*----> 堆栈反向跟踪 <---*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll -
WARNING: Stack unwind information not available. Following frames may be wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
01a8ff6c 7c809c86 00000002 01a8ffa4 00000000 ntdll!KiFastSystemCallRet
01a8ff88 72c9312a 00000002 01a8ffa4 00000000 kernel32!WaitForMultiple
Objects+0x18
01a8ffb4 7c80b50b 00000000 00000000 00140000 wdmaud!midMessage+0x348
01a8ffec 00000000 72c930e8 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4
*----> 原始堆栈转储 <----*
0000000001a8fed0 ab e9 92 7c f2 94 80 7c - 02 00 00 00 f8 fe a8 01 ...|...|........
0000000001a8fee0 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001a8fef0 00 00 00 00 00 00 00 00 - c8 00 00 00 a8 00 00 00 ................
0000000001a8ff00 82 8f 56 80 00 61 00 e1 - 00 00 00 00 00 00 00 00 ..V..a..........
0000000001a8ff10 30 2c 65 f5 ec a7 6f ff - 14 00 00 00 01 00 00 00 0,e...o.........
0000000001a8ff20 00 00 00 00 00 00 00 00 - 10 00 00 00 84 a6 6f ff ..............o.
0000000001a8ff30 00 c9 56 e1 87 06 58 80 - 00 40 fd 7f 00 e0 fd 7f ..V...X..@......
0000000001a8ff40 00 e0 fd 7f 00 00 00 00 - f8 fe a8 01 00 00 00 00 ................
0000000001a8ff50 02 00 00 00 ec fe a8 01 - 00 00 00 00 dc ff a8 01 ................
0000000001a8ff60 f3 99 83 7c 90 95 80 7c - 00 00 00 00 88 ff a8 01 ...|...|........
0000000001a8ff70 86 9c 80 7c 02 00 00 00 - a4 ff a8 01 00 00 00 00 ...|............
0000000001a8ff80 ff ff ff ff 00 00 00 00 - b4 ff a8 01 2a 31 c9 72 ............*1.r
0000000001a8ff90 02 00 00 00 a4 ff a8 01 - 00 00 00 00 ff ff ff ff ................
0000000001a8ffa0 00 00 14 00 c8 00 00 00 - a8 00 00 00 00 00 00 00 ................
0000000001a8ffb0 dc e2 92 7c ec ff a8 01 - 0b b5 80 7c 00 00 00 00 ...|.......|....
0000000001a8ffc0 00 00 00 00 00 00 14 00 - 00 00 00 00 00 e0 fd 7f ................
0000000001a8ffd0 00 66 f3 80 c0 ff a8 01 - b0 ee 38 ff ff ff ff ff .f........8.....
0000000001a8ffe0 f3 99 83 7c 18 b5 80 7c - 00 00 00 00 00 00 00 00 ...|...|........
0000000001a8fff0 00 00 00 00 e8 30 c9 72 - 00 00 00 00 00 00 00 00 .....0.r........
0000000001a90000 00 00 00 00 00 00 01 00 - 00 10 00 00 00 00 00 00 ................
*----> 线程 ID 0xdd0 的状态转储 <----*
eax=004012e0 ebx=0043fdb4 ecx=0012fb4c edx=00000000 esi=00000000 edi=01bbff6c
eip=7c92eb94 esp=01bbff3c ebp=01bbff94 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
函数: ntdll!KiFastSystemCallRet
7c92eb89 90 nop
7c92eb8a 90 nop
ntdll!KiFastSystemCall:
7c92eb8b 8bd4 mov edx,esp
7c92eb8d 0f34 sysenter
7c92eb8f 90 nop
7c92eb90 90 nop
7c92eb91 90 nop
7c92eb92 90 nop
7c92eb93 90 nop
ntdll!KiFastSystemCallRet:
7c92eb94 c3 ret
7c92eb95 8da42400000000 lea esp,[esp]
7c92eb9c 8d642400 lea esp,[esp]
7c92eba0 90 nop
7c92eba1 90 nop
7c92eba2 90 nop
7c92eba3 90 nop
7c92eba4 90 nop
ntdll!KiIntSystemCall:
7c92eba5 8d542408 lea edx,[esp+0x8]
7c92eba9 cd2e int 2e
*----> 堆栈反向跟踪 <---*
WARNING: Stack unwind information not available. Following frames may be wrong.
ChildEBP RetAddr Args to Child
01bbff94 7c802451 00000064 00000000 01bbffec ntdll!KiFastSystemCallRet
01bbffa4 0040133e 00000064 012a0568 00000000 kernel32!Sleep+0xf
01bbffec 00000000 004012e0 0043fdb4 00000000 7imouto+0x133e
*----> 原始堆栈转储 <----*
0000000001bbff3c 5c d8 92 7c ed 23 80 7c - 00 00 00 00 6c ff bb 01 \..|.#.|....l...
0000000001bbff4c f8 ff ff ff 42 24 80 7c - b4 fd 43 00 14 00 00 00 ....B$.|..C.....
0000000001bbff5c 01 00 00 00 00 00 00 00 - 00 00 00 00 10 00 00 00 ................
0000000001bbff6c c0 bd f0 ff ff ff ff ff - 00 00 00 00 6c ff bb 01 ............l...
0000000001bbff7c 4c ff bb 01 86 fa 6e 80 - dc ff bb 01 f3 99 83 7c L.....n........|
0000000001bbff8c 58 24 80 7c 00 00 00 00 - a4 ff bb 01 51 24 80 7c X$.|........Q$.|
0000000001bbff9c 64 00 00 00 00 00 00 00 - ec ff bb 01 3e 13 40 00 d...........>.@.
0000000001bbffac 64 00 00 00 68 05 2a 01 - 00 00 00 00 0b b5 80 7c d...h.*........|
0000000001bbffbc b4 fd 43 00 68 05 2a 01 - 00 00 00 00 b4 fd 43 00 ..C.h.*.......C.
0000000001bbffcc 00 d0 fd 7f 00 66 f3 80 - c0 ff bb 01 88 6b 61 ff .....f.......ka.
0000000001bbffdc ff ff ff ff f3 99 83 7c - 18 b5 80 7c 00 00 00 00 .......|...|....
0000000001bbffec 00 00 00 00 00 00 00 00 - e0 12 40 00 b4 fd 43 00 ..........@...C.
0000000001bbfffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001bc000c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001bc001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001bc002c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001bc003c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001bc004c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001bc005c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000001bc006c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................