1*9712c20fSFrederick MayleMDRawHeader 2*9712c20fSFrederick Mayle signature = 0x504d444d 3*9712c20fSFrederick Mayle version = 0x5128a793 4*9712c20fSFrederick Mayle stream_count = 9 5*9712c20fSFrederick Mayle stream_directory_rva = 0x20 6*9712c20fSFrederick Mayle checksum = 0x0 7*9712c20fSFrederick Mayle time_date_stamp = 0x45d35f73 2007-02-14 19:13:55 8*9712c20fSFrederick Mayle flags = 0x0 9*9712c20fSFrederick Mayle 10*9712c20fSFrederick MaylemDirectory[0] 11*9712c20fSFrederick MayleMDRawDirectory 12*9712c20fSFrederick Mayle stream_type = 0x3 (MD_THREAD_LIST_STREAM) 13*9712c20fSFrederick Mayle location.data_size = 100 14*9712c20fSFrederick Mayle location.rva = 0x184 15*9712c20fSFrederick Mayle 16*9712c20fSFrederick MaylemDirectory[1] 17*9712c20fSFrederick MayleMDRawDirectory 18*9712c20fSFrederick Mayle stream_type = 0x4 (MD_MODULE_LIST_STREAM) 19*9712c20fSFrederick Mayle location.data_size = 1408 20*9712c20fSFrederick Mayle location.rva = 0x1e8 21*9712c20fSFrederick Mayle 22*9712c20fSFrederick MaylemDirectory[2] 23*9712c20fSFrederick MayleMDRawDirectory 24*9712c20fSFrederick Mayle stream_type = 0x5 (MD_MEMORY_LIST_STREAM) 25*9712c20fSFrederick Mayle location.data_size = 52 26*9712c20fSFrederick Mayle location.rva = 0x1505 27*9712c20fSFrederick Mayle 28*9712c20fSFrederick MaylemDirectory[3] 29*9712c20fSFrederick MayleMDRawDirectory 30*9712c20fSFrederick Mayle stream_type = 0x6 (MD_EXCEPTION_STREAM) 31*9712c20fSFrederick Mayle location.data_size = 168 32*9712c20fSFrederick Mayle location.rva = 0xdc 33*9712c20fSFrederick Mayle 34*9712c20fSFrederick MaylemDirectory[4] 35*9712c20fSFrederick MayleMDRawDirectory 36*9712c20fSFrederick Mayle stream_type = 0x7 (MD_SYSTEM_INFO_STREAM) 37*9712c20fSFrederick Mayle location.data_size = 56 38*9712c20fSFrederick Mayle location.rva = 0x8c 39*9712c20fSFrederick Mayle 40*9712c20fSFrederick MaylemDirectory[5] 41*9712c20fSFrederick MayleMDRawDirectory 42*9712c20fSFrederick Mayle stream_type = 0xf (MD_MISC_INFO_STREAM) 43*9712c20fSFrederick Mayle location.data_size = 24 44*9712c20fSFrederick Mayle location.rva = 0xc4 45*9712c20fSFrederick Mayle 46*9712c20fSFrederick MaylemDirectory[6] 47*9712c20fSFrederick MayleMDRawDirectory 48*9712c20fSFrederick Mayle stream_type = 0x47670001 (MD_BREAKPAD_INFO_STREAM) 49*9712c20fSFrederick Mayle location.data_size = 12 50*9712c20fSFrederick Mayle location.rva = 0x14f9 51*9712c20fSFrederick Mayle 52*9712c20fSFrederick MaylemDirectory[7] 53*9712c20fSFrederick MayleMDRawDirectory 54*9712c20fSFrederick Mayle stream_type = 0x0 (MD_UNUSED_STREAM) 55*9712c20fSFrederick Mayle location.data_size = 0 56*9712c20fSFrederick Mayle location.rva = 0x0 57*9712c20fSFrederick Mayle 58*9712c20fSFrederick MaylemDirectory[8] 59*9712c20fSFrederick MayleMDRawDirectory 60*9712c20fSFrederick Mayle stream_type = 0x0 (MD_UNUSED_STREAM) 61*9712c20fSFrederick Mayle location.data_size = 0 62*9712c20fSFrederick Mayle location.rva = 0x0 63*9712c20fSFrederick Mayle 64*9712c20fSFrederick MayleStreams: 65*9712c20fSFrederick Mayle stream type 0x0 (MD_UNUSED_STREAM) at index 8 66*9712c20fSFrederick Mayle stream type 0x3 (MD_THREAD_LIST_STREAM) at index 0 67*9712c20fSFrederick Mayle stream type 0x4 (MD_MODULE_LIST_STREAM) at index 1 68*9712c20fSFrederick Mayle stream type 0x5 (MD_MEMORY_LIST_STREAM) at index 2 69*9712c20fSFrederick