Microsoft (R) DrWtsn32 Copyright (C) 1985-2001 Microsoft Corp. All rights reserved. Application exception occurred: App: C:\Program Files\Internet Explorer\iexplore.exe (pid=356) When: 12/18/2007 @ 21:35:35.894 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: FOOBAR User Name: Ant Terminal Session Id: 0 Number of Processors: 2 Processor Type: x86 Family 15 Model 43 Stepping 1 Windows Version: 5.1 Current Build: 2600 Service Pack: 2 Current Type: Multiprocessor Free Registered Organization: Unknown Registered Owner: John Doe *----> Task List <----* 0 System Process 4 System 1492 smss.exe 1560 csrss.exe 1584 winlogon.exe 1628 services.exe 1640 lsass.exe 1828 svchost.exe 1872 svchost.exe 440 svchost.exe 576 svchost.exe 744 spoolsv.exe 952 svchost.exe 972 cygrunsrv.exe 1040 nvsvc32.exe 1068 persfw.exe 1092 sshd.exe 1456 HPZipm12.exe 1712 tcpsvcs.exe 636 wdfmgr.exe 1084 vmware-authd.exe 1124 vmnat.exe 1172 vmnetdhcp.exe 252 alg.exe 304 Explorer.EXE 176 taskswitch.exe 652 CTHELPER.EXE 876 hpcmpmgr.exe 800 hphmon06.exe 1688 RUNDLL32.EXE 1984 freeshade.exe 2100 goScreen.exe 2116 MCDTray.exe 2136 Pickatag.exe 2152 PopTray.exe 2520 trillian.exe 2888 NOTEPAD.EXE 2436 seamonkey.exe 1340 SecureCRT.EXE 372 SecureCRT.exe 1328 iexplore.exe 356 iexplore.exe 3628 drwtsn32.exe *----> Module List <----* (0000000000400000 - 0000000000419000: C:\Program Files\Internet Explorer\iexplore.exe (0000000000fd0000 - 0000000000fff000: d:\winstuff\Orbitdownloader\orbitcth.dll (0000000001080000 - 000000000119a000: C:\winstuff\Spybot-S&D\SDHelper.dll (0000000001430000 - 00000000014b8000: C:\WINDOWS\system32\shdoclc.dll (00000000014c0000 - 0000000001785000: C:\WINDOWS\system32\xpsp2res.dll (0000000001fa0000 - 0000000001fbb000: C:\Program Files\Common Files\Symantec Shared\Script Blocking\scrauth.dll (0000000001fd0000 - 0000000001fee000: C:\Program Files\Common Files\Symantec Shared\Script Blocking\ScrBlock.dll (0000000002000000 - 0000000002006000: C:\WINDOWS\system32\ctagent.dll (000000000ffd0000 - 000000000fff8000: C:\WINDOWS\system32\rsaenh.dll (0000000010000000 - 000000001001a000: C:\WINDOWS\FreeShade.dll (0000000016000000 - 0000000016028000: D:\winstuff\trillian3\events.dll (0000000020000000 - 0000000020012000: C:\WINDOWS\system32\browselc.dll (000000004d4f0000 - 000000004d548000: C:\WINDOWS\system32\WINHTTP.dll (000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32\uxtheme.dll (000000005b860000 - 000000005b8b4000: C:\WINDOWS\system32\NETAPI32.dll (000000005d090000 - 000000005d12a000: C:\WINDOWS\system32\comctl32.dll (000000005edd0000 - 000000005ede7000: C:\WINDOWS\system32\olepro32.dll (00000000629c0000 - 00000000629c9000: C:\WINDOWS\system32\LPK.DLL (00000000662b0000 - 0000000066308000: C:\WINDOWS\system32\hnetcfg.dll (0000000069450000 - 0000000069466000: C:\WINDOWS\system32\faultrep.dll (000000006d7c0000 - 000000006d839000: D:\winstuff\jre1.6.0_03\bin\ssv.dll (0000000071a50000 - 0000000071a8f000: C:\WINDOWS\system32\mswsock.dll (0000000071a90000 - 0000000071a98000: C:\WINDOWS\System32\wshtcpip.dll (0000000071aa0000 - 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll (0000000071ab0000 - 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll (0000000071ad0000 - 0000000071ad9000: C:\WINDOWS\system32\wsock32.dll (00000000722b0000 - 00000000722b5000: C:\WINDOWS\system32\sensapi.dll (00000000746c0000 - 00000000746e7000: C:\WINDOWS\System32\msls31.dll (00000000746f0000 - 000000007471a000: C:\WINDOWS\System32\msimtf.dll (0000000074720000 - 000000007476b000: C:\WINDOWS\System32\MSCTF.dll (0000000074d90000 - 0000000074dfb000: C:\WINDOWS\system32\USP10.dll (00000000754d0000 - 0000000075550000: C:\WINDOWS\system32\CRYPTUI.dll (00000000755c0000 - 00000000755ee000: C:\WINDOWS\system32\msctfime.ime (0000000075c50000 - 0000000075cbf000: c:\windows\system32\jscript.dll (0000000075cf0000 - 0000000075d81000: C:\WINDOWS\system32\mlang.dll (0000000075e60000 - 0000000075e73000: C:\WINDOWS\system32\cryptnet.dll (0000000075e90000 - 0000000075f40000: C:\WINDOWS\system32\SXS.DLL (0000000075f80000 - 000000007607d000: C:\WINDOWS\system32\BROWSEUI.dll (0000000076360000 - 0000000076370000: C:\WINDOWS\system32\WINSTA.dll (0000000076380000 - 0000000076385000: C:\WINDOWS\system32\msimg32.dll (0000000076390000 - 00000000763ad000: C:\WINDOWS\system32\IMM32.DLL (00000000763b0000 - 00000000763f9000: C:\WINDOWS\system32\comdlg32.dll (0000000076600000 - 000000007661d000: C:\WINDOWS\System32\CSCDLL.dll (00000000769c0000 - 0000000076a73000: C:\WINDOWS\system32\USERENV.dll (0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll (0000000076bf0000 - 0000000076bfb000: C:\WINDOWS\System32\PSAPI.DLL (0000000076c30000 - 0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll (0000000076c90000 - 0000000076cb8000: C:\WINDOWS\system32\IMAGEHLP.dll (0000000076d60000 - 0000000076d79000: C:\WINDOWS\system32\iphlpapi.dll (0000000076e80000 - 0000000076e8e000: C:\WINDOWS\system32\rtutils.dll (0000000076e90000 - 0000000076ea2000: C:\WINDOWS\system32\rasman.dll (0000000076eb0000 - 0000000076edf000: C:\WINDOWS\system32\TAPI32.dll (0000000076ee0000 - 0000000076f1c000: C:\WINDOWS\system32\RASAPI32.DLL (0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll (0000000076f50000 - 0000000076f58000: C:\WINDOWS\system32\WTSAPI32.dll (0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll (0000000076fc0000 - 0000000076fc6000: C:\WINDOWS\system32\rasadhlp.dll (0000000076fd0000 - 000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL (0000000077050000 - 0000000077115000: C:\WINDOWS\system32\COMRes.dll (0000000077120000 - 00000000771ab000: C:\WINDOWS\system32\OLEAUT32.dll (00000000771b0000 - 000000007725a000: C:\WINDOWS\system32\WININET.dll (00000000773d0000 - 00000000774d3000: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll (0000000077920000 - 0000000077a13000: C:\WINDOWS\system32\SETUPAPI.dll (0000000077a20000 - 0000000077a74000: C:\WINDOWS\System32\cscui.dll (0000000077a80000 - 0000000077b14000: C:\WINDOWS\system32\CRYPT32.dll (0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll (0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32\appHelp.dll (0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32\VERSION.dll (0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32\msvcrt.dll (0000000077c70000 - 0000000077c93000: C:\WINDOWS\system32\msv1_0.dll (0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll (0000000077e70000 - 0000000077f02000: C:\WINDOWS\system32\RPCRT4.dll (0000000077f10000 - 0000000077f57000: C:\WINDOWS\system32\GDI32.dll (0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll (0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\system32\Secur32.dll (000000007c340000 - 000000007c396000: D:\winstuff\jre1.6.0_03\bin\MSVCR71.dll (000000007c800000 - 000000007c8f5000: C:\WINDOWS\system32\kernel32.dll (000000007c900000 - 000000007c9b0000: C:\WINDOWS\system32\ntdll.dll (000000007c9c0000 - 000000007d1d7000: C:\WINDOWS\system32\SHELL32.dll (000000007d1e0000 - 000000007d49e000: C:\WINDOWS\system32\msi.dll (000000007dc30000 - 000000007df22000: C:\WINDOWS\System32\mshtml.dll (000000007e1e0000 - 000000007e282000: C:\WINDOWS\system32\urlmon.dll (000000007e290000 - 000000007e401000: C:\WINDOWS\system32\SHDOCVW.dll (000000007e410000 - 000000007e4a0000: C:\WINDOWS\system32\USER32.dll *----> State Dump for Thread Id 0xa1c <----* eax=00000000 ebx=00000000 ecx=0294966c edx=02949794 esi=001c106c edi=00000001 eip=7e21b5ce esp=0013e6b4 ebp=0013e6c0 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\urlmon.dll - function: urlmon!GetClassURL 7e21b5b6 0c74 or al,0x74 7e21b5b8 15ff75148b adc eax,0x8b1475ff 7e21b5bd 46 inc esi 7e21b5be 34ff xor al,0xff 7e21b5c0 7510 jnz urlmon!GetClassURL+0x440a (7e21b5d2) 7e21b5c2 8b08 mov ecx,[eax] 7e21b5c4 ff750c push dword ptr [ebp+0xc] 7e21b5c7 50 push eax 7e21b5c8 ff5114 call dword ptr [ecx+0x14] 7e21b5cb 8945fc mov [ebp-0x4],eax FAULT ->7e21b5ce 399ee0120000 cmp [esi+0x12e0],ebx ds:0023:001c234c=???????? 7e21b5d4 7409 jz urlmon!GetClassURL+0x4417 (7e21b5df) 7e21b5d6 83c6fc add esi,0xfffffffc 7e21b5d9 8b06 mov eax,[esi] 7e21b5db 56 push esi 7e21b5dc ff5008 call dword ptr [eax+0x8] 7e21b5df 8b45fc mov eax,[ebp-0x4] 7e21b5e2 5e pop esi 7e21b5e3 5b pop ebx 7e21b5e4 c9 leave 7e21b5e5 c21000 ret 0x10 *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\System32\mshtml.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\USER32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\BROWSEUI.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\SHDOCVW.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Internet Explorer\iexplore.exe - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll - ChildEBP RetAddr Args to Child 0013e6c0 7e1f3fd9 001c106c 00000011 00000001 urlmon!GetClassURL+0x4406 0013e6d8 7e2150f2 0294dff8 00000011 00000001 urlmon!FindMediaType+0x14ce 0013e808 7e203342 00000000 02960a48 7e1fc236 urlmon!ObtainUserAgentString+0x93c 0013e834 7e1fcd5c 00000005 80004005 02960a48 urlmon!CreateAsyncBindCtx+0x96f6 0013e848 7e1fcd32 02960a48 001bec50 0013e868 urlmon!CreateAsyncBindCtx+0x3110 0013e858 7e1fcb8c 001b1110 001bec50 0013e880 urlmon!CreateAsyncBindCtx+0x30e6 0013e868 7e1fcb69 0294dff8 001bec50 7ded5e88 urlmon!CreateAsyncBindCtx+0x2f40 0013e880 7e1fb4df 02960a48 001bec50 0013e8a4 urlmon!CreateAsyncBindCtx+0x2f1d 0013e890 7e21301c 029497e8 001bec50 0203fca0 urlmon!CreateAsyncBindCtx+0x1893 0013e8a4 7de84e02 02949644 001bec50 0203fca0 urlmon!CoInternetSetFeatureEnabled+0x3293 0013e8b8 7dd69d68 001bec50 0013e91c 0201781c mshtml+0x254e02 0013e8dc 7de8cf1f 0013e8f4 7dcc9cfc 02012260 mshtml!DllGetClassObject+0x4bc5c 0013e8e4 7dcc9cfc 02012260 02012260 0013e928 mshtml+0x25cf1f 0013e8f4 7dc9cba1 02012260 00000000 00000000 mshtml+0x99cfc 0013e928 7dc989b7 0013eac4 7dc988d2 00000000 mshtml+0x6cba1 0013ea5c 7e418734 0025053a 00008002 00000000 mshtml+0x689b7 0013ea88 7e418816 7dc988d2 0025053a 00008002 USER32!GetDC+0x6d 0013eaf0 7e4189cd 00000000 7dc988d2 0025053a USER32!GetDC+0x14f 0013eb50 7e418a10 0013eb90 00000000 0013eb78 USER32!GetWindowLongW+0x127 0013eb60 75f9d795 0013eb90 00000000 00153d00 USER32!DispatchMessageW+0xf 0013eb78 75fa51b2 0013eb90 0013ee98 00000000 BROWSEUI!DllCanUnloadNow+0x13544 0013edd8 75fa5325 00162010 0013ee98 00162010 BROWSEUI!Ordinal138+0x79d2 0013ee6c 75fa55ed 00162010 00162010 00000000 BROWSEUI!Ordinal138+0x7b45 0013fef0 7e318cbe 00162010 00000000 00000000 BROWSEUI!Ordinal102+0x22c 0013ff10 00402372 001523ba 00000001 01eadf4c SHDOCVW!Ordinal211+0xc0ed 0013ff60 00402444 00400000 00000000 001523ba iexplore+0x2372 0013ffc0 7c816fd7 01eadf4c 00000018 7ffdf000 iexplore+0x2444 0013fff0 00000000 00402451 00000000 78746341 kernel32!RegisterWaitForInputIdle+0x49 *----> Raw Stack Dump <----* 000000000013e6b4 48 0a 96 02 00 00 00 00 - 00 00 00 00 d8 e6 13 00 H............... 000000000013e6c4 d9 3f 1f 7e 6c 10 1c 00 - 11 00 00 00 01 00 00 00 .?.