Post XP Home SP2 Update Explorer Crashes

Archived from groups: microsoft.public.windowsxp.perform_maintain (More info?)

When attempting to look at certain folders with jpg
Explorer crashes. I have all the latest updates for XP
and Office XP. Here is the latest drwtsn32 crash log.

Application exception occurred:
App: C:\WINDOWS\Explorer.EXE (pid=532)
When: 9/30/2004 @ 14:22:15.471
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: ZIGURAT
User Name: Joseph Malki
Terminal Session Id: 0
Number of Processors: 1
Processor Type: x86 Family 6 Model 10 Stepping 0
Windows Version: 5.1
Current Build: 2600
Service Pack: 2
Current Type: Uniprocessor Free
Registered Organization:
Registered Owner: Joseph Malki

*----> Task List <----*
0 System Process
4 System
636 smss.exe
692 csrss.exe
724 winlogon.exe
768 services.exe
780 lsass.exe
932 svchost.exe
1020 svchost.exe
1208 svchost.exe
1264 svchost.exe
1376 svchost.exe
532 Explorer.EXE
1648 dwwin.exe
168 drwtsn32.exe

*----> Module List <----*
(0000000000f90000 - 0000000000fac000: C:\Program
Files\Common Files\Adobe\Shell\PSICON.DLL
(0000000001000000 - 00000000010ff000:
C:\WINDOWS\Explorer.EXE
(0000000001140000 - 00000000011c8000: C:\WINDOWS\system32
\shdoclc.dll
(0000000001350000 - 0000000001362000: C:\WINDOWS\system32
\browselc.dll
(0000000001730000 - 000000000174a000: C:\WINDOWS\system32
\ccTrust.dll
(0000000001930000 - 000000000193b000: C:\Program
Files\Aladdin Systems\StuffIt\CompressMenu.dll
(0000000001950000 - 0000000001966000: C:\Program
Files\Aladdin Systems\StuffIt\Aladdin.dll
(0000000002270000 - 000000000230e000: C:\Program
Files\Adobe\Acrobat 6.0\Acrobat Elements\ContextMenu.dll
(000000000ffd0000 - 000000000fff8000: C:\WINDOWS\system32
\rsaenh.dll
(0000000010000000 - 000000001001c000: C:\Program
Files\Norton AntiVirus\NavShExt.dll
(0000000020000000 - 00000000202c5000: C:\WINDOWS\system32
\xpsp2res.dll
(0000000022680000 - 0000000022692000: C:\Program
Files\ICQ\ICQShExt.dll
(0000000032520000 - 0000000032532000: C:\Program
Files\Microsoft Office\Office10\msohev.dll
(000000004d4f0000 - 000000004d548000: C:\WINDOWS\system32
\WINHTTP.dll
(000000004ec50000 - 000000004edf3000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144c
cf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
(000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32
\UxTheme.dll
(000000005b860000 - 000000005b8b4000: C:\WINDOWS\system32
\NETAPI32.dll
(000000005ba60000 - 000000005bad1000: C:\WINDOWS\System32
\themeui.dll
(000000005cb00000 - 000000005cb6e000: C:\WINDOWS\System32
\shimgvw.dll
(000000005cb70000 - 000000005cb96000: C:\WINDOWS\system32
\ShimEng.dll
(000000005d090000 - 000000005d127000: C:\WINDOWS\system32
\comctl32.dll
(000000005e310000 - 000000005e31c000: C:\WINDOWS\System32
\pngfilt.dll
(0000000066880000 - 000000006688c000: C:\WINDOWS\system32
\ImgUtil.dll
(000000006f880000 - 000000006fa4a000:
C:\WINDOWS\AppPatch\AcGenral.DLL
(0000000071aa0000 - 0000000071aa8000: C:\WINDOWS\system32
\WS2HELP.dll
(0000000071ab0000 - 0000000071ac7000: C:\WINDOWS\system32
\WS2_32.dll
(0000000071b20000 - 0000000071b32000: C:\WINDOWS\system32
\MPR.dll
(0000000071bf0000 - 0000000071c03000: C:\WINDOWS\system32
\SAMLIB.dll
(0000000071c10000 - 0000000071c1e000: C:\WINDOWS\System32
\ntlanman.dll
(0000000071c80000 - 0000000071c87000: C:\WINDOWS\System32
\NETRAP.dll
(0000000071c90000 - 0000000071cd0000: C:\WINDOWS\System32
\NETUI1.dll
(0000000071cd0000 - 0000000071ce7000: C:\WINDOWS\System32
\NETUI0.dll
(0000000071d40000 - 0000000071d5c000: C:\WINDOWS\System32
\actxprxy.dll
(00000000722b0000 - 00000000722b5000: C:\WINDOWS\system32
\SensApi.dll
(0000000072410000 - 000000007242a000: C:\WINDOWS\System32
\mydocs.dll
(0000000073000000 - 0000000073026000: C:\WINDOWS\system32
\WINSPOOL.DRV
(0000000073380000 - 00000000733d7000: C:\WINDOWS\System32
\zipfldr.dll
(0000000073b30000 - 0000000073b44000: C:\WINDOWS\system32
\mscms.dll
(0000000073dd0000 - 0000000073ece000: C:\WINDOWS\system32
\MFC42.DLL