Mayle stream type 0x6 (MD_EXCEPTION_STREAM) at index 3 70*9712c20fSFrederick Mayle stream type 0x7 (MD_SYSTEM_INFO_STREAM) at index 4 71*9712c20fSFrederick Mayle stream type 0xf (MD_MISC_INFO_STREAM) at index 5 72*9712c20fSFrederick Mayle stream type 0x47670001 (MD_BREAKPAD_INFO_STREAM) at index 6 73*9712c20fSFrederick Mayle 74*9712c20fSFrederick MayleMinidumpThreadList 75*9712c20fSFrederick Mayle thread_count = 2 76*9712c20fSFrederick Mayle 77*9712c20fSFrederick Maylethread[0] 78*9712c20fSFrederick MayleMDRawThread 79*9712c20fSFrederick Mayle thread_id = 0xbf4 80*9712c20fSFrederick Mayle suspend_count = 0 81*9712c20fSFrederick Mayle priority_class = 0x0 82*9712c20fSFrederick Mayle priority = 0x0 83*9712c20fSFrederick Mayle teb = 0x7ffdf000 84*9712c20fSFrederick Mayle stack.start_of_memory_range = 0x12f31c 85*9712c20fSFrederick Mayle stack.memory.data_size = 0xce4 86*9712c20fSFrederick Mayle stack.memory.rva = 0x1639 87*9712c20fSFrederick Mayle thread_context.data_size = 0x2cc 88*9712c20fSFrederick Mayle thread_context.rva = 0xd94 89*9712c20fSFrederick Mayle 90*9712c20fSFrederick MayleMDRawContextX86 91*9712c20fSFrederick Mayle context_flags = 0x1003f 92*9712c20fSFrederick Mayle dr0 = 0x0 93*9712c20fSFrederick Mayle dr1 = 0x0 94*9712c20fSFrederick Mayle dr2 = 0x0 95*9712c20fSFrederick Mayle dr3 = 0x0 96*9712c20fSFrederick Mayle dr6 = 0x0 97*9712c20fSFrederick Mayle dr7 = 0x0 98*9712c20fSFrederick Mayle float_save.control_word = 0xffff027f 99*9712c20fSFrederick Mayle float_save.status_word = 0xffff0000 100*9712c20fSFrederick Mayle float_save.tag_word = 0xffffffff 101*9712c20fSFrederick Mayle float_save.error_offset = 0x0 102*9712c20fSFrederick Mayle float_save.error_selector = 0x220000 103*9712c20fSFrederick Mayle float_save.data_offset = 0x0 104*9712c20fSFrederick Mayle float_save.data_selector = 0xffff0000 105*9712c20fSFrederick Mayle float_save.register_area[80] = 0x0000000018b72200000118b72200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 106*9712c20fSFrederick Mayle float_save.cr0_npx_state = 0x0 107*9712c20fSFrederick Mayle gs = 0x0 108*9712c20fSFrederick Mayle fs = 0x3b 109*9712c20fSFrederick Mayle es = 0x23 110*9712c20fSFrederick Mayle ds = 0x23 111*9712c20fSFrederick Mayle edi = 0x0 112*9712c20fSFrederick Mayle esi = 0x7b8 113*9712c20fSFrederick Mayle ebx = 0x7c883780 114*9712c20fSFrederick Mayle edx = 0x7c97c0d8 115*9712c20fSFrederick Mayle ecx = 0x7c80b46e 116*9712c20fSFrederick Mayle eax = 0x400000 117*9712c20fSFrederick Mayle ebp = 0x12f384 118*9712c20fSFrederick Mayle eip = 0x7c90eb94 119*9712c20fSFrederick Mayle cs = 0x1b 120*9712c20fSFrederick Mayle eflags = 0x246 121*9712c20fSFrederick Mayle esp = 0x12f320 122*9712c20fSFrederick Mayle ss = 0x23 123*9712c20fSFrederick Mayle extended_registers[512] = 0x7f0200000000220000000000000000000000000000000000801f0000ffff00000000000018b72200000100000000000018b72200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004509917c4e09917c38b622002400020024b42200020000009041917c0070fd7f0510907cccb22200000000009cb3220018ee907c7009917cc0e4977c6f3e917c623e917c08020000dcb62200b4b622001e000000000000000000000000000000000000002eb42200000000000f000000020000001e00200000fcfd7f2f63796764726976652f632f444f43554d457e312f4d4d454e544f7e312f4c4f43414c537e312f54656d7000000000000000000130b422000000004300000000000000001efcfd7f4509917c4e09917c5ad9000008b32200b4b62200 