~l........... 000000000013e6d4 94 00 00 00 08 e8 13 00 - f2 50 21 7e f8 df 94 02 .........P!~.... 000000000013e6e4 11 00 00 00 01 00 00 00 - 94 00 00 00 00 00 00 00 ................ 000000000013e6f4 48 0a 96 02 00 00 00 00 - 00 00 00 00 00 00 00 00 H............... 000000000013e704 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e714 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e724 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e734 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e744 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e754 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e764 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e774 00 00 00 00 74 65 78 74 - 2f 63 73 73 3b 20 63 68 ....text/css; ch 000000000013e784 61 72 73 65 74 3d 75 74 - 66 2d 38 00 00 00 00 00 arset=utf-8..... 000000000013e794 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e7a4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e7b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e7c4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e7d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000013e7e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ *----> State Dump for Thread Id 0x8e0 <----* eax=000016c4 ebx=00195950 ecx=7ffdd000 edx=00003025 esi=7fffffff edi=ffffffff eip=7c90eb94 esp=0192fad0 ebp=0192fb0c iopl=0 nv up ei ng nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000293 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll - function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\mswsock.dll - WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\WS2_32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\WININET.dll - ChildEBP RetAddr Args to Child 0192fb0c 71a55fa7 00000280 00000290 00000000 ntdll!KiFastSystemCallRet 0192fc00 71ab2e67 00000001 0192fe80 0192fc78 mswsock+0x5fa7 0192fc50 771d7108 00000001 0192fe80 0192fc78 WS2_32!select+0xa7 0192ffac 771d923b 0192ffec 7c80b683 0018ba70 WININET!GetUrlCacheEntryInfoExW+0x8a2 0192ffb4 7c80b683 0018ba70 71ab1404 0000005d WININET!InternetSetStatusCallback+0x1d7 0192ffec 00000000 771d922e 0018ba70 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 000000000192fad0 c0 e9 90 7c 33 40 a5 71 - 80 02 00 00 01 00 00 00 ...|3@.q........ 000000000192fae0 f8 fa 92 01 b0 fb 92 01 - 80 fe 92 01 a0 fb 92 01 ................ 000000000192faf0 a8 28 4e fa 00 42 c8 01 - ff ff ff ff ff ff ff 7f .(N..B.......... 000000000192fb00 50 59 19 00 00 00 00 00 - 00 00 00 00 00 fc 92 01 PY.............. 000000000192fb10 a7 5f a5 71 80 02 00 00 - 90 02 00 00 00 00 00 00 ._.q............ 000000000192fb20 04 00 00 00 7c fd 92 01 - a8 8b 79 01 78 fc 92 01 ....|.....y.x... 000000000192fb30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000192fb40 01 00 00 00 80 0f 05 fd - ff ff ff ff 00 00 00 00 ................ 000000000192fb50 00 00 00 00 00 00 00 00 - 40 fb 92 01 50 59 19 00 ........@...PY.. 000000000192fb60 33 27 00 00 1c fb 92 01 - 00 00 00 00 dc ff 92 01 3'.............. 000000000192fb70 34 fc 92 01 b8 44 a5 71 - ff ff ff ff 1c 00 00 00 4....D.q........ 000000000192fb80 50 59 19 00 bc fb 92 01 - 78 fc 92 01 7c fd 92 01 PY......x...|... 000000000192fb90 00 00 00 00 a0 fb 92 01 - 00 00 00 00 00 00 00 00 ................ 000000000192fba0 80 0f 05 fd ff ff ff ff - 01 00 00 00 00 15 1b 00 ................ 000000000192fbb0 90 02 00 00 19 00 00 00 - e4 fb 92 01 a3 2e ad 71 ...............q 000000000192fbc0 f8 03 00 00 dc fb 92 01 - 01 00 00 00 f4 fb 92 01 ................ 000000000192fbd0 f0 fb 92 01 00 00 00 00 - 00 00 00 00 01 00 00 00 ................ 000000000192fbe0 13 fc 92 01 3c a6 00 00 - 24 fb 92 01 0c 15 aa 71 ....<...$......q 000000000192fbf0 40 fc 92 01 c8 71 a7 71 - 68 2e a5 71 ff ff ff ff @....q.qh..q.... 000000000192fc00 50 fc 92 01 67 2e ab 71 - 01 00 00 00 80 fe 92 01 P...g..q........ *----> State Dump for Thread Id 0xda4 <----* eax=7c92798d ebx=00000000 ecx=7c800000 edx=00000000 esi=00138b40 edi=02080000 eip=7c90eb94 esp=01a2ff9c ebp=01a2ffb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 01a2ffb4 7c80b683 00000000 02080000 00138b40 ntdll!KiFastSystemCallRet 01a2ffec 00000000 7c92798d 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 0000000001a2ff9c 5c d8 90 7c d4 79 92 7c - 01 00 00 00 ac ff a2 01 \..|.y.|........ 0000000001a2ffac 00 00 00 00 00 00 00 80 - ec ff a2 01 83 b6 80 7c ...............| 0000000001a2ffbc 00 00 00 00 00 00 08 02 - 40 8b 13 00 00 00 00 00 ........@....... 0000000001a2ffcc 00 c0 fd 7f 00 36 7b 8a - c0 ff a2 01 20 ec 85 88 .....6{..... ... 0000000001a2ffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|.... 0000000001a2ffec 00 00 00 00 00 00 00 00 - 8d 79 92 7c 00 00 00 00 .........y.