(00000000746c0000 - 00000000746e7000: C:\WINDOWS\System32
\msls31.dll
(00000000754d0000 - 0000000075550000: C:\WINDOWS\system32
\CRYPTUI.dll
(0000000075cf0000 - 0000000075d81000: C:\WINDOWS\system32
\MLANG.dll
(0000000075e60000 - 0000000075e73000: C:\WINDOWS\system32
\cryptnet.dll
(0000000075f60000 - 0000000075f67000: C:\WINDOWS\System32
\drprov.dll
(0000000075f70000 - 0000000075f79000: C:\WINDOWS\System32
\davclnt.dll
(0000000075f80000 - 000000007607c000: C:\WINDOWS\system32
\BROWSEUI.dll
(0000000076080000 - 00000000760e5000: C:\WINDOWS\system32
\MSVCP60.dll
(0000000076360000 - 0000000076370000: C:\WINDOWS\system32
\WINSTA.dll
(0000000076380000 - 0000000076385000: C:\WINDOWS\System32
\MSIMG32.dll
(0000000076400000 - 00000000765a6000: C:\WINDOWS\system32
\NETSHELL.dll
(0000000076600000 - 000000007661d000: C:\WINDOWS\System32
\CSCDLL.dll
(0000000076980000 - 0000000076988000: C:\WINDOWS\system32
\LINKINFO.dll
(0000000076990000 - 00000000769b5000: C:\WINDOWS\system32
\ntshrui.dll
(00000000769c0000 - 0000000076a73000: C:\WINDOWS\system32
\USERENV.dll
(0000000076b20000 - 0000000076b31000: C:\WINDOWS\system32
\ATL.DLL
(0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32
\WINMM.dll
(0000000076c00000 - 0000000076c2e000: C:\WINDOWS\system32
\credui.dll
(0000000076c30000 - 0000000076c5e000: C:\WINDOWS\system32
\WINTRUST.dll
(0000000076c90000 - 0000000076cb8000: C:\WINDOWS\system32
\IMAGEHLP.dll
(0000000076d60000 - 0000000076d79000: C:\WINDOWS\system32
\iphlpapi.dll
(0000000076e80000 - 0000000076e8e000: C:\WINDOWS\system32
\rtutils.dll
(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32
\WLDAP32.dll
(0000000076fd0000 - 000000007704f000: C:\WINDOWS\system32
\CLBCATQ.DLL
(0000000077050000 - 0000000077115000: C:\WINDOWS\system32
\COMRes.dll
(0000000077120000 - 00000000771ac000: C:\WINDOWS\system32
\OLEAUT32.dll
(00000000771b0000 - 0000000077256000: C:\WINDOWS\system32
\WININET.dll
(0000000077260000 - 00000000772fc000: C:\WINDOWS\system32
\urlmon.dll
(00000000773d0000 - 00000000774d2000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-
Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
\comctl32.dll
(00000000774e0000 - 000000007761c000: C:\WINDOWS\system32
\ole32.dll
(0000000077690000 - 00000000776b1000: C:\WINDOWS\system32
\NTMARTA.DLL
(0000000077760000 - 00000000778cc000: C:\WINDOWS\system32
\SHDOCVW.dll
(0000000077920000 - 0000000077a13000: C:\WINDOWS\system32
\SETUPAPI.dll
(0000000077a20000 - 0000000077a74000: C:\WINDOWS\System32
\cscui.dll
(0000000077a80000 - 0000000077b14000: C:\WINDOWS\system32
\CRYPT32.dll
(0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32
\MSASN1.dll
(0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32
\appHelp.dll
(0000000077be0000 - 0000000077bf5000: C:\WINDOWS\system32
\MSACM32.dll
(0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32
\VERSION.dll
(0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32
\msvcrt.dll
(0000000077d40000 - 0000000077dd0000: C:\WINDOWS\system32
\USER32.dll
(0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32
\ADVAPI32.dll
(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32
\RPCRT4.dll
(0000000077f10000 - 0000000077f56000: C:\WINDOWS\system32
\GDI32.dll
(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32
\SHLWAPI.dll
(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\System32
\Secur32.dll
(000000007c140000 - 000000007c243000: C:\Program
Files\Aladdin Systems\StuffIt\MFC71.DLL
(000000007c340000 - 000000007c396000: C:\Program
Files\Aladdin Systems\StuffIt\MSVCR71.dll
(000000007c3a0000 - 000000007c41b000: C:\Program
Files\Aladdin Systems\StuffIt\MSVCP71.dll
(000000007c800000 - 000000007c8f4000: C:\WINDOWS\system32
\kernel32.dll
(000000007c900000 - 000000007c9b0000: C:\WINDOWS\system32
\ntdll.dll
(000000007c9c0000 - 000000007d1d4000: C:\WINDOWS\system32
\SHELL32.dll
(000000007d1e0000 - 000000007d492000: C:\WINDOWS\system32
\msi.dll
(000000007d4a0000 - 000000007d782000: C:\WINDOWS\System32
\mshtml.dll

