I have a problem where BE ends all backup jobs with Dr.Watson errors. There
are no events in Event Viewer and nothing in the reports. I have tried to
reinstall the product, no success and continually have downloaded the
patches. I am pasting the last Dr.Waston log area. I appreciate any help
anyone may provide. Take care.

Lyle Brummer

Application exception occurred:
App: exe\bengine.dbg (pid=1145)
When: 10/2/2000 @ 19:10:8.109
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: SBS
User Name: Administrator
Number of Processors: 2
Processor Type: x86 Family 6 Model 5 Stepping 2
Windows Version: 4.0
Current Build: 1381
Service Pack: 6
Current Type: Multiprocessor Free
Registered Organization: Programming Plus, Inc.
Registered Owner: Lyle Brummer

*----> Task List <----*
0 Idle.exe
2 System.exe
25 SMSS.exe
33 CSRSS.exe
39 WINLOGON.exe
45 SERVICES.exe
48 LSASS.exe
75 SPOOLSS.exe
78 RPCSS.exe
113 msdtc.exe
158 cisvc.exe
167 TCPSVCS.exe
173 LLSSRV.exe
180 MSPADMIN.exe
199 mssearch.exe
215 sqlservr.exe
282 PSTORES.exe
286 LOCATOR.exe
291 InstMon.exe
300 mstask.exe
302 RMonitor.exe
304 TAPISRV.exe
332 WINS.exe
336 WSPSRV.exe
354 faxsvc.exe
393 inetinfo.exe
399 MAILALRT.exe
407 MODEMSHR.exe
425 MAD.exe
435 RASMAN.exe
476 DSAMAIN.exe
493 RASSRV.exe
539 STORE.exe
543 EMSMTA.exe
684 EVENTS.exe
688 MSEXCIMC.exe
695 InstRTS.exe
689 RealScan.exe
722 InstWeb.exe
750 RealScan.exe
778 cidaemon.exe
988 ntrtscan.exe
994 tmlisten.exe
1129 ofcservice.exe
1174 pvlsvr.exe
934 nsvr.exe
1080 alertserver.exe
1212 beserver.exe
1145 bengine.exe
1264 benetns.exe
1273 benser.exe
1166 logon.scr.exe
1261 DRWTSN32.exe
0 _Total.exe

(00400000 - 0053c000) C:\WINNT.SBS\Symbols\exe\bengine.dbg
(77f60000 - 77fbe000) dll\ntdll.dbg
(776d0000 - 776d8000) dll\wsock32.dbg
(77f00000 - 77f5e000) dll\kernel32.dbg
(776b0000 - 776c4000) dll\ws2_32.dbg
(78000000 - 78040000)
(77e70000 - 77ec5000) dll\user32.dbg
(77ed0000 - 77efc000) dll\gdi32.dbg
(77dc0000 - 77dff000) dll\advapi32.dbg
(77e10000 - 77e67000) dll\rpcrt4.dbg
(776a0000 - 776a7000) dll\ws2help.dbg
(77670000 - 77685000) dll\mswsock.dbg
(77800000 - 7783a000) dll\netapi32.dbg
(77840000 - 77849000) dll\NetRap.dbg
(777e0000 - 777ed000) dll\samlib.dbg
(77b20000 - 77bd7000) dll\ole32.dbg
(02d00000 - 02d0d000) C:\WINNT.SBS\Symbols\dll\shuie.dbg
(02200000 - 02211000) C:\WINNT.SBS\Symbols\dll\bebsdu.dbg
(02b00000 - 02b29000) C:\WINNT.SBS\Symbols\dll\beclass.dbg
(77720000 - 77731000) dll\mpr.dbg
(780c0000 - 78121000)
(02100000 - 0210a000) C:\WINNT.SBS\Symbols\dll\bestdutl.dbg
(01600000 - 0160f000) C:\WINNT.SBS\Symbols\dll\bedscomn.dbg
(01100000 - 01108000) C:\WINNT.SBS\Symbols\dll\benetapi.dbg
(01500000 - 01505000) C:\WINNT.SBS\Symbols\dll\benetutl.dbg
(03700000 - 03711000) C:\WINNT.SBS\Symbols\dll\begdm.dbg
(02700000 - 0273d000) C:\WINNT.SBS\Symbols\dll\daoview.dbg
(65340000 - 653d2000) oleaut32.dbg
(5f800000 - 5f8f2000)
(77c00000 - 77c18000) drv\winspool.dbg
(77d80000 - 77db2000) dll\comdlg32.dbg
(77c40000 - 77d7c000) dll\shell32.dbg
(71630000 - 716b9000) COMCTL32.dbg
(01b00000 - 01b0b000) C:\WINNT.SBS\Symbols\dll\bedssms.dbg
(02300000 - 0230c000) C:\WINNT.SBS\Symbols\dll\besmdr.dbg
(02f00000 - 02f56000) C:\WINNT.SBS\Symbols\dll\BeCatDrv.dbg
(5f000000 - 5f011000)
(77bf0000 - 77bf7000) dll\rpcltc1.dbg
(01210000 - 0123f000) C:\WINNT.SBS\Symbols\dll\ipvlapi.dbg
(04470000 - 04470000)
(779d0000 - 779d0000)
(780a0000 - 780b2000)
(01700000 - 01715000) C:\WINNT.SBS\Symbols\dll\bedsnt.dbg
(03500000 - 03523000) C:\WINNT.SBS\Symbols\dll\intranw.dbg
(01900000 - 01928000) C:\WINNT.SBS\Symbols\dll\bedssql.dbg
(73320000 - 73363000) ntwdblib.DBG
(04000000 - 04134000) msjet35.DBG
(01a40000 - 01a4c000) C:\WINNT.SBS\Symbols\dll\bedsagnt.dbg
(01c00000 - 01c0e000) C:\WINNT.SBS\Symbols\dll\bedsxchg.dbg
(6fcf0000 - 6fcfa000) dll\edbbcli.dbg
(01f00000 - 01f24000) C:\WINNT.SBS\Symbols\dll\BEDSMBox.dbg
(6fa90000 - 6fb6b000) dll\mapi32.dbg
(01d00000 - 01d08000) C:\WINNT.SBS\Symbols\dll\bedspush.dbg
(08810000 - 08817000) C:\WINNT.SBS\Symbols\dll\bedssmsp.dbg
(08c30000 - 08c35000) C:\WINNT.SBS\Symbols\dll\benettcp.dbg
(08c40000 - 08ca0000) vbar332.DBG
(77660000 - 7766f000) dll\msafd.dbg
(77690000 - 77699000) dll\wshtcpip.dbg
(04220000 - 04229000) msjter35.DBG
(04230000 - 04252000) msjint35.DBG
(77e00000 - 77e06000) dll\rpclts1.dbg
(777f0000 - 777fc000) dll\ntlanman.dbg
(77890000 - 778a5000) dll\netui0.dbg
(77850000 - 7788a000) dll\netui1.dbg
(7f230000 - 7f23d000) dll\clusapi.dbg
(74ff0000 - 74ffe000) dll\rnr20.dbg
(03920000 - 03933000) C:\WINNT.SBS\Symbols\dll\beerrors.dbg
(74fc0000 - 74fcf000) dll\rpcltccm.dbg
(626f0000 - 62714000) dll\EMSABP32.dbg
(62730000 - 627ba000) dll\emsmdb32.dbg
(77a90000 - 77a9b000) dll\version.dbg
(779c0000 - 779c8000) dll\lz32.dbg