|.... 0000000001a2fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a3000c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a3001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a3002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a3003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a3004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a3005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a3006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a3007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a3008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a3009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a300ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a300bc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001a300cc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ *----> State Dump for Thread Id 0xe14 <----* eax=01b2eec8 ebx=00000000 ecx=00151378 edx=05330002 esi=7c97c380 edi=7c97c3a0 eip=7c90eb94 esp=01b2ff70 ebp=01b2ffb4 iopl=0 nv up ei ng nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000286 function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 01b2ffb4 7c80b683 00000000 00000000 00199880 ntdll!KiFastSystemCallRet 01b2ffec 00000000 7c910760 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 0000000001b2ff70 1b e3 90 7c 9d 07 91 7c - a8 02 00 00 ac ff b2 01 ...|...|........ 0000000001b2ff80 b0 ff b2 01 98 ff b2 01 - a0 ff b2 01 00 00 00 00 ................ 0000000001b2ff90 80 98 19 00 00 00 00 00 - 00 00 00 00 c0 50 19 00 .............P.. 0000000001b2ffa0 00 7c 28 e8 ff ff ff ff - a0 bc 47 b1 69 75 92 7c .|(.......G.iu.| 0000000001b2ffb0 c8 13 1b 00 ec ff b2 01 - 83 b6 80 7c 00 00 00 00 ...........|.... 0000000001b2ffc0 00 00 00 00 80 98 19 00 - 00 00 00 00 00 b0 fd 7f ................ 0000000001b2ffd0 00 16 7b 8a c0 ff b2 01 - 20 ec 85 88 ff ff ff ff ..{..... ....... 0000000001b2ffe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........ 0000000001b2fff0 00 00 00 00 60 07 91 7c - 00 00 00 00 00 00 00 00 ....`..|........ 0000000001b30000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001b30010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001b30020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001b30030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001b30040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001b30050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001b30060 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001b30070 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001b30080 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001b30090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001b300a0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ *----> State Dump for Thread Id 0x9e4 <----* eax=00000000 ebx=00000000 ecx=01c2fd6c edx=7c90eb94 esi=0018c7c8 edi=00000100 eip=7c90eb94 esp=01c2fe1c ebp=01c2ff80 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll - WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 01c2ff80 77e76c2b 01c2ffa8 77e76a4d 0018c7c8 ntdll!KiFastSystemCallRet 01c2ff88 77e76a4d 0018c7c8 00000000 0013d7dc RPCRT4!I_RpcBCacheFree+0x5e3 01c2ffa8 77e76c13 00169960 01c2ffec 7c80b683 RPCRT4!I_RpcBCacheFree+0x405 01c2ffb4 7c80b683 0019b828 00000000 0013d7dc RPCRT4!I_RpcBCacheFree+0x5cb 01c2ffec 00000000 77e76bf9 0019b828 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 0000000001c2fe1c 99 e3 90 7c 13 67 e7 77 - c4 02 00 00 70 ff c2 01 ...|.g.w....p... 0000000001c2fe2c 00 00 00 00 c0 25 1b 00 - 54 ff c2 01 00 00 00 00 .....%..T....... 0000000001c2fe3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001c2fe4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001c2fe5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001c2fe6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001c2fe7c 00 00 00 00 00 00 00 00 - 00 00 00 00 3a b2 4f 80 ............:.O. 0000000001c2fe8c a4 cb 01 b1 ae f1 4f 80 - 21 01 b5 ba 00 00 00 00 ......O.!....... 0000000001c2fe9c 00 10 e8 76 00 00 00 00 - 4b af 53 80 d0 47 fc 87 ...v....K.S..G.. 0000000001c2feac 0c cd 01 b1 00 41 6e 80 - a4 cb 01 b1 06 41 6e 80 .....An......An. 0000000001c2febc 00 00 00 00 e1 00 00 00 - 0c cd 01 b1 4b af 53 80 ............K.S. 0000000001c2fecc 00 0d db ba 01 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001c2fedc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001c2feec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001c2fefc 00 00 00 00 01 00 00 00 - 00 00 00 00 a8 fd 69 88 ..............i. 0000000001c2ff0c 00 00 00 00 fc cc 01 b1 - 00 00 00 00 d0 47 fc 87 .............G.. 0000000001c2ff1c d0 47 fc 87 00 00 00 00 - 0c cd 01 b1 00 00 00 00 .G.............. 0000000001c2ff2c 4b af 53 80 80 ff c2 01 - a9 66 e7 77 4c ff c2 01 K.S......f.wL... 0000000001c2ff3c b9 66 e7 77 ed 10 90 7c - 10 bf 19 00 28 b8 19 00 .f.w...|....(... 