Non è una novità ma ho un problema con windows xp pro!

[luka734]

Ciao a tutti ho un problema con winzozz icspi professional
Non so da dove cominciare quindi inizio dal principio, 3 giorni fa notavo che il pc quando cliccavo col tasto destro su un file iniziava a bloccarsi si impallava tutto e dovevo riavviare.
Dopo poco mi sono accorto che il problema è dovuto al file drwtsn32.exe ho ripristinato questo file dal cd di windows xp e continuava a darmi sto problema.
Poi ho pensato "vabbe ce l'ho da 5 mesi installato xp sarà meglio formattare"
Sabato formatto il pc e come se non bastasse mi ridà lo stesso errore.

In poche parole l'errore è : quando clicco col tasto destro su un file (qualsiasi file anche collegamenti) mi si impalla il pc e l'unico modo per farlo sbloccare è chiudere il file drwtsn32.exe dal task manager e quando lo chiudo si riavvia explorer.
Vi prego aiutatemi che sto uscendo pazzo
grazie mille ciao

[giacomo_uncino]

non vorrei sparare ca@@te che sia un problema hardware? Magari la ram, prova a fare un memtest

[Zebiwe]

Se prima con xp andava e adesso con xp pulito pulito non va per me è un problema HD...provato con un altro mouse? se usi solo la tastiera (anche per fare tasto dx) si impalla?

Byezz

[luka734]

Si si impalla anche premendo sulla tastiera.

Escluderei il problema hd xkè quando premo sulle cartelle appare il menu invece sui file si impalla!

[luka734]

Ragazzi aiutatmi x favore

[Zebiwe]

Se si impalla sia con mouse che con tastiera tenderei ad escludere un problema HD..per me è XP che fa i capricci...hai provato a rimetterlo un'altra volta?

Byezz

[atidem]

Sei tu ad aver avviato Dr. Watson? (drwtsn32.exe)
Non so se tu ne sia a conoscenza ma questo tool è un debugger.
Raccoglie le informazioni sulla macchina quando si produce un errore.
Viene creato un file log di analisi drwtsn32.log.
Di solito è localizzato in drive:\Documents and Settings\All Users.WINNT\Application Data\Microsoft\Dr Watson
Aprilo e posta i risultati. Vediamo se si riesce a risalire alla causa del problema.

[luka734]

Ve lo posto subito, comunque come detto prima ho provato a formattare ma comunque da sto problema!

Ah e drwtsn32.exe non l'ho avviato io s'avvia da solo quando premo col tasto destro su un file!

[luka734]

Ecco il log di drwtsn32.exe (un pò lunghetto):



Microsoft (R) DrWtsn32
Copyright (C) 1985-2001 Microsoft Corp. Tutti i diritti riservati.



Exception dell'applicazione:
App: <unknown> (pid=2228)
Ora: 21/12/2004 @ 14:50:19.557
Numero exception: c0000005 (access violation)

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
464 smss.exe
520 csrss.exe
544 winlogon.exe
588 services.exe
600 lsass.exe
820 svchost.exe
888 svchost.exe
920 svchost.exe
1124 svchost.exe
1244 svchost.exe
1404 spoolsv.exe
1948 alg.exe
264 wscntfy.exe
1688 Explorer.EXE
1548 CTFMON.EXE
196 dslAgent.exe
1008 gsicon.exe
2344 TVR.exe
2228 video.ex_
2636 drwtsn32.exe

*----> Elenco moduli <----*
(0000000000400000 - 000000000045b000: G:\Programmi\LifeView TVR\video.ex_
(0000000010000000 - 000000001002b000: G:\Programmi\LifeView TVR\LvTV.dll
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\uxtheme.dll
(000000005d4d0000 - 000000005d567000: G:\WINDOWS\system32\COMCTL32.dll
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(0000000073620000 - 0000000073627000: G:\WINDOWS\system32\msdmo.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(00000000747a0000 - 000000007490e000: G:\WINDOWS\system32\quartz.dll
(0000000076360000 - 00000000763aa000: G:\WINDOWS\system32\comdlg32.dll
(0000000076600000 - 0000000076611000: G:\WINDOWS\system32\devenum.dll
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\setupapi.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\Apphelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll

*----> Scarico dello stato per l'id del thread 0x9c0 <----*

eax=00000000 ebx=00000011 ecx=00000000 edx=7c822ac3 esi=00000000 edi=7c823ebe
eip=00406bd7 esp=0022ebbc ebp=00000011 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00200246

*** WARNING: Unable to verify checksum for G:\Programmi\LifeView TVR\video.ex_
*** ERROR: Module load completed but symbols could not be loaded for G:\Programmi\LifeView TVR\video.ex_
funzione: video
00406bb3 0850ff or [eax-0x1],dl
00406bb6 51 push ecx
00406bb7 08c7 or bh,al
00406bb9 05803f4200 add eax,0x423f80
00406bbe 0000 add [eax],al
00406bc0 0000 add [eax],al
00406bc2 8b0d74544200 mov ecx,[video+0x25474 (00425474)]
00406bc8 a150544200 mov eax,[video+0x25450 (00425450)]
00406bcd 68803f4200 push 0x423f80
00406bd2 6888d34100 push 0x41d388
FAULT ->00406bd7 8b10 mov edx,[eax] ds:0023:00000000=????????
00406bd9 51 push ecx
00406bda 6848d64100 push 0x41d648
00406bdf 6838d54100 push 0x41d538
00406be4 50 push eax
00406be5 ff5218 call dword ptr [edx+0x18]
00406be8 85c0 test eax,eax
00406bea 0f85e0000000 jne video+0x6cd0 (00406cd0)
00406bf0 a1803f4200 mov eax,[video+0x23f80 (00423f80)]
00406bf5 8d4c2410 lea ecx,[esp+0x10]
00406bf9 51 push ecx

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00000011 00000000 00000000 00000000 00000000 video+0x6bd7

*----> Scarico Raw Stack <----*
000000000022ebbc 88 d3 41 00 80 3f 42 00 - d0 f6 22 00 f0 21 40 00 ..A..?B..."..!@.
000000000022ebcc 94 f6 22 00 00 00 00 00 - f4 ec 22 00 cc eb 22 00 .."......."...".
000000000022ebdc 0a e2 91 7c 99 4c 92 7c - e4 ec 22 00 d4 ee 22 00 ...|.L.|.."...".
000000000022ebec 04 00 00 00 00 00 00 00 - b4 6f f4 77 e4 ec 22 00 .........o.w..".
000000000022ebfc 9c ec 22 00 b4 f0 22 00 - bf 6f f4 77 18 ed 22 00 .."..."..o.w..".
000000000022ec0c d2 01 00 00 10 ed 22 00 - 08 ed 22 00 d2 01 00 00 ......"...".....
000000000022ec1c b4 f0 22 00 34 ec 22 00 - 3a 00 00 00 32 00 38 00 ..".4.".:...2.8.
000000000022ec2c 33 00 39 00 35 00 32 00 - 31 00 30 00 30 00 33 00 3.9.5.2.1.0.0.3.
000000000022ec3c 00 00 35 00 3b ef 00 00 - e4 eb 22 00 e8 eb 22 00 ..5.;....."...".
000000000022ec4c b0 ff 22 00 18 ee 91 7c - b0 4c 92 7c 5a 00 00 00 .."....|.L.|Z...
000000000022ec5c d4 ee 22 00 05 00 00 00 - 98 ee 22 00 ba 4b 92 7c .."......."..K.|
000000000022ec6c 26 31 24 00 88 ec 22 00 - 00 00 00 00 00 00 00 00 &1$...".........
000000000022ec7c c7 4b 92 7c 20 ed 22 00 - 3d fb 91 7c 58 00 5a 00 .K.| .".=..|X.Z.
000000000022ec8c 94 ec 22 00 bc ee 22 00 - ff ff ff ff ff ff ff ff .."...".........
000000000022ec9c 00 00 00 00 01 00 00 00 - 02 00 00 00 11 00 00 00 ................
000000000022ecac 21 00 00 00 41 00 00 00 - 12 00 00 00 22 00 00 00 !...A......."...
000000000022ecbc 42 00 00 00 33 00 30 00 - 30 00 37 00 37 00 31 00 B...3.0.0.7.7.1.
000000000022eccc 34 00 2d 00 38 00 33 00 - 39 00 35 00 32 00 32 00 4.-.8.3.9.5.2.2.
000000000022ecdc 31 00 31 00 35 00 2d 00 - 31 00 30 00 30 00 33 00 1.1.5.-.1.0.0.3.
000000000022ecec 00 00 22 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ..".............

*----> Scarico dello stato per l'id del thread 0x9fc <----*

eax=72c930e8 ebx=00eefef8 ecx=0000006c edx=00259e10 esi=00000000 edi=7ffdf000
eip=7c91eb94 esp=00eefed0 ebp=00eeff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\ntdll.dll -
funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\kernel32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
00eeff6c 7c809c86 00000002 00eeffa4 00000000 ntdll!KiFastSystemCallRet
00eeff88 72c9312a 00000002 00eeffa4 00000000 kernel32!WaitForMultipleObjects+0x18
00eeffb4 7c80b50b 00000000 00000000 020a0014 wdmaud!midMessage+0x348
00eeffec 00000000 72c930e8 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000eefed0 ab e9 91 7c f2 94 80 7c - 02 00 00 00 f8 fe ee 00 ...|...|........
0000000000eefee0 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000eefef0 00 00 00 00 00 00 00 00 - 8c 01 00 00 18 01 00 00 ................
0000000000eeff00 20 7c 9f b2 20 15 94 81 - 20 f1 df ff 46 02 00 00 |.. ... ...F...
0000000000eeff10 bc c6 4d 80 90 15 94 81 - 14 00 00 00 01 00 00 00 ..M.............
0000000000eeff20 00 00 00 00 00 00 00 00 - 10 00 00 00 00 00 00 00 ................
0000000000eeff30 30 b1 f6 81 87 f6 57 80 - 00 f0 fd 7f 00 d0 fd 7f 0.....W.........
0000000000eeff40 00 d0 fd 7f 00 00 00 00 - f8 fe ee 00 05 00 00 00 ................
0000000000eeff50 02 00 00 00 ec fe ee 00 - 00 00 00 00 dc ff ee 00 ................
0000000000eeff60 f3 99 83 7c 90 95 80 7c - 00 00 00 00 88 ff ee 00 ...|...|........
0000000000eeff70 86 9c 80 7c 02 00 00 00 - a4 ff ee 00 00 00 00 00 ...|............
0000000000eeff80 ff ff ff ff 00 00 00 00 - b4 ff ee 00 2a 31 c9 72 ............*1.r
0000000000eeff90 02 00 00 00 a4 ff ee 00 - 00 00 00 00 ff ff ff ff ................
0000000000eeffa0 14 00 0a 02 8c 01 00 00 - 18 01 00 00 00 00 00 00 ................
0000000000eeffb0 dc e2 91 7c ec ff ee 00 - 0b b5 80 7c 00 00 00 00 ...|.......|....
0000000000eeffc0 00 00 00 00 14 00 0a 02 - 00 00 00 00 00 d0 fd 7f ................
0000000000eeffd0 00 46 fc 81 c0 ff ee 00 - d0 5d a2 81 ff ff ff ff .F.......]......
0000000000eeffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
0000000000eefff0 00 00 00 00 e8 30 c9 72 - 00 00 00 00 00 00 00 00 .....0.r........
0000000000ef0000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................



Exception dell'applicazione:
App: G:\WINDOWS\system32\regsvr32.exe (pid=3048)
Ora: 21/12/2004 @ 16:26:54.948
Numero exception: 80000007
()

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
464 smss.exe
520 csrss.exe
544 winlogon.exe
588 services.exe
600 lsass.exe
820 svchost.exe
888 svchost.exe
920 svchost.exe
1124 svchost.exe
1244 svchost.exe
1404 spoolsv.exe
1948 alg.exe
264 wscntfy.exe
1688 Explorer.EXE
1548 CTFMON.EXE
196 dslAgent.exe
1008 gsicon.exe
3736 msnmsgr.exe
1636 emule.exe
1072 msmsgs.exe
2624 Mixer.exe
1792 Dr. DivX v1.0.5 Retail.exe
3048 regsvr32.exe
3016 drwtsn32.exe

*----> Elenco moduli <----*
(0000000001000000 - 0000000001005000: G:\WINDOWS\system32\regsvr32.exe
(0000000010000000 - 0000000010026000: G:\Programmi\DivX\Dr.DivX\EncodeDivXExt.dll
(00000000596b0000 - 000000005987a000: G:\WINDOWS\AppPatch\AcGenral.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\UxTheme.dll
(000000005cf90000 - 000000005cfb6000: G:\WINDOWS\system32\ShimEng.dll
(000000005d4d0000 - 000000005d567000: G:\WINDOWS\system32\comctl32.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076ae0000 - 0000000076af1000: G:\WINDOWS\system32\atl.dll
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\Apphelp.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll

*----> Scarico dello stato per l'id del thread 0xc80 <----*

eax=00950000 ebx=0007d61c ecx=00001000 edx=7c91eb94 esi=000000a0 edi=00000000
eip=7c91eb94 esp=0007d600 ebp=0007d908 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206

*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\ntdll.dll -
funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
FAULT ->ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0007d908 7c975714 0007daa8 0007dd7c 0097415b ntdll!KiFastSystemCallRet
0007da48 7c9761a1 0007daa8 00960000 c0000005 ntdll!RtlTraceDatabaseAdd+0x1b9
0007dd80 7c95ea5f 0097415b fffffffe fffffffe ntdll!RtlUnhandledExceptionFilter+0xb2
0007ddd4 7c94783a 0097415b 00960000 0007de68 ntdll!RtlInitializeSListHead+0x15a4f
0007de50 7c91eafa 00000000 0007de84 0007de68 ntdll!LdrAddRefDll+0x221
0007e158 00000000 10015804 00000001 0007e194 ntdll!KiUserExceptionDispatcher+0xe

*----> Scarico Raw Stack <----*
000000000007d600 ab e9 91 7c d5 33 86 7c - 02 00 00 00 38 d7 07 00 ...|.3.|....8...
000000000007d610 01 00 00 00 01 00 00 00 - 00 00 00 00 47 00 3a 00 ............G.:.
000000000007d620 5c 00 57 00 49 00 4e 00 - 44 00 4f 00 57 00 53 00 \.W.I.N.D.O.W.S.
000000000007d630 5c 00 73 00 79 00 73 00 - 74 00 65 00 6d 00 33 00 \.s.y.s.t.e.m.3.
000000000007d640 32 00 5c 00 64 00 72 00 - 77 00 74 00 73 00 6e 00 2.\.d.r.w.t.s.n.
000000000007d650 33 00 32 00 20 00 2d 00 - 70 00 20 00 33 00 30 00 3.2. .-.p. .3.0.
000000000007d660 34 00 38 00 20 00 2d 00 - 65 00 20 00 31 00 36 00 4.8. .-.e. .1.6.
000000000007d670 30 00 20 00 2d 00 67 00 - 00 00 00 00 00 00 00 00 0. .-.g.........
000000000007d680 2e 00 00 00 00 00 00 00 - 00 00 00 00 08 d9 07 00 ................
000000000007d690 0f 32 86 7c 05 00 00 00 - 08 d9 07 00 41 32 86 7c .2.|........A2.|
000000000007d6a0 69 32 86 7c 00 00 00 00 - 00 00 00 00 a8 da 07 00 i2.|............
000000000007d6b0 44 00 00 00 00 00 00 00 - 78 34 86 7c 00 00 00 00 D.......x4.|....
000000000007d6c0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000007d6d0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000007d6e0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000007d6f0 00 00 00 00 00 e0 fd 7f - d8 c0 98 7c 00 00 00 00 ...........|....
000000000007d700 00 00 00 00 00 e0 fd 7f - 00 00 00 00 00 00 00 00 ................
000000000007d710 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000007d720 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000007d730 00 00 00 00 00 00 00 00 - a0 00 00 00 ac 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0xd6c <----*

eax=00000000 ebx=00000000 ecx=00000002 edx=00000003 esi=7c98c0d8 edi=00000000
eip=7c91eb94 esp=0095fc10 ebp=0095fc98 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0095fc98 7c91104b 0198c0d8 7c937357 7c98c0d8 ntdll!KiFastSystemCallRet
0095fd18 7c91eac7 0095fd2c 7c910000 00000000 ntdll!RtlEnterCriticalSection+0x46
00000000 00000000 00000000 00000000 00000000 ntdll!KiUserApcDispatcher+0x7

*----> Scarico Raw Stack <----*
000000000095fc10 c0 e9 91 7c 1b 90 92 7c - 9c 00 00 00 00 00 00 00 ...|...|........
000000000095fc20 00 00 00 00 00 d0 fd 7f - 00 f0 fd 7f 00 00 00 00 ................
000000000095fc30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000095fc40 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000095fc50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000095fc60 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000095fc70 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000095fc80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000095fc90 00 00 00 00 9c 00 00 00 - 18 fd 95 00 4b 10 91 7c ............K..|
000000000095fca0 d8 c0 98 01 57 73 93 7c - d8 c0 98 7c 2c fd 95 00 ....Ws.|...|,...
000000000095fcb0 04 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000095fcc0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000095fcd0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000095fce0 00 00 00 00 00 00 00 00 - 00 d0 fd 7f 00 00 00 00 ................
000000000095fcf0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000095fd00 ac fc 95 00 00 00 00 00 - ff ff ff ff 18 ee 91 7c ...............|
000000000095fd10 00 8e 92 7c ff ff ff ff - 00 00 00 00 c7 ea 91 7c ...|...........|
000000000095fd20 2c fd 95 00 00 00 91 7c - 00 00 00 00 17 00 01 00 ,......|........
000000000095fd30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000095fd40 00 00 00 00 00 00 00 00 - 10 ec 90 81 01 00 00 00 ................



Exception dell'applicazione:
App: G:\WINDOWS\Explorer.EXE (pid=1688)
Ora: 21/12/2004 @ 16:33:25.720
Numero exception: 80000007
()

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
464 smss.exe
520 csrss.exe
544 winlogon.exe
588 services.exe
600 lsass.exe
820 svchost.exe
888 svchost.exe
920 svchost.exe
1124 svchost.exe
1244 svchost.exe
1404 spoolsv.exe
1948 alg.exe
264 wscntfy.exe
1688 Explorer.EXE
1548 CTFMON.EXE
196 dslAgent.exe
1008 gsicon.exe
3736 msnmsgr.exe
1636 emule.exe
1072 msmsgs.exe
2624 Mixer.exe
1820 VirtualDub.exe
3592 drwtsn32.exe
1572 WinRAR.exe

*----> Elenco moduli <----*
(0000000000b00000 - 0000000000b13000: G:\WINDOWS\system32\browselc.dll
(0000000001000000 - 00000000010ff000: G:\WINDOWS\Explorer.EXE
(0000000001220000 - 000000000124b000: G:\Programmi\WinRAR\rarext.dll
(0000000001860000 - 0000000001878000: G:\WINDOWS\system32\odbcint.dll
(0000000001b00000 - 0000000001b4f000: G:\WINDOWS\system32\DRMClien.DLL
(0000000001c00000 - 0000000001c8c000: G:\WINDOWS\system32\shdoclc.dll
(000000000ffd0000 - 000000000fff8000: G:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 0000000010026000: G:\Programmi\DivX\Dr.DivX\EncodeDivXExt.dll
(0000000020000000 - 00000000202d5000: G:\WINDOWS\system32\xpsp2res.dll
(000000004b360000 - 000000004b389000: G:\WINDOWS\system32\wmidx.dll
(000000004ebd0000 - 000000004ed73000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
(0000000058390000 - 00000000583b7000: G:\WINDOWS\system32\mpg2splt.ax
(0000000059690000 - 00000000596a9000: G:\WINDOWS\system32\wmpshell.dll
(00000000596b0000 - 000000005987a000: G:\WINDOWS\AppPatch\AcGenral.DLL
(0000000059e10000 - 0000000059e4c000: G:\WINDOWS\system32\WMASF.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\UxTheme.dll
(000000005ba40000 - 000000005bab2000: G:\WINDOWS\system32\themeui.dll
(000000005bc70000 - 000000005bcc4000: G:\WINDOWS\system32\NETAPI32.dll
(000000005cef0000 - 000000005cf18000: G:\WINDOWS\system32\shmedia.dll
(000000005cf90000 - 000000005cfb6000: G:\WINDOWS\system32\ShimEng.dll
(000000005d4d0000 - 000000005d567000: G:\WINDOWS\system32\comctl32.dll
(0000000060060000 - 0000000060093000: G:\WINDOWS\system32\msutb.dll
(0000000066bc0000 - 0000000066c4c000: G:\WINDOWS\system32\qedit.dll
(0000000069ce0000 - 0000000069cfe000: G:\WINDOWS\system32\wmpasf.dll
(000000006c450000 - 000000006c4ce000: G:\WINDOWS\system32\dxmasf.dll
(000000006c6b0000 - 000000006c6fd000: G:\WINDOWS\system32\DUSER.dll
(000000006c950000 - 000000006c977000: G:\WINDOWS\system32\dskquoui.dll
(000000006c980000 - 000000006c99a000: G:\WINDOWS\system32\dskquota.dll
(000000006cf50000 - 000000006cf73000: G:\WINDOWS\system32\ksproxy.ax
(0000000071a20000 - 0000000071a28000: G:\WINDOWS\system32\WS2HELP.dll
(0000000071a30000 - 0000000071a47000: G:\WINDOWS\system32\WS2_32.dll
(0000000071a50000 - 0000000071a5a000: G:\WINDOWS\system32\WSOCK32.dll
(0000000071aa0000 - 0000000071ab2000: G:\WINDOWS\system32\MPR.dll
(0000000071b80000 - 0000000071b93000: G:\WINDOWS\system32\SAMLIB.dll
(0000000071ba0000 - 0000000071bae000: G:\WINDOWS\System32\ntlanman.dll
(0000000071c10000 - 0000000071c17000: G:\WINDOWS\System32\NETRAP.dll
(0000000071c20000 - 0000000071c60000: G:\WINDOWS\System32\NETUI1.dll
(0000000071c60000 - 0000000071c77000: G:\WINDOWS\System32\NETUI0.dll
(00000000723a0000 - 00000000723ba000: G:\WINDOWS\system32\mydocs.dll
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(0000000072f70000 - 0000000072f96000: G:\WINDOWS\system32\WINSPOOL.DRV
(0000000072fa0000 - 0000000072fb0000: G:\WINDOWS\system32\WZCSAPI.DLL
(00000000732f0000 - 0000000073347000: G:\WINDOWS\system32\zipfldr.dll
(0000000073620000 - 0000000073627000: G:\WINDOWS\system32\msdmo.dll
(0000000073aa0000 - 0000000073ab4000: G:\WINDOWS\system32\mscms.dll
(0000000073ac0000 - 0000000073ad7000: G:\WINDOWS\system32\AVIFIL32.dll
(0000000073e50000 - 0000000073e54000: G:\WINDOWS\system32\ksuser.dll
(00000000745e0000 - 000000007461d000: G:\WINDOWS\system32\ODBC32.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(00000000747a0000 - 000000007490e000: G:\WINDOWS\system32\quartz.dll
(0000000074a60000 - 0000000074a68000: G:\WINDOWS\system32\POWRPROF.dll
(0000000074a80000 - 0000000074a8a000: G:\WINDOWS\system32\BatMeter.dll
(0000000074ac0000 - 0000000074b07000: G:\WINDOWS\system32\webcheck.dll
(0000000074f70000 - 0000000074f7a000: G:\WINDOWS\system32\vidcap.ax
(0000000075920000 - 0000000075a18000: G:\WINDOWS\system32\MSGINA.dll
(0000000075d50000 - 0000000075de1000: G:\WINDOWS\system32\MLANG.dll
(0000000075df0000 - 0000000075e11000: G:\WINDOWS\system32\MSVFW32.dll
(0000000075e40000 - 0000000075ef0000: G:\WINDOWS\system32\SXS.DLL
(0000000075f10000 - 0000000075f17000: G:\WINDOWS\System32\drprov.dll
(0000000075f20000 - 0000000075f29000: G:\WINDOWS\System32\davclnt.dll
(0000000075f30000 - 000000007602c000: G:\WINDOWS\system32\BROWSEUI.dll
(00000000761e0000 - 0000000076201000: G:\WINDOWS\system32\stobject.dll
(0000000076310000 - 0000000076320000: G:\WINDOWS\system32\WINSTA.dll
(0000000076330000 - 0000000076335000: G:\WINDOWS\system32\MSIMG32.dll
(0000000076360000 - 00000000763aa000: G:\WINDOWS\system32\comdlg32.dll
(00000000763b0000 - 0000000076559000: G:\WINDOWS\system32\NETSHELL.dll
(00000000765b0000 - 00000000765cd000: G:\WINDOWS\System32\CSCDLL.dll
(0000000076600000 - 0000000076611000: G:\WINDOWS\system32\devenum.dll
(0000000076890000 - 0000000076913000: G:\WINDOWS\system32\CRYPTUI.dll
(0000000076940000 - 0000000076948000: G:\WINDOWS\system32\LINKINFO.dll
(0000000076950000 - 0000000076976000: G:\WINDOWS\system32\ntshrui.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076ae0000 - 0000000076af1000: G:\WINDOWS\system32\ATL.DLL
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bc0000 - 0000000076bee000: G:\WINDOWS\system32\credui.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d20000 - 0000000076d39000: G:\WINDOWS\system32\iphlpapi.dll
(0000000076e40000 - 0000000076e4e000: G:\WINDOWS\system32\rtutils.dll
(0000000076e50000 - 0000000076e62000: G:\WINDOWS\system32\rasman.dll
(0000000076e70000 - 0000000076e9f000: G:\WINDOWS\system32\TAPI32.dll
(0000000076ea0000 - 0000000076edc000: G:\WINDOWS\system32\RASAPI32.dll
(0000000076f10000 - 0000000076f18000: G:\WINDOWS\system32\WTSAPI32.dll
(0000000076f20000 - 0000000076f4d000: G:\WINDOWS\system32\WLDAP32.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: G:\WINDOWS\system32\WININET.dll
(0000000077230000 - 00000000772cd000: G:\WINDOWS\system32\urlmon.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(0000000077660000 - 0000000077681000: G:\WINDOWS\system32\NTMARTA.DLL
(0000000077730000 - 000000007789c000: G:\WINDOWS\system32\SHDOCVW.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\SETUPAPI.dll
(00000000779f0000 - 0000000077a45000: G:\WINDOWS\System32\cscui.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\appHelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077c40000 - 0000000077c63000: G:\WINDOWS\system32\msv1_0.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f10000 - 0000000077f21000: G:\WINDOWS\system32\Secur32.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll
(000000007d1f0000 - 000000007d4a2000: G:\WINDOWS\system32\msi.dll
(000000007d7a0000 - 000000007d9aa000: G:\WINDOWS\system32\wmvcore.dll

*----> Scarico dello stato per l'id del thread 0x694 <----*

eax=0056534c ebx=00000003 ecx=00000001 edx=00006e33 esi=000d69a8 edi=00000000
eip=7c91eb94 esp=0007fef0 ebp=0007ff08 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202

*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\ntdll.dll -
funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
FAULT ->ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\SHELL32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Module load completed but symbols could not be loaded for G:\WINDOWS\Explorer.EXE
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007ff08 7ca42c57 00000000 0007ff5c 01016e95 ntdll!KiFastSystemCallRet
0007ff14 01016e95 000d69a8 7ffd7000 0007ffc0 SHELL32!Ordinal201+0x28
0007ff5c 0101e2b6 00000000 00000000 000205e2 Explorer+0x16e95
0007ffc0 7c816d4f 00000002 5d4d3c48 7ffd7000 Explorer+0x1e2b6
0007fff0 00000000 0101e24e 00000000 78746341 kernel32!RegisterWaitForInputIdle+0x49

*----> Scarico Raw Stack <----*
000000000007fef0 f5 93 d1 77 ee 95 a4 7c - ac 92 80 7c a8 69 0d 00 ...w...|...|.i..
000000000007ff00 a8 69 0d 00 14 ff 07 00 - 14 ff 07 00 57 2c a4 7c .i..........W,.|
000000000007ff10 00 00 00 00 5c ff 07 00 - 95 6e 01 01 a8 69 0d 00 ....\....n...i..
000000000007ff20 00 70 fd 7f c0 ff 07 00 - 00 00 00 00 24 fd 07 00 .p..........$...
000000000007ff30 50 ff 07 00 e0 ff 07 00 - 27 e0 91 7c ed aa 80 7c P.......'..|...|
000000000007ff40 ff ff ff ff 0c 00 00 00 - 00 00 00 00 1a fa 03 00 ................
000000000007ff50 a0 00 00 00 01 00 00 00 - a8 69 0d 00 c0 ff 07 00 .........i......
000000000007ff60 b6 e2 01 01 00 00 00 00 - 00 00 00 00 e2 05 02 00 ................
000000000007ff70 01 00 00 00 02 00 00 00 - 48 3c 4d 5d 44 00 00 00 ........H<M]D...
000000000007ff80 34 06 02 00 14 06 02 00 - e4 05 02 00 00 00 00 00 4...............
000000000007ff90 00 00 00 00 00 00 00 00 - 00 00 00 00 18 00 00 00 ................
000000000007ffa0 8c 1d 98 76 e8 a8 d1 77 - 01 00 00 00 01 00 00 00 ...v...w........
000000000007ffb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000007ffc0 f0 ff 07 00 4f 6d 81 7c - 02 00 00 00 48 3c 4d 5d ....Om.|....H<M]
000000000007ffd0 00 70 fd 7f 38 b0 54 80 - c8 ff 07 00 e8 a4 af 81 .p..8.T.........
000000000007ffe0 ff ff ff ff f3 99 83 7c - 58 6d 81 7c 00 00 00 00 .......|Xm.|....
000000000007fff0 00 00 00 00 00 00 00 00 - 4e e2 01 01 00 00 00 00 ........N.......
0000000000080000 41 63 74 78 20 00 00 00 - 01 00 00 00 98 24 00 00 Actx ........$..
0000000000080010 c4 00 00 00 00 00 00 00 - 20 00 00 00 00 00 00 00 ........ .......
0000000000080020 14 00 00 00 01 00 00 00 - 06 00 00 00 34 00 00 00 ............4...

*----> Scarico dello stato per l'id del thread 0x198 <----*

eax=000000c0 ebx=00000000 ecx=00000000 edx=7ffdfc00 esi=00000000 edi=00000000
eip=7c91eb94 esp=00b9ff9c ebp=00b9ffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00b9ffb4 7c80b50b 00000000 00000000 00000000 ntdll!KiFastSystemCallRet
00b9ffec 00000000 7c93798d 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000b9ff9c 5c d8 91 7c d4 79 93 7c - 01 00 00 00 ac ff b9 00 \..|.y.|........
0000000000b9ffac 00 00 00 00 00 00 00 80 - ec ff b9 00 0b b5 80 7c ...............|
0000000000b9ffbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000b9ffcc 00 e0 fd 7f 00 46 fc 81 - c0 ff b9 00 08 40 c5 81 .....F.......@..
0000000000b9ffdc ff ff ff ff f3 99 83 7c - 18 b5 80 7c 00 00 00 00 .......|...|....
0000000000b9ffec 00 00 00 00 00 00 00 00 - 8d 79 93 7c 00 00 00 00 .........y.|....
0000000000b9fffc 00 00 00 00 a0 e1 db 57 - 25 de d2 11 af dd 00 10 .......W%.......
0000000000ba000c 5a 27 99 b5 42 96 6b 00 - 00 00 00 00 00 00 00 00 Z'..B.k.........
0000000000ba001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ba002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ba003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ba004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ba005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ba006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ba007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ba008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ba009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ba00ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ba00bc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ba00cc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x61c <----*

eax=804e3f4e ebx=00000000 ecx=00000246 edx=804e4c45 esi=7c98c0d8 edi=00000000
eip=7c91eb94 esp=00cefa78 ebp=00cefb00 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0888 es=0001 fs=003b gs=0100 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\msutb.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\MSCTF.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\USER32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\SHLWAPI.dll -
ChildEBP RetAddr Args to Child
00cefb00 7c91104b 0198c0d8 7c929b30 7c98c0d8 ntdll!KiFastSystemCallRet
00cefbb8 7c929ba0 77d10000 00cefbf4 00000000 ntdll!RtlEnterCriticalSection+0x46
00cefbd4 7c80ac66 77d10000 00cefbf4 00000000 ntdll!LdrGetProcedureAddress+0x18
00cefbfc 6007decb 77d10000 60063d8c 000c58c8 kernel32!GetProcAddress+0x3e
00cefc48 6006d2c8 00000000 00000000 00cefc64 msutb+0x1decb
00cefcd0 6006eae2 000007b4 000d6528 00000001 msutb!ClosePopupTipbar+0x39e1
00cefcf0 746cda15 00000000 000007b4 00000000 msutb!GetPopupTipbar+0x1125
00cefd2c 746ce26e 000c58c8 0000c0bc 00000000 MSCTF!TF_CreateCicLoadMutex+0x6fb2
00cefd94 746c0ccc 0000c0bc 00000000 00000000 MSCTF!TF_CreateCicLoadMutex+0x780b
00cefdb4 746c0e3e 00000001 00cefe8c 00000000 MSCTF!TF_UninitSystem+0x863
00cefdf0 77d1ed1a 00000000 00000001 00cefe8c MSCTF!TF_UninitSystem+0x9d5
00cefe0c 77d1ecc3 00030000 00000001 00cefe8c USER32!IsCharAlphaW+0x15a
00cefe48 77d26ddb 00cefe7c 00cefe8c 00cefea8 USER32!IsCharAlphaW+0x103
00cefe6c 7c91eae3 00cefe7c 00000030 00030000 USER32!EndDialog+0x112
00cefed4 77d193df 00ceff28 00000000 00000000 ntdll!KiUserCallbackDispatcher+0x13
00ceff00 010019c1 00ceff28 00000000 00000000 USER32!PeekMessageW+0x167
00ceff44 01011e8b 00000000 00ceffb4 77eaf5de Explorer+0x19c1
00ceff50 77eaf5de 010460d8 0000005c 00860044 Explorer+0x11e8b
00ceffb4 7c80b50b 00000000 0000005c 00860044 SHLWAPI!Ordinal505+0x369
00ceffec 00000000 77eaf56f 0007fdbc 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000cefa78 c0 e9 91 7c 1b 90 92 7c - b0 02 00 00 00 00 00 00 ...|...|........
0000000000cefa88 00 00 00 00 00 00 00 00 - 9b 3d 06 60 5c fb ce 00 .........=.`\...
0000000000cefa98 3c 00 05 00 94 fa ce 00 - c0 fa ce 00 ab b7 d1 77 <..............w
0000000000cefaa8 98 c5 53 00 a0 c4 53 00 - 00 00 00 00 00 00 00 00 ..S...S.........
0000000000cefab8 00 00 00 00 d8 60 04 01 - 00 fb ce 00 a0 28 00 01 .....`.......(..
0000000000cefac8 3c 00 05 00 07 04 00 00 - 00 00 00 00 00 00 00 00 <...............
0000000000cefad8 38 5e 0c 00 50 62 11 00 - 00 00 00 00 08 00 00 00 8^..Pb..........
0000000000cefae8 00 00 00 00 99 2e 00 00 - 98 fb ce 00 c8 4a 18 5b .............J.[
0000000000cefaf8 00 00 00 00 b0 02 00 00 - b8 fb ce 00 4b 10 91 7c ............K..|
0000000000cefb08 d8 c0 98 01 30 9b 92 7c - d8 c0 98 7c 8c 3d 06 60 ....0..|...|.=.`
0000000000cefb18 28 ac 80 7c ff ff 00 00 - 00 02 00 00 00 00 00 00 (..|............
0000000000cefb28 00 00 00 00 28 fc ce 00 - 5c fd ce 00 f1 37 00 01 ....(...\....7..
0000000000cefb38 08 fc ce 00 00 00 d1 77 - aa 02 21 00 5c fb ce 00 .......w..!.\...
0000000000cefb48 5c fb ce 00 90 fb ce 00 - 3b 43 41 77 bc fb ce 00 \.......;CAw....
0000000000cefb58 00 00 00 00 00 00 47 65 - 74 4d 6f 6e 69 74 6f 72 ......GetMonitor
0000000000cefb68 49 6e 66 6f 41 00 d1 77 - 4c 01 0f 00 7e 00 03 00 InfoA..wL...~...
0000000000cefb78 00 00 00 00 8c fb ce 00 - 00 00 00 00 c8 05 92 7c ...............|
0000000000cefb88 30 27 cf 01 58 fc ce 00 - 3d 15 18 5b c8 3f 03 00 0'..X...=..[.?..
0000000000cefb98 c0 fb ce 00 b0 61 00 00 - 14 fb ce 00 00 00 00 00 .....a..........
0000000000cefba8 1c fd ce 00 18 ee 91 7c - f0 9a 92 7c ff ff ff ff .......|...|....

*----> Scarico dello stato per l'id del thread 0x630 <----*

eax=00d2fcd0 ebx=00000000 ecx=000b45e8 edx=00000000 esi=00000000 edi=00000001
eip=7c91eb94 esp=00d2fcec ebp=00d2ffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00d2ffb4 7c80b50b 00000000 00000208 00cefce4 ntdll!KiFastSystemCallRet
00d2ffec 00000000 7c939fae 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000d2fcec ab e9 91 7c d5 a0 93 7c - 03 00 00 00 30 fd d2 00 ...|...|....0...
0000000000d2fcfc 01 00 00 00 01 00 00 00 - 00 00 00 00 08 02 00 00 ................
0000000000d2fd0c e4 fc ce 00 00 00 00 00 - 08 e5 98 7c 08 e5 98 7c ...........|...|
0000000000d2fd1c 24 02 00 00 30 06 00 00 - 03 00 00 00 03 00 00 00 $...0...........
0000000000d2fd2c 02 00 00 00 20 02 00 00 - a0 04 00 00 1c 02 00 00 .... ...........
0000000000d2fd3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fd4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fd5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fd6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fd7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fd8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fd9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fdac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fdbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fdcc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fddc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fdec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fdfc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fe0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000d2fe1c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x6c0 <----*

eax=0018e501 ebx=01d20e58 ecx=00000000 edx=f02c002b esi=00000000 edi=7ffd7000
eip=7c91eb94 esp=00dbfd30 ebp=00dbfdcc iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00dbfdcc 77d1bbfe 00000009 00dbfdf4 00000000 ntdll!KiFastSystemCallRet
00dbfe28 7ca043d9 00000008 00dbfe50 ffffffff USER32!SetWindowTextW+0x120
00dbff4c 7ca4114e 77eaf5de 00000000 7c809988 SHELL32!SHCreateShellFolderView+0x3d6b
00dbffb4 7c80b50b 00000000 7c809988 00090000 SHELL32!Ordinal753+0x133
00dbffec 00000000 77eaf56f 00cef4d4 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000dbfd30 ab e9 91 7c f2 94 80 7c - 09 00 00 00 58 0e d2 01 ...|...|....X...
0000000000dbfd40 01 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000dbfd50 09 00 00 00 02 00 00 00 - 10 cf 53 00 14 00 00 00 ..........S.....
0000000000dbfd60 01 00 00 00 00 00 00 00 - 00 00 00 00 10 00 00 00 ................
0000000000dbfd70 00 00 00 00 30 00 00 00 - 14 00 00 00 01 00 00 00 ....0...........
0000000000dbfd80 10 f4 0c 00 00 00 00 00 - 00 00 00 00 ec fd db 00 ................
0000000000dbfd90 94 04 d4 77 08 88 d1 77 - 00 70 fd 7f 00 80 fd 7f ...w...w.p......
0000000000dbfda0 00 80 fd 7f 00 00 00 00 - 58 0e d2 01 74 00 02 00 ........X...t...
0000000000dbfdb0 09 00 00 00 4c fd db 00 - 00 00 00 00 dc ff db 00 ....L...........
0000000000dbfdc0 f3 99 83 7c 90 95 80 7c - 00 00 00 00 28 fe db 00 ...|...|....(...
0000000000dbfdd0 fe bb d1 77 09 00 00 00 - f4 fd db 00 00 00 00 00 ...w............
0000000000dbfde0 ff ff ff ff 01 00 00 00 - a0 6a 0b 00 08 00 00 00 .........j......
0000000000dbfdf0 00 00 00 00 e4 06 00 00 - dc 0c 00 00 54 08 00 00 ............T...
0000000000dbfe00 b8 08 00 00 ac 04 00 00 - 58 02 00 00 80 02 00 00 ........X.......
0000000000dbfe10 84 02 00 00 4c 02 00 00 - 00 00 00 00 01 00 00 00 ....L...........
0000000000dbfe20 00 80 fd 7f 4c 02 00 00 - 4c ff db 00 d9 43 a0 7c ....L...L....C.|
0000000000dbfe30 08 00 00 00 50 fe db 00 - ff ff ff ff ff 04 00 00 ....P...........
0000000000dbfe40 f4 fd db 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000dbfe50 e4 06 00 00 dc 0c 00 00 - 54 08 00 00 b8 08 00 00 ........T.......
0000000000dbfe60 ac 04 00 00 58 02 00 00 - 80 02 00 00 84 02 00 00 ....X...........

*----> Scarico dello stato per l'id del thread 0x414 <----*

eax=00126110 ebx=00004e20 ecx=000eb4a8 edx=10000001 esi=0129fd68 edi=77d191a3
eip=7c91eb94 esp=0129fcf8 ebp=0129fd14 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\stobject.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0129fd14 761e1513 0129fd68 00000000 00000000 ntdll!KiFastSystemCallRet
0129fd8c 761e3746 761e0000 00000000 000100c6 stobject+0x1513
0129ffb4 7c80b50b 00000000 00000000 00000000 stobject!DllCanUnloadNow+0x1fa4
0129ffec 00000000 761e36f7 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000129fcf8 9b 91 d1 77 ce 91 d1 77 - 68 fd 29 01 00 00 00 00 ...w...wh.).....
000000000129fd08 00 00 00 00 00 00 00 00 - 00 00 00 00 8c fd 29 01 ..............).
000000000129fd18 13 15 1e 76 68 fd 29 01 - 00 00 00 00 00 00 00 00 ...vh.).........
000000000129fd28 00 00 00 00 00 00 00 00 - 00 00 1e 76 00 00 00 00 ...........v....
000000000129fd38 30 00 00 00 00 40 00 00 - 21 13 1e 76 00 00 00 00 0....@..!..v....
000000000129fd48 1e 00 00 00 00 00 1e 76 - b7 00 10 00 11 00 01 00 .......v........
000000000129fd58 10 00 00 00 00 00 00 00 - f4 31 1e 76 00 00 00 00 .........1.v....
000000000129fd68 d0 00 01 00 05 04 00 00 - 01 00 00 00 be 00 00 00 ................
000000000129fd78 57 d3 6e 00 2a 01 00 00 - 2e 01 00 00 00 00 00 00 W.n.*...........
000000000129fd88 00 00 00 00 b4 ff 29 01 - 46 37 1e 76 00 00 1e 76 ......).F7.v...v
000000000129fd98 00 00 00 00 c6 00 01 00 - 01 00 00 00 00 00 00 00 ................
000000000129fda8 47 00 3a 00 5c 00 57 00 - 49 00 4e 00 44 00 4f 00 G.:.\.W.I.N.D.O.
000000000129fdb8 57 00 53 00 5c 00 73 00 - 79 00 73 00 74 00 65 00 W.S.\.s.y.s.t.e.
000000000129fdc8 6d 00 33 00 32 00 5c 00 - 73 00 74 00 6f 00 62 00 m.3.2.\.s.t.o.b.
000000000129fdd8 6a 00 65 00 63 00 74 00 - 2e 00 64 00 6c 00 6c 00 j.e.c.t...d.l.l.
000000000129fde8 00 00 81 7c 1b 00 00 00 - 00 02 00 00 fc ff 29 01 ...|..........).
000000000129fdf8 23 00 00 00 56 08 81 7c - a9 3b 36 b2 08 c8 3d e1 #...V..|.;6...=.
000000000129fe08 80 39 fc 81 23 00 00 00 - a0 92 c0 81 98 92 c0 81 .9..#...........
000000000129fe18 d8 a2 07 00 94 a6 07 00 - 1c 3b 36 b2 e2 79 56 80 .........;6..yV.
000000000129fe28 c4 a3 07 00 c0 92 c0 81 - 00 00 00 00 08 c8 3d e1 ..............=.