State Dump for Thread Id 0x46b

eax=77de0065 ebx=0012fecc ecx=00000032 edx=00000000 esi=000000b8
edi=00000000
eip=77f67f07 esp=0012fdec ebp=0012fe54 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000246


function: ZwReadFile
77f67efc b886000000 mov eax,0x86
77f67f01 8d542404 lea edx,[esp+0x4]
ss:01d6e7f3=????????
77f67f05 cd2e int 2e
77f67f07 c22400 ret 0x24
77f67f0a 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0012fe54 77dd8a35 000000b8 00133698 0000021a 0012fe84 ntdll!ZwReadFile
0012fe88 77dd8481 000000b8 00133698 0000021a 0012fecc
advapi32!RegisterServiceCtrlHandlerA
0012feec 77dd841a 000000b8 00133698 0000021a 00000000
advapi32!StartServiceCtrlDispatcherW
0012ff30 00426e39 0012ff40 7ffdf000 00401f14 004264c0
advapi32!StartServiceCtrlDispatcherW
0012ffc0 77f1b9ea 00000000 00000000 7ffdf000 7ffdf000 bengine!main
0012fff0 00000000 004dd5f0 00000000 000000b0 00000100
kernel32!GetProcessPriorityBoost
00000000 00000000 00000000 00000000 00000000 00000000 bengine!

*----> Raw Stack Dump <----*
0012fdec a6 d2 f0 77 b8 00 00 00 - 00 00 00 00 00 00 00 00
....w............
0012fdfc 00 00 00 00 28 fe 12 00 - 98 36 13 00 1a 02 00 00
.....(....6......
0012fe0c 00 00 00 00 00 00 00 00 - 00 00 00 00 98 36 13 00
..............6..
0012fe1c cc fe 12 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0012fe2c 54 fe 12 00 9c fe 12 00 - 04 00 00 00 00 00 00 00
T...............
0012fe3c 14 fe 12 00 00 00 00 00 - dc fe 12 00 44 b9 f3 77
.............D..w
0012fe4c 40 ca f3 77 ff ff ff ff - 88 fe 12 00 35 8a dd 77
@..w........5..w
0012fe5c b8 00 00 00 98 36 13 00 - 1a 02 00 00 84 fe 12 00
......6..........
0012fe6c 00 00 00 00 00 00 00 00 - 18 9a 13 00 1a 02 00 00
.................
0012fe7c b8 00 00 00 9c fe 12 00 - 00 00 00 00 ec fe 12 00
.................
0012fe8c 81 84 dd 77 b8 00 00 00 - 98 36 13 00 1a 02 00 00
....w.....6......
0012fe9c cc fe 12 00 00 00 00 00 - 98 36 13 00 1a 02 00 00
..........6......
0012feac da 04 00 00 00 00 00 00 - 98 36 13 00 1a 02 00 00
..........6......
0012febc 9c 36 13 00 00 00 00 00 - 01 00 00 00 80 8f 13 00
..6..............
0012fecc 00 00 00 00 00 00 00 00 - a0 fe 12 00 04 00 00 00
.................
0012fedc 20 ff 12 00 c4 10 de 77 - d8 de de 77 ff ff ff ff
.......w...w....
0012feec 30 ff 12 00 1a 84 dd 77 - b8 00 00 00 98 36 13 00
0......w.....6..
0012fefc 1a 02 00 00 00 00 00 00 - 00 00 00 00 01 00 00 00
.................
0012ff0c 11 c6 f1 77 00 00 00 00 - b8 00 00 00 00 ff 12 00
....w............
0012ff1c 00 00 00 00 b0 ff 12 00 - c4 10 de 77 c8 de de 77
............w...w

State Dump for Thread Id 0x4da

eax=000000e1 ebx=00000000 ecx=00513090 edx=00000000 esi=0000003c
edi=00dbfbac
eip=77f682db esp=00dbfb90 ebp=00dbfbb4 iopl=0 nv up ei pl nz na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000206


function: NtWaitForSingleObject
77f682d0 b8c5000000 mov eax,0xc5
77f682d5 8d542404 lea edx,[esp+0x4]
ss:029fe597=????????
77f682d9 cd2e int 2e
77f682db c20c00 ret 0xc
77f682de 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00dbfbb4 77f04f37 0000003c 0000ea60 00000000 00426913
ntdll!NtWaitForSingleObject
021025c0 74c08502 24548b0f 244c8d04 ff525108 08c483d0
kernel32!WaitForSingleObject

*----> Raw Stack Dump <----*
00dbfb90 a0 cc f1 77 3c 00 00 00 - 00 00 00 00 ac fb db 00
....w<...........
00dbfba0 28 4f f0 77 01 00 00 00 - 00 00 00 00 00 ba 3c dc
(O.w..........<.
00dbfbb0 ff ff ff ff c0 25 10 02 - 37 4f f0 77 3c 00 00 00
......%..7O.w<...
00dbfbc0 60 ea 00 00 00 00 00 00 - 13 69 42 00 3c 00 00 00
`........iB.<...
00dbfbd0 60 ea 00 00 ff ff ff ff - 18 9a 13 00 ec ff db 00
`...............
00dbfbe0 18 9a 13 00 00 00 00 00 - c0 17 30 00 10 15 30 00
...........0...0.
00dbfbf0 30 18 30 00 00 00 00 00 - 00 00 00 00 00 00 00 00
0.0.............
00dbfc00 07 00 00 00 f0 00 30 00 - 03 00 00 00 00 00 00 00
.......0.........
00dbfc10 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00dbfc20 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00dbfc30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00dbfc40 00 00 00 00 00 00 00 00 - 00 00 00 00 6f 00 00 00
.............o...
00dbfc50 37 00 2e 00 33 00 00 00 - 00 00 00 00 00 00 00 00
7...3...........
00dbfc60 00 00 00 00 32 00 35 00 - 37 00 35 00 00 00 00 00
.....2.5.7.5.....
00dbfc70 00 00 00 00 00 00 00 00 - 3b b4 f1 23 01 00 00 00
.........;..#....
00dbfc80 01 00 01 00 00 00 00 00 - 00 00 00 00 42 00 61 00
.............B.a.
00dbfc90 63 00 6b 00 75 00 70 00 - 20 00 45 00 78 00 65 00 c.k.u.p.
..E.x.e.
00dbfca0 63 00 20 00 53 00 65 00 - 72 00 76 00 65 00 72 00 c.
..S.e.r.v.e.r.
00dbfcb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
00dbfcc0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................

State Dump for Thread Id 0x4db

eax=0000009c ebx=003000f0 ecx=00000002 edx=00000000 esi=00000000
edi=00000000
eip=77f67b57 esp=00ebff64 ebp=00ebff98 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000246


function: NtNotifyChangeKey
77f67b4c b84b000000 mov eax,0x4b
77f67b51 8d542404 lea edx,[esp+0x4]
ss:02afe96b=????????
77f67b55 cd2e int 2e
77f67b57 c22800 ret 0x28
77f67b5a 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00ebff98 02b11032 0000009c 00000001 00000004 00000000
ntdll!NtNotifyChangeKey
00ebffb8 77f04ede 003000f0 00000000 00000000 003000f0
beclass!SGMonClient::Thread (FPO: [1,0,2])
00ebffec 00000000 02b10ff0 003000f0 00000000 00000007 kernel32!lstrcmpiW
00000000 00000000 00000000 00000000 00000000 00000000 bengine!

