Microsoft (R) DrWtsn32 Copyright (C) 1985-2002 Microsoft Corp. All rights reserved. Application exception occurred: App: C:\Program Files (x86)\SpeedFan\speedfan.exe (pid=2176) When: 8/6/2011 @ 16:18:52.937 Exception number: c00000fd (stack overflow) *----> System Information <----* Computer Name: BEN01 User Name: Administrator Terminal Session Id: 0 Number of Processors: 6 Processor Type: EM64T Family 6 Model 44 Stepping 2 Windows Version: 5.2 Current Build: 3790 Service Pack: 2 Current Type: Multiprocessor Free Registered Organization: Hidaglo Trading Company LTD Registered Owner: Ben Ellenburg *----> Task List <----* 0 System Process 4 System 368 System 432 System 456 System 504 System 516 System 704 System 788 System 844 System 888 System 936 System 960 System 1028 AvastSvc.exe 1312 System 1352 CTAudSvc.exe 1508 System 2924 System 2116 System 2760 System 1064 System 2036 System 1336 VolPanlu.exe 2784 CTXFIHLP.EXE 1040 CTXFISPI.EXE 1944 System Process 908 avastUI.exe 2572 System 1176 System 2236 System 640 astropulse_5.05_windows_intelx86.exe 2316 setiathome_6.03_windows_intelx86.exe 2292 setiathome_6.03_windows_intelx86.exe 1096 setiathome_6.03_windows_intelx86.exe 3056 astropulse_5.05_windows_intelx86.exe 836 astropulse_5.05_windows_intelx86.exe 2176 speedfan.exe 2776 drwtsn32.exe *----> Module List <----* 0000000000400000 - 0000000000874000: C:\Program Files (x86)\SpeedFan\speedfan.exe 0000000000960000 - 00000000009fb000: C:\WINDOWS\syswow64\ADVAPI32.dll 0000000000a00000 - 0000000000a8b000: C:\WINDOWS\syswow64\oleaut32.dll 0000000000a90000 - 0000000000ae2000: C:\WINDOWS\syswow64\SHLWAPI.dll 0000000010000000 - 00000000100af000: c:\progra~1\agnitum\outpos~1\wl_hook.dll 000000004dc30000 - 000000004dc5e000: C:\WINDOWS\system32\msctfime.ime 0000000064d00000 - 0000000064d34000: C:\Program Files\AVAST Software\Avast\snxhk.dll 0000000071bb0000 - 0000000071bb9000: C:\WINDOWS\system32\wsock32.dll 0000000071bf0000 - 0000000071bf8000: C:\WINDOWS\system32\WS2HELP.dll 0000000071c00000 - 0000000071c17000: C:\WINDOWS\system32\WS2_32.dll 0000000073070000 - 0000000073097000: C:\WINDOWS\system32\winspool.drv 0000000075e60000 - 0000000075e87000: C:\WINDOWS\system32\apphelp.dll 0000000076190000 - 00000000761a2000: C:\WINDOWS\system32\MSASN1.dll 00000000761b0000 - 0000000076243000: C:\WINDOWS\system32\CRYPT32.dll 0000000076aa0000 - 0000000076acd000: C:\WINDOWS\system32\winmm.dll 0000000076bb0000 - 0000000076bdb000: C:\WINDOWS\system32\WINTRUST.dll 0000000076c10000 - 0000000076c38000: C:\WINDOWS\syswow64\imagehlp.dll 00000000770e0000 - 00000000771e8000: C:\WINDOWS\system32\SetupApi.dll 0000000077530000 - 00000000775c7000: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_5.82.3790.3959_x-ww_78FCF8D0\comctl32.dll 0000000077670000 - 00000000777a9000: C:\WINDOWS\syswow64\ole32.dll 0000000077b90000 - 0000000077b98000: C:\WINDOWS\syswow64\version.dll 0000000077ba0000 - 0000000077bfa000: C:\WINDOWS\syswow64\msvcrt.dll 000000007c8d0000 - 000000007d0ce000: C:\WINDOWS\syswow64\shell32.dll 000000007d4c0000 - 000000007d5f0000: C:\WINDOWS\syswow64\kernel32.dll 000000007d600000 - 000000007d6f0000: C:\WINDOWS\system32\ntdll.dll 000000007d800000 - 000000007d890000: C:\WINDOWS\syswow64\GDI32.dll 000000007d8d0000 - 000000007d920000: C:\WINDOWS\syswow64\Secur32.dll 000000007d930000 - 000000007da00000: C:\WINDOWS\syswow64\user32.dll 000000007da20000 - 000000007db00000: C:\WINDOWS\syswow64\RPCRT4.dll 000000007dbd0000 - 000000007dcd3000: C:\WINDOWS\WinSxS\WOW64_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.3959_x-ww_5FA17F4E\comctl32.dll 000000007dee0000 - 000000007df40000: C:\WINDOWS\system32\IMM32.DLL *----> State Dump for Thread Id 0xa14 <----* eax=001f3064 ebx=00000000 ecx=001f30e4 edx=0012e4f8 esi=00404e0c edi=00000000 eip=7d643732 esp=001f3000 ebp=001f3024 iopl=0 nv up ei pl nz na po nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll - function: ntdll!RtlValidateHeap 7d643724 cc int 3 7d643725 90 nop 7d643726 90 nop 7d643727 90 nop 7d643728 90 nop 7d643729 90 nop 7d64372a 8bff mov edi,edi 7d64372c 55 push ebp 7d64372d 8bec mov ebp,esp 7d64372f 83ec24 sub esp,0x24 FAULT ->7d643732 53 push ebx 7d643733 33db xor ebx,ebx 7d643735 381dd0016a7d cmp [ntdll!NlsMbOemCodePageTag+0x130 (7d6a01d0)],bl 7d64373b 56 push esi 7d64373c 895df8 mov [ebp-0x8],ebx 7d64373f 895dfc mov [ebp-0x4],ebx 7d643742 0f856d630100 jne ntdll!RtlImageDirectoryEntryToData+0x5866 (7d659ab5) 7d643748 e924630100 jmp ntdll!RtlImageDirectoryEntryToData+0x5822 (7d659a71) 7d64374d 55 push ebp 7d64374e 8bec mov ebp,esp 7d643750 83ec0c sub esp,0xc *----> Stack Back Trace <----* ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 001f3024 7d6354ff 00404e0c 001f3064 001f3070 