windbg.txt

jmaki (James Maki), 02/07/2009 04:23 am

Download (19.9 kB)

 
1

    
2
Microsoft (R) Windows Debugger Version 6.10.0003.233 X86
3
Copyright (c) Microsoft Corporation. All rights reserved.
4

    
5
*** wait with pending attach
6
Symbol search path is: C:\Windows\Symbols\DLL;C:\Windows\Symbols\CAB
7
Executable search path is: 
8
ModLoad: 00400000 00405000   c:\ruby\bin\ruby.exe
9
ModLoad: 77b10000 77c37000   C:\Windows\system32\ntdll.dll
10
ModLoad: 77960000 77a3b000   C:\Windows\system32\kernel32.dll
11
ModLoad: 10000000 100e8000   c:\ruby\bin\msvcrt-ruby18.dll
12
ModLoad: 776e0000 7777d000   C:\Windows\system32\USER32.dll
13
ModLoad: 76b10000 76b5b000   C:\Windows\system32\GDI32.dll
14
ModLoad: 76800000 768c6000   C:\Windows\system32\ADVAPI32.dll
15
ModLoad: 77a40000 77b02000   C:\Windows\system32\RPCRT4.dll
16
ModLoad: 768d0000 768fd000   C:\Windows\system32\WS2_32.dll
17
ModLoad: 76520000 765ca000   C:\Windows\system32\msvcrt.dll
18
ModLoad: 77cd0000 77cd6000   C:\Windows\system32\NSI.dll
19
ModLoad: 77670000 7768e000   C:\Windows\system32\IMM32.DLL
20
ModLoad: 765d0000 76698000   C:\Windows\system32\MSCTF.dll
21
ModLoad: 77d60000 77d69000   C:\Windows\system32\LPK.DLL
22
ModLoad: 778e0000 7795d000   C:\Windows\system32\USP10.dll
23
ModLoad: 759e0000 75a1b000   C:\Windows\system32\mswsock.dll
24
ModLoad: 00120000 00126000   c:\ruby\lib\ruby\1.8\i386-mswin32\thread.so
25
ModLoad: 00140000 0014b000   c:\ruby\lib\ruby\1.8\i386-mswin32\socket.so
26
ModLoad: 00150000 00157000   c:\ruby\lib\ruby\1.8\i386-mswin32\stringio.so
27
ModLoad: 00180000 0019f000   c:\ruby\lib\ruby\1.8\i386-mswin32\syck.so
28
ModLoad: 00160000 0016a000   c:\ruby\lib\ruby\site_ruby\1.8\i386-msvcrt\zlib.so
29
ModLoad: 001a0000 001b3000   c:\ruby\bin\zlib1.dll
30
ModLoad: 001c0000 001c6000   c:\ruby\lib\ruby\1.8\i386-mswin32\digest.so
31
ModLoad: 003e0000 003e6000   c:\ruby\lib\ruby\1.8\i386-mswin32\digest\sha2.so
32
ModLoad: 03920000 0394c000   c:\ruby\lib\ruby\1.8\i386-mswin32\openssl.so
33
ModLoad: 03950000 03981000   c:\ruby\bin\SSLEAY32.dll
34
ModLoad: 04200000 0430a000   c:\ruby\bin\LIBEAY32.dll
35
ModLoad: 73340000 73347000   C:\Windows\system32\WSOCK32.dll
36
ModLoad: 003f0000 003f5000   c:\ruby\lib\ruby\1.8\i386-mswin32\fcntl.so
37
ModLoad: 037b0000 037cb000   c:\ruby\lib\ruby\site_ruby\1.8\i386-msvcrt\swin.so
38
ModLoad: 77ce0000 77d53000   C:\Windows\system32\comdlg32.dll
39
ModLoad: 766d0000 76728000   C:\Windows\system32\SHLWAPI.dll
40
ModLoad: 73be0000 73c65000   C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll
41
ModLoad: 76b60000 77670000   C:\Windows\system32\SHELL32.dll
42
ModLoad: 71d30000 71d72000   C:\Windows\system32\WINSPOOL.DRV
43
ModLoad: 77790000 778d4000   C:\Windows\system32\ole32.dll
44
ModLoad: 73fb0000 73fc8000   C:\Windows\system32\OLEPRO32.DLL
45
ModLoad: 76a30000 76abd000   C:\Windows\system32\OLEAUT32.dll
46
ModLoad: 750f0000 7528e000   C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll
47
ModLoad: 753f0000 7542f000   C:\Windows\system32\uxtheme.dll
48
ModLoad: 039d0000 039d5000   c:\ruby\lib\ruby\1.8\i386-mswin32\Win32API.so
49
ModLoad: 74a00000 74a0f000   C:\Windows\system32\NLAapi.dll
50
ModLoad: 75ca0000 75cb9000   C:\Windows\system32\IPHLPAPI.DLL
51
ModLoad: 75c60000 75c95000   C:\Windows\system32\dhcpcsvc.DLL
52
ModLoad: 76190000 761bc000   C:\Windows\system32\DNSAPI.dll
53
ModLoad: 76220000 76234000   C:\Windows\system32\Secur32.dll
54
ModLoad: 76160000 76167000   C:\Windows\system32\WINNSI.DLL
55
ModLoad: 75c30000 75c51000   C:\Windows\system32\dhcpcsvc6.DLL
56
ModLoad: 726d0000 726df000   C:\Windows\system32\napinsp.dll
57
ModLoad: 723a0000 723b2000   C:\Windows\system32\pnrpnsp.dll
58
ModLoad: 726a0000 726a8000   C:\Windows\System32\winrnr.dll
59
ModLoad: 76ac0000 76b0a000   C:\Windows\system32\WLDAP32.dll
60
ModLoad: 76380000 76387000   C:\Windows\system32\PSAPI.DLL
61
ModLoad: 727a0000 727a6000   C:\Windows\system32\rasadhlp.dll
62
ModLoad: 755c0000 755c5000   C:\Windows\System32\wshtcpip.dll
63
(d18.db0): Break instruction exception - code 80000003 (first chance)
64
eax=7ffdd000 ebx=00000000 ecx=00000000 edx=77b9d094 esi=00000000 edi=00000000
65
eip=77b57dfe esp=090eff5c ebp=090eff88 iopl=0         nv up ei pl zr na pe nc
66
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
67
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Windows\system32\ntdll.dll - 
68
ntdll!DbgBreakPoint:
69
77b57dfe cc              int     3
70
0:002> g
71
Invalid parameter passed to C runtime function.
72
Invalid parameter passed to C runtime function.
73
Invalid parameter passed to C runtime function.
74
Invalid parameter passed to C runtime function.
75
Invalid parameter passed to C runtime function.
76
Invalid parameter passed to C runtime function.
77