*----> Raw Stack Dump <----*
00ebff64 49 af dd 77 9c 00 00 00 - 00 00 00 00 00 00 00 00
I..w............
00ebff74 00 00 00 00 b0 a0 df 77 - 04 00 00 00 01 00 00 00
........w........
00ebff84 00 00 00 00 00 00 00 00 - 00 00 00 00 f0 00 30 00
...............0.
00ebff94 df ae dd 77 ec ff eb 00 - 32 10 b1 02 9c 00 00 00
....w....2.......
00ebffa4 01 00 00 00 04 00 00 00 - 00 00 00 00 00 00 00 00
.................
00ebffb4 00 00 00 00 00 00 00 00 - de 4e f0 77 f0 00 30 00
..........N.w..0.
00ebffc4 00 00 00 00 00 00 00 00 - f0 00 30 00 00 00 00 00
...........0.....
00ebffd4 c4 ff eb 00 00 00 00 00 - ff ff ff ff 44 b9 f3 77
.............D..w
00ebffe4 38 d2 f3 77 00 00 00 00 - 00 00 00 00 00 00 00 00
8..w............
00ebfff4 f0 0f b1 02 f0 00 30 00 - 00 00 00 00 07 00 00 00
.......0.........
00ec0004 01 01 00 00 ee ff ee ff - 00 00 00 00 00 00 13 00
.................
00ec0014 00 f0 0f 00 00 00 ec 00 - 00 01 00 00 38 00 ec 00
.............8...
00ec0024 00 00 fc 00 ff 00 00 00 - 01 00 00 00 f8 04 13 00
.................
00ec0034 00 00 00 00 4a 00 07 00 - 01 01 09 00 00 00 00 00
.....J...........
00ec0044 49 f2 db 96 e1 92 d4 11 - 86 80 00 90 27 62 b6 e6
I...........'b..
00ec0054 00 42 00 00 00 00 00 00 - 07 02 00 00 a6 a7 89 a5
..B..............
00ec0064 a5 a5 a5 a5 5c a4 50 a4 - a5 a5 73 a7 a5 a5 e9 ff
.....\.P...s.....
00ec0074 e3 d0 ab ab 0a ae a6 a5 - af a5 d7 c6 d5 c2 94 97
.................
00ec0084 90 47 97 a6 e6 d1 c0 dd - a0 e4 a4 a6 a4 52 5a af
..G...........RZ.
00ec0094 25 a7 01 a6 41 a2 b6 a7 - 25 aa 56 a5 f5 a1 f3 9a
%...A...%.V.....

State Dump for Thread Id 0x4e0

eax=7800265f ebx=010bff10 ecx=00301670 edx=00000000 esi=7ffdf000
edi=00000000
eip=77f682cb esp=010bfeec ebp=010bff40 iopl=0 nv up ei pl nz ac pe
cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000213


function: NtWaitForMultipleObjects
77f682c0 b8c4000000 mov eax,0xc4
77f682c5 8d542404 lea edx,[esp+0x4]
ss:02cfe8f3=????????
77f682c9 cd2e int 2e
77f682cb c21400 ret 0x14
77f682ce 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
010bff40 77f1cd76 00000002 010bff80 00000000 ffffffff
ntdll!NtWaitForMultipleObjects
010bff5c 0042aaa3 00000002 010bff80 00000000 ffffffff
kernel32!WaitForMultipleObjects
010bff84 7800265a 00301830 00000000 00140000 00301670
bengine!std::basic_string_ex short>,std::allocator >::assign [omap] (FPO: [EBP
0x00301670] [3,0,4])
00301670 ffffffff 00000000 00000000 00000000 00000001 !beginthreadex
000004e0 00000000 00000000 00000000 00000000 00000000 rpcrt4!

*----> Raw Stack Dump <----*
010bfeec 6b ce f1 77 02 00 00 00 - 10 ff 0b 01 01 00 00 00
k..w............
010bfefc 00 00 00 00 00 00 00 00 - ba 2e f0 77 60 cd f1 77
............w`..w
010bff0c 30 18 30 00 c4 00 00 00 - ec 00 00 00 ff ff ff ff
0.0.............
010bff1c 00 00 00 00 d3 63 f7 77 - db 63 f7 77 07 c8 f1 77
......c.w.c.w...w
010bff2c 5c ff 0b 01 00 00 10 00 - 44 ff 0b 01 00 00 00 00
\.......D.......
010bff3c 01 00 00 00 5c ff 0b 01 - 76 cd f1 77 02 00 00 00
.....\...v..w....
010bff4c 80 ff 0b 01 00 00 00 00 - ff ff ff ff 00 00 00 00
.................
010bff5c b8 ff 0b 01 a3 aa 42 00 - 02 00 00 00 80 ff 0b 01
.......B.........
010bff6c 00 00 00 00 ff ff ff ff - 00 00 00 00 70 16 30 00
.............p.0.
010bff7c 70 16 30 00 c4 00 00 00 - ec 00 00 00 5a 26 00 78
p.0.........Z&.x
010bff8c 30 18 30 00 00 00 00 00 - 00 00 14 00 70 16 30 00
0.0.........p.0.
010bff9c 50 df b8 fd 90 ff 0b 01 - 2c de b8 fd dc ff 0b 01
P.......,.......
010bffac 03 ef 00 78 c8 e2 02 78 - 00 00 00 00 ec ff 0b 01
....x...x........
010bffbc de 4e f0 77 70 16 30 00 - 00 00 00 00 00 00 14 00
..N.wp.0.........
010bffcc 70 16 30 00 00 00 14 00 - c4 ff 0b 01 fc f9 db 00
p.0.............
010bffdc ff ff ff ff 44 b9 f3 77 - 38 d2 f3 77 00 00 00 00
.....D..w8..w....
010bffec 00 00 00 00 00 00 00 00 - ff 25 00 78 70 16 30 00
..........%.xp.0.
010bfffc 00 00 00 00 b0 00 00 00 - 00 01 00 00 ff ee ff ee
.................
010c000c 02 10 00 00 00 00 00 00 - 00 fe 00 00 00 00 10 00
.................
010c001c 00 20 00 00 00 02 00 00 - 00 20 00 00 b3 01 00 00 . .......
.......

