|
2#
楼主 |
发表于 2004-7-19 10:44:45
|
只看该作者
一贴不够,再来!
功能:NtWaitForSingleObject
77f582d0 b8c5000000 mov eax,0xc5
77f582d5 8d542404 lea edx,[esp+0x4] ss:02f4e493=????????
77f582d9 cd2e int 2e
77f582db c20c00 ret 0xc
77f582de 8bc0 mov eax,eax
*----> 堆栈的反向追踪 <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
01fffae0 775f4a12 00000170 00000160 00000001 00000004 ntdll!NtWaitForSingleObject
01fffc08 7764997f 00000001 01fffe88 01fffc80 01fffd84 msafd!<nosymbols>
01fffc58 7020e8fa 00000001 01fffe88 01fffc80 01fffd84 ws2_32!select
01ffffb4 7020e6a2 77ed4f05 00158438 77f8e860 ffffffff WININET!InternetSetStatusCallback
01ffffec 00000000 00000000 00000000 00000000 00000000 WININET!InternetSetStatusCallback
00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
*----> 原始堆栈转储 <----*
01fffa8c 1f 88 5f 77 70 01 00 00 - 01 00 00 00 b8 fa ff 01 .._wp...........
01fffa9c 80 fc ff 01 88 fe ff 01 - 20 fb ff 01 40 43 e3 db ........ ...@C..
01fffaac 26 6a c4 01 ff ff ff ff - ff ff ff 7f c0 b4 b3 ff &j..............
01fffabc ff ff ff ff 00 00 00 00 - d0 bc 15 00 b8 fa ff 01 ................
01fffacc c3 49 5f 77 60 01 00 00 - 70 01 00 00 00 00 00 00 .I_w`...p.......
01fffadc 00 00 00 00 08 fc ff 01 - 12 4a 5f 77 70 01 00 00 .........J_wp...
01fffaec 60 01 00 00 01 00 00 00 - 04 00 00 00 b0 9a 15 00 `...............
01fffafc 88 fe ff 01 e0 90 15 00 - 80 0f 05 fd ff ff ff ff ................
01fffb0c 01 00 00 00 00 00 00 00 - 60 01 00 00 19 00 00 00 ........`.......
01fffb1c 00 00 00 00 60 01 00 00 - 19 00 00 00 08 00 00 00 ....`...........
01fffb2c b8 01 00 00 02 01 00 00 - 70 e8 f8 77 ff ff ff ff ........p..w....
01fffb3c 97 42 5f 77 60 01 00 00 - 70 01 00 00 00 00 00 00 .B_w`...p.......
01fffb4c 10 00 00 00 84 fb ff 01 - 17 20 01 00 74 fb ff 01 ......... ..t...
01fffb5c 10 00 00 00 00 00 00 00 - 00 00 00 00 e0 90 15 00 ................
01fffb6c 05 00 00 00 80 69 67 ff - 20 fc ff 01 00 00 00 00 .....ig. .......
01fffb7c f6 ff ff ff 01 00 00 00 - 00 00 00 00 01 00 00 00 ................
01fffb8c 00 00 00 00 60 c3 15 00 - 00 00 00 00 30 00 00 00 ....`.......0...
01fffb9c 70 01 00 00 00 00 00 00 - f0 fb ff 01 0c fb ff 01 p...............
01fffbac 2c 00 00 00 03 01 00 00 - 14 fb ff 01 e5 03 00 00 ,...............
01fffbbc d0 f0 c0 70 00 00 00 00 - 0f 7f 64 77 00 00 00 00 ...p......dw....
线程标识 0xc7 的状态转储
eax=00000074 ebx=020ffe88 ecx=00000017 edx=00000000 esi=7ffdf000 edi=00000001
eip=77f582cb esp=020ffe64 ebp=020ffeb8 iopl=0 nv up ei pl nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213
功能:NtWaitForMultipleObjects
77f582c0 b8c4000000 mov eax,0xc4
77f582c5 8d542404 lea edx,[esp+0x4] ss:0304e86b=????????