*----> State Dump for Thread Id 0x218 <----*

eax=00000000 ebx=00000000 ecx=00000000 edx=00000000
esi=00090608 edi=00000000
eip=7c90eb94 esp=0007f3f4 ebp=0007f47c iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000246

*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINDOWS\system32\ntdll.dll -
function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following
frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINDOWS\system32\ADVAPI32.dll -
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINDOWS\system32\ole32.dll -
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINDOWS\system32\SHELL32.dll -
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINDOWS\system32\USER32.dll -
*** ERROR: Module load completed but symbols could not be
loaded for C:\WINDOWS\Explorer.EXE
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007f47c 7c90104b 00090608 7c911320 00090608 ntdll!
KiFastSystemCallRet
0007f6b0 77dddfca 00090000 00000000 00000106 ntdll!
RtlEnterCriticalSection+0x46
0007f6f4 77dddf71 0007f720 000000b6 0007f94c ADVAPI32!
ObjectOpenAuditAlarmW+0x431
0007f8bc 77dddf05 000000b6 0007f94c 00000000 ADVAPI32!
ObjectOpenAuditAlarmW+0x3d8
0007f924 77dd6b5e 000000b6 0007f94c 00000000 ADVAPI32!
ObjectOpenAuditAlarmW+0x36c
0007f958 77527425 00000000 00000000 00000000 ADVAPI32!
RegOpenKeyExW+0xe6
0007f984 77526cc2 00000000 000000b6 7c9ccc8c ole32!
CoCreateInstance+0x141c
0007fb14 7752688b 000a5d88 00000000 7c9ccc8c ole32!
CoCreateInstance+0xcb9
0007fb84 7752640c 77608270 00000017 00000000 ole32!
CoCreateInstance+0x882
0007fba8 7752786f 77608270 7c9ccc8c 774e1964 ole32!
CoCreateInstance+0x403
0007fbc0 77527891 7c9ccc8c 0007fbdc 7c9ccc8c ole32!
CoCreateInstance+0x1866
0007fbe0 77525ee3 7c9ccc8c 0007fcb0 00000113 ole32!
CoCreateInstance+0x1888
0007fcc4 77526000 7c9ccc8c 00000000 00000001 ole32!
CLIPFORMAT_UserFree+0x5b1
0007fcec 77525fcf 7c9ccc8c 00000000 00000001 ole32!
CoCreateInstanceEx+0x4f
0007fd10 7752603d 7c9ccc8c 00000000 00000001 ole32!
CoCreateInstanceEx+0x1e
0007fd40 7ca36bbb 7c9ccc8c 00000000 00000001 ole32!
CoCreateInstance+0x34
0007fd98 7ca3968a 000fc0e0 0001006c 00000113 SHELL32!
ExtractVersionResource16W+0xbe3
0007fdc0 77d48709 000fc0c0 00000113 00000002 SHELL32!
Ordinal733+0x339
0007fdec 77d487eb 7ca39624 0001006c 00000113 USER32!
GetDC+0x72