Invalid parameter passed to C runtime function.
78
Invalid parameter passed to C runtime function.
79
Invalid parameter passed to C runtime function.
80
Invalid parameter passed to C runtime function.
81
Invalid parameter passed to C runtime function.
82
Invalid parameter passed to C runtime function.
83
Invalid parameter passed to C runtime function.
84
Invalid parameter passed to C runtime function.
85
Invalid parameter passed to C runtime function.
86
Invalid parameter passed to C runtime function.
87
Invalid parameter passed to C runtime function.
88
Invalid parameter passed to C runtime function.
89
Invalid parameter passed to C runtime function.
90
Invalid parameter passed to C runtime function.
91
Invalid parameter passed to C runtime function.
92
Invalid parameter passed to C runtime function.
93
Invalid parameter passed to C runtime function.
94
Invalid parameter passed to C runtime function.
95
Invalid parameter passed to C runtime function.
96
Invalid parameter passed to C runtime function.
97
Invalid parameter passed to C runtime function.
98
Invalid parameter passed to C runtime function.
99
Invalid parameter passed to C runtime function.
100
Invalid parameter passed to C runtime function.
101
Invalid parameter passed to C runtime function.
102
Invalid parameter passed to C runtime function.
103
Invalid parameter passed to C runtime function.
104
Invalid parameter passed to C runtime function.
105
Invalid parameter passed to C runtime function.
106
Invalid parameter passed to C runtime function.
107
Invalid parameter passed to C runtime function.
108
Invalid parameter passed to C runtime function.
109
Invalid parameter passed to C runtime function.
110
Invalid parameter passed to C runtime function.
111
Invalid parameter passed to C runtime function.
112
Invalid parameter passed to C runtime function.
113
Invalid parameter passed to C runtime function.
114
Invalid parameter passed to C runtime function.
115
Invalid parameter passed to C runtime function.
116
Invalid parameter passed to C runtime function.
117
Invalid parameter passed to C runtime function.
118
Invalid parameter passed to C runtime function.
119
Invalid parameter passed to C runtime function.
120
Invalid parameter passed to C runtime function.
121
Invalid parameter passed to C runtime function.
122
Invalid parameter passed to C runtime function.
123
Invalid parameter passed to C runtime function.
124
Invalid parameter passed to C runtime function.
125
Invalid parameter passed to C runtime function.
126
Invalid parameter passed to C runtime function.
127
Invalid parameter passed to C runtime function.
128
Invalid parameter passed to C runtime function.
129
Invalid parameter passed to C runtime function.
130
Invalid parameter passed to C runtime function.
131
Invalid parameter passed to C runtime function.
132
Invalid parameter passed to C runtime function.
133
Invalid parameter passed to C runtime function.
134
Invalid parameter passed to C runtime function.
135
Invalid parameter passed to C runtime function.
136
Invalid parameter passed to C runtime function.
137
Invalid parameter passed to C runtime function.
138
Invalid parameter passed to C runtime function.
139
Invalid parameter passed to C runtime function.
140
Invalid parameter passed to C runtime function.
141
Invalid parameter passed to C runtime function.
142
Invalid parameter passed to C runtime function.
143
Invalid parameter passed to C runtime function.
144
Invalid parameter passed to C runtime function.
145
Invalid parameter passed to C runtime function.
146
Invalid parameter passed to C runtime function.
147
Invalid parameter passed to C runtime function.
148
Invalid parameter passed to C runtime function.
149
Invalid parameter passed to C runtime function.
150
Invalid parameter passed to C runtime function.
151
Invalid parameter passed to C runtime function.
152
Invalid parameter passed to C runtime function.
153
Invalid parameter passed to C runtime function.
154
Invalid parameter passed to C runtime function.
155
Invalid parameter passed to C runtime function.
156
Invalid parameter passed to C runtime function.
157
Invalid parameter passed to C runtime function.
158
Invalid parameter passed to C runtime function.
159
Invalid parameter passed to C runtime function.
160
Invalid parameter passed to C runtime function.
161
Invalid parameter passed to C runtime function.
162
Invalid parameter passed to C runtime function.
163
Invalid parameter passed to C runtime function.
164
Invalid parameter passed to C runtime function.
165
Invalid parameter passed to C runtime function.
166
Invalid parameter passed to C runtime function.
167
Invalid parameter passed to C runtime function.
168
Invalid parameter passed to C runtime function.
169
Invalid parameter passed to C runtime function.