State Dump for Thread Id 0x4e1

eax=00000000 ebx=0120fe90 ecx=0120f530 edx=00000000 esi=7ffdf000
edi=00000000
eip=77f682cb esp=0120fe6c ebp=0120fec0 iopl=0 nv up ei pl nz ac pe
cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000213


function: NtWaitForMultipleObjects
77f682c0 b8c4000000 mov eax,0xc4
77f682c5 8d542404 lea edx,[esp+0x4]
ss:02e4e873=????????
77f682c9 cd2e int 2e
77f682cb c21400 ret 0x14
77f682ce 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0120fec0 77f1cd76 00000002 0120ff30 00000000 ffffffff
ntdll!NtWaitForMultipleObjects
0120fedc 02b0447a 00000002 0120ff30 00000000 ffffffff
kernel32!WaitForMultipleObjects
0120fef0 00429050 00000002 0120ff30 00000000 ffffffff
beclass!MultiThreadedCom::WaitForMultipleObjects (FPO: [4,0,0])
0120ff3c 02b17bc8 00000038 003015f0 003015f0 80a1e5a0
bengine!DeviceMonger::Run (FPO: [EBP 0x0120ff84] [0,10,4])
0120ff84 7800265a 00301830 00000038 00000020 003015f0
beclass!WorkerThread::ThreadFunction (FPO: Non-FPO [1,14,3])
0120ffb8 77f04ede 003015f0 00000038 00000020 003015f0 !beginthreadex
0120ffec 00000000 780025ff 003015f0 00000000 00905a4d kernel32!lstrcmpiW
00000000 00000000 00000000 00000000 00000000 00000000 bengine!

*----> Raw Stack Dump <----*
0120fe6c 6b ce f1 77 02 00 00 00 - 90 fe 20 01 01 00 00 00 k..w......
......
0120fe7c 00 00 00 00 00 00 00 00 - c0 25 10 02 30 18 30 00
..........%..0.0.
0120fe8c 00 00 00 00 d4 00 00 00 - cc 00 00 00 c0 25 10 02
..............%..
0120fe9c 30 18 30 00 00 00 00 00 - 02 00 12 00 95 97 42 00
0.0...........B.
0120feac 94 18 30 00 30 18 30 00 - 94 18 30 00 00 00 00 00
...0.0.0...0.....
0120febc 01 00 00 00 dc fe 20 01 - 76 cd f1 77 02 00 00 00 ......
..v..w....
0120fecc 30 ff 20 01 00 00 00 00 - ff ff ff ff 00 00 00 00 0.
..............
0120fedc ff ff ff ff 7a 44 b0 02 - 02 00 00 00 30 ff 20 01 ....zD......0.
..
0120feec 00 00 00 00 ff ff ff ff - 50 90 42 00 02 00 00 00
.........P.B.....
0120fefc 30 ff 20 01 00 00 00 00 - ff ff ff ff 84 ff 20 01 0. ...........
..
0120ff0c 30 18 30 00 f0 15 30 00 - 00 00 00 00 34 ff 20 00 0.0...0.....4.
..
0120ff1c 00 00 00 00 00 00 00 00 - 01 00 00 00 ff ff ff ff
.................
0120ff2c ac 18 30 00 d4 00 00 00 - cc 00 00 00 50 f8 02 1d
...0.........P...
0120ff3c 9f 2c c0 01 c8 7b b1 02 - 38 00 00 00 f0 15 30 00
..,...{..8.....0.
0120ff4c f0 15 30 00 a0 e5 a1 80 - 00 00 00 00 00 ea a1 80
...0.............
0120ff5c 00 00 00 00 80 d8 a1 80 - 00 00 00 00 00 00 00 00
.................
0120ff6c 00 00 00 00 80 ad a1 80 - 44 ff 20 01 a8 ff 20 01 ........D. ...
..
0120ff7c 7b a1 b1 02 03 00 00 00 - b8 ff 20 01 5a 26 00 78 {.........
..Z&.x
0120ff8c 30 18 30 00 38 00 00 00 - 20 00 00 00 f0 15 30 00 0.0.8...
......0.
0120ff9c 90 5a e0 85 90 ff 20 01 - 6c 59 e0 85 dc ff 20 01 .Z.... .lY....
..

State Dump for Thread Id 0x4e2

eax=00221000 ebx=0133fe04 ecx=01d320dc edx=00000000 esi=7ffdf000
edi=00000000
eip=77f682cb esp=0133fde0 ebp=0133fe34 iopl=0 nv up ei pl nz ac pe
cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000213


function: NtWaitForMultipleObjects
77f682c0 b8c4000000 mov eax,0xc4
77f682c5 8d542404 lea edx,[esp+0x4]
ss:02f7e7e7=????????
77f682c9 cd2e int 2e
77f682cb c21400 ret 0x14
77f682ce 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0133fe34 77e79de5 00000002 0133fe5c 00000000 ffffffff
ntdll!NtWaitForMultipleObjects
0133fe90 77e79e31 00000001 0133fef4 ffffffff 000000ff
user32!MsgWaitForMultipleObjectsEx
0133feac 02b04562 00000001 0133fef4 00000000 ffffffff
user32!MsgWaitForMultipleObjects
0133fed8 02b04523 00000001 0133fef4 00000000 ffffffff
beclass!SingleThreadedCom::WaitForMultipleObjects (FPO: [EBP 0x00301400]
[4,1,4])
0133feec 02b17d88 00000130 ffffffff 00301400 02b17c56
beclass!SingleThreadedCom::WaitForSingleObject (FPO: [2,0,0])
0133fefc 02b17c56 ffffffff 00301400 003013f0 00000000
beclass!WorkerThread::WaitForCall (FPO: [1,0,1])
00301400 00000001 00000001 00000134 000004e2 003013f0
beclass!WorkerThread::Run (FPO: Non-FPO [0,11,3])

State Dump for Thread Id 0x4e3

eax=016b0000 ebx=0143fd8c ecx=0143fd8c edx=00000000 esi=7ffdf000
edi=0143fdac
eip=77f682cb esp=0143fd68 ebp=0143fdbc iopl=0 nv up ei pl nz ac pe
cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000213


function: NtWaitForMultipleObjects
77f682c0 b8c4000000 mov eax,0xc4
77f682c5 8d542404 lea edx,[esp+0x4]
ss:0307e76f=08636800
77f682c9 cd2e int 2e
77f682cb c21400 ret 0x14
77f682ce 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0143fdbc 77f1cd76 00000002 00301228 00000000 0000ea60
ntdll!NtWaitForMultipleObjects
0143fdd8 02b0447a 00000002 00301228 00000000 0000ea60
kernel32!WaitForMultipleObjects
0143fdec 004be3ec 00000002 00301228 00000000 0000ea60
beclass!MultiThreadedCom::WaitForMultipleObjects (FPO: [4,0,0])
0143fe30 77f028aa 00130000 00040008 00000018 00133ad8
bengine!CatMediaIterator::GetFirstMedia (FPO: [1,4,2])
0143ff3c 02b17bc8 00000000 00301140 00301140 00a9dfb4 kernel32!LocalAlloc
0143ff84 7800265a 003011e0 00000000 00000000 00301140
beclass!WorkerThread::ThreadFunction (FPO: Non-FPO [1,14,3])
0143ffb8 77f04ede 00301140 00000000 00000000 00301140 !beginthreadex
0143ffec 00000000 780025ff 00301140 00000000 00000000 kernel32!lstrcmpiW
00000000 00000000 00000000 00000000 00000000 00000000 bengine!