124*9712c20fSFrederick Mayle 125*9712c20fSFrederick MayleStack 126*9712c20fSFrederick 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 127*9712c20fSFrederick Mayle 128*9712c20fSFrederick Maylethread[1] 129*9712c20fSFrederick MayleMDRawThread 130*9712c20fSFrederick Mayle thread_id = 0x11c0 131*9712c20fSFrederick Mayle suspend_count = 0 132*9712c20fSFrederick Mayle priority_class = 0x0 133*9712c20fSFrederick Mayle priority = 0x0 134*9712c20fSFrederick Mayle teb = 0x7ffde000 135*9712c20fSFrederick Mayle stack.start_of_memory_range = 0x97f6e8 136*9712c20fSFrederick Mayle stack.memory.data_size = 0x918 137*9712c20fSFrederick Mayle stack.memory.rva = 0x231d 138*9712c20fSFrederick Mayle thread_context.data_size = 0x2cc 139*9712c20fSFrederick Mayle thread_context.rva = 0x1060 140*9712c20fSFrederick Mayle 141*9712c20fSFrederick MayleMDRawContextX86 142*9712c20fSFrederick Mayle context_flags = 0x1003f 143*9712c20fSFrederick Mayle dr0 = 0x0 144*9712c20fSFrederick Mayle dr1 = 0x0 145*9712c20fSFrederick Mayle dr2 = 0x0 146*9712c20fSFrederick Mayle dr3 = 0x0 147*9712c20fSFrederick Mayle dr6 = 0x0 148*9712c20fSFrederick Mayle dr7 = 0x0 149*9712c20fSFrederick Mayle float_save.control_word = 0xffff027f 150*9712c20fSFrederick Mayle float_save.status_word = 0xffff0000 151*9712c20fSFrederick Mayle float_save.tag_word = 0xffffffff 152*9712c20fSFrederick Mayle float_save.error_offset = 0x0 153*9712c20fSFrederick Mayle float_save.error_selector = 0x870000 154*9712c20fSFrederick Mayle float_save.data_offset = 0x0 155*9712c20fSFrederick Mayle float_save.data_selector = 0xffff0000 156*9712c20fSFrederick Mayle float_save.register_area[80] = 0x84fb120000001400320778071400000014000000f4fe1200a0fd120018eeb0fd12003815917c961534ff120034ff12000000e7712a0f2a0000005400ccfb120068514000584d540000002a000000f4fe 157*9712c20fSFrederick Mayle float_save.cr0_npx_state = 0x0 158*9712c20fSFrederick Mayle gs = 0x0 159*9712c20fSFrederick Mayle fs = 0x3b 160*9712c20fSFrederick Mayle es = 0x23 161*9712c20fSFrederick Mayle ds = 0x23 162*9712c20fSFrederick Mayle edi = 0x145b00 163*9712c20fSFrederick Mayle esi = 0x145aa8 164*9712c20fSFrederick Mayle ebx = 0x145ad0 165*9712c20fSFrederick Mayle edx = 0x7c90eb94 166*9712c20fSFrederick Mayle ecx = 0x7 167*9712c20fSFrederick Mayle eax = 0xa80000 168*9712c20fSFrederick Mayle ebp = 0x97f6fc 169*9712c20fSFrederick Mayle eip = 0x7c90eb94 170*9712c20fSFrederick Mayle cs = 0x1b 171*9712c20fSFrederick Mayle eflags = 0x246 172*9712c20fSFrederick Mayle esp = 0x97f6ec 173*9712c20fSFrederick Mayle ss = 0x23 174*9712c20fSFrederick Mayle extended_registers[512] = 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 175*9712c20fSFrederick Mayle 176*9712c20fSFrederick MayleStack 177*9712c20fSFrederick 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 178*9712c20fSFrederick Mayle 179*9712c20fSFrederick MayleMinidumpModuleList 180*9712c20fSFrederick Mayle module_count = 13 181*9712c20fSFrederick Mayle 182*9712c20fSFrederick Maylemodule[0] 183*9712c20fSFrederick MayleMDRawModule 184*9712c20fSFrederick Mayle base_of_image = 0x400000 185*9712c20fSFrederick Mayle size_of_image = 0x2d000 186*9712c20fSFrederick Mayle checksum = 0x0 187*9712c20fSFrederick Mayle time_date_stamp = 0x45d35f6c 2007-02-14 19:13:48 188*9712c20fSFrederick