*----> Scarico dello stato per l'id del thread 0x6b0 <----*

eax=00000001 ebx=00edfef8 ecx=00edfed0 edx=7c91eb94 esi=00000000 edi=7ffd7000
eip=7c91eb94 esp=00edfed0 ebp=00edff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
00edff6c 7c809c86 00000002 00edffa4 00000000 ntdll!KiFastSystemCallRet
00edff88 72c9312a 00000002 00edffa4 00000000 kernel32!WaitForMultipleObjects+0x18
00edffb4 7c80b50b 00000000 00000000 020a0014 wdmaud!midMessage+0x348
00edffec 00000000 72c930e8 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000edfed0 ab e9 91 7c f2 94 80 7c - 02 00 00 00 f8 fe ed 00 ...|...|........
0000000000edfee0 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000edfef0 00 00 00 00 00 00 00 00 - b8 04 00 00 80 03 00 00 ................
0000000000edff00 14 ff ed 00 00 26 80 7c - 30 25 80 7c 60 b9 13 00 .....&.|0%.|`...
0000000000edff10 36 8f 83 7c 14 00 00 00 - 14 00 00 00 01 00 00 00 6..|............
0000000000edff20 20 e0 11 00 00 00 00 00 - 00 00 00 00 b8 2e 11 00 ...............
0000000000edff30 00 70 fd 7f 00 60 fd 7f - 00 70 fd 7f 00 60 fd 7f .p...`...p...`..
0000000000edff40 08 ff ed 00 00 00 00 00 - f8 fe ed 00 f3 99 83 7c ...............|
0000000000edff50 02 00 00 00 ec fe ed 00 - 00 26 80 7c dc ff ed 00 .........&.|....
0000000000edff60 f3 99 83 7c 90 95 80 7c - 00 00 00 00 88 ff ed 00 ...|...|........
0000000000edff70 86 9c 80 7c 02 00 00 00 - a4 ff ed 00 00 00 00 00 ...|............
0000000000edff80 ff ff ff ff 00 00 00 00 - b4 ff ed 00 2a 31 c9 72 ............*1.r
0000000000edff90 02 00 00 00 a4 ff ed 00 - 00 00 00 00 ff ff ff ff ................
0000000000edffa0 14 00 0a 02 b8 04 00 00 - 80 03 00 00 02 00 00 00 ................
0000000000edffb0 00 00 06 00 ec ff ed 00 - 0b b5 80 7c 00 00 00 00 ...........|....
0000000000edffc0 00 00 00 00 14 00 0a 02 - 00 00 00 00 00 60 fd 7f .............`..
0000000000edffd0 00 46 fc 81 c0 ff ed 00 - 30 ca a9 81 ff ff ff ff .F......0.......
0000000000edffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
0000000000edfff0 00 00 00 00 e8 30 c9 72 - 00 00 00 00 00 00 00 00 .....0.r........
0000000000ee0000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x190 <----*

eax=0000bd46 ebx=000003b4 ecx=0000c112 edx=00001822 esi=00f6ff98 edi=77d3ea45
eip=7c91eb94 esp=00f6ff54 ebp=00f6ff78 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\WINMM.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00f6ff78 76b04e3d 00f6ff98 00000000 00000000 ntdll!KiFastSystemCallRet
00f6ffb4 7c80b50b 000003b4 00000200 0000002b WINMM!PlaySoundW+0x7e6
00f6ffec 00000000 76b04dd6 000003b4 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000f6ff54 9b 91 d1 77 85 ea d3 77 - 98 ff f6 00 00 00 00 00 ...w...w........
0000000000f6ff64 00 00 00 00 00 00 00 00 - b4 03 00 00 45 ea d3 77 ............E..w
0000000000f6ff74 00 00 00 00 b4 ff f6 00 - 3d 4e b0 76 98 ff f6 00 ........=N.v....
0000000000f6ff84 00 00 00 00 00 00 00 00 - 00 00 00 00 00 02 00 00 ................
0000000000f6ff94 2b 00 00 00 52 01 04 00 - 19 02 00 00 07 00 00 00 +...R...........
0000000000f6ffa4 00 00 00 00 27 4a 6e 00 - 36 02 00 00 ec 01 00 00 ....'Jn.6.......
0000000000f6ffb4 ec ff f6 00 0b b5 80 7c - b4 03 00 00 00 02 00 00 .......|........
0000000000f6ffc4 2b 00 00 00 b4 03 00 00 - 00 50 fd 7f 00 46 fc 81 +........P...F..
0000000000f6ffd4 c0 ff f6 00 d8 91 a8 81 - ff ff ff ff f3 99 83 7c ...............|
0000000000f6ffe4 18 b5 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00 ...|............
0000000000f6fff4 d6 4d b0 76 b4 03 00 00 - 00 00 00 00 41 63 74 78 .M.v........Actx
0000000000f70004 20 00 00 00 01 00 00 00 - 3c 19 00 00 7c 00 00 00 .......<...|...
0000000000f70014 00 00 00 00 20 00 00 00 - 00 00 00 00 14 00 00 00 .... ...........
0000000000f70024 01 00 00 00 03 00 00 00 - 34 00 00 00 bc 00 00 00 ........4.......
0000000000f70034 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000f70044 00 00 00 00 00 00 00 00 - 02 00 00 00 00 00 00 00 ................
0000000000f70054 00 00 00 00 00 00 00 00 - 78 01 00 00 58 01 00 00 ........x...X...
0000000000f70064 00 00 00 00 cd ea ce 32 - d0 02 00 00 42 00 00 00 .......2....B...
0000000000f70074 14 03 00 00 02 03 00 00 - 10 00 00 00 03 00 00 00 ................
0000000000f70084 8c 00 00 00 02 00 00 00 - 01 00 00 00 bc 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0xd7c <----*

eax=0195fde4 ebx=00000000 ecx=00102564 edx=00090608 esi=00093080 edi=00093124
eip=7c91eb94 esp=0195fe1c ebp=0195ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0195ff80 77da6c22 0195ffa8 77da6a3b 00093080 ntdll!KiFastSystemCallRet
0195ff88 77da6a3b 00093080 00000000 00fffc98 RPCRT4!I_RpcBCacheFree+0x5ea
0195ffa8 77da6c0a 000a66b8 0195ffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
0195ffb4 7c80b50b 0014d008 00000000 00fffc98 RPCRT4!I_RpcBCacheFree+0x5d2
0195ffec 00000000 77da6bf0 0014d008 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000195fe1c 99 e3 91 7c 03 67 da 77 - 0c 02 00 00 70 ff 95 01 ...|.g.w....p...
000000000195fe2c 00 00 00 00 78 36 ce 01 - 54 ff 95 01 00 00 00 00 ....x6..T.......
000000000195fe3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000195fe4c 00 00 00 00 02 00 00 00 - 00 00 ba 81 08 00 00 00 ................
000000000195fe5c a8 bd ba 81 a8 bd ba 81 - 58 cb 2e b2 0c 3f 4e 80 ........X....?N.
000000000195fe6c 18 00 00 00 02 2c f9 81 - 00 00 00 00 74 cb 2e b2 .....,......t...
000000000195fe7c 45 4c 4e 80 46 02 00 00 - 4e 3f 4e 80 d8 15 f8 81 ELN.F...N?N.....
000000000195fe8c 10 39 b2 81 f8 2c f9 81 - 88 cb 2e b2 8b 66 84 f8 .9...,.......f..
000000000195fe9c 74 39 b2 81 00 00 00 00 - 00 00 00 00 9c cb 2e b2 t9..............
000000000195feac 2a bf f7 b2 70 39 b2 81 - 00 00 00 00 a8 28 f9 81 *...p9.......(..
000000000195febc c4 cb 2e b2 9a c1 2c f8 - b8 49 e4 81 10 39 b2 81 ......,..I...9..
000000000195fecc a9 c1 2c f8 d8 28 f9 81 - a8 28 f9 81 00 00 00 00 ..,..(...(......
000000000195fedc d8 15 f8 81 00 00 00 00 - dc cb 2e b2 46 02 00 00 ............F...
000000000195feec 6c c9 2c f8 dc cb 2e b2 - 00 00 00 00 51 24 0e f8 l.,.........Q$..
000000000195fefc f8 cb 2e b2 5d 99 0e f8 - 00 fc 0e f8 50 c3 ee 81 ....].......P...
000000000195ff0c 08 10 f8 81 44 7f 79 81 - 20 cc 2e b2 46 02 00 00 ....D.y. ...F...
000000000195ff1c 6a c8 4d 80 14 7f 79 81 - a8 7d 79 81 dc 7d 79 81 j.M...y..}y..}y.
000000000195ff2c 00 00 00 00 80 ff 95 01 - 99 66 da 77 4c ff 95 01 .........f.wL...
000000000195ff3c a9 66 da 77 ed 10 91 7c - 58 50 0d 00 08 d0 14 00 .f.w...|XP......
000000000195ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......

*----> Scarico dello stato per l'id del thread 0x818 <----*

eax=00000003 ebx=00000000 ecx=00093080 edx=00006c02 esi=00093080 edi=00093124
eip=7c91eb94 esp=019dfe1c ebp=019dff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
019dff80 77da6c22 019dffa8 77da6a3b 00093080 ntdll!KiFastSystemCallRet
019dff88 77da6a3b 00093080 00000000 0150fc98 RPCRT4!I_RpcBCacheFree+0x5ea
019dffa8 77da6c0a 000a66b8 019dffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
019dffb4 7c80b50b 0014ccc8 00000000 0150fc98 RPCRT4!I_RpcBCacheFree+0x5d2
019dffec 00000000 77da6bf0 0014ccc8 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
00000000019dfe1c 99 e3 91 7c 03 67 da 77 - 0c 02 00 00 70 ff 9d 01 ...|.g.w....p...
00000000019dfe2c 00 00 00 00 88 6a 0e 00 - 4c ff 9d 01 18 92 81 81 .....j..L.......
00000000019dfe3c 00 d0 fd 7f fc 07 30 c0 - 74 ff 1f c0 85 03 00 00 ......0.t.......
00000000019dfe4c 00 00 00 00 02 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000019dfe5c 07 0a 00 00 04 3c 24 b2 - 0e c1 4e 80 fc 07 30 c0 .....<$...N...0.
00000000019dfe6c 17 00 00 00 86 bf 4e 80 - 00 d0 fd 7f 00 00 00 00 ......N.........
00000000019dfe7c 00 00 00 00 70 b4 b9 81 - 20 90 81 81 01 90 81 81 ....p... .......
00000000019dfe8c 00 00 00 00 74 ff 1f c0 - 78 c7 94 81 20 c0 85 81 ....t...x... ...
00000000019dfe9c 01 c0 85 81 00 00 00 00 - 68 ff 1f c0 00 9a 98 81 ........h.......
00000000019dfeac a0 1d 8e 81 01 1e 8e 81 - 00 00 00 00 70 ff 1f c0 ............p...
00000000019dfebc 5c 3b 24 b2 46 02 00 00 - 4e 3f 4e 80 05 00 00 00 \;$.F...N?N.....
00000000019dfecc 00 d0 fd 7f 70 3a 12 e1 - 60 5b 03 e1 02 00 00 00 ....p:..`[......
00000000019dfedc fe ff f8 00 00 a0 fd 7f - 20 10 9f 81 01 00 00 00 ........ .......
00000000019dfeec d0 db df 81 01 00 00 00 - 50 20 ff 81 98 02 f0 e1 ........P ......
00000000019dfefc 02 00 00 00 20 3c 24 b2 - 00 47 fc 81 38 b0 54 80 .... <$..G..8.T.
00000000019dff0c 70 b4 b9 81 bc a1 86 81 - 20 3c 24 b2 46 02 00 00 p....... <$.F...
00000000019dff1c 6a c8 4d 80 8c a1 86 81 - 20 a0 86 81 54 a0 86 81 j.M..... ...T...
00000000019dff2c e0 3c 24 b2 80 ff 9d 01 - 99 66 da 77 4c ff 9d 01 .<$......f.wL...
00000000019dff3c a9 66 da 77 ed 10 91 7c - 30 f9 cd 01 c8 cc 14 00 .f.w...|0.......
00000000019dff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......

*----> Scarico dello stato per l'id del thread 0xc54 <----*

eax=02c00047 ebx=00000000 ecx=02c0de7c edx=01130000 esi=7c98c0d8 edi=00000000
eip=7c91eb94 esp=02c0fe40 ebp=02c0fec8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
02c0fec8 7c91104b 0198c0d8 7c929148 7c98c0d8 ntdll!KiFastSystemCallRet
02c0ff3c 7c80cce7 7c98c3a0 7c98c380 00000000 ntdll!RtlEnterCriticalSection+0x46
02c0ff74 7c80c939 00000000 02c0ffb4 7c920b63 kernel32!ExitThread+0x3e
02c0ff80 7c920b63 00000000 02a4e40c 02a4e40c kernel32!IsBadHugeWritePtr+0x1d
02c0ffb4 7c80b50b 00000000 02a4e40c 02a4e40c ntdll!wcsncpy+0xd4
02c0ffec 00000000 7c920760 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000002c0fe40 c0 e9 91 7c 1b 90 92 7c - b0 02 00 00 00 00 00 00 ...|...|........
0000000002c0fe50 00 00 00 00 00 70 fd 7f - 00 b0 fa 7f 00 00 00 00 .....p..........
0000000002c0fe60 78 fe c0 02 1f 46 4c 77 - 78 fe c0 02 00 00 00 00 x....FLwx.......
0000000002c0fe70 c8 05 92 7c e8 4f 14 00 - 44 ff c0 02 51 05 92 7c ...|.O..D...Q..|
0000000002c0fe80 18 07 09 00 6d 05 92 7c - 80 c3 98 7c f0 4f 14 00 ....m..|...|.O..
0000000002c0fe90 00 00 00 00 00 00 00 00 - 32 1f f3 75 88 8e e9 77 ........2..u...w
0000000002c0fea0 e1 1d f3 75 00 00 f3 75 - c8 03 10 00 01 00 00 00 ...u...u........
0000000002c0feb0 00 00 00 00 ec fd c0 02 - 10 00 00 00 30 ff c0 02 ............0...
0000000002c0fec0 00 00 00 00 b0 02 00 00 - 3c ff c0 02 4b 10 91 7c ........<...K..|
0000000002c0fed0 d8 c0 98 01 48 91 92 7c - d8 c0 98 7c 00 00 00 00 ....H..|...|....
0000000002c0fee0 00 b0 fa 7f 00 00 00 00 - 00 00 f3 75 a8 fa d2 01 ...........u....
0000000002c0fef0 00 b0 fa 7f 40 ff c0 02 - 57 76 93 7c 10 ff c0 02 ....@...Wv.|....
0000000002c0ff00 53 75 93 7c a0 c3 98 7c - f0 4f 14 00 00 00 09 00 Su.|...|.O......
0000000002c0ff10 14 00 00 00 01 00 00 00 - 00 70 fd 7f 00 00 00 00 .........p......
0000000002c0ff20 10 00 00 00 dc fe c0 02 - 3c e0 91 7c 64 ff c0 02 ........<..|d...
0000000002c0ff30 18 ee 91 7c 68 91 92 7c - ff ff ff ff 74 ff c0 02 ...|h..|....t...
0000000002c0ff40 e7 cc 80 7c a0 c3 98 7c - 80 c3 98 7c 00 00 00 00 ...|...|...|....
0000000002c0ff50 00 00 00 00 00 b0 fa 7f - 00 00 00 00 44 ff c0 02 ............D...
0000000002c0ff60 a0 c3 98 7c dc ff c0 02 - f3 99 83 7c 10 cd 80 7c ...|.......|...|
0000000002c0ff70 ff ff ff ff 80 ff c0 02 - 39 c9 80 7c 00 00 00 00 ........9..|....

*----> Scarico dello stato per l'id del thread 0xe18 <----*

eax=00bc0000 ebx=00ffbbd0 ecx=00001000 edx=7c91eb94 esi=00000d28 edi=00000000
eip=7c91eb94 esp=00ffbbb4 ebp=00ffbebc iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00ffbebc 7c975714 00ffc05c 00ffc330 019f415b ntdll!KiFastSystemCallRet
00ffbffc 7c9761a1 00ffc05c 019e0000 c0000005 ntdll!RtlTraceDatabaseAdd+0x1b9
00ffc334 7c95ea5f 019f415b fffffffe fffffffe ntdll!RtlUnhandledExceptionFilter+0xb2
00ffc388 7c94783a 019f415b 019e0000 00ffc41c ntdll!RtlInitializeSListHead+0x15a4f
00ffc404 7c91eafa 00000000 00ffc438 00ffc41c ntdll!LdrAddRefDll+0x221
00ffc70c 00000000 10015804 00000001 00ffc748 ntdll!KiUserExceptionDispatcher+0xe

*----> Scarico Raw Stack <----*
0000000000ffbbb4 ab e9 91 7c d5 33 86 7c - 02 00 00 00 ec bc ff 00 ...|.3.|........
0000000000ffbbc4 01 00 00 00 01 00 00 00 - 00 00 00 00 47 00 3a 00 ............G.:.
0000000000ffbbd4 5c 00 57 00 49 00 4e 00 - 44 00 4f 00 57 00 53 00 \.W.I.N.D.O.W.S.
0000000000ffbbe4 5c 00 73 00 79 00 73 00 - 74 00 65 00 6d 00 33 00 \.s.y.s.t.e.m.3.
0000000000ffbbf4 32 00 5c 00 64 00 72 00 - 77 00 74 00 73 00 6e 00 2.\.d.r.w.t.s.n.
0000000000ffbc04 33 00 32 00 20 00 2d 00 - 70 00 20 00 31 00 36 00 3.2. .-.p. .1.6.
0000000000ffbc14 38 00 38 00 20 00 2d 00 - 65 00 20 00 33 00 33 00 8.8. .-.e. .3.3.
0000000000ffbc24 36 00 38 00 20 00 2d 00 - 67 00 00 00 00 00 00 00 6.8. .-.g.......
0000000000ffbc34 2e 00 00 00 00 00 00 00 - 00 00 00 00 bc be ff 00 ................
0000000000ffbc44 0f 32 86 7c 05 00 00 00 - bc be ff 00 41 32 86 7c .2.|........A2.|
0000000000ffbc54 69 32 86 7c 00 00 00 00 - 00 00 00 00 5c c0 ff 00 i2.|........\...
0000000000ffbc64 44 00 00 00 00 00 00 00 - 78 34 86 7c 00 00 00 00 D.......x4.|....
0000000000ffbc74 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ffbc84 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ffbc94 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ffbca4 00 00 00 00 00 c0 fd 7f - d8 c0 98 7c 00 00 00 00 ...........|....
0000000000ffbcb4 00 00 00 00 00 c0 fd 7f - 00 00 00 00 00 00 00 00 ................
0000000000ffbcc4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ffbcd4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000ffbce4 00 00 00 00 00 00 00 00 - 28 0d 00 00 2c 0d 00 00 ........(...,...

*----> Scarico dello stato per l'id del thread 0xb80 <----*

eax=00e81010 ebx=0155fde8 ecx=00df0760 edx=00000002 esi=00000000 edi=7ffd7000
eip=7c91eb94 esp=0155fdc0 ebp=0155fe5c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\DUSER.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\msvcrt.dll -
ChildEBP RetAddr Args to Child
0155fe5c 77d1bbfe 00000002 0155fe84 00000000 ntdll!KiFastSystemCallRet
0155feb8 6c6e4b92 00000001 0155feec ffffffff USER32!SetWindowTextW+0x120
0155fed8 6c6e4ddc 000004ff ffffffff 00000001 DUSER+0x34b92
0155ff0c 6c6de394 0155ff4c 00000000 00000000 DUSER+0x34ddc
0155ff2c 6c6da6f1 0155ff4c 00000000 00000000 DUSER!GetMessageExA+0x44
0155ff80 77c0a3b0 00000000 7c920000 7c9231dc DUSER!DUserStopAnimation+0xa505
0155ffb4 7c80b50b 02280528 7c920000 7c9231dc msvcrt!endthreadex+0xa9
0155ffec 00000000 77c0a341 02280528 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000155fdc0 ab e9 91 7c f2 94 80 7c - 02 00 00 00 e8 fd 55 01 ...|...|......U.
000000000155fdd0 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000155fde0 02 00 00 00 04 00 00 00 - f0 06 00 00 e0 0c 00 00 ................
000000000155fdf0 e3 0c 01 68 c0 00 00 00 - 70 00 00 00 00 20 e8 00 ...h....p.... ..
000000000155fe00 40 fe 55 01 b1 a2 6c 6c - 14 00 00 00 01 00 00 00 @.U...ll........
000000000155fe10 00 00 00 00 00 00 00 00 - 10 00 00 00 00 20 e8 00 ............. ..
000000000155fe20 01 00 04 00 00 00 00 00 - 00 70 fd 7f 00 40 fd 7f .........p...@..
000000000155fe30 a4 ff 55 01 00 00 00 00 - e8 fd 55 01 ff ff ff ff ..U.......U.....
000000000155fe40 02 00 00 00 dc fd 55 01 - 00 20 e8 00 a4 ff 55 01 ......U.. ....U.
000000000155fe50 f3 99 83 7c 90 95 80 7c - 00 00 00 00 b8 fe 55 01 ...|...|......U.
000000000155fe60 fe bb d1 77 02 00 00 00 - 84 fe 55 01 00 00 00 00 ...w......U.....
000000000155fe70 ff ff ff ff 00 00 00 00 - 40 b7 d0 01 01 00 00 00 ........@.......
000000000155fe80 4c ff 55 01 f0 06 00 00 - e0 0c 00 00 8e 72 6e 6c L.U..........rnl
000000000155fe90 ff ff ff ff a9 72 6e 6c - 05 50 6e 00 c0 36 d4 01 .....rnl.Pn..6..
000000000155fea0 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000155feb0 00 40 fd 7f e0 0c 00 00 - d8 fe 55 01 92 4b 6e 6c .@........U..Knl
000000000155fec0 01 00 00 00 ec fe 55 01 - ff ff ff ff ff 04 00 00 ......U.........
000000000155fed0 84 fe 55 01 ff ff ff ff - 0c ff 55 01 dc 4d 6e 6c ..U.......U..Mnl
000000000155fee0 ff 04 00 00 ff ff ff ff - 01 00 00 00 f0 06 00 00 ................
000000000155fef0 00 00 00 00 00 00 00 00 - 28 05 28 02 01 00 00 00 ........(.(.....

*----> Scarico dello stato per l'id del thread 0xcc0 <----*

eax=80004005 ebx=00000000 ecx=000007b2 edx=00030608 esi=7c98c380 edi=7c98c3a0
eip=7c91eb94 esp=01f0ff70 ebp=01f0ffb4 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000286

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
01f0ffb4 7c80b50b 00000000 00ffde6c 00ffde6c ntdll!KiFastSystemCallRet
01f0ffec 00000000 7c920760 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000001f0ff70 1b e3 91 7c 9d 07 92 7c - 04 02 00 00 ac ff f0 01 ...|...|........
0000000001f0ff80 b0 ff f0 01 98 ff f0 01 - a0 ff f0 01 6c de ff 00 ............l...
0000000001f0ff90 6c de ff 00 00 00 00 00 - 00 00 00 00 a8 fa d2 01 l...............
0000000001f0ffa0 00 7c 28 e8 ff ff ff ff - 00 00 00 00 69 75 93 7c .|(.........iu.|
0000000001f0ffb0 80 6b 10 00 ec ff f0 01 - 0b b5 80 7c 00 00 00 00 .k.........|....
0000000001f0ffc0 6c de ff 00 6c de ff 00 - 00 00 00 00 00 b0 fd 7f l...l...........
0000000001f0ffd0 00 46 fc 81 c0 ff f0 01 - 98 44 b4 81 ff ff ff ff .F.......D......
0000000001f0ffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
0000000001f0fff0 00 00 00 00 60 07 92 7c - 00 00 00 00 00 00 00 00 ....`..|........
0000000001f10000 4d 5a 90 00 03 00 00 00 - 04 00 00 00 ff ff 00 00 MZ..............
0000000001f10010 b8 00 00 00 00 00 00 00 - 40 00 00 00 00 00 00 00 ........@.......
0000000001f10020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001f10030 00 00 00 00 00 00 00 00 - 00 00 00 00 b8 00 00 00 ................
0000000001f10040 0e 1f ba 0e 00 b4 09 cd - 21 b8 01 4c cd 21 54 68 ........!..L.!Th
0000000001f10050 69 73 20 70 72 6f 67 72 - 61 6d 20 63 61 6e 6e 6f is program canno
0000000001f10060 74 20 62 65 20 72 75 6e - 20 69 6e 20 44 4f 53 20 t be run in DOS
0000000001f10070 6d 6f 64 65 2e 0d 0d 0a - 24 00 00 00 00 00 00 00 mode....$.......
0000000001f10080 73 6a bc da 37 0b d2 89 - 37 0b d2 89 37 0b d2 89 sj..7...7...7...
0000000001f10090 cd 28 ed 89 36 0b d2 89 - a0 28 97 89 36 0b d2 89 .(..6....(..6...
0000000001f100a0 cd 28 ef 89 36 0b d2 89 - 52 69 63 68 37 0b d2 89 .(..6...Rich7...

*----> Scarico dello stato per l'id del thread 0x1a4 <----*

eax=00000000 ebx=00000000 ecx=00000002 edx=00000003 esi=7c98c0d8 edi=00000000
eip=7c91eb94 esp=00bcfc10 ebp=00bcfc98 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00bcfc98 7c91104b 0198c0d8 7c937357 7c98c0d8 ntdll!KiFastSystemCallRet
00bcfd18 7c91eac7 00bcfd2c 7c910000 00000000 ntdll!RtlEnterCriticalSection+0x46
00000000 00000000 00000000 00000000 00000000 ntdll!KiUserApcDispatcher+0x7

*----> Scarico Raw Stack <----*
0000000000bcfc10 c0 e9 91 7c 1b 90 92 7c - b0 02 00 00 00 00 00 00 ...|...|........
0000000000bcfc20 00 00 00 00 00 e0 fa 7f - 00 70 fd 7f 00 00 00 00 .........p......
0000000000bcfc30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000bcfc40 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000bcfc50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000bcfc60 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000bcfc70 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000bcfc80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000bcfc90 00 00 00 00 b0 02 00 00 - 18 fd bc 00 4b 10 91 7c ............K..|
0000000000bcfca0 d8 c0 98 01 57 73 93 7c - d8 c0 98 7c 2c fd bc 00 ....Ws.|...|,...
0000000000bcfcb0 04 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000bcfcc0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000bcfcd0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000bcfce0 00 00 00 00 00 00 00 00 - 00 e0 fa 7f 00 00 00 00 ................
0000000000bcfcf0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000bcfd00 ac fc bc 00 00 00 00 00 - ff ff ff ff 18 ee 91 7c ...............|
0000000000bcfd10 00 8e 92 7c ff ff ff ff - 00 00 00 00 c7 ea 91 7c ...|...........|
0000000000bcfd20 2c fd bc 00 00 00 91 7c - 00 00 00 00 17 00 01 00 ,......|........
0000000000bcfd30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000bcfd40 00 00 00 00 00 00 00 00 - 38 d2 7a 81 01 00 00 00 ........8.z.....



Exception dell'applicazione:
App: G:\WINDOWS\explorer.exe (pid=2268)
Ora: 21/12/2004 @ 18:13:51.431
Numero exception: 80000007
()

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
472 smss.exe
540 csrss.exe
564 winlogon.exe
608 services.exe
620 lsass.exe
776 Ati2evxx.exe
788 svchost.exe
848 svchost.exe
888 svchost.exe
932 svchost.exe
1000 svchost.exe
1332 spoolsv.exe
1340 Ati2evxx.exe
1560 lvhidsvc.exe
1920 wscntfy.exe
1992 Mixer.exe
2028 GSICON.EXE
2040 dslagent.exe
172 jusched.exe
184 RecSche.exe
204 atiptaxx.exe
188 alg.exe
236 ctfmon.exe
256 MsnMsgr.Exe
260 msmsgs.exe
2528 drwtsn32.exe
2788 explorer.exe

*----> Elenco moduli <----*
(0000000000fa0000 - 0000000000fcb000: G:\Programmi\WinRAR\rarext.dll
(0000000001000000 - 00000000010ff000: G:\WINDOWS\explorer.exe
(00000000014a0000 - 00000000014b3000: G:\WINDOWS\system32\browselc.dll
(0000000001f50000 - 0000000001f68000: G:\WINDOWS\system32\odbcint.dll
(000000000ffd0000 - 000000000fff8000: G:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 0000000010026000: G:\Programmi\DivX\Dr.DivX\EncodeDivXExt.dll
(0000000020000000 - 00000000202d5000: G:\WINDOWS\system32\xpsp2res.dll
(000000004ebd0000 - 000000004ed73000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
(00000000596b0000 - 000000005987a000: G:\WINDOWS\AppPatch\AcGenral.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\UxTheme.dll
(000000005ba40000 - 000000005bab2000: G:\WINDOWS\system32\themeui.dll
(000000005bc70000 - 000000005bcc4000: G:\WINDOWS\system32\NETAPI32.dll
(000000005cf90000 - 000000005cfb6000: G:\WINDOWS\system32\ShimEng.dll
(000000005d4d0000 - 000000005d567000: G:\WINDOWS\system32\comctl32.dll
(0000000060060000 - 0000000060093000: G:\WINDOWS\system32\msutb.dll
(000000006c6b0000 - 000000006c6fd000: G:\WINDOWS\system32\DUSER.dll
(0000000071a20000 - 0000000071a28000: G:\WINDOWS\system32\WS2HELP.dll
(0000000071a30000 - 0000000071a47000: G:\WINDOWS\system32\WS2_32.dll
(0000000071a50000 - 0000000071a5a000: G:\WINDOWS\system32\WSOCK32.dll
(0000000071aa0000 - 0000000071ab2000: G:\WINDOWS\system32\MPR.dll
(0000000071b80000 - 0000000071b93000: G:\WINDOWS\system32\SAMLIB.dll
(0000000071ba0000 - 0000000071bae000: G:\WINDOWS\System32\ntlanman.dll
(0000000071c10000 - 0000000071c17000: G:\WINDOWS\System32\NETRAP.dll
(0000000071c20000 - 0000000071c60000: G:\WINDOWS\System32\NETUI1.dll
(0000000071c60000 - 0000000071c77000: G:\WINDOWS\System32\NETUI0.dll
(0000000071cd0000 - 0000000071cec000: G:\WINDOWS\system32\actxprxy.dll
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(00000000745e0000 - 000000007461d000: G:\WINDOWS\system32\ODBC32.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(0000000074a60000 - 0000000074a68000: G:\WINDOWS\system32\POWRPROF.dll
(0000000074a80000 - 0000000074a8a000: G:\WINDOWS\system32\BatMeter.dll
(0000000074ac0000 - 0000000074b07000: G:\WINDOWS\system32\webcheck.dll
(0000000075920000 - 0000000075a18000: G:\WINDOWS\system32\MSGINA.dll
(0000000075d50000 - 0000000075de1000: G:\WINDOWS\system32\MLANG.dll
(0000000075f10000 - 0000000075f17000: G:\WINDOWS\System32\drprov.dll
(0000000075f20000 - 0000000075f29000: G:\WINDOWS\System32\davclnt.dll
(0000000075f30000 - 000000007602c000: G:\WINDOWS\system32\BROWSEUI.dll
(00000000761e0000 - 0000000076201000: G:\WINDOWS\system32\stobject.dll
(0000000076310000 - 0000000076320000: G:\WINDOWS\system32\WINSTA.dll
(0000000076330000 - 0000000076335000: G:\WINDOWS\system32\MSIMG32.dll
(0000000076360000 - 00000000763aa000: G:\WINDOWS\system32\comdlg32.dll
(00000000763b0000 - 0000000076559000: G:\WINDOWS\system32\NETSHELL.dll
(00000000765b0000 - 00000000765cd000: G:\WINDOWS\System32\CSCDLL.dll
(0000000076890000 - 0000000076913000: G:\WINDOWS\system32\CRYPTUI.dll
(0000000076940000 - 0000000076948000: G:\WINDOWS\system32\LINKINFO.dll
(0000000076950000 - 0000000076976000: G:\WINDOWS\system32\ntshrui.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076ae0000 - 0000000076af1000: G:\WINDOWS\system32\ATL.DLL
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bc0000 - 0000000076bee000: G:\WINDOWS\system32\credui.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d20000 - 0000000076d39000: G:\WINDOWS\system32\iphlpapi.dll
(0000000076e40000 - 0000000076e4e000: G:\WINDOWS\system32\rtutils.dll
(0000000076f10000 - 0000000076f18000: G:\WINDOWS\system32\WTSAPI32.dll
(0000000076f20000 - 0000000076f4d000: G:\WINDOWS\system32\WLDAP32.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: G:\WINDOWS\system32\WININET.dll
(0000000077230000 - 00000000772ce000: G:\WINDOWS\system32\urlmon.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(0000000077730000 - 000000007789c000: G:\WINDOWS\system32\SHDOCVW.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\SETUPAPI.dll
(00000000779f0000 - 0000000077a45000: G:\WINDOWS\System32\cscui.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\appHelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f10000 - 0000000077f21000: G:\WINDOWS\system32\Secur32.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll
(000000007d1f0000 - 000000007d4a2000: G:\WINDOWS\system32\msi.dll

*----> Scarico dello stato per l'id del thread 0x8e0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
*** ERROR: Module load completed but symbols could not be loaded for G:\WINDOWS\explorer.exe
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
FAULT ->GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x8e4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x8ec <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x8f0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x8f4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x8fc <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x904 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x914 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x91c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x5f0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x178 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x974 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x970 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x6d8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x220 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x5f8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x9e4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005


Exception dell'applicazione:
App: G:\WINDOWS\explorer.exe (pid=3740)
Ora: 21/12/2004 @ 18:19:20.654
Numero exception: 80000007
()

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
472 smss.exe
540 csrss.exe
564 winlogon.exe
608 services.exe
620 lsass.exe
776 Ati2evxx.exe
788 svchost.exe
848 svchost.exe
888 svchost.exe
932 svchost.exe
1000 svchost.exe
1332 spoolsv.exe
1340 Ati2evxx.exe
1560 lvhidsvc.exe
1920 wscntfy.exe
1992 Mixer.exe
2028 GSICON.EXE
2040 dslagent.exe
172 jusched.exe
184 RecSche.exe
204 atiptaxx.exe
188 alg.exe
236 ctfmon.exe
256 MsnMsgr.Exe
260 msmsgs.exe
2900 FIREFOX.EXE
2084 NVE3014.exe
1348 wuauclt.exe
2712 setup.exe
440 wmiprvse.exe
3388 drwtsn32.exe
1132 explorer.exe
344 imapi.exe

*----> Elenco moduli <----*
(0000000001000000 - 00000000010ff000: G:\WINDOWS\explorer.exe
(0000000001780000 - 0000000001793000: G:\WINDOWS\system32\browselc.dll
(0000000001a60000 - 0000000001a78000: G:\WINDOWS\system32\odbcint.dll
(0000000001aa0000 - 0000000001acb000: G:\Programmi\WinRAR\rarext.dll
(0000000001de0000 - 0000000001e2f000: G:\WINDOWS\system32\DRMClien.DLL
(0000000001fe0000 - 000000000206c000: G:\WINDOWS\system32\shdoclc.dll
(0000000010000000 - 0000000010026000: G:\Programmi\DivX\Dr.DivX\EncodeDivXExt.dll
(0000000020000000 - 00000000202d5000: G:\WINDOWS\system32\xpsp2res.dll
(000000004b360000 - 000000004b389000: G:\WINDOWS\system32\wmidx.dll
(00000000596b0000 - 000000005987a000: G:\WINDOWS\AppPatch\AcGenral.DLL
(0000000059e10000 - 0000000059e4c000: G:\WINDOWS\system32\WMASF.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\UxTheme.dll
(000000005ba40000 - 000000005bab2000: G:\WINDOWS\system32\themeui.dll
(000000005bc70000 - 000000005bcc4000: G:\WINDOWS\system32\NETAPI32.dll
(000000005cef0000 - 000000005cf18000: G:\WINDOWS\system32\shmedia.dll
(000000005cf90000 - 000000005cfb6000: G:\WINDOWS\system32\ShimEng.dll
(000000005d4d0000 - 000000005d567000: G:\WINDOWS\system32\comctl32.dll
(0000000060060000 - 0000000060093000: G:\WINDOWS\system32\msutb.dll
(000000006c6b0000 - 000000006c6fd000: G:\WINDOWS\system32\DUSER.dll
(0000000071a20000 - 0000000071a28000: G:\WINDOWS\system32\WS2HELP.dll
(0000000071a30000 - 0000000071a47000: G:\WINDOWS\system32\WS2_32.dll
(0000000071a50000 - 0000000071a5a000: G:\WINDOWS\system32\WSOCK32.dll
(0000000071aa0000 - 0000000071ab2000: G:\WINDOWS\system32\MPR.dll
(0000000071b80000 - 0000000071b93000: G:\WINDOWS\system32\SAMLIB.dll
(0000000071ba0000 - 0000000071bae000: G:\WINDOWS\System32\ntlanman.dll
(0000000071c10000 - 0000000071c17000: G:\WINDOWS\System32\NETRAP.dll
(0000000071c20000 - 0000000071c60000: G:\WINDOWS\System32\NETUI1.dll
(0000000071c60000 - 0000000071c77000: G:\WINDOWS\System32\NETUI0.dll
(0000000071cd0000 - 0000000071cec000: G:\WINDOWS\system32\actxprxy.dll
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(0000000073620000 - 0000000073627000: G:\WINDOWS\system32\msdmo.dll
(0000000073ac0000 - 0000000073ad7000: G:\WINDOWS\system32\AVIFIL32.dll
(0000000073ce0000 - 0000000073cf3000: G:\WINDOWS\system32\shgina.dll
(00000000745e0000 - 000000007461d000: G:\WINDOWS\system32\ODBC32.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(0000000074a60000 - 0000000074a68000: G:\WINDOWS\system32\POWRPROF.dll
(0000000074a80000 - 0000000074a8a000: G:\WINDOWS\system32\BatMeter.dll
(0000000074ac0000 - 0000000074b07000: G:\WINDOWS\system32\webcheck.dll
(0000000075920000 - 0000000075a18000: G:\WINDOWS\system32\MSGINA.dll
(0000000075d50000 - 0000000075de1000: G:\WINDOWS\system32\MLANG.dll
(0000000075df0000 - 0000000075e11000: G:\WINDOWS\system32\MSVFW32.dll
(0000000075f10000 - 0000000075f17000: G:\WINDOWS\System32\drprov.dll
(0000000075f20000 - 0000000075f29000: G:\WINDOWS\System32\davclnt.dll
(0000000075f30000 - 000000007602c000: G:\WINDOWS\system32\BROWSEUI.dll
(00000000761e0000 - 0000000076201000: G:\WINDOWS\system32\stobject.dll
(0000000076310000 - 0000000076320000: G:\WINDOWS\system32\WINSTA.dll
(0000000076330000 - 0000000076335000: G:\WINDOWS\system32\MSIMG32.dll
(0000000076360000 - 00000000763aa000: G:\WINDOWS\system32\comdlg32.dll
(00000000763b0000 - 0000000076559000: G:\WINDOWS\system32\NETSHELL.dll
(00000000765b0000 - 00000000765cd000: G:\WINDOWS\System32\CSCDLL.dll
(0000000076890000 - 0000000076913000: G:\WINDOWS\system32\CRYPTUI.dll
(0000000076940000 - 0000000076948000: G:\WINDOWS\system32\LINKINFO.dll
(0000000076950000 - 0000000076976000: G:\WINDOWS\system32\ntshrui.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076ae0000 - 0000000076af1000: G:\WINDOWS\system32\ATL.DLL
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bc0000 - 0000000076bee000: G:\WINDOWS\system32\credui.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d20000 - 0000000076d39000: G:\WINDOWS\system32\iphlpapi.dll
(0000000076e40000 - 0000000076e4e000: G:\WINDOWS\system32\rtutils.dll
(0000000076e50000 - 0000000076e62000: G:\WINDOWS\system32\rasman.dll
(0000000076e70000 - 0000000076e9f000: G:\WINDOWS\system32\TAPI32.dll
(0000000076ea0000 - 0000000076edc000: G:\WINDOWS\system32\RASAPI32.dll
(0000000076f10000 - 0000000076f18000: G:\WINDOWS\system32\WTSAPI32.dll
(0000000076f20000 - 0000000076f4d000: G:\WINDOWS\system32\WLDAP32.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: G:\WINDOWS\system32\WININET.dll
(0000000077230000 - 00000000772ce000: G:\WINDOWS\system32\urlmon.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(0000000077730000 - 000000007789c000: G:\WINDOWS\system32\SHDOCVW.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\SETUPAPI.dll
(00000000779f0000 - 0000000077a45000: G:\WINDOWS\System32\cscui.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\appHelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077c40000 - 0000000077c63000: G:\WINDOWS\system32\msv1_0.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f10000 - 0000000077f21000: G:\WINDOWS\system32\Secur32.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll
(000000007d1f0000 - 000000007d4a2000: G:\WINDOWS\system32\msi.dll
(000000007d7a0000 - 000000007d9aa000: G:\WINDOWS\system32\wmvcore.dll

*----> Scarico dello stato per l'id del thread 0xea4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
*** ERROR: Module load completed but symbols could not be loaded for G:\WINDOWS\explorer.exe
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
FAULT ->GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xea8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xea0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xeac <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xeb0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xeb4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xeb8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xebc <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xecc <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xed0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xccc <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xb64 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xe80 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xf1c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xf70 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xf7c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xdc0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x2c8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xfe8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x120 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005


Exception dell'applicazione:
App: G:\Programmi\Windows Media Player\wmplayer.exe (pid=3768)
Ora: 21/12/2004 @ 20:32:43.892
Numero exception: c0000005 (access violation)

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
472 smss.exe
540 csrss.exe
564 winlogon.exe
608 services.exe
620 lsass.exe
776 Ati2evxx.exe
788 svchost.exe
848 svchost.exe
888 svchost.exe
932 svchost.exe
1000 svchost.exe
1332 spoolsv.exe
1340 Ati2evxx.exe
1560 lvhidsvc.exe
1920 wscntfy.exe
1992 Mixer.exe
2028 GSICON.EXE
2040 dslagent.exe
172 jusched.exe
184 RecSche.exe
204 atiptaxx.exe
188 alg.exe
236 ctfmon.exe
256 MsnMsgr.Exe
260 msmsgs.exe
4000 emule.exe
2348 winampa.exe
3548 explorer.exe
2072 nero.exe
2056 imapi.exe
3768 wmplayer.exe
3460 drwtsn32.exe

*----> Elenco moduli <----*
(0000000000c40000 - 0000000000f15000: G:\WINDOWS\system32\xpsp2res.dll
(0000000001000000 - 0000000001012000: G:\Programmi\Windows Media Player\wmplayer.exe
(0000000001bd0000 - 0000000001c1f000: G:\WINDOWS\system32\DRMClien.DLL
(000000000ffd0000 - 000000000fff8000: G:\WINDOWS\system32\rsaenh.dll
(000000001d1c0000 - 000000001d1e2000: G:\WINDOWS\system32\HTMPG2VI.ax
(0000000020000000 - 00000000202d6000: G:\WINDOWS\system32\wmploc.dll
(000000004b360000 - 000000004b389000: G:\WINDOWS\system32\wmidx.dll
(000000004b5f0000 - 000000004ba99000: G:\WINDOWS\system32\wmp.dll
(000000004d530000 - 000000004d588000: G:\WINDOWS\system32\WINHTTP.dll
(00000000596b0000 - 000000005987a000: G:\WINDOWS\AppPatch\AcGenral.DLL
(0000000059e10000 - 0000000059e4c000: G:\WINDOWS\system32\WMASF.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\UxTheme.dll
(000000005bc70000 - 000000005bcc4000: G:\WINDOWS\system32\NETAPI32.dll
(000000005cf90000 - 000000005cfb6000: G:\WINDOWS\system32\ShimEng.dll
(000000005e3c0000 - 000000005e420000: G:\WINDOWS\system32\qdvd.dll
(0000000062220000 - 0000000062230000: G:\WINDOWS\system32\mcicda.dll
(0000000066750000 - 00000000667a8000: G:\WINDOWS\system32\hnetcfg.dll
(00000000719d0000 - 0000000071a10000: G:\WINDOWS\system32\mswsock.dll
(0000000071a10000 - 0000000071a18000: G:\WINDOWS\System32\wshtcpip.dll
(0000000071a20000 - 0000000071a28000: G:\WINDOWS\system32\WS2HELP.dll
(0000000071a30000 - 0000000071a47000: G:\WINDOWS\system32\WS2_32.dll
(0000000071a50000 - 0000000071a5a000: G:\WINDOWS\system32\WSOCK32.dll
(0000000072240000 - 0000000072245000: G:\WINDOWS\system32\SensApi.dll
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(0000000073620000 - 0000000073627000: G:\WINDOWS\system32\msdmo.dll
(00000000736d0000 - 0000000073719000: G:\WINDOWS\system32\DDRAW.dll
(00000000738b0000 - 0000000073980000: G:\WINDOWS\system32\D3DIM700.DLL
(0000000073b30000 - 0000000073b36000: G:\WINDOWS\system32\DCIMAN32.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(00000000747a0000 - 000000007490e000: G:\WINDOWS\system32\quartz.dll
(0000000075c00000 - 0000000075c6e000: G:\WINDOWS\system32\jscript.dll
(0000000075d50000 - 0000000075de1000: G:\WINDOWS\system32\mlang.dll
(0000000075df0000 - 0000000075e11000: G:\WINDOWS\system32\MSVFW32.dll
(0000000075e40000 - 0000000075ef0000: G:\WINDOWS\system32\SXS.DLL
(0000000076330000 - 0000000076335000: G:\WINDOWS\system32\msimg32.dll
(0000000076590000 - 00000000765a3000: G:\WINDOWS\system32\cryptnet.dll
(0000000076600000 - 0000000076611000: G:\WINDOWS\system32\devenum.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d20000 - 0000000076d39000: G:\WINDOWS\system32\iphlpapi.dll
(0000000076e40000 - 0000000076e4e000: G:\WINDOWS\system32\rtutils.dll
(0000000076e50000 - 0000000076e62000: G:\WINDOWS\system32\rasman.dll
(0000000076e70000 - 0000000076e9f000: G:\WINDOWS\system32\TAPI32.dll
(0000000076ea0000 - 0000000076edc000: G:\WINDOWS\system32\RASAPI32.DLL
(0000000076ee0000 - 0000000076f07000: G:\WINDOWS\system32\DNSAPI.dll
(0000000076f20000 - 0000000076f4d000: G:\WINDOWS\system32\WLDAP32.dll
(0000000076f70000 - 0000000076f78000: G:\WINDOWS\System32\winrnr.dll
(0000000076f80000 - 0000000076f86000: G:\WINDOWS\system32\rasadhlp.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: G:\WINDOWS\system32\wininet.dll
(0000000077230000 - 00000000772ce000: G:\WINDOWS\system32\urlmon.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\SETUPAPI.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\Apphelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077c40000 - 0000000077c63000: G:\WINDOWS\system32\msv1_0.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f10000 - 0000000077f21000: G:\WINDOWS\system32\Secur32.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll
(000000007d7a0000 - 000000007d9aa000: G:\WINDOWS\system32\wmvcore.dll