*----> Raw Stack Dump <----*
0143fd68 6b ce f1 77 02 00 00 00 - 8c fd 43 01 01 00 00 00
k..w......C.....
0143fd78 00 00 00 00 ac fd 43 01 - e0 11 30 00 01 00 00 00
.......C...0.....
0143fd88 00 00 00 00 04 01 00 00 - 0c 01 00 00 c8 1d 2f 00
.............../.
0143fd98 ff ff ff ff 9b 94 4c 00 - f4 fd 43 01 03 ef 00 78
.......L...C....x
0143fda8 60 e2 02 78 00 ba 3c dc - ff ff ff ff 00 00 00 00
`..x..<.........
0143fdb8 01 00 00 00 d8 fd 43 01 - 76 cd f1 77 02 00 00 00
.......C.v..w....
0143fdc8 28 12 30 00 00 00 00 00 - 60 ea 00 00 00 00 00 00
(.0.....`.......
0143fdd8 3c ff 43 01 7a 44 b0 02 - 02 00 00 00 28 12 30 00
<.C.zD......(.0.
0143fde8 00 00 00 00 60 ea 00 00 - ec e3 4b 00 02 00 00 00
.....`.....K.....
0143fdf8 28 12 30 00 00 00 00 00 - 60 ea 00 00 e0 11 30 00
(.0.....`.....0.
0143fe08 40 11 30 00 00 00 00 00 - e0 11 30 00 44 15 30 00
@.0.......0.D.0.
0143fe18 44 15 30 00 44 15 30 00 - 01 00 00 00 00 00 00 00
D.0.D.0.........
0143fe28 e5 00 00 00 00 00 00 00 - 7c fe 43 01 aa 28 f0 77
.........|.C..(.w
0143fe38 00 00 13 00 08 00 04 00 - 18 00 00 00 d8 3a 13 00
..............:..
0143fe48 00 00 00 00 db 78 72 77 - 00 00 00 00 00 00 00 00
......xrw........
0143fe58 00 00 00 00 00 00 00 00 - 00 00 00 00 44 fe 43 01
.............D.C.
0143fe68 01 00 00 00 68 01 00 00 - 44 b9 f3 77 01 00 00 00
.....h...D..w....
0143fe78 01 00 00 00 4d 40 f2 02 - 00 00 f0 02 44 15 30 00
.....M@......D.0.
0143fe88 00 00 00 00 c8 49 13 00 - 00 f0 fd 7f fd 3f f2 02
......I.......?..
0143fe98 c0 49 13 00 65 3e f6 77 - 00 00 21 01 02 00 00 00
..I..e>.w..!.....

State Dump for Thread Id 0x4e4

eax=00000002 ebx=00000000 ecx=01d2d748 edx=00000000 esi=00000124
edi=0860ff08
eip=77f682db esp=0860feec ebp=0860ff10 iopl=0 nv up ei pl nz na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000206


function: NtWaitForSingleObject
77f682d0 b8c5000000 mov eax,0xc5
77f682d5 8d542404 lea edx,[esp+0x4]
ss:0a24e8f3=????????
77f682d9 cd2e int 2e
77f682db c20c00 ret 0xc
77f682de 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0860ff10 77f04f37 00000124 000003e8 00000000 04001a05
ntdll!NtWaitForSingleObject
000004e4 00000000 00000000 00000000 00000000 00000000
kernel32!WaitForSingleObject

State Dump for Thread Id 0x4e5

eax=01d5cd01 ebx=00000000 ecx=0870ffdc edx=00000000 esi=00000124
edi=00000000
eip=77f682db esp=0870feec ebp=0870ff10 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000246


function: NtWaitForSingleObject
77f682d0 b8c5000000 mov eax,0xc5
77f682d5 8d542404 lea edx,[esp+0x4]
ss:0a34e8f3=????????
77f682d9 cd2e int 2e
77f682db c20c00 ret 0xc
77f682de 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0870ff10 77f04f37 00000124 ffffffff 00000000 04001a05
ntdll!NtWaitForSingleObject
000004e5 00000000 00000000 00000000 00000000 00000000
kernel32!WaitForSingleObject

State Dump for Thread Id 0x4e6

eax=01d2c2c0 ebx=00000000 ecx=040fa598 edx=00000000 esi=00000124
edi=00000000
eip=77f682db esp=0880feec ebp=0880ff10 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000246


function: NtWaitForSingleObject
77f682d0 b8c5000000 mov eax,0xc5
77f682d5 8d542404 lea edx,[esp+0x4]
ss:0a44e8f3=????????
77f682d9 cd2e int 2e
77f682db c20c00 ret 0xc
77f682de 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0880ff10 77f04f37 00000124 ffffffff 00000000 04001a05
ntdll!NtWaitForSingleObject
000004e6 00000000 00000000 00000000 00000000 00000000
kernel32!WaitForSingleObject

*----> Raw Stack Dump <----*
0880feec a0 cc f1 77 24 01 00 00 - 00 00 00 00 00 00 00 00
....w$...........
0880fefc 04 00 00 00 28 42 a3 01 - 01 00 00 00 d4 2c f9 77
.....(B.......,.w
0880ff0c 70 d8 f9 77 e6 04 00 00 - 37 4f f0 77 24 01 00 00
p..w....7O.w$...
0880ff1c ff ff ff ff 00 00 00 00 - 05 1a 00 04 24 01 00 00
.............$...
0880ff2c ff ff ff ff 07 1c 00 04 - ff ff ff ff 7c ff 80 08
.............|...
0880ff3c 70 d6 d2 01 e0 37 d3 01 - 98 a5 0f 04 08 60 7e 26
p....7.......`~&
0880ff4c 00 00 00 00 e6 04 00 00 - ff ff ff ff 3c 46 01 04
............. 0880ff5c 7c ff 80 08 ec ff 80 08 - 00 00 a3 01 d0 ce d2 01
|...............
0880ff6c 98 a5 0f 04 00 00 00 00 - 00 00 00 00 74 01 00 00
.............t...
0880ff7c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0880ff8c ff ff ff ff 46 02 00 00 - 89 55 14 80 08 0e b5 f1
.....F....U......
0880ff9c 90 da b8 fd 00 d9 b8 fd - 6c d9 b8 fd 00 00 00 00
.........l.......
0880ffac e4 d9 b8 fd 00 d9 b8 fd - 60 da b8 fd 4d 90 f6 77
.........`...M..w
0880ffbc de 4e f0 77 98 a5 0f 04 - 00 00 a3 01 d0 ce d2 01
..N.w............
0880ffcc 98 a5 0f 04 d0 ce d2 01 - c4 ff 80 08 3c f8 33 01
.............<.3.
0880ffdc ff ff ff ff 44 b9 f3 77 - 38 d2 f3 77 00 00 00 00
.....D..w8..w....
0880ffec 00 00 00 00 00 00 00 00 - 1f 45 01 04 98 a5 0f 04
..........E......
0880fffc 00 00 00 00 4d 5a 90 00 - 03 00 00 00 04 00 00 00
.....MZ..........
0881000c ff ff 00 00 b8 00 00 00 - 00 00 00 00 40 00 00 00
.............@...
0881001c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................