0000000001c2ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]...... *----> State Dump for Thread Id 0xa74 <----* eax=00000076 ebx=00007530 ecx=7c8845f8 edx=01d2fe38 esi=00000000 edi=01d2ff50 eip=7c90eb94 esp=01d2ff20 ebp=01d2ff78 iopl=0 nv up ei pl nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206 function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ole32.dll - ChildEBP RetAddr Args to Child 01d2ff78 7c802451 0000ea60 00000000 01d2ffb4 ntdll!KiFastSystemCallRet 01d2ff88 774fe31d 0000ea60 001a0148 774fe3dc kernel32!Sleep+0xf 01d2ffb4 7c80b683 001a0148 7c910945 7c91094e ole32!StringFromGUID2+0x51b 01d2ffec 00000000 774fe429 001a0148 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 0000000001d2ff20 5c d8 90 7c ed 23 80 7c - 00 00 00 00 50 ff d2 01 \..|.#.|....P... 0000000001d2ff30 40 25 80 7c f8 6d 60 77 - 30 75 00 00 14 00 00 00 @%.|.m`w0u...... 0000000001d2ff40 01 00 00 00 00 00 00 00 - 00 00 00 00 10 00 00 00 ................ 0000000001d2ff50 00 ba 3c dc ff ff ff ff - 00 d1 4e 77 50 ff d2 01 ..<.......NwP... 0000000001d2ff60 30 ff d2 01 60 38 15 00 - dc ff d2 01 a8 9a 83 7c 0...`8.........| 0000000001d2ff70 58 24 80 7c 00 00 00 00 - 88 ff d2 01 51 24 80 7c X$.|........Q$.| 0000000001d2ff80 60 ea 00 00 00 00 00 00 - b4 ff d2 01 1d e3 4f 77 `.............Ow 0000000001d2ff90 60 ea 00 00 48 01 1a 00 - dc e3 4f 77 00 00 00 00 `...H.....Ow.... 0000000001d2ffa0 45 09 91 7c 48 01 1a 00 - 00 00 4e 77 44 e4 4f 77 E..|H.....NwD.Ow 0000000001d2ffb0 4e 09 91 7c ec ff d2 01 - 83 b6 80 7c 48 01 1a 00 N..|.......|H... 0000000001d2ffc0 45 09 91 7c 4e 09 91 7c - 48 01 1a 00 00 90 fd 7f E..|N..|H....... 0000000001d2ffd0 00 36 7b 8a c0 ff d2 01 - 68 6d a9 88 ff ff ff ff .6{.....hm...... 0000000001d2ffe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........ 0000000001d2fff0 00 00 00 00 29 e4 4f 77 - 48 01 1a 00 00 00 00 00 ....).OwH....... 0000000001d30000 c8 00 00 00 4e 01 00 00 - ff ee ff ee 02 10 00 00 ....N........... 0000000001d30010 00 00 00 00 00 fe 00 00 - 00 00 10 00 00 20 00 00 ............. .. 0000000001d30020 00 02 00 00 00 20 00 00 - 12 14 00 00 ff ef fd 7f ..... .......... 0000000001d30030 0f 00 08 06 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001d30040 00 00 00 00 98 05 d3 01 - 0f 00 00 00 f8 ff ff ff ................ 0000000001d30050 50 00 d3 01 50 00 d3 01 - 40 06 d3 01 00 00 00 00 P...P...@....... *----> State Dump for Thread Id 0xe98 <----* eax=77e76bf9 ebx=00000000 ecx=0000000c edx=0019f3d0 esi=0018c7c8 edi=00000100 eip=7c90eb94 esp=01e3fe1c ebp=01e3ff80 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 01e3ff80 77e76c2b 01e3ffa8 77e76a4d 0018c7c8 ntdll!KiFastSystemCallRet 01e3ff88 77e76a4d 0018c7c8 00f00300 00000000 RPCRT4!I_RpcBCacheFree+0x5e3 01e3ffa8 77e76c13 00169960 01e3ffec 7c80b683 RPCRT4!I_RpcBCacheFree+0x405 01e3ffb4 7c80b683 00191bd8 00f00300 00000000 RPCRT4!I_RpcBCacheFree+0x5cb 01e3ffec 00000000 77e76bf9 00191bd8 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 0000000001e3fe1c 99 e3 90 7c 13 67 e7 77 - c4 02 00 00 70 ff e3 01 ...|.g.w....p... 0000000001e3fe2c 00 00 00 00 f8 27 1b 00 - 54 ff e3 01 00 00 00 00 .....'..T....... 0000000001e3fe3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001e3fe4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001e3fe5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001e3fe6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001e3fe7c 00 00 00 00 00 00 00 00 - 00 00 00 00 06 02 00 00 ................ 0000000001e3fe8c d0 f1 4f 80 36 fe 53 80 - 60 fb 6b 8a 28 ac e8 b0 ..O.6.S.`.k.(... 0000000001e3fe9c 00 41 6e 80 90 ab e8 b0 - 06 41 6e 80 1c 00 00 00 .An......An..... 0000000001e3feac e1 00 00 00 28 ac e8 b0 - 36 fe 53 80 00 0d db ba ....(...6.S..... 0000000001e3febc 81 28 55 80 ff ff ff ff - 02 02 00 00 e7 4d 54 80 .(U..........MT. 0000000001e3fecc d0 ab e8 b0 80 25 50 80 - 60 fb 6b 8a 63 4f 6e 80 .....%P.`.k.cOn. 0000000001e3fedc 00 00 00 00 88 ac e8 b0 - 06 41 6e 80 00 00 00 00 .........An..... 0000000001e3feec 81 28 55 80 38 f5 df ff - 38 05 b5 ba 60 fb 6b 8a .(U.8...8...`.k. 0000000001e3fefc 20 20 01 88 40 f5 df ff - ec 4e 54 80 ff ff ff ff ..@....NT..... 0000000001e3ff0c 46 02 00 00 c6 4c 54 80 - 28 ac e8 b0 00 00 00 00 F....LT.(....... 0000000001e3ff1c 60 fb 6b 8a fc fc 6b 8a - 84 b1 4f 80 cc fc 6b 8a `.k...k...O...k. 0000000001e3ff2c 60 fb 6b 8a 80 ff e3 01 - a9 66 e7 77 4c ff e3 01 `.k......f.wL... 0000000001e3ff3c b9 66 e7 77 ed 10 90 7c - b8 a8 17 00 d8 1b 19 00 .f.w...|........ 0000000001e3ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]...... *----> State Dump for Thread Id 0x288 <----* eax=71a5d5af ebx=c0000000 ecx=7c913288 edx=ffffffff esi=00000000 edi=71a87558 eip=7c90eb94 esp=01f5ff7c ebp=01f5ffb4 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202 function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 01f5ffb4 7c80b683 71a5d8ec 01b2f910 7c90ee18 ntdll!KiFastSystemCallRet 01f5ffec 00000000 71a5d5af 001af960 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 0000000001f5ff7c 1b e3 90 7c 09 d6 a5 71 - fc 03 00 00 bc ff f5 01 ...|...q........ 0000000001f5ff8c b0 ff f5 01 a4 ff f5 01 - 50 d6 a5 71 10 f9 b2 01 ........P..q.... 0000000001f5ff9c 18 ee 90 7c 60 f9 1a 00 - 00 00 00 00 00 00 00 00 ...|`........... 0000000001f5ffac 00 00 a5 71 d0 27 7d 01 - ec ff f5 01 83 b6 80 7c ...q.'}........| 0000000001f5ffbc ec d8 a5 71 10 f9 b2 01 - 18 ee 90 7c 60 f9 1a 00 ...q.......|`... 0000000001f5ffcc 00 70 fd 7f 00 36 7b 8a - c0 ff f5 01 10 88 6f 88 .p...6{.......o. 0000000001f5ffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|.... 