*----> Scarico dello stato per l'id del thread 0x6c0 <----*

eax=00000051 ebx=00000000 ecx=00000007 edx=00000015 esi=0007d174 edi=00000000
eip=77118d4a esp=0007d0d8 ebp=0007d114 iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010293

*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\OLEAUT32.dll -
funzione: OLEAUT32!VarDateFromUdate
77118d35 40 inc eax
77118d36 41 inc ecx
77118d37 41 inc ecx
77118d38 33d2 xor edx,edx
77118d3a ebed jmp OLEAUT32!VarDateFromUdate+0x357 (77118d29)
77118d3c 397d08 cmp [ebp+0x8],edi
77118d3f 0f85b1940000 jne OLEAUT32!VarDecCmp+0x2386 (771221f6)
77118d45 5f pop edi
77118d46 5d pop ebp
77118d47 c20400 ret 0x4
77118d4a dd4608 fld qword ptr [esi+0x8] ds:0023:0007d17c=40e2b8db64c9c414
77118d4d 8d45e8 lea eax,[ebp-0x18]
77118d50 50 push eax
77118d51 8b45f4 mov eax,[ebp-0xc]
77118d54 83e008 and eax,0x8
77118d57 0b45fc or eax,[ebp-0x4]
77118d5a 0bc7 or eax,edi
77118d5c 50 push eax
77118d5d ff7510 push dword ptr [ebp+0x10]
77118d60 51 push ecx
77118d61 51 push ecx

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\wmp.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\USER32.dll -
*** ERROR: Module load completed but symbols could not be loaded for G:\Programmi\Windows Media Player\wmplayer.exe
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007d114 770f66f4 0007d164 00000007 00000400 OLEAUT32!VarDateFromUdate+0x378
0007d130 4b746e59 0007d164 0007d174 00000000 OLEAUT32!VariantChangeType+0x1b
0007d1a8 4b74679e 01d5bc58 4b746808 00000000 wmp!Ordinal3000+0x52e34
0007d1d0 4b7468af 00bef3f8 00000410 00000000 wmp!Ordinal3000+0x52779
0007d2ac 4b628f08 00c0fa24 0007d2cc 00c122d0 wmp!Ordinal3000+0x5288a
0007d304 4b628dce 00000000 00000001 004a0304 wmp!Ordinal3996+0x38f08
0007d318 4b628d5a 00000000 00000001 00000001 wmp!Ordinal3996+0x38dce
0007d330 4b627ac7 01d5bb28 0000c135 00000000 wmp!Ordinal3996+0x38d5a
0007d34c 4b65d7b6 00b5e0e4 004a0304 0000c135 wmp!Ordinal3996+0x37ac7
0007d374 4b65d762 00b5e0e4 004a0304 0000c135 wmp!Ordinal3996+0x6d7b6
0007d3a0 77d18709 004a0304 00000000 00000000 wmp!Ordinal3996+0x6d762
0007d3cc 77d187eb 4b65d723 004a0304 0000c135 USER32!GetDC+0x72
0007d434 77d189a5 00000000 4b65d723 004a0304 USER32!GetDC+0x154
0007d494 77d189e8 0007d4f4 00000000 0007d4c4 USER32!GetWindowLongW+0x127
0007d4a4 4b5f246e 0007d4f4 00000000 000206b8 USER32!DispatchMessageW+0xf
0007d4c4 4b5f2380 00000200 4ba003c8 00000000 wmp!Ordinal3996+0x246e
0007fecc 4b6f40d1 000206b8 00000003 4b5f0000 wmp!Ordinal3996+0x2380
0007fef4 010012d7 01000000 000206b8 00000001 wmp!Ordinal3000+0xac
0007ffc0 7c816d4f 0069006c 00fce36c 7ffdc000 wmplayer+0x12d7
0007fff0 00000000 010010c5 00000000 78746341 kernel32!RegisterWaitForInputIdle+0x49

*----> Scarico Raw Stack <----*
000000000007d0d8 58 bc d5 01 00 00 00 00 - 00 00 00 00 00 00 c9 64 X..............d
000000000007d0e8 db b8 e2 40 38 d1 07 00 - 5b cf 11 77 14 d1 07 00 ...@8...[..w....
000000000007d0f8 28 d1 07 00 00 00 00 00 - 09 04 00 00 00 00 00 80 (...............
000000000007d108 00 00 00 00 00 00 00 00 - 00 00 00 00 30 d1 07 00 ............0...
000000000007d118 f4 66 0f 77 64 d1 07 00 - 07 00 00 00 00 04 00 00 .f.wd...........
000000000007d128 00 00 00 00 08 00 00 00 - a8 d1 07 00 59 6e 74 4b ............YntK
000000000007d138 64 d1 07 00 74 d1 07 00 - 00 00 00 00 08 00 00 00 d...t...........
000000000007d148 00 00 00 00 00 00 00 00 - 00 00 00 00 d4 07 0c 00 ................
000000000007d158 02 00 15 00 14 00 20 00 - 2b 00 7c 03 00 00 00 00 ...... .+.|.....
000000000007d168 00 00 00 00 00 00 00 00 - 00 00 00 00 07 00 00 00 ................
000000000007d178 00 00 00 00 14 c4 c9 64 - db b8 e2 40 14 c4 c9 64 .......d...@...d
000000000007d188 db b8 e2 40 00 00 00 00 - 00 00 00 00 f8 bc d5 01 ...@............
000000000007d198 78 1d d5 01 c8 1d d5 01 - f8 bc d5 01 60 c4 d5 01 x...........`...
000000000007d1a8 d0 d1 07 00 9e 67 74 4b - 58 bc d5 01 08 68 74 4b .....gtKX....htK
000000000007d1b8 00 00 00 00 00 00 00 00 - 18 fa c0 00 00 00 00 00 ................
000000000007d1c8 d0 af d5 01 58 bc d5 01 - ac d2 07 00 af 68 74 4b ....X........htK
000000000007d1d8 f8 f3 be 00 10 04 00 00 - 00 00 00 00 01 00 00 00 ................
000000000007d1e8 00 00 00 00 01 00 00 00 - 00 00 00 00 90 9a cd 01 ................
000000000007d1f8 24 fa c0 00 70 9b bc 00 - ed 10 91 7c 00 00 00 00 $...p......|....
000000000007d208 00 00 00 00 04 00 07 00 - 4c 59 13 00 00 00 00 00 ........LY......

*----> Scarico dello stato per l'id del thread 0xa50 <----*

eax=77f69981 ebx=00b3fed0 ecx=00000006 edx=00000000 esi=00000000 edi=7ffdc000
eip=7c91eb94 esp=00b3fea8 ebp=00b3ff44 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\ntdll.dll -
funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\ADVAPI32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00b3ff44 77f69b26 00000002 00b3ff6c 00000000 ntdll!KiFastSystemCallRet
00b3ffb4 7c80b50b 00000000 7c9240bb 00000000 ADVAPI32!RegDeleteKeyW+0x2a2
00b3ffec 00000000 77f69981 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000b3fea8 ab e9 91 7c f2 94 80 7c - 02 00 00 00 d0 fe b3 00 ...|...|........
0000000000b3feb8 01 00 00 00 01 00 00 00 - 04 ff b3 00 b0 30 a0 00 .............0..
0000000000b3fec8 40 65 fb 77 00 10 00 00 - 34 01 00 00 40 01 00 00 @e.w....4...@...
0000000000b3fed8 c0 fe b3 00 8d 38 4e 80 - dc ff b3 00 f3 99 83 7c .....8N........|
0000000000b3fee8 c8 0c 81 7c 00 10 00 00 - 14 00 00 00 01 00 00 00 ...|............
0000000000b3fef8 00 00 00 00 00 00 00 00 - 10 00 00 00 00 a2 2f 4d ............../M
0000000000b3ff08 ff ff ff ff 00 10 00 00 - 00 c0 fd 7f 00 e0 fd 7f ................
0000000000b3ff18 dc ff b3 00 04 ff b3 00 - d0 fe b3 00 06 00 00 00 ................
0000000000b3ff28 02 00 00 00 c4 fe b3 00 - 06 00 00 00 dc ff b3 00 ................
0000000000b3ff38 f3 99 83 7c 90 95 80 7c - 00 00 00 00 b4 ff b3 00 ...|...|........
0000000000b3ff48 26 9b f6 77 02 00 00 00 - 6c ff b3 00 00 00 00 00 &..w....l.......
0000000000b3ff58 e0 93 04 00 01 00 00 00 - bb 40 92 7c 00 00 00 00 .........@.|....
0000000000b3ff68 00 00 00 00 34 01 00 00 - 40 01 00 00 00 10 00 00 ....4...@.......
0000000000b3ff78 b0 30 a0 00 00 00 00 00 - 00 10 00 00 b8 40 a0 00 .0...........@..
0000000000b3ff88 a0 66 fb 77 20 00 00 00 - 80 66 fb 77 00 10 00 00 .f.w ....f.w....
0000000000b3ff98 00 00 00 00 a0 66 fb 77 - b0 30 a0 00 80 66 fb 77 .....f.w.0...f.w
0000000000b3ffa8 e5 03 00 00 00 10 00 00 - b8 40 a0 00 ec ff b3 00 .........@......
0000000000b3ffb8 0b b5 80 7c 00 00 00 00 - bb 40 92 7c 00 00 00 00 ...|.....@.|....
0000000000b3ffc8 00 00 00 00 00 e0 fd 7f - 00 46 fc 81 c0 ff b3 00 .........F......
0000000000b3ffd8 90 9f d1 81 ff ff ff ff - f3 99 83 7c 18 b5 80 7c ...........|...|

*----> Scarico dello stato per l'id del thread 0x54c <----*

eax=00f5ff54 ebx=00000000 ecx=000a3188 edx=7c91eb94 esi=000a3188 edi=00000100
eip=7c91eb94 esp=00f5fe1c ebp=00f5ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00f5ff80 77da6c22 00f5ffa8 77da6a3b 000a3188 ntdll!KiFastSystemCallRet
00f5ff88 77da6a3b 000a3188 00000000 0007b894 RPCRT4!I_RpcBCacheFree+0x5ea
00f5ffa8 77da6c0a 000cc0f0 00f5ffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
00f5ffb4 7c80b50b 000def78 00000000 0007b894 RPCRT4!I_RpcBCacheFree+0x5d2
00f5ffec 00000000 77da6bf0 000def78 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000f5fe1c 99 e3 91 7c 03 67 da 77 - 64 01 00 00 70 ff f5 00 ...|.g.wd...p...
0000000000f5fe2c 00 00 00 00 a8 58 0e 00 - 54 ff f5 00 b0 cc 57 80 .....X..T.....W.
0000000000f5fe3c cb cc 57 80 64 fd 33 b8 - 78 f4 07 00 27 cc 57 80 ..W.d.3.x...'.W.
0000000000f5fe4c 20 fc 33 b8 04 00 00 00 - 98 73 61 81 48 fd 33 b8 .3......sa.H.3.
0000000000f5fe5c 70 c5 56 80 28 f9 07 00 - 04 00 00 00 00 c6 56 80 p.V.(.........V.
0000000000f5fe6c 64 fd 33 b8 28 f9 07 00 - 05 00 00 00 00 00 00 00 d.3.(...........
0000000000f5fe7c 00 00 00 00 5c fb 33 b8 - 46 02 00 00 4e 3f 4e 80 ....\.3.F...N?N.
0000000000f5fe8c 05 00 00 00 05 00 00 00 - f0 c5 0e e1 60 5b 03 e1 ............`[..
0000000000f5fe9c 02 00 00 00 fe ff f8 00 - 00 67 f9 e1 f0 c5 0e e1 .........g......
0000000000f5feac b0 35 56 00 00 00 00 00 - 00 00 00 00 5c 00 52 00 .5V.........\.R.
0000000000f5febc ff ff ff ff 28 fc 33 b8 - 6c 38 56 80 49 03 00 00 ....(.3.l8V.I...
0000000000f5fecc 34 00 00 c0 18 83 db 81 - 78 e4 00 e1 9a 00 00 00 4.......x.......
0000000000f5fedc 4c 01 00 00 00 30 50 c0 - 04 39 50 c0 01 60 e4 77 L....0P..9P..`.w
0000000000f5feec 00 00 00 00 fc fb 33 b8 - e0 78 4e 80 9a 00 00 00 ......3..xN.....
0000000000f5fefc 4c 01 00 00 21 a2 e2 77 - 01 00 00 00 9c 36 50 c0 L...!..w.....6P.
0000000000f5ff0c 88 35 e0 81 ec 15 51 81 - 20 fc 33 b8 46 02 00 00 .5....Q. .3.F...
0000000000f5ff1c 6a c8 4d 80 bc 15 51 81 - 50 14 51 81 84 14 51 81 j.M...Q.P.Q...Q.
0000000000f5ff2c 88 35 e0 81 80 ff f5 00 - 99 66 da 77 4c ff f5 00 .5.......f.wL...
0000000000f5ff3c a9 66 da 77 ed 10 91 7c - 48 e7 0d 00 78 ef 0d 00 .f.w...|H...x...
0000000000f5ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......

*----> Scarico dello stato per l'id del thread 0xd40 <----*

eax=774c319a ebx=00007530 ecx=7ffdc000 edx=00000000 esi=00000000 edi=00f9ff50
eip=7c91eb94 esp=00f9ff20 ebp=00f9ff78 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\ole32.dll -
ChildEBP RetAddr Args to Child
00f9ff78 7c802451 0000ea60 00000000 00f9ffb4 ntdll!KiFastSystemCallRet
00f9ff88 774c2fcb 0000ea60 000ddce8 774c314d kernel32!Sleep+0xf
00f9ffb4 7c80b50b 000ddce8 7465536c 73655248 ole32!StringFromGUID2+0x2d1
00f9ffec 00000000 774c319a 000ddce8 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000f9ff20 5c d8 91 7c ed 23 80 7c - 00 00 00 00 50 ff f9 00 \..|.#.|....P...
0000000000f9ff30 50 25 80 7c f0 56 5d 77 - 30 75 00 00 14 00 00 00 P%.|.V]w0u......
0000000000f9ff40 01 00 00 00 00 00 00 00 - 00 00 00 00 10 00 00 00 ................
0000000000f9ff50 00 ba 3c dc ff ff ff ff - 08 4f 4b 77 50 ff f9 00 ..<......OKwP...
0000000000f9ff60 30 ff f9 00 98 86 0a 00 - dc ff f9 00 f3 99 83 7c 0..............|
0000000000f9ff70 58 24 80 7c 00 00 00 00 - 88 ff f9 00 51 24 80 7c X$.|........Q$.|
0000000000f9ff80 60 ea 00 00 00 00 00 00 - b4 ff f9 00 cb 2f 4c 77 `............/Lw
0000000000f9ff90 60 ea 00 00 e8 dc 0d 00 - 4d 31 4c 77 00 00 00 00 `.......M1Lw....
0000000000f9ffa0 6c 53 65 74 e8 dc 0d 00 - 00 00 4b 77 b5 31 4c 77 lSet......Kw.1Lw
0000000000f9ffb0 48 52 65 73 ec ff f9 00 - 0b b5 80 7c e8 dc 0d 00 HRes.......|....
0000000000f9ffc0 6c 53 65 74 48 52 65 73 - e8 dc 0d 00 00 b0 fd 7f lSetHRes........
0000000000f9ffd0 00 46 fc 81 c0 ff f9 00 - 00 ea ed 81 ff ff ff ff .F..............
0000000000f9ffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
0000000000f9fff0 00 00 00 00 9a 31 4c 77 - e8 dc 0d 00 00 00 00 00 .....1Lw........
0000000000fa0000 c8 00 00 00 63 01 00 00 - ff ee ff ee 02 10 00 00 ....c...........
0000000000fa0010 00 00 00 00 00 fe 00 00 - 00 00 10 00 00 20 00 00 ............. ..
0000000000fa0020 00 02 00 00 00 20 00 00 - f0 00 00 00 ff ef fd 7f ..... ..........
0000000000fa0030 09 00 08 06 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000fa0040 00 00 00 00 98 05 fa 00 - 0f 00 00 00 f8 ff ff ff ................
0000000000fa0050 50 00 fa 00 50 00 fa 00 - 40 06 fa 00 00 00 00 00 P...P...@.......

*----> Scarico dello stato per l'id del thread 0x4cc <----*

eax=00000000 ebx=016efef0 ecx=00000000 edx=00000208 esi=00000000 edi=7ffdc000
eip=7c91eb94 esp=016efec8 ebp=016eff64 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
016eff64 7c809c86 00000002 016effa4 00000000 ntdll!KiFastSystemCallRet
016eff80 4b712bbd 00000002 016effa4 00000000 kernel32!WaitForMultipleObjects+0x18
016effac 4b714176 016effec 7c80b50b 00bd1948 wmp!Ordinal3000+0x1eb98
016effb4 7c80b50b 00bd1948 000a0000 0007ccac wmp!Ordinal3000+0x20151
016effec 00000000 4b714169 00bd1948 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
00000000016efec8 ab e9 91 7c f2 94 80 7c - 02 00 00 00 f0 fe 6e 01 ...|...|......n.
00000000016efed8 01 00 00 00 00 00 00 00 - 00 00 00 00 6e 9c 80 7c ............n..|
00000000016efee8 48 19 bd 00 28 9c 80 7c - c4 01 00 00 c8 01 00 00 H...(..|........
00000000016efef8 12 3c b1 76 80 19 bd 00 - 28 9c 80 7c 14 08 00 00 .<.v....(..|....
00000000016eff08 00 00 00 00 00 00 00 00 - 14 00 00 00 01 00 00 00 ................
00000000016eff18 00 00 00 00 00 00 00 00 - 10 00 00 00 14 08 00 00 ................
00000000016eff28 12 01 00 00 5c ce 07 00 - 00 c0 fd 7f 00 a0 fd 7f ....\...........
00000000016eff38 28 9c 80 7c 00 00 00 00 - f0 fe 6e 01 00 00 00 00 (..|......n.....
00000000016eff48 02 00 00 00 e4 fe 6e 01 - 68 ff 6e 01 dc ff 6e 01 ......n.h.n...n.
00000000016eff58 f3 99 83 7c 90 95 80 7c - 00 00 00 00 80 ff 6e 01 ...|...|......n.
00000000016eff68 86 9c 80 7c 02 00 00 00 - a4 ff 6e 01 00 00 00 00 ...|......n.....
00000000016eff78 ff ff ff ff 00 00 00 00 - ac ff 6e 01 bd 2b 71 4b ..........n..+qK
00000000016eff88 02 00 00 00 a4 ff 6e 01 - 00 00 00 00 ff ff ff ff ......n.........
00000000016eff98 00 00 0a 00 ac cc 07 00 - 48 19 bd 00 c4 01 00 00 ........H.......
00000000016effa8 c8 01 00 00 b4 ff 6e 01 - 76 41 71 4b ec ff 6e 01 ......n.vAqK..n.
00000000016effb8 0b b5 80 7c 48 19 bd 00 - 00 00 0a 00 ac cc 07 00 ...|H...........
00000000016effc8 48 19 bd 00 00 a0 fd 7f - 00 46 fc 81 c0 ff 6e 01 H........F....n.
00000000016effd8 70 87 d4 81 ff ff ff ff - f3 99 83 7c 18 b5 80 7c p..........|...|
00000000016effe8 00 00 00 00 00 00 00 00 - 00 00 00 00 69 41 71 4b ............iAqK
00000000016efff8 48 19 bd 00 00 00 00 00 - 58 09 00 00 01 00 00 00 H.......X.......

*----> Scarico dello stato per l'id del thread 0x994 <----*

eax=72c930e8 ebx=0187fef8 ecx=00000072 edx=000fa398 esi=00000000 edi=7ffdc000
eip=7c91eb94 esp=0187fed0 ebp=0187ff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
0187ff6c 7c809c86 00000002 0187ffa4 00000000 ntdll!KiFastSystemCallRet
0187ff88 72c9312a 00000002 0187ffa4 00000000 kernel32!WaitForMultipleObjects+0x18
0187ffb4 7c80b50b 00000000 00000000 000a0000 wdmaud!midMessage+0x348
0187ffec 00000000 72c930e8 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000187fed0 ab e9 91 7c f2 94 80 7c - 02 00 00 00 f8 fe 87 01 ...|...|........
000000000187fee0 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000187fef0 00 00 00 00 00 00 00 00 - 10 02 00 00 ec 01 00 00 ................
000000000187ff00 01 00 00 00 7c 54 32 e1 - 80 bc 35 b8 3c bc 35 b8 ....|T2...5.<.5.
000000000187ff10 74 04 cf 81 20 bc 35 b8 - 14 00 00 00 01 00 00 00 t... .5.........
000000000187ff20 00 00 00 00 00 00 00 00 - 10 00 00 00 38 bc 35 b8 ............8.5.
000000000187ff30 c8 c1 56 80 87 f6 57 80 - 00 c0 fd 7f 00 90 fd 7f ..V...W.........
000000000187ff40 00 90 fd 7f 00 00 00 00 - f8 fe 87 01 05 00 00 00 ................
000000000187ff50 02 00 00 00 ec fe 87 01 - 00 00 00 00 dc ff 87 01 ................
000000000187ff60 f3 99 83 7c 90 95 80 7c - 00 00 00 00 88 ff 87 01 ...|...|........
000000000187ff70 86 9c 80 7c 02 00 00 00 - a4 ff 87 01 00 00 00 00 ...|............
000000000187ff80 ff ff ff ff 00 00 00 00 - b4 ff 87 01 2a 31 c9 72 ............*1.r
000000000187ff90 02 00 00 00 a4 ff 87 01 - 00 00 00 00 ff ff ff ff ................
000000000187ffa0 00 00 0a 00 10 02 00 00 - ec 01 00 00 00 00 00 00 ................
000000000187ffb0 dc e2 91 7c ec ff 87 01 - 0b b5 80 7c 00 00 00 00 ...|.......|....
000000000187ffc0 00 00 00 00 00 00 0a 00 - 00 00 00 00 00 90 fd 7f ................
000000000187ffd0 00 46 fc 81 c0 ff 87 01 - 70 87 d4 81 ff ff ff ff .F......p.......
000000000187ffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
000000000187fff0 00 00 00 00 e8 30 c9 72 - 00 00 00 00 00 00 00 00 .....0.r........
0000000001880000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x508 <----*

eax=5e3eda2c ebx=018bfe7c ecx=00000004 edx=010000e0 esi=00000000 edi=7ffdc000
eip=7c91eb94 esp=018bfe54 ebp=018bfef0 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\qdvd.dll -
ChildEBP RetAddr Args to Child
018bfef0 77d1bbfe 00000007 018bff18 00000000 ntdll!KiFastSystemCallRet
018bff4c 77d1bcad 00000006 018bff8c ffffffff USER32!SetWindowTextW+0x120
018bff68 5e40a638 00000006 018bff8c 00000000 USER32!MsgWaitForMultipleObjects+0x1f
018bffa4 5e3eda41 ffff0000 0000c1d5 018bffec qdvd+0x4a638
018bffb4 7c80b50b 00bf32f0 ffff0000 0000c1d5 qdvd+0x2da41
018bffec 00000000 5e3eda2c 00bf32f0 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
00000000018bfe54 ab e9 91 7c f2 94 80 7c - 07 00 00 00 7c fe 8b 01 ...|...|....|...
00000000018bfe64 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000018bfe74 07 00 00 00 00 00 00 00 - e8 02 00 00 ec 02 00 00 ................
00000000018bfe84 dc 02 00 00 d4 02 00 00 - e0 02 00 00 e4 02 00 00 ................
00000000018bfe94 f4 02 00 00 dc fe 8b 01 - 14 00 00 00 01 00 00 00 ................
00000000018bfea4 00 00 00 00 00 00 00 00 - 10 00 00 00 24 1a 92 7c ............$..|
00000000018bfeb4 80 c0 98 7c c7 86 4f 77 - 00 c0 fd 7f 00 80 fd 7f ...|..Ow........
00000000018bfec4 02 00 00 00 00 00 00 00 - 7c fe 8b 01 8d 88 4f 77 ........|.....Ow
00000000018bfed4 07 00 00 00 70 fe 8b 01 - c0 77 3c 5e dc ff 8b 01 ....p....w<^....
00000000018bfee4 f3 99 83 7c 90 95 80 7c - 00 00 00 00 4c ff 8b 01 ...|...|....L...
00000000018bfef4 fe bb d1 77 07 00 00 00 - 18 ff 8b 01 00 00 00 00 ...w............
00000000018bff04 ff ff ff ff 00 00 00 00 - 78 33 bf 00 f0 32 bf 00 ........x3...2..
00000000018bff14 f0 32 bf 00 e8 02 00 00 - ec 02 00 00 dc 02 00 00 .2..............
00000000018bff24 d4 02 00 00 e0 02 00 00 - e4 02 00 00 f4 02 00 00 ................
00000000018bff34 00 00 00 40 78 ff 8b 01 - 00 00 00 00 00 00 00 00 ...@x...........
00000000018bff44 00 80 fd 7f f4 02 00 00 - 68 ff 8b 01 ad bc d1 77 ........h......w
00000000018bff54 06 00 00 00 8c ff 8b 01 - ff ff ff ff ff 00 00 00 ................
00000000018bff64 18 ff 8b 01 a4 ff 8b 01 - 38 a6 40 5e 06 00 00 00 ........8.@^....
00000000018bff74 8c ff 8b 01 00 00 00 00 - ff ff ff ff ff 00 00 00 ................
00000000018bff84 00 00 ff ff 00 00 00 00 - e8 02 00 00 ec 02 00 00 ................

*----> Scarico dello stato per l'id del thread 0xe4c <----*

eax=00c0ee44 ebx=01b0feb8 ecx=00c0ee44 edx=00000080 esi=00000000 edi=7ffdc000
eip=7c91eb94 esp=01b0fe90 ebp=01b0ff2c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
01b0ff2c 7c809c86 00000002 00c00088 00000000 ntdll!KiFastSystemCallRet
01b0ff48 4b5f9dcd 00000002 00c00088 00000000 kernel32!WaitForMultipleObjects+0x18
01b0ffa8 4b6d9020 006d0075 01b0ffec 7c80b50b wmp!Ordinal3996+0x9dcd
01b0ffb4 7c80b50b 00c00078 0063006f 006d0075 wmp!DllGetClassObject+0x780ab
01b0ffec 00000000 4b6d8ffa 00c00078 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000001b0fe90 ab e9 91 7c f2 94 80 7c - 02 00 00 00 b8 fe b0 01 ...|...|........
0000000001b0fea0 01 00 00 00 00 00 00 00 - 00 00 00 00 1a 1d 00 00 ................
0000000001b0feb0 78 00 c0 00 00 00 00 00 - 44 03 00 00 48 03 00 00 x.......D...H...
0000000001b0fec0 b0 7b 16 a4 29 27 48 f8 - 74 b3 f8 81 30 33 f6 81 .{..)'H.t...03..
0000000001b0fed0 c8 7b 16 a4 8a 9a 00 00 - 14 00 00 00 01 00 00 00 .{..............
0000000001b0fee0 00 00 00 00 00 00 00 00 - 10 00 00 00 78 ff b0 01 ............x...
0000000001b0fef0 e2 7a 76 4b 6e 9c 5f 4b - 00 c0 fd 7f 00 70 fd 7f .zvKn._K.....p..
0000000001b0ff00 1c ff b0 01 00 00 00 00 - b8 fe b0 01 00 00 00 00 ................
0000000001b0ff10 02 00 00 00 ac fe b0 01 - 50 9c 5f 4b dc ff b0 01 ........P._K....
0000000001b0ff20 f3 99 83 7c 90 95 80 7c - 00 00 00 00 48 ff b0 01 ...|...|....H...
0000000001b0ff30 86 9c 80 7c 02 00 00 00 - 88 00 c0 00 00 00 00 00 ...|............
0000000001b0ff40 ff ff ff ff 00 00 00 00 - a8 ff b0 01 cd 9d 5f 4b .............._K
0000000001b0ff50 02 00 00 00 88 00 c0 00 - 00 00 00 00 ff ff ff ff ................
0000000001b0ff60 6f 00 63 00 78 00 c0 00 - 78 00 c0 00 1e 49 52 77 o.c.x...x....IRw
0000000001b0ff70 00 00 00 00 14 59 5d 77 - f4 e5 6b 4b e4 f2 85 00 .....Y]w..kK....
0000000001b0ff80 88 1a 00 00 00 00 00 00 - 48 03 bf 00 01 00 00 00 ........H.......
0000000001b0ff90 01 00 00 00 6f 00 63 00 - 01 00 00 00 00 00 00 00 ....o.c.........
0000000001b0ffa0 00 00 00 00 ff ff ff ff - b4 ff b0 01 20 90 6d 4b ............ .mK
0000000001b0ffb0 75 00 6d 00 ec ff b0 01 - 0b b5 80 7c 78 00 c0 00 u.m........|x...
0000000001b0ffc0 6f 00 63 00 75 00 6d 00 - 78 00 c0 00 00 70 fd 7f o.c.u.m.x....p..

*----> Scarico dello stato per l'id del thread 0xe14 <----*

eax=00155f78 ebx=01d5b818 ecx=01d5b810 edx=00000084 esi=00155ffc edi=1d1d7950
eip=1d1ccb01 esp=01c5f734 ebp=01c5f740 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202

*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\HTMPG2VI.ax -
funzione: HTMPG2VI
1d1ccaea 33c0 xor eax,eax
1d1ccaec c21800 ret 0x18
1d1ccaef 55 push ebp
1d1ccaf0 8bec mov ebp,esp
1d1ccaf2 51 push ecx
1d1ccaf3 8b4508 mov eax,[ebp+0x8]
1d1ccaf6 56 push esi
1d1ccaf7 57 push edi
1d1ccaf8 894dfc mov [ebp-0x4],ecx
1d1ccafb 8db084000000 lea esi,[eax+0x84]
FAULT ->1d1ccb01 f6460a20 test byte ptr [esi+0xa],0x20 ds:0023:00156006=08
1d1ccb05 0f8453010000 je HTMPG2VI+0xcc5e (1d1ccc5e)
1d1ccb0b 0fb64604 movzx eax,byte ptr [esi+0x4]
1d1ccb0f 0fb65605 movzx edx,byte ptr [esi+0x5]
1d1ccb13 c1e008 shl eax,0x8
1d1ccb16 03c2 add eax,edx
1d1ccb18 8b7d10 mov edi,[ebp+0x10]
1d1ccb1b 0fb65606 movzx edx,byte ptr [esi+0x6]
1d1ccb1f c1e008 shl eax,0x8
1d1ccb22 03c2 add eax,edx
1d1ccb24 8bd0 mov edx,eax

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
01c5f740 1d1cbfd2 00155f78 00000000 01d5b8f8 HTMPG2VI+0xcb01
00000000 00000000 00000000 00000000 00000000 HTMPG2VI+0xbfd2

*----> Scarico Raw Stack <----*
0000000001c5f734 50 79 1d 1d f8 b8 d5 01 - 10 b8 d5 01 00 00 00 00 Py..............
0000000001c5f744 d2 bf 1c 1d 78 5f 15 00 - 00 00 00 00 f8 b8 d5 01 ....x_..........
0000000001c5f754 18 05 19 02 e8 89 cd 01 - 00 00 00 00 b4 75 ce 01 .............u..
0000000001c5f764 b4 14 1d 1d 18 05 19 02 - f4 89 cd 01 e8 89 cd 01 ................
0000000001c5f774 c2 33 1d 1d 18 05 19 02 - f4 89 cd 01 a8 75 ce 01 .3...........u..
0000000001c5f784 b4 f7 c5 01 00 00 00 00 - dc ff c5 01 68 56 1d 1d ............hV..
0000000001c5f794 00 00 00 00 2d a1 3e 5e - 74 b8 d5 01 74 b8 d5 01 ....-.>^t...t...
0000000001c5f7a4 18 05 19 02 a8 75 ce 01 - b0 af d5 01 00 00 00 00 .....u..........
0000000001c5f7b4 d8 f7 c5 01 26 a2 3e 5e - f4 89 cd 01 18 05 19 02 ....&.>^........
0000000001c5f7c4 a8 75 ce 01 07 02 04 80 - f4 89 cd 01 a8 75 ce 01 .u...........u..
0000000001c5f7d4 01 00 00 00 04 f8 c5 01 - f8 a2 3e 5e f4 89 cd 01 ..........>^....
0000000001c5f7e4 00 00 00 00 18 05 19 02 - 01 00 00 00 08 5e c1 00 .............^..
0000000001c5f7f4 a8 75 ce 01 07 02 04 80 - 01 00 00 00 b0 af d5 01 .u..............
0000000001c5f804 1c f8 c5 01 67 c1 3e 5e - f4 89 cd 01 00 00 00 00 ....g.>^........
0000000001c5f814 08 5e c1 00 b4 75 ce 01 - 48 f8 c5 01 d0 d8 7c 74 .^...u..H.....|t
0000000001c5f824 bc 71 c3 00 f4 89 cd 01 - 00 00 00 00 f4 5e c1 00 .q...........^..
0000000001c5f834 08 5e c1 00 00 00 00 00 - 01 00 00 00 c6 ad 24 f7 .^............$.
0000000001c5f844 42 bd 60 41 68 f8 c5 01 - 51 1b 7d 74 b4 75 ce 01 B.`Ah...Q.}t.u..
0000000001c5f854 f4 89 cd 01 00 00 00 00 - 01 00 00 00 01 00 00 00 ................
0000000001c5f864 68 5b c1 00 88 f8 c5 01 - a2 38 41 5e a4 5e c1 00 h[.......8A^.^..

*----> Scarico dello stato per l'id del thread 0xcb8 <----*

eax=00c16284 ebx=00000000 ecx=748b4040 edx=7c91eb94 esi=01c9ff98 edi=748b463c
eip=7c91eb94 esp=01c9ff58 ebp=01c9ff74 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\quartz.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
01c9ff74 747feff9 01c9ff98 00000000 00000000 ntdll!KiFastSystemCallRet
01c9ffb4 7c80b50b 00000000 7c923288 00000000 quartz+0x5eff9
01c9ffec 00000000 747fefb2 000004a4 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000001c9ff58 9b 91 d1 77 ce 91 d1 77 - 98 ff c9 01 00 00 00 00 ...w...w........
0000000001c9ff68 00 00 00 00 00 00 00 00 - 00 00 00 00 b4 ff c9 01 ................
0000000001c9ff78 f9 ef 7f 74 98 ff c9 01 - 00 00 00 00 00 00 00 00 ...t............
0000000001c9ff88 00 00 00 00 88 32 92 7c - 00 00 00 00 a4 04 00 00 .....2.|........
0000000001c9ff98 00 00 00 00 00 04 00 00 - 14 db c5 01 00 00 00 00 ................
0000000001c9ffa8 19 de 85 00 9e 01 00 00 - a6 02 00 00 ec ff c9 01 ................
0000000001c9ffb8 0b b5 80 7c 00 00 00 00 - 88 32 92 7c 00 00 00 00 ...|.....2.|....
0000000001c9ffc8 a4 04 00 00 00 50 fd 7f - 00 46 fc 81 c0 ff c9 01 .....P...F......
0000000001c9ffd8 08 c7 dc 81 ff ff ff ff - f3 99 83 7c 18 b5 80 7c ...........|...|
0000000001c9ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 b2 ef 7f 74 ...............t
0000000001c9fff8 a4 04 00 00 00 00 00 00 - 08 00 00 00 00 01 00 02 ................
0000000001ca0008 ee ff ee ff 00 00 00 00 - 00 00 36 00 00 a0 13 00 ..........6.....
0000000001ca0018 00 00 ca 01 00 02 00 00 - 40 00 ca 01 00 00 ea 01 ........@.......
0000000001ca0028 3a 01 00 00 01 00 00 00 - b8 05 36 00 00 00 00 00 :.........6.....
0000000001ca0038 60 4d d6 01 00 00 00 00 - 02 04 08 00 11 01 0c 02 `M..............
0000000001ca0048 10 c7 c2 00 0b 00 07 00 - 30 2c b9 00 00 00 ca 01 ........0,......
0000000001ca0058 00 00 00 00 10 00 00 00 - 01 00 00 00 3e 34 35 fd ............>45.
0000000001ca0068 1e 00 00 00 94 00 ca 01 - 50 c8 c2 00 67 00 5f 00 ........P...g._.
0000000001ca0078 66 00 53 00 68 00 6f 00 - 77 00 43 00 61 00 70 00 f.S.h.o.w.C.a.p.
0000000001ca0088 74 00 69 00 6f 00 6e 00 - 73 00 00 00 0b 00 07 00 t.i.o.n.s.......

*----> Scarico dello stato per l'id del thread 0xe2c <----*

eax=00000000 ebx=0201fc38 ecx=01cd6988 edx=7c91eb94 esi=00000000 edi=7ffdc000
eip=7c91eb94 esp=0201fc10 ebp=0201fcac iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0201fcac 77d1bbfe 00000004 0201fcd4 00000000 ntdll!KiFastSystemCallRet
0201fd08 77d1bcad 00000003 0201fdcc ffffffff USER32!SetWindowTextW+0x120
0201fd24 74837e47 00000003 0201fdcc 00000000 USER32!MsgWaitForMultipleObjects+0x1f
0201ffac 74835fe1 0201ffec 7c80b50b 01cd6988 quartz+0x97e47
0201ffb4 7c80b50b 01cd6988 00070005 00000000 quartz+0x95fe1
0201ffec 00000000 74835fd4 01cd6988 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000201fc10 ab e9 91 7c f2 94 80 7c - 04 00 00 00 38 fc 01 02 ...|...|....8...
000000000201fc20 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000201fc30 04 00 00 00 00 00 00 00 - 0c 05 00 00 18 05 00 00 ................
000000000201fc40 24 05 00 00 34 05 00 00 - 22 95 80 7c 00 00 00 00 $...4..."..|....
000000000201fc50 30 f0 c3 00 2c fd 01 02 - 14 00 00 00 01 00 00 00 0...,...........
000000000201fc60 00 00 00 00 00 00 00 00 - 10 00 00 00 00 00 00 00 ................
000000000201fc70 00 00 00 00 00 00 00 00 - 00 c0 fd 7f 00 40 fd 7f .............@..
000000000201fc80 00 00 00 00 00 00 00 00 - 38 fc 01 02 48 fc 01 02 ........8...H...
000000000201fc90 04 00 00 00 2c fc 01 02 - 00 c0 fd 7f dc ff 01 02 ....,...........
000000000201fca0 f3 99 83 7c 90 95 80 7c - 00 00 00 00 08 fd 01 02 ...|...|........
000000000201fcb0 fe bb d1 77 04 00 00 00 - d4 fc 01 02 00 00 00 00 ...w............
000000000201fcc0 ff ff ff ff 00 00 00 00 - 00 00 00 00 03 00 00 00 ................
000000000201fcd0 88 69 cd 01 0c 05 00 00 - 18 05 00 00 24 05 00 00 .i..........$...
000000000201fce0 34 05 00 00 00 00 00 00 - 18 fd 01 02 6a 69 85 74 4...........ji.t
000000000201fcf0 02 00 00 00 0c fd 01 02 - 00 00 00 00 00 00 00 00 ................
000000000201fd00 00 40 fd 7f 34 05 00 00 - 24 fd 01 02 ad bc d1 77 .@..4...$......w
000000000201fd10 03 00 00 00 cc fd 01 02 - ff ff ff ff 08 00 00 00 ................
000000000201fd20 d4 fc 01 02 ac ff 01 02 - 47 7e 83 74 03 00 00 00 ........G~.t....
000000000201fd30 cc fd 01 02 00 00 00 00 - ff ff ff ff 08 00 00 00 ................
000000000201fd40 05 00 07 00 00 00 00 00 - 88 69 cd 01 b8 59 ee 81 .........i...Y..

