406:
1407:
1408:
1409:
1410:
1411:
1412:
1413:
1414:
1415:
1416:
1417:
1418:
1419:
1420:
1421:
1422:
1423:
1424:
1425:
1426:
1427:
1428:
1429:
1430:
1431:
1432:
1433:
1434:
1435:
1436:
1437:
1438:
1439:
1440:
1441:
1442:
1443:
1444:
1445:
1446:
1447:
1448:
1449:
1450:
1451:
1452:
1453:
1454:
1455:
1456:
1457:
1458:
1459:
1460:
1461:
1462:
1463:
1464:
1465:
1466:
1467:
1468:
1469:
1470:
1471:
1472:
1473:
1474:
1475:
1476:
1477:
1478:
1479:
1480:
1481:
1482:
1483:
1484:
1485:
1486:
1487:
1488:
1489:
1490:
1491:
1492:
1493:
1494:
1495:
1496:
1497:
1498:
1499:
1500:
1501:
1502:
1503:
1504:
1505:
1506:
1507:
1508:
1509:
1510:
1511:
1512:
1513:
1514:
1515:
1516:
1517:
1518:
1519:
1520:
1521:
1522:
1523:
1524:
1525:
1526:
1527:
1528:
1529:
1530:
1531:
1532:
1533:
1534:
1535:
1536:
1537:
1538:
1539:
1540:
1541:
1542:
1543:
1544:
1545:
1546:
1547:
1548:
1549:
1550:
1551:
1552:
1553:
1554:
1555:
1556:
1557:
1558:
1559:
1560:
1561:
1562:
1563:
1564:
1565:
1566:
1567:
1568:
1569:
1570:
1571:
1572:
1573:
1574:
1575:
1576:
1577:
1578:
1579:
1580:
1581:
1582:
1583:
1584:
1585:
1586:
1587:
1588:
1589:
1590:
1591:
1592:
1593:
1594:
1595:
1596:
1597:
1598:
1599:
1600:
1601:
1602:
1603:
1604:
1605:
1606:
1607:
1608:
1609:
1610:
1611:
1612:
1613:
1614:
1615:
1616:
1617:
1618:
1619:
1620:
1621:
1622:
1623:
1624:
1625:
1626:
1627:
1628:
1629:
1630:
1631:
1632:
1633:
1634:
1635:
1636:
1637:
1638:
1639:
1640:
1641:
1642:
1643:
1644:
1645:
1646:
1647:
1648:
1649:
1650:
1651:
1652:
1653:
1654:
1655:
1656:
1657:
1658:
1659:
1660:
1661:
1662:
1663:
1664:
1665:
1666:
1667:
1668:
1669:
1670:
1671:
1672:
1673:
1674:
1675:
1676:
1677:
1678:
1679:
1680:
1681:
1682:
1683:
1684:
1685:
1686:
1687:
1688:
1689:
1690:
1691:
1692:
1693:
1694:
1695:
1696:
1697:
1698:
1699:
1700:
1701:
1702:
1703:
1704:
1705:
1706:
1707:
1708:
1709:
1710:
1711:
1712:
1713:
1714:
1715:
1716:
1717:
1718:
1719:
1720:
1721:
1722:
1723:
1724:
1725:
1726:
1727:
1728:
1729:
1730:
1731:
1732:
1733:
1734:
1735:
1736:
1737:
1738:
1739:
1740:
1741:
1742:
1743:
1744:
1745:
1746:
1747:
1748:
1749:
1750:
1751:
1752:
1753:
1754:
1755:
1756:
1757:
1758:
1759:
1760:
1761:
1762:
1763:
1764:
1765:
1766:
1767:
1768:
1769:
1770:
1771:
1772:
1773:
1774:
1775:
1776:
1777:
1778:
1779:
1780:
1781:
1782:
1783:
1784:
1785:
1786:
1787:
1788:
1789:
1790:
1791:
1792:
1793:
1794:
1795:
1796:
1797:
1798:
1799:
1800:
1801:
1802:
1803:
1804:
1805:
1806:
1807:
1808:
1809:
1810:
1811:
1812:
1813:
1814:
1815:
1816:
1817:
1818:
1819:
1820:
1821:
1822:
1823:
1824:
1825:
1826:
1827:
1828:
1829:
1830:
1831:
1832:
1833:
1834:
1835:
1836:
1837:
1838:
1839:
1840:
1841:
1842:
1843:
1844:
1845:
1846:
1847:
1848:
1849:
1850:
1851:
1852:
1853:
1854:
1855:
1856:
1857:
1858:
1859:
1860:
1861:
1862:
1863:
1864:
1865:
1866:
1867:
1868:
1869:
1870:
1871:
1872:
1873:
1874:
1875:
1876:
1877:
1878:
1879:
1880:
1881:
1882:
1883:
1884:
1885:
1886:
1887:
1888:
1889:
1890:
1891:
1892:
1893:
1894:
1895:
1896:
1897:
1898:
1899:
1900:
1901:
1902:
1903:
1904:
1905:
1906:
1907:
1908:
1909:
1910:
1911:
1912:
1913:
1914:
1915:
1916:
1917:
1918:
1919:
1920:
1921:
1922:
1923:
1924:
1925:
1926:
1927:
1928:
1929:
1930:
1931:
1932:
1933:
1934:
1935:
1936:
1937:
1938:
1939:
1940:
1941:
1942:
1943:
1944:
1945:
1946:
1947:
1948:
1949:
1950:
1951:
1952:
1953:
1954:
1955:
1956:
1957:
1958:
1959:
1960:
1961:
1962:
1963:
1964:
1965:
1966:
1967:
1968:
1969:
1970:
1971:
1972:
1973:
1974:
1975:
1976:
1977:
1978:
1979:
1980:
1981:
1982:
1983:
1984:
1985:
1986:
1987:
1988:
1989:
1990:
1991:
1992:
1993:
1994:
1995:
1996:
1997:
1998:
1999:
2000:
2001:
2002:
2003:
2004:
2005:
2006:
2007:
2008:
2009:
2010:
2011:
2012:
2013:
2014:
2015:
2016:
2017:
2018:
2019:
2020:
2021:
2022:
2023:
2024:
2025:
2026:
2027:
2028:
2029:
2030:
2031:
2032:
2033:
2034:
2035:
2036:
2037:
2038:
2039:
2040:
2041:
2042:
2043:
2044:
2045:
2046:
2047:
2048:
2049:
2050:
2051:
2052:
2053:
2054:
2055:
2056:
2057:
2058:
2059:
2060:
2061:
2062:
2063:
2064:
2065:
2066:
2067:
2068:
2069:
2070:
2071:
2072:
2073:
2074:
2075:
2076:
2077:
2078:
2079:
2080:
2081:
2082:
2083:
2084:
2085:
2086:
2087:
2088:
2089:
2090:
2091:
2092:
2093:
2094:
2095:
2096:
2097:
2098:
2099:
2100:
2101:
2102:
2103:
2104:
2105:
2106:
2107:
2108:
2109:
2110:
2111:
2112:
2113:
2114:
2115:
2116:
2117:
2118:
2119:
2120:
2121:
2122:
2123:
2124:
2125:
2126:
2127:
2128:
2129:
2130:
2131:
2132:
2133:
2134:
2135:
2136:
2137:
2138:
2139:
2140:
2141:
2142:
2143:
2144:
2145:
2146:
2147:
2148:
2149:
2150:
2151:
2152:
2153:
2154:
2155:
2156:
2157:
2158:
2159:
2160:
2161:
2162:
2163:
2164:
2165:
2166:
2167:
2168:
2169:
2170:
2171:
2172:
2173:
2174:
2175:
2176:
2177:
2178:
2179:
2180:
2181:
2182:
2183:
2184:
2185:
2186:
2187:
2188:
2189:
2190:
2191:
2192:
2193:
2194:
2195:
2196:
2197:
2198:
2199:
2200:
2201:
2202:
2203:
2204:
2205:
2206:
2207:
2208:
2209:
2210:
2211:
2212:
2213:
2214:
2215:
2216:
2217:
2218:
2219:
2220:
2221:
2222:
2223:
2224:
2225:
2226:
2227:
2228:
2229:
2230:
2231:
2232:
2233:
2234:
2235:
2236:
2237:
2238:
2239:
2240:
2241:
2242:
2243:
2244:
2245:
2246:
2247:
2248:
2249:
2250:
2251:
2252:
2253:
2254:
2255:
2256:
2257:
2258:
2259:
2260:
2261:
2262:
2263:
2264:
2265:
2266:
2267:
2268:
2269:
2270:
2271:
2272:
2273:
2274:
2275:
2276:
2277:
2278:
2279:
2280:
2281:
2282:
2283:
2284:
2285:
2286:
2287:
2288:
2289:
2290:
2291:
2292:
2293:
2294:
2295:
2296:
2297:
2298:
2299:
2300:
2301:
2302:
2303:
2304:
2305:
2306:
2307:
2308:
2309:
2310:
2311:
2312:
2313:
2314:
2315:
2316:
2317:
2318:
2319:
2320:
2321:
2322:
2323:
2324:
2325:
2326:
2327:
2328:
2329:
2330:
2331:
2332:
2333:
2334:
2335:
2336:
2337:
2338:
2339:
2340:
2341:
2342:
2343:
2344:
2345:
2346:
2347:
2348:
2349:
2350:
2351:
2352:
2353:
2354:
2355:
2356:
2357:
2358:
2359:
2360:
2361:
2362:
2363:
2364:
2365:
2366:
2367:
2368:
2369:
2370:
2371:
2372:
2373:
2374:
2375:
2376:
2377:
2378:
2379:
2380:
2381:
2382:
2383:
2384:
2385:
2386:
2387:
2388:
2389:
2390:
2391:
2392:
2393:
2394:
2395:
2396:
2397:
2398:
2399:
2400:
2401:
2402:
2403:
2404:
2405:
2406:
2407:
2408:
2409:
2410:
2411:
2412:
2413:
2414:
2415:
2416:
2417:
2418:
2419:
2420:
2421:
2422:
2423:
2424:
2425:
2426:
2427:
2428:
2429:
2430:
2431:
2432:
2433:
2434:
2435:
2436:
2437:
2438:
2439:
2440:
2441:
2442:
2443:
2444:
2445:
2446:
2447:
2448:
2449:
2450:
2451:
2452:
2453:
2454:
2455:
2456:
2457:
2458:
2459:
2460:
2461:
2462:
2463:
2464:
2465:
2466:
2467:
2468:
2469:
2470:
2471:
2472:
2473:
2474:
2475:
2476:
2477:
2478:
2479:
2480:
2481:
2482:
2483:
2484:
2485:
2486:
2487:
2488:
2489:
2490:
2491:
2492:
2493:
2494:
2495:
2496:
2497:
2498:
2499:
2500:
2501:
2502:
2503:
2504:
2505:
2506:
2507:
2508:
2509:
2510:
2511:
2512:
2513:
2514:
2515:
2516:
2517:
2518:
2519:
2520:
2521:
2522:
2523:
2524:
2525:
2526:
2527:
2528:
2529:
2530:
2531:
2532:
2533:
2534:
2535:
2536:
2537:
2538:
2539:
2540:
2541:
2542:
2543:
2544:
2545:
2546:
2547:
2548:
2549:
2550:
2551:
2552:
2553:
2554:
2555:
2556:
2557:
2558:
2559:
2560:
2561:
2562:
2563:
2564:
2565:
2566:
2567:
2568:
2569:
2570:
2571:
2572:
2573:
2574:
2575:
2576:
2577:
2578:
2579:
2580:
2581:
2582:
2583:
2584:
2585:
2586:
2587:
2588:
2589:
2590:
2591:
2592:
2593:
2594:
2595:
2596:
2597:
2598:
2599:
2600:
2601:
2602:
2603:
2604:
2605:
2606:
2607:
2608:
2609:
2610:
2611:
2612:
2613:
2614:
2615:
2616:
2617:
2618:
2619:
2620:
2621:
2622:
2623:
2624:
2625:
2626:
2627:
2628:
2629:
2630:
2631:
2632:
2633:
2634:
2635:
2636:
2637:
2638:
2639:
2640:
2641:
2642:
2643:
2644:
2645:
2646:
2647:
2648:
2649:
2650:
2651:
2652:
2653:
2654:
2655:
2656:
2657:
2658:
2659:
2660:
2661:
2662:
2663:
2664:
2665:
2666:
2667:
2668:
2669:
2670:
2671:
2672:
2673:
2674:
2675:
2676:
2677:
2678:
2679:
2680:
2681:
2682:
2683:
2684:
2685:
2686:
2687:
2688:
2689:
2690:
2691:
2692:
2693:
2694:
2695:
2696:
2697:
2698:
2699:
2700:
2701:
2702:
2703:
2704:
2705:
2706:
2707:
2708:
2709:
2710:
2711:
2712:
2713:
2714:
2715:
2716:
2717:
2718:
2719:
2720:
2721:
2722:
2723:
2724:
2725:
2726:
2727:
2728:
2729:
2730:
2731:
2732:
2733:
2734:
2735:
2736:
2737:
2738:
2739:
2740:
2741:
2742:
2743:
2744:
2745:
2746:
2747:
2748:
2749:
2750:
2751:
2752:
2753:
2754:
2755:
2756:
2757:
2758:
2759:
2760:
2761:
2762:
2763:
2764:
2765:
2766:

Select allOpen in new window

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-08-20 at 23:13:19ID24670518
Tags

Visula c++

,

winsock

Topics

C Programming Language

,

Microsoft Visual C++.Net

,

Windows ATL / WTL / COM Programming

Participating Experts
4
Points
500
Comments
25

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. Need Version 0.80 of Dr. Watson
    I need a copy of Dr. Watson version 0.80 to track down a problem in Windows for Workgroups 3.11. The version Microsoft puts up on their web and ftp sites (WW0440 I believe) is version 0.76, which is not for Win 3.1 or 3.11 but for Win 3.0. Microsoft actually has a Knowledge ...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: lhl60Posted on 2009-08-21 at 01:08:57ID: 25149823

I suppose you have the source code and are able to compile it
Try to generate a symbol file  for your DLL,  then you functions will appear in the
----> Stack Back Trace <---- section

could give you some help full clues.

For VS take a look here:

http://msdn.microsoft.com/en-us/library/aa260783%28VS.60%29.aspx

for GCC I'm sure you can google how to generate , symbol info

good luck
Lars

 

by: Subrat2009Posted on 2009-08-21 at 07:01:08ID: 25151855

You need to use .PDB symbol while crating carsh dump. By which u can get more information regrding the fault like which function, which line of code and so on.
I'm using windb for crating and analyzng crash dump. If windbg will be ur default debugger, then it can display the code line where the fault is by making some settings.

 

by: Gideon7Posted on 2009-08-21 at 13:48:20ID: 25155685

There was a stack overrun during a call to select() in WS2_32.DLL.  The return address got trashed, causing an access violation in the RET instruction.

The fd_set array passed to select() was bad.  Most likely it contained a garbage or too-large number of socket descriptors (fd_set.fd_count = junk).

There is no way to identify the culprit caller that caused it without a better stack trace.

 

by: itsmeandnobodyelsePosted on 2009-08-23 at 13:38:18ID: 25164170

>>>> However i get a memory read error which is intermittent.
'memory read error' sounds like hardware error or at least driver errors deep in the system. But acutally it only means that a function passed a NULL pointer (or a pointer near to NULL) to a system function which doesn't exepct a NULL pointer and therefore crashes. Note, access violation is in 99 percent of all cases pointer errors. And the chance that the the bug is in the system or runtime function called rather than in the calling function is near to zero.

So, you need to debug the dll *before* or *immediately at'* point of crash to find out why the getnameinfo gets a NULL pointer as an argument. If the genameinfo call is in your source code, things are simple. Simply put a break point at all those calls and check the arguments passed. If you found the wrong pointer check the call stack and try to find out why the argument pointer is NULL.