0007fe54 77d489a5 00094900 7ca39624 0001006c USER32!
GetDC+0x154
0007feb4 77d489e8 0007fed4 00000000 0007fef0 USER32!
GetWindowLongW+0x127
0007fec4 7ca3973d 0007fed4 000fc0c0 0001006c USER32!
DispatchMessageW+0xf
0007fef0 7ca395d2 7c8092ac 000fc0c0 000fc0c0 SHELL32!
Ordinal733+0x3ec
0007ff08 7ca32c57 00000000 0007ff5c 01016e95 SHELL32!
Ordinal733+0x281
0007ff14 01016e95 000fc0c0 7ffd6000 0007ffc0 SHELL32!
Ordinal201+0x28
0007ff5c 0101e2b6 00000000 00000000 00020692
Explorer+0x16e95
0007ffc0 7c816d4f 00000002 5d093c48 7ffd6000
Explorer+0x1e2b6
0007fff0 00000000 0101e24e 00000000 78746341 kernel32!
RegisterWaitForInputIdle+0x49

*----> Raw Stack Dump <----*
000000000007f3f4 c0 e9 90 7c 1b 90 91 7c - e4 03 00 00 00
00 00 00 ...|...|........
000000000007f404 00 00 00 00 22 00 00 00 - 00 00 00 00 00
00 09 00 ...."...........
000000000007f414 54 eb 07 00 80 eb 07 00 - 18 ee 90 7c b0
66 91 7c T..........|.f.|
000000000007f424 ff ff ff ff 7e 65 91 7c - 9e 65 91 7c 01
00 00 00 ....~e.|.e.|....
000000000007f434 01 00 00 00 00 00 00 00 - c4 eb 07 00 74
eb 07 00 ............t...
000000000007f444 90 eb 07 00 93 e6 80 7c - 01 00 00 00 84
f4 07 00 .......|........
000000000007f454 00 00 09 00 32 07 91 7c - 22 00 00 00 e8
0c 09 00 ....2..|".......
000000000007f464 00 00 00 00 d8 0d 09 00 - 5c f4 07 00 74
f0 07 00 ........\...t...
000000000007f474 00 00 00 00 e4 03 00 00 - b0 f6 07 00 4b
10 90 7c ............K..|
000000000007f484 08 06 09 00 20 13 91 7c - 08 06 09 00 4c
f9 07 00 .... ..|....L...
000000000007f494 06 01 00 00 34 00 00 c0 - 2e 01 00 00 34
00 00 c0 ....4.......4...
000000000007f4a4 00 00 00 00 d4 f6 07 00 - 18 ee 90 7c 38
07 91 7c ...........|8..|
000000000007f4b4 ff ff ff ff 32 07 91 7c - ab 06 91 7c eb
06 91 7c ....2..|...|...|
000000000007f4c4 80 f9 07 00 60 01 00 00 - 34 00 00 c0 20
00 00 00 ....`...4... ...
000000000007f4d4 68 c4 0f 00 7c c4 0f 00 - fc f4 31 32 ab
b7 d4 77 h...|.....12...w
000000000007f4e4 50 79 53 00 e8 78 53 00 - 54 00 01 01 00
00 00 00 PyS..xS.T.......
000000000007f4f4 00 00 00 00 c8 fb 0f 00 - 18 f5 07 00 a1
b2 d4 77 ...............w
000000000007f504 6c 00 01 00 20 00 00 00 - 02 00 00 00 d8
f6 07 00 l... ...........
000000000007f514 c8 2e 09 00 d8 f5 07 00 - 00 00 df 00 6c
00 01 00 ............l...
000000000007f524 20 00 00 00 78 00 01 00 - 50 b2 d4 77 20
00 00 00 ...x...P..w ...