*----> Scarico dello stato per l'id del thread 0x194 <----*

eax=7c93798d ebx=00000000 ecx=73260000 edx=7c9111a7 esi=73261331 edi=01c5c920
eip=7c91eb94 esp=0208ff9c ebp=0208ffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0208ffb4 7c80b50b 00000000 01c5c920 73261331 ntdll!KiFastSystemCallRet
0208ffec 00000000 7c93798d 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000208ff9c 5c d8 91 7c d4 79 93 7c - 01 00 00 00 ac ff 08 02 \..|.y.|........
000000000208ffac 00 00 00 00 00 00 00 80 - ec ff 08 02 0b b5 80 7c ...............|
000000000208ffbc 00 00 00 00 20 c9 c5 01 - 31 13 26 73 00 00 00 00 .... ...1.&s....
000000000208ffcc 00 f0 fa 7f 00 46 fc 81 - c0 ff 08 02 18 82 56 81 .....F........V.
000000000208ffdc ff ff ff ff f3 99 83 7c - 18 b5 80 7c 00 00 00 00 .......|...|....
000000000208ffec 00 00 00 00 00 00 00 00 - 8d 79 93 7c 00 00 00 00 .........y.|....
000000000208fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000209000c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000209001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000209002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000209003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000209004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000209005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000209006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000209007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000209008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000209009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020900ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020900bc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020900cc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x98c <----*

eax=77230000 ebx=00000000 ecx=020cfcd0 edx=02180e00 esi=7c98c380 edi=7c98c3a0
eip=7c91eb94 esp=020cff70 ebp=020cffb4 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000286

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
020cffb4 7c80b50b 00000000 7c911005 01c5c940 ntdll!KiFastSystemCallRet
020cffec 00000000 7c920760 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
00000000020cff70 1b e3 91 7c 9d 07 92 7c - 48 05 00 00 ac ff 0c 02 ...|...|H.......
00000000020cff80 b0 ff 0c 02 98 ff 0c 02 - a0 ff 0c 02 05 10 91 7c ...............|
00000000020cff90 40 c9 c5 01 00 00 00 00 - 00 00 00 00 a0 41 1a 02 @............A..
00000000020cffa0 00 7c 28 e8 ff ff ff ff - 00 00 00 00 69 75 93 7c .|(.........iu.|
00000000020cffb0 08 ba 19 02 ec ff 0c 02 - 0b b5 80 7c 00 00 00 00 ...........|....
00000000020cffc0 05 10 91 7c 40 c9 c5 01 - 00 00 00 00 00 e0 fa 7f ...|@...........
00000000020cffd0 00 46 fc 81 c0 ff 0c 02 - 18 82 56 81 ff ff ff ff .F........V.....
00000000020cffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
00000000020cfff0 00 00 00 00 60 07 92 7c - 00 00 00 00 00 00 00 00 ....`..|........
00000000020d0000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020d0010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020d0020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020d0030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020d0040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020d0050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020d0060 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020d0070 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020d0080 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020d0090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000020d00a0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x9bc <----*

eax=000000c0 ebx=00000000 ecx=01c5ca10 edx=00000000 esi=00000000 edi=00000001
eip=7c91eb94 esp=0210fcec ebp=0210ffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0210ffb4 7c80b50b 00000000 00000020 7c911005 ntdll!KiFastSystemCallRet
0210ffec 00000000 7c939fae 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000210fcec ab e9 91 7c d5 a0 93 7c - 14 00 00 00 30 fd 10 02 ...|...|....0...
000000000210fcfc 01 00 00 00 01 00 00 00 - 00 00 00 00 20 00 00 00 ............ ...
000000000210fd0c 05 10 91 7c 00 00 00 00 - 08 e5 98 7c 08 e5 98 7c ...|.......|...|
000000000210fd1c 50 05 00 00 bc 09 00 00 - 14 00 00 00 14 00 00 00 P...............
000000000210fd2c 13 00 00 00 4c 05 00 00 - 1c 02 00 00 b4 05 00 00 ....L...........
000000000210fd3c c0 05 00 00 dc 05 00 00 - e8 05 00 00 f4 05 00 00 ................
000000000210fd4c 14 06 00 00 1c 06 00 00 - 24 06 00 00 30 06 00 00 ........$...0...
000000000210fd5c 38 06 00 00 44 06 00 00 - 50 06 00 00 5c 06 00 00 8...D...P...\...
000000000210fd6c 64 06 00 00 70 06 00 00 - 7c 06 00 00 88 06 00 00 d...p...|.......
000000000210fd7c 90 06 00 00 90 06 00 00 - fc 06 00 00 08 07 00 00 ................
000000000210fd8c 14 07 00 00 20 07 00 00 - 00 00 00 00 00 00 00 00 .... ...........
000000000210fd9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000210fdac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000210fdbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000210fdcc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000210fddc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000210fdec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000210fdfc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000210fe0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000210fe1c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0xd04 <----*

eax=77a5964a ebx=0214ff18 ecx=01c5cbb0 edx=000a8698 esi=00000000 edi=7ffdc000
eip=7c91eb94 esp=0214fef0 ebp=0214ff8c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\CRYPT32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0214ff8c 77a59675 00000001 00142048 00000000 ntdll!KiFastSystemCallRet
0214ffb4 7c80b50b 00000001 000a0000 7c926433 CRYPT32!CertEnumSystemStoreLocation+0x133f
0214ffec 00000000 77a5964a 00142040 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000214fef0 ab e9 91 7c f2 94 80 7c - 01 00 00 00 18 ff 14 02 ...|...|........
000000000214ff00 01 00 00 00 00 00 00 00 - 4c ff 14 02 00 00 00 00 ........L.......
000000000214ff10 40 20 14 00 48 20 14 00 - 60 05 00 00 6a c8 4d 80 @ ..H ..`...j.M.
000000000214ff20 8c b1 cd 81 20 b0 cd 81 - 54 b0 cd 81 00 00 00 00 .... ...T.......
000000000214ff30 00 00 00 00 87 f6 57 80 - 14 00 00 00 01 00 00 00 ......W.........
000000000214ff40 00 00 00 00 00 00 00 00 - 10 00 00 00 80 2e 0f f7 ................
000000000214ff50 ff ff ff ff 00 00 00 00 - 00 c0 fd 7f 00 c0 fa 7f ................
000000000214ff60 b9 e1 6e 80 4c ff 14 02 - 18 ff 14 02 b3 e0 6e 80 ..n.L.........n.
000000000214ff70 01 00 00 00 0c ff 14 02 - 00 00 00 00 dc ff 14 02 ................
000000000214ff80 f3 99 83 7c 90 95 80 7c - 00 00 00 00 b4 ff 14 02 ...|...|........
000000000214ff90 75 96 a5 77 01 00 00 00 - 48 20 14 00 00 00 00 00 u..w....H ......
000000000214ffa0 98 3a 00 00 00 00 00 00 - 00 00 0a 00 33 64 92 7c .:..........3d.|
000000000214ffb0 40 20 14 00 ec ff 14 02 - 0b b5 80 7c 01 00 00 00 @ .........|....
000000000214ffc0 00 00 0a 00 33 64 92 7c - 40 20 14 00 00 c0 fa 7f ....3d.|@ ......
000000000214ffd0 00 46 fc 81 c0 ff 14 02 - 48 a6 68 81 ff ff ff ff .F......H.h.....
000000000214ffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
000000000214fff0 00 00 00 00 4a 96 a5 77 - 40 20 14 00 00 00 00 00 ....J..w@ ......
0000000002150000 72 44 39 00 72 44 39 00 - 72 44 39 00 72 44 39 00 rD9.rD9.rD9.rD9.
0000000002150010 72 44 39 00 72 44 39 00 - 72 44 39 00 72 44 39 00 rD9.rD9.rD9.rD9.
0000000002150020 72 44 39 00 72 44 39 00 - 72 44 39 00 72 44 39 00 rD9.rD9.rD9.rD9.

*----> Scarico dello stato per l'id del thread 0xed4 <----*

eax=76988831 ebx=022bfef4 ecx=01c5c89c edx=01c5cb50 esi=00000000 edi=7ffdc000
eip=7c91eb94 esp=022bfecc ebp=022bff68 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\USERENV.dll -
ChildEBP RetAddr Args to Child
022bff68 7c809c86 00000003 76a20310 00000000 ntdll!KiFastSystemCallRet
022bff84 7698888d 00000003 76a20310 00000000 kernel32!WaitForMultipleObjects+0x18
022bffb4 7c80b50b 00000000 00000000 00000000 USERENV!UnregisterGPNotification+0x15c
022bffec 00000000 76988831 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
00000000022bfecc ab e9 91 7c f2 94 80 7c - 03 00 00 00 f4 fe 2b 02 ...|...|......+.
00000000022bfedc 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000022bfeec b8 03 a2 76 77 9b 80 7c - c4 05 00 00 c8 05 00 00 ...vw..|........
00000000022bfefc cc 05 00 00 5c fe 2b 02 - 6c ff 2b 02 6c ff 2b 02 ....\.+.l.+.l.+.
00000000022bff0c 18 ee 91 7c 70 05 92 7c - 14 00 00 00 01 00 00 00 ...|p..|........
00000000022bff1c 00 00 00 00 00 00 00 00 - 10 00 00 00 f6 1b 80 7c ...............|
00000000022bff2c 00 00 00 00 00 00 00 00 - 00 c0 fd 7f 00 b0 fa 7f ................
00000000022bff3c 98 86 0a 00 00 00 00 00 - f4 fe 2b 02 00 00 00 00 ..........+.....
00000000022bff4c 03 00 00 00 e8 fe 2b 02 - 00 00 00 00 dc ff 2b 02 ......+.......+.
00000000022bff5c f3 99 83 7c 90 95 80 7c - 00 00 00 00 84 ff 2b 02 ...|...|......+.
00000000022bff6c 86 9c 80 7c 03 00 00 00 - 10 03 a2 76 00 00 00 00 ...|.......v....
00000000022bff7c ff ff ff ff 00 00 00 00 - b4 ff 2b 02 8d 88 98 76 ..........+....v
00000000022bff8c 03 00 00 00 10 03 a2 76 - 00 00 00 00 ff ff ff ff .......v........
00000000022bff9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 98 76 ...............v
00000000022bffac 03 00 00 00 00 00 00 00 - ec ff 2b 02 0b b5 80 7c ..........+....|
00000000022bffbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000022bffcc 00 b0 fa 7f 00 46 fc 81 - c0 ff 2b 02 30 4a 64 81 .....F....+.0Jd.
00000000022bffdc ff ff ff ff f3 99 83 7c - 18 b5 80 7c 00 00 00 00 .......|...|....
00000000022bffec 00 00 00 00 00 00 00 00 - 31 88 98 76 00 00 00 00 ........1..v....
00000000022bfffc 00 00 00 00 ff ff ff ff - ff ff ff ff 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x4d0 <----*

eax=00153e98 ebx=c0000000 ecx=0258ff7c edx=7c91eb94 esi=00000000 edi=71a07558
eip=7c91eb94 esp=0258ff7c ebp=0258ffb4 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0258ffb4 7c80b50b 719dd8ec 0246de90 7c91ee18 ntdll!KiFastSystemCallRet
0258ffec 00000000 719dd5af 02191078 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000258ff7c 1b e3 91 7c 09 d6 9d 71 - e0 06 00 00 bc ff 58 02 ...|...q......X.
000000000258ff8c b0 ff 58 02 a4 ff 58 02 - 50 d6 9d 71 90 de 46 02 ..X...X.P..q..F.
000000000258ff9c 18 ee 91 7c 78 10 19 02 - 00 00 00 00 00 00 00 00 ...|x...........
000000000258ffac 00 00 9d 71 a0 66 15 00 - ec ff 58 02 0b b5 80 7c ...q.f....X....|
000000000258ffbc ec d8 9d 71 90 de 46 02 - 18 ee 91 7c 78 10 19 02 ...q..F....|x...
000000000258ffcc 00 90 fa 7f 00 46 fc 81 - c0 ff 58 02 e8 16 fd 81 .....F....X.....
000000000258ffdc ff ff ff ff f3 99 83 7c - 18 b5 80 7c 00 00 00 00 .......|...|....
000000000258ffec 00 00 00 00 00 00 00 00 - af d5 9d 71 78 10 19 02 ...........qx...
000000000258fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000259000c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000259001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000259002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000259003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000259004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000259005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000259006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000259007c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000259008c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000259009c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000025900ac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0xa58 <----*

eax=4d54b73f ebx=4d530000 ecx=7c923288 edx=ffffffff esi=00000000 edi=025cff6c
eip=7c91eb94 esp=025cff3c ebp=025cff94 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\WINHTTP.dll -
ChildEBP RetAddr Args to Child
025cff94 7c802451 00007530 00000000 025cffb4 ntdll!KiFastSystemCallRet
025cffa4 4d54b752 00007530 7c91ee18 025cffec kernel32!Sleep+0xf
025cffb4 7c80b50b 4d530000 0246e9b8 7c91ee18 WINHTTP!WinHttpReceiveResponse+0xb5d1
025cffec 00000000 4d54b73f 4d530000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
00000000025cff3c 5c d8 91 7c ed 23 80 7c - 00 00 00 00 6c ff 5c 02 \..|.#.|....l.\.
00000000025cff4c b8 e9 46 02 00 00 00 00 - 00 00 53 4d 14 00 00 00 ..F.......SM....
00000000025cff5c 01 00 00 00 00 00 00 00 - 00 00 00 00 10 00 00 00 ................
00000000025cff6c 00 5d 1e ee ff ff ff ff - 50 3d 35 b8 6c ff 5c 02 .]......P=5.l.\.
00000000025cff7c 4c ff 5c 02 01 00 00 00 - dc ff 5c 02 f3 99 83 7c L.\.......\....|
00000000025cff8c 58 24 80 7c 00 00 00 00 - a4 ff 5c 02 51 24 80 7c X$.|......\.Q$.|
00000000025cff9c 30 75 00 00 00 00 00 00 - b4 ff 5c 02 52 b7 54 4d 0u........\.R.TM
00000000025cffac 30 75 00 00 18 ee 91 7c - ec ff 5c 02 0b b5 80 7c 0u.....|..\....|
00000000025cffbc 00 00 53 4d b8 e9 46 02 - 18 ee 91 7c 00 00 53 4d ..SM..F....|..SM
00000000025cffcc 00 80 fa 7f 00 46 fc 81 - c0 ff 5c 02 e8 16 fd 81 .....F....\.....
00000000025cffdc ff ff ff ff f3 99 83 7c - 18 b5 80 7c 00 00 00 00 .......|...|....
00000000025cffec 00 00 00 00 00 00 00 00 - 3f b7 54 4d 00 00 53 4d ........?.TM..SM
00000000025cfffc 00 00 00 00 00 00 00 00 - ff ff ff ff 00 00 00 00 ................
00000000025d000c 00 00 00 00 00 00 00 00 - ff ff ff ff 00 00 00 00 ................
00000000025d001c 00 00 00 00 00 00 00 00 - ff ff ff ff 00 00 00 00 ................
00000000025d002c 00 00 00 00 00 00 00 00 - ff ff ff ff 00 00 00 00 ................
00000000025d003c 00 00 00 00 00 00 00 00 - ff ff ff ff 00 00 00 00 ................
00000000025d004c 00 00 00 00 00 00 00 00 - ff ff ff ff 00 00 00 00 ................
00000000025d005c 00 00 00 00 00 00 00 00 - ff ff ff ff 00 00 00 00 ................
00000000025d006c 00 00 00 00 00 00 00 00 - ff ff ff ff 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0xf58 <----*

eax=01000000 ebx=0a60fe7c ecx=01d518d8 edx=775d591c esi=00000000 edi=7ffdc000
eip=7c91eb94 esp=0a60fe54 ebp=0a60fef0 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0a60fef0 77d1bbfe 00000007 0a60ff18 00000000 ntdll!KiFastSystemCallRet
0a60ff4c 77d1bcad 00000006 0a60ff8c ffffffff USER32!SetWindowTextW+0x120
0a60ff68 5e40a638 00000006 0a60ff8c 00000000 USER32!MsgWaitForMultipleObjects+0x1f
0a60ffa4 5e3eda41 00000000 00000003 0a60ffec qdvd+0x4a638
0a60ffb4 7c80b50b 01d51850 00000000 00000003 qdvd+0x2da41
0a60ffec 00000000 5e3eda2c 01d51850 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000a60fe54 ab e9 91 7c f2 94 80 7c - 07 00 00 00 7c fe 60 0a ...|...|....|.`.
000000000a60fe64 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000a60fe74 07 00 00 00 00 00 00 00 - cc 06 00 00 20 07 00 00 ............ ...
000000000a60fe84 14 07 00 00 10 07 00 00 - 18 07 00 00 1c 07 00 00 ................
000000000a60fe94 bc 06 00 00 d8 e4 f3 80 - 14 00 00 00 01 00 00 00 ................
000000000a60fea4 00 00 00 00 00 00 00 00 - 10 00 00 00 3d be 4e 80 ............=.N.
000000000a60feb4 7c 12 00 00 88 35 e0 81 - 00 c0 fd 7f 00 a0 fa 7f |....5..........
000000000a60fec4 c0 94 00 c0 00 00 00 00 - 7c fe 60 0a 00 00 00 00 ........|.`.....
000000000a60fed4 07 00 00 00 70 fe 60 0a - c0 77 3c 5e dc ff 60 0a ....p.`..w<^..`.
000000000a60fee4 f3 99 83 7c 90 95 80 7c - 00 00 00 00 4c ff 60 0a ...|...|....L.`.
000000000a60fef4 fe bb d1 77 07 00 00 00 - 18 ff 60 0a 00 00 00 00 ...w......`.....
000000000a60ff04 ff ff ff ff 00 00 00 00 - d8 18 d5 01 50 18 d5 01 ............P...
000000000a60ff14 50 18 d5 01 cc 06 00 00 - 20 07 00 00 14 07 00 00 P....... .......
000000000a60ff24 10 07 00 00 18 07 00 00 - 1c 07 00 00 bc 06 00 00 ................
000000000a60ff34 00 00 00 40 78 ff 60 0a - 00 00 00 00 00 00 00 00 ...@x.`.........
000000000a60ff44 00 a0 fa 7f bc 06 00 00 - 68 ff 60 0a ad bc d1 77 ........h.`....w
000000000a60ff54 06 00 00 00 8c ff 60 0a - ff ff ff ff ff 00 00 00 ......`.........
000000000a60ff64 18 ff 60 0a a4 ff 60 0a - 38 a6 40 5e 06 00 00 00 ..`...`.8.@^....
000000000a60ff74 8c ff 60 0a 00 00 00 00 - ff ff ff ff ff 00 00 00 ..`.............
000000000a60ff84 00 00 00 00 00 00 00 00 - cc 06 00 00 20 07 00 00 ............ ...

*----> Scarico dello stato per l'id del thread 0xfcc <----*

eax=00000000 ebx=7c91e9b4 ecx=77efd3f8 edx=02190844 esi=00000000 edi=00000001
eip=7c91eb94 esp=0a64fad0 ebp=0a64fb0c iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\mswsock.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\WS2_32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\wininet.dll -
ChildEBP RetAddr Args to Child
0a64fb0c 719d5fa7 00000744 00000748 00000001 ntdll!KiFastSystemCallRet
0a64fc00 71a32e67 00000001 0a64fe80 0a64fc78 mswsock+0x5fa7
0a64fc50 771a71bf 00000001 0a64fe80 0a64fc78 WS2_32!select+0xa7
0a64ffac 771a92f3 0a64ffec 7c80b50b 02190838 wininet!GetUrlCacheEntryInfoExW+0x88d
0a64ffb4 7c80b50b 02190838 7c929aeb 7c929ba0 wininet!InternetSetStatusCallback+0x1d7
0a64ffec 00000000 771a92e6 02190838 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000a64fad0 c0 e9 91 7c a5 3c 9d 71 - 44 07 00 00 01 00 00 00 ...|.<.qD.......
000000000a64fae0 f8 fa 64 0a b0 fb 64 0a - 80 fe 64 0a a0 fb 64 0a ..d...d...d...d.
000000000a64faf0 98 fb 64 0a ef d8 91 7c - c0 b4 b3 ff ff ff ff ff ..d....|........
000000000a64fb00 b0 f1 18 02 00 00 00 00 - 00 00 00 00 00 fc 64 0a ..............d.
000000000a64fb10 a7 5f 9d 71 44 07 00 00 - 48 07 00 00 01 00 00 00 ._.qD...H.......
000000000a64fb20 04 00 00 00 7c fd 64 0a - 78 d7 12 00 78 fc 64 0a ....|.d.x...x.d.
000000000a64fb30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000a64fb40 01 00 00 00 80 0f 05 fd - ff ff ff ff 00 00 00 00 ................
000000000a64fb50 00 70 fa 7f 1c 00 00 00 - 01 00 00 00 00 00 00 00 .p..............
000000000a64fb60 00 00 00 00 00 00 09 00 - 00 00 00 00 00 00 00 00 ................
000000000a64fb70 34 fc 64 0a 40 fb 64 0a - ff ff ff ff 1c 00 00 00 4.d.@.d.........
000000000a64fb80 b0 f1 18 02 bc fb 64 0a - 78 fc 64 0a 7c fd 64 0a ......d.x.d.|.d.
000000000a64fb90 00 00 00 00 a0 fb 64 0a - 00 00 00 00 00 00 00 00 ......d.........
000000000a64fba0 80 0f 05 fd ff ff ff ff - 01 00 00 00 00 00 00 00 ................
000000000a64fbb0 48 07 00 00 19 00 00 00 - 91 78 93 7c 48 05 00 00 H........x.|H...
000000000a64fbc0 69 75 93 7c 08 ba 19 02 - 00 00 00 00 a0 41 1a 02 iu.|.........A..
000000000a64fbd0 01 00 00 00 00 00 00 00 - e8 03 00 00 08 fc 64 0a ..............d.
000000000a64fbe0 db 77 93 7c 52 42 00 00 - 24 fb 64 0a 0c 15 a2 71 .w.|RB..$.d....q
000000000a64fbf0 40 fc 64 0a c8 71 9f 71 - 68 2e 9d 71 ff ff ff ff @.d..q.qh..q....
000000000a64fc00 50 fc 64 0a 67 2e a3 71 - 01 00 00 00 80 fe 64 0a P.d.g..q......d.



Exception dell'applicazione:
App: G:\WINDOWS\explorer.exe (pid=1744)
Ora: 21/12/2004 @ 22:21:34.523
Numero exception: 80000007
()

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
472 smss.exe
540 csrss.exe
564 winlogon.exe
608 services.exe
620 lsass.exe
776 Ati2evxx.exe
788 svchost.exe
848 svchost.exe
888 svchost.exe
932 svchost.exe
1000 svchost.exe
1332 spoolsv.exe
1340 Ati2evxx.exe
1560 lvhidsvc.exe
1920 wscntfy.exe
1992 Mixer.exe
2028 GSICON.EXE
2040 dslagent.exe
172 jusched.exe
184 RecSche.exe
204 atiptaxx.exe
188 alg.exe
236 ctfmon.exe
256 MsnMsgr.Exe
260 msmsgs.exe
4000 emule.exe
2348 winampa.exe
3900 TMPGEncDVDAuthor.exe
2448 drwtsn32.exe
2668 explorer.exe
3836 vlc.exe

*----> Elenco moduli <----*
(0000000000c30000 - 0000000000c43000: G:\WINDOWS\system32\browselc.dll
(0000000001000000 - 00000000010ff000: G:\WINDOWS\explorer.exe
(00000000015d0000 - 00000000015fb000: G:\Programmi\WinRAR\rarext.dll
(0000000001d00000 - 0000000001d4f000: G:\WINDOWS\system32\DRMClien.DLL
(00000000023b0000 - 00000000023ce000: G:\Programmi\CFi\ShellToys\CFiShlEx.dll
(00000000029b0000 - 0000000002a3c000: G:\WINDOWS\system32\shdoclc.dll
(0000000003010000 - 0000000003028000: G:\WINDOWS\system32\odbcint.dll
(0000000010000000 - 0000000010026000: G:\Programmi\DivX\Dr.DivX\EncodeDivXExt.dll
(0000000020000000 - 00000000202d5000: G:\WINDOWS\system32\xpsp2res.dll
(000000004b360000 - 000000004b389000: G:\WINDOWS\system32\wmidx.dll
(0000000059690000 - 00000000596a9000: G:\WINDOWS\system32\wmpshell.dll
(00000000596b0000 - 000000005987a000: G:\WINDOWS\AppPatch\AcGenral.DLL
(0000000059e10000 - 0000000059e4c000: G:\WINDOWS\system32\WMASF.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\UxTheme.dll
(000000005ba40000 - 000000005bab2000: G:\WINDOWS\system32\themeui.dll
(000000005bc70000 - 000000005bcc4000: G:\WINDOWS\system32\NETAPI32.dll
(000000005cf90000 - 000000005cfb6000: G:\WINDOWS\system32\ShimEng.dll
(000000005d4d0000 - 000000005d567000: G:\WINDOWS\system32\comctl32.dll
(000000005f210000 - 000000005f227000: G:\WINDOWS\system32\OLEPRO32.DLL
(0000000060060000 - 0000000060093000: G:\WINDOWS\system32\msutb.dll
(000000006c6b0000 - 000000006c6fd000: G:\WINDOWS\system32\DUSER.dll
(000000006c950000 - 000000006c977000: G:\WINDOWS\system32\dskquoui.dll
(0000000071a20000 - 0000000071a28000: G:\WINDOWS\system32\WS2HELP.dll
(0000000071a30000 - 0000000071a47000: G:\WINDOWS\system32\WS2_32.dll
(0000000071a50000 - 0000000071a5a000: G:\WINDOWS\system32\WSOCK32.dll
(0000000071aa0000 - 0000000071ab2000: G:\WINDOWS\system32\mpr.dll
(0000000071b80000 - 0000000071b93000: G:\WINDOWS\system32\SAMLIB.dll
(0000000071ba0000 - 0000000071bae000: G:\WINDOWS\System32\ntlanman.dll
(0000000071c10000 - 0000000071c17000: G:\WINDOWS\System32\NETRAP.dll
(0000000071c20000 - 0000000071c60000: G:\WINDOWS\System32\NETUI1.dll
(0000000071c60000 - 0000000071c77000: G:\WINDOWS\System32\NETUI0.dll
(0000000071cd0000 - 0000000071cec000: G:\WINDOWS\system32\actxprxy.dll
(00000000723a0000 - 00000000723ba000: G:\WINDOWS\system32\mydocs.dll
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(0000000072fa0000 - 0000000072fb0000: G:\WINDOWS\system32\WZCSAPI.DLL
(0000000073620000 - 0000000073627000: G:\WINDOWS\system32\msdmo.dll
(0000000073e80000 - 0000000073edc000: G:\WINDOWS\system32\DSound.dll
(00000000745e0000 - 000000007461d000: G:\WINDOWS\system32\ODBC32.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(0000000074a60000 - 0000000074a68000: G:\WINDOWS\system32\POWRPROF.dll
(0000000074a80000 - 0000000074a8a000: G:\WINDOWS\system32\BatMeter.dll
(0000000074ac0000 - 0000000074b07000: G:\WINDOWS\system32\webcheck.dll
(0000000075920000 - 0000000075a18000: G:\WINDOWS\system32\MSGINA.dll
(0000000075d50000 - 0000000075de1000: G:\WINDOWS\system32\MLANG.dll
(0000000075df0000 - 0000000075e11000: G:\WINDOWS\system32\MSVFW32.dll
(0000000075f10000 - 0000000075f17000: G:\WINDOWS\System32\drprov.dll
(0000000075f20000 - 0000000075f29000: G:\WINDOWS\System32\davclnt.dll
(0000000075f30000 - 000000007602c000: G:\WINDOWS\system32\BROWSEUI.dll
(00000000761e0000 - 0000000076201000: G:\WINDOWS\system32\stobject.dll
(0000000076310000 - 0000000076320000: G:\WINDOWS\system32\WINSTA.dll
(0000000076330000 - 0000000076335000: G:\WINDOWS\system32\MSIMG32.dll
(0000000076360000 - 00000000763aa000: G:\WINDOWS\system32\comdlg32.dll
(00000000763b0000 - 0000000076559000: G:\WINDOWS\system32\NETSHELL.dll
(00000000765b0000 - 00000000765cd000: G:\WINDOWS\System32\CSCDLL.dll
(0000000076890000 - 0000000076913000: G:\WINDOWS\system32\CRYPTUI.dll
(0000000076940000 - 0000000076948000: G:\WINDOWS\system32\LINKINFO.dll
(0000000076950000 - 0000000076976000: G:\WINDOWS\system32\ntshrui.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076ae0000 - 0000000076af1000: G:\WINDOWS\system32\ATL.DLL
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bc0000 - 0000000076bee000: G:\WINDOWS\system32\credui.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d20000 - 0000000076d39000: G:\WINDOWS\system32\iphlpapi.dll
(0000000076e40000 - 0000000076e4e000: G:\WINDOWS\system32\rtutils.dll
(0000000076e50000 - 0000000076e62000: G:\WINDOWS\system32\rasman.dll
(0000000076e70000 - 0000000076e9f000: G:\WINDOWS\system32\TAPI32.dll
(0000000076ea0000 - 0000000076edc000: G:\WINDOWS\system32\RASAPI32.dll
(0000000076f10000 - 0000000076f18000: G:\WINDOWS\system32\WTSAPI32.dll
(0000000076f20000 - 0000000076f4d000: G:\WINDOWS\system32\WLDAP32.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: G:\WINDOWS\system32\WININET.dll
(0000000077230000 - 00000000772ce000: G:\WINDOWS\system32\urlmon.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(0000000077660000 - 0000000077681000: G:\WINDOWS\system32\NTMARTA.DLL
(0000000077730000 - 000000007789c000: G:\WINDOWS\system32\SHDOCVW.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\SETUPAPI.dll
(00000000779f0000 - 0000000077a45000: G:\WINDOWS\System32\cscui.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\appHelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077c40000 - 0000000077c63000: G:\WINDOWS\system32\msv1_0.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f10000 - 0000000077f21000: G:\WINDOWS\system32\Secur32.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll
(000000007d1f0000 - 000000007d4a2000: G:\WINDOWS\system32\msi.dll
(000000007d7a0000 - 000000007d9aa000: G:\WINDOWS\system32\WMVCORE.DLL

*----> Scarico dello stato per l'id del thread 0x2e4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
*** ERROR: Module load completed but symbols could not be loaded for G:\WINDOWS\explorer.exe
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
FAULT ->GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x4dc <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x94 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x838 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xcc4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xb28 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xf38 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xea4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xa60 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x814 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x9c8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xd2c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x6e4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xe20 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x624 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xfd8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x9a0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xe80 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005


Exception dell'applicazione:
App: G:\WINDOWS\explorer.exe (pid=1772)
Ora: 22/12/2004 @ 12:45:16.260
Numero exception: 80000007
()

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
500 smss.exe
564 csrss.exe
588 winlogon.exe
632 services.exe
644 lsass.exe
792 Ati2evxx.exe
804 svchost.exe
872 svchost.exe
912 svchost.exe
956 svchost.exe
1016 svchost.exe
1268 spoolsv.exe
1416 lvhidsvc.exe
1668 alg.exe
184 wscntfy.exe
396 Ati2evxx.exe
1180 Mixer.exe
1316 GSICON.EXE
1384 dslagent.exe
1436 jusched.exe
1388 RecSche.exe
1500 atiptaxx.exe
1648 winampa.exe
1700 ctfmon.exe
1740 MsnMsgr.Exe
1776 msmsgs.exe
1772 explorer.exe
740 FIREFOX.EXE
2576 emule.exe
2560 WinRAR.exe
2908 wuauclt.exe
3004 wmiprvse.exe
3096 drwtsn32.exe

*----> Elenco moduli <----*
(0000000001000000 - 00000000010ff000: G:\WINDOWS\explorer.exe
(0000000001ab0000 - 0000000001ac3000: G:\WINDOWS\system32\browselc.dll
(0000000001eb0000 - 0000000001edb000: G:\Programmi\WinRAR\rarext.dll
(000000000ffd0000 - 000000000fff8000: G:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 0000000010026000: G:\Programmi\DivX\Dr.DivX\EncodeDivXExt.dll
(0000000020000000 - 00000000202d5000: G:\WINDOWS\system32\xpsp2res.dll
(00000000596b0000 - 000000005987a000: G:\WINDOWS\AppPatch\AcGenral.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\UxTheme.dll
(000000005ba40000 - 000000005bab2000: G:\WINDOWS\system32\themeui.dll
(000000005bc70000 - 000000005bcc4000: G:\WINDOWS\system32\NETAPI32.dll
(000000005cf90000 - 000000005cfb6000: G:\WINDOWS\system32\ShimEng.dll
(000000005d4d0000 - 000000005d567000: G:\WINDOWS\system32\comctl32.dll
(0000000060060000 - 0000000060093000: G:\WINDOWS\system32\msutb.dll
(000000006c6b0000 - 000000006c6fd000: G:\WINDOWS\system32\DUSER.dll
(0000000071a20000 - 0000000071a28000: G:\WINDOWS\system32\WS2HELP.dll
(0000000071a30000 - 0000000071a47000: G:\WINDOWS\system32\WS2_32.dll
(0000000071a50000 - 0000000071a5a000: G:\WINDOWS\system32\WSOCK32.dll
(0000000071aa0000 - 0000000071ab2000: G:\WINDOWS\system32\MPR.dll
(0000000071b80000 - 0000000071b93000: G:\WINDOWS\system32\SAMLIB.dll
(0000000071ba0000 - 0000000071bae000: G:\WINDOWS\System32\ntlanman.dll
(0000000071c10000 - 0000000071c17000: G:\WINDOWS\System32\NETRAP.dll
(0000000071c20000 - 0000000071c60000: G:\WINDOWS\System32\NETUI1.dll
(0000000071c60000 - 0000000071c77000: G:\WINDOWS\System32\NETUI0.dll
(0000000071cd0000 - 0000000071cec000: G:\WINDOWS\system32\actxprxy.dll
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(0000000074a60000 - 0000000074a68000: G:\WINDOWS\system32\POWRPROF.dll
(0000000074a80000 - 0000000074a8a000: G:\WINDOWS\system32\BatMeter.dll
(0000000074ac0000 - 0000000074b07000: G:\WINDOWS\system32\webcheck.dll
(0000000075f10000 - 0000000075f17000: G:\WINDOWS\System32\drprov.dll
(0000000075f20000 - 0000000075f29000: G:\WINDOWS\System32\davclnt.dll
(0000000075f30000 - 000000007602c000: G:\WINDOWS\system32\BROWSEUI.dll
(00000000761e0000 - 0000000076201000: G:\WINDOWS\system32\stobject.dll
(0000000076310000 - 0000000076320000: G:\WINDOWS\system32\WINSTA.dll
(0000000076330000 - 0000000076335000: G:\WINDOWS\system32\MSIMG32.dll
(00000000763b0000 - 0000000076559000: G:\WINDOWS\system32\NETSHELL.dll
(00000000765b0000 - 00000000765cd000: G:\WINDOWS\System32\CSCDLL.dll
(0000000076890000 - 0000000076913000: G:\WINDOWS\system32\CRYPTUI.dll
(0000000076940000 - 0000000076948000: G:\WINDOWS\system32\LINKINFO.dll
(0000000076950000 - 0000000076976000: G:\WINDOWS\system32\ntshrui.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076ae0000 - 0000000076af1000: G:\WINDOWS\system32\ATL.DLL
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bc0000 - 0000000076bee000: G:\WINDOWS\system32\credui.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d20000 - 0000000076d39000: G:\WINDOWS\system32\iphlpapi.dll
(0000000076e40000 - 0000000076e4e000: G:\WINDOWS\system32\rtutils.dll
(0000000076e50000 - 0000000076e62000: G:\WINDOWS\system32\rasman.dll
(0000000076e70000 - 0000000076e9f000: G:\WINDOWS\system32\TAPI32.dll
(0000000076ea0000 - 0000000076edc000: G:\WINDOWS\system32\RASAPI32.dll
(0000000076f10000 - 0000000076f18000: G:\WINDOWS\system32\WTSAPI32.dll
(0000000076f20000 - 0000000076f4d000: G:\WINDOWS\system32\WLDAP32.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: G:\WINDOWS\system32\WININET.dll
(0000000077230000 - 00000000772ce000: G:\WINDOWS\system32\urlmon.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(0000000077730000 - 000000007789c000: G:\WINDOWS\system32\SHDOCVW.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\SETUPAPI.dll
(00000000779f0000 - 0000000077a45000: G:\WINDOWS\System32\cscui.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\appHelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077c40000 - 0000000077c63000: G:\WINDOWS\system32\msv1_0.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f10000 - 0000000077f21000: G:\WINDOWS\system32\Secur32.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll
(000000007d1f0000 - 000000007d4a2000: G:\WINDOWS\system32\msi.dll

*----> Scarico dello stato per l'id del thread 0x6e8 <----*

eax=000000d4 ebx=00000003 ecx=000000e2 edx=0007fbc4 esi=0010b190 edi=00000000
eip=7c91eb94 esp=0007fef0 ebp=0007ff08 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202

*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\ntdll.dll -
funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
FAULT ->ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\SHELL32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Module load completed but symbols could not be loaded for G:\WINDOWS\explorer.exe
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007ff08 7ca42c57 00000000 0007ff5c 01016e95 ntdll!KiFastSystemCallRet
0007ff14 01016e95 0010b190 7ffdf000 0007ffc0 SHELL32!Ordinal201+0x28
0007ff5c 0101e2b6 00000000 00000000 00020642 explorer+0x16e95
0007ffc0 7c816d4f 00dc7088 0006e890 7ffdf000 explorer+0x1e2b6
0007fff0 00000000 0101e24e 00000000 78746341 kernel32!RegisterWaitForInputIdle+0x49

*----> Scarico Raw Stack <----*
000000000007fef0 f5 93 d1 77 ee 95 a4 7c - ac 92 80 7c 90 b1 10 00 ...w...|...|....
000000000007ff00 90 b1 10 00 14 ff 07 00 - 14 ff 07 00 57 2c a4 7c ............W,.|
000000000007ff10 00 00 00 00 5c ff 07 00 - 95 6e 01 01 90 b1 10 00 ....\....n......
000000000007ff20 00 f0 fd 7f c0 ff 07 00 - 00 00 00 00 24 fd 07 00 ............$...
000000000007ff30 50 ff 07 00 e0 ff 07 00 - 27 e0 91 7c ed aa 80 7c P.......'..|...|
000000000007ff40 ff ff ff ff 0c 00 00 00 - 00 00 00 00 0f 34 01 00 .............4..
000000000007ff50 a8 00 00 00 01 00 00 00 - 90 b1 10 00 c0 ff 07 00 ................
000000000007ff60 b6 e2 01 01 00 00 00 00 - 00 00 00 00 42 06 02 00 ............B...
000000000007ff70 05 00 00 00 88 70 dc 00 - 90 e8 06 00 44 00 00 00 .....p......D...
000000000007ff80 94 06 02 00 74 06 02 00 - 44 06 02 00 00 00 00 00 ....t...D.......
000000000007ff90 00 00 00 00 00 00 00 00 - 00 00 00 00 2e 00 00 00 ................
000000000007ffa0 00 00 00 00 3a ef 06 00 - 01 00 00 00 05 00 00 00 ....:...........
000000000007ffb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000007ffc0 f0 ff 07 00 4f 6d 81 7c - 88 70 dc 00 90 e8 06 00 ....Om.|.p......
000000000007ffd0 00 f0 fd 7f 38 b0 54 80 - c8 ff 07 00 88 b5 ca 81 ....8.T.........
000000000007ffe0 ff ff ff ff f3 99 83 7c - 58 6d 81 7c 00 00 00 00 .......|Xm.|....
000000000007fff0 00 00 00 00 00 00 00 00 - 4e e2 01 01 00 00 00 00 ........N.......
0000000000080000 41 63 74 78 20 00 00 00 - 01 00 00 00 98 24 00 00 Actx ........$..
0000000000080010 c4 00 00 00 00 00 00 00 - 20 00 00 00 00 00 00 00 ........ .......
0000000000080020 14 00 00 00 01 00 00 00 - 06 00 00 00 34 00 00 00 ............4...

*----> Scarico dello stato per l'id del thread 0x3b0 <----*

eax=00000000 ebx=00000000 ecx=00f3fe1c edx=7c91eb94 esi=000b7240 edi=000b72e4
eip=7c91eb94 esp=00f3fe1c ebp=00f3ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00f3ff80 77da6c22 00f3ffa8 77da6a3b 000b7240 ntdll!KiFastSystemCallRet
00f3ff88 77da6a3b 000b7240 00000000 0007f88c RPCRT4!I_RpcBCacheFree+0x5ea
00f3ffa8 77da6c0a 000b70f8 00f3ffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
00f3ffb4 7c80b50b 000c0f10 00000000 0007f88c RPCRT4!I_RpcBCacheFree+0x5d2
00f3ffec 00000000 77da6bf0 000c0f10 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000f3fe1c 99 e3 91 7c 03 67 da 77 - b0 01 00 00 70 ff f3 00 ...|.g.w....p...
0000000000f3fe2c 00 00 00 00 30 8b 14 00 - 4c ff f3 00 b0 cc 57 80 ....0...L.....W.
0000000000f3fe3c cb cc 57 80 64 1d a0 f8 - 78 f4 07 00 27 cc 57 80 ..W.d...x...'.W.
0000000000f3fe4c 37 47 56 80 02 f9 c5 81 - 00 00 ca 81 a0 38 fc 81 7GV..........8..
0000000000f3fe5c 70 c5 56 80 28 f9 07 00 - 04 00 00 00 00 c6 56 80 p.V.(.........V.
0000000000f3fe6c 05 00 00 00 60 02 00 00 - 05 00 00 00 00 00 00 00 ....`...........
0000000000f3fe7c 00 00 00 00 88 b5 ca 81 - 88 1b a0 f8 25 44 56 80 ............%DV.
0000000000f3fe8c 05 00 00 00 05 00 00 00 - c8 46 13 e1 60 5b 03 e1 .........F..`[..
0000000000f3fe9c 02 00 00 00 fe ff f8 00 - 18 52 16 e1 c8 46 13 e1 .........R...F..
0000000000f3feac b0 35 56 00 00 00 00 00 - 00 00 00 00 5c 00 52 00 .5V.........\.R.
0000000000f3febc ff ff ff ff 28 1c a0 f8 - 6c 38 56 80 49 03 00 00 ....(...l8V.I...
0000000000f3fecc 34 00 00 c0 80 f9 c5 81 - 48 e4 00 e1 c0 c0 f8 81 4.......H.......
0000000000f3fedc ec 1b a0 f8 c1 4f 50 80 - fc 1b a0 f8 04 00 00 00 .....OP.........
0000000000f3feec 00 00 00 00 c0 c0 f8 81 - bc 71 e2 81 80 f9 c5 81 .........q......
0000000000f3fefc 00 00 00 00 88 01 00 00 - e8 17 00 00 00 00 00 00 ................
0000000000f3ff0c 20 1c a0 f8 44 af 79 81 - 20 1c a0 f8 46 02 00 00 ...D.y. ...F...
0000000000f3ff1c 6a c8 4d 80 14 af 79 81 - a8 ad 79 81 dc ad 79 81 j.M...y...y...y.
0000000000f3ff2c 68 da d5 81 80 ff f3 00 - 99 66 da 77 4c ff f3 00 h........f.wL...
0000000000f3ff3c a9 66 da 77 ed 10 91 7c - 58 07 0c 00 10 0f 0c 00 .f.w...|X.......
0000000000f3ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......

*----> Scarico dello stato per l'id del thread 0x2e8 <----*

eax=bf803dd3 ebx=00000000 ecx=b833088c edx=00000000 esi=7c98c0d8 edi=00000000
eip=7c91eb94 esp=00fdfa78 ebp=00fdfb00 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=3c72 es=1818 fs=003b gs=15ac efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\msutb.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\MSCTF.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\USER32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\SHLWAPI.dll -
ChildEBP RetAddr Args to Child
00fdfb00 7c91104b 0198c0d8 7c929b30 7c98c0d8 ntdll!KiFastSystemCallRet
00fdfbb8 7c929ba0 77d10000 00fdfbf4 00000000 ntdll!RtlEnterCriticalSection+0x46
00fdfbd4 7c80ac66 77d10000 00fdfbf4 00000000 ntdll!LdrGetProcedureAddress+0x18
00fdfbfc 6007decb 77d10000 60063d8c 000d2700 kernel32!GetProcAddress+0x3e
00fdfc48 6006d2c8 00000000 00000000 00fdfc64 msutb+0x1decb
00fdfcd0 6006eae2 0000032c 000a5c00 00000002 msutb!ClosePopupTipbar+0x39e1
00fdfcf0 746cda15 00000000 0000032c 00000000 msutb!GetPopupTipbar+0x1125
00fdfd2c 746ce26e 000d2700 0000c0a6 00000000 MSCTF!TF_CreateCicLoadMutex+0x6fb2
00fdfd94 746c0ccc 0000c0a6 00000000 00000000 MSCTF!TF_CreateCicLoadMutex+0x780b
00fdfdb4 746c0e3e 00000001 00fdfe8c 00000000 MSCTF!TF_UninitSystem+0x863
00fdfdf0 77d1ed1a 00000000 00000001 00fdfe8c MSCTF!TF_UninitSystem+0x9d5
00fdfe0c 77d1ecc3 00030000 00000001 00fdfe8c USER32!IsCharAlphaW+0x15a
00fdfe48 77d26ddb 00fdfe7c 00fdfe8c 00fdfea8 USER32!IsCharAlphaW+0x103
00fdfe6c 7c91eae3 00fdfe7c 00000030 00030000 USER32!EndDialog+0x112
00fdfed4 77d193df 00fdff28 00000000 00000000 ntdll!KiUserCallbackDispatcher+0x13
00fdff00 010019c1 00fdff28 00000000 00000000 USER32!PeekMessageW+0x167
00fdff44 01011e8b 00000000 00fdffb4 77eaf5de explorer+0x19c1
00fdff50 77eaf5de 010460d8 0000005c 0007fc04 explorer+0x11e8b
00fdffb4 7c80b50b 00000000 0000005c 0007fc04 SHLWAPI!Ordinal505+0x369
00fdffec 00000000 77eaf56f 0007fdbc 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000fdfa78 c0 e9 91 7c 1b 90 92 7c - 14 07 00 00 00 00 00 00 ...|...|........
0000000000fdfa88 00 00 00 00 00 00 00 00 - 9b 3d 06 60 5c fb fd 00 .........=.`\...
0000000000fdfa98 9b 4f 41 77 f8 86 0d 00 - 00 00 00 00 a0 fb fd 00 .OAw............
0000000000fdfaa8 3b 43 41 77 cf 5a 41 77 - f8 86 0d 00 ff ff ff ff ;CAw.ZAw........
0000000000fdfab8 f8 86 0d 00 8f 00 00 00 - 00 00 00 00 1e 01 00 00 ................
0000000000fdfac8 1e 00 00 00 e0 fa fd 00 - 5b fe 40 77 f8 86 0d 00 ........[.@w....
0000000000fdfad8 94 0d 56 01 01 00 00 00 - 18 fb fd 00 02 00 41 77 ..V...........Aw
0000000000fdfae8 00 00 00 00 dc e4 00 00 - 98 fb fd 00 c8 4a 18 5b .............J.[
0000000000fdfaf8 00 00 00 00 14 07 00 00 - b8 fb fd 00 4b 10 91 7c ............K..|
0000000000fdfb08 d8 c0 98 01 30 9b 92 7c - d8 c0 98 7c 8c 3d 06 60 ....0..|...|.=.`
0000000000fdfb18 28 ac 80 7c ff ff 00 00 - 03 00 00 00 ff ff ff ff (..|............
0000000000fdfb28 01 00 00 00 28 fc fd 00 - 3b 43 41 77 f3 70 00 00 ....(...;CAw.p..
0000000000fdfb38 08 fc fd 00 00 00 d1 77 - 54 00 04 00 5c fb fd 00 .......wT...\...
0000000000fdfb48 5c fb fd 00 00 00 00 00 - 3b 43 41 77 cd ab ba dc \.......;CAw....
0000000000fdfb58 00 00 00 00 00 00 47 65 - 74 4d 6f 6e 69 74 6f 72 ......GetMonitor
0000000000fdfb68 49 6e 66 6f 41 00 fd 7f - cc fb fd 00 32 88 d1 77 InfoA.......2..w
0000000000fdfb78 8c fb fd 00 8c fb fd 00 - 00 00 00 00 c8 05 92 7c ...............|
0000000000fdfb88 20 3a 18 00 58 fc fd 00 - 3d 15 18 5b 28 40 03 00 :..X...=..[(@..
0000000000fdfb98 c0 fb fd 00 13 ab 00 00 - 14 fb fd 00 00 00 00 00 ................
0000000000fdfba8 1c fd fd 00 18 ee 91 7c - f0 9a 92 7c ff ff ff ff .......|...|....