If the source you could debug doesn't have calls to getnameinfo or if the breakpoints were not passed before crash, you firstly should make that the debugger breaks intermediately after crash and doesn't try to find out whether the exception was handled. The latter makes that after crash you have a different call stack than at crash what makes it hard to debug. Goto menu Debug - Exceptions ... - Win32 Exceptions and check for 0xc0000005 - access violation that the debugger should break immediately. After that repeat the crash in the debugger and when it breaks you now can examine the call stack and all arguments passed. That should allow you to spot the function whiich passes a NULL pointer instead of a valid pointer.

 

by: rupvisPosted on 2009-08-24 at 00:45:20ID: 25166234

The crash dump file is about 50MB in size.. it is crazy since i would not be able to upload the dump file..

>>>If the source you could debug doesn't have calls to getnameinfo or if the breakpoints were not passed before crash, you firstly should make that the debugger breaks intermediately after crash and doesn't try to find out whether the exception was handled.

I cannot debug my application using breakpoints since it is a dll. I have tried to print logs across the code but just makes it terribly slow.. Yes if i could get the accurate line number from the crash i could be able to figure out the issue.

I am now looking into using windbg.. Hopefully i should gather more knowledge once completed. Will it help if i could upload my source code.. Also if a NULL pointer was passed to a function it should have always thrown an error.. why would it be intermittent?

Thanks a ton for the help..

 

by: rupvisPosted on 2009-08-24 at 01:12:49ID: 25166349

Also i do get a *.pdb file on compiling the dll.. but i am on lost space as to what i could do with it.. To summarise i do have a pdb file and crash dump recieved from dr.watson. Could this be sufficient enough to know the issue.??

 

by: lhl60Posted on 2009-08-24 at 01:15:14ID: 25166363

you can debug the DLL:
Whit you DLL project open, and thr debug configuration selected, you just press F5 (start debug) you will then be prompted of an executable to load, point out Iexplorer (if thats what you are using), Then you are able to set break points and single step you DLL.
-Lars

 

by: rupvisPosted on 2009-08-24 at 01:50:14ID: 25166512

@Gideon

Attached is the code i use to pass fd_set array

int PASCAL FAR lpfconnect (SOCKET s, const struct sockaddr FAR * name, int namelen)
{
     
      int RetVal;
     try{
     struct fd_set  New_fd_set;
//    char buf[255];
     DWORD ERROR_NO;
assert(s != NULL);
     struct sockaddr_in *New = (struct sockaddr_in *) name;
     
      while(FunctionTable[ApiConnect].IMPFunctionState ==FlagOn);

     FunctionTable[ApiConnect].IMPFunctionState =FlagOn;
     UnInstallHook(ApiConnect);
     RetVal=connect(s,name,namelen);
     InstallHook(ApiConnect);

     if(send_state)
     {
     InstallHook(ApiSend);
     send_state=0;
     }

FunctionTable[ApiConnect].IMPFunctionState =FlagOff;
     
      
     if(RetVal!=0 && (ERROR_NO=WSAGetLastError())==10035)
     {
     New_fd_set.fd_count=1;
     New_fd_set.fd_array[0]=s;
           struct timeval t;
           t.tv_sec=1;
           t.tv_usec=0;
           if(select(FD_SETSIZE,NULL,&New_fd_set,0,&t)!=1)
           {
//            sprintf(buf,"error : %ld",WSAGetLastError());
//            Errorlog(buf);
           
           SetLastError(ERROR_NO);
           return RetVal;
           }
           else
           {
                 
                  GetSockAddress(s,ApiConnect);  //recv sockAddress
                 SetLastError(ERROR_NO);
                 return RetVal;
           }
     }
     

      if(RetVal==0)
     {
           GetSockAddress(s,ApiConnect);  //recv sockAddress
     }
     
      }catch(...){}
     return RetVal;
}


Anything that i might be doing wrong?