77f582c9 cd2e int 2e
77f582cb c21400 ret 0x14
77f582ce 8bc0 mov eax,eax
*----> 堆栈的反向追踪 <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
020ffeb8 77e4dc3a 00000002 020ffee0 00000000 0000ea60 ntdll!NtWaitForMultipleObjects
020fff14 77e4db92 00000001 70c0f0f0 0000ea60 00000041 user32!MsgWaitForMultipleObjectsEx
020fff30 70bd184d 00000001 70c0f0f0 00000000 0000ea60 user32!MsgWaitForMultipleObjects
020fff80 70bebfe5 020fffa8 020fffac 020fffa4 0000ea60 SHLWAPI!Ordinal60
020fffb0 70bebf5f 0012db48 77ed4f05 00000000 0012dbc8 SHLWAPI!PathIsRootW
020fffec 00000000 00000000 00000000 00000000 00000000 SHLWAPI!PathIsRootW
00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
线程标识 0xc1 的状态转储
eax=00158f34 ebx=00000000 ecx=00158438 edx=00000000 esi=00000104 edi=021fff8c
eip=77f582db esp=021fff70 ebp=021fff94 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000286
功能:NtWaitForSingleObject
77f582d0 b8c5000000 mov eax,0xc5
77f582d5 8d542404 lea edx,[esp+0x4] ss:0314e977=????????
77f582d9 cd2e int 2e
77f582db c20c00 ret 0xc
77f582de 8bc0 mov eax,eax
*----> 堆栈的反向追踪 <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
021fff94 77ed4f5e 00000104 00007530 00000000 7020ebb0 ntdll!NtWaitForSingleObject
021fffec 00000000 00000000 00000000 00000000 00000000 kernel32!WaitForSingleObject
00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
线程标识 0xc2 的状态转储
eax=000000c0 ebx=00000000 ecx=77f7504c edx=00000000 esi=00000000 edi=0000017c
eip=77f582db esp=022fff44 ebp=022fff98 iopl=0 nv up ei ng nz ac po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000297
功能:NtWaitForSingleObject
77f582d0 b8c5000000 mov eax,0xc5
77f582d5 8d542404 lea edx,[esp+0x4] ss:0324e94b=????????
77f582d9 cd2e int 2e
77f582db c20c00 ret 0xc
77f582de 8bc0 mov eax,eax
*----> 堆栈的反向追踪 <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
022fff98 775f1e92 0000017c ffffffff 00000003 00000004 ntdll!NtWaitForSingleObject
022fffec 00000000 775f1e66 00000000 00000000 000000b0 msafd!<nosymbols>
00000000 00000000 00000000 00000000 00000000 00000000 !<nosymbols>
*----> 原始堆栈转储 <----*
022fff44 fa 89 5f 77 7c 01 00 00 - 01 00 00 00 70 ff 2f 02 .._w|.......p./.
022fff54 48 b0 5f 77 18 ab 15 00 - 00 00 00 00 50 46 92 db H._w........PF..
022fff64 26 6a c4 01 ff ff ff ff - ff ff ff 7f ff ff ff ff &j..............
022fff74 ff ff ff 7f 18 ab 15 00 - 48 b0 5f 77 18 ab 15 00 ........H._w....
022fff84 00 00 00 00 c4 29 5f 77 - b8 01 00 00 05 00 00 00 .....)_w........
022fff94 ec ff 2f 00 ec ff 2f 02 - 92 1e 5f 77 7c 01 00 00 ../.../..._w|...
022fffa4 ff ff ff ff 03 00 00 00 - 04 00 00 00 00 f0 fd 7f ................
022fffb4 8c fa 0f 02 00 00 00 00 - 05 4f ed 77 00 00 00 00 .........O.w....
022fffc4 00 f0 fd 7f 8c fa 0f 02 - 00 00 00 00 8c fa 0f 02 ................
022fffd4 c4 ff 2f 02 8a 64 f1 77 - ff ff ff ff 10 c7 f0 77 ../..d.w.......w
022fffe4 48 e2 f0 77 00 00 00 00 - 00 00 00 00 00 00 00 00 H..w............