ntdll!RtlValidateHeap+0xc7a 001f3078 7d635485 00404e0c 00000000 001f3104 ntdll!RtlReleasePrivilege+0x210 001f30ec 7d61ea36 001f3000 001f3154 001f3104 ntdll!RtlReleasePrivilege+0x196 001f3488 7d61ea36 001f3000 001f34f0 001f34a0 ntdll!KiUserExceptionDispatcher+0xe 001f3824 7d61ea36 001f3000 001f388c 001f383c ntdll!KiUserExceptionDispatcher+0xe 001f3bc0 7d61ea36 001f3000 001f3c28 001f3bd8 ntdll!KiUserExceptionDispatcher+0xe 001f3f5c 7d61ea36 001f3000 001f3fc4 001f3f74 ntdll!KiUserExceptionDispatcher+0xe 001f42f8 7d61ea36 001f4000 001f4360 001f4310 ntdll!KiUserExceptionDispatcher+0xe 001f4694 7d61ea36 001f4000 001f46fc 001f46ac ntdll!KiUserExceptionDispatcher+0xe 001f4a30 7d61ea36 001f4000 001f4a98 001f4a48 ntdll!KiUserExceptionDispatcher+0xe 001f4dcc 7d61ea36 001f4000 001f4e34 001f4de4 ntdll!KiUserExceptionDispatcher+0xe 001f5168 7d61ea36 001f5000 001f51d0 001f5180 ntdll!KiUserExceptionDispatcher+0xe 001f5504 7d61ea36 001f5000 001f556c 001f551c ntdll!KiUserExceptionDispatcher+0xe 001f58a0 7d61ea36 001f5000 001f5908 001f58b8 ntdll!KiUserExceptionDispatcher+0xe 001f5c3c 7d61ea36 001f5000 001f5ca4 001f5c54 ntdll!KiUserExceptionDispatcher+0xe 001f5fd8 7d61ea36 001f5000 001f6040 001f5ff0 ntdll!KiUserExceptionDispatcher+0xe 001f6374 7d61ea36 001f6000 001f63dc 001f638c ntdll!KiUserExceptionDispatcher+0xe 001f6710 7d61ea36 001f6000 001f6778 001f6728 ntdll!KiUserExceptionDispatcher+0xe 001f6aac 7d61ea36 001f6000 001f6b14 001f6ac4 ntdll!KiUserExceptionDispatcher+0xe 001f6e48 7d61ea36 001f6000 001f6eb0 001f6e60 ntdll!KiUserExceptionDispatcher+0xe 001f71e4 7d61ea36 001f7000 001f724c 001f71fc ntdll!KiUserExceptionDispatcher+0xe 001f7580 7d61ea36 001f7000 001f75e8 001f7598 ntdll!KiUserExceptionDispatcher+0xe 001f791c 7d61ea36 001f7000 001f7984 001f7934 ntdll!KiUserExceptionDispatcher+0xe 001f7cb8 7d61ea36 001f7000 001f7d20 001f7cd0 ntdll!KiUserExceptionDispatcher+0xe 001f8054 7d61ea36 001f7000 001f80bc 001f806c ntdll!KiUserExceptionDispatcher+0xe 001f83f0 7d61ea36 001f8000 001f8458 001f8408 ntdll!KiUserExceptionDispatcher+0xe 001f878c 7d61ea36 001f8000 001f87f4 001f87a4 ntdll!KiUserExceptionDispatcher+0xe 001f8b28 7d61ea36 001f8000 001f8b90 001f8b40 ntdll!KiUserExceptionDispatcher+0xe 001f8ec4 7d61ea36 001f8000 001f8f2c 001f8edc ntdll!KiUserExceptionDispatcher+0xe 001f9260 7d61ea36 001f9000 001f92c8 001f9278 ntdll!KiUserExceptionDispatcher+0xe 001f95fc 7d61ea36 001f9000 001f9664 001f9614 ntdll!KiUserExceptionDispatcher+0xe 001f9998 7d61ea36 001f9000 001f9a00 001f99b0 ntdll!KiUserExceptionDispatcher+0xe 001f9d34 7d61ea36 001f9000 001f9d9c 001f9d4c ntdll!KiUserExceptionDispatcher+0xe 001fa0d0 7d61ea36 001fa000 001fa138 001fa0e8 ntdll!KiUserExceptionDispatcher+0xe 001fa46c 7d61ea36 001fa000 001fa4d4 001fa484 ntdll!KiUserExceptionDispatcher+0xe 001fa808 7d61ea36 001fa000 001fa870 001fa820 ntdll!KiUserExceptionDispatcher+0xe 001faba4 7d61ea36 001fa000 001fac0c 001fabbc ntdll!KiUserExceptionDispatcher+0xe 001faf40 7d61ea36 001fa000 001fafa8 001faf58 ntdll!KiUserExceptionDispatcher+0xe 001fb2dc 7d61ea36 001fb000 001fb344 001fb2f4 ntdll!KiUserExceptionDispatcher+0xe 001fb678 7d61ea36 001fb000 001fb6e0 001fb690 ntdll!KiUserExceptionDispatcher+0xe 001fba14 7d61ea36 001fb000 001fba7c 001fba2c ntdll!KiUserExceptionDispatcher+0xe 001fbdb0 7d61ea36 001fb000 001fbe18 001fbdc8 ntdll!KiUserExceptionDispatcher+0xe 001fc14c 7d61ea36 001fc000 001fc1b4 001fc164 ntdll!KiUserExceptionDispatcher+0xe 001fc4e8 7d61ea36 001fc000 001fc550 001fc500 ntdll!KiUserExceptionDispatcher+0xe 001fc884 7d61ea36 001fc000 001fc8ec 001fc89c ntdll!KiUserExceptionDispatcher+0xe 001fcc20 7d61ea36 001fc000 001fcc88 001fcc38 ntdll!KiUserExceptionDispatcher+0xe 001fcfbc 7d61ea36 001fc000 001fd024 001fcfd4 ntdll!KiUserExceptionDispatcher+0xe 001fd358 7d61ea36 001fd000 001fd3c0 001fd370 ntdll!KiUserExceptionDispatcher+0xe 001fd6f4 7d61ea36 001fd000 001fd75c 001fd70c ntdll!KiUserExceptionDispatcher+0xe 001fda90 7d61ea36 001fd000 001fdaf8 001fdaa8 ntdll!KiUserExceptionDispatcher+0xe 001fde2c 7d61ea36 001fd000 001fde94 001fde44 ntdll!KiUserExceptionDispatcher+0xe 001fe1c8 7d61ea36 001fe000 001fe230 001fe1e0 ntdll!KiUserExceptionDispatcher+0xe 001fe564 7d61ea36 001fe000 001fe5cc 001fe57c ntdll!KiUserExceptionDispatcher+0xe 001fe900 7d61ea36 001fe000 001fe968 001fe918 ntdll!KiUserExceptionDispatcher+0xe 001fec9c 7d61ea36 001fe000 001fed04 001fecb4 ntdll!KiUserExceptionDispatcher+0xe 001ff038 7d61ea36 001fe000 001ff0a0 001ff050 ntdll!KiUserExceptionDispatcher+0xe 001ff3d4 7d61ea36 001ff000 001ff43c 001ff3ec ntdll!KiUserExceptionDispatcher+0xe 001ff770 7d61ea36 001ff000 001ff7d8 001ff788 ntdll!KiUserExceptionDispatcher+0xe 001ffb0c 7d61ea36 001ff000 001ffb74 001ffb24 ntdll!KiUserExceptionDispatcher+0xe 