*----> State Dump for Thread Id 0x294 <----*

eax=00acff54 ebx=00000000 ecx=00095758 edx=7c90eb94
esi=00095758 edi=000957fc
eip=7c90eb94 esp=00acfe1c ebp=00acff80 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000246

function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e

*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following
frames may be wrong.
ChildEBP RetAddr Args to Child
00acff80 77e76c22 00acffa8 77e76a3b 00095758 ntdll!
KiFastSystemCallRet
00acff88 77e76a3b 00095758 00000000 0007f88c RPCRT4!
I_RpcBCacheFree+0x5ea
00acffa8 77e76c0a 000a6930 00acffec 7c80b50b RPCRT4!
I_RpcBCacheFree+0x403
00acffb4 7c80b50b 000b1d80 00000000 0007f88c RPCRT4!
I_RpcBCacheFree+0x5d2
00acffec 00000000 77e76bf0 000b1d80 00000000 kernel32!
GetModuleFileNameA+0x1b4

*----> Raw Stack Dump <----*
0000000000acfe1c 99 e3 90 7c 03 67 e7 77 - 90 01 00 00 70
ff ac 00 ...|.g.w....p...
0000000000acfe2c 00 00 00 00 78 d8 15 00 - 4c ff ac 00 2c
fb b1 f6 ....x...L...,...
0000000000acfe3c e0 29 3e f7 d8 d2 dd 84 - 00 00 00 00 00
a0 cc 84 .)>.............
0000000000acfe4c 50 fb b1 f6 4a 00 3f f7 - 08 d0 dd 84 05
00 00 00 P...J.?.........
0000000000acfe5c 00 00 00 00 00 00 00 00 - 01 00 00 00 fd
78 a6 84 .............x..
0000000000acfe6c 00 00 00 00 ac fb b1 f6 - a6 26 3f f7 00
00 00 00 .........&?.....
0000000000acfe7c c0 9a 40 f7 73 64 cd 84 - 05 00 00 00 ff
ff ff ff ..@.sd..........
0000000000acfe8c ff ff ff ff ff ff ff ff - ff ff ff ff 00
00 00 00 ................
0000000000acfe9c 00 00 00 00 00 00 00 00 - be 19 3f f7 00
a0 cc 84 ..........?.....
0000000000acfeac 00 a0 cc 84 cf 37 3f f7 - 00 a0 cc 84 00
00 00 00 .....7?.........
0000000000acfebc 00 00 00 00 00 00 00 00 - f4 78 a6 84 01
00 00 00 .........x......
0000000000acfecc 46 02 00 00 ee 3e 4b f7 - f0 fc b1 f6 1c
45 3e f7 F....>K......E>.
0000000000acfedc e0 d0 dd 84 90 25 df 84 - 30 81 f1 84 00
00 00 00 .....%..0.......
0000000000acfeec 00 40 70 c0 fc fb b1 f6 - ff ff ff ff 46
02 00 00 .@p.........F...
0000000000acfefc e0 bd 4d 80 20 fc b1 f6 - f8 17 a5 84 20
f1 df ff ..M. ....... ...
0000000000acff0c 46 02 00 00 48 ff ac 00 - 00 e0 fd 7f 70
ff ac 00 F...H.......p...
0000000000acff1c 3c 24 80 7c 34 ff ac 00 - 0f 24 80 7c 00
00 00 00 <$.|4....$.|....
0000000000acff2c 80 1d 0b 00 80 ff ac 00 - 99 66 e7 77 4c
ff ac 00 .........f.wL...
0000000000acff3c a9 66 e7 77 ed 10 90 7c - b0 1a 0b 00 80
1d 0b 00 .f.w...|........
0000000000acff4c 00 a2 2f 4d ff ff ff ff - 00 5d 1e ee ff
ff ff ff ../M.....]......