*----> Scarico dello stato per l'id del thread 0x614 <----*

eax=7c93798d ebx=00000000 ecx=77f46a51 edx=77f46a18 esi=ffffffff edi=7c91fb78
eip=7c91eb94 esp=0113ff9c ebp=0113ffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0113ffb4 7c80b50b 00000000 7c91fb78 ffffffff ntdll!KiFastSystemCallRet
0113ffec 00000000 7c93798d 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000113ff9c 5c d8 91 7c d4 79 93 7c - 01 00 00 00 ac ff 13 01 \..|.y.|........
000000000113ffac 00 00 00 00 00 00 00 80 - ec ff 13 01 0b b5 80 7c ...............|
000000000113ffbc 00 00 00 00 78 fb 91 7c - ff ff ff ff 00 00 00 00 ....x..|........
000000000113ffcc 00 a0 fd 7f 00 46 fc 81 - c0 ff 13 01 68 5f 78 81 .....F......h_x.
000000000113ffdc ff ff ff ff f3 99 83 7c - 18 b5 80 7c 00 00 00 00 .......|...|....
000000000113ffec 00 00 00 00 00 00 00 00 - 8d 79 93 7c 00 00 00 00 .........y.|....
000000000113fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000114000c 00 00 00 00 00 00 00 00 - 89 5b 3f ff 89 5b 3f ff .........[?..[?.
000000000114001c 89 5b 3f ff 89 5b 3f ff - 89 5b 3f ff 89 5b 3f ff .[?..[?..[?..[?.
000000000114002c 89 5b 3f ff 89 5b 3f ff - 89 5b 3f ff 89 5b 3f ff .[?..[?..[?..[?.
000000000114003c 89 5b 3f ff 89 5b 3f ff - 89 5b 3f ff 89 5b 3f ff .[?..[?..[?..[?.
000000000114004c 89 5b 3f ff 89 5b 3f ff - 89 5b 3f ff 89 5b 3f ff .[?..[?..[?..[?.
000000000114005c 89 5b 3f ff 89 5b 3f ff - 89 5b 3f ff 89 5b 3f ff .[?..[?..[?..[?.
000000000114006c 89 5b 3f ff 89 5b 3f ff - 89 5b 3f ff 89 5b 3f ff .[?..[?..[?..[?.
000000000114007c 89 5b 3f ff 89 5b 3f ff - 89 5b 3f ff 89 5b 3f ff .[?..[?..[?..[?.
000000000114008c 89 5b 3f ff 89 5b 3f ff - 89 5b 3f ff 89 5b 3f ff .[?..[?..[?..[?.
000000000114009c 89 5b 3f ff 89 5b 3f ff - 89 5b 3f ff 89 5b 3f ff .[?..[?..[?..[?.
00000000011400ac 89 5b 3f ff 00 00 00 00 - 00 00 00 00 00 00 00 00 .[?.............
00000000011400bc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011400cc 00 00 00 00 00 00 00 00 - a6 78 5b ff ce a9 8c ff .........x[.....

*----> Scarico dello stato per l'id del thread 0x6f8 <----*

eax=000000c0 ebx=00000000 ecx=00fdfb00 edx=00000000 esi=00000000 edi=00000001
eip=7c91eb94 esp=011bfcec ebp=011bffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
011bffb4 7c80b50b 00000000 00000020 00fdfce4 ntdll!KiFastSystemCallRet
011bffec 00000000 7c939fae 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
00000000011bfcec ab e9 91 7c d5 a0 93 7c - 03 00 00 00 30 fd 1b 01 ...|...|....0...
00000000011bfcfc 01 00 00 00 01 00 00 00 - 00 00 00 00 20 00 00 00 ............ ...
00000000011bfd0c e4 fc fd 00 00 00 00 00 - 08 e5 98 7c 08 e5 98 7c ...........|...|
00000000011bfd1c f8 01 00 00 f8 06 00 00 - 03 00 00 00 03 00 00 00 ................
00000000011bfd2c 02 00 00 00 f4 01 00 00 - ec 04 00 00 dc 01 00 00 ................
00000000011bfd3c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfd4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfd5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfd6c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfd7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfd8c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfd9c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfdac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfdbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfdcc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfddc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfdec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfdfc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfe0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000011bfe1c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x734 <----*

eax=01d80010 ebx=00174fd8 ecx=00001000 edx=7c91eb94 esi=00000000 edi=7ffdf000
eip=7c91eb94 esp=0120fd30 ebp=0120fdcc iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0120fdcc 77d1bbfe 00000009 0120fdf4 00000000 ntdll!KiFastSystemCallRet
0120fe28 7ca043d9 00000008 0120fe50 ffffffff USER32!SetWindowTextW+0x120
0120ff4c 7ca4114e 77eaf5de 00000000 7c809988 SHELL32!SHCreateShellFolderView+0x3d6b
0120ffb4 7c80b50b 00000000 7c809988 00090000 SHELL32!Ordinal753+0x133
0120ffec 00000000 77eaf56f 00fdf4d4 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000120fd30 ab e9 91 7c f2 94 80 7c - 09 00 00 00 d8 4f 17 00 ...|...|.....O..
000000000120fd40 01 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000120fd50 09 00 00 00 02 00 00 00 - d8 d4 53 00 14 00 00 00 ..........S.....
000000000120fd60 01 00 00 00 00 00 00 00 - 00 00 00 00 10 00 00 00 ................
000000000120fd70 00 00 00 00 30 00 00 00 - 14 00 00 00 01 00 00 00 ....0...........
000000000120fd80 80 b7 0d 00 00 00 00 00 - 00 00 00 00 ec fd 20 01 .............. .
000000000120fd90 94 04 d4 77 08 88 d1 77 - 00 f0 fd 7f 00 70 fd 7f ...w...w.....p..
000000000120fda0 00 70 fd 7f 00 00 00 00 - d8 4f 17 00 88 00 02 00 .p.......O......
000000000120fdb0 09 00 00 00 4c fd 20 01 - 00 00 00 00 dc ff 20 01 ....L. ....... .
000000000120fdc0 f3 99 83 7c 90 95 80 7c - 00 00 00 00 28 fe 20 01 ...|...|....(. .
000000000120fdd0 fe bb d1 77 09 00 00 00 - f4 fd 20 01 00 00 00 00 ...w...... .....
000000000120fde0 ff ff ff ff 01 00 00 00 - 88 6c 0d 00 08 00 00 00 .........l......
000000000120fdf0 00 00 00 00 cc 06 00 00 - f8 04 00 00 2c 03 00 00 ............,...
000000000120fe00 00 03 00 00 ec 02 00 00 - 24 02 00 00 4c 02 00 00 ........$...L...
000000000120fe10 40 02 00 00 18 02 00 00 - 00 00 00 00 01 00 00 00 @...............
000000000120fe20 00 70 fd 7f 18 02 00 00 - 4c ff 20 01 d9 43 a0 7c .p......L. ..C.|
000000000120fe30 08 00 00 00 50 fe 20 01 - ff ff ff ff ff 04 00 00 ....P. .........
000000000120fe40 f4 fd 20 01 00 00 00 00 - 00 00 00 00 00 00 00 00 .. .............
000000000120fe50 cc 06 00 00 f8 04 00 00 - 2c 03 00 00 00 03 00 00 ........,.......
000000000120fe60 ec 02 00 00 24 02 00 00 - 4c 02 00 00 40 02 00 00 ....$...L...@...

*----> Scarico dello stato per l'id del thread 0x744 <----*

eax=0000ade8 ebx=00000000 ecx=00009449 edx=00000000 esi=7c98c380 edi=7c98c3a0
eip=7c91eb94 esp=0130ff70 ebp=0130ffb4 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000286

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0130ffb4 7c80b50b 00000000 00fdf8c4 00fdf8c4 ntdll!KiFastSystemCallRet
0130ffec 00000000 7c920760 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000130ff70 1b e3 91 7c 9d 07 92 7c - f0 01 00 00 ac ff 30 01 ...|...|......0.
000000000130ff80 b0 ff 30 01 98 ff 30 01 - a0 ff 30 01 c4 f8 fd 00 ..0...0...0.....
000000000130ff90 c4 f8 fd 00 00 00 00 00 - 00 00 00 00 20 16 14 00 ............ ...
000000000130ffa0 00 7c 28 e8 ff ff ff ff - 00 00 00 00 69 75 93 7c .|(.........iu.|
000000000130ffb0 a8 50 17 00 ec ff 30 01 - 0b b5 80 7c 00 00 00 00 .P....0....|....
000000000130ffc0 c4 f8 fd 00 c4 f8 fd 00 - 00 00 00 00 00 60 fd 7f .............`..
000000000130ffd0 00 46 fc 81 c0 ff 30 01 - 88 31 cb 81 ff ff ff ff .F....0..1......
000000000130ffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
000000000130fff0 00 00 00 00 60 07 92 7c - 00 00 00 00 00 00 00 00 ....`..|........
0000000001310000 a0 e1 db 57 25 de d2 11 - af dd 00 10 5a 27 99 b5 ...W%.......Z'..
0000000001310010 2c fb 01 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ,...............
0000000001310020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001310030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001310040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001310050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001310060 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001310070 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001310080 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001310090 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000013100a0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x758 <----*

eax=013f0010 ebx=00000000 ecx=00008000 edx=7c91eb94 esi=0138ff98 edi=00000000
eip=7c91eb94 esp=0138ff58 ebp=0138ff74 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\NETSHELL.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0138ff74 763f34cb 0138ff98 00000000 00000000 ntdll!KiFastSystemCallRet
0138ffb4 7c80b50b 76426328 00000000 7c910000 NETSHELL!NetSetupSetProgressCallback+0x19160
0138ffec 00000000 763f348c 76426328 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000138ff58 9b 91 d1 77 ce 91 d1 77 - 98 ff 38 01 00 00 00 00 ...w...w..8.....
000000000138ff68 00 00 00 00 00 00 00 00 - a3 91 d1 77 b4 ff 38 01 ...........w..8.
000000000138ff78 cb 34 3f 76 98 ff 38 01 - 00 00 00 00 00 00 00 00 .4?v..8.........
000000000138ff88 00 00 00 00 00 00 91 7c - 00 00 00 00 28 63 42 76 .......|....(cBv
000000000138ff98 3e 02 02 00 00 04 00 00 - be ba 00 00 dc 5a 11 00 >............Z..
000000000138ffa8 86 b6 06 00 7b 01 00 00 - d6 01 00 00 ec ff 38 01 ....{.........8.
000000000138ffb8 0b b5 80 7c 28 63 42 76 - 00 00 00 00 00 00 91 7c ...|(cBv.......|
000000000138ffc8 28 63 42 76 00 40 fd 7f - 00 46 fc 81 c0 ff 38 01 (cBv.@...F....8.
000000000138ffd8 38 34 c3 81 ff ff ff ff - f3 99 83 7c 18 b5 80 7c 84.........|...|
000000000138ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 8c 34 3f 76 .............4?v
000000000138fff8 28 63 42 76 00 00 00 00 - 00 00 00 00 00 00 00 00 (cBv............
0000000001390008 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001390018 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001390028 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001390038 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001390048 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001390058 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001390068 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001390078 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001390088 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x760 <----*

eax=77da6bf0 ebx=00000000 ecx=0000000c edx=003c36d8 esi=000b7240 edi=000b72e4
eip=7c91eb94 esp=013dfe1c ebp=013dff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
013dff80 77da6c22 013dffa8 77da6a3b 000b7240 ntdll!KiFastSystemCallRet
013dff88 77da6a3b 000b7240 00000000 003c0178 RPCRT4!I_RpcBCacheFree+0x5ea
013dffa8 77da6c0a 000b70f8 013dffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
013dffb4 7c80b50b 0011b098 00000000 003c0178 RPCRT4!I_RpcBCacheFree+0x5d2
013dffec 00000000 77da6bf0 0011b098 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
00000000013dfe1c 99 e3 91 7c 03 67 da 77 - b0 01 00 00 70 ff 3d 01 ...|.g.w....p.=.
00000000013dfe2c 00 00 00 00 f0 77 13 00 - 4c ff 3d 01 48 76 bb e1 .....w..L.=.Hv..
00000000013dfe3c c4 0b 3c b8 30 76 bb e1 - 34 76 bb e1 a0 38 fc 81 ..<.0v..4v...8..
00000000013dfe4c 37 47 56 80 02 f9 c5 81 - 00 00 00 00 a0 38 fc 81 7GV..........8..
00000000013dfe5c 10 7f d6 81 03 00 00 00 - 30 b6 59 81 48 b6 59 81 ........0.Y.H.Y.
00000000013dfe6c 04 00 00 00 9f 02 00 00 - 05 00 00 00 00 ac fc 81 ................
00000000013dfe7c 00 00 00 00 e8 a9 59 81 - 88 0b 3c b8 25 44 56 80 ......Y...<.%DV.
00000000013dfe8c 04 00 00 00 05 00 00 00 - 90 bb 07 e1 08 c0 09 e1 ................
00000000013dfe9c 00 00 00 00 00 00 ea 00 - 92 73 1c e1 80 86 29 e1 .........s....).
00000000013dfeac b0 0b 3c 00 08 c0 09 e1 - 0e 00 0e 00 84 73 1c e1 ..<..........s..
00000000013dfebc 50 94 02 00 28 0c 3c b8 - 7e 7e 56 80 50 94 02 00 P...(.<.~~V.P...
00000000013dfecc 34 00 00 c0 80 f9 c5 81 - 00 00 00 00 20 60 87 e1 4........... `..
00000000013dfedc 68 0c 3c b8 20 60 87 e1 - 08 60 87 e1 28 0c 3c b8 h.<. `...`..(.<.
00000000013dfeec af 7e 56 80 f4 f9 c5 81 - 24 fa c5 81 80 f9 c5 81 .~V.....$.......
00000000013dfefc 55 39 56 80 80 f9 c5 81 - 62 00 f8 00 30 73 1c e1 U9V.....b...0s..
00000000013dff0c 80 f9 c5 81 44 8f 59 81 - 20 0c 3c b8 46 02 00 00 ....D.Y. .<.F...
00000000013dff1c 6a c8 4d 80 14 8f 59 81 - a8 8d 59 81 dc 8d 59 81 j.M...Y...Y...Y.
00000000013dff2c 4c 0c 3c b8 80 ff 3d 01 - 99 66 da 77 4c ff 3d 01 L.<...=..f.wL.=.
00000000013dff3c a9 66 da 77 ed 10 91 7c - c8 a5 10 00 98 b0 11 00 .f.w...|........
00000000013dff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......

*----> Scarico dello stato per l'id del thread 0x130 <----*

eax=00000064 ebx=00004e20 ecx=0000009e edx=000000bc esi=0172fd68 edi=77d191a3
eip=7c91eb94 esp=0172fcf8 ebp=0172fd14 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\stobject.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0172fd14 761e1513 0172fd68 00000000 00000000 ntdll!KiFastSystemCallRet
0172fd8c 761e3746 761e0000 00000000 00020232 stobject+0x1513
0172ffb4 7c80b50b 00000000 00000000 00000000 stobject!DllCanUnloadNow+0x1fa4
0172ffec 00000000 761e36f7 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000172fcf8 9b 91 d1 77 ce 91 d1 77 - 68 fd 72 01 00 00 00 00 ...w...wh.r.....
000000000172fd08 00 00 00 00 00 00 00 00 - 00 00 00 00 8c fd 72 01 ..............r.
000000000172fd18 13 15 1e 76 68 fd 72 01 - 00 00 00 00 00 00 00 00 ...vh.r.........
000000000172fd28 00 00 00 00 00 00 00 00 - 00 00 1e 76 00 00 00 00 ...........v....
000000000172fd38 30 00 00 00 00 40 00 00 - 21 13 1e 76 00 00 00 00 0....@..!..v....
000000000172fd48 1e 00 00 00 00 00 1e 76 - 7d 00 0b 00 11 00 01 00 .......v}.......
000000000172fd58 10 00 00 00 00 00 00 00 - f4 31 1e 76 00 00 00 00 .........1.v....
000000000172fd68 20 02 02 00 05 04 00 00 - 01 00 00 00 be 00 00 00 ...............
000000000172fd78 8b bc 07 00 ad 01 00 00 - 34 02 00 00 00 00 00 00 ........4.......
000000000172fd88 00 00 00 00 b4 ff 72 01 - 46 37 1e 76 00 00 1e 76 ......r.F7.v...v
000000000172fd98 00 00 00 00 32 02 02 00 - 01 00 00 00 00 00 00 00 ....2...........
000000000172fda8 47 00 3a 00 5c 00 57 00 - 49 00 4e 00 44 00 4f 00 G.:.\.W.I.N.D.O.
000000000172fdb8 57 00 53 00 5c 00 73 00 - 79 00 73 00 74 00 65 00 W.S.\.s.y.s.t.e.
000000000172fdc8 6d 00 33 00 32 00 5c 00 - 73 00 74 00 6f 00 62 00 m.3.2.\.s.t.o.b.
000000000172fdd8 6a 00 65 00 63 00 74 00 - 2e 00 64 00 6c 00 6c 00 j.e.c.t...d.l.l.
000000000172fde8 00 00 81 7c 1b 00 00 00 - 00 02 00 00 fc ff 72 01 ...|..........r.
000000000172fdf8 23 00 00 00 56 08 81 7c - 1b 00 00 00 00 02 00 00 #...V..|........
000000000172fe08 fc ff 6a 01 23 00 00 00 - a0 98 f8 81 12 02 00 00 ..j.#...........
000000000172fe18 e3 3e 4e 80 a0 98 f8 81 - e8 80 f8 81 c0 f9 df ff .>N.............
000000000172fe28 f8 ee f5 0d 14 7b a2 b8 - 14 b6 45 f8 00 00 00 00 .....{....E.....

*----> Scarico dello stato per l'id del thread 0x1a0 <----*

eax=72c930e8 ebx=0189fef8 ecx=0000003c edx=001523e0 esi=00000000 edi=7ffdf000
eip=7c91eb94 esp=0189fed0 ebp=0189ff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
0189ff6c 7c809c86 00000002 0189ffa4 00000000 ntdll!KiFastSystemCallRet
0189ff88 72c9312a 00000002 0189ffa4 00000000 kernel32!WaitForMultipleObjects+0x18
0189ffb4 7c80b50b 00000000 00000008 00090000 wdmaud!midMessage+0x348
0189ffec 00000000 72c930e8 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000189fed0 ab e9 91 7c f2 94 80 7c - 02 00 00 00 f8 fe 89 01 ...|...|........
000000000189fee0 01 00 00 00 00 00 00 00 - 00 00 00 00 08 00 00 00 ................
000000000189fef0 00 00 00 00 00 00 00 00 - ac 04 00 00 9c 04 00 00 ................
000000000189ff00 04 00 00 00 8c 11 55 80 - 09 00 00 00 00 00 00 00 ......U.........
000000000189ff10 44 bf 4b 81 20 8c 2d b8 - 14 00 00 00 01 00 00 00 D.K. .-.........
000000000189ff20 08 6b 14 00 00 00 00 00 - 00 00 00 00 80 08 2e c0 .k..............
000000000189ff30 84 08 2e c0 87 f6 57 80 - 00 f0 fd 7f 00 c0 fa 7f ......W.........
000000000189ff40 00 c0 fa 7f 00 00 00 00 - f8 fe 89 01 05 00 00 00 ................
000000000189ff50 02 00 00 00 ec fe 89 01 - 00 00 00 00 dc ff 89 01 ................
000000000189ff60 f3 99 83 7c 90 95 80 7c - 00 00 00 00 88 ff 89 01 ...|...|........
000000000189ff70 86 9c 80 7c 02 00 00 00 - a4 ff 89 01 00 00 00 00 ...|............
000000000189ff80 ff ff ff ff 00 00 00 00 - b4 ff 89 01 2a 31 c9 72 ............*1.r
000000000189ff90 02 00 00 00 a4 ff 89 01 - 00 00 00 00 ff ff ff ff ................
000000000189ffa0 00 00 09 00 ac 04 00 00 - 9c 04 00 00 00 00 00 00 ................
000000000189ffb0 dc e2 91 7c ec ff 89 01 - 0b b5 80 7c 00 00 00 00 ...|.......|....
000000000189ffc0 08 00 00 00 00 00 09 00 - 00 00 00 00 00 c0 fa 7f ................
000000000189ffd0 00 46 fc 81 c0 ff 89 01 - 38 cd 58 81 ff ff ff ff .F......8.X.....
000000000189ffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
000000000189fff0 00 00 00 00 e8 30 c9 72 - 00 00 00 00 00 00 00 00 .....0.r........
00000000018a0000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x204 <----*

eax=0053c368 ebx=000004cc ecx=000003bb edx=7c91eb94 esi=018dff98 edi=77d3ea45
eip=7c91eb94 esp=018dff54 ebp=018dff78 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\WINMM.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
018dff78 76b04e3d 018dff98 00000000 00000000 ntdll!KiFastSystemCallRet
018dffb4 7c80b50b 000004cc 00000200 0000002b WINMM!PlaySoundW+0x7e6
018dffec 00000000 76b04dd6 000004cc 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
00000000018dff54 9b 91 d1 77 85 ea d3 77 - 98 ff 8d 01 00 00 00 00 ...w...w........
00000000018dff64 00 00 00 00 00 00 00 00 - cc 04 00 00 45 ea d3 77 ............E..w
00000000018dff74 00 00 00 00 b4 ff 8d 01 - 3d 4e b0 76 98 ff 8d 01 ........=N.v....
00000000018dff84 00 00 00 00 00 00 00 00 - 00 00 00 00 00 02 00 00 ................
00000000018dff94 2b 00 00 00 26 02 03 00 - d2 c0 00 00 00 00 00 00 +...&...........
00000000018dffa4 00 00 00 00 40 34 07 00 - d4 00 00 00 e2 00 00 00 ....@4..........
00000000018dffb4 ec ff 8d 01 0b b5 80 7c - cc 04 00 00 00 02 00 00 .......|........
00000000018dffc4 2b 00 00 00 cc 04 00 00 - 00 b0 fa 7f 00 46 fc 81 +............F..
00000000018dffd4 c0 ff 8d 01 38 cd 58 81 - ff ff ff ff f3 99 83 7c ....8.X........|
00000000018dffe4 18 b5 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00 ...|............
00000000018dfff4 d6 4d b0 76 cc 04 00 00 - 00 00 00 00 a0 e1 db 57 .M.v...........W
00000000018e0004 25 de d2 11 af dd 00 10 - 5a 27 99 b5 24 72 01 00 %.......Z'..$r..
00000000018e0014 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000018e0024 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000018e0034 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000018e0044 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000018e0054 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000018e0064 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000018e0074 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000018e0084 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x808 <----*

eax=01d80000 ebx=01aabc00 ecx=00001000 edx=7c91eb94 esi=0000070c edi=00000000
eip=7c91eb94 esp=01aabbe4 ebp=01aabeec iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
01aabeec 7c975714 01aac08c 01aac360 022f415b ntdll!KiFastSystemCallRet
01aac02c 7c9761a1 01aac08c 022e0000 c0000005 ntdll!RtlTraceDatabaseAdd+0x1b9
01aac364 7c95ea5f 022f415b fffffffe fffffffe ntdll!RtlUnhandledExceptionFilter+0xb2
01aac3b8 7c94783a 022f415b 022e0000 01aac44c ntdll!RtlInitializeSListHead+0x15a4f
01aac434 7c91eafa 00000000 01aac468 01aac44c ntdll!LdrAddRefDll+0x221
01aac73c 00000000 10015804 00000001 01aac778 ntdll!KiUserExceptionDispatcher+0xe

*----> Scarico Raw Stack <----*
0000000001aabbe4 ab e9 91 7c d5 33 86 7c - 02 00 00 00 1c bd aa 01 ...|.3.|........
0000000001aabbf4 01 00 00 00 01 00 00 00 - 00 00 00 00 47 00 3a 00 ............G.:.
0000000001aabc04 5c 00 57 00 49 00 4e 00 - 44 00 4f 00 57 00 53 00 \.W.I.N.D.O.W.S.
0000000001aabc14 5c 00 73 00 79 00 73 00 - 74 00 65 00 6d 00 33 00 \.s.y.s.t.e.m.3.
0000000001aabc24 32 00 5c 00 64 00 72 00 - 77 00 74 00 73 00 6e 00 2.\.d.r.w.t.s.n.
0000000001aabc34 33 00 32 00 20 00 2d 00 - 70 00 20 00 31 00 37 00 3.2. .-.p. .1.7.
0000000001aabc44 37 00 32 00 20 00 2d 00 - 65 00 20 00 31 00 38 00 7.2. .-.e. .1.8.
0000000001aabc54 30 00 34 00 20 00 2d 00 - 67 00 00 00 00 00 00 00 0.4. .-.g.......
0000000001aabc64 2e 00 00 00 00 00 00 00 - 00 00 00 00 ec be aa 01 ................
0000000001aabc74 0f 32 86 7c 05 00 00 00 - ec be aa 01 41 32 86 7c .2.|........A2.|
0000000001aabc84 69 32 86 7c 00 00 00 00 - 00 00 00 00 8c c0 aa 01 i2.|............
0000000001aabc94 44 00 00 00 00 00 00 00 - 78 34 86 7c 00 00 00 00 D.......x4.|....
0000000001aabca4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001aabcb4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001aabcc4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001aabcd4 00 00 00 00 00 c0 fd 7f - d8 c0 98 7c 00 00 00 00 ...........|....
0000000001aabce4 00 00 00 00 00 c0 fd 7f - 00 00 00 00 00 00 00 00 ................
0000000001aabcf4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001aabd04 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001aabd14 00 00 00 00 00 00 00 00 - 0c 07 00 00 18 07 00 00 ................

*----> Scarico dello stato per l'id del thread 0xbd8 <----*

eax=01c31010 ebx=01bcfde8 ecx=01c00760 edx=00000002 esi=00000000 edi=7ffdf000
eip=7c91eb94 esp=01bcfdc0 ebp=01bcfe5c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\DUSER.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\msvcrt.dll -
ChildEBP RetAddr Args to Child
01bcfe5c 77d1bbfe 00000002 01bcfe84 00000000 ntdll!KiFastSystemCallRet
01bcfeb8 6c6e4b92 00000001 01bcfeec ffffffff USER32!SetWindowTextW+0x120
01bcfed8 6c6e4ddc 000004ff ffffffff 00000001 DUSER+0x34b92
01bcff0c 6c6de394 01bcff4c 00000000 00000000 DUSER+0x34ddc
01bcff2c 6c6da6f1 01bcff4c 00000000 00000000 DUSER!GetMessageExA+0x44
01bcff80 77c0a3b0 00000000 7c920000 7c9231dc DUSER!DUserStopAnimation+0xa505
01bcffb4 7c80b50b 00037b20 7c920000 7c9231dc msvcrt!endthreadex+0xa9
01bcffec 00000000 77c0a341 00037b20 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000001bcfdc0 ab e9 91 7c f2 94 80 7c - 02 00 00 00 e8 fd bc 01 ...|...|........
0000000001bcfdd0 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001bcfde0 02 00 00 00 04 00 00 00 - 3c 06 00 00 c4 05 00 00 ........<.......
0000000001bcfdf0 55 00 01 01 f0 00 00 00 - e0 01 00 00 00 20 c3 01 U............ ..
0000000001bcfe00 40 fe bc 01 b1 a2 6c 6c - 14 00 00 00 01 00 00 00 @.....ll........
0000000001bcfe10 00 00 00 00 00 00 00 00 - 10 00 00 00 00 20 c3 01 ............. ..
0000000001bcfe20 01 00 04 00 00 00 00 00 - 00 f0 fd 7f 00 90 fd 7f ................
0000000001bcfe30 a4 ff bc 01 00 00 00 00 - e8 fd bc 01 00 00 00 00 ................
0000000001bcfe40 02 00 00 00 dc fd bc 01 - 00 20 c3 01 a4 ff bc 01 ......... ......
0000000001bcfe50 f3 99 83 7c 90 95 80 7c - 00 00 00 00 b8 fe bc 01 ...|...|........
0000000001bcfe60 fe bb d1 77 02 00 00 00 - 84 fe bc 01 00 00 00 00 ...w............
0000000001bcfe70 ff ff ff ff 00 00 00 00 - 50 a5 17 00 01 00 00 00 ........P.......
0000000001bcfe80 4c ff bc 01 3c 06 00 00 - c4 05 00 00 8e 72 6e 6c L...<........rnl
0000000001bcfe90 ff ff ff ff a9 72 6e 6c - 54 34 07 00 a0 2a 17 00 .....rnlT4...*..
0000000001bcfea0 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001bcfeb0 00 90 fd 7f c4 05 00 00 - d8 fe bc 01 92 4b 6e 6c .............Knl
0000000001bcfec0 01 00 00 00 ec fe bc 01 - ff ff ff ff ff 04 00 00 ................
0000000001bcfed0 84 fe bc 01 ff ff ff ff - 0c ff bc 01 dc 4d 6e 6c .............Mnl
0000000001bcfee0 ff 04 00 00 ff ff ff ff - 01 00 00 00 3c 06 00 00 ............<...
0000000001bcfef0 00 00 00 00 00 00 00 00 - 20 7b 03 00 01 00 00 00 ........ {......

*----> Scarico dello stato per l'id del thread 0xc28 <----*

eax=00000000 ebx=00000000 ecx=00000002 edx=00000003 esi=7c98c0d8 edi=00000000
eip=7c91eb94 esp=01d8fc10 ebp=01d8fc98 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
01d8fc98 7c91104b 0198c0d8 7c937357 7c98c0d8 ntdll!KiFastSystemCallRet
01d8fd18 7c91eac7 01d8fd2c 7c910000 00000000 ntdll!RtlEnterCriticalSection+0x46
00000000 00000000 00000000 00000000 00000000 ntdll!KiUserApcDispatcher+0x7

*----> Scarico Raw Stack <----*
0000000001d8fc10 c0 e9 91 7c 1b 90 92 7c - 14 07 00 00 00 00 00 00 ...|...|........
0000000001d8fc20 00 00 00 00 00 50 fd 7f - 00 f0 fd 7f 00 00 00 00 .....P..........
0000000001d8fc30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001d8fc40 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001d8fc50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001d8fc60 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001d8fc70 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001d8fc80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001d8fc90 00 00 00 00 14 07 00 00 - 18 fd d8 01 4b 10 91 7c ............K..|
0000000001d8fca0 d8 c0 98 01 57 73 93 7c - d8 c0 98 7c 2c fd d8 01 ....Ws.|...|,...
0000000001d8fcb0 04 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001d8fcc0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001d8fcd0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001d8fce0 00 00 00 00 00 00 00 00 - 00 50 fd 7f 00 00 00 00 .........P......
0000000001d8fcf0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001d8fd00 ac fc d8 01 00 00 00 00 - ff ff ff ff 18 ee 91 7c ...............|
0000000001d8fd10 00 8e 92 7c ff ff ff ff - 00 00 00 00 c7 ea 91 7c ...|...........|
0000000001d8fd20 2c fd d8 01 00 00 91 7c - 00 00 00 00 17 00 01 00 ,......|........
0000000001d8fd30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001d8fd40 00 00 00 00 00 00 00 00 - 90 a0 5b 81 01 00 00 00 ..........[.....



Exception dell'applicazione:
App: G:\WINDOWS\Explorer.EXE (pid=1292)
Ora: 23/12/2004 @ 15:42:32.052
Numero exception: 80000007
()

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
432 smss.exe
496 csrss.exe
528 winlogon.exe
572 services.exe
584 lsass.exe
732 Ati2evxx.exe
744 svchost.exe
812 svchost.exe
848 svchost.exe
900 svchost.exe
1024 svchost.exe
1240 Ati2evxx.exe
1336 spoolsv.exe
1492 aswUpdSv.exe
1544 Mixer.exe
1552 GSICON.EXE
1560 dslagent.exe
1568 jusched.exe
1576 RecSche.exe
1596 atiptaxx.exe
1604 winampa.exe
1672 ashDisp.exe
1680 ctfmon.exe
1688 MsnMsgr.Exe
1696 msmsgs.exe
1740 ashServ.exe
1868 lvhidsvc.exe
2056 ashMaiSv.exe
2112 alg.exe
3936 emule.exe
2272 svchost.exe
4880 drwtsn32.exe
1616 Error 0x8007012B

*----> Elenco moduli <----*
(0000000000f10000 - 0000000000f2e000: G:\Programmi\CFi\ShellToys\CFiShlEx.dll
(0000000000f30000 - 0000000000f43000: G:\WINDOWS\system32\browselc.dll
(0000000001000000 - 00000000010ff000: G:\WINDOWS\Explorer.EXE
(00000000018f0000 - 0000000001908000: G:\WINDOWS\system32\odbcint.dll
(0000000001920000 - 0000000001a28000: G:\Programmi\CFi\ShellToys\CFiShell.dll
(0000000001a30000 - 0000000001a7f000: G:\WINDOWS\system32\DRMClien.DLL
(00000000029c0000 - 0000000002a4c000: G:\WINDOWS\system32\shdoclc.dll
(0000000003260000 - 000000000328b000: G:\Programmi\WinRAR\rarext.dll
(0000000003380000 - 00000000033a6000: G:\Programmi\DivX\Dr.DivX\EncodeDivXExt.dll
(000000000ffd0000 - 000000000fff8000: G:\WINDOWS\system32\rsaenh.dll
(0000000010000000 - 00000000101b0000: G:\Programmi\ffdshow\ffdshow.ax
(0000000012000000 - 0000000012103000: G:\PROGRA~1\ALWILS~1\Avast4\xerces.dll
(0000000020000000 - 00000000202d5000: G:\WINDOWS\system32\xpsp2res.dll
(000000004b360000 - 000000004b389000: G:\WINDOWS\system32\wmidx.dll
(000000004d530000 - 000000004d588000: G:\WINDOWS\system32\WINHTTP.dll
(000000004f4b0000 - 000000004f50f000: G:\WINDOWS\system32\wzcdlg.dll
(00000000596b0000 - 000000005987a000: G:\WINDOWS\AppPatch\AcGenral.DLL
(0000000059e10000 - 0000000059e4c000: G:\WINDOWS\system32\WMASF.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\UxTheme.dll
(000000005ba40000 - 000000005bab2000: G:\WINDOWS\system32\themeui.dll
(000000005bc70000 - 000000005bcc4000: G:\WINDOWS\system32\NETAPI32.dll
(000000005c4a0000 - 000000005c555000: g:\windows\srchasst\srchui.dll
(000000005c570000 - 000000005c582000: g:\windows\srchasst\srchctls.dll
(000000005cef0000 - 000000005cf18000: G:\WINDOWS\system32\shmedia.dll
(000000005cf90000 - 000000005cfb6000: G:\WINDOWS\system32\ShimEng.dll
(000000005d4d0000 - 000000005d567000: G:\WINDOWS\system32\comctl32.dll
(000000005eba0000 - 000000005ebaa000: G:\WINDOWS\system32\perfos.dll
(0000000060060000 - 0000000060093000: G:\WINDOWS\system32\msutb.dll
(0000000064000000 - 000000006400f000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnOS.dll
(0000000064080000 - 00000000640a2000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnB.dll
(0000000064100000 - 0000000064126000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnS.dll
(0000000064200000 - 0000000064214000: G:\PROGRA~1\ALWILS~1\Avast4\aswScan.dll
(0000000064280000 - 0000000064362000: G:\PROGRA~1\ALWILS~1\Avast4\aswEngin.dll
(0000000064500000 - 0000000064538000: G:\PROGRA~1\ALWILS~1\Avast4\ashBase.dll
(0000000064580000 - 000000006458c000: G:\PROGRA~1\ALWILS~1\Avast4\aswAux.dll
(0000000064800000 - 0000000064818000: G:\PROGRA~1\ALWILS~1\Avast4\ashTask.dll
(0000000065000000 - 000000006502a000: G:\PROGRA~1\ALWILS~1\Avast4\Aavm4h.dll
(0000000065100000 - 0000000065108000: G:\PROGRA~1\ALWILS~1\Avast4\AavmRpch.dll
(0000000065700000 - 0000000065718000: G:\Programmi\Alwil Software\Avast4\AhAScr.dll
(0000000065780000 - 00000000657a1000: G:\Programmi\Alwil Software\Avast4\AhJsctNs.dll
(0000000066bc0000 - 0000000066c4c000: G:\WINDOWS\system32\qedit.dll
(0000000067a00000 - 0000000067a3b000: G:\WINDOWS\system32\qasf.dll
(000000006c6b0000 - 000000006c6fd000: G:\WINDOWS\system32\DUSER.dll
(000000006cf50000 - 000000006cf73000: G:\WINDOWS\system32\Ksproxy.ax
(0000000071230000 - 000000007123d000: G:\WINDOWS\msagent\agentdp2.dll
(0000000071a20000 - 0000000071a28000: G:\WINDOWS\system32\WS2HELP.dll
(0000000071a30000 - 0000000071a47000: G:\WINDOWS\system32\WS2_32.dll
(0000000071a50000 - 0000000071a5a000: G:\WINDOWS\system32\WSOCK32.dll
(0000000071aa0000 - 0000000071ab2000: G:\WINDOWS\system32\mpr.dll
(0000000071b80000 - 0000000071b93000: G:\WINDOWS\system32\SAMLIB.dll
(0000000071ba0000 - 0000000071bae000: G:\WINDOWS\System32\ntlanman.dll
(0000000071c10000 - 0000000071c17000: G:\WINDOWS\System32\NETRAP.dll
(0000000071c20000 - 0000000071c60000: G:\WINDOWS\System32\NETUI1.dll
(0000000071c60000 - 0000000071c77000: G:\WINDOWS\System32\NETUI0.dll
(0000000072210000 - 000000007223b000: G:\WINDOWS\system32\DINPUT.dll
(0000000072c60000 - 0000000072c67000: G:\WINDOWS\system32\msadp32.acm
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(0000000072f70000 - 0000000072f96000: G:\WINDOWS\system32\WINSPOOL.DRV
(0000000072fa0000 - 0000000072fb0000: G:\WINDOWS\system32\WZCSAPI.DLL
(00000000732f0000 - 0000000073347000: G:\WINDOWS\system32\zipfldr.dll
(0000000073540000 - 0000000073587000: G:\WINDOWS\system32\mstask.dll
(0000000073620000 - 0000000073627000: G:\WINDOWS\system32\msdmo.dll
(00000000736d0000 - 0000000073719000: G:\WINDOWS\system32\DDraw.dll
(0000000073aa0000 - 0000000073ab4000: G:\WINDOWS\system32\mscms.dll
(0000000073ac0000 - 0000000073ad7000: G:\WINDOWS\system32\AVIFIL32.dll
(0000000073b10000 - 0000000073b24000: G:\WINDOWS\system32\sti.dll
(0000000073b30000 - 0000000073b36000: G:\WINDOWS\system32\DCIMAN32.dll
(0000000073e50000 - 0000000073e54000: G:\WINDOWS\system32\Ksuser.dll
(0000000073e80000 - 0000000073edc000: G:\WINDOWS\system32\DSound.dll
(00000000745e0000 - 000000007461d000: G:\WINDOWS\system32\ODBC32.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(00000000747a0000 - 000000007490e000: G:\WINDOWS\system32\quartz.dll
(0000000074910000 - 0000000074a40000: G:\WINDOWS\system32\msxml3.dll
(0000000074a60000 - 0000000074a68000: G:\WINDOWS\system32\POWRPROF.dll
(0000000074a70000 - 0000000074a77000: G:\WINDOWS\system32\CFGMGR32.dll
(0000000074a80000 - 0000000074a8a000: G:\WINDOWS\system32\BatMeter.dll
(0000000074ac0000 - 0000000074b07000: G:\WINDOWS\system32\webcheck.dll
(0000000074b10000 - 0000000074b9f000: G:\WINDOWS\system32\PRINTUI.dll
(0000000074c10000 - 0000000074c3c000: G:\WINDOWS\system32\OLEACC.dll
(00000000754e0000 - 0000000075588000: G:\WINDOWS\system32\RASDLG.dll
(0000000075920000 - 0000000075a18000: G:\WINDOWS\system32\MSGINA.dll
(0000000075c00000 - 0000000075c6e000: G:\WINDOWS\system32\jscript.dll
(0000000075d50000 - 0000000075de1000: G:\WINDOWS\system32\MLANG.dll
(0000000075df0000 - 0000000075e11000: G:\WINDOWS\system32\MSVFW32.dll
(0000000075e40000 - 0000000075ef0000: G:\WINDOWS\system32\SXS.DLL
(0000000075f10000 - 0000000075f17000: G:\WINDOWS\System32\drprov.dll
(0000000075f20000 - 0000000075f29000: G:\WINDOWS\System32\davclnt.dll
(0000000075f30000 - 000000007602c000: G:\WINDOWS\system32\BROWSEUI.dll
(0000000076030000 - 0000000076095000: G:\WINDOWS\system32\MSVCP60.dll
(00000000761e0000 - 0000000076201000: G:\WINDOWS\system32\stobject.dll
(0000000076310000 - 0000000076320000: G:\WINDOWS\system32\WINSTA.dll
(0000000076330000 - 0000000076335000: G:\WINDOWS\system32\MSIMG32.dll
(0000000076360000 - 00000000763aa000: G:\WINDOWS\system32\comdlg32.dll
(00000000763b0000 - 0000000076559000: G:\WINDOWS\system32\NETSHELL.dll
(00000000765b0000 - 00000000765cd000: G:\WINDOWS\System32\CSCDLL.dll
(0000000076600000 - 0000000076611000: G:\WINDOWS\system32\devenum.dll
(0000000076760000 - 0000000076773000: G:\WINDOWS\system32\NTDSAPI.dll
(0000000076890000 - 0000000076913000: G:\WINDOWS\system32\CRYPTUI.dll
(0000000076940000 - 0000000076948000: G:\WINDOWS\system32\LINKINFO.dll
(0000000076950000 - 0000000076976000: G:\WINDOWS\system32\ntshrui.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076ae0000 - 0000000076af1000: G:\WINDOWS\system32\ATL.DLL
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bc0000 - 0000000076bee000: G:\WINDOWS\system32\credui.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d00000 - 0000000076d18000: G:\WINDOWS\system32\MPRAPI.dll
(0000000076d20000 - 0000000076d39000: G:\WINDOWS\system32\iphlpapi.dll
(0000000076dd0000 - 0000000076df5000: G:\WINDOWS\system32\adsldpc.dll
(0000000076e40000 - 0000000076e4e000: G:\WINDOWS\system32\rtutils.dll
(0000000076e50000 - 0000000076e62000: G:\WINDOWS\system32\rasman.dll
(0000000076e70000 - 0000000076e9f000: G:\WINDOWS\system32\TAPI32.dll
(0000000076ea0000 - 0000000076edc000: G:\WINDOWS\system32\RASAPI32.dll
(0000000076ee0000 - 0000000076f07000: G:\WINDOWS\system32\DNSAPI.dll
(0000000076f10000 - 0000000076f18000: G:\WINDOWS\system32\WTSAPI32.dll
(0000000076f20000 - 0000000076f4d000: G:\WINDOWS\system32\WLDAP32.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: G:\WINDOWS\system32\WININET.dll
(0000000077230000 - 00000000772ce000: G:\WINDOWS\system32\urlmon.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(0000000077660000 - 0000000077681000: G:\WINDOWS\system32\NTMARTA.DLL
(0000000077730000 - 000000007789c000: G:\WINDOWS\system32\SHDOCVW.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\SETUPAPI.dll
(00000000779f0000 - 0000000077a45000: G:\WINDOWS\System32\cscui.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\appHelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077c40000 - 0000000077c63000: G:\WINDOWS\system32\msv1_0.dll
(0000000077c90000 - 0000000077cc2000: G:\WINDOWS\system32\ACTIVEDS.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f10000 - 0000000077f21000: G:\WINDOWS\system32\Secur32.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c340000 - 000000007c396000: G:\WINDOWS\system32\MSVCR71.dll
(000000007c3a0000 - 000000007c41b000: G:\WINDOWS\system32\MSVCP71.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll
(000000007d1f0000 - 000000007d4a2000: G:\WINDOWS\system32\msi.dll
(000000007d7a0000 - 000000007d9aa000: G:\WINDOWS\system32\WMVCORE.DLL
(000000007d9b0000 - 000000007db16000: G:\WINDOWS\system32\query.dll