0000000001f5ffec 00 00 00 00 00 00 00 00 - af d5 a5 71 60 f9 1a 00 ...........q`... 0000000001f5fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f6000c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f6001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f6002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f6003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f6004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f6005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f6006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f6007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f6008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f6009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000001f600ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ *----> State Dump for Thread Id 0x970 <----* eax=7ffd6000 ebx=7c901005 ecx=00000001 edx=7ded5fd8 esi=00000458 edi=00000000 eip=7c90eb94 esp=0250ff14 ebp=0250ff78 iopl=0 nv up ei ng nz ac pe cy cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000293 function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0250ff78 7c802532 00000458 000927c0 00000000 ntdll!KiFastSystemCallRet 0250ff8c 7dcc9ba4 00000458 000927c0 7e1ed6d0 kernel32!WaitForSingleObject+0x12 0250ffb4 7c80b683 020135e0 7e1ed6d0 7e1ed69c mshtml+0x99ba4 0250ffec 00000000 7dd17263 020135e0 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 000000000250ff14 c0 e9 90 7c cb 25 80 7c - 58 04 00 00 00 00 00 00 ...|.%.|X....... 000000000250ff24 48 ff 50 02 00 00 00 00 - e0 35 01 02 05 10 90 7c H.P......5.....| 000000000250ff34 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000250ff44 10 00 00 00 00 44 5f 9a - fe ff ff ff 00 f0 fd 7f .....D_......... 000000000250ff54 00 60 fd 7f 48 ff 50 02 - 00 00 00 00 28 ff 50 02 .`..H.P.....(.P. 000000000250ff64 6c ff 50 02 dc ff 50 02 - a8 9a 83 7c f8 25 80 7c l.P...P....|.%.| 000000000250ff74 00 00 00 00 8c ff 50 02 - 32 25 80 7c 58 04 00 00 ......P.2%.|X... 000000000250ff84 c0 27 09 00 00 00 00 00 - b4 ff 50 02 a4 9b cc 7d .'........P....} 000000000250ff94 58 04 00 00 c0 27 09 00 - d0 d6 1e 7e e0 35 01 02 X....'.....~.5.. 000000000250ffa4 e0 35 01 02 9e 72 d1 7d - 9c d6 1e 7e 70 72 d1 7d .5...r.}...~pr.} 000000000250ffb4 ec ff 50 02 83 b6 80 7c - e0 35 01 02 d0 d6 1e 7e ..P....|.5.....~ 000000000250ffc4 9c d6 1e 7e e0 35 01 02 - 00 60 fd 7f 00 16 7b 8a ...~.5...`....{. 000000000250ffd4 c0 ff 50 02 20 ee fe 87 - ff ff ff ff a8 9a 83 7c ..P. ..........| 000000000250ffe4 90 b6 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00 ...|............ 000000000250fff4 63 72 d1 7d e0 35 01 02 - 00 00 00 00 00 00 00 00 cr.}.5.......... 0000000002510004 00 00 00 00 ff ff ff ff - 70 07 00 00 0c 10 51 02 ........p.....Q. 0000000002510014 14 23 fc 01 00 00 00 00 - 00 00 00 00 00 00 00 00 .#.............. 0000000002510024 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000002510034 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000002510044 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ *----> State Dump for Thread Id 0x784 <----* eax=77a8964a ebx=0280ff18 ecx=0013c9cc edx=00153670 esi=00000000 edi=7ffdf000 eip=7c90eb94 esp=0280fef0 ebp=0280ff8c iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\CRYPT32.dll - WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0280ff8c 77a89675 00000001 001c0fd8 00000000 ntdll!KiFastSystemCallRet 0280ffb4 7c80b683 00000001 00150000 7c916433 CRYPT32!CertEnumSystemStoreLocation+0x133f 0280ffec 00000000 77a8964a 001c0fd0 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 000000000280fef0 ab e9 90 7c e2 94 80 7c - 01 00 00 00 18 ff 80 02 ...|...|........ 000000000280ff00 01 00 00 00 00 00 00 00 - 4c ff 80 02 00 00 00 00 ........L....... 000000000280ff10 d0 0f 1c 00 d8 0f 1c 00 - 94 04 00 00 b0 46 fe 87 .............F.. 000000000280ff20 40 46 fe 87 48 b0 4f 80 - ac 47 fe 87 40 46 fe 87 @F..H.O..G..@F.. 000000000280ff30 74 46 fe 87 01 00 00 00 - 14 00 00 00 01 00 00 00 tF.............. 000000000280ff40 00 00 00 00 00 00 00 00 - 10 00 00 00 80 2e 0f f7 ................ 000000000280ff50 ff ff ff ff 05 00 00 00 - 00 f0 fd 7f 00 50 fd 7f .............P.. 000000000280ff60 00 00 00 00 4c ff 80 02 - 18 ff 80 02 74 46 fe 87 ....L.......tF.. 000000000280ff70 01 00 00 00 0c ff 80 02 - 40 46 fe 87 dc ff 80 02 ........@F...... 000000000280ff80 a8 9a 83 7c d8 95 80 7c - 00 00 00 00 b4 ff 80 02 ...|...|........ 000000000280ff90 75 96 a8 77 01 00 00 00 - d8 0f 1c 00 00 00 00 00 u..w............ 000000000280ffa0 98 3a 00 00 00 00 00 00 - 00 00 15 00 33 64 91 7c .:..........3d.| 000000000280ffb0 d0 0f 1c 00 ec ff 80 02 - 83 b6 80 7c 01 00 00 00 ...........|.... 000000000280ffc0 00 00 15 00 33 64 91 7c - d0 0f 1c 00 00 50 fd 7f ....3d.|.....P.. 000000000280ffd0 00 36 7b 8a c0 ff 80 02 - 28 f7 5b 88 ff ff ff ff .6{.....(.[..... 000000000280ffe0 a8 9a 83 7c 90 b6 80 7c - 00 00 00 00 00 00 00 00 ...|...|........ 