001ffea8 7d61ea36 001ff000 001fff10 001ffec0 ntdll!KiUserExceptionDispatcher+0xe 00200244 7d61ea36 00200000 002002ac 0020025c ntdll!KiUserExceptionDispatcher+0xe 002005e0 7d61ea36 00200000 00200648 002005f8 ntdll!KiUserExceptionDispatcher+0xe 0020097c 7d61ea36 00200000 002009e4 00200994 ntdll!KiUserExceptionDispatcher+0xe 00200d18 7d61ea36 00200000 00200d80 00200d30 ntdll!KiUserExceptionDispatcher+0xe 002010b4 7d61ea36 00201000 0020111c 002010cc ntdll!KiUserExceptionDispatcher+0xe 00201450 7d61ea36 00201000 002014b8 00201468 ntdll!KiUserExceptionDispatcher+0xe 002017ec 7d61ea36 00201000 00201854 00201804 ntdll!KiUserExceptionDispatcher+0xe 00201b88 7d61ea36 00201000 00201bf0 00201ba0 ntdll!KiUserExceptionDispatcher+0xe 00201f24 7d61ea36 00201000 00201f8c 00201f3c ntdll!KiUserExceptionDispatcher+0xe 002022c0 7d61ea36 00202000 00202328 002022d8 ntdll!KiUserExceptionDispatcher+0xe 0020265c 7d61ea36 00202000 002026c4 00202674 ntdll!KiUserExceptionDispatcher+0xe 002029f8 7d61ea36 00202000 00202a60 00202a10 ntdll!KiUserExceptionDispatcher+0xe 00202d94 7d61ea36 00202000 00202dfc 00202dac ntdll!KiUserExceptionDispatcher+0xe 00203130 7d61ea36 00203000 00203198 00203148 ntdll!KiUserExceptionDispatcher+0xe 002034cc 7d61ea36 00203000 00203534 002034e4 ntdll!KiUserExceptionDispatcher+0xe 00203868 7d61ea36 00203000 002038d0 00203880 ntdll!KiUserExceptionDispatcher+0xe 00203c04 7d61ea36 00203000 00203c6c 00203c1c ntdll!KiUserExceptionDispatcher+0xe 00203fa0 7d61ea36 00203000 00204008 00203fb8 ntdll!KiUserExceptionDispatcher+0xe 0020433c 7d61ea36 00204000 002043a4 00204354 ntdll!KiUserExceptionDispatcher+0xe 002046d8 7d61ea36 00204000 00204740 002046f0 ntdll!KiUserExceptionDispatcher+0xe 00204a74 7d61ea36 00204000 00204adc 00204a8c ntdll!KiUserExceptionDispatcher+0xe 00204e10 7d61ea36 00204000 00204e78 00204e28 ntdll!KiUserExceptionDispatcher+0xe 002051ac 7d61ea36 00205000 00205214 002051c4 ntdll!KiUserExceptionDispatcher+0xe 00205548 7d61ea36 00205000 002055b0 00205560 ntdll!KiUserExceptionDispatcher+0xe 002058e4 7d61ea36 00205000 0020594c 002058fc ntdll!KiUserExceptionDispatcher+0xe 00205c80 7d61ea36 00205000 00205ce8 00205c98 ntdll!KiUserExceptionDispatcher+0xe 0020601c 7d61ea36 00205000 00206084 00206034 ntdll!KiUserExceptionDispatcher+0xe 002063b8 7d61ea36 00206000 00206420 002063d0 ntdll!KiUserExceptionDispatcher+0xe 00206754 7d61ea36 00206000 002067bc 0020676c ntdll!KiUserExceptionDispatcher+0xe 00206af0 7d61ea36 00206000 00206b58 00206b08 ntdll!KiUserExceptionDispatcher+0xe 00206e8c 7d61ea36 00206000 00206ef4 00206ea4 ntdll!KiUserExceptionDispatcher+0xe 00207228 7d61ea36 00207000 00207290 00207240 ntdll!KiUserExceptionDispatcher+0xe 002075c4 7d61ea36 00207000 0020762c 002075dc ntdll!KiUserExceptionDispatcher+0xe 00207960 7d61ea36 00207000 002079c8 00207978 ntdll!KiUserExceptionDispatcher+0xe 00207cfc 7d61ea36 00207000 00207d64 00207d14 ntdll!KiUserExceptionDispatcher+0xe 00208098 7d61ea36 00208000 00208100 002080b0 ntdll!KiUserExceptionDispatcher+0xe 00208434 7d61ea36 00208000 0020849c 0020844c ntdll!KiUserExceptionDispatcher+0xe 002087d0 7d61ea36 00208000 00208838 002087e8 ntdll!KiUserExceptionDispatcher+0xe 00208b6c 7d61ea36 00208000 00208bd4 00208b84 ntdll!KiUserExceptionDispatcher+0xe 00208f08 7d61ea36 00208000 00208f70 00208f20 ntdll!KiUserExceptionDispatcher+0xe *----> Raw Stack Dump <----* 00000000001f3000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f3010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f3020 00 00 00 00 78 30 1f 00 - ff 54 63 7d 0c 4e 40 00 ....x0...Tc}.N@. 00000000001f3030 64 30 1f 00 70 30 1f 00 - 00 00 00 00 04 31 1f 00 d0..p0.......1.. 00000000001f3040 b4 ff 2e 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f3050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f3060 00 00 00 00 00 00 00 00 - 7c 30 1f 00 00 00 00 00 ........|0...... 00000000001f3070 04 31 1f 00 e9 45 00 00 - ec 30 1f 00 85 54 63 7d .1...E...0...Tc} 00000000001f3080 0c 4e 40 00 00 00 00 00 - 04 31 1f 00 a0 34 1f 00 .N@......1...4.. 00000000001f3090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f30a0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f30b0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f30c0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f30d0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f30e0 00 00 00 00 00 00 2f 00 - 00 00 00 00 88 34 1f 00 ....../......4.. 00000000001f30f0 36 ea 61 7d 00 30 1f 00 - 54 31 1f 00 04 31 1f 00 6.a}.0..T1...1.. 00000000001f3100 54 31 1f 00 25 00 00 c0 - 01 00 00 00 a0 34 1f 00 T1..%........4.. 00000000001f3110 8a 99 65 7d 00 00 00 00 - 00 00 00 00 00 00 00 00 ..e}............ 