Камрад
|
*----> Копия памяти для потока 0x130<----*
eax=000002d2 ebx=00000003 ecx=0000000f edx=000002e1 esi=000e6008 edi=00000000
eip=7c90eb94 esp=0007fef0 ebp=0007ff08 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
*** ERROR: Symbol file could not be found. Defaulted to export symbols for D:\WINXP\system32\ntdll.dll -
функция: ntdll!KiFastSystemCallRet
7c90eb89 90 nop
7c90eb8a 90 nop
ntdll!KiFastSystemCall:
7c90eb8b 8bd4 mov edx,esp
7c90eb8d 0f34 sysenter
7c90eb8f 90 nop
7c90eb90 90 nop
7c90eb91 90 nop
7c90eb92 90 nop
7c90eb93 90 nop
СБОЙ -> ntdll!KiFastSystemCallRet:
7c90eb94 c3 ret
7c90eb95 8da42400000000 lea esp,[esp]
7c90eb9c 8d642400 lea esp,[esp]
7c90eba0 90 nop
7c90eba1 90 nop
7c90eba2 90 nop
7c90eba3 90 nop
7c90eba4 90 nop
ntdll!KiIntSystemCall:
7c90eba5 8d542408 lea edx,[esp+0x8]
7c90eba9 cd2e int 2e
*----> Обратная трассировка стека <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for D:\WINXP\system32\SHELL32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Module load completed but symbols could not be loaded for D:\WINXP\Explorer.EXE
*** ERROR: Symbol file could not be found. Defaulted to export symbols for D:\WINXP\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
0007ff08 7ca32c57 00000000 0007ff5c 01016e95 ntdll!KiFastSystemCallRet
0007ff14 01016e95 000e6008 7ffdd000 0007ffc0 SHELL32!Ordinal201+0x28
0007ff5c 0101e2b6 00000000 00000000 000205be Explorer+0x16e95
0007ffc0 7c816d4f 00000002 5d093c48 7ffdd000 Explorer+0x1e2b6
0007fff0 00000000 0101e24e 00000000 78746341 kernel32!RegisterWaitForInputIdle+0x49
*----> Копия необработанного стека <----*
000000000007fef0 f5 93 d4 77 ee 95 a3 7c - ac 92 80 7c 08 60 0e 00 ...w...|...|.`..
000000000007ff00 08 60 0e 00 14 ff 07 00 - 14 ff 07 00 57 2c a3 7c .`..........W,.|
000000000007ff10 00 00 00 00 5c ff 07 00 - 95 6e 01 01 08 60 0e 00 ....\....n...`..
000000000007ff20 00 d0 fd 7f c0 ff 07 00 - 00 00 00 00 24 fd 07 00 ............$...
000000000007ff30 50 ff 07 00 e0 ff 07 00 - 27 e0 90 7c ed aa 80 7c P.......'..|...|
000000000007ff40 ff ff ff ff 0c 00 00 00 - 00 00 00 00 50 6d 00 00 ............Pm..
000000000007ff50 a4 00 00 00 01 00 00 00 - 08 60 0e 00 c0 ff 07 00 .........`......
000000000007ff60 b6 e2 01 01 00 00 00 00 - 00 00 00 00 be 05 02 00 ................
000000000007ff70 01 00 00 00 02 00 00 00 - 48 3c 09 5d 44 00 00 00 ........H<.]D...
000000000007ff80 0c 06 02 00 ec 05 02 00 - c0 05 02 00 00 00 00 00 ................
000000000007ff90 00 00 00 00 00 00 00 00 - 00 00 00 00 38 f0 07 00 ............8...
000000000007ffa0 f8 eb fd 7f 30 22 19 00 - 01 00 00 00 01 00 00 00 ....0"..........
000000000007ffb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000007ffc0 f0 ff 07 00 4f 6d 81 7c - 02 00 00 00 48 3c 09 5d ....Om.|....H<.]
000000000007ffd0 00 d0 fd 7f 38 b0 54 80 - c8 ff 07 00 a0 75 f5 81 ....8.T......u..
000000000007ffe0 ff ff ff ff f3 99 83 7c - 58 6d 81 7c 00 00 00 00 .......|Xm.|....
000000000007fff0 00 00 00 00 00 00 00 00 - 4e e2 01 01 00 00 00 00 ........N.......
0000000000080000 41 63 74 78 20 00 00 00 - 01 00 00 00 74 24 00 00 Actx .......t$..
0000000000080010 c4 00 00 00 00 00 00 00 - 20 00 00 00 00 00 00 00 ........ .......
0000000000080020 14 00 00 00 01 00 00 00 - 06 00 00 00 34 00 00 00 ............4...
|