170
Invalid parameter passed to C runtime function.
171
Invalid parameter passed to C runtime function.
172
Invalid parameter passed to C runtime function.
173
Invalid parameter passed to C runtime function.
174
Invalid parameter passed to C runtime function.
175
Invalid parameter passed to C runtime function.
176
Invalid parameter passed to C runtime function.
177
Invalid parameter passed to C runtime function.
178
Invalid parameter passed to C runtime function.
179
Invalid parameter passed to C runtime function.
180
Invalid parameter passed to C runtime function.
181
Invalid parameter passed to C runtime function.
182
Invalid parameter passed to C runtime function.
183
Invalid parameter passed to C runtime function.
184
Invalid parameter passed to C runtime function.
185
Invalid parameter passed to C runtime function.
186
Invalid parameter passed to C runtime function.
187
Invalid parameter passed to C runtime function.
188
ModLoad: 77c40000 77cc4000   C:\Windows\system32\CLBCatQ.DLL
189
ModLoad: 71680000 717c6000   C:\Windows\system32\browseui.dll
190
ModLoad: 74a60000 74b1b000   C:\Windows\system32\PROPSYS.dll
191
ModLoad: 753c0000 753f0000   C:\Windows\system32\DUser.dll
192
ModLoad: 6ef10000 6ef70000   C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll
193
ModLoad: 74480000 74533000   C:\Windows\system32\WindowsCodecs.dll
194
ModLoad: 761c0000 761ec000   C:\Windows\system32\apphelp.dll
195
ModLoad: 714c0000 71555000   CSCUI.dll
196
ModLoad: 714c0000 71555000   C:\Windows\System32\cscui.dll
197
ModLoad: 71910000 71919000   C:\Windows\System32\CSCDLL.dll
198
ModLoad: 72490000 7249b000   C:\Windows\System32\CSCAPI.dll
199
ModLoad: 76390000 7651a000   C:\Windows\system32\SETUPAPI.dll
200
ModLoad: 76240000 7625e000   C:\Windows\system32\USERENV.dll
201
ModLoad: 6d5b0000 6d7d3000   NetworkExplorer.dll
202
ModLoad: 6d5b0000 6d7d3000   C:\Windows\system32\NetworkExplorer.dll
203
ModLoad: 75e40000 75e54000   C:\Windows\system32\MPR.dll
204
ModLoad: 6eef0000 6ef03000   C:\Windows\System32\ntlanman.dll
205
ModLoad: 75ec0000 75f35000   C:\Windows\System32\NETAPI32.dll
206
ModLoad: 70cf0000 70cf8000   C:\Windows\System32\drprov.dll
207
ModLoad: 70ce0000 70cef000   C:\Windows\System32\davclnt.dll
208
ModLoad: 75360000 7538f000   C:\Windows\system32\xmllite.dll
209
ModLoad: 75790000 757cb000   C:\Windows\system32\rsaenh.dll
210
ModLoad: 6f140000 6f164000   C:\Windows\System32\cscobj.dll
211
ModLoad: 70fa0000 70fdc000   C:\Windows\System32\msshsq.dll
212
ModLoad: 711a0000 711b6000   C:\Windows\system32\thumbcache.dll
213
ModLoad: 70fe0000 71033000   C:\Windows\System32\actxprxy.dll
214
ModLoad: 71bd0000 71cd7000   C:\Windows\system32\SHDOCVW.dll
215
ModLoad: 6fc40000 7020e000   C:\Windows\system32\ieframe.dll
216
ModLoad: 77690000 776d5000   C:\Windows\system32\iertutil.dll
217
ModLoad: 6f060000 6f0aa000   C:\Windows\system32\ntshrui.dll
218
ModLoad: 75d00000 75d3a000   C:\Windows\system32\slc.dll
219
ModLoad: 71410000 71419000   C:\Windows\system32\LINKINFO.dll
220
Invalid parameter passed to C runtime function.
221
Invalid parameter passed to C runtime function.
222
Invalid parameter passed to C runtime function.
223
Invalid parameter passed to C runtime function.
224
Invalid parameter passed to C runtime function.
225
Invalid parameter passed to C runtime function.
226
Invalid parameter passed to C runtime function.
227
Invalid parameter passed to C runtime function.
228
Invalid parameter passed to C runtime function.
229
Invalid parameter passed to C runtime function.
230
Invalid parameter passed to C runtime function.
231
Invalid parameter passed to C runtime function.
232
Invalid parameter passed to C runtime function.
233
Invalid parameter passed to C runtime function.
234
Invalid parameter passed to C runtime function.
235
Invalid parameter passed to C runtime function.
236
Invalid parameter passed to C runtime function.
237
Invalid parameter passed to C runtime function.
238
Invalid parameter passed to C runtime function.
239
Invalid parameter passed to C runtime function.
240
Invalid parameter passed to C runtime function.
241
Invalid parameter passed to C runtime function.
242
Invalid parameter passed to C runtime function.
243
Invalid parameter passed to C runtime function.
244
(d18.18c): Unknown exception - code c0150014 (first chance)
245
(d18.18c): Unknown exception - code c0150014 (!!! second chance !!!)
246
eax=023fca38 ebx=03839410 ecx=023fcaa0 edx=00000000 esi=001d07c8 edi=779ac527
247
eip=77b861fc esp=023fca2c ebp=023fca88 iopl=0         nv up ei pl zr na pe nc
248
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
249
ntdll!RtlTimeToElapsedTimeFields+0x7681:
250
77b861fc e9e63efeff      jmp     ntdll!RtlActivateActivationContextUnsafeFast+0x62 (77b6a0e7)
251
0:000> ~*kb
252