*----> Scarico dello stato per l'id del thread 0x510 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
*** ERROR: Module load completed but symbols could not be loaded for G:\WINDOWS\Explorer.EXE
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
FAULT ->GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x570 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x574 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x57c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x5e8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xe8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xce4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1c8c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1c90 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x7dc <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1548 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1bf8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1c30 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xa68 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x143c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1454 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x9ec <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x9e4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xa20 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1490 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0xb04 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x15d0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005


Exception dell'applicazione:
App: G:\WINDOWS\explorer.exe (pid=1616)
Ora: 23/12/2004 @ 15:43:32.829
Numero exception: 80000007
()

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
432 smss.exe
496 csrss.exe
528 winlogon.exe
572 services.exe
584 lsass.exe
732 Ati2evxx.exe
744 svchost.exe
812 svchost.exe
848 svchost.exe
900 svchost.exe
1024 svchost.exe
1240 Ati2evxx.exe
1336 spoolsv.exe
1492 aswUpdSv.exe
1544 Mixer.exe
1552 GSICON.EXE
1560 dslagent.exe
1568 jusched.exe
1576 RecSche.exe
1596 atiptaxx.exe
1604 winampa.exe
1672 ashDisp.exe
1680 ctfmon.exe
1688 MsnMsgr.Exe
1696 msmsgs.exe
1740 ashServ.exe
1868 lvhidsvc.exe
2056 ashMaiSv.exe
2112 alg.exe
3936 emule.exe
2272 svchost.exe
4776 drwtsn32.exe
7792 explorer.exe

*----> Elenco moduli <----*
(0000000001000000 - 00000000010ff000: G:\WINDOWS\explorer.exe
(0000000001540000 - 0000000001553000: G:\WINDOWS\system32\browselc.dll
(0000000002610000 - 000000000263b000: G:\Programmi\WinRAR\rarext.dll
(0000000002660000 - 0000000002678000: G:\WINDOWS\system32\odbcint.dll
(0000000002d40000 - 0000000002d8f000: G:\WINDOWS\system32\DRMClien.DLL
(0000000010000000 - 0000000010026000: G:\Programmi\DivX\Dr.DivX\EncodeDivXExt.dll
(0000000012000000 - 0000000012103000: G:\PROGRA~1\ALWILS~1\Avast4\xerces.dll
(0000000020000000 - 00000000202d5000: G:\WINDOWS\system32\xpsp2res.dll
(000000004b360000 - 000000004b389000: G:\WINDOWS\system32\wmidx.dll
(000000004d530000 - 000000004d588000: G:\WINDOWS\system32\WINHTTP.dll
(00000000596b0000 - 000000005987a000: G:\WINDOWS\AppPatch\AcGenral.DLL
(0000000059e10000 - 0000000059e4c000: G:\WINDOWS\system32\WMASF.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\UxTheme.dll
(000000005ba40000 - 000000005bab2000: G:\WINDOWS\system32\themeui.dll
(000000005bc70000 - 000000005bcc4000: G:\WINDOWS\system32\NETAPI32.dll
(000000005c4a0000 - 000000005c555000: g:\windows\srchasst\srchui.dll
(000000005c570000 - 000000005c582000: g:\windows\srchasst\srchctls.dll
(000000005cef0000 - 000000005cf18000: G:\WINDOWS\system32\shmedia.dll
(000000005cf90000 - 000000005cfb6000: G:\WINDOWS\system32\ShimEng.dll
(000000005d4d0000 - 000000005d567000: G:\WINDOWS\system32\comctl32.dll
(0000000060060000 - 0000000060093000: G:\WINDOWS\system32\msutb.dll
(0000000064000000 - 000000006400f000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnOS.dll
(0000000064080000 - 00000000640a2000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnB.dll
(0000000064100000 - 0000000064126000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnS.dll
(0000000064200000 - 0000000064214000: G:\PROGRA~1\ALWILS~1\Avast4\aswScan.dll
(0000000064280000 - 0000000064362000: G:\PROGRA~1\ALWILS~1\Avast4\aswEngin.dll
(0000000064500000 - 0000000064538000: G:\PROGRA~1\ALWILS~1\Avast4\ashBase.dll
(0000000064580000 - 000000006458c000: G:\PROGRA~1\ALWILS~1\Avast4\aswAux.dll
(0000000064800000 - 0000000064818000: G:\PROGRA~1\ALWILS~1\Avast4\ashTask.dll
(0000000065000000 - 000000006502a000: G:\PROGRA~1\ALWILS~1\Avast4\Aavm4h.dll
(0000000065100000 - 0000000065108000: G:\PROGRA~1\ALWILS~1\Avast4\AavmRpch.dll
(0000000065700000 - 0000000065718000: G:\Programmi\Alwil Software\Avast4\AhAScr.dll
(0000000065780000 - 00000000657a1000: G:\Programmi\Alwil Software\Avast4\AhJsctNs.dll
(000000006c6b0000 - 000000006c6fd000: G:\WINDOWS\system32\DUSER.dll
(0000000071230000 - 000000007123d000: G:\WINDOWS\msagent\agentdp2.dll
(0000000071a20000 - 0000000071a28000: G:\WINDOWS\system32\WS2HELP.dll
(0000000071a30000 - 0000000071a47000: G:\WINDOWS\system32\WS2_32.dll
(0000000071a50000 - 0000000071a5a000: G:\WINDOWS\system32\WSOCK32.dll
(0000000071aa0000 - 0000000071ab2000: G:\WINDOWS\system32\MPR.dll
(0000000071b80000 - 0000000071b93000: G:\WINDOWS\system32\SAMLIB.dll
(0000000071ba0000 - 0000000071bae000: G:\WINDOWS\System32\ntlanman.dll
(0000000071c10000 - 0000000071c17000: G:\WINDOWS\System32\NETRAP.dll
(0000000071c20000 - 0000000071c60000: G:\WINDOWS\System32\NETUI1.dll
(0000000071c60000 - 0000000071c77000: G:\WINDOWS\System32\NETUI0.dll
(0000000071cd0000 - 0000000071cec000: G:\WINDOWS\system32\actxprxy.dll
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(0000000072f70000 - 0000000072f96000: G:\WINDOWS\system32\WINSPOOL.DRV
(00000000732f0000 - 0000000073347000: G:\WINDOWS\system32\zipfldr.dll
(0000000073540000 - 0000000073587000: G:\WINDOWS\system32\mstask.dll
(0000000073620000 - 0000000073627000: G:\WINDOWS\system32\msdmo.dll
(0000000073ac0000 - 0000000073ad7000: G:\WINDOWS\system32\AVIFIL32.dll
(0000000073b10000 - 0000000073b24000: G:\WINDOWS\system32\sti.dll
(00000000745e0000 - 000000007461d000: G:\WINDOWS\system32\ODBC32.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(0000000074910000 - 0000000074a40000: G:\WINDOWS\system32\msxml3.dll
(0000000074a60000 - 0000000074a68000: G:\WINDOWS\system32\POWRPROF.dll
(0000000074a70000 - 0000000074a77000: G:\WINDOWS\system32\CFGMGR32.dll
(0000000074a80000 - 0000000074a8a000: G:\WINDOWS\system32\BatMeter.dll
(0000000074ac0000 - 0000000074b07000: G:\WINDOWS\system32\webcheck.dll
(0000000074b10000 - 0000000074b9f000: G:\WINDOWS\system32\PRINTUI.dll
(0000000074c10000 - 0000000074c3c000: G:\WINDOWS\system32\OLEACC.dll
(0000000075920000 - 0000000075a18000: G:\WINDOWS\system32\MSGINA.dll
(0000000075c00000 - 0000000075c6e000: G:\WINDOWS\system32\jscript.dll
(0000000075d50000 - 0000000075de1000: G:\WINDOWS\system32\MLANG.dll
(0000000075df0000 - 0000000075e11000: G:\WINDOWS\system32\MSVFW32.dll
(0000000075e40000 - 0000000075ef0000: G:\WINDOWS\system32\SXS.DLL
(0000000075f10000 - 0000000075f17000: G:\WINDOWS\System32\drprov.dll
(0000000075f20000 - 0000000075f29000: G:\WINDOWS\System32\davclnt.dll
(0000000075f30000 - 000000007602c000: G:\WINDOWS\system32\BROWSEUI.dll
(0000000076030000 - 0000000076095000: G:\WINDOWS\system32\MSVCP60.dll
(00000000761e0000 - 0000000076201000: G:\WINDOWS\system32\stobject.dll
(0000000076310000 - 0000000076320000: G:\WINDOWS\system32\WINSTA.dll
(0000000076330000 - 0000000076335000: G:\WINDOWS\system32\MSIMG32.dll
(0000000076360000 - 00000000763aa000: G:\WINDOWS\system32\comdlg32.dll
(00000000763b0000 - 0000000076559000: G:\WINDOWS\system32\NETSHELL.dll
(00000000765b0000 - 00000000765cd000: G:\WINDOWS\System32\CSCDLL.dll
(0000000076760000 - 0000000076773000: G:\WINDOWS\system32\NTDSAPI.dll
(0000000076890000 - 0000000076913000: G:\WINDOWS\system32\CRYPTUI.dll
(0000000076940000 - 0000000076948000: G:\WINDOWS\system32\LINKINFO.dll
(0000000076950000 - 0000000076976000: G:\WINDOWS\system32\ntshrui.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076ae0000 - 0000000076af1000: G:\WINDOWS\system32\ATL.DLL
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bc0000 - 0000000076bee000: G:\WINDOWS\system32\credui.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d20000 - 0000000076d39000: G:\WINDOWS\system32\iphlpapi.dll
(0000000076dd0000 - 0000000076df5000: G:\WINDOWS\system32\adsldpc.dll
(0000000076e40000 - 0000000076e4e000: G:\WINDOWS\system32\rtutils.dll
(0000000076e50000 - 0000000076e62000: G:\WINDOWS\system32\rasman.dll
(0000000076e70000 - 0000000076e9f000: G:\WINDOWS\system32\TAPI32.dll
(0000000076ea0000 - 0000000076edc000: G:\WINDOWS\system32\RASAPI32.dll
(0000000076ee0000 - 0000000076f07000: G:\WINDOWS\system32\DNSAPI.dll
(0000000076f10000 - 0000000076f18000: G:\WINDOWS\system32\WTSAPI32.dll
(0000000076f20000 - 0000000076f4d000: G:\WINDOWS\system32\WLDAP32.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: G:\WINDOWS\system32\WININET.dll
(0000000077230000 - 00000000772ce000: G:\WINDOWS\system32\urlmon.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(0000000077730000 - 000000007789c000: G:\WINDOWS\system32\SHDOCVW.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\SETUPAPI.dll
(00000000779f0000 - 0000000077a45000: G:\WINDOWS\System32\cscui.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\appHelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077c90000 - 0000000077cc2000: G:\WINDOWS\system32\ACTIVEDS.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f10000 - 0000000077f21000: G:\WINDOWS\system32\Secur32.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c340000 - 000000007c396000: G:\WINDOWS\system32\MSVCR71.dll
(000000007c3a0000 - 000000007c41b000: G:\WINDOWS\system32\MSVCP71.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll
(000000007d1f0000 - 000000007d4a2000: G:\WINDOWS\system32\msi.dll
(000000007d7a0000 - 000000007d9aa000: G:\WINDOWS\system32\wmvcore.dll
(000000007d9b0000 - 000000007db16000: G:\WINDOWS\system32\query.dll

*----> Scarico dello stato per l'id del thread 0x988 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
*** ERROR: Module load completed but symbols could not be loaded for G:\WINDOWS\explorer.exe
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
FAULT ->GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x12c8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1390 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x12b8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x520 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1320 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x12dc <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1384 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x13e8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x14f4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x14c0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1318 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1048 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1364 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1408 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1480 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x14c8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x163c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x16a4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1164 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x2b0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1554 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1da4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005


Exception dell'applicazione:
App: G:\WINDOWS\explorer.exe (pid=7792)
Ora: 23/12/2004 @ 15:44:33.086
Numero exception: 80000007
()

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
432 smss.exe
496 csrss.exe
528 winlogon.exe
572 services.exe
584 lsass.exe
732 Ati2evxx.exe
744 svchost.exe
812 svchost.exe
848 svchost.exe
900 svchost.exe
1024 svchost.exe
1240 Ati2evxx.exe
1336 spoolsv.exe
1492 aswUpdSv.exe
1544 Mixer.exe
1552 GSICON.EXE
1560 dslagent.exe
1568 jusched.exe
1576 RecSche.exe
1596 atiptaxx.exe
1604 winampa.exe
1672 ashDisp.exe
1680 ctfmon.exe
1688 MsnMsgr.Exe
1696 msmsgs.exe
1740 ashServ.exe
1868 lvhidsvc.exe
2056 ashMaiSv.exe
2112 alg.exe
3936 emule.exe
2272 svchost.exe
5824 drwtsn32.exe
6376 explorer.exe

*----> Elenco moduli <----*
(0000000001000000 - 00000000010ff000: G:\WINDOWS\explorer.exe
(00000000016e0000 - 00000000016f3000: G:\WINDOWS\system32\browselc.dll
(0000000002780000 - 00000000027ab000: G:\Programmi\WinRAR\rarext.dll
(00000000027d0000 - 00000000027e8000: G:\WINDOWS\system32\odbcint.dll
(0000000002d00000 - 0000000002d4f000: G:\WINDOWS\system32\DRMClien.DLL
(0000000010000000 - 0000000010026000: G:\Programmi\DivX\Dr.DivX\EncodeDivXExt.dll
(0000000012000000 - 0000000012103000: G:\PROGRA~1\ALWILS~1\Avast4\xerces.dll
(0000000020000000 - 00000000202d5000: G:\WINDOWS\system32\xpsp2res.dll
(000000004b360000 - 000000004b389000: G:\WINDOWS\system32\wmidx.dll
(000000004d530000 - 000000004d588000: G:\WINDOWS\system32\WINHTTP.dll
(00000000596b0000 - 000000005987a000: G:\WINDOWS\AppPatch\AcGenral.DLL
(0000000059e10000 - 0000000059e4c000: G:\WINDOWS\system32\WMASF.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\UxTheme.dll
(000000005ba40000 - 000000005bab2000: G:\WINDOWS\system32\themeui.dll
(000000005bc70000 - 000000005bcc4000: G:\WINDOWS\system32\NETAPI32.dll
(000000005c4a0000 - 000000005c555000: g:\windows\srchasst\srchui.dll
(000000005c570000 - 000000005c582000: g:\windows\srchasst\srchctls.dll
(000000005cef0000 - 000000005cf18000: G:\WINDOWS\system32\shmedia.dll
(000000005cf90000 - 000000005cfb6000: G:\WINDOWS\system32\ShimEng.dll
(000000005d4d0000 - 000000005d567000: G:\WINDOWS\system32\comctl32.dll
(0000000060060000 - 0000000060093000: G:\WINDOWS\system32\msutb.dll
(0000000064000000 - 000000006400f000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnOS.dll
(0000000064080000 - 00000000640a2000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnB.dll
(0000000064100000 - 0000000064126000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnS.dll
(0000000064200000 - 0000000064214000: G:\PROGRA~1\ALWILS~1\Avast4\aswScan.dll
(0000000064280000 - 0000000064362000: G:\PROGRA~1\ALWILS~1\Avast4\aswEngin.dll
(0000000064500000 - 0000000064538000: G:\PROGRA~1\ALWILS~1\Avast4\ashBase.dll
(0000000064580000 - 000000006458c000: G:\PROGRA~1\ALWILS~1\Avast4\aswAux.dll
(0000000064800000 - 0000000064818000: G:\PROGRA~1\ALWILS~1\Avast4\ashTask.dll
(0000000065000000 - 000000006502a000: G:\PROGRA~1\ALWILS~1\Avast4\Aavm4h.dll
(0000000065100000 - 0000000065108000: G:\PROGRA~1\ALWILS~1\Avast4\AavmRpch.dll
(0000000065700000 - 0000000065718000: G:\Programmi\Alwil Software\Avast4\AhAScr.dll
(0000000065780000 - 00000000657a1000: G:\Programmi\Alwil Software\Avast4\AhJsctNs.dll
(000000006c6b0000 - 000000006c6fd000: G:\WINDOWS\system32\DUSER.dll
(0000000071230000 - 000000007123d000: G:\WINDOWS\msagent\agentdp2.dll
(0000000071a20000 - 0000000071a28000: G:\WINDOWS\system32\WS2HELP.dll
(0000000071a30000 - 0000000071a47000: G:\WINDOWS\system32\WS2_32.dll
(0000000071a50000 - 0000000071a5a000: G:\WINDOWS\system32\WSOCK32.dll
(0000000071aa0000 - 0000000071ab2000: G:\WINDOWS\system32\MPR.dll
(0000000071b80000 - 0000000071b93000: G:\WINDOWS\system32\SAMLIB.dll
(0000000071ba0000 - 0000000071bae000: G:\WINDOWS\System32\ntlanman.dll
(0000000071c10000 - 0000000071c17000: G:\WINDOWS\System32\NETRAP.dll
(0000000071c20000 - 0000000071c60000: G:\WINDOWS\System32\NETUI1.dll
(0000000071c60000 - 0000000071c77000: G:\WINDOWS\System32\NETUI0.dll
(0000000071cd0000 - 0000000071cec000: G:\WINDOWS\system32\actxprxy.dll
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(0000000072f70000 - 0000000072f96000: G:\WINDOWS\system32\WINSPOOL.DRV
(00000000732f0000 - 0000000073347000: G:\WINDOWS\system32\zipfldr.dll
(0000000073540000 - 0000000073587000: G:\WINDOWS\system32\mstask.dll
(0000000073620000 - 0000000073627000: G:\WINDOWS\system32\msdmo.dll
(0000000073ac0000 - 0000000073ad7000: G:\WINDOWS\system32\AVIFIL32.dll
(0000000073b10000 - 0000000073b24000: G:\WINDOWS\system32\sti.dll
(00000000745e0000 - 000000007461d000: G:\WINDOWS\system32\ODBC32.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(0000000074910000 - 0000000074a40000: G:\WINDOWS\system32\msxml3.dll
(0000000074a60000 - 0000000074a68000: G:\WINDOWS\system32\POWRPROF.dll
(0000000074a70000 - 0000000074a77000: G:\WINDOWS\system32\CFGMGR32.dll
(0000000074a80000 - 0000000074a8a000: G:\WINDOWS\system32\BatMeter.dll
(0000000074ac0000 - 0000000074b07000: G:\WINDOWS\system32\webcheck.dll
(0000000074b10000 - 0000000074b9f000: G:\WINDOWS\system32\PRINTUI.dll
(0000000074c10000 - 0000000074c3c000: G:\WINDOWS\system32\OLEACC.dll
(0000000075920000 - 0000000075a18000: G:\WINDOWS\system32\MSGINA.dll
(0000000075c00000 - 0000000075c6e000: G:\WINDOWS\system32\jscript.dll
(0000000075d50000 - 0000000075de1000: G:\WINDOWS\system32\MLANG.dll
(0000000075df0000 - 0000000075e11000: G:\WINDOWS\system32\MSVFW32.dll
(0000000075e40000 - 0000000075ef0000: G:\WINDOWS\system32\SXS.DLL
(0000000075f10000 - 0000000075f17000: G:\WINDOWS\System32\drprov.dll
(0000000075f20000 - 0000000075f29000: G:\WINDOWS\System32\davclnt.dll
(0000000075f30000 - 000000007602c000: G:\WINDOWS\system32\BROWSEUI.dll
(0000000076030000 - 0000000076095000: G:\WINDOWS\system32\MSVCP60.dll
(00000000761e0000 - 0000000076201000: G:\WINDOWS\system32\stobject.dll
(0000000076310000 - 0000000076320000: G:\WINDOWS\system32\WINSTA.dll
(0000000076330000 - 0000000076335000: G:\WINDOWS\system32\MSIMG32.dll
(0000000076360000 - 00000000763aa000: G:\WINDOWS\system32\comdlg32.dll
(00000000763b0000 - 0000000076559000: G:\WINDOWS\system32\NETSHELL.dll
(00000000765b0000 - 00000000765cd000: G:\WINDOWS\System32\CSCDLL.dll
(0000000076760000 - 0000000076773000: G:\WINDOWS\system32\NTDSAPI.dll
(0000000076890000 - 0000000076913000: G:\WINDOWS\system32\CRYPTUI.dll
(0000000076940000 - 0000000076948000: G:\WINDOWS\system32\LINKINFO.dll
(0000000076950000 - 0000000076976000: G:\WINDOWS\system32\ntshrui.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076ae0000 - 0000000076af1000: G:\WINDOWS\system32\ATL.DLL
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bc0000 - 0000000076bee000: G:\WINDOWS\system32\credui.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d20000 - 0000000076d39000: G:\WINDOWS\system32\iphlpapi.dll
(0000000076dd0000 - 0000000076df5000: G:\WINDOWS\system32\adsldpc.dll
(0000000076e40000 - 0000000076e4e000: G:\WINDOWS\system32\rtutils.dll
(0000000076e50000 - 0000000076e62000: G:\WINDOWS\system32\rasman.dll
(0000000076e70000 - 0000000076e9f000: G:\WINDOWS\system32\TAPI32.dll
(0000000076ea0000 - 0000000076edc000: G:\WINDOWS\system32\RASAPI32.dll
(0000000076ee0000 - 0000000076f07000: G:\WINDOWS\system32\DNSAPI.dll
(0000000076f10000 - 0000000076f18000: G:\WINDOWS\system32\WTSAPI32.dll
(0000000076f20000 - 0000000076f4d000: G:\WINDOWS\system32\WLDAP32.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: G:\WINDOWS\system32\WININET.dll
(0000000077230000 - 00000000772ce000: G:\WINDOWS\system32\urlmon.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(0000000077730000 - 000000007789c000: G:\WINDOWS\system32\SHDOCVW.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\SETUPAPI.dll
(00000000779f0000 - 0000000077a45000: G:\WINDOWS\System32\cscui.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\appHelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077c90000 - 0000000077cc2000: G:\WINDOWS\system32\ACTIVEDS.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f10000 - 0000000077f21000: G:\WINDOWS\system32\Secur32.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c340000 - 000000007c396000: G:\WINDOWS\system32\MSVCR71.dll
(000000007c3a0000 - 000000007c41b000: G:\WINDOWS\system32\MSVCP71.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll
(000000007d1f0000 - 000000007d4a2000: G:\WINDOWS\system32\msi.dll
(000000007d7a0000 - 000000007d9aa000: G:\WINDOWS\system32\wmvcore.dll
(000000007d9b0000 - 000000007db16000: G:\WINDOWS\system32\query.dll

*----> Scarico dello stato per l'id del thread 0x1e74 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
*** ERROR: Module load completed but symbols could not be loaded for G:\WINDOWS\explorer.exe
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
FAULT ->GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1e78 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1e7c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1e80 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1e84 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1e88 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1e8c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1e94 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1e9c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1ea0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1ea4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1ef8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1fbc <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1fc0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1fc4 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1fc8 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1fcc <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1fd0 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x1018 <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x127c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x168c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005
*----> Scarico dello stato per l'id del thread 0x170c <----*

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Unable to retrieve register information

GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
funzione: <nosymbols>
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
No prior disassembly possible
:
00000000 ?? ???
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
GetContextState failed, 0x8007001F
:
00000000 ?? ???
Error 0x00000001
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
00000002 ?? ???
00000004 ?? ???
00000006 ?? ???
00000008 ?? ???
0000000a ?? ???
0000000c ?? ???
0000000e ?? ???
00000010 ?? ???
00000012 ?? ???
00000014 ?? ???

*----> Back Trace dello stack <----*
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Error 0x0000001B

Error 0x80070005


Exception dell'applicazione:
App: G:\WINDOWS\explorer.exe (pid=6376)
Ora: 23/12/2004 @ 15:48:10.919
Numero exception: 80000007
()

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
432 smss.exe
496 csrss.exe
528 winlogon.exe
572 services.exe
584 lsass.exe
732 Ati2evxx.exe
744 svchost.exe
812 svchost.exe
848 svchost.exe
900 svchost.exe
1024 svchost.exe
1240 Ati2evxx.exe
1336 spoolsv.exe
1492 aswUpdSv.exe
1544 Mixer.exe
1552 GSICON.EXE
1560 dslagent.exe
1568 jusched.exe
1576 RecSche.exe
1596 atiptaxx.exe
1604 winampa.exe
1672 ashDisp.exe
1680 ctfmon.exe
1688 MsnMsgr.Exe
1696 msmsgs.exe
1740 ashServ.exe
1868 lvhidsvc.exe
2056 ashMaiSv.exe
2112 alg.exe
3936 emule.exe
2272 svchost.exe
6376 explorer.exe
5652 drwtsn32.exe

*----> Elenco moduli <----*
(0000000000d60000 - 0000000000d86000: G:\Programmi\DivX\Dr.DivX\EncodeDivXExt.dll
(0000000001000000 - 00000000010ff000: G:\WINDOWS\explorer.exe
(0000000001530000 - 000000000154e000: G:\Programmi\CFi\ShellToys\CFiShlEx.dll
(0000000001550000 - 0000000001563000: G:\WINDOWS\system32\browselc.dll
(0000000001b00000 - 0000000001b18000: G:\WINDOWS\system32\odbcint.dll
(0000000001b20000 - 0000000001b6f000: G:\WINDOWS\system32\DRMClien.DLL
(0000000001f70000 - 0000000001ffc000: G:\WINDOWS\system32\shdoclc.dll
(0000000003070000 - 000000000309b000: G:\Programmi\WinRAR\rarext.dll
(0000000010000000 - 00000000101b0000: G:\Programmi\ffdshow\ffdshow.ax
(0000000012000000 - 0000000012103000: G:\PROGRA~1\ALWILS~1\Avast4\xerces.dll
(0000000020000000 - 00000000202d5000: G:\WINDOWS\system32\xpsp2res.dll
(000000004b360000 - 000000004b389000: G:\WINDOWS\system32\wmidx.dll
(000000004d530000 - 000000004d588000: G:\WINDOWS\system32\WINHTTP.dll
(000000004ebd0000 - 000000004ed73000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
(000000004f330000 - 000000004f404000: G:\WINDOWS\system32\wmvdmod.dll
(00000000596b0000 - 000000005987a000: G:\WINDOWS\AppPatch\AcGenral.DLL
(0000000059e10000 - 0000000059e4c000: G:\WINDOWS\system32\WMASF.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\UxTheme.dll
(000000005ba40000 - 000000005bab2000: G:\WINDOWS\system32\themeui.dll
(000000005bc70000 - 000000005bcc4000: G:\WINDOWS\system32\NETAPI32.dll
(000000005cef0000 - 000000005cf18000: G:\WINDOWS\system32\shmedia.dll
(000000005cf90000 - 000000005cfb6000: G:\WINDOWS\system32\ShimEng.dll
(000000005d4d0000 - 000000005d567000: G:\WINDOWS\system32\comctl32.dll
(000000005eba0000 - 000000005ebaa000: G:\WINDOWS\system32\perfos.dll
(0000000060060000 - 0000000060093000: G:\WINDOWS\system32\msutb.dll
(0000000064000000 - 000000006400f000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnOS.dll
(0000000064080000 - 00000000640a2000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnB.dll
(0000000064100000 - 0000000064126000: G:\PROGRA~1\ALWILS~1\Avast4\aswCmnS.dll
(0000000064200000 - 0000000064214000: G:\PROGRA~1\ALWILS~1\Avast4\aswScan.dll
(0000000064280000 - 0000000064362000: G:\PROGRA~1\ALWILS~1\Avast4\aswEngin.dll
(0000000064500000 - 0000000064538000: G:\PROGRA~1\ALWILS~1\Avast4\ashBase.dll
(0000000064580000 - 000000006458c000: G:\PROGRA~1\ALWILS~1\Avast4\aswAux.dll
(0000000064800000 - 0000000064818000: G:\PROGRA~1\ALWILS~1\Avast4\ashTask.dll
(0000000065000000 - 000000006502a000: G:\PROGRA~1\ALWILS~1\Avast4\Aavm4h.dll
(0000000065100000 - 0000000065108000: G:\PROGRA~1\ALWILS~1\Avast4\AavmRpch.dll
(0000000065700000 - 0000000065718000: G:\Programmi\Alwil Software\Avast4\AhAScr.dll
(0000000065780000 - 00000000657a1000: G:\Programmi\Alwil Software\Avast4\AhJsctNs.dll
(0000000066bc0000 - 0000000066c4c000: G:\WINDOWS\system32\qedit.dll
(0000000067a00000 - 0000000067a3b000: G:\WINDOWS\system32\qasf.dll
(000000006c6b0000 - 000000006c6fd000: G:\WINDOWS\system32\DUSER.dll
(0000000071a20000 - 0000000071a28000: G:\WINDOWS\system32\WS2HELP.dll
(0000000071a30000 - 0000000071a47000: G:\WINDOWS\system32\WS2_32.dll
(0000000071a50000 - 0000000071a5a000: G:\WINDOWS\system32\WSOCK32.dll
(0000000071aa0000 - 0000000071ab2000: G:\WINDOWS\system32\MPR.dll
(0000000071b80000 - 0000000071b93000: G:\WINDOWS\system32\SAMLIB.dll
(0000000071ba0000 - 0000000071bae000: G:\WINDOWS\System32\ntlanman.dll
(0000000071c10000 - 0000000071c17000: G:\WINDOWS\System32\NETRAP.dll
(0000000071c20000 - 0000000071c60000: G:\WINDOWS\System32\NETUI1.dll
(0000000071c60000 - 0000000071c77000: G:\WINDOWS\System32\NETUI0.dll
(0000000071cd0000 - 0000000071cec000: G:\WINDOWS\system32\actxprxy.dll
(0000000072210000 - 000000007223b000: G:\WINDOWS\system32\DINPUT.dll
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(0000000072f70000 - 0000000072f96000: G:\WINDOWS\system32\WINSPOOL.DRV
(00000000732f0000 - 0000000073347000: G:\WINDOWS\system32\zipfldr.dll
(0000000073540000 - 0000000073587000: G:\WINDOWS\system32\mstask.dll
(0000000073620000 - 0000000073627000: G:\WINDOWS\system32\msdmo.dll
(0000000073aa0000 - 0000000073ab4000: G:\WINDOWS\system32\mscms.dll
(0000000073ac0000 - 0000000073ad7000: G:\WINDOWS\system32\AVIFIL32.dll
(0000000073b10000 - 0000000073b24000: G:\WINDOWS\system32\sti.dll
(0000000073e80000 - 0000000073edc000: G:\WINDOWS\system32\DSound.dll
(00000000745e0000 - 000000007461d000: G:\WINDOWS\system32\ODBC32.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(00000000747a0000 - 000000007490e000: G:\WINDOWS\system32\quartz.dll
(0000000074910000 - 0000000074a40000: G:\WINDOWS\system32\msxml3.dll
(0000000074a60000 - 0000000074a68000: G:\WINDOWS\system32\POWRPROF.dll
(0000000074a70000 - 0000000074a77000: G:\WINDOWS\system32\CFGMGR32.dll
(0000000074a80000 - 0000000074a8a000: G:\WINDOWS\system32\BatMeter.dll
(0000000074ac0000 - 0000000074b07000: G:\WINDOWS\system32\webcheck.dll
(0000000074b10000 - 0000000074b9f000: G:\WINDOWS\system32\PRINTUI.dll
(0000000075920000 - 0000000075a18000: G:\WINDOWS\system32\MSGINA.dll
(0000000075c00000 - 0000000075c6e000: G:\WINDOWS\system32\jscript.dll
(0000000075d50000 - 0000000075de1000: G:\WINDOWS\system32\MLANG.dll
(0000000075df0000 - 0000000075e11000: G:\WINDOWS\system32\MSVFW32.dll
(0000000075e40000 - 0000000075ef0000: G:\WINDOWS\system32\SXS.DLL
(0000000075f10000 - 0000000075f17000: G:\WINDOWS\System32\drprov.dll
(0000000075f20000 - 0000000075f29000: G:\WINDOWS\System32\davclnt.dll
(0000000075f30000 - 000000007602c000: G:\WINDOWS\system32\BROWSEUI.dll
(00000000761e0000 - 0000000076201000: G:\WINDOWS\system32\stobject.dll
(0000000076310000 - 0000000076320000: G:\WINDOWS\system32\WINSTA.dll
(0000000076330000 - 0000000076335000: G:\WINDOWS\system32\MSIMG32.dll
(0000000076360000 - 00000000763aa000: G:\WINDOWS\system32\comdlg32.dll
(00000000763b0000 - 0000000076559000: G:\WINDOWS\system32\NETSHELL.dll
(00000000765b0000 - 00000000765cd000: G:\WINDOWS\System32\CSCDLL.dll
(0000000076600000 - 0000000076611000: G:\WINDOWS\system32\devenum.dll
(0000000076760000 - 0000000076773000: G:\WINDOWS\system32\NTDSAPI.dll
(0000000076890000 - 0000000076913000: G:\WINDOWS\system32\CRYPTUI.dll
(0000000076940000 - 0000000076948000: G:\WINDOWS\system32\LINKINFO.dll
(0000000076950000 - 0000000076976000: G:\WINDOWS\system32\ntshrui.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076ae0000 - 0000000076af1000: G:\WINDOWS\system32\ATL.DLL
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bc0000 - 0000000076bee000: G:\WINDOWS\system32\credui.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d20000 - 0000000076d39000: G:\WINDOWS\system32\iphlpapi.dll
(0000000076dd0000 - 0000000076df5000: G:\WINDOWS\system32\adsldpc.dll
(0000000076e40000 - 0000000076e4e000: G:\WINDOWS\system32\rtutils.dll
(0000000076e50000 - 0000000076e62000: G:\WINDOWS\system32\rasman.dll
(0000000076e70000 - 0000000076e9f000: G:\WINDOWS\system32\TAPI32.dll
(0000000076ea0000 - 0000000076edc000: G:\WINDOWS\system32\RASAPI32.dll
(0000000076ee0000 - 0000000076f07000: G:\WINDOWS\system32\DNSAPI.dll
(0000000076f10000 - 0000000076f18000: G:\WINDOWS\system32\WTSAPI32.dll
(0000000076f20000 - 0000000076f4d000: G:\WINDOWS\system32\WLDAP32.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: G:\WINDOWS\system32\WININET.dll
(0000000077230000 - 00000000772ce000: G:\WINDOWS\system32\urlmon.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(0000000077660000 - 0000000077681000: G:\WINDOWS\system32\NTMARTA.DLL
(0000000077730000 - 000000007789c000: G:\WINDOWS\system32\SHDOCVW.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\SETUPAPI.dll
(00000000779f0000 - 0000000077a45000: G:\WINDOWS\System32\cscui.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\appHelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077c90000 - 0000000077cc2000: G:\WINDOWS\system32\ACTIVEDS.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f10000 - 0000000077f21000: G:\WINDOWS\system32\Secur32.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c340000 - 000000007c396000: G:\WINDOWS\system32\MSVCR71.dll
(000000007c3a0000 - 000000007c41b000: G:\WINDOWS\system32\MSVCP71.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll
(000000007d1f0000 - 000000007d4a2000: G:\WINDOWS\system32\msi.dll
(000000007d7a0000 - 000000007d9aa000: G:\WINDOWS\system32\wmvcore.dll
(000000007d9b0000 - 000000007db16000: G:\WINDOWS\system32\query.dll

*----> Scarico dello stato per l'id del thread 0x18ec <----*

eax=00000000 ebx=00000003 ecx=00000007 edx=00109428 esi=0010fff0 edi=00000000
eip=7c91eb94 esp=0007fef0 ebp=0007ff08 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202

*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\ntdll.dll -
funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
FAULT ->ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\SHELL32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Module load completed but symbols could not be loaded for G:\WINDOWS\explorer.exe
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007ff08 7ca42c57 00000000 0007ff5c 01016e95 ntdll!KiFastSystemCallRet
0007ff14 01016e95 0010fff0 7ffde000 0007ffc0 SHELL32!Ordinal201+0x28
0007ff5c 0101e2b6 00000000 00000000 00020642 explorer+0x16e95
0007ffc0 7c816d4f 00d62570 0006e890 7ffde000 explorer+0x1e2b6
0007fff0 00000000 0101e24e 00000000 78746341 kernel32!RegisterWaitForInputIdle+0x49

*----> Scarico Raw Stack <----*
000000000007fef0 f5 93 d1 77 ee 95 a4 7c - ac 92 80 7c f0 ff 10 00 ...w...|...|....
000000000007ff00 f0 ff 10 00 14 ff 07 00 - 14 ff 07 00 57 2c a4 7c ............W,.|
000000000007ff10 00 00 00 00 5c ff 07 00 - 95 6e 01 01 f0 ff 10 00 ....\....n......
000000000007ff20 00 e0 fd 7f c0 ff 07 00 - 00 00 00 00 24 fd 07 00 ............$...
000000000007ff30 50 ff 07 00 e0 ff 07 00 - 27 e0 91 7c ed aa 80 7c P.......'..|...|
000000000007ff40 ff ff ff ff 0c 00 00 00 - 00 00 00 00 5d 96 78 00 ............].x.
000000000007ff50 a8 00 00 00 01 00 00 00 - f0 ff 10 00 c0 ff 07 00 ................
000000000007ff60 b6 e2 01 01 00 00 00 00 - 00 00 00 00 42 06 02 00 ............B...
000000000007ff70 05 00 00 00 70 25 d6 00 - 90 e8 06 00 44 00 00 00 ....p%......D...
000000000007ff80 94 06 02 00 74 06 02 00 - 44 06 02 00 00 00 00 00 ....t...D.......
000000000007ff90 00 00 00 00 00 00 00 00 - 00 00 00 00 2e 00 00 00 ................
000000000007ffa0 00 00 00 00 3a ef 06 00 - 01 00 00 00 05 00 00 00 ....:...........
000000000007ffb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000007ffc0 f0 ff 07 00 4f 6d 81 7c - 70 25 d6 00 90 e8 06 00 ....Om.|p%......
000000000007ffd0 00 e0 fd 7f 38 b0 54 80 - c8 ff 07 00 a8 2d 3b 81 ....8.T......-;.
000000000007ffe0 ff ff ff ff f3 99 83 7c - 58 6d 81 7c 00 00 00 00 .......|Xm.|....
000000000007fff0 00 00 00 00 00 00 00 00 - 4e e2 01 01 00 00 00 00 ........N.......
0000000000080000 41 63 74 78 20 00 00 00 - 01 00 00 00 98 24 00 00 Actx ........$..
0000000000080010 c4 00 00 00 00 00 00 00 - 20 00 00 00 00 00 00 00 ........ .......
0000000000080020 14 00 00 00 01 00 00 00 - 06 00 00 00 34 00 00 00 ............4...

*----> Scarico dello stato per l'id del thread 0x18f0 <----*

eax=00000002 ebx=00000000 ecx=000ee7c4 edx=7c91eb94 esi=000b97c0 edi=000b9864
eip=7c91eb94 esp=00fafe1c ebp=00faff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00faff80 77da6c22 00faffa8 77da6a3b 000b97c0 ntdll!KiFastSystemCallRet
00faff88 77da6a3b 000b97c0 00000000 0007f88c RPCRT4!I_RpcBCacheFree+0x5ea
00faffa8 77da6c0a 000b9678 00faffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
00faffb4 7c80b50b 000c36e8 00000000 0007f88c RPCRT4!I_RpcBCacheFree+0x5d2
00faffec 00000000 77da6bf0 000c36e8 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000000fafe1c 99 e3 91 7c 03 67 da 77 - b0 01 00 00 70 ff fa 00 ...|.g.w....p...
0000000000fafe2c 00 00 00 00 90 5f e9 01 - 54 ff fa 00 b0 cc 57 80 ....._..T.....W.
0000000000fafe3c cb cc 57 80 64 5d 91 b8 - 78 f4 07 00 27 cc 57 80 ..W.d]..x...'.W.
0000000000fafe4c 37 47 56 80 02 26 ea 81 - 00 00 3b 81 a0 38 fc 81 7GV..&....;..8..
0000000000fafe5c 70 c5 56 80 28 f9 07 00 - 04 00 00 00 00 c6 56 80 p.V.(.........V.
0000000000fafe6c 00 00 44 00 50 03 00 00 - 05 00 00 00 00 e2 e6 81 ..D.P...........
0000000000fafe7c 00 00 00 00 a8 2d 3b 81 - 88 5b 91 b8 25 44 56 80 .....-;..[..%DV.
0000000000fafe8c 05 00 00 00 05 00 00 00 - b0 43 08 e2 60 5b 03 e1 .........C..`[..
0000000000fafe9c 02 00 00 00 fe ff f8 00 - 50 65 08 e1 b0 43 08 e2 ........Pe...C..
0000000000fafeac b0 35 56 00 00 00 00 00 - 00 00 00 00 5c 00 52 00 .5V.........\.R.
0000000000fafebc ff ff ff ff 28 5c 91 b8 - 6c 38 56 80 49 03 00 00 ....(\..l8V.I...
0000000000fafecc 34 00 00 c0 78 26 ea 81 - 48 e4 00 e1 1c 27 ea 81 4...x&..H....'..
0000000000fafedc 68 5c 91 b8 60 e4 00 e1 - 48 e4 00 e1 9c 36 50 c0 h\..`...H....6P.
0000000000fafeec 00 30 50 c0 98 c5 4a 81 - 1c 27 ea 81 78 26 ea 81 .0P...J..'..x&..
0000000000fafefc 00 00 00 00 01 00 00 00 - 7c 00 f8 00 9c 36 50 c0 ........|....6P.
0000000000faff0c 98 c5 4a 81 dc ca 4b 81 - 20 5c 91 b8 46 02 00 00 ..J...K. \..F...
0000000000faff1c 6a c8 4d 80 ac ca 4b 81 - 40 c9 4b 81 74 c9 4b 81 j.M...K.@.K.t.K.
0000000000faff2c 98 c5 4a 81 80 ff fa 00 - 99 66 da 77 4c ff fa 00 ..J......f.wL...
0000000000faff3c a9 66 da 77 ed 10 91 7c - 30 2f 0c 00 e8 36 0c 00 .f.w...|0/...6..
0000000000faff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......