 

by: lhl60Posted on 2009-08-24 at 02:01:52ID: 25166552

A few comments:

I assume the ApiConnect variable is set with in a valid range in advance, an invalid value could cause your program to access memory outside your territory == bummm!

I hope You are aware that this statement  will loop for ever unless an other thread manipulates the IMPFunctionState

 while(FunctionTable[ApiConnect].IMPFunctionState ==FlagOn);


And as ApiConnect seems to be global variable you should protect with a mutex/semaphore

And in case any call trows an exception your catch could return an uninitialized  RetVal;
RetVal should be initialized to a valid value
 
      int RetVal = any _valid_return_code;
try
{
}
catch
{
return RetVal;
}




 

by: Gideon7Posted on 2009-08-24 at 03:08:51ID: 25166840

if(select(FD_SETSIZE,NULL,&New_fd_set,0,&t)!=1)

The first parameter is supposed to be ignored according to MSDN.  I wonder if perhaps there is a 3rd party protocol layer that is trying to filter select() and doesn't understand that.  Try select(1,NULL,&New_fd_set,NULL,&t) and see if that works better.

Also try zeroing out the fd structure:
memset(&New_fd_set,0,sizeof(New_fd_set)); New_fd_set.fd_count = 1;

 

by: lhl60Posted on 2009-08-24 at 03:19:34ID: 25166893

you can put in  Outputdebugstring in strategic places of your code
http://msdn.microsoft.com/en-us/library/aa363362%28VS.85%29.aspx


It will direct output to an attached debugger ( VS output view) or the program windbg ( free tool) - (but not both at the same time!)

take a look here
http://www.codeproject.com/KB/debug/windbg_part1.aspx
it contains a lot of good info, about debuggeing.




 

by: itsmeandnobodyelsePosted on 2009-08-24 at 11:56:24ID: 25171246

>>>> while(FunctionTable[ApiConnect].IMPFunctionState ==FlagOn);
lhl60 already told you that this while loop is very dangerous. But even if ApiConnect is a valid index, the loop would catch all CPU time (hopefully you have a double-processor) in case the FunctionTable[ApiConnect].IMPFunctionState actually has the FlagOn set.

You *really* need to make sure that first ApiConnect is a valid index and second put in a little sleep to give other threads a chance to also get some CPU time:

   // assuming the maximum index is MAX_CONNECT-1
   if (ApiConnect < 0 || ApiConnect >= MAX_CONNECT)
       return errno;    // errno can be got by including errno.h
   while(FunctionTable[ApiConnect].IMPFunctionState ==FlagOn)
        Sleep(0);   // That will pause about 15 msec


>>>>  if(RetVal!=0 && (ERROR_NO=WSAGetLastError())==10035)

Error 10035 means WSAEWOULDBLOCK what is only senseful to check in case it is a non-blocking socket. If so, the WSAEWOULDBLOCK is the usual case as it is quite normal that a non-blocking socket returns error if you want to read from it. But, you didn't read from the socket. You tried to get a connection. I never had reasons to expect a socket - even if set to non-blocking where I couldn't see code for - would return with WSAEWOULDBLOCK error when calling connect. So, I don't understand that error handling and I hardly could believe that the code ever will be executed and I truely doubt that it crashes in that code.

The last function of the stack lets me assume that it crashes at connect. Did you set the debugger to break immediately at access violation as I told you above? Did you try to step thru the code and can tell what statement was invoked lastly before crash?

 

by: rupvisPosted on 2009-08-24 at 23:17:47ID: 25174882

APIConnect is a valid index. Yes it is a global variable and initialised as 4..  Attaching the complete code snippet below.
@itsmeandnobodyelse: I am also adding the suggestion provided by you to add sleep.

I can provide with the code file to give a better picture . I have also used Gideons suggestion on the zeroing the fd_set structure.

Would need your email id to post the code though..

Thanks a ton..

 

by: lhl60Posted on 2009-08-24 at 23:44:44ID: 25174997

suggestions for the
    while(FunctionTable[ApiConnect].IMPFunctionState ==FlagOn);

In stead of putting in sleeps
- with IMHO is very poor programming (your thread will wake up a lot of times just to go back to sleep)  - you can let the IMPFunctionState be an event,  This way you can put your thread effectively to sleep, until the desired state occurs.