*----> State Dump for Thread Id 0x298 <----*

eax=000b22f0 ebx=00007530 ecx=000cc050 edx=00c0fee0
esi=00000000 edi=00c0ff50
eip=7c90eb94 esp=00c0ff20 ebp=00c0ff78 iopl=0 nv
up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000206

function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e

*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following
frames may be wrong.
ChildEBP RetAddr Args to Child
00c0ff78 7c802451 0000ea60 00000000 00c0ffb4 ntdll!
KiFastSystemCallRet
00c0ff88 774f2fcb 0000ea60 000b44a8 774f314d kernel32!
Sleep+0xf
00c0ffb4 7c80b50b 000b44a8 7c910945 7c91094e ole32!
StringFromGUID2+0x2d1
00c0ffec 00000000 774f319a 000b44a8 00000000 kernel32!
GetModuleFileNameA+0x1b4

*----> Raw Stack Dump <----*
0000000000c0ff20 5c d8 90 7c ed 23 80 7c - 00 00 00 00 50
ff c0 00 \..|.#.|....P...
0000000000c0ff30 50 25 80 7c f0 56 60 77 - 30 75 00 00 14
00 00 00 P%.|.V`w0u......
0000000000c0ff40 01 00 00 00 00 00 00 00 - 00 00 00 00 10
00 00 00 ................
0000000000c0ff50 00 ba 3c dc ff ff ff ff - e4 fe c0 00 50
ff c0 00 ..<.........P...
0000000000c0ff60 30 ff c0 00 e4 fe c0 00 - dc ff c0 00 f3
99 83 7c 0..............|
0000000000c0ff70 58 24 80 7c 00 00 00 00 - 88 ff c0 00 51
24 80 7c X$.|........Q$.|
0000000000c0ff80 60 ea 00 00 00 00 00 00 - b4 ff c0 00 cb
2f 4f 77 `............/Ow
0000000000c0ff90 60 ea 00 00 a8 44 0b 00 - 4d 31 4f 77 00
00 00 00 `....D..M1Ow....
0000000000c0ffa0 45 09 91 7c a8 44 0b 00 - 00 00 4e 77 b5
31 4f 77 E..|.D....Nw.1Ow
0000000000c0ffb0 4e 09 91 7c ec ff c0 00 - 0b b5 80 7c a8
44 0b 00 N..|.......|.D..
0000000000c0ffc0 45 09 91 7c 4e 09 91 7c - a8 44 0b 00 00
d0 fd 7f E..|N..|.D......
0000000000c0ffd0 00 46 fc 84 c0 ff c0 00 - b0 bc ad 84 ff
ff ff ff .F..............
0000000000c0ffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00
00 00 00 ...|...|........
0000000000c0fff0 00 00 00 00 9a 31 4f 77 - a8 44 0b 00 00
00 00 00 .....1Ow.D......
0000000000c10000 00 00 00 00 00 00 00 00 - 00 00 00 00 00
00 00 00 ................
0000000000c10010 00 00 00 00 00 00 00 00 - 00 00 00 00 00
00 00 00 ................
0000000000c10020 00 00 00 00 00 00 00 00 - 00 00 00 00 00
00 00 00 ................
0000000000c10030 00 00 00 00 00 00 00 00 - 00 00 00 00 00
00 00 00 ................
0000000000c10040 00 00 00 00 00 00 00 00 - 00 00 00 00 00
00 00 00 ................
0000000000c10050 00 00 00 00 00 00 00 00 - 00 00 00 00 00
00 00 00 ................

*----> State Dump for Thread Id 0x2ac <----*

eax=00000001 ebx=00000000 ecx=00c4f8b0 edx=7c90eb94
esi=77e46104 edi=00000000
eip=7c90eb94 esp=00c4ef4c ebp=00c4efd4 iopl=0 nv
up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b
gs=0000 efl=00000246

function: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e

*----> Stack Back Trace <----*