000000000280fff0 00 00 00 00 4a 96 a8 77 - d0 0f 1c 00 00 00 00 00 ....J..w........ 0000000002810000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000002810010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000002810020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ *----> State Dump for Thread Id 0x614 <----* eax=000000c0 ebx=00000000 ecx=00000000 edx=00000000 esi=00000000 edi=00000001 eip=7c90eb94 esp=0290fcec ebp=0290ffb4 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 0290ffb4 7c80b683 00000000 00747470 00000000 ntdll!KiFastSystemCallRet 0290ffec 00000000 7c929fae 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 000000000290fcec ab e9 90 7c d5 a0 92 7c - 14 00 00 00 30 fd 90 02 ...|...|....0... 000000000290fcfc 01 00 00 00 01 00 00 00 - 00 00 00 00 70 74 74 00 ............ptt. 000000000290fd0c 00 00 00 00 00 00 00 00 - 08 e5 97 7c 08 e5 97 7c ...........|...| 000000000290fd1c 9c 04 00 00 14 06 00 00 - 14 00 00 00 14 00 00 00 ................ 000000000290fd2c 13 00 00 00 98 04 00 00 - 3c 00 00 00 d8 04 00 00 ........<....... 000000000290fd3c e4 04 00 00 00 05 00 00 - 0c 05 00 00 18 05 00 00 ................ 000000000290fd4c 38 05 00 00 40 05 00 00 - 48 05 00 00 54 05 00 00 8...@...H...T... 000000000290fd5c 5c 05 00 00 68 05 00 00 - 74 05 00 00 80 05 00 00 \...h...t....... 000000000290fd6c 88 05 00 00 94 05 00 00 - a0 05 00 00 ac 05 00 00 ................ 000000000290fd7c b4 05 00 00 d0 05 00 00 - dc 05 00 00 e8 05 00 00 ................ 000000000290fd8c f4 05 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000290fd9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000290fdac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000290fdbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000290fdcc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000290fddc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000290fdec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000290fdfc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000290fe0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 000000000290fe1c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ *----> State Dump for Thread Id 0x9b8 <----* eax=7ffd2004 ebx=02b0fef4 ecx=00000044 edx=00000044 esi=00000000 edi=7ffdf000 eip=7c90eb94 esp=02b0fecc ebp=02b0ff68 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* WARNING: Stack unwind information not available. Following frames may be wrong. *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\USERENV.dll - ChildEBP RetAddr Args to Child 02b0ff68 7c80a075 00000003 76a60310 00000000 ntdll!KiFastSystemCallRet 02b0ff84 769c888d 00000003 76a60310 00000000 kernel32!WaitForMultipleObjects+0x18 02b0ffb4 7c80b683 00000000 00000000 00000000 USERENV!UnregisterGPNotification+0x15c 02b0ffec 00000000 769c8831 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 0000000002b0fecc ab e9 90 7c e2 94 80 7c - 03 00 00 00 f4 fe b0 02 ...|...|........ 0000000002b0fedc 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000002b0feec b8 03 a6 76 47 9b 80 7c - e8 04 00 00 ec 04 00 00 ...vG..|........ 0000000002b0fefc f0 04 00 00 5c fe b0 02 - 6c ff b0 02 6c ff b0 02 ....\...l...l... 0000000002b0ff0c 18 ee 90 7c 70 05 91 7c - 14 00 00 00 01 00 00 00 ...|p..|........ 0000000002b0ff1c 00 00 00 00 00 00 00 00 - 10 00 00 00 f6 1b 80 7c ...............| 0000000002b0ff2c 00 00 00 00 00 00 00 00 - 00 f0 fd 7f 00 f0 fa 7f ................ 0000000002b0ff3c 70 36 15 00 00 00 00 00 - f4 fe b0 02 00 00 00 00 p6.............. 0000000002b0ff4c 03 00 00 00 e8 fe b0 02 - 00 00 00 00 dc ff b0 02 ................ 0000000002b0ff5c a8 9a 83 7c d8 95 80 7c - 00 00 00 00 84 ff b0 02 ...|...|........ 0000000002b0ff6c 75 a0 80 7c 03 00 00 00 - 10 03 a6 76 00 00 00 00 u..|.......v.... 0000000002b0ff7c ff ff ff ff 00 00 00 00 - b4 ff b0 02 8d 88 9c 76 ...............v 0000000002b0ff8c 03 00 00 00 10 03 a6 76 - 00 00 00 00 ff ff ff ff .......v........ 0000000002b0ff9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 9c 76 ...............v 0000000002b0ffac 03 00 00 00 00 00 00 00 - ec ff b0 02 83 b6 80 7c ...............| 0000000002b0ffbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0000000002b0ffcc 00 f0 fa 7f 00 36 7b 8a - c0 ff b0 02 a0 ed 89 88 .....6{......... 0000000002b0ffdc ff ff ff ff a8 9a 83 7c - 90 b6 80 7c 00 00 00 00 .......|...|.... 0000000002b0ffec 00 00 00 00 00 00 00 00 - 31 88 9c 76 00 00 00 00 ........1..v.... 0000000002b0fffc 00 00 00 00 ff ff ff ff - ff ff ff ff 00 00 00 00 ................ *----> State Dump for Thread Id 0xfb8 <----* eax=77df9981 ebx=02e6fed0 ecx=00000006 edx=00000000 esi=00000000 edi=7ffdf000 eip=7c90eb94 esp=02e6fea8 ebp=02e6ff44 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 function: ntdll!KiFastSystemCallRet 7c90eb89 90 nop 7c90eb8a 90 nop ntdll!KiFastSystemCall: 7c90eb8b 8bd4 mov edx,esp 7c90eb8d 0f34 sysenter 7c90eb8f 90 nop 7c90eb90 90 nop 7c90eb91 90 nop 7c90eb92 90 nop 7c90eb93 90 nop ntdll!KiFastSystemCallRet: 7c90eb94 c3 ret 7c90eb95 8da42400000000 lea esp,[esp] 7c90eb9c 8d642400 lea esp,[esp] 7c90eba0 90 nop 7c90eba1 90 nop 7c90eba2 90 nop 7c90eba3 90 nop 7c90eba4 90 nop ntdll!KiIntSystemCall: 7c90eba5 8d542408 lea edx,[esp+0x8] 7c90eba9 cd2e int 2e *----> Stack Back Trace <----* *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ADVAPI32.dll - WARNING: Stack unwind information not available. Following frames may be wrong. ChildEBP RetAddr Args to Child 02e6ff44 77df9b26 00000002 02e6ff6c 00000000 ntdll!KiFastSystemCallRet 02e6ffb4 7c80b683 00000000 7c9140bb 00000000 ADVAPI32!RegDeleteKeyW+0x2a2 02e6ffec 00000000 77df9981 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4 *----> Raw Stack Dump <----* 0000000002e6fea8 ab e9 90 7c e2 94 80 7c - 02 00 00 00 d0 fe e6 02 ...