If you post the code here ( use attach file -below) we can all have fun !

-Lars

 

by: rupvisPosted on 2009-08-25 at 00:25:00ID: 25175163


@Lars ..Can you provide with your email address.. could send it across soon..

Cheers

 

by: lhl60Posted on 2009-08-25 at 00:31:49ID: 25175188

Just zip it, and use attach  below the comment box

 

by: rupvisPosted on 2009-08-25 at 00:38:46ID: 25175211

Code attached..
note thunk_cpp.txt is a cpp file and others are *.h files

Cheers and thanks again

 

by: lhl60Posted on 2009-08-25 at 01:08:30ID: 25175344

got it-
I'll have a look latter, right now i have to work :-)  

 

by: itsmeandnobodyelsePosted on 2009-08-25 at 13:21:56ID: 25181825

>>>> instead of putting in sleeps
>>>> - with IMHO is very poor programming (your thread will wake up a lot of times just to go back to sleep)  - you >>>> can let the IMPFunctionState be an event,  This way you can put your thread effectively to sleep, until the
>>>> desired state occurs.

Putting in sleeps is a synchronization mechanism called polling. Though some developers call it 'poor programming' it has a few advantages:

- it doesn't hang where you don't know why. You always could put a breakpoint after sleeping and check by debugger why the condition to goon isn't fulfilled.

- it is only a few code lines where you are independent of other code, i. e. you put your polling loop into the code for one thread and must not care what happens in other threads when doing so.

If using events (or other synchronisation objects) you have to use shared resources for all participients (threads). That means you either have to use global variables (what isn't great programming either) or have to pass the references for the synchronization objects between threads or have to use named synchronization objects managed by the system. You always need a thread running (and code) which is responsible for the current state and will achieve to pass the whole system to the next state. You never simply can return at error but have to care for the waiting threads and signal their events or all will hang. That not only sounds difficult, it is difficult. You will find out that you hardly can do what you want by using only one event but that each synchronization case will need its own event.

- if you achieved to have a running system using events or semaphores, it probably is a better solution than a polling
 loop. but it not necessarily is more efficient. If the polling is only for handling error cases where you can't goon anyway, it is a good and efficient way to handle that. Adding events for a case which probably never will happen is an overkill

Note, your above while loop probably never was entered (it makes not so much sense to have two threads handle the same connection). So, I wouldn't add too much efforts to handle a case which never should happen in a more 'efficient' way.

 

by: rupvisPosted on 2009-09-08 at 23:50:09ID: 25288767

@ihl60

any luck?

 

by: lhl60Posted on 2009-09-09 at 00:33:57ID: 25288951

no, I'm Sorry, I haven't had the time. And to be honest i doubt I will have any in the near future. I'll try to squeeze in an hour or two but....

 

by: rupvisPosted on 2009-09-28 at 03:56:48ID: 25438133

I have not recieved a concrete answer. The question may be closed at the moment. Thanks for all the help above.

 

by: itsmeandnobodyelsePosted on 2009-10-14 at 09:03:26ID: 25572066

>>>> I have not recieved a concrete answer.

Hummm. Did you see the length of this thread and the many answers?

I don't think a refund was justified. Memory faults are hard to detect even if you have the full code. There were given a lot of suggestions here which would lead to success if the author could locate the code which corrupted the memory. But that couldn't be made by the experts same as the request for private email which was against EE rules.

@TheLearnedOne
I would recommend to PAQ the thread even if you don't want to give points to the experts.

 

by: rupvisPosted on 2009-10-14 at 19:31:34ID: 25576813

@itsmeandnobodyelse:

I agree with what you say and do appreciate the effort put in, however it is just mere frustration of the fact that the root cause of the fault was still undetected even with the code uploaded. However i do accept it is not mandatory for me to accept that a solution be provided and the suggestions provided were very valuable.
I will submit to close this thread.. and share points..

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...