022ffff4 66 1e 5f 77 00 00 00 00 - 00 00 00 00 b0 00 00 00 f._w............
02300004 00 01 00 00 ff ee ff ee - 02 10 00 00 00 00 00 00 ................
02300014 00 fe 00 00 00 00 10 00 - 00 20 00 00 00 02 00 00 ......... ......
02300024 00 20 00 00 73 00 00 00 - ff ef fd 7f 0e 00 48 05 . ..s.........H.
02300034 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
02300044 d8 04 30 02 0f 00 00 00 - f8 ff ff ff 50 00 30 02 ..0.........P.0.
02300054 50 00 30 02 80 05 30 02 - 00 00 00 00 00 00 00 00 P.0...0.........
02300064 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
02300074 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
线程标识 0x87 的状态转储
eax=77de6dd5 ebx=00000000 ecx=0012e3a0 edx=00000000 esi=0014a4b8 edi=0015a4c0
eip=77f57fa7 esp=02aefdf0 ebp=02aeff90 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
功能:ZwReplyWaitReceivePort
77f57f9c b890000000 mov eax,0x90
77f57fa1 8d542404 lea edx,[esp+0x4] ss:03a3e7f7=????????
77f57fa5 cd2e int 2e
77f57fa7 c21000 ret 0x10
77f57faa 8bc0 mov eax,eax
*----> 堆栈的反向追踪 <---*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
02aeff90 77de5758 77de6d48 0015a4c0 02aeffec 00130000 ntdll!ZwReplyWaitReceivePort
00003a98 00000000 00000000 00000000 00000000 00000000 rpcrt4!RpcBindingFree
*----> 原始堆栈转储 <----*
02aefdf0 da 58 de 77 04 02 00 00 - 6c ff ae 02 00 00 00 00 .X.w....l.......
02aefe00 08 4a 16 00 a4 e0 14 00 - 90 96 16 00 60 8c 15 00 .J..........`...
02aefe10 13 c7 b3 69 d8 e9 c0 69 - 7c 36 b7 69 04 00 00 00 ...i...i|6.i....
02aefe20 7b 27 b4 69 00 00 00 00 - 30 00 00 00 8c 00 00 00 {'.i....0.......
02aefe30 8c 00 00 00 58 fe ae 02 - 83 14 28 70 f8 91 15 00 ....X.....(p....
02aefe40 00 f0 fd 7f c8 3b 5f 77 - 00 00 00 00 00 00 00 00 .....;_w........
02aefe50 01 00 00 00 79 2d f1 5c - 00 00 f0 5c 02 00 00 00 ....y-.\...\....
02aefe60 01 00 00 00 f8 db f1 5c - 00 00 f0 5c 01 00 00 00 .......\...\....
02aefe70 01 00 00 00 00 00 00 00 - 02 00 00 00 67 b0 0b 76 ............g..v
02aefe80 00 00 08 76 02 00 00 00 - 00 00 00 00 88 1b 16 00 ...v............
02aefe90 00 f0 fd 7f 17 b0 0b 76 - 80 1b 16 00 65 3e f5 77 .......v....e>.w
02aefea0 00 00 08 76 01 00 00 00 - 00 00 00 00 1c ff ae 02 ...v............
02aefeb0 00 00 00 00 92 12 f5 77 - 60 65 f9 77 98 12 f5 77 .......w`e.w...w
02aefec0 30 ff ae 02 80 05 13 00 - 60 8c 15 00 00 00 00 00 0.......`.......
02aefed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
02aefee0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
02aefef0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
02aeff00 00 00 00 00 c0 fe ae 02 - 00 00 00 00 ff ff ff ff ................
02aeff10 14 34 f8 77 e8 e0 f8 77 - ff ff ff ff 00 00 00 00 .4.w...w........
02aeff20 d7 63 f6 77 df 63 f6 77 - 30 ff ae 02 01 00 00 00 .c.w.c.w0.......
请大家看看,如何解决该问题!
谢谢诸位!!! |
|