00000000001f3120 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f3130 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ *----> State Dump for Thread Id 0x5dc <----* eax=00000000 ebx=024bfef0 ecx=00000000 edx=00000000 esi=00000002 edi=00000000 eip=7d61d051 esp=024bfea8 ebp=024bff48 iopl=0 nv up ei pl nz na pe nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202 function: ntdll!ZwWaitForMultipleObjects 7d61d024 b857000000 mov eax,0x57 7d61d029 b918000000 mov ecx,0x18 7d61d02e 8d542404 lea edx,[esp+0x4] 7d61d032 64ff15c0000000 call dword ptr fs:[000000c0] 7d61d039 c20400 ret 0x4 ntdll!ZwWaitForMultipleObjects: 7d61d03c b858000000 mov eax,0x58 7d61d041 b91d000000 mov ecx,0x1d 7d61d046 8d542404 lea edx,[esp+0x4] 7d61d04a 64ff15c0000000 call dword ptr fs:[000000c0] 7d61d051 c21400 ret 0x14 ntdll!ZwSetInformationObject: 7d61d054 b859000000 mov eax,0x59 7d61d059 33c9 xor ecx,ecx 7d61d05b 8d542404 lea edx,[esp+0x4] 7d61d05f 64ff15c0000000 call dword ptr fs:[000000c0] 7d61d066 c21000 ret 0x10 7d61d069 8d4900 lea ecx,[ecx] ntdll!NtCancelIoFile: 7d61d06c b85a000000 mov eax,0x5a 7d61d071 33c9 xor ecx,ecx *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\syswow64\kernel32.dll - ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 024bff48 7d63f988 00000002 024bff70 00000000 ntdll!ZwWaitForMultipleObjects+0x15 024bffb8 7d4dfe21 00000000 00000000 00000000 ntdll!RtlSetEnvironmentStrings+0x9a8 024bffec 00000000 7d63f7e6 00000000 00000000 kernel32!FlsSetValue+0x136 *----> Raw Stack Dump <----* 00000000024bfea8 01 f5 63 7d 02 00 00 00 - f0 fe 4b 02 01 00 00 00 ..c}......K..... 00000000024bfeb8 01 00 00 00 10 ff 4b 02 - 00 10 00 00 88 1f 2c 02 ......K.......,. 00000000024bfec8 20 06 6a 7d 24 00 00 00 - 01 00 00 00 00 00 00 00 .j}$........... 00000000024bfed8 00 00 00 00 30 00 00 00 - ff ff ff ff ff ff ff ff ....0........... 00000000024bfee8 6b f4 63 7d 00 00 00 00 - 7c 00 00 00 88 00 00 00 k.c}....|....... 00000000024bfef8 08 00 00 c0 00 10 00 00 - 30 ff 4b 02 04 03 62 7d ........0.K...b} 00000000024bff08 09 03 62 7d 00 10 00 00 - 00 a2 2f 4d ff ff ff ff ..b}....../M.... 00000000024bff18 00 e0 fd 7e 20 06 6a 7d - 10 ff 4b 02 f0 fe 4b 02 ...~ .j}..K...K. 00000000024bff28 10 03 62 7d 02 00 00 00 - c0 fe 4b 02 01 03 64 7d ..b}......K...d} 00000000024bff38 dc ff 4b 02 f8 f1 61 7d - d0 f4 63 7d 00 00 00 00 ..K...a}..c}.... 00000000024bff48 b8 ff 4b 02 88 f9 63 7d - 02 00 00 00 70 ff 4b 02 ..K...c}....p.K. 00000000024bff58 00 00 00 00 e0 93 04 00 - 01 00 00 00 00 00 00 00 ................ 00000000024bff68 00 00 00 00 00 00 00 00 - 7c 00 00 00 88 00 00 00 ........|....... 00000000024bff78 00 10 00 00 88 1f 2c 02 - 00 10 00 00 90 2f 2c 02 ......,....../,. 00000000024bff88 00 26 6a 7d 00 00 00 00 - 28 00 00 00 20 26 6a 7d .&j}....(... &j} 00000000024bff98 00 10 00 00 00 26 6a 7d - 88 1f 2c 02 00 00 00 00 .....&j}..,..... 00000000024bffa8 20 26 6a 7d e5 03 00 00 - 00 10 00 00 90 2f 2c 02 &j}........./,. 00000000024bffb8 ec ff 4b 02 21 fe 4d 7d - 00 00 00 00 00 00 00 00 ..K.!.M}........ 00000000024bffc8 00 00 00 00 00 00 00 00 - 00 00 00 00 c4 ff 4b 02 ..............K. 00000000024bffd8 00 00 00 00 ff ff ff ff - c4 89 4d 7d 28 fe 4d 7d ..........M}(.M} *----> State Dump for Thread Id 0xa78 <----* eax=004052b0 ebx=02682054 ecx=00000000 edx=00000000 esi=00000000 edi=00000000 eip=7d4d1504 esp=0287fffc ebp=00000000 iopl=0 nv up ei pl nz na pe nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202 function: kernel32!BaseThreadStartThunk No prior disassembly possible kernel32!BaseThreadStartThunk: 7d4d1504 33ed xor ebp,ebp 7d4d1506 53 push ebx 7d4d1507 50 push eax 7d4d1508 6a00 push 0x0 7d4d150a e9dee80000 jmp kernel32!FlsSetValue+0x102 (7d4dfded) 7d4d150f 90 nop kernel32!BaseProcessStartThunk: 7d4d1510 33ed xor ebp,ebp kernel32!BaseThreadStartThunk: 7d4d1504 33ed xor ebp,ebp 7d4d1506 53 push ebx 7d4d1507 50 push eax 7d4d1508 6a00 push 0x0 7d4d150a e9dee80000 jmp kernel32!FlsSetValue+0x102 (7d4dfded) 7d4d150f 90 nop kernel32!BaseProcessStartThunk: 7d4d1510 33ed xor ebp,ebp 7d4d1512 50 push eax 7d4d1513 6a00 push 0x0 7d4d1515 e9e8670100 jmp kernel32!BaseProcessInitPostImport+0x65 (7d4e7d02) *----> Stack Back Trace <----* ChildEBP RetAddr Args to Child 00000000 00000000 00000000 00000000 00000000 kernel32!BaseThreadStartThunk *----> Raw Stack Dump <----* 000000000287fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288000c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800bc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800cc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800dc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800ec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800fc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288010c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288011c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288012c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ Application exception occurred: App: C:\Program Files (x86)\SpeedFan\speedfan.exe (pid=2832) When: 8/6/2011 @ 23:56:02.953 Exception number: c00000fd (stack overflow) *----> System Information <----* Computer Name: BEN01 User Name: Administrator Terminal Session Id: 0 Number of Processors: 6 Processor Type: EM64T Family 6 Model 44 Stepping 2 Windows Version: 5.2 Current Build: 3790 Service Pack: 2 Current Type: Multiprocessor Free Registered Organization: Hidaglo Trading Company LTD Registered Owner: Ben Ellenburg *----> Task List <----* 0 System Process 4 System 368 System 420 System 444 System 492 System 504 System 704 System 784 System 832 System 876 System 932 System 992 System 1020 AvastSvc.exe 1292 System 1324 CTAudSvc.exe 1432 System 1492 System 2052 System 224 System 644 System 1936 System 988 VolPanlu.exe 792 CTXFIHLP.EXE 2132 System Process 2144 avastUI.exe 2196 CTXFISPI.EXE 2556 winamp.exe 216 System 468 firefox.exe 2592 winpm-32.exe 2644 System Process 2832 speedfan.exe 2924 drwtsn32.exe *----> Module List <----* 0000000000400000 - 0000000000874000: C:\Program Files (x86)\SpeedFan\speedfan.exe 0000000000960000 - 00000000009fb000: C:\WINDOWS\syswow64\ADVAPI32.dll 0000000000a00000 - 0000000000a8b000: C:\WINDOWS\syswow64\oleaut32.dll 0000000000a90000 - 0000000000ae2000: C:\WINDOWS\syswow64\SHLWAPI.dll 0000000010000000 - 00000000100af000: c:\progra~1\agnitum\outpos~1\wl_hook.dll 000000004dc30000 - 000000004dc5e000: C:\WINDOWS\system32\msctfime.ime 0000000064d00000 - 0000000064d34000: C:\Program Files\AVAST Software\Avast\snxhk.dll 0000000071bb0000 - 0000000071bb9000: C:\WINDOWS\system32\wsock32.dll 0000000071bf0000 - 0000000071bf8000: C:\WINDOWS\system32\WS2HELP.dll 0000000071c00000 - 0000000071c17000: C:\WINDOWS\system32\WS2_32.dll 0000000073070000 - 0000000073097000: C:\WINDOWS\system32\winspool.drv 0000000075e60000 - 0000000075e87000: C:\WINDOWS\system32\apphelp.dll 0000000076190000 - 00000000761a2000: C:\WINDOWS\system32\MSASN1.dll 00000000761b0000 - 0000000076243000: C:\WINDOWS\system32\CRYPT32.dll 0000000076aa0000 - 0000000076acd000: C:\WINDOWS\system32\winmm.dll 0000000076bb0000 - 0000000076bdb000: C:\WINDOWS\system32\WINTRUST.dll 0000000076c10000 - 0000000076c38000: C:\WINDOWS\syswow64\imagehlp.dll 00000000770e0000 - 00000000771e8000: C:\WINDOWS\system32\SetupApi.dll 0000000077530000 - 00000000775c7000: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_5.82.3790.3959_x-ww_78FCF8D0\comctl32.dll 0000000077670000 - 00000000777a9000: C:\WINDOWS\syswow64\ole32.dll 0000000077b90000 - 0000000077b98000: C:\WINDOWS\syswow64\version.dll 0000000077ba0000 - 0000000077bfa000: C:\WINDOWS\syswow64\msvcrt.dll 000000007c8d0000 - 000000007d0ce000: C:\WINDOWS\syswow64\shell32.dll 000000007d4c0000 - 000000007d5f0000: C:\WINDOWS\syswow64\kernel32.dll 000000007d600000 - 000000007d6f0000: C:\WINDOWS\system32\ntdll.dll 000000007d800000 - 000000007d890000: C:\WINDOWS\syswow64\GDI32.dll 000000007d8d0000 - 000000007d920000: C:\WINDOWS\syswow64\Secur32.dll 000000007d930000 - 000000007da00000: C:\WINDOWS\syswow64\user32.dll 000000007da20000 - 000000007db00000: C:\WINDOWS\syswow64\RPCRT4.dll 000000007dbd0000 - 000000007dcd3000: C:\WINDOWS\WinSxS\WOW64_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.3959_x-ww_5FA17F4E\comctl32.dll 000000007dee0000 - 000000007df40000: C:\WINDOWS\system32\IMM32.DLL *----> State Dump for Thread Id 0x8ac <----* eax=001f3064 ebx=00000000 ecx=001f30e4 edx=0012e4f8 esi=00404e0c edi=00000000 eip=7d643732 esp=001f3000 ebp=001f3024 iopl=0 nv up ei pl nz na po nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll - function: ntdll!RtlValidateHeap 7d643724 cc int 3 7d643725 90 nop 7d643726 90 nop 7d643727 90 nop 7d643728 90 nop 7d643729 90 nop 7d64372a 8bff mov edi,edi 7d64372c 55 push ebp 7d64372d 8bec mov ebp,esp 7d64372f 83ec24 sub esp,0x24 FAULT ->7d643732 53 push ebx 7d643733 33db xor ebx,ebx 7d643735 381dd0016a7d cmp [ntdll!NlsMbOemCodePageTag+0x130 (7d6a01d0)],bl 7d64373b 56 push esi 7d64373c 895df8 mov [ebp-0x8],ebx 7d64373f 895dfc mov [ebp-0x4],ebx 7d643742 0f856d630100 jne ntdll!RtlImageDirectoryEntryToData+0x5866 (7d659ab5) 7d643748 e924630100 jmp ntdll!RtlImageDirectoryEntryToData+0x5822 (7d659a71) 7d64374d 55 push ebp 7d64374e 8bec mov ebp,esp 7d643750 83ec0c sub esp,0xc *----> Stack Back Trace <----* ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 001f3024 7d6354ff 00404e0c 001f3064 001f3070 ntdll!RtlValidateHeap+0xc7a 001f3078 7d635485 00404e0c 00000000 001f3104 ntdll!RtlReleasePrivilege+0x210 001f30ec 7d61ea36 001f3000 001f3154 001f3104 ntdll!RtlReleasePrivilege+0x196 