State Dump for Thread Id 0x4e8

eax=00000000 ebx=08fafe74 ecx=08db2338 edx=00000000 esi=7ffdf000
edi=00000000
eip=77f682cb esp=08fafe50 ebp=08fafea4 iopl=0 nv up ei pl nz ac pe
cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000213


function: NtWaitForMultipleObjects
77f682c0 b8c4000000 mov eax,0xc4
77f682c5 8d542404 lea edx,[esp+0x4]
ss:0abee857=????????
77f682c9 cd2e int 2e
77f682cb c21400 ret 0x14
77f682ce 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
08fafea4 77e79de5 00000003 08fafecc 00000000 ffffffff
ntdll!NtWaitForMultipleObjects
08faff00 77e79e31 00000002 08faff78 ffffffff 000000ff
user32!MsgWaitForMultipleObjectsEx
08faff1c 6fae5c38 00000002 08faff78 00000000 ffffffff
user32!MsgWaitForMultipleObjects
77f67540 8b000000 83042454 7500147a 42fff04f 8b197504
mapi32!GetAttribIMsgOnIStg

State Dump for Thread Id 0x4e9

eax=00000000 ebx=0016d640 ecx=00000000 edx=00000000 esi=0015a2c2
edi=00ec0d80
eip=77f67b97 esp=0439fc38 ebp=0439fcb4 iopl=0 ov up ei pl nz na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000a06


function: NtOpenFile
77f67b8c b84f000000 mov eax,0x4f
77f67b91 8d542404 lea edx,[esp+0x4]
ss:05fde63f=????????
77f67b95 cd2e int 2e
77f67b97 c21800 ret 0x18
77f67b9a 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0439fcb4 77e1a23b 00ec0d80 001dcd08 0015a2a8 001dc0f0 ntdll!NtOpenFile
0439fd04 77e1bc08 77bf4030 001dcd08 0015a2a8 001dc0f0
rpcrt4!I_RpcSetWMsgEndpoint
0439fd4c 77e1afd3 00143c84 00143c98 00000001 0439fdd8
rpcrt4!I_RpcTransServerNewConnection
0439fd8c 77e1be76 00410218 0439fdd8 00000005 00000000
rpcrt4!I_RpcTransServerUnprotectThread
0439fdd8 0439ff10 77e11101 0439fe14 0439fe40 77e1228f
rpcrt4!I_RpcTransServerNewConnection

State Dump for Thread Id 0x4ea

eax=0202f760 ebx=00159040 ecx=00000520 edx=00000000 esi=00159030
edi=000003e8
eip=77f682cb esp=0202feec ebp=0202ff2c iopl=0 nv up ei pl nz na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000206


function: NtWaitForMultipleObjects
77f682c0 b8c4000000 mov eax,0xc4
77f682c5 8d542404 lea edx,[esp+0x4]
ss:03c6e8f3=????????
77f682c9 cd2e int 2e
77f682cb c21400 ret 0x14
77f682ce 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0202ff2c 77e1b0dc 00159030 0202ff58 0202ff88 0202ff84
ntdll!NtWaitForMultipleObjects
0202ff60 77e1cb96 0202ff8c 0202ff88 0202ff84 00158da8
rpcrt4!I_RpcTransServerUnprotectThread
0202ff90 77e1aa95 77e16125 00158f50 0202ffec 00159760
rpcrt4!I_RpcTransServerProtectThread
00003a98 00000000 00000000 00000000 00000000 00000000
rpcrt4!I_RpcTransServerReallocBuffer

State Dump for Thread Id 0x4eb

eax=77e160a4 ebx=00000000 ecx=00159760 edx=00000000 esi=001597e8
edi=00158d80
eip=77f67fa7 esp=0240fdf0 ebp=0240ff90 iopl=0 nv up ei pl nz na pe
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000202


function: ZwReplyWaitReceivePort
77f67f9c b890000000 mov eax,0x90
77f67fa1 8d542404 lea edx,[esp+0x4]
ss:0404e7f7=01ff2511
77f67fa5 cd2e int 2e
77f67fa7 c21000 ret 0x10
77f67faa 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0240ff90 77e15a1d 77e160f7 001597e8 0240ffec 00159760
ntdll!ZwReplyWaitReceivePort
00003a98 00000000 00000000 00000000 00000000 00000000 rpcrt4!NdrOleAllocate

State Dump for Thread Id 0x4ec

eax=77e160a4 ebx=00159c18 ecx=00158a50 edx=00000000 esi=00159c08
edi=000003e8
eip=77f682cb esp=0250feec ebp=0250ff2c iopl=0 nv up ei pl nz na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000206


function: NtWaitForMultipleObjects
77f682c0 b8c4000000 mov eax,0xc4
77f682c5 8d542404 lea edx,[esp+0x4]
ss:0414e8f3=????????
77f682c9 cd2e int 2e
77f682cb c21400 ret 0x14
77f682ce 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0250ff2c 77e1b0dc 00159c08 0250ff58 0250ff88 0250ff84
ntdll!NtWaitForMultipleObjects
0250ff60 77e1cb96 0250ff8c 0250ff88 0250ff84 00159c98
rpcrt4!I_RpcTransServerUnprotectThread
0250ff90 77e1aa95 77e160f7 00159b28 0250ffec 00158a50
rpcrt4!I_RpcTransServerProtectThread
00003a98 00000000 00000000 00000000 00000000 00000000
rpcrt4!I_RpcTransServerReallocBuffer

State Dump for Thread Id 0x4e7

eax=77e160a4 ebx=00000000 ecx=00157100 edx=00000000 esi=0015a310
edi=0015a5e0
eip=77f67fa7 esp=0293fdf0 ebp=0293ff90 iopl=0 nv up ei pl nz na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000206


function: ZwReplyWaitReceivePort
77f67f9c b890000000 mov eax,0x90
77f67fa1 8d542404 lea edx,[esp+0x4]
ss:0457e7f7=????????
77f67fa5 cd2e int 2e
77f67fa7 c21000 ret 0x10
77f67faa 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0293ff90 77e15a1d 77e160f7 0015a310 0293ffec 00157100
ntdll!ZwReplyWaitReceivePort
00003a98 00000000 00000000 00000000 00000000 00000000 rpcrt4!NdrOleAllocate

*----> Raw Stack Dump <----*
0293fdf0 9f 5b e1 77 20 02 00 00 - 6c ff 93 02 00 00 00 00 .[.w
....l.......
0293fe00 30 b8 13 00 e0 a5 15 00 - 74 96 13 00 7c 96 13 00
0.......t...|...
0293fe10 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0293fe20 00 00 00 00 20 00 00 00 - 21 01 00 00 00 00 00 00 ....
....!.......
0293fe30 7c fe 93 02 aa 28 f0 77 - 00 00 13 00 68 7a 15 00
|....(.w....hz..
0293fe40 00 f0 fd 7f c8 3b 66 77 - 00 00 00 00 db 78 72 77
......;fw.....xrw
0293fe50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0293fe60 00 00 00 00 44 fe 93 02 - 00 00 00 00 0c ff 93 02
.....D...........
0293fe70 44 b9 f3 77 01 00 00 00 - 01 00 00 00 fb 22 81 08
D..w........."..
0293fe80 3c fe 93 02 02 00 00 00 - 0c ff 93 02 60 98 66 77
<...........`.fw
0293fe90 e0 a3 66 77 ff ff ff ff - 60 7a 15 00 65 3e f6 77
...fw....`z..e>.w
0293fea0 00 00 66 77 02 00 00 00 - 00 00 00 00 1c ff 93 02
...fw............
0293feb0 00 00 00 00 92 12 f6 77 - 60 55 fa 77 98 12 f6 77
........w`U.w...w
0293fec0 30 ff 93 02 c0 67 f6 77 - 08 a6 15 00 00 00 00 00
0....g.w........
0293fed0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0293fee0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0293fef0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0293ff00 00 00 00 00 c0 fe 93 02 - 00 00 00 00 ff ff ff ff
.................
0293ff10 d4 2c f9 77 e8 d0 f9 77 - ff ff ff ff 00 00 00 00
..,.w...w........
0293ff20 d3 63 f7 77 db 63 f7 77 - 30 ff 93 02 01 00 00 00
..c.w.c.w0.......