    
253
.  0  Id: d18.18c Suspend: 1 Teb: 7ffdf000 Unfrozen
254
ChildEBP RetAddr  Args to Child              
255
WARNING: Stack unwind information not available. Following frames may be wrong.
256
023fca88 779ac527 81a1e656 023fdb10 000003e8 ntdll!RtlTimeToElapsedTimeFields+0x7681
257
*** WARNING: Unable to verify checksum for c:\ruby\bin\msvcrt-ruby18.dll
258
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for c:\ruby\bin\msvcrt-ruby18.dll - 
259
023fcb10 10025122 00000001 023fcb34 00000000 kernel32!WaitForMultipleObjectsEx+0xf2
260
023fcb3c 10025584 00000000 00000000 00000000 msvcrt_ruby18!rb_w32_times+0x152
261
023fcb50 10023083 00000000 023fdb10 06d35fb0 msvcrt_ruby18!rb_w32_sleep+0x14
262
023fcd74 10017f0b 00000000 023fcff0 023fcdcc msvcrt_ruby18!rb_w32_select+0xa3
263
023fd0fc 10019808 100c78dc fffffffe 776ff7ab msvcrt_ruby18!rb_thread_schedule+0x45b
264
023fd134 1007f64c 0000003c 00000000 1e010341 msvcrt_ruby18!rb_thread_wait_for+0x1e8
265
023fd14c 1000da2e 00000001 023fd38c 038cb40c msvcrt_ruby18!Init_process+0x17ac
266
023fd328 1000cb7f 03840ce4 038cb40c 000021c9 msvcrt_ruby18!rb_with_disable_interrupt+0x121e
267
023fd368 1000689e 03840ce4 038cb40c 000021c9 msvcrt_ruby18!rb_with_disable_interrupt+0x36f
268
023fd9c8 1000b1d6 038cb40c 038cc334 023fe928 msvcrt_ruby18!rb_Array+0x267e
269
023fdb30 1001c04b 04555a24 038cb40c 00000000 msvcrt_ruby18!rb_need_block+0x566
270
023fdb58 1001a9b8 04555a24 041f6ed0 00000000 msvcrt_ruby18!Init_Thread+0xd5b
271
023fdc6c 1001c097 1001bf80 04555a24 041f6ed0 msvcrt_ruby18!rb_thread_create+0x588
272
023fdc80 1000da11 0383cfb8 04555a24 023fe928 msvcrt_ruby18!Init_Thread+0xda7
273
023fde58 1000cb7f 0383cfa4 0383cfb8 000013c1 msvcrt_ruby18!rb_with_disable_interrupt+0x1201
274
023fde98 100064f1 0383cfa4 0383cfb8 000013c1 msvcrt_ruby18!rb_with_disable_interrupt+0x36f
275
023fe4f4 1000520e 038cb40c 038cc4b0 023ff7ec msvcrt_ruby18!rb_Array+0x22d1
276
023feb3c 10007773 038cb40c 038cc2f8 023ff7ec msvcrt_ruby18!rb_Array+0xfee
277
023ff184 10005941 038cb40c 038cc2d0 023ff7ec msvcrt_ruby18!rb_Array+0x3553
278