001f3488 7d61ea36 001f3000 001f34f0 001f34a0 ntdll!KiUserExceptionDispatcher+0xe 001f3824 7d61ea36 001f3000 001f388c 001f383c ntdll!KiUserExceptionDispatcher+0xe 001f3bc0 7d61ea36 001f3000 001f3c28 001f3bd8 ntdll!KiUserExceptionDispatcher+0xe 001f3f5c 7d61ea36 001f3000 001f3fc4 001f3f74 ntdll!KiUserExceptionDispatcher+0xe 001f42f8 7d61ea36 001f4000 001f4360 001f4310 ntdll!KiUserExceptionDispatcher+0xe 001f4694 7d61ea36 001f4000 001f46fc 001f46ac ntdll!KiUserExceptionDispatcher+0xe 001f4a30 7d61ea36 001f4000 001f4a98 001f4a48 ntdll!KiUserExceptionDispatcher+0xe 001f4dcc 7d61ea36 001f4000 001f4e34 001f4de4 ntdll!KiUserExceptionDispatcher+0xe 001f5168 7d61ea36 001f5000 001f51d0 001f5180 ntdll!KiUserExceptionDispatcher+0xe 001f5504 7d61ea36 001f5000 001f556c 001f551c ntdll!KiUserExceptionDispatcher+0xe 001f58a0 7d61ea36 001f5000 001f5908 001f58b8 ntdll!KiUserExceptionDispatcher+0xe 001f5c3c 7d61ea36 001f5000 001f5ca4 001f5c54 ntdll!KiUserExceptionDispatcher+0xe 001f5fd8 7d61ea36 001f5000 001f6040 001f5ff0 ntdll!KiUserExceptionDispatcher+0xe 001f6374 7d61ea36 001f6000 001f63dc 001f638c ntdll!KiUserExceptionDispatcher+0xe 001f6710 7d61ea36 001f6000 001f6778 001f6728 ntdll!KiUserExceptionDispatcher+0xe 001f6aac 7d61ea36 001f6000 001f6b14 001f6ac4 ntdll!KiUserExceptionDispatcher+0xe 001f6e48 7d61ea36 001f6000 001f6eb0 001f6e60 ntdll!KiUserExceptionDispatcher+0xe 001f71e4 7d61ea36 001f7000 001f724c 001f71fc ntdll!KiUserExceptionDispatcher+0xe 001f7580 7d61ea36 001f7000 001f75e8 001f7598 ntdll!KiUserExceptionDispatcher+0xe 001f791c 7d61ea36 001f7000 001f7984 001f7934 ntdll!KiUserExceptionDispatcher+0xe 001f7cb8 7d61ea36 001f7000 001f7d20 001f7cd0 ntdll!KiUserExceptionDispatcher+0xe 001f8054 7d61ea36 001f7000 001f80bc 001f806c ntdll!KiUserExceptionDispatcher+0xe 001f83f0 7d61ea36 001f8000 001f8458 001f8408 ntdll!KiUserExceptionDispatcher+0xe 001f878c 7d61ea36 001f8000 001f87f4 001f87a4 ntdll!KiUserExceptionDispatcher+0xe 001f8b28 7d61ea36 001f8000 001f8b90 001f8b40 ntdll!KiUserExceptionDispatcher+0xe 001f8ec4 7d61ea36 001f8000 001f8f2c 001f8edc ntdll!KiUserExceptionDispatcher+0xe 001f9260 7d61ea36 001f9000 001f92c8 001f9278 ntdll!KiUserExceptionDispatcher+0xe 001f95fc 7d61ea36 001f9000 001f9664 001f9614 ntdll!KiUserExceptionDispatcher+0xe 001f9998 7d61ea36 001f9000 001f9a00 001f99b0 ntdll!KiUserExceptionDispatcher+0xe 001f9d34 7d61ea36 001f9000 001f9d9c 001f9d4c ntdll!KiUserExceptionDispatcher+0xe 001fa0d0 7d61ea36 001fa000 001fa138 001fa0e8 ntdll!KiUserExceptionDispatcher+0xe 001fa46c 7d61ea36 001fa000 001fa4d4 001fa484 ntdll!KiUserExceptionDispatcher+0xe 001fa808 7d61ea36 001fa000 001fa870 001fa820 ntdll!KiUserExceptionDispatcher+0xe 001faba4 7d61ea36 001fa000 001fac0c 001fabbc ntdll!KiUserExceptionDispatcher+0xe 001faf40 7d61ea36 001fa000 001fafa8 001faf58 ntdll!KiUserExceptionDispatcher+0xe 001fb2dc 7d61ea36 001fb000 001fb344 001fb2f4 ntdll!KiUserExceptionDispatcher+0xe 001fb678 7d61ea36 001fb000 001fb6e0 001fb690 ntdll!KiUserExceptionDispatcher+0xe 001fba14 7d61ea36 001fb000 001fba7c 001fba2c ntdll!KiUserExceptionDispatcher+0xe 001fbdb0 7d61ea36 001fb000 001fbe18 001fbdc8 ntdll!KiUserExceptionDispatcher+0xe 001fc14c 7d61ea36 001fc000 001fc1b4 001fc164 ntdll!KiUserExceptionDispatcher+0xe 001fc4e8 7d61ea36 001fc000 001fc550 001fc500 ntdll!KiUserExceptionDispatcher+0xe 001fc884 7d61ea36 001fc000 001fc8ec 001fc89c ntdll!KiUserExceptionDispatcher+0xe 001fcc20 7d61ea36 001fc000 001fcc88 001fcc38 ntdll!KiUserExceptionDispatcher+0xe 001fcfbc 7d61ea36 001fc000 001fd024 001fcfd4 ntdll!KiUserExceptionDispatcher+0xe 001fd358 7d61ea36 001fd000 001fd3c0 001fd370 ntdll!KiUserExceptionDispatcher+0xe 001fd6f4 7d61ea36 001fd000 001fd75c 001fd70c ntdll!KiUserExceptionDispatcher+0xe 001fda90 7d61ea36 001fd000 001fdaf8 001fdaa8 ntdll!KiUserExceptionDispatcher+0xe 001fde2c 7d61ea36 001fd000 001fde94 001fde44 ntdll!KiUserExceptionDispatcher+0xe 001fe1c8 7d61ea36 001fe000 001fe230 001fe1e0 ntdll!KiUserExceptionDispatcher+0xe 001fe564 7d61ea36 001fe000 001fe5cc 001fe57c ntdll!KiUserExceptionDispatcher+0xe 001fe900 7d61ea36 001fe000 001fe968 001fe918 ntdll!KiUserExceptionDispatcher+0xe 001fec9c 7d61ea36 001fe000 001fed04 001fecb4 ntdll!KiUserExceptionDispatcher+0xe 001ff038 7d61ea36 001fe000 001ff0a0 001ff050 ntdll!KiUserExceptionDispatcher+0xe 001ff3d4 7d61ea36 001ff000 001ff43c 001ff3ec ntdll!KiUserExceptionDispatcher+0xe 001ff770 7d61ea36 001ff000 001ff7d8 001ff788 ntdll!KiUserExceptionDispatcher+0xe 001ffb0c 7d61ea36 001ff000 001ffb74 001ffb24 ntdll!KiUserExceptionDispatcher+0xe 001ffea8 7d61ea36 001ff000 001fff10 001ffec0 ntdll!KiUserExceptionDispatcher+0xe 00200244 7d61ea36 00200000 002002ac 0020025c ntdll!KiUserExceptionDispatcher+0xe 