State Dump for Thread Id 0x40c

eax=02f8d04c ebx=00000000 ecx=00313740 edx=00000000 esi=00159d00
edi=0015d678
eip=77f67fa7 esp=0335fdf0 ebp=0335ff90 iopl=0 nv up ei pl nz na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000206


function: ZwReplyWaitReceivePort
77f67f9c b890000000 mov eax,0x90
77f67fa1 8d542404 lea edx,[esp+0x4]
ss:04f9e7f7=????????
77f67fa5 cd2e int 2e
77f67fa7 c21000 ret 0x10
77f67faa 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0335ff90 77e15a1d 77e160f7 00159d00 0335ffec 77e110c1
ntdll!ZwReplyWaitReceivePort
00003a98 00000000 00000000 00000000 00000000 00000000 rpcrt4!NdrOleAllocate

State Dump for Thread Id 0x507

eax=77e160a4 ebx=0015a200 ecx=001dcc88 edx=00000000 esi=0015a1f0
edi=000003e8
eip=77f682cb esp=02c2feec ebp=02c2ff2c iopl=0 nv up ei pl nz na pe
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000202


function: NtWaitForMultipleObjects
77f682c0 b8c4000000 mov eax,0xc4
77f682c5 8d542404 lea edx,[esp+0x4]
ss:0486e8f3=????????
77f682c9 cd2e int 2e
77f682cb c21400 ret 0x14
77f682ce 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
02c2ff2c 77e1b0dc 0015a1f0 02c2ff58 02c2ff88 02c2ff84
ntdll!NtWaitForMultipleObjects
02c2ff60 77e1cb96 02c2ff8c 02c2ff88 02c2ff84 00158cc8
rpcrt4!I_RpcTransServerUnprotectThread
02c2ff90 77e1aa95 77e16125 0015a110 02c2ffec 77e110c1
rpcrt4!I_RpcTransServerProtectThread
00003a98 00000000 00000000 00000000 00000000 00000000
rpcrt4!I_RpcTransServerReallocBuffer

State Dump for Thread Id 0x526

eax=00000001 ebx=0013967c ecx=00000001 edx=00000000 esi=001e0d94
edi=02e0ff84
eip=77f682db esp=02e0ff6c ebp=02e0ff94 iopl=0 ov up ei pl nz ac pe
cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000a13


function: NtWaitForSingleObject
77f682d0 b8c5000000 mov eax,0xc5
77f682d5 8d542404 lea edx,[esp+0x4]
ss:04a4e973=????????
77f682d9 cd2e int 2e
77f682db c20c00 ret 0xc
77f682de 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
02e0ff94 77e1614a 001d4c00 02e0ffec 000001f9 0019d318
ntdll!NtWaitForSingleObject
001d4c00 00000000 00000000 00000000 00000000 00000000 rpcrt4!NdrOleAllocate

State Dump for Thread Id 0x520

eax=002f1f10 ebx=98ed8820 ecx=00000210 edx=0000000f esi=0033a6dc
edi=00000007
eip=7800d0b9 esp=0305e56c ebp=0305e588 iopl=0 nv up ei pl nz na pe
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000202


function: set_sbh_threshold
7800d09d 215cb844 and [eax+edi*4+0x44],ebx
ds:01c3ea0e=????????
7800d0a1 fe09 dec byte ptr [ecx]
ds:00000210=??
7800d0a3 7505 jnz set_sbh_threshold+0x1be (7800d0aa)
7800d0a5 8b4d08 mov ecx,[ebp+0x8]
ss:04c9cf8e=????????
7800d0a8 2119 and [ecx],ebx
ds:00000210=????????
7800d0aa 8b4dfc mov ecx,[ebp-0x4]
ss:04c9cf8e=????????
7800d0ad 8b5d0c mov ebx,[ebp+0xc]
ss:04c9cf8e=????????
7800d0b0 8b5308 mov edx,[ebx+0x8]
ds:9ab17226=????????
7800d0b3 8b5b04 mov ebx,[ebx+0x4]
ds:9ab17226=????????
7800d0b6 034df4 add ecx,[ebp-0xc]
ss:04c9cf8e=????????
FAULT ->7800d0b9 895a04 mov [edx+0x4],ebx
ds:01c3ea15=????????
7800d0bc 8b550c mov edx,[ebp+0xc]
ss:04c9cf8e=????????
7800d0bf 894dfc mov [ebp-0x4],ecx
ss:04c9cf8e=????????
7800d0c2 8b5a04 mov ebx,[edx+0x4]
ds:01c3ea15=????????
7800d0c5 8b5208 mov edx,[edx+0x8]
ds:01c3ea15=????????
7800d0c8 895308 mov [ebx+0x8],edx
ds:9ab17226=????????
7800d0cb 8bd1 mov edx,ecx
7800d0cd c1fa04 sar edx,0x4
7800d0d0 4a dec edx
7800d0d1 83fa3f cmp edx,0x3f
7800d0d4 7603 jbe set_sbh_threshold+0x1ed (7800d0d9)
7800d0d6 6a3f push 0x3f

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0305e588 7800cc1c 002f1dc8 0033a8ec 78001390 0033a6e0 !set_sbh_threshold
0305e5cc 0045c131 0033a6e0 00000001 00319bb0 0044517f !exception::what
0305e614 004e91d8 ffffffff 00444cde 02b08330 78001d17 bengine!InitDriveList
(FPO: [EBP 0x0033cc60] [1,1,4])
0033cca8 00440049 005c0052 00610044 00610074 0053005c
bengine!DataSourceSet:estroy