    
279
   1  Id: d18.e10 Suspend: 1 Teb: 7ffde000 Unfrozen
280
ChildEBP RetAddr  Args to Child              
281
WARNING: Stack unwind information not available. Following frames may be wrong.
282
06ceff88 779a4911 759e5ac1 06ceffd4 77b4e4b6 ntdll!KiFastSystemCallRet
283
06ceff94 77b4e4b6 0020bcb8 7ba72d8e 00000000 kernel32!BaseThreadInitThunk+0x12
284
06ceffd4 77b4e489 759e59da 0020bcb8 00000000 ntdll!RtlInitializeExceptionChain+0x63
285
06ceffec 00000000 759e59da 0020bcb8 00000000 ntdll!RtlInitializeExceptionChain+0x36
286

    
287
   2  Id: d18.7ac Suspend: 1 Teb: 7ffdd000 Unfrozen
288
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Windows\system32\USER32.dll - 
289
ChildEBP RetAddr  Args to Child              
290
WARNING: Stack unwind information not available. Following frames may be wrong.
291
09a4fe2c 77700208 09a4fde0 09a4fe54 00000000 ntdll!KiFastSystemCallRet
292
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Windows\system32\DUser.dll - 
293
09a4fe80 753c161e 000001f0 09a4feb4 ffffffff USER32!TranslateMessageEx+0x172
294
09a4fea0 753c1646 000004ff ffffffff 00000001 DUser+0x161e
295
09a4fed4 753cf496 09a4ff14 00000000 00000000 DUser+0x1646
296
09a4fef4 753cf3f6 09a4ff14 00000000 00000000 DUser!GetMessageExA+0x3d
297
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Windows\system32\msvcrt.dll - 
298
09a4ff48 76532cce 00000000 8a3d66ab 00000000 DUser!SetGadgetRootInfo+0xb9f
299
09a4ff80 76532deb 09a4ff94 779a4911 06d13a78 msvcrt!wcstombs_s+0x40
300
09a4ff88 779a4911 06d13a78 09a4ffd4 77b4e4b6 msvcrt!beginthreadex+0xc9
301
09a4ff94 77b4e4b6 06d13a78 74cd2d8e 00000000 kernel32!BaseThreadInitThunk+0x12
302
09a4ffd4 77b4e489 76532da8 06d13a78 00000000 ntdll!RtlInitializeExceptionChain+0x63
303
09a4ffec 00000000 76532da8 06d13a78 00000000 ntdll!RtlInitializeExceptionChain+0x36
304