*----> Scarico dello stato per l'id del thread 0x18f4 <----*

eax=774c319a ebx=00007530 ecx=7ffde000 edx=00000000 esi=00000000 edi=0113ff50
eip=7c91eb94 esp=0113ff20 ebp=0113ff78 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\ole32.dll -
ChildEBP RetAddr Args to Child
0113ff78 7c802451 0000ea60 00000000 0113ffb4 ntdll!KiFastSystemCallRet
0113ff88 774c2fcb 0000ea60 000c5e40 774c314d kernel32!Sleep+0xf
0113ffb4 7c80b50b 000c5e40 7c920945 7c92094e ole32!StringFromGUID2+0x2d1
0113ffec 00000000 774c319a 000c5e40 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000113ff20 5c d8 91 7c ed 23 80 7c - 00 00 00 00 50 ff 13 01 \..|.#.|....P...
000000000113ff30 50 25 80 7c f0 56 5d 77 - 30 75 00 00 14 00 00 00 P%.|.V]w0u......
000000000113ff40 01 00 00 00 00 00 00 00 - 00 00 00 00 10 00 00 00 ................
000000000113ff50 00 ba 3c dc ff ff ff ff - c4 fe 13 01 50 ff 13 01 ..<.........P...
000000000113ff60 30 ff 13 01 e4 fe 13 01 - dc ff 13 01 f3 99 83 7c 0..............|
000000000113ff70 58 24 80 7c 00 00 00 00 - 88 ff 13 01 51 24 80 7c X$.|........Q$.|
000000000113ff80 60 ea 00 00 00 00 00 00 - b4 ff 13 01 cb 2f 4c 77 `............/Lw
000000000113ff90 60 ea 00 00 40 5e 0c 00 - 4d 31 4c 77 00 00 00 00 `...@^..M1Lw....
000000000113ffa0 45 09 92 7c 40 5e 0c 00 - 00 00 4b 77 b5 31 4c 77 E..|@^....Kw.1Lw
000000000113ffb0 4e 09 92 7c ec ff 13 01 - 0b b5 80 7c 40 5e 0c 00 N..|.......|@^..
000000000113ffc0 45 09 92 7c 4e 09 92 7c - 40 5e 0c 00 00 b0 fd 7f E..|N..|@^......
000000000113ffd0 00 46 fc 81 c0 ff 13 01 - f8 4a e9 81 ff ff ff ff .F.......J......
000000000113ffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
000000000113fff0 00 00 00 00 9a 31 4c 77 - 40 5e 0c 00 00 00 00 00 .....1Lw@^......
0000000001140000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001140010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001140020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001140030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001140040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001140050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x18f8 <----*

eax=b839c6f8 ebx=00000000 ecx=e2039b68 edx=00000000 esi=7c98c0d8 edi=00000000
eip=7c91eb94 esp=0117ec18 ebp=0117eca0 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0008 es=6800 fs=003b gs=f030 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*


Exception dell'applicazione:
App: G:\Programmi\Deskshare\Video Caster\VideoCaster.exe (pid=9328)
Ora: 23/12/2004 @ 20:12:07.075
Numero exception: c0000005 (access violation)

*----> System Information <----*
Nome computer: LUCA
Nome utente: luka734
Id sessione terminal: 0
Numero processori: 1
Tipo processore: x86 Family 6 Model 8 Stepping 1
Versione di Windows: 5.1
Build corrente: 2600
Service Pack: 2
Tipo corrente: Uniprocessor Free
Organizzazione registrata:
Proprietario autorizzato: Luca

*----> Elenco Task <----*
0 System Process
4 System
432 smss.exe
504 csrss.exe
528 winlogon.exe
572 services.exe
584 lsass.exe
732 Ati2evxx.exe
744 svchost.exe
812 svchost.exe
852 svchost.exe
900 svchost.exe
964 svchost.exe
1220 Ati2evxx.exe
1332 spoolsv.exe
1464 aswUpdSv.exe
1496 ashServ.exe
1568 lvhidsvc.exe
1860 Mixer.exe
1868 GSICON.EXE
1876 dslagent.exe
1884 jusched.exe
1892 RecSche.exe
1900 atiptaxx.exe
1908 winampa.exe
1924 ashDisp.exe
1932 ctfmon.exe
1948 MsnMsgr.Exe
1960 msmsgs.exe
2080 ashMaiSv.exe
2104 alg.exe
2452 PDVDServ.exe
2204 emule.exe
5112 explorer.exe
7784 Winamp.exe
4792 FIREFOX.EXE
9328 VideoCaster.exe
4456 Mp3Mate.exe
2772 drwtsn32.exe

*----> Elenco moduli <----*
(0000000000400000 - 0000000000554000: G:\Programmi\Deskshare\Video Caster\VideoCaster.exe
(00000000012d0000 - 000000000131f000: G:\WINDOWS\system32\DRMClien.DLL
(00000000014a0000 - 00000000014c2000: G:\Programmi\File comuni\DeskShare Shared\View\DSListVw.dll
(0000000001770000 - 0000000001788000: G:\Programmi\Deskshare\Video Caster\DSWBDisplay.dll
(0000000001950000 - 0000000001969000: G:\Programmi\File comuni\DeskShare Shared\View\DSRegMgr.dll
(00000000019c0000 - 00000000019de000: G:\PROGRA~1\DESKSH~1\VIDEOC~1\INAXPL~1.OCX
(0000000001a30000 - 0000000001d05000: G:\WINDOWS\system32\xpsp2res.dll
(00000000023c0000 - 0000000002416000: G:\Programmi\Deskshare\Video Caster\Styles\Popular\Main.dll
(0000000002430000 - 000000000244c000: G:\Programmi\File comuni\DeskShare Shared\Effect\text.dll
(0000000002490000 - 00000000024a8000: G:\WINDOWS\system32\odbcint.dll
(00000000025d0000 - 0000000002645000: G:\Programmi\Deskshare\Video Caster\DSAutoSlide.dll
(0000000002950000 - 000000000297f000: G:\Programmi\File comuni\Ahead\DSFilter\NeSplitter.ax
(0000000002980000 - 0000000002aa0000: G:\Programmi\Deskshare\Video Caster\Styles\Birthday\Main.dll
(0000000002aa0000 - 0000000002acb000: G:\Programmi\DivX\Dr.DivX\AKE007.ddc
(0000000002c80000 - 0000000002def000: G:\Programmi\Deskshare\Video Caster\Styles\Christmas\Main.dll
(0000000002df0000 - 0000000002f47000: G:\Programmi\Deskshare\Video Caster\Styles\Easter\Main.dll
(0000000002f50000 - 0000000002f6f000: G:\WINDOWS\system32\xvidvfw.dll
(00000000030a0000 - 00000000031be000: G:\Programmi\Deskshare\Video Caster\Styles\General\Main.dll
(0000000003380000 - 0000000003513000: G:\Programmi\Deskshare\Video Caster\Styles\Party\Main.dll
(0000000003920000 - 00000000039aa000: G:\WINDOWS\system32\l3codeca.acm
(00000000039c0000 - 0000000003b70000: G:\Programmi\ffdshow\ffdshow.ax
(0000000003b70000 - 0000000003d0b000: G:\Programmi\File comuni\Ahead\DSFilter\NeVideo.ax
(0000000004300000 - 000000000444d000: G:\Programmi\Deskshare\Video Caster\Styles\Romantic\Main.dll
(0000000004450000 - 00000000045f3000: G:\Programmi\Deskshare\Video Caster\Styles\Thanksgiving\Main.dll
(0000000004600000 - 0000000004896000: G:\Programmi\Deskshare\Video Caster\Styles\Wedding\Main.dll
(0000000007ae0000 - 0000000007bfb000: G:\Programmi\File comuni\Ahead\Lib\AdvrCntr.dll
(0000000007c10000 - 00000000088b3000: G:\Programmi\Deskshare\Video Caster\Styles\New Year\Main.dll
(00000000098c0000 - 00000000099cf000: G:\WINDOWS\system32\xvidcore.dll
(00000000099d0000 - 0000000009acd000: G:\WINDOWS\system32\libmmd.dll
(0000000010000000 - 00000000102ca000: G:\Programmi\Deskshare\Video Caster\DSRegVC.dll
(0000000020000000 - 000000002008c000: G:\WINDOWS\system32\shdoclc.dll
(000000004b360000 - 000000004b389000: G:\WINDOWS\system32\wmidx.dll
(000000004ebd0000 - 000000004ed73000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
(0000000058560000 - 0000000058599000: G:\WINDOWS\system32\iac25_32.ax
(0000000058690000 - 0000000058694000: G:\WINDOWS\system32\tssoft32.acm
(00000000586a0000 - 00000000586be000: G:\WINDOWS\system32\sl_anet.acm
(00000000586c0000 - 00000000586c8000: G:\WINDOWS\system32\msgsm32.acm
(00000000586d0000 - 00000000586ed000: G:\WINDOWS\system32\msg723.acm
(00000000586f0000 - 00000000586f5000: G:\WINDOWS\system32\msg711.acm
(0000000058700000 - 000000005874d000: G:\WINDOWS\system32\msaud32.acm
(00000000587e0000 - 00000000587e7000: G:\WINDOWS\system32\imaadp32.acm
(0000000059e10000 - 0000000059e4c000: G:\WINDOWS\system32\WMASF.DLL
(000000005b180000 - 000000005b1b8000: G:\WINDOWS\system32\uxtheme.dll
(000000005bc70000 - 000000005bcc4000: G:\WINDOWS\system32\NETAPI32.dll
(000000005cef0000 - 000000005cf18000: G:\WINDOWS\system32\shmedia.dll
(000000005f210000 - 000000005f227000: G:\WINDOWS\system32\OLEPRO32.DLL
(0000000061e00000 - 0000000061e0e000: G:\WINDOWS\system32\MFC42LOC.DLL
(0000000065780000 - 00000000657a1000: G:\Programmi\Alwil Software\Avast4\AhJsctNs.dll
(0000000066bb0000 - 0000000066bbb000: G:\WINDOWS\system32\inetmib1.dll
(0000000066bc0000 - 0000000066c4c000: G:\WINDOWS\system32\qedit.dll
(000000006c2d0000 - 000000006c305000: G:\WINDOWS\system32\dxtrans.dll
(000000006c310000 - 000000006c36a000: G:\WINDOWS\system32\dxtmsft.dll
(000000006d950000 - 000000006d95a000: G:\WINDOWS\system32\ddrawex.dll
(000000006f8c0000 - 000000006f93a000: G:\Programmi\ffdshow\libmplayer.dll
(0000000071a20000 - 0000000071a28000: G:\WINDOWS\system32\WS2HELP.dll
(0000000071a30000 - 0000000071a47000: G:\WINDOWS\system32\WS2_32.dll
(0000000071a50000 - 0000000071a5a000: G:\WINDOWS\system32\WSOCK32.dll
(0000000071aa0000 - 0000000071ab2000: G:\WINDOWS\system32\MPR.dll
(0000000071b80000 - 0000000071b93000: G:\WINDOWS\system32\SAMLIB.dll
(0000000071ba0000 - 0000000071bae000: G:\WINDOWS\System32\ntlanman.dll
(0000000071c10000 - 0000000071c17000: G:\WINDOWS\System32\NETRAP.dll
(0000000071c20000 - 0000000071c60000: G:\WINDOWS\System32\NETUI1.dll
(0000000071c60000 - 0000000071c77000: G:\WINDOWS\System32\NETUI0.dll
(0000000071ef0000 - 0000000071ef8000: G:\WINDOWS\system32\snmpapi.dll
(0000000072210000 - 000000007223b000: G:\WINDOWS\system32\DINPUT.dll
(0000000072c60000 - 0000000072c67000: G:\WINDOWS\system32\msadp32.acm
(0000000072c80000 - 0000000072c88000: G:\WINDOWS\system32\msacm32.drv
(0000000072c90000 - 0000000072c99000: G:\WINDOWS\system32\wdmaud.drv
(0000000072f70000 - 0000000072f96000: G:\WINDOWS\system32\WINSPOOL.DRV
(0000000073390000 - 00000000734e4000: G:\WINDOWS\system32\MSVBVM60.DLL
(0000000073620000 - 0000000073627000: G:\WINDOWS\system32\msdmo.dll
(00000000736d0000 - 0000000073719000: G:\WINDOWS\system32\DDRAW.dll
(00000000738b0000 - 0000000073980000: G:\WINDOWS\system32\D3DIM700.DLL
(0000000073aa0000 - 0000000073ab4000: G:\WINDOWS\system32\mscms.dll
(0000000073ac0000 - 0000000073ad7000: G:\WINDOWS\system32\AVIFIL32.dll
(0000000073ae0000 - 0000000073ae7000: G:\WINDOWS\system32\tsd32.dll
(0000000073b30000 - 0000000073b36000: G:\WINDOWS\system32\DCIMAN32.dll
(0000000073ce0000 - 0000000073cf3000: G:\WINDOWS\system32\shgina.dll
(0000000073d40000 - 0000000073e3e000: G:\WINDOWS\system32\MFC42.DLL
(0000000073e50000 - 0000000073e54000: G:\WINDOWS\system32\KsUser.dll
(0000000073e80000 - 0000000073edc000: G:\WINDOWS\system32\DSOUND.DLL
(00000000745e0000 - 000000007461d000: G:\WINDOWS\system32\ODBC32.dll
(0000000074650000 - 0000000074677000: G:\WINDOWS\system32\msls31.dll
(0000000074680000 - 00000000746aa000: G:\WINDOWS\system32\msimtf.dll
(00000000746b0000 - 00000000746fb000: G:\WINDOWS\system32\MSCTF.dll
(00000000747a0000 - 000000007490e000: G:\WINDOWS\system32\quartz.dll
(0000000074cc0000 - 0000000074ce0000: G:\WINDOWS\system32\oledlg.dll
(0000000075920000 - 0000000075a18000: G:\WINDOWS\system32\MSGINA.dll
(0000000075bc0000 - 0000000075bf2000: G:\WINDOWS\system32\qcap.dll
(0000000075d50000 - 0000000075de1000: G:\WINDOWS\system32\MLANG.dll
(0000000075df0000 - 0000000075e11000: G:\WINDOWS\system32\MSVFW32.dll
(0000000075e40000 - 0000000075ef0000: G:\WINDOWS\system32\SXS.DLL
(0000000075f10000 - 0000000075f17000: G:\WINDOWS\System32\drprov.dll
(0000000075f20000 - 0000000075f29000: G:\WINDOWS\System32\davclnt.dll
(0000000075f30000 - 000000007602c000: G:\WINDOWS\system32\browseui.dll
(0000000076310000 - 0000000076320000: G:\WINDOWS\system32\WINSTA.dll
(0000000076340000 - 000000007635d000: G:\WINDOWS\system32\IMM32.DLL
(0000000076360000 - 00000000763aa000: G:\WINDOWS\system32\comdlg32.dll
(00000000765b0000 - 00000000765cd000: G:\WINDOWS\System32\CSCDLL.dll
(0000000076600000 - 0000000076611000: G:\WINDOWS\system32\devenum.dll
(0000000076890000 - 0000000076913000: G:\WINDOWS\system32\CRYPTUI.dll
(0000000076940000 - 0000000076948000: G:\WINDOWS\system32\LINKINFO.dll
(0000000076950000 - 0000000076976000: G:\WINDOWS\system32\ntshrui.dll
(0000000076980000 - 0000000076a34000: G:\WINDOWS\system32\USERENV.dll
(0000000076ae0000 - 0000000076af1000: G:\WINDOWS\system32\ATL.DLL
(0000000076b00000 - 0000000076b2e000: G:\WINDOWS\system32\WINMM.dll
(0000000076bf0000 - 0000000076c1e000: G:\WINDOWS\system32\WINTRUST.dll
(0000000076c50000 - 0000000076c78000: G:\WINDOWS\system32\IMAGEHLP.dll
(0000000076d00000 - 0000000076d18000: G:\WINDOWS\system32\MPRAPI.dll
(0000000076d20000 - 0000000076d39000: G:\WINDOWS\system32\iphlpapi.dll
(0000000076dd0000 - 0000000076df5000: G:\WINDOWS\system32\adsldpc.dll
(0000000076e40000 - 0000000076e4e000: G:\WINDOWS\system32\rtutils.dll
(0000000076f20000 - 0000000076f4d000: G:\WINDOWS\system32\WLDAP32.dll
(0000000076f90000 - 000000007700f000: G:\WINDOWS\system32\CLBCATQ.DLL
(0000000077010000 - 00000000770e2000: G:\WINDOWS\system32\COMRes.dll
(00000000770f0000 - 000000007717c000: G:\WINDOWS\system32\OLEAUT32.dll
(0000000077180000 - 0000000077227000: G:\WINDOWS\system32\WININET.dll
(0000000077230000 - 00000000772ce000: G:\WINDOWS\system32\urlmon.dll
(00000000773a0000 - 00000000774a2000: G:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\COMCTL32.dll
(00000000774b0000 - 00000000775ec000: G:\WINDOWS\system32\ole32.dll
(0000000077730000 - 000000007789c000: G:\WINDOWS\system32\shdocvw.dll
(00000000778f0000 - 00000000779e7000: G:\WINDOWS\system32\SETUPAPI.dll
(00000000779f0000 - 0000000077a45000: G:\WINDOWS\System32\cscui.dll
(0000000077a50000 - 0000000077ae5000: G:\WINDOWS\system32\CRYPT32.dll
(0000000077af0000 - 0000000077b02000: G:\WINDOWS\system32\MSASN1.dll
(0000000077b10000 - 0000000077b32000: G:\WINDOWS\system32\appHelp.dll
(0000000077ba0000 - 0000000077ba7000: G:\WINDOWS\system32\midimap.dll
(0000000077bb0000 - 0000000077bc5000: G:\WINDOWS\system32\MSACM32.dll
(0000000077bd0000 - 0000000077bd8000: G:\WINDOWS\system32\VERSION.dll
(0000000077be0000 - 0000000077c38000: G:\WINDOWS\system32\msvcrt.dll
(0000000077c90000 - 0000000077cc2000: G:\WINDOWS\system32\ACTIVEDS.dll
(0000000077d10000 - 0000000077da0000: G:\WINDOWS\system32\USER32.dll
(0000000077da0000 - 0000000077e31000: G:\WINDOWS\system32\RPCRT4.dll
(0000000077e40000 - 0000000077e86000: G:\WINDOWS\system32\GDI32.dll
(0000000077e90000 - 0000000077f06000: G:\WINDOWS\system32\SHLWAPI.dll
(0000000077f10000 - 0000000077f21000: G:\WINDOWS\system32\Secur32.dll
(0000000077f40000 - 0000000077feb000: G:\WINDOWS\system32\ADVAPI32.dll
(000000007c800000 - 000000007c8ff000: G:\WINDOWS\system32\kernel32.dll
(000000007c910000 - 000000007c9c6000: G:\WINDOWS\system32\ntdll.dll
(000000007c9d0000 - 000000007d1eb000: G:\WINDOWS\system32\SHELL32.dll
(000000007d4b0000 - 000000007d793000: G:\WINDOWS\system32\mshtml.dll
(000000007d7a0000 - 000000007d9aa000: G:\WINDOWS\system32\WMVCore.DLL

*----> Scarico dello stato per l'id del thread 0x24a4 <----*

eax=00000000 ebx=00129194 ecx=0012908c edx=7c91eb94 esi=000002d4 edi=00000000
eip=7c91eb94 esp=0012908c ebp=001290f0 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00200246

*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\ntdll.dll -
funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\kernel32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\SHLWAPI.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\SHELL32.dll -
*** WARNING: Unable to verify checksum for G:\PROGRA~1\DESKSH~1\VIDEOC~1\INAXPL~1.OCX
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\PROGRA~1\DESKSH~1\VIDEOC~1\INAXPL~1.OCX -
ChildEBP RetAddr Args to Child
001290f0 7c802542 000002d4 00000000 00000000 ntdll!KiFastSystemCallRet
00129104 77e969cd 000002d4 00000000 00000000 kernel32!WaitForSingleObject+0x12
00129118 7c9f860b 000002d4 7c9f810c 7c9f8641 SHLWAPI!Ordinal223+0x24
00129138 7c9f8714 00000000 7c9f810c 00000000 SHELL32!Ordinal175+0x6fd
00129168 7ca06c0d 00000000 00004005 00000000 SHELL32!SHGetFolderPathW+0x86
001293a0 7ca06b8e 001293b8 7ca06ba0 00000007 SHELL32!Shell_GetCachedImageIndex+0x136
001295c4 7ca07e50 00000104 7ca08789 7c9d63ac SHELL32!Shell_GetCachedImageIndex+0xb7
00129a00 7ca086c9 0021ba89 7c9d63ac 00129cd8 SHELL32!SHMapIDListToImageListIndexAsync+0xb8a
00129c54 7ca07da9 0021ba89 7c9d63ac 00129cd8 SHELL32!SHMapPIDLToSystemImageListIndex+0x850
00129c68 7c9fb28d 00000000 00129cdc 00000001 SHELL32!SHMapIDListToImageListIndexAsync+0xae3
00129c9c 7ca06cb9 002168d8 00000000 00000001 SHELL32!SHBindToParent+0x108
00129ccc 7ca07e9b 002168d8 00000000 0021ba89 SHELL32!Shell_GetCachedImageIndex+0x1e2
00129ce8 7ca07eda 002168d8 0021ba89 00000003 SHELL32!SHMapPIDLToSystemImageListIndex+0x22
00129d3c 7c9f7989 002168d8 0012a1ec 00004009 SHELL32!SHMapPIDLToSystemImageListIndex+0x61
0012a1c4 7ca13752 0021ba00 00000000 0012a1ec SHELL32!SHGetFileInfoW+0xdc
0012a6ac 019c9147 0021ba00 00000000 0012a6c8 SHELL32!SHGetFileInfoA+0x6e
001e0518 001de2e0 001dafa8 f080017f 00000000 INAXPL~1!DllUnregisterServer+0x5377
001ddea0 7c9d5a6c 7c9d5a58 7c9d5a38 7c9d5aa0 0x1de2e0
7c9d5ae8 7c9f3297 7c9f28f5 7c9f3d33 7c9fab3d SHELL32!Ordinal517+0x5a6c
7c9f3328 90cfeb10 90909090 8b55ff8b 575653ec SHELL32!ILClone+0x62
04246c83 00000000 00000000 00000000 00000000 0x90cfeb10

*----> Scarico Raw Stack <----*
000000000012908c c0 e9 91 7c db 25 80 7c - d4 02 00 00 00 00 00 00 ...|.%.|........
000000000012909c c0 90 12 00 0c 81 9f 7c - 0c 81 9f 7c 94 91 12 00 .......|...|....
00000000001290ac 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000001290bc 10 00 00 00 00 00 00 00 - 00 00 00 00 00 70 fd 7f .............p..
00000000001290cc 00 f0 fd 7f c0 90 12 00 - 00 00 00 00 a0 90 12 00 ................
00000000001290dc 00 00 00 00 1c a9 12 00 - f3 99 83 7c 08 26 80 7c ...........|.&.|
00000000001290ec 00 00 00 00 04 91 12 00 - 42 25 80 7c d4 02 00 00 ........B%.|....
00000000001290fc 00 00 00 00 00 00 00 00 - 18 91 12 00 cd 69 e9 77 .............i.w
000000000012910c d4 02 00 00 00 00 00 00 - 00 00 00 00 38 91 12 00 ............8...
000000000012911c 0b 86 9f 7c d4 02 00 00 - 0c 81 9f 7c 41 86 9f 7c ...|.......|A..|
000000000012912c 0c 81 9f 7c 00 40 00 00 - 94 91 12 00 68 91 12 00 ...|.@......h...
000000000012913c 14 87 9f 7c 00 00 00 00 - 0c 81 9f 7c 00 00 00 00 ...|.......|....
000000000012914c 00 40 00 00 94 91 12 00 - 04 01 00 00 a0 6b a0 7c .@...........k.|
000000000012915c 05 00 00 00 05 00 00 00 - 57 00 07 80 a0 93 12 00 ........W.......
000000000012916c 0d 6c a0 7c 00 00 00 00 - 05 40 00 00 00 00 00 00 .l.|.....@......
000000000012917c 00 00 00 00 00 00 00 00 - 89 ba 21 00 c8 68 21 00 ..........!..h!.
000000000012918c c8 68 21 00 b8 93 12 00 - 00 00 3a 00 5c 00 57 00 .h!.......:.\.W.
000000000012919c 49 00 4e 00 44 00 4f 00 - 57 00 53 00 5c 00 73 00 I.N.D.O.W.S.\.s.
00000000001291ac 79 00 73 00 74 00 65 00 - 6d 00 33 00 32 00 00 00 y.s.t.e.m.3.2...
00000000001291bc 74 00 69 00 6e 00 67 00 - 73 00 5c 00 6c 00 75 00 t.i.n.g.s.\.l.u.

*----> Scarico dello stato per l'id del thread 0x24b0 <----*

eax=00000044 ebx=00000000 ecx=00331ab8 edx=7c91eb01 esi=00000000 edi=0170ff28
eip=7c91eb94 esp=0170fef8 ebp=0170ff50 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0170ff50 7c802451 00000001 00000000 0170ffb4 ntdll!KiFastSystemCallRet
0170ff60 00ac02ed 00000001 00000010 00000000 kernel32!Sleep+0xf
0170ffb4 7c80b50b 00000000 00000010 00000000 0xac02ed
0170ffec 00000000 00ac0236 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000170fef8 5c d8 91 7c ed 23 80 7c - 00 00 00 00 28 ff 70 01 \..|.#.|....(.p.
000000000170ff08 3a 02 44 00 db b7 d1 77 - 00 00 00 00 14 00 00 00 :.D....w........
000000000170ff18 01 00 00 00 00 00 00 00 - 00 00 00 00 10 00 00 00 ................
000000000170ff28 f0 d8 ff ff ff ff ff ff - 3a 02 44 00 28 ff 70 01 ........:.D.(.p.
000000000170ff38 08 ff 70 01 03 00 00 00 - a4 ff 70 01 f3 99 83 7c ..p.......p....|
000000000170ff48 58 24 80 7c 00 00 00 00 - 60 ff 70 01 51 24 80 7c X$.|....`.p.Q$.|
000000000170ff58 01 00 00 00 00 00 00 00 - b4 ff 70 01 ed 02 ac 00 ..........p.....
000000000170ff68 01 00 00 00 10 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000170ff78 00 00 00 00 3a 02 44 00 - 13 01 00 00 01 00 00 00 ....:.D.........
000000000170ff88 00 00 00 00 ef d3 c8 00 - 83 02 00 00 76 02 00 00 ............v...
000000000170ff98 3a 02 44 00 6c ff 70 01 - 98 fc 13 b8 dc ff 70 01 :.D.l.p.......p.
000000000170ffa8 80 ef ad 00 b8 06 ae 00 - 00 00 00 00 ec ff 70 01 ..............p.
000000000170ffb8 0b b5 80 7c 00 00 00 00 - 10 00 00 00 00 00 00 00 ...|............
000000000170ffc8 00 00 00 00 00 d0 fd 7f - 00 46 fc 81 c0 ff 70 01 .........F....p.
000000000170ffd8 20 24 52 81 ff ff ff ff - f3 99 83 7c 18 b5 80 7c $R........|...|
000000000170ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 36 02 ac 00 ............6...
000000000170fff8 00 00 00 00 00 00 00 00 - c8 00 00 00 16 01 00 00 ................
0000000001710008 ff ee ff ee 02 10 00 00 - 00 00 00 00 00 fe 00 00 ................
0000000001710018 00 00 10 00 00 20 00 00 - 00 02 00 00 00 20 00 00 ..... ....... ..
0000000001710028 2f 00 00 00 ff ef fd 7f - 17 00 08 06 00 00 00 00 /...............

*----> Scarico dello stato per l'id del thread 0x2514 <----*

eax=0238fde4 ebx=00000000 ecx=001d4dc4 edx=207a0036 esi=001c73a8 edi=00000000
eip=7c91eb94 esp=0238fe1c ebp=0238ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0238ff80 77da6c22 0238ffa8 77da6a3b 001c73a8 ntdll!KiFastSystemCallRet
0238ff88 77da6a3b 001c73a8 00000000 00128eec RPCRT4!I_RpcBCacheFree+0x5ea
0238ffa8 77da6c0a 0015e110 0238ffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
0238ffb4 7c80b50b 001ced88 00000000 00128eec RPCRT4!I_RpcBCacheFree+0x5d2
0238ffec 00000000 77da6bf0 001ced88 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000238fe1c 99 e3 91 7c 03 67 da 77 - a4 03 00 00 70 ff 38 02 ...|.g.w....p.8.
000000000238fe2c 00 00 00 00 80 14 1d 00 - 54 ff 38 02 18 22 44 81 ........T.8.."D.
000000000238fe3c 00 d0 fd 7f fc 07 30 c0 - 74 ff 1f c0 1b 06 00 00 ......0.t.......
000000000238fe4c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000238fe5c d0 36 cc 81 04 6c a9 b8 - 0e c1 4e 80 fc 07 30 c0 .6...l....N...0.
000000000238fe6c 04 6c a9 b8 86 bf 4e 80 - 00 d0 fd 7f 00 00 00 00 .l....N.........
000000000238fe7c 00 00 00 00 b8 4d 5f 81 - 20 20 44 81 01 20 44 81 .....M_. D.. D.
000000000238fe8c 00 00 00 00 74 ff 1f c0 - 00 00 00 00 28 6c a9 b8 ....t.......(l..
000000000238fe9c 0e c1 4e 80 fc 07 30 c0 - 28 6c a9 b8 86 bf 4e 80 ..N...0.(l....N.
000000000238feac 00 e0 fa 7f 00 00 00 00 - 00 00 00 00 58 4c 5f 81 ............XL_.
000000000238febc d8 34 cc 81 01 35 cc 81 - 00 00 00 00 b8 fe 1f c0 .4...5..........
000000000238fecc 00 d0 fd 7f 10 6c a9 b8 - ff ff 96 00 00 00 04 00 .....l..........
000000000238fedc 6f 09 00 00 a4 35 cc 81 - f0 03 c7 81 01 00 00 00 o....5..........
000000000238feec d8 d0 f5 81 01 00 00 00 - 50 20 ff 81 b0 ee 2c e1 ........P ....,.
000000000238fefc 02 00 00 00 20 6c a9 b8 - 00 47 fc 81 38 b0 54 80 .... l...G..8.T.
000000000238ff0c b8 4d 5f 81 c4 33 5c 81 - 20 6c a9 b8 46 02 00 00 .M_..3\. l..F...
000000000238ff1c 6a c8 4d 80 94 33 5c 81 - 28 32 5c 81 5c 32 5c 81 j.M..3\.(2\.\2\.
000000000238ff2c e0 6c a9 b8 80 ff 38 02 - 99 66 da 77 4c ff 38 02 .l....8..f.wL.8.
000000000238ff3c a9 66 da 77 ed 10 91 7c - 10 e7 1c 00 88 ed 1c 00 .f.w...|........
000000000238ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......

*----> Scarico dello stato per l'id del thread 0x24f8 <----*

eax=0042b2bc ebx=00000444 ecx=00000000 edx=0012c2b8 esi=00000438 edi=00000000
eip=7c91eb94 esp=027cfe6c ebp=027cfed0 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Module load completed but symbols could not be loaded for G:\Programmi\Deskshare\Video Caster\VideoCaster.exe
ChildEBP RetAddr Args to Child
027cfed0 7c802542 00000438 ffffffff 00000000 ntdll!KiFastSystemCallRet
027cfee4 0040a653 00000438 ffffffff 00000000 kernel32!WaitForSingleObject+0x12
027cff00 0043e2be 013b8948 7c924190 013b8b00 VideoCaster+0xa653
027cff80 0042b32b 0012c688 7c924190 7ffd7000 VideoCaster+0x3e2be
027cffb4 7c80b50b 013b8b00 7c924190 7ffd7000 VideoCaster+0x2b32b
027cffec 00000000 0042b2bc 013b8b00 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
00000000027cfe6c c0 e9 91 7c db 25 80 7c - 38 04 00 00 00 00 00 00 ...|.%.|8.......
00000000027cfe7c 00 00 00 00 88 c6 12 00 - 10 80 3b 01 44 04 00 00 ..........;.D...
00000000027cfe8c 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000027cfe9c 10 00 00 00 44 04 00 00 - 14 00 00 00 00 70 fd 7f ....D........p..
00000000027cfeac 00 90 fd 7f 00 00 00 00 - 00 00 00 00 80 fe 7c 02 ..............|.
00000000027cfebc 66 ff 81 7c 74 ff 7c 02 - f3 99 83 7c 08 26 80 7c f..|t.|....|.&.|
00000000027cfecc 00 00 00 00 e4 fe 7c 02 - 42 25 80 7c 38 04 00 00 ......|.B%.|8...
00000000027cfedc ff ff ff ff 00 00 00 00 - 00 ff 7c 02 53 a6 40 00 ..........|.S.@.
00000000027cfeec 38 04 00 00 ff ff ff ff - 00 00 00 00 48 89 3b 01 8...........H.;.
00000000027cfefc 00 00 00 00 80 ff 7c 02 - be e2 43 00 48 89 3b 01 ......|...C.H.;.
00000000027cff0c 90 41 92 7c 00 8b 3b 01 - 00 8b 3b 01 46 02 00 00 .A.|..;...;.F...
00000000027cff1c d4 fc 45 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ..E.............
00000000027cff2c 00 00 00 00 01 00 00 00 - 00 00 00 00 54 00 30 00 ............T.0.
00000000027cff3c 00 81 4c 81 00 00 00 00 - 00 00 00 00 44 fc 45 00 ..L.........D.E.
00000000027cff4c b8 fc 45 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ..E.............
00000000027cff5c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000027cff6c 10 80 3b 01 0c ff 7c 02 - a4 ff 7c 02 35 7e 45 00 ..;...|...|.5~E.
00000000027cff7c 00 00 00 00 b4 ff 7c 02 - 2b b3 42 00 88 c6 12 00 ......|.+.B.....
00000000027cff8c 90 41 92 7c 00 70 fd 7f - 00 8b 3b 01 00 00 00 00 .A.|.p....;.....
00000000027cff9c 8c ff 7c 02 98 3c 1f b8 - dc ff 7c 02 28 a3 42 00 ..|..<....|.(.B.

*----> Scarico dello stato per l'id del thread 0x2448 <----*

eax=019c87e0 ebx=0307fd58 ecx=773d9ead edx=0012c5e8 esi=00000000 edi=7ffd7000
eip=7c91eb94 esp=0307fd30 ebp=0307fdcc iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\USER32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0307fdcc 77d1bbfe 00000002 0307fdf4 00000000 ntdll!KiFastSystemCallRet
0307fe28 77d1bcad 00000001 0307fe70 ffffffff USER32!SetWindowTextW+0x120
0307fe44 019c8846 00000001 0307fe70 00000000 USER32!MsgWaitForMultipleObjects+0x1f
ffffffff 00000000 00000000 00000000 00000000 INAXPL~1!DllUnregisterServer+0x4a76

*----> Scarico Raw Stack <----*
000000000307fd30 ab e9 91 7c f2 94 80 7c - 02 00 00 00 58 fd 07 03 ...|...|....X...
000000000307fd40 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000307fd50 02 00 00 00 00 00 00 00 - 0c 05 00 00 10 05 00 00 ................
000000000307fd60 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000307fd70 00 00 00 00 00 00 00 00 - 14 00 00 00 01 00 00 00 ................
000000000307fd80 00 00 00 00 00 00 00 00 - 10 00 00 00 00 00 00 00 ................
000000000307fd90 00 00 00 00 00 00 00 00 - 00 70 fd 7f 00 50 fd 7f .........p...P..
000000000307fda0 00 00 15 00 00 00 00 00 - 58 fd 07 03 18 ee 91 7c ........X......|
000000000307fdb0 02 00 00 00 4c fd 07 03 - bb 40 01 00 dc ff 07 03 ....L....@......
000000000307fdc0 f3 99 83 7c 90 95 80 7c - 00 00 00 00 28 fe 07 03 ...|...|....(...
000000000307fdd0 fe bb d1 77 02 00 00 00 - f4 fd 07 03 00 00 00 00 ...w............
000000000307fde0 ff ff ff ff 00 00 00 00 - ad 9e 3d 77 f8 ea c9 00 ..........=w....
000000000307fdf0 8e bc d1 77 0c 05 00 00 - 10 05 00 00 00 00 00 00 ...w............
000000000307fe00 24 fe 07 03 40 00 00 00 - 00 00 00 00 00 00 00 00 $...@...........
000000000307fe10 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000307fe20 00 50 fd 7f 10 05 00 00 - 44 fe 07 03 ad bc d1 77 .P......D......w
000000000307fe30 01 00 00 00 70 fe 07 03 - ff ff ff ff bf 00 00 00 ....p...........
000000000307fe40 f4 fd 07 03 ff ff ff ff - 46 88 9c 01 01 00 00 00 ........F.......
000000000307fe50 70 fe 07 03 00 00 00 00 - ff ff ff ff bf 00 00 00 p...............
000000000307fe60 ad 9e 3d 77 00 00 00 00 - ec ff 07 03 f8 ea c9 00 ..=w............

*----> Scarico dello stato per l'id del thread 0x2634 <----*

eax=7c93798d ebx=00000000 ecx=00000000 edx=7ffdfc00 esi=00000000 edi=00000000
eip=7c91eb94 esp=0294ff9c ebp=0294ffb4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0294ffb4 7c80b50b 00000000 00000000 00000000 ntdll!KiFastSystemCallRet
0294ffec 00000000 7c93798d 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000294ff9c 5c d8 91 7c d4 79 93 7c - 01 00 00 00 ac ff 94 02 \..|.y.|........
000000000294ffac 00 00 00 00 00 00 00 80 - ec ff 94 02 0b b5 80 7c ...............|
000000000294ffbc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000294ffcc 00 a0 fd 7f 00 46 fc 81 - c0 ff 94 02 50 ca 4b 81 .....F......P.K.
000000000294ffdc ff ff ff ff f3 99 83 7c - 18 b5 80 7c 00 00 00 00 .......|...|....
000000000294ffec 00 00 00 00 00 00 00 00 - 8d 79 93 7c 00 00 00 00 .........y.|....
000000000294fffc 00 00 00 00 4d 5a 90 00 - 03 00 00 00 04 00 00 00 ....MZ..........
000000000295000c ff ff 00 00 b8 00 00 00 - 00 00 00 00 40 00 00 00 ............@...
000000000295001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000295002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000295003c 10 01 00 00 0e 1f ba 0e - 00 b4 09 cd 21 b8 01 4c ............!..L
000000000295004c cd 21 54 68 69 73 20 70 - 72 6f 67 72 61 6d 20 63 .!This program c
000000000295005c 61 6e 6e 6f 74 20 62 65 - 20 72 75 6e 20 69 6e 20 annot be run in
000000000295006c 44 4f 53 20 6d 6f 64 65 - 2e 0d 0d 0a 24 00 00 00 DOS mode....$...
000000000295007c 00 00 00 00 4f c1 a9 b2 - 0b a0 c7 e1 0b a0 c7 e1 ....O...........
000000000295008c 0b a0 c7 e1 18 a8 98 e1 - 0f a0 c7 e1 38 82 e2 e1 ............8...
000000000295009c 09 a0 c7 e1 f8 a7 9a e1 - 09 a0 c7 e1 18 a8 9a e1 ................
00000000029500ac 0d a0 c7 e1 f1 83 de e1 - 09 a0 c7 e1 88 bc c9 e1 ................
00000000029500bc 0d a0 c7 e1 64 bf cd e1 - 0f a0 c7 e1 64 bf c3 e1 ....d.......d...
00000000029500cc 08 a0 c7 e1 0b a0 c6 e1 - 6a a0 c7 e1 d1 83 db e1 ........j.......

*----> Scarico dello stato per l'id del thread 0xc90 <----*

eax=001cee78 ebx=00000000 ecx=001ceed8 edx=68197f9a esi=001c73a8 edi=001c744c
eip=7c91eb94 esp=0337fe1c ebp=0337ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
0337ff80 77da6c22 0337ffa8 77da6a3b 001c73a8 ntdll!KiFastSystemCallRet
0337ff88 77da6a3b 001c73a8 01553920 00000000 RPCRT4!I_RpcBCacheFree+0x5ea
0337ffa8 77da6c0a 0015e110 0337ffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
0337ffb4 7c80b50b 001e0f68 01553920 00000000 RPCRT4!I_RpcBCacheFree+0x5d2
0337ffec 00000000 77da6bf0 001e0f68 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000000337fe1c 99 e3 91 7c 03 67 da 77 - a4 03 00 00 70 ff 37 03 ...|.g.w....p.7.
000000000337fe2c 00 00 00 00 f8 64 21 00 - 4c ff 37 03 56 08 81 7c .....d!.L.7.V..|
000000000337fe3c 1b 00 00 00 00 02 00 00 - fc ff e7 02 23 00 00 00 ............#...
000000000337fe4c 56 08 81 7c 02 00 00 00 - 00 00 00 00 fc ff f7 02 V..|............
000000000337fe5c 23 00 00 00 56 08 81 7c - 1b 00 00 00 00 02 00 00 #...V..|........
000000000337fe6c 01 00 00 00 23 00 00 00 - 56 08 81 7c 1b 00 00 00 ....#...V..|....
000000000337fe7c 00 02 00 00 fc ff f7 02 - 23 00 00 00 56 08 81 7c ........#...V..|
000000000337fe8c 1b 00 00 00 00 02 00 00 - fc ff e7 02 23 00 00 00 ............#...
000000000337fe9c 56 08 81 7c 89 3b 1f b8 - c0 ac 7a 81 80 79 fc 81 V..|.;....z..y..
000000000337feac 28 a8 d4 81 90 d3 c6 81 - 1b 00 00 00 28 1b 04 00 (...........(...
000000000337febc e8 1a 04 00 1c 3b 1f b8 - e2 79 56 80 00 00 05 00 .....;...yV.....
000000000337fecc a8 db e4 81 78 db e4 81 - c0 ac 7a 81 ff 01 00 00 ....x.....z.....
000000000337fedc fd 09 00 00 00 30 50 c0 - 98 3e 50 c0 01 e0 d3 77 .....0P..>P....w
000000000337feec 00 40 70 c0 fc 3b 1f b8 - e0 78 4e 80 ff 01 00 00 .@p..;...xN.....
000000000337fefc fd 09 00 00 01 72 a8 02 - 01 00 00 00 9c 36 50 c0 .....r.......6P.
000000000337ff0c 98 ef da 81 44 79 db 81 - 20 3c 1f b8 46 02 00 00 ....Dy.. <..F...
000000000337ff1c 6a c8 4d 80 14 79 db 81 - a8 77 db 81 dc 77 db 81 j.M..y...w...w..
000000000337ff2c 98 ef da 81 80 ff 37 03 - 99 66 da 77 4c ff 37 03 ......7..f.wL.7.
000000000337ff3c a9 66 da 77 ed 10 91 7c - 20 2b 1e 00 68 0f 1e 00 .f.w...| +..h...
000000000337ff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff ff ff ff ../M.....]......