*----> Raw Stack Dump <----*
0305e56c 90 13 00 78 e0 a6 33 00 - 00 00 00 00 70 2e 2f 00
....x..3.....p./.
0305e57c 00 00 00 00 30 02 00 00 - 10 02 00 00 cc e5 05 03
.....0...........
0305e58c 1c cc 00 78 c8 1d 2f 00 - ec a8 33 00 90 13 00 78
....x../...3....x
0305e59c e0 a6 33 00 00 00 00 00 - 01 00 00 00 b0 9b 31 00
...3...........1.
0305e5ac 00 12 00 78 c8 1d 2f 00 - 63 00 00 00 b4 e3 05 03
....x../.c.......
0305e5bc 14 e6 05 03 03 ef 00 78 - 60 e2 02 78 00 00 00 00
........x`..x....
0305e5cc b0 9b 31 00 31 c1 45 00 - e0 a6 33 00 01 00 00 00
...1.1.E...3.....
0305e5dc b0 9b 31 00 7f 51 44 00 - 01 00 00 00 b0 9b 31 00
...1..QD.......1.
0305e5ec b0 9b 31 00 60 cf 33 00 - 50 85 9e 01 1c 57 04 00
...1.`.3.P....W..
0305e5fc 48 e2 02 78 00 00 00 00 - 60 cc 33 00 00 03 00 00
H..x....`.3.....
0305e60c 00 00 00 00 e0 a6 33 00 - 30 e6 05 03 d8 91 4e 00
.......3.0.....N.
0305e61c ff ff ff ff de 4c 44 00 - 30 83 b0 02 17 1d 00 78
......LD.0......x
0305e62c 60 cc 33 00 e0 f2 05 03 - 9b 91 4e 00 ff ff ff ff
`.3.......N.....
0305e63c 9a 22 44 00 d4 ec 05 03 - dc ee 05 03 00 00 00 00
.."D.............
0305e64c b0 4d 9b 01 f0 5a 9b 01 - 48 60 9b 01 00 00 00 00
..M...Z..H`......
0305e65c 50 2d 31 00 04 01 00 00 - 0d 00 00 00 a6 94 dd 77
P-1............w
0305e66c 00 00 00 00 70 a3 33 00 - 59 4f 70 01 00 00 00 00
.....p.3.YOp.....
0305e67c 02 00 00 00 00 00 00 00 - 00 00 00 00 01 00 00 00
.................
0305e68c 54 00 00 00 e8 03 00 00 - 02 00 00 00 25 00 53 00
T...........%.S.
0305e69c 79 00 73 00 74 00 65 00 - 6d 00 52 00 6f 00 6f 00
y.s.t.e.m.R.o.o.

State Dump for Thread Id 0x511

eax=00000000 ebx=00000000 ecx=0260ff70 edx=00000000 esi=000002b0
edi=00000000
eip=77f682db esp=0260ff10 ebp=0260ff34 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000246


function: NtWaitForSingleObject
77f682d0 b8c5000000 mov eax,0xc5
77f682d5 8d542404 lea edx,[esp+0x4]
ss:0424e917=73006900
77f682d9 cd2e int 2e
77f682db c20c00 ret 0xc
77f682de 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0260ff34 77f04f37 000002b0 ffffffff 00000000 02b04450
ntdll!NtWaitForSingleObject
019b66c0 000002b0 00000244 00000280 019ba838 019b6708
kernel32!WaitForSingleObject

*----> Raw Stack Dump <----*
0260ff10 a0 cc f1 77 b0 02 00 00 - 00 00 00 00 00 00 00 00
....w............
0260ff20 00 00 00 00 70 af 31 00 - 00 00 00 00 3b 9d 47 00
.....p.1.....;.G.
0260ff30 84 a8 9b 01 c0 66 9b 01 - 37 4f f0 77 b0 02 00 00
......f..7O.w....
0260ff40 ff ff ff ff 00 00 00 00 - 50 44 b0 02 b0 02 00 00
.........PD......
0260ff50 ff ff ff ff 79 30 47 00 - b0 02 00 00 ff ff ff ff
.....y0G.........
0260ff60 04 00 00 00 a0 a5 31 00 - b8 ff 60 02 a0 a5 31 00
.......1...`...1.
0260ff70 f8 94 9b 01 88 ec 2f 00 - 00 82 31 00 70 af 31 00
......./...1.p.1.
0260ff80 20 a6 31 00 00 00 00 00 - 5a 26 00 78 00 60 00 00
..1.....Z&.x.`..
0260ff90 04 00 00 00 00 00 2f 00 - a0 a5 31 00 90 d9 3a fd
......./...1...:.
0260ffa0 90 ff 60 02 6c d8 3a fd - dc ff 60 02 03 ef 00 78
...`.l.:...`....x
0260ffb0 c8 e2 02 78 00 00 00 00 - ec ff 60 02 de 4e f0 77
....x......`..N.w
0260ffc0 a0 a5 31 00 04 00 00 00 - 00 00 2f 00 a0 a5 31 00
...1......./...1.
0260ffd0 00 00 2f 00 c4 ff 60 02 - 01 00 2f 00 ff ff ff ff
.../...`.../.....
0260ffe0 44 b9 f3 77 38 d2 f3 77 - 00 00 00 00 00 00 00 00
D..w8..w........
0260fff0 00 00 00 00 ff 25 00 78 - a0 a5 31 00 00 00 00 00
......%.x..1.....
02610000 45 53 45 54 00 00 00 00 - 55 00 0e 01 00 00 00 00
ESET....U.......
02610010 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
02610020 00 00 00 00 82 07 00 00 - 00 00 00 00 00 00 00 00
.................
02610030 00 00 d9 01 00 00 00 00 - 00 00 00 00 00 36 04 00
..............6..
02610040 00 00 00 00 e3 35 04 00 - 00 00 00 00 01 00 13 00
......5..........

State Dump for Thread Id 0x500

eax=0019e588 ebx=00000000 ecx=0019e578 edx=00000000 esi=000002cc
edi=00000000
eip=77f682db esp=0283feac ebp=0283fed0 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000246


function: NtWaitForSingleObject
77f682d0 b8c5000000 mov eax,0xc5
77f682d5 8d542404 lea edx,[esp+0x4]
ss:0447e8b3=4074c985
77f682d9 cd2e int 2e
77f682db c20c00 ret 0xc
77f682de 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0283fed0 77f04f37 000002cc ffffffff 00000000 02b04450
ntdll!NtWaitForSingleObject
0283ff3c 02b17bc8 0133f6c0 00319080 00319080 ed03fdb0
kernel32!WaitForSingleObject
0283ff84 7800265a 0031c830 0133f6c0 01d2d480 00319080
beclass!WorkerThread::ThreadFunction (FPO: Non-FPO [1,14,3])
0283ffb8 77f04ede 00319080 0133f6c0 01d2d480 00319080 !beginthreadex
0283ffec 00000000 00000000 00000000 00000000 00000000 kernel32!lstrcmpiW
00000000 00000000 00000000 00000000 00000000 00000000 bengine!

State Dump for Thread Id 0x50e

eax=6fad72d0 ebx=03eafec8 ecx=00163988 edx=00000000 esi=7ffdf000
edi=00000000
eip=77f682cb esp=03eafea4 ebp=03eafef8 iopl=0 nv up ei pl nz ac pe
cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000213


function: NtWaitForMultipleObjects
77f682c0 b8c4000000 mov eax,0xc4
77f682c5 8d542404 lea edx,[esp+0x4]
ss:05aee8ab=????????
77f682c9 cd2e int 2e
77f682cb c21400 ret 0x14
77f682ce 8bc0 mov eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
03eafef8 77e79de5 00000002 03eaff20 00000000 ffffffff
ntdll!NtWaitForMultipleObjects
03eaff54 77e79e31 00000001 08d71e14 ffffffff 000000ff
user32!MsgWaitForMultipleObjectsEx
03eaff70 6fad7336 00000001 08d71e14 00000000 ffffffff
user32!MsgWaitForMultipleObjects
77f67540 8b000000 83042454 7500147a 42fff04f 8b197504
mapi32!BMAPIResolveName

See next post.