|...|........ 0000000002e6feb8 01 00 00 00 01 00 00 00 - 04 ff e6 02 b0 30 c7 02 .............0.. 0000000002e6fec8 40 65 e4 77 00 10 00 00 - d4 05 00 00 e0 05 00 00 @e.w............ 0000000002e6fed8 c0 fe e6 02 00 00 00 00 - dc ff e6 02 a8 9a 83 7c ...............| 0000000002e6fee8 b0 0a 81 7c 00 10 00 00 - 14 00 00 00 01 00 00 00 ...|............ 0000000002e6fef8 00 00 00 00 00 00 00 00 - 10 00 00 00 00 a2 2f 4d ............../M 0000000002e6ff08 ff ff ff ff 00 10 00 00 - 00 f0 fd 7f 00 e0 fa 7f ................ 0000000002e6ff18 dc ff e6 02 04 ff e6 02 - d0 fe e6 02 06 00 00 00 ................ 0000000002e6ff28 02 00 00 00 c4 fe e6 02 - 06 00 00 00 dc ff e6 02 ................ 0000000002e6ff38 a8 9a 83 7c d8 95 80 7c - 00 00 00 00 b4 ff e6 02 ...|...|........ 0000000002e6ff48 26 9b df 77 02 00 00 00 - 6c ff e6 02 00 00 00 00 &..w....l....... 0000000002e6ff58 e0 93 04 00 01 00 00 00 - bb 40 91 7c 00 00 00 00 .........@.|.... 0000000002e6ff68 00 00 00 00 d4 05 00 00 - e0 05 00 00 00 10 00 00 ................ 0000000002e6ff78 b0 30 c7 02 00 00 00 00 - 00 10 00 00 b8 40 c7 02 .0...........@.. 0000000002e6ff88 a0 66 e4 77 20 00 00 00 - 80 66 e4 77 00 10 00 00 .f.w ....f.w.... 0000000002e6ff98 00 00 00 00 a0 66 e4 77 - b0 30 c7 02 80 66 e4 77 .....f.w.0...f.w 0000000002e6ffa8 e5 03 00 00 00 10 00 00 - b8 40 c7 02 ec ff e6 02 .........@...... 0000000002e6ffb8 83 b6 80 7c 00 00 00 00 - bb 40 91 7c 00 00 00 00 ...|.....@.|.... 0000000002e6ffc8 00 00 00 00 00 e0 fa 7f - 00 36 7b 8a c0 ff e6 02 .........6{..... 0000000002e6ffd8 98 67 6d 88 ff ff ff ff - a8 9a 83 7c 90 b6 80 7c .gm........|...| *----> Symbol Table <----* C:\WINDOWS\system32\urlmon.dll 7e1e27c0 urlmon!CoInternetIsFeatureEnabled 7e1e2eec urlmon!DllCanUnloadNow 7e1e30e7 urlmon!CoInternetCreateSecurityManager 7e1e456a urlmon!CoInternetGetSecurityUrl 7e1e604a urlmon!DllGetClassObject 7e1e9be7 urlmon!CoInternetCreateZoneManager 7e1ebb5e urlmon!CoInternetIsFeatureEnabledForUrl 7e1ecb90 urlmon!CoInternetGetSession 7e1eceac urlmon!CoInternetParseUrl 7e1ed381 urlmon!CreateURLMoniker 7e1ed39f urlmon!CreateURLMonikerEx 7e1ed7b7 urlmon!ReleaseBindInfo 7e1f07f0 urlmon!CopyBindInfo 7e1f08b3 urlmon!CopyStgMedium 7e1f2b0b urlmon!FindMediaType 7e1f49c0 urlmon!UrlMkGetSessionOption 7e1f5338 urlmon!IsAsyncMoniker 7e1f5a72 urlmon!RevokeBindStatusCallback 7e1f5b83 urlmon!RegisterBindStatusCallback 7e1f5bfa urlmon!RegisterFormatEnumerator 7e1f5d6c urlmon!CreateAsyncBindCtxEx 7e1f5e03 urlmon!CoInternetQueryInfo 7e1f646d urlmon!CoInternetCombineUrl 7e1f6bc7 urlmon!CompatFlagsFromClsid 7e1f7670 urlmon!FaultInIEFeature 7e1f8301 urlmon!FindMediaTypeClass 7e1f837b urlmon!CreateFormatEnumerator 7e1f9632 urlmon!IsValidURL 7e1f9c4c urlmon!CreateAsyncBindCtx 7e20cd92 urlmon!RegisterMediaTypes 7e20cdea urlmon!RegisterMediaTypeClass 7e20ce87 urlmon!RevokeFormatEnumerator 7e20ceac urlmon!MkParseDisplayNameEx 7e20d047 urlmon!BindAsyncMoniker 7e20d269 urlmon!DllRegisterServer 7e20d405 urlmon!DllUnregisterServer 7e20d579 urlmon!DllRegisterServerEx 7e20d584 urlmon!DllInstall 7e20d594 urlmon!UrlMkBuildVersion 7e20d696 urlmon!InstallFlash 7e20ec47 urlmon!UrlMkSetSessionOption 7e20edc6 urlmon!URLDownloadW 7e20ef68 urlmon!FindMimeFromData 7e20ef97 urlmon!CoInternetCompareUrl 7e20f66f urlmon!GetClassFileOrMime 7e20f879 urlmon!URLDownloadA 7e20fc2b urlmon!CoInternetIsFeatureZoneElevationEnabled 7e20fd89 urlmon!CoInternetSetFeatureEnabled 7e214358 urlmon!CompareSecurityIds 7e2147b6 urlmon!ObtainUserAgentString 7e2171c8 urlmon!GetClassURL 7e21d1eb urlmon!CoInstall 7e21e479 urlmon!AsyncInstallDistributionUnit 7e21e571 urlmon!PrivateCoInstall 7e21e653 urlmon!CoGetClassObjectFromURL 7e21e9f5 urlmon!AsyncGetClassBits 7e21ef05 urlmon!CDLGetLongPathNameA 7e21ef30 urlmon!CDLGetLongPathNameW 7e21f525 urlmon!Extract 7e21fcc9 urlmon!IsJITInProgress 7e21fd3f urlmon!GetComponentIDFromCLSSPEC 7e22448a urlmon!GetSoftwareUpdateInfo 7e2244ee urlmon!SetSoftwareUpdateAdvertisementState 7e2359d8 urlmon!CoInternetGetProtocolFlags 7e239cb8 urlmon!HlinkGoBack 7e239d36 urlmon!HlinkGoForward 7e23a07d urlmon!HlinkSimpleNavigateToMoniker 7e23a5d5 urlmon!HlinkNavigateMoniker 7e23a5f6 urlmon!HlinkSimpleNavigateToString 7e23a659 urlmon!HlinkNavigateString 7e23b730 urlmon!URLOpenPullStreamW 7e23b77a urlmon!URLDownloadToFileW 7e23b7e0 urlmon!URLDownloadToCacheFileW 7e23b989 urlmon!URLOpenBlockingStreamW 7e23ba16 urlmon!URLOpenStreamW 7e23ba60 urlmon!URLOpenPullStreamA 7e23baf7 urlmon!URLDownloadToFileA 7e23bbfd urlmon!URLDownloadToCacheFileA 7e23bd41 urlmon!URLOpenBlockingStreamA 7e23bde7 urlmon!URLOpenStreamA 7e23be7e urlmon!IsLoggingEnabledA 7e23bee6 urlmon!WriteHitLogging 7e23bf9f urlmon!IsLoggingEnabledW 7e23ea27 urlmon!CoInternetFeatureSettingsChanged 7e23f629 urlmon!Ordinal100 7e23fdc4 urlmon!ZonesReInit 7e23fe15 urlmon!GetMarkOfTheWeb