*----> Scarico dello stato per l'id del thread 0x260c <----*

eax=08fcd984 ebx=00000000 ecx=748b4040 edx=7c91eb94 esi=04c9ff98 edi=748b463c
eip=7c91eb94 esp=04c9ff58 ebp=04c9ff74 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\quartz.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
04c9ff74 747feff9 04c9ff98 00000000 00000000 ntdll!KiFastSystemCallRet
04c9ffb4 7c80b50b 00000000 7c923288 00000000 quartz+0x5eff9
04c9ffec 00000000 747fefb2 00000630 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000004c9ff58 9b 91 d1 77 ce 91 d1 77 - 98 ff c9 04 00 00 00 00 ...w...w........
0000000004c9ff68 00 00 00 00 00 00 00 00 - 00 00 00 00 b4 ff c9 04 ................
0000000004c9ff78 f9 ef 7f 74 98 ff c9 04 - 00 00 00 00 00 00 00 00 ...t............
0000000004c9ff88 00 00 00 00 88 32 92 7c - 00 00 00 00 30 06 00 00 .....2.|....0...
0000000004c9ff98 00 00 00 00 00 04 00 00 - 58 aa 12 00 00 00 00 00 ........X.......
0000000004c9ffa8 29 7f c8 00 0b 02 00 00 - 05 02 00 00 ec ff c9 04 )...............
0000000004c9ffb8 0b b5 80 7c 00 00 00 00 - 88 32 92 7c 00 00 00 00 ...|.....2.|....
0000000004c9ffc8 30 06 00 00 00 80 fd 7f - 00 46 fc 81 c0 ff c9 04 0........F......
0000000004c9ffd8 f0 96 75 81 ff ff ff ff - f3 99 83 7c 18 b5 80 7c ..u........|...|
0000000004c9ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 b2 ef 7f 74 ...............t
0000000004c9fff8 30 06 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 0...............
0000000004ca0008 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000004ca0018 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000004ca0028 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000004ca0038 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000004ca0048 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000004ca0058 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000004ca0068 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000004ca0078 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000004ca0088 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0xeb8 <----*

eax=72c930e8 ebx=08dbfef8 ecx=000000bc edx=00000000 esi=00000000 edi=7ffd7000
eip=7c91eb94 esp=08dbfed0 ebp=08dbff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
08dbff6c 7c809c86 00000002 08dbffa4 00000000 ntdll!KiFastSystemCallRet
08dbff88 72c9312a 00000002 08dbffa4 00000000 kernel32!WaitForMultipleObjects+0x18
08dbffb4 7c80b50b 00000000 00000000 00150000 wdmaud!midMessage+0x348
08dbffec 00000000 72c930e8 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000008dbfed0 ab e9 91 7c f2 94 80 7c - 02 00 00 00 f8 fe db 08 ...|...|........
0000000008dbfee0 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000008dbfef0 00 00 00 00 00 00 00 00 - 18 05 00 00 e0 03 00 00 ................
0000000008dbff00 00 00 00 00 dc dc 4b 81 - 98 da 4b 81 20 12 75 81 ......K...K. .u.
0000000008dbff10 74 3d 60 81 20 cc 32 b8 - 14 00 00 00 01 00 00 00 t=`. .2.........
0000000008dbff20 00 00 00 00 00 00 00 00 - 10 00 00 00 46 02 00 00 ............F...
0000000008dbff30 6a c8 4d 80 87 f6 57 80 - 00 70 fd 7f 00 60 fd 7f j.M...W..p...`..
0000000008dbff40 00 60 fd 7f 00 00 00 00 - f8 fe db 08 05 00 00 00 .`..............
0000000008dbff50 02 00 00 00 ec fe db 08 - 00 00 00 00 dc ff db 08 ................
0000000008dbff60 f3 99 83 7c 90 95 80 7c - 00 00 00 00 88 ff db 08 ...|...|........
0000000008dbff70 86 9c 80 7c 02 00 00 00 - a4 ff db 08 00 00 00 00 ...|............
0000000008dbff80 ff ff ff ff 00 00 00 00 - b4 ff db 08 2a 31 c9 72 ............*1.r
0000000008dbff90 02 00 00 00 a4 ff db 08 - 00 00 00 00 ff ff ff ff ................
0000000008dbffa0 00 00 15 00 18 05 00 00 - e0 03 00 00 00 00 00 00 ................
0000000008dbffb0 dc e2 91 7c ec ff db 08 - 0b b5 80 7c 00 00 00 00 ...|.......|....
0000000008dbffc0 00 00 00 00 00 00 15 00 - 00 00 00 00 00 60 fd 7f .............`..
0000000008dbffd0 00 46 fc 81 c0 ff db 08 - 80 79 5f 81 ff ff ff ff .F.......y_.....
0000000008dbffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
0000000008dbfff0 00 00 00 00 e8 30 c9 72 - 00 00 00 00 00 00 00 00 .....0.r........
0000000008dc0000 00 00 9a 04 00 00 ad 02 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x298 <----*

eax=747d71f8 ebx=00d8c260 ecx=005f0033 edx=00300030 esi=00000608 edi=00000000
eip=7c91eb94 esp=04b4ff08 ebp=04b4ff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
04b4ff6c 7c802542 00000608 ffffffff 00000000 ntdll!KiFastSystemCallRet
04b4ff80 747d70fd 00000608 ffffffff 00d8c260 kernel32!WaitForSingleObject+0x12
04b4ffac 747d7205 04b4ffec 7c80b50b 00d8c260 quartz!DllGetClassObject+0x14202
04b4ffb4 7c80b50b 00d8c260 00310032 00350031 quartz!DllGetClassObject+0x1430a
04b4ffec 00000000 747d71f8 00d8c260 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000004b4ff08 c0 e9 91 7c db 25 80 7c - 08 06 00 00 00 00 00 00 ...|.%.|........
0000000004b4ff18 00 00 00 00 10 27 00 00 - 60 c2 d8 00 60 c2 d8 00 .....'..`...`...
0000000004b4ff28 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000004b4ff38 10 00 00 00 20 a0 5f 81 - 00 e0 fd 7f 00 70 fd 7f .... ._......p..
0000000004b4ff48 00 e0 fd 7f 00 00 00 00 - 00 00 00 00 1c ff b4 04 ................
0000000004b4ff58 00 00 00 00 dc ff b4 04 - f3 99 83 7c 08 26 80 7c ...........|.&.|
0000000004b4ff68 00 00 00 00 80 ff b4 04 - 42 25 80 7c 08 06 00 00 ........B%.|....
0000000004b4ff78 ff ff ff ff 00 00 00 00 - ac ff b4 04 fd 70 7d 74 .............p}t
0000000004b4ff88 08 06 00 00 ff ff ff ff - 60 c2 d8 00 32 00 31 00 ........`...2.1.
0000000004b4ff98 31 00 35 00 21 a8 4f 80 - 98 0c cf b8 0a 3c 6f 80 1.5.!.O......<o.
0000000004b4ffa8 00 00 00 00 b4 ff b4 04 - 05 72 7d 74 ec ff b4 04 .........r}t....
0000000004b4ffb8 0b b5 80 7c 60 c2 d8 00 - 32 00 31 00 31 00 35 00 ...|`...2.1.1.5.
0000000004b4ffc8 60 c2 d8 00 00 e0 fd 7f - 00 46 fc 81 c0 ff b4 04 `........F......
0000000004b4ffd8 80 5f e2 81 ff ff ff ff - f3 99 83 7c 18 b5 80 7c ._.........|...|
0000000004b4ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 f8 71 7d 74 .............q}t
0000000004b4fff8 60 c2 d8 00 00 00 00 00 - ff fb 90 6c 00 00 01 f5 `..........l....
0000000004b50008 0c c7 29 e3 19 30 1f e0 - 69 af 0c c6 00 09 48 67 ..)..0..i.....Hg
0000000004b50018 2b 87 8c 67 00 d3 0d 27 - 3c 61 88 a8 00 22 00 03 +..g...'<a..."..
0000000004b50028 04 b0 82 13 83 41 91 30 - e0 00 00 05 5c 0c 0c 59 .....A.0....\..Y
0000000004b50038 6e 1c 0c 58 19 f1 39 f9 - 40 4c 70 21 2e 08 41 f0 n..X..9.@Lp!..A.

*----> Scarico dello stato per l'id del thread 0xf4 <----*

eax=08ff3520 ebx=00000000 ecx=00d55364 edx=7c91eb94 esi=098bffa0 edi=098bff98
eip=7c91eb94 esp=098bff28 ebp=098bff54 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\qcap.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
098bff54 75bdbaa1 000004e8 098bff98 098bff9c ntdll!KiFastSystemCallRet
098bff78 75bdc79c 098bff98 098bff9c 098bffa0 qcap+0x1baa1
098bffa4 75bc8e80 7c920970 7c98e4c0 098bffec qcap+0x1c79c
098bffb4 7c80b50b 00d55108 7c920970 7c98e4c0 qcap+0x8e80
098bffec 00000000 75bc8e6b 00d55108 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
00000000098bff28 1b e3 91 7c d9 cb 80 7c - e8 04 00 00 9c ff 8b 09 ...|...|........
00000000098bff38 6c ff 8b 09 4c ff 8b 09 - 00 00 00 00 b0 44 d7 00 l...L........D..
00000000098bff48 00 00 00 00 60 ff 8b 09 - 7a 4c be 75 78 ff 8b 09 ....`...zL.ux...
00000000098bff58 a1 ba bd 75 e8 04 00 00 - 98 ff 8b 09 9c ff 8b 09 ...u............
00000000098bff68 a0 ff 8b 09 ff ff ff ff - 94 53 d5 00 08 51 d5 00 .........S...Q..
00000000098bff78 a4 ff 8b 09 9c c7 bd 75 - 98 ff 8b 09 9c ff 8b 09 .......u........
00000000098bff88 a0 ff 8b 09 70 09 92 7c - 00 00 00 00 08 51 d5 00 ....p..|.....Q..
00000000098bff98 00 02 00 00 00 00 00 00 - 68 35 ff 08 b4 ff 8b 09 ........h5......
00000000098bffa8 80 8e bc 75 70 09 92 7c - c0 e4 98 7c ec ff 8b 09 ...up..|...|....
00000000098bffb8 0b b5 80 7c 08 51 d5 00 - 70 09 92 7c c0 e4 98 7c ...|.Q..p..|...|
00000000098bffc8 08 51 d5 00 00 b0 fd 7f - 00 46 fc 81 c0 ff 8b 09 .Q.......F......
00000000098bffd8 80 5f e2 81 ff ff ff ff - f3 99 83 7c 18 b5 80 7c ._.........|...|
00000000098bffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 6b 8e bc 75 ............k..u
00000000098bfff8 08 51 d5 00 00 00 00 00 - 4d 5a 90 00 03 00 00 00 .Q......MZ......
00000000098c0008 04 00 00 00 ff ff 00 00 - b8 00 00 00 00 00 00 00 ................
00000000098c0018 40 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 @...............
00000000098c0028 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00000000098c0038 00 00 00 00 e0 00 00 00 - 0e 1f ba 0e 00 b4 09 cd ................
00000000098c0048 21 b8 01 4c cd 21 54 68 - 69 73 20 70 72 6f 67 72 !..L.!This progr
00000000098c0058 61 6d 20 63 61 6e 6e 6f - 74 20 62 65 20 72 75 6e am cannot be run

*----> Scarico dello stato per l'id del thread 0x8e0 <----*

eax=00000000 ebx=00000102 ecx=00000000 edx=a6e49c00 esi=00000758 edi=00000000
eip=7c91eb94 esp=1084ff04 ebp=1084ff68 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00200297

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\qedit.dll -
ChildEBP RetAddr Args to Child
1084ff68 7c802542 00000758 000001f4 00000000 ntdll!KiFastSystemCallRet
1084ff7c 66beddd8 00000758 000001f4 00d841e8 kernel32!WaitForSingleObject+0x12
1084ff98 66bede30 75bca495 00000000 66bd6727 qedit+0x2ddd8
1084ffb4 7c80b50b 00d841e8 75bca495 75e0b4e0 qedit+0x2de30
1084ffec 00000000 66bd6712 00d841e8 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000001084ff04 c0 e9 91 7c db 25 80 7c - 58 07 00 00 00 00 00 00 ...|.%.|X.......
000000001084ff14 38 ff 84 10 00 00 00 00 - e8 41 d8 00 02 01 00 00 8........A......
000000001084ff24 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000001084ff34 10 00 00 00 c0 b4 b3 ff - ff ff ff ff 00 70 fd 7f .............p..
000000001084ff44 00 40 fd 7f 38 ff 84 10 - 00 26 80 7c 18 ff 84 10 .@..8....&.|....
000000001084ff54 20 06 00 00 dc ff 84 10 - f3 99 83 7c 08 26 80 7c ..........|.&.|
000000001084ff64 00 00 00 00 7c ff 84 10 - 42 25 80 7c 58 07 00 00 ....|...B%.|X...
000000001084ff74 f4 01 00 00 00 00 00 00 - 98 ff 84 10 d8 dd be 66 ...............f
000000001084ff84 58 07 00 00 f4 01 00 00 - e8 41 d8 00 e8 41 d8 00 X........A...A..
000000001084ff94 e8 41 d8 00 b4 ff 84 10 - 30 de be 66 95 a4 bc 75 .A......0..f...u
000000001084ffa4 00 00 00 00 27 67 bd 66 - 95 a4 bc 75 e0 b4 e0 75 ....'g.f...u...u
000000001084ffb4 ec ff 84 10 0b b5 80 7c - e8 41 d8 00 95 a4 bc 75 .......|.A.....u
000000001084ffc4 e0 b4 e0 75 e8 41 d8 00 - 00 40 fd 7f 00 46 fc 81 ...u.A...@...F..
000000001084ffd4 c0 ff 84 10 a0 9e 5f 81 - ff ff ff ff f3 99 83 7c ......_........|
000000001084ffe4 18 b5 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00 ...|............
000000001084fff4 12 67 bd 66 e8 41 d8 00 - 00 00 00 00 00 00 00 00 .g.f.A..........
0000000010850004 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000010850014 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000010850024 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000010850034 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x1310 <----*

eax=00000000 ebx=00000102 ecx=00000000 edx=02faf080 esi=0000075c edi=00000000
eip=7c91eb94 esp=1094ff04 ebp=1094ff68 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
1094ff68 7c802542 0000075c 000001f4 00000000 ntdll!KiFastSystemCallRet
1094ff7c 66beddd8 0000075c 000001f4 00d47250 kernel32!WaitForSingleObject+0x12
1094ff98 66bede30 75bca495 00000000 66bd6727 qedit+0x2ddd8
1094ffb4 7c80b50b 00d47250 75bca495 75e0b4e0 qedit+0x2de30
1094ffec 00000000 66bd6712 00d47250 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000001094ff04 c0 e9 91 7c db 25 80 7c - 5c 07 00 00 00 00 00 00 ...|.%.|\.......
000000001094ff14 38 ff 94 10 00 00 00 00 - 50 72 d4 00 02 01 00 00 8.......Pr......
000000001094ff24 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000001094ff34 10 00 00 00 c0 b4 b3 ff - ff ff ff ff 00 70 fd 7f .............p..
000000001094ff44 00 f0 fa 7f 38 ff 94 10 - 00 26 80 7c 18 ff 94 10 ....8....&.|....
000000001094ff54 10 07 00 00 dc ff 94 10 - f3 99 83 7c 08 26 80 7c ...........|.&.|
000000001094ff64 00 00 00 00 7c ff 94 10 - 42 25 80 7c 5c 07 00 00 ....|...B%.|\...
000000001094ff74 f4 01 00 00 00 00 00 00 - 98 ff 94 10 d8 dd be 66 ...............f
000000001094ff84 5c 07 00 00 f4 01 00 00 - 50 72 d4 00 50 72 d4 00 \.......Pr..Pr..
000000001094ff94 50 72 d4 00 b4 ff 94 10 - 30 de be 66 95 a4 bc 75 Pr......0..f...u
000000001094ffa4 00 00 00 00 27 67 bd 66 - 95 a4 bc 75 e0 b4 e0 75 ....'g.f...u...u
000000001094ffb4 ec ff 94 10 0b b5 80 7c - 50 72 d4 00 95 a4 bc 75 .......|Pr.....u
000000001094ffc4 e0 b4 e0 75 50 72 d4 00 - 00 f0 fa 7f 00 46 fc 81 ...uPr.......F..
000000001094ffd4 c0 ff 94 10 a0 9e 5f 81 - ff ff ff ff f3 99 83 7c ......_........|
000000001094ffe4 18 b5 80 7c 00 00 00 00 - 00 00 00 00 00 00 00 00 ...|............
000000001094fff4 12 67 bd 66 50 72 d4 00 - 00 00 00 00 00 00 00 00 .g.fPr..........
0000000010950004 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000010950014 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000010950024 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000010950034 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x1c8 <----*

eax=1138ffac ebx=1138fe7c ecx=1138ff14 edx=7c91eb94 esi=00000000 edi=7ffd7000
eip=7c91eb94 esp=1138fe54 ebp=1138fef0 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll -
ChildEBP RetAddr Args to Child
1138fef0 77d1bbfe 00000002 1138ff18 00000000 ntdll!KiFastSystemCallRet
1138ff4c 77d1bcad 00000001 1138ffac ffffffff USER32!SetWindowTextW+0x120
1138ff68 4ec15846 00000001 1138ffac 00000000 USER32!MsgWaitForMultipleObjects+0x1f
1138ffb4 7c80b50b 00000000 00000000 10944bb4 gdiplus+0x45846
1138ffec 00000000 4ec157ed 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000001138fe54 ab e9 91 7c f2 94 80 7c - 02 00 00 00 7c fe 38 11 ...|...|....|.8.
000000001138fe64 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000001138fe74 02 00 00 00 00 00 00 00 - 88 08 00 00 9c 08 00 00 ................
000000001138fe84 cc 99 99 00 cc 99 cc 00 - cc 99 ff 00 cc cc 00 00 ................
000000001138fe94 cc cc 33 00 cc cc 66 00 - 14 00 00 00 01 00 00 00 ..3...f.........
000000001138fea4 00 00 00 00 00 00 00 00 - 10 00 00 00 cc ff 66 00 ..............f.
000000001138feb4 e4 fe 38 11 6d 90 d5 77 - 00 70 fd 7f 00 e0 fa 7f ..8.m..w.p......
000000001138fec4 10 06 0b 00 00 00 00 00 - 7c fe 38 11 7d 90 d5 77 ........|.8.}..w
000000001138fed4 02 00 00 00 70 fe 38 11 - 00 00 00 00 dc ff 38 11 ....p.8.......8.
000000001138fee4 f3 99 83 7c 90 95 80 7c - 00 00 00 00 4c ff 38 11 ...|...|....L.8.
000000001138fef4 fe bb d1 77 02 00 00 00 - 18 ff 38 11 00 00 00 00 ...w......8.....
000000001138ff04 ff ff ff ff 00 00 00 00 - fd ce d1 77 64 62 d5 4e ...........wdb.N
000000001138ff14 00 00 00 00 88 08 00 00 - 9c 08 00 00 00 00 00 00 ................
000000001138ff24 00 00 00 00 00 00 00 00 - 01 00 00 00 18 ac 6d 00 ..............m.
000000001138ff34 00 e0 fa 7f 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000001138ff44 00 e0 fa 7f 9c 08 00 00 - 68 ff 38 11 ad bc d1 77 ........h.8....w
000000001138ff54 01 00 00 00 ac ff 38 11 - ff ff ff ff ff 04 00 00 ......8.........
000000001138ff64 18 ff 38 11 b4 ff 38 11 - 46 58 c1 4e 01 00 00 00 ..8...8.FX.N....
000000001138ff74 ac ff 38 11 00 00 00 00 - ff ff ff ff ff 04 00 00 ..8.............
000000001138ff84 00 00 00 00 b4 4b 94 10 - 00 00 00 00 00 00 00 00 .....K..........

*----> Scarico dello stato per l'id del thread 0xa68 <----*

eax=66bd6712 ebx=00cf015c ecx=00cf0010 edx=00e5a528 esi=0000087c edi=00000000
eip=7c91eb94 esp=1148ff08 ebp=1148ff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
1148ff6c 7c802542 0000087c ffffffff 00000000 ntdll!KiFastSystemCallRet
1148ff80 66bdd79b 0000087c ffffffff 00cf015c kernel32!WaitForSingleObject+0x12
1148ff98 66bdddb3 00b007d8 00000000 66bd6727 qedit+0x1d79b
1148ffb4 7c80b50b 00cf015c 00b007d8 7c92056d qedit+0x1ddb3
1148ffec 00000000 66bd6712 00cf015c 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000001148ff08 c0 e9 91 7c db 25 80 7c - 7c 08 00 00 00 00 00 00 ...|.%.||.......
000000001148ff18 00 00 00 00 00 00 00 00 - 5c 01 cf 00 5c 01 cf 00 ........\...\...
000000001148ff28 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000001148ff38 10 00 00 00 7b 97 80 7c - dc ff 48 11 00 70 fd 7f ....{..|..H..p..
000000001148ff48 00 c0 fa 7f 00 00 00 00 - 00 26 80 7c 1c ff 48 11 .........&.|..H.
000000001148ff58 a8 08 00 00 dc ff 48 11 - f3 99 83 7c 08 26 80 7c ......H....|.&.|
000000001148ff68 00 00 00 00 80 ff 48 11 - 42 25 80 7c 7c 08 00 00 ......H.B%.||...
000000001148ff78 ff ff ff ff 00 00 00 00 - 98 ff 48 11 9b d7 bd 66 ..........H....f
000000001148ff88 7c 08 00 00 ff ff ff ff - 5c 01 cf 00 5c 01 cf 00 |.......\...\...
000000001148ff98 b4 ff 48 11 b3 dd bd 66 - d8 07 b0 00 00 00 00 00 ..H....f........
000000001148ffa8 27 67 bd 66 d8 07 b0 00 - 6d 05 92 7c ec ff 48 11 'g.f....m..|..H.
000000001148ffb8 0b b5 80 7c 5c 01 cf 00 - d8 07 b0 00 6d 05 92 7c ...|\.......m..|
000000001148ffc8 5c 01 cf 00 00 c0 fa 7f - 00 46 fc 81 c0 ff 48 11 \........F....H.
000000001148ffd8 d0 80 cb 81 ff ff ff ff - f3 99 83 7c 18 b5 80 7c ...........|...|
000000001148ffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 12 67 bd 66 .............g.f
000000001148fff8 5c 01 cf 00 00 00 00 00 - 00 00 00 00 00 00 00 00 \...............
0000000011490008 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000011490018 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000011490028 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000011490038 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x780 <----*

eax=000008a0 ebx=0e325380 ecx=0e415380 edx=00000010 esi=0e004d00 edi=1aaebb20
eip=09931253 esp=1bfbd824 ebp=00000820 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010202

*** WARNING: Unable to verify checksum for G:\WINDOWS\system32\xvidcore.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\xvidcore.dll -
funzione: xvidcore
09931232 1000 adc [eax],al
09931234 0000 add [eax],al
09931236 8816 mov [esi],dl
09931238 0f7eca movd edx,mm1
0993123b c1ea08 shr edx,0x8
0993123e 81c210000000 add edx,0x10
09931244 885601 mov [esi+0x1],dl
09931247 0f7ed2 movd edx,mm2
0993124a c1ea08 shr edx,0x8
0993124d 81c210000000 add edx,0x10
09931253 881406 mov [esi+eax],dl ds:0023:0e0055a0=00
09931256 0f7eda movd edx,mm3
09931259 c1ea08 shr edx,0x8
0993125c 81c210000000 add edx,0x10
09931262 88540601 mov [esi+eax+0x1],dl
09931266 0f6fc6 movq mm0,mm6
09931269 0ff535d0ae9409 pmaddwd mm6,qword ptr [xvidcore+0x8aed0 (0994aed0)]
09931270 0ff505c8ae9409 pmaddwd mm0,qword ptr [xvidcore+0x8aec8 (0994aec8)]
09931277 0f6fc8 movq mm1,mm0
0993127a 0f6fd6 movq mm2,mm6
0993127d 0f73d120 psrlq mm2,0x20

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00000820 00000000 00000000 00000000 00000000 xvidcore+0x71253

*----> Scarico Raw Stack <----*
000000001bfbd824 a0 e7 ff ff 34 05 00 00 - 20 08 00 00 40 00 00 00 ....4... ...@...
000000001bfbd834 80 00 00 00 40 cf ff ff - 20 08 00 00 00 00 30 1a ....@... .....0.
000000001bfbd844 60 18 00 00 00 00 00 00 - 42 32 90 09 00 00 30 1a `.......B2....0.
000000001bfbd854 60 18 00 00 80 28 f9 0d - 60 8a 30 0e 60 8a 3f 0e `....(..`.0.`.?.
000000001bfbd864 a0 08 00 00 50 04 00 00 - 20 08 00 00 08 06 00 00 ....P... .......
000000001bfbd874 00 00 00 80 80 28 f9 0d - 04 7c 02 09 04 03 00 00 .....(...|......
000000001bfbd884 08 06 00 00 20 08 00 00 - 96 30 90 09 00 00 00 ff .... ....0......
000000001bfbd894 00 00 00 ff 00 00 00 ff - 60 8a 30 0e 60 8a 3f 0e ........`.0.`.?.
000000001bfbd8a4 a0 08 00 00 50 04 00 00 - 20 08 00 00 08 06 00 00 ....P... .......
000000001bfbd8b4 00 00 00 80 30 11 93 09 - 90 9f 8c 09 03 00 00 00 ....0...........
000000001bfbd8c4 00 00 00 ff 00 00 00 ff - 00 00 00 ff 90 9f 8c 09 ................
000000001bfbd8d4 00 00 00 ff 30 11 93 09 - 00 00 00 ff 00 00 00 ff ....0...........
000000001bfbd8e4 10 04 00 00 00 00 00 ff - 50 04 00 00 c0 65 d8 00 ........P....e..
000000001bfbd8f4 50 ee fb 1b 04 7c 02 09 - 00 00 00 00 d6 59 8e 09 P....|.......Y..
000000001bfbd904 00 00 00 ff 00 00 00 ff - 00 00 00 ff a0 08 00 00 ................
000000001bfbd914 c0 ee fb 1b d0 ee fb 1b - 00 02 00 80 00 00 00 00 ................
000000001bfbd924 00 00 00 ff 00 00 00 ff - 00 00 00 ff 00 00 00 ff ................
000000001bfbd934 00 00 00 ff 00 00 00 ff - 00 00 00 ff 00 00 00 ff ................
000000001bfbd944 00 00 00 ff 00 00 00 ff - 00 00 00 ff 00 00 00 ff ................
000000001bfbd954 00 00 00 ff 00 00 00 ff - 00 00 00 ff 00 00 00 ff ................

*----> Scarico dello stato per l'id del thread 0x2d4 <----*

eax=6c2dad26 ebx=0bc00bfc ecx=00320035 edx=00390033 esi=00000000 edi=0bc00bfc
eip=7c91eb94 esp=1c0bff30 ebp=1c0bff5c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\WINDOWS\system32\dxtrans.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
1c0bff5c 6c2dad62 00000908 1c0bff84 1c0bff88 ntdll!KiFastSystemCallRet
1c0bffb4 7c80b50b 0bc00bfc 00370037 00340031 dxtrans+0xad62
1c0bffec 00000000 6c2dad26 0bc00bfc 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000001c0bff30 1b e3 91 7c d9 cb 80 7c - 08 09 00 00 88 ff 0b 1c ...|...|........
000000001c0bff40 74 ff 0b 1c 54 ff 0b 1c - 00 00 00 00 31 00 34 00 t...T.......1.4.
000000001c0bff50 fc 0b c0 0b fc 0b c0 0b - 02 00 00 00 b4 ff 0b 1c ................
000000001c0bff60 62 ad 2d 6c 08 09 00 00 - 84 ff 0b 1c 88 ff 0b 1c b.-l............
000000001c0bff70 8c ff 0b 1c ff ff ff ff - 37 00 37 00 31 00 34 00 ........7.7.1.4.
000000001c0bff80 fc 0b c0 0b 00 00 00 00 - e0 15 4a 81 41 a8 4f 80 ..........J.A.O.
000000001c0bff90 fc 0b c0 0b 00 00 00 00 - 00 00 00 00 78 ff 0b 1c ............x...
000000001c0bffa0 98 4c cf b8 dc ff 0b 1c - 13 4e 2f 6c 50 ae 2d 6c .L.......N/lP.-l
000000001c0bffb0 ff ff ff ff ec ff 0b 1c - 0b b5 80 7c fc 0b c0 0b ...........|....
000000001c0bffc0 37 00 37 00 31 00 34 00 - fc 0b c0 0b 00 a0 fa 7f 7.7.1.4.........
000000001c0bffd0 00 46 fc 81 c0 ff 0b 1c - c0 ac 5a 81 ff ff ff ff .F........Z.....
000000001c0bffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
000000001c0bfff0 00 00 00 00 26 ad 2d 6c - fc 0b c0 0b 00 00 00 00 ....&.-l........
000000001c0c0000 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000001c0c0010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000001c0c0020 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000001c0c0030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000001c0c0040 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000001c0c0050 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000001c0c0060 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0xfb8 <----*

eax=6c2dad26 ebx=0bc00bfc ecx=00320035 edx=00390033 esi=00000000 edi=0bc00bfc
eip=7c91eb94 esp=1c1bff30 ebp=1c1bff5c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
1c1bff5c 6c2dad62 00000908 1c1bff84 1c1bff88 ntdll!KiFastSystemCallRet
1c1bffb4 7c80b50b 0bc00bfc 00370037 00340031 dxtrans+0xad62
1c1bffec 00000000 6c2dad26 0bc00bfc 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
000000001c1bff30 1b e3 91 7c d9 cb 80 7c - 08 09 00 00 88 ff 1b 1c ...|...|........
000000001c1bff40 74 ff 1b 1c 54 ff 1b 1c - 00 00 00 00 31 00 34 00 t...T.......1.4.
000000001c1bff50 fc 0b c0 0b fc 0b c0 0b - 02 00 00 00 b4 ff 1b 1c ................
000000001c1bff60 62 ad 2d 6c 08 09 00 00 - 84 ff 1b 1c 88 ff 1b 1c b.-l............
000000001c1bff70 8c ff 1b 1c ff ff ff ff - 37 00 37 00 31 00 34 00 ........7.7.1.4.
000000001c1bff80 fc 0b c0 0b 00 00 00 00 - e0 15 4a 81 41 a8 4f 80 ..........J.A.O.
000000001c1bff90 fc 0b c0 0b 00 00 00 00 - 00 00 00 00 78 ff 1b 1c ............x...
000000001c1bffa0 98 bc 06 b8 dc ff 1b 1c - 13 4e 2f 6c 50 ae 2d 6c .........N/lP.-l
000000001c1bffb0 ff ff ff ff ec ff 1b 1c - 0b b5 80 7c fc 0b c0 0b ...........|....
000000001c1bffc0 37 00 37 00 31 00 34 00 - fc 0b c0 0b 00 90 fa 7f 7.7.1.4.........
000000001c1bffd0 00 46 fc 81 c0 ff 1b 1c - 48 e7 51 81 ff ff ff ff .F......H.Q.....
000000001c1bffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
000000001c1bfff0 00 00 00 00 26 ad 2d 6c - fc 0b c0 0b 00 00 00 00 ....&.-l........
000000001c1c0000 50 00 b0 00 00 00 66 10 - 00 00 00 00 00 00 00 00 P.....f.........
000000001c1c0010 00 10 93 00 00 10 93 00 - 00 0d 00 00 00 0b 00 00 ................
000000001c1c0020 1b 0d 0f 1f 12 14 0f 0a - 0b 0e 0c 0c 0e 0e 0e 12 ................
000000001c1c0030 0d 0e 1e 15 18 1b 0d 11 - 15 07 0b 16 0b 0e 10 0d ................
000000001c1c0040 0f 0d 0c 0e 0d 0c 0e 12 - 0f 11 16 0d 10 14 08 0e ................
000000001c1c0050 0b 03 0a 0d 04 0e 08 00 - 07 06 00 05 0d 05 0c 10 ................
000000001c1c0060 08 0f 12 0c 11 19 13 18 - 1a 15 17 1b 16 18 1b 16 ................

*----> Scarico dello stato per l'id del thread 0x560 <----*

eax=66bd6712 ebx=0903c8f0 ecx=00000000 edx=00000000 esi=000008d0 edi=00000000
eip=7c91eb94 esp=19abff08 ebp=19abff6c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
19abff6c 7c802542 000008d0 ffffffff 00000000 ntdll!KiFastSystemCallRet
19abff80 66c1b858 000008d0 ffffffff 0903c8f0 kernel32!WaitForSingleObject+0x12
19abff98 66c1bc84 00000000 00000000 66bd6727 qedit+0x5b858
19abffb4 7c80b50b 0903c8f0 00000000 00000014 qedit+0x5bc84
19abffec 00000000 66bd6712 0903c8f0 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000019abff08 c0 e9 91 7c db 25 80 7c - d0 08 00 00 00 00 00 00 ...|.%.|........
0000000019abff18 00 00 00 00 00 00 00 00 - f0 c8 03 09 f0 c8 03 09 ................
0000000019abff28 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000019abff38 10 00 00 00 7b 97 80 7c - dc ff ab 19 00 70 fd 7f ....{..|.....p..
0000000019abff48 00 80 fa 7f 00 00 00 00 - 00 26 80 7c 1c ff ab 19 .........&.|....
0000000019abff58 f0 08 00 00 dc ff ab 19 - f3 99 83 7c 08 26 80 7c ...........|.&.|
0000000019abff68 00 00 00 00 80 ff ab 19 - 42 25 80 7c d0 08 00 00 ........B%.|....
0000000019abff78 ff ff ff ff 00 00 00 00 - 98 ff ab 19 58 b8 c1 66 ............X..f
0000000019abff88 d0 08 00 00 ff ff ff ff - f0 c8 03 09 f0 c8 03 09 ................
0000000019abff98 b4 ff ab 19 84 bc c1 66 - 00 00 00 00 00 00 00 00 .......f........
0000000019abffa8 27 67 bd 66 00 00 00 00 - 14 00 00 00 ec ff ab 19 'g.f............
0000000019abffb8 0b b5 80 7c f0 c8 03 09 - 00 00 00 00 14 00 00 00 ...|............
0000000019abffc8 f0 c8 03 09 00 80 fa 7f - 00 46 fc 81 c0 ff ab 19 .........F......
0000000019abffd8 18 f1 e1 81 ff ff ff ff - f3 99 83 7c 18 b5 80 7c ...........|...|
0000000019abffe8 00 00 00 00 00 00 00 00 - 00 00 00 00 12 67 bd 66 .............g.f
0000000019abfff8 f0 c8 03 09 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000019ac0008 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000019ac0018 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000019ac0028 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000019ac0038 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

*----> Scarico dello stato per l'id del thread 0x98c <----*

eax=00000001 ebx=00001f40 ecx=00000000 edx=09074fc0 esi=00d4786c edi=00001f60
eip=039fc59f esp=19cafe30 ebp=00d477c8 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202

*** WARNING: Unable to verify checksum for G:\Programmi\ffdshow\ffdshow.ax
*** ERROR: Symbol file could not be found. Defaulted to export symbols for G:\Programmi\ffdshow\ffdshow.ax -
funzione: ffdshow!DllUnregisterServer
039fc581 0233 add dh,[ebx]
039fc583 ed in eax,dx
039fc584 892e mov [esi],ebp
039fc586 8d142b lea edx,[ebx+ebp]
039fc589 03ef add ebp,edi
039fc58b 895604 mov [esi+0x4],edx
039fc58e 896e08 mov [esi+0x8],ebp
039fc591 8bac241c010000 mov ebp,[esp+0x11c]
039fc598 8b8db4000000 mov ecx,[ebp+0xb4]
039fc59e 56 push esi
FAULT ->039fc59f 8b01 mov eax,[ecx] ds:0023:00000000=????????
039fc5a1 ff5014 call dword ptr [eax+0x14]
039fc5a4 8b4c2424 mov ecx,[esp+0x24]
039fc5a8 51 push ecx
039fc5a9 8bf0 mov esi,eax
039fc5ab ff153471b003 call dword ptr [ffdshow+0x147134 (03b07134)]
039fc5b1 8bc6 mov eax,esi
039fc5b3 8b8c240c010000 mov ecx,[esp+0x10c]
039fc5ba 5f pop edi
039fc5bb 5e pop esi
039fc5bc 5d pop ebp

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
00d477c8 00d8ccd4 00d50001 00d5f318 00000030 ffdshow!DllUnregisterServer+0x14b7f
03b09ff4 039fe850 039fe860 03af96b0 03af9750 0xd8ccd4
03ae8670 0000008c fd1023e9 ccccccff 04246c81 ffdshow!DllUnregisterServer+0x16e30

*----> Scarico Raw Stack <----*
0000000019cafe30 6c 78 d4 00 03 00 00 00 - 88 ff ca 19 e8 c1 03 09 lx..............
0000000019cafe40 c8 77 d4 00 00 00 00 00 - 00 00 b5 04 00 00 00 00 .w..............
0000000019cafe50 00 00 00 00 00 00 00 00 - 54 78 d4 00 40 1f 00 00 ........Tx..@...
0000000019cafe60 01 00 00 00 00 00 00 00 - 6d 05 92 7c 50 3b fe 08 ........m..|P;..
0000000019cafe70 50 3b fe 08 00 00 00 00 - 00 00 00 00 00 9c e4 a6 P;..............
0000000019cafe80 00 00 00 00 00 00 00 00 - 00 00 f0 3f 90 d8 07 09 ...........?....
0000000019cafe90 68 d2 e6 a6 13 95 af 03 - e4 3d d9 00 00 00 00 00 h........=......
0000000019cafea0 a8 07 00 00 68 d2 e6 a6 - 00 00 00 00 00 00 00 00 ....h...........
0000000019cafeb0 00 00 f0 3f 7d 6e af 03 - 00 00 00 00 00 00 00 00 ...?}n..........
0000000019cafec0 68 d2 e6 a6 00 00 00 00 - 20 00 00 00 00 00 f0 3f h....... ......?
0000000019cafed0 c0 e9 91 7c 1b 90 92 7c - 38 08 00 00 00 00 00 00 ...|...|8.......
0000000019cafee0 00 00 00 00 00 00 00 00 - 98 ff ca 19 00 00 00 00 ................
0000000019cafef0 00 00 00 00 00 70 fa 7f - 58 ff ca 19 2a 26 80 7c .....p..X...*&.|
0000000019caff00 14 ff ca 19 00 26 80 7c - 00 00 00 00 48 ed 07 09 .....&.|....H...
0000000019caff10 00 00 00 00 14 00 00 00 - 01 00 00 00 00 00 00 00 ................
0000000019caff20 00 00 00 00 10 00 00 00 - 6d 05 92 7c de c2 bf 77 ........m..|...w
0000000019caff30 00 70 fd 7f 00 70 fa 7f - 00 00 00 00 00 00 00 00 .p...p..........
0000000019caff40 dc ff ca 19 b4 d4 af 03 - 00 00 00 00 b7 99 af 03 ................
0000000019caff50 c8 77 d4 00 b8 c5 03 09 - fe ff ff ff 48 ed 07 09 .w..........H...
0000000019caff60 00 00 00 00 a4 ff ca 19 - b3 c2 8a 74 c8 77 d4 00 ...........t.w..

*----> Scarico dello stato per l'id del thread 0x28c <----*

eax=00d55440 ebx=00b0f3a8 ecx=00e5d440 edx=19dafe3c esi=00000950 edi=00000000
eip=7c91eb94 esp=19dafe94 ebp=19dafef8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
19dafef8 7c802542 00000950 ffffffff 00000000 ntdll!KiFastSystemCallRet
19daff0c 748ade11 00000950 ffffffff 00989680 kernel32!WaitForSingleObject+0x12
19daff30 748acc6e 00b0f3a8 19daff98 00000000 quartz+0x10de11
19daff9c 748ace5e 00000000 747b95ab 747a45ec quartz+0x10cc6e
19daffb4 7c80b50b 00d555f8 747a45ec 1084f5c0 quartz+0x10ce5e
19daffec 00000000 747b9596 00d555f8 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000019dafe94 c0 e9 91 7c db 25 80 7c - 50 09 00 00 00 00 00 00 ...|.%.|P.......
0000000019dafea4 00 00 00 00 00 00 00 00 - a4 f3 b0 00 a8 f3 b0 00 ................
0000000019dafeb4 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000019dafec4 10 00 00 00 14 00 00 00 - 01 00 00 00 00 70 fd 7f .............p..
0000000019dafed4 00 60 fa 7f 00 00 00 00 - 00 00 00 00 a8 fe da 19 .`..............
0000000019dafee4 00 70 fd 7f dc ff da 19 - f3 99 83 7c 08 26 80 7c .p.........|.&.|
0000000019dafef4 00 00 00 00 0c ff da 19 - 42 25 80 7c 50 09 00 00 ........B%.|P...
0000000019daff04 ff ff ff ff 00 00 00 00 - 30 ff da 19 11 de 8a 74 ........0......t
0000000019daff14 50 09 00 00 ff ff ff ff - 80 96 98 00 f8 55 d5 00 P............U..
0000000019daff24 00 00 00 00 d0 34 7a 74 - d0 34 7a 74 9c ff da 19 .....4zt.4zt....
0000000019daff34 6e cc 8a 74 a8 f3 b0 00 - 98 ff da 19 00 00 00 00 n..t............
0000000019daff44 00 00 00 00 00 00 00 00 - ec 45 7a 74 f8 55 d5 00 .........Ezt.U..
0000000019daff54 f8 55 d5 00 06 00 00 00 - 00 80 00 00 00 02 00 00 .U..............
0000000019daff64 00 00 00 00 00 00 80 c3 - c9 01 00 00 00 64 5e 5a .............d^Z
0000000019daff74 bf 28 00 00 00 00 00 00 - 00 00 00 00 00 00 43 01 .(............C.
0000000019daff84 c0 28 00 00 00 00 80 c3 - c9 01 00 00 3c 09 00 00 .(..........<...
0000000019daff94 00 00 00 00 00 00 00 00 - b4 ff da 19 5e ce 8a 74 ............^..t
0000000019daffa4 00 00 00 00 ab 95 7b 74 - ec 45 7a 74 c0 f5 84 10 ......{t.Ezt....
0000000019daffb4 ec ff da 19 0b b5 80 7c - f8 55 d5 00 ec 45 7a 74 .......|.U...Ezt
0000000019daffc4 c0 f5 84 10 f8 55 d5 00 - 00 60 fa 7f 00 46 fc 81 .....U...`...F..

*----> Scarico dello stato per l'id del thread 0x1764 <----*

eax=00000000 ebx=02625a00 ecx=0000003c edx=00000000 esi=0000094c edi=00000000
eip=7c91eb94 esp=19fafe24 ebp=19fafe88 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

funzione: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e

*----> Back Trace dello stack <----*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
19fafe88 7c802542 0000094c ffffffff 00000000 ntdll!KiFastSystemCallRet
19fafe9c 66becc36 0000094c ffffffff 00b0f0f0 kernel32!WaitForSingleObject+0x12
19fafed8 66bd3d4c 08fd63f8 090c0790 19faff54 qedit+0x2cc36
19fafee8 66bdc181 090c0790 00000000 090c06a8 qedit+0x13d4c
19faff54 66c2ab18 090c0790 00d70f68 00d70f20 qedit+0x1c181
19faff68 66bd3d4c 00b0f164 090c0790 19faff98 qedit+0x6ab18
19faff78 66bf10fc 090c0790 00000001 00d70f20 qedit+0x13d4c
19faff98 66c2ce38 1094f734 00000000 66bd6727 qedit+0x310fc
19faffb4 7c80b50b 00d70f20 1094f734 66bd33cf qedit+0x6ce38
19faffec 00000000 66bd6712 00d70f20 00000000 kernel32!GetModuleFileNameA+0x1b4

*----> Scarico Raw Stack <----*
0000000019fafe24 c0 e9 91 7c db 25 80 7c - 4c 09 00 00 00 00 00 00 ...|.%.|L.......
0000000019fafe34 00 00 00 00 90 07 0c 09 - 68 63 fd 08 00 5a 62 02 ........hc...Zb.
0000000019fafe44 14 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000019fafe54 10 00 00 00 e5 a2 be 66 - 2b 2c 0a 00 00 70 fd 7f .......f+,...p..
0000000019fafe64 00 50 fa 7f 00 00 00 00 - 00 00 00 00 38 fe fa 19 .P..........8...
0000000019fafe74 86 01 00 00 dc ff fa 19 - f3 99 83 7c 08 26 80 7c ...........|.&.|
0000000019fafe84 00 00 00 00 9c fe fa 19 - 42 25 80 7c 4c 09 00 00 ........B%.|L...
0000000019fafe94 ff ff ff ff 00 00 00 00 - d8 fe fa 19 36 cc be 66 ............6..f
0000000019fafea4 4c 09 00 00 ff ff ff ff - f0 f0 b0 00 54 33 bc 66 L...........T3.f
0000000019fafeb4 80 06 0c 09 00 5a 62 02 - 00 00 00 00 2b 86 6c 02 .....Zb.....+.l.
0000000019fafec4 00 00 00 00 2b 86 6c 02 - 00 00 00 00 00 5a 62 02 ....+.l......Zb.
0000000019fafed4 00 00 00 00 e8 fe fa 19 - 4c 3d bd 66 f8 63 fd 08 ........L=.f.c..
0000000019fafee4 90 07 0c 09 54 ff fa 19 - 81 c1 bd 66 90 07 0c 09 ....T......f....
0000000019fafef4 00 00 00 00 a8 06 0c 09 - 00 00 00 00 18 06 00 00 ................
0000000019faff04 00 00 00 00 00 00 00 00 - 00 00 00 00 2b 2c 0a 00 ............+,..
0000000019faff14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 ca 9a 3b ...............;
0000000019faff24 00 00 00 00 00 00 00 00 - 00 00 00 00 a8 06 0c 09 ................
0000000019faff34 10 06 0c 09 50 ff fa 19 - db 3f bd 66 00 00 00 00 ....P....?.f....
0000000019faff44 00 00 00 00 00 00 00 00 - 00 00 00 00 90 07 0c 09 ................
0000000019faff54 68 ff fa 19 18 ab c2 66 - 90 07 0c 09 68 0f d7 00 h......f....h...

[atidem]

Figlio mio tu hai bisogno di un esorcista!
Scherzi a parte, ci sono un sacco di problemi da risolvere.
Ora non ho il tempo di leggere il file log con attenzione.
Lo farò in seguito.

[fedek9001]

incomincia con il seguire queste istruzioni :

http://support.microsoft.com/default...duct=winxp#kb2

e già che ci sei disinstalla tutti i codec installati ( divx , xvid e ffdshow )

[luka734]

Ho fatto come dice il sito microsoft ma sempre lo stesso!
Di codec installati ho solo divx 5.2 pro e xvid!

[Duca263]

Lo dico a titolo informativo non sò se questo possa risolvere o meno il problema, per disattivare il Dr. Watson seguire la seguente procedura: Start ---> Esegui ----> digitare regedit.
Nel registro cercare: Hkey_local_Machine\Software\Microsoft\Windows NT\Current Version e selezionare a destra della finestra AeDebug ed eliminarla.
Per ripristinare il tutto: Start ----> Esegui e digitare drwtsn32 -i

[fedek9001]

Originariamente inviato da luka734
Ho fatto come dice il sito microsoft ma sempre lo stesso!
Di codec installati ho solo divx 5.2 pro e xvid!

Prova a levarli, eventualmente li rimetti.

[luka734]

Ho fatto come dice l'amico Duca263 ed ora quando premo col tasto destro su un qualsiasi file mi esce la seguente finestra (vedi allegato)

[luka734]

Ho provato a riattivarlo ma mi da comunque quell'errore
ah subito dopo aver premuto ok mi si riavvia explorer!

[Duca263]

Originariamente inviato da luka734
Ho provato a riattivarlo ma mi da comunque quell'errore
ah subito dopo aver premuto ok mi si riavvia explorer!

Una curiosità, prova a far partire il PC in modalità provvisoria (tenendo premuto F8 appena lo accendi), vedi se ti dà lo stesso problema.