002005e0 7d61ea36 00200000 00200648 002005f8 ntdll!KiUserExceptionDispatcher+0xe 0020097c 7d61ea36 00200000 002009e4 00200994 ntdll!KiUserExceptionDispatcher+0xe 00200d18 7d61ea36 00200000 00200d80 00200d30 ntdll!KiUserExceptionDispatcher+0xe 002010b4 7d61ea36 00201000 0020111c 002010cc ntdll!KiUserExceptionDispatcher+0xe 00201450 7d61ea36 00201000 002014b8 00201468 ntdll!KiUserExceptionDispatcher+0xe 002017ec 7d61ea36 00201000 00201854 00201804 ntdll!KiUserExceptionDispatcher+0xe 00201b88 7d61ea36 00201000 00201bf0 00201ba0 ntdll!KiUserExceptionDispatcher+0xe 00201f24 7d61ea36 00201000 00201f8c 00201f3c ntdll!KiUserExceptionDispatcher+0xe 002022c0 7d61ea36 00202000 00202328 002022d8 ntdll!KiUserExceptionDispatcher+0xe 0020265c 7d61ea36 00202000 002026c4 00202674 ntdll!KiUserExceptionDispatcher+0xe 002029f8 7d61ea36 00202000 00202a60 00202a10 ntdll!KiUserExceptionDispatcher+0xe 00202d94 7d61ea36 00202000 00202dfc 00202dac ntdll!KiUserExceptionDispatcher+0xe 00203130 7d61ea36 00203000 00203198 00203148 ntdll!KiUserExceptionDispatcher+0xe 002034cc 7d61ea36 00203000 00203534 002034e4 ntdll!KiUserExceptionDispatcher+0xe 00203868 7d61ea36 00203000 002038d0 00203880 ntdll!KiUserExceptionDispatcher+0xe 00203c04 7d61ea36 00203000 00203c6c 00203c1c ntdll!KiUserExceptionDispatcher+0xe 00203fa0 7d61ea36 00203000 00204008 00203fb8 ntdll!KiUserExceptionDispatcher+0xe 0020433c 7d61ea36 00204000 002043a4 00204354 ntdll!KiUserExceptionDispatcher+0xe 002046d8 7d61ea36 00204000 00204740 002046f0 ntdll!KiUserExceptionDispatcher+0xe 00204a74 7d61ea36 00204000 00204adc 00204a8c ntdll!KiUserExceptionDispatcher+0xe 00204e10 7d61ea36 00204000 00204e78 00204e28 ntdll!KiUserExceptionDispatcher+0xe 002051ac 7d61ea36 00205000 00205214 002051c4 ntdll!KiUserExceptionDispatcher+0xe 00205548 7d61ea36 00205000 002055b0 00205560 ntdll!KiUserExceptionDispatcher+0xe 002058e4 7d61ea36 00205000 0020594c 002058fc ntdll!KiUserExceptionDispatcher+0xe 00205c80 7d61ea36 00205000 00205ce8 00205c98 ntdll!KiUserExceptionDispatcher+0xe 0020601c 7d61ea36 00205000 00206084 00206034 ntdll!KiUserExceptionDispatcher+0xe 002063b8 7d61ea36 00206000 00206420 002063d0 ntdll!KiUserExceptionDispatcher+0xe 00206754 7d61ea36 00206000 002067bc 0020676c ntdll!KiUserExceptionDispatcher+0xe 00206af0 7d61ea36 00206000 00206b58 00206b08 ntdll!KiUserExceptionDispatcher+0xe 00206e8c 7d61ea36 00206000 00206ef4 00206ea4 ntdll!KiUserExceptionDispatcher+0xe 00207228 7d61ea36 00207000 00207290 00207240 ntdll!KiUserExceptionDispatcher+0xe 002075c4 7d61ea36 00207000 0020762c 002075dc ntdll!KiUserExceptionDispatcher+0xe 00207960 7d61ea36 00207000 002079c8 00207978 ntdll!KiUserExceptionDispatcher+0xe 00207cfc 7d61ea36 00207000 00207d64 00207d14 ntdll!KiUserExceptionDispatcher+0xe 00208098 7d61ea36 00208000 00208100 002080b0 ntdll!KiUserExceptionDispatcher+0xe 00208434 7d61ea36 00208000 0020849c 0020844c ntdll!KiUserExceptionDispatcher+0xe 002087d0 7d61ea36 00208000 00208838 002087e8 ntdll!KiUserExceptionDispatcher+0xe 00208b6c 7d61ea36 00208000 00208bd4 00208b84 ntdll!KiUserExceptionDispatcher+0xe 00208f08 7d61ea36 00208000 00208f70 00208f20 ntdll!KiUserExceptionDispatcher+0xe *----> Raw Stack Dump <----* 00000000001f3000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f3010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f3020 00 00 00 00 78 30 1f 00 - ff 54 63 7d 0c 4e 40 00 ....x0...Tc}.N@. 00000000001f3030 64 30 1f 00 70 30 1f 00 - 00 00 00 00 04 31 1f 00 d0..p0.......1.. 00000000001f3040 b4 ff 2e 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f3050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f3060 00 00 00 00 00 00 00 00 - 7c 30 1f 00 00 00 00 00 ........|0...... 00000000001f3070 04 31 1f 00 6f 6f 00 00 - ec 30 1f 00 85 54 63 7d .1..oo...0...Tc} 00000000001f3080 0c 4e 40 00 00 00 00 00 - 04 31 1f 00 a0 34 1f 00 .N@......1...4.. 00000000001f3090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f30a0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f30b0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f30c0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f30d0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f30e0 00 00 00 00 00 00 2f 00 - 00 00 00 00 88 34 1f 00 ....../......4.. 00000000001f30f0 36 ea 61 7d 00 30 1f 00 - 54 31 1f 00 04 31 1f 00 6.a}.0..T1...1.. 00000000001f3100 54 31 1f 00 25 00 00 c0 - 01 00 00 00 a0 34 1f 00 T1..%........4.. 00000000001f3110 8a 99 65 7d 00 00 00 00 - 00 00 00 00 00 00 00 00 ..e}............ 