    
305
   4  Id: d18.fd4 Suspend: 1 Teb: 7ffda000 Unfrozen
306
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Windows\system32\RPCRT4.dll - 
307
ChildEBP RetAddr  Args to Child              
308
WARNING: Stack unwind information not available. Following frames may be wrong.
309
0de7fea0 77a86ff0 00000124 0de7fed8 0de7fec8 ntdll!KiFastSystemCallRet
310
0de7fedc 77a87090 00007530 0de7ff44 0de7ff40 RPCRT4!UuidCreate+0xc6
311
0de7ff4c 77a84f40 0de7ff7c 77a84f07 0020bd18 RPCRT4!UuidCreate+0x166
312
0de7ff54 77a84f07 0020bd18 00000000 00000000 RPCRT4!I_RpcSend+0x181
313
0de7ff7c 77a84f6c 002671a0 0de7ff94 779a4911 RPCRT4!I_RpcSend+0x148
314
0de7ff88 779a4911 0024c170 0de7ffd4 77b4e4b6 RPCRT4!I_RpcSend+0x1ad
315
0de7ff94 77b4e4b6 0024c170 708e2d8e 00000000 kernel32!BaseThreadInitThunk+0x12
316
0de7ffd4 77b4e489 77a84f4e 0024c170 00000000 ntdll!RtlInitializeExceptionChain+0x63
317
0de7ffec 00000000 77a84f4e 0024c170 00000000 ntdll!RtlInitializeExceptionChain+0x36
318

    
319
   5  Id: d18.42c Suspend: 1 Teb: 7ffd9000 Unfrozen
320
ChildEBP RetAddr  Args to Child              
321
WARNING: Stack unwind information not available. Following frames may be wrong.
322
0fe7ff40 77961c7a 0000ea60 00000000 0fe7ff78 ntdll!KiFastSystemCallRet
323
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Windows\system32\ole32.dll - 
324
0fe7ff50 777cdfc7 0000ea60 00267420 777ce086 kernel32!Sleep+0xf
325
0fe7ff78 777ce0e2 00000000 00000000 0fe7ff94 ole32!CoRegisterSurrogateEx+0x34db
326
0fe7ff88 779a4911 00267420 0fe7ffd4 77b4e4b6 ole32!CoRegisterSurrogateEx+0x35f6
327
0fe7ff94 77b4e4b6 00267420 728e2d8e 00000000 kernel32!BaseThreadInitThunk+0x12
328
0fe7ffd4 77b4e489 777ce0cc 00267420 00000000 ntdll!RtlInitializeExceptionChain+0x63
329
0fe7ffec 00000000 777ce0cc 00267420 00000000 ntdll!RtlInitializeExceptionChain+0x36
330

    
331
   7  Id: d18.134 Suspend: 1 Teb: 7ffd7000 Unfrozen
332
ChildEBP RetAddr  Args to Child              
333
WARNING: Stack unwind information not available. Following frames may be wrong.
334
140efea0 77a86ff0 0000012c 140efed8 140efec8 ntdll!KiFastSystemCallRet
335
140efedc 77a87090 00007530 140eff44 140eff40 RPCRT4!UuidCreate+0xc6
336
140eff4c 77a84f40 140eff7c 77a84f07 0020bd18 RPCRT4!UuidCreate+0x166
337
140eff54 77a84f07 0020bd18 00000000 00000000 RPCRT4!I_RpcSend+0x181
338
140eff7c 77a84f6c 00254a08 140eff94 779a4911 RPCRT4!I_RpcSend+0x148
339
140eff88 779a4911 0024c2e0 140effd4 77b4e4b6 RPCRT4!I_RpcSend+0x1ad
340
140eff94 77b4e4b6 0024c2e0 69672d8e 00000000 kernel32!BaseThreadInitThunk+0x12
341
140effd4 77b4e489 77a84f4e 0024c2e0 00000000 ntdll!RtlInitializeExceptionChain+0x63
342
140effec 00000000 77a84f4e 0024c2e0 00000000 ntdll!RtlInitializeExceptionChain+0x36