00000000001f3120 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000001f3130 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ *----> State Dump for Thread Id 0x6cc <----* eax=00000000 ebx=024bfef0 ecx=00000000 edx=00000000 esi=00000002 edi=00000000 eip=7d61d051 esp=024bfea8 ebp=024bff48 iopl=0 nv up ei pl nz na pe nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202 function: ntdll!ZwWaitForMultipleObjects 7d61d024 b857000000 mov eax,0x57 7d61d029 b918000000 mov ecx,0x18 7d61d02e 8d542404 lea edx,[esp+0x4] 7d61d032 64ff15c0000000 call dword ptr fs:[000000c0] 7d61d039 c20400 ret 0x4 ntdll!ZwWaitForMultipleObjects: 7d61d03c b858000000 mov eax,0x58 7d61d041 b91d000000 mov ecx,0x1d 7d61d046 8d542404 lea edx,[esp+0x4] 7d61d04a 64ff15c0000000 call dword ptr fs:[000000c0] 7d61d051 c21400 ret 0x14 ntdll!ZwSetInformationObject: 7d61d054 b859000000 mov eax,0x59 7d61d059 33c9 xor ecx,ecx 7d61d05b 8d542404 lea edx,[esp+0x4] 7d61d05f 64ff15c0000000 call dword ptr fs:[000000c0] 7d61d066 c21000 ret 0x10 7d61d069 8d4900 lea ecx,[ecx] ntdll!NtCancelIoFile: 7d61d06c b85a000000 mov eax,0x5a 7d61d071 33c9 xor ecx,ecx *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\syswow64\kernel32.dll - ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 024bff48 7d63f988 00000002 024bff70 00000000 ntdll!ZwWaitForMultipleObjects+0x15 024bffb8 7d4dfe21 00000000 00000000 00000000 ntdll!RtlSetEnvironmentStrings+0x9a8 024bffec 00000000 7d63f7e6 00000000 00000000 kernel32!FlsSetValue+0x136 *----> Raw Stack Dump <----* 00000000024bfea8 01 f5 63 7d 02 00 00 00 - f0 fe 4b 02 01 00 00 00 ..c}......K..... 00000000024bfeb8 01 00 00 00 10 ff 4b 02 - 00 10 00 00 88 1f 2c 02 ......K.......,. 00000000024bfec8 20 06 6a 7d 24 00 00 00 - 01 00 00 00 00 00 00 00 .j}$........... 00000000024bfed8 00 00 00 00 30 00 00 00 - ff ff ff ff ff ff ff ff ....0........... 00000000024bfee8 6b f4 63 7d 00 00 00 00 - 7c 00 00 00 88 00 00 00 k.c}....|....... 00000000024bfef8 08 00 00 c0 00 10 00 00 - 30 ff 4b 02 04 03 62 7d ........0.K...b} 00000000024bff08 09 03 62 7d 00 10 00 00 - 00 a2 2f 4d ff ff ff ff ..b}....../M.... 00000000024bff18 00 e0 fd 7e 20 06 6a 7d - 10 ff 4b 02 f0 fe 4b 02 ...~ .j}..K...K. 00000000024bff28 10 03 62 7d 02 00 00 00 - c0 fe 4b 02 01 03 64 7d ..b}......K...d} 00000000024bff38 dc ff 4b 02 f8 f1 61 7d - d0 f4 63 7d 00 00 00 00 ..K...a}..c}.... 00000000024bff48 b8 ff 4b 02 88 f9 63 7d - 02 00 00 00 70 ff 4b 02 ..K...c}....p.K. 00000000024bff58 00 00 00 00 e0 93 04 00 - 01 00 00 00 00 00 00 00 ................ 00000000024bff68 00 00 00 00 00 00 00 00 - 7c 00 00 00 88 00 00 00 ........|....... 00000000024bff78 00 10 00 00 88 1f 2c 02 - 00 10 00 00 90 2f 2c 02 ......,....../,. 00000000024bff88 00 26 6a 7d 00 00 00 00 - 28 00 00 00 20 26 6a 7d .&j}....(... &j} 00000000024bff98 00 10 00 00 00 26 6a 7d - 88 1f 2c 02 00 00 00 00 .....&j}..,..... 00000000024bffa8 20 26 6a 7d e5 03 00 00 - 00 10 00 00 90 2f 2c 02 &j}........./,. 00000000024bffb8 ec ff 4b 02 21 fe 4d 7d - 00 00 00 00 00 00 00 00 ..K.!.M}........ 00000000024bffc8 00 00 00 00 00 00 00 00 - 00 00 00 00 c4 ff 4b 02 ..............K. 00000000024bffd8 00 00 00 00 ff ff ff ff - c4 89 4d 7d 28 fe 4d 7d ..........M}(.M} *----> State Dump for Thread Id 0x7fc <----* eax=004052b0 ebx=02682054 ecx=00000000 edx=00000000 esi=00000000 edi=00000000 eip=7d4d1504 esp=0287fffc ebp=00000000 iopl=0 nv up ei pl nz na pe nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202 function: kernel32!BaseThreadStartThunk No prior disassembly possible kernel32!BaseThreadStartThunk: 7d4d1504 33ed xor ebp,ebp 7d4d1506 53 push ebx 7d4d1507 50 push eax 7d4d1508 6a00 push 0x0 7d4d150a e9dee80000 jmp kernel32!FlsSetValue+0x102 (7d4dfded) 7d4d150f 90 nop kernel32!BaseProcessStartThunk: 7d4d1510 33ed xor ebp,ebp kernel32!BaseThreadStartThunk: 7d4d1504 33ed xor ebp,ebp 7d4d1506 53 push ebx 7d4d1507 50 push eax 7d4d1508 6a00 push 0x0 7d4d150a e9dee80000 jmp kernel32!FlsSetValue+0x102 (7d4dfded) 7d4d150f 90 nop kernel32!BaseProcessStartThunk: 7d4d1510 33ed xor ebp,ebp 7d4d1512 50 push eax 7d4d1513 6a00 push 0x0 7d4d1515 e9e8670100 jmp kernel32!BaseProcessInitPostImport+0x65 (7d4e7d02) *----> Stack Back Trace <----* ChildEBP RetAddr Args to Child 00000000 00000000 00000000 00000000 00000000 kernel32!BaseThreadStartThunk *----> Raw Stack Dump <----* 000000000287fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288000c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800bc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800cc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800dc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800ec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 00000000028800fc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288010c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288011c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000288012c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................