Mayle module_name_rva = 0x78a 189*9712c20fSFrederick Mayle version_info.signature = 0x0 190*9712c20fSFrederick Mayle version_info.struct_version = 0x0 191*9712c20fSFrederick Mayle version_info.file_version = 0x0:0x0 192*9712c20fSFrederick Mayle version_info.product_version = 0x0:0x0 193*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x0 194*9712c20fSFrederick Mayle version_info.file_flags = 0x0 195*9712c20fSFrederick Mayle version_info.file_os = 0x0 196*9712c20fSFrederick Mayle version_info.file_type = 0x0 197*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 198*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 199*9712c20fSFrederick Mayle cv_record.data_size = 40 200*9712c20fSFrederick Mayle cv_record.rva = 0x132c 201*9712c20fSFrederick Mayle misc_record.data_size = 0 202*9712c20fSFrederick Mayle misc_record.rva = 0x0 203*9712c20fSFrederick Mayle (code_file) = "c:\test_app.exe" 204*9712c20fSFrederick Mayle (code_identifier) = "45D35F6C2d000" 205*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 206*9712c20fSFrederick Mayle (cv_record).signature = 5a9832e5-2872-41c1-838e-d98914e9b7ff 207*9712c20fSFrederick Mayle (cv_record).age = 1 208*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "c:\test_app.pdb" 209*9712c20fSFrederick Mayle (misc_record) = (null) 210*9712c20fSFrederick Mayle (debug_file) = "c:\test_app.pdb" 211*9712c20fSFrederick Mayle (debug_identifier) = "5A9832E5287241C1838ED98914E9B7FF1" 212*9712c20fSFrederick Mayle (version) = "" 213*9712c20fSFrederick Mayle 214*9712c20fSFrederick Maylemodule[1] 215*9712c20fSFrederick MayleMDRawModule 216*9712c20fSFrederick Mayle base_of_image = 0x7c900000 217*9712c20fSFrederick Mayle size_of_image = 0xb0000 218*9712c20fSFrederick Mayle checksum = 0xaf2f7 219*9712c20fSFrederick Mayle time_date_stamp = 0x411096b4 2004-08-04 07:56:36 220*9712c20fSFrederick Mayle module_name_rva = 0x7ae 221*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 222*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 223*9712c20fSFrederick Mayle version_info.file_version = 0x50001:0xa280884 224*9712c20fSFrederick Mayle version_info.product_version = 0x50001:0xa280884 225*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 226*9712c20fSFrederick Mayle version_info.file_flags = 0x0 227*9712c20fSFrederick Mayle version_info.file_os = 0x40004 228*9712c20fSFrederick Mayle version_info.file_type = 0x2 229*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 230*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 231*9712c20fSFrederick Mayle cv_record.data_size = 34 232*9712c20fSFrederick Mayle cv_record.rva = 0x1354 233*9712c20fSFrederick Mayle misc_record.data_size = 0 234*9712c20fSFrederick Mayle misc_record.rva = 0x0 235*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\ntdll.dll" 236*9712c20fSFrederick Mayle (code_identifier) = "411096B4b0000" 237*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 238*9712c20fSFrederick Mayle (cv_record).signature = 36515fb5-d043-45e4-91f6-72fa2e2878c0 239*9712c20fSFrederick Mayle (cv_record).age = 2 240*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "ntdll.pdb" 241*9712c20fSFrederick Mayle (misc_record) = (null) 242*9712c20fSFrederick Mayle (debug_file) = "ntdll.pdb" 243*9712c20fSFrederick Mayle (debug_identifier) = "36515FB5D04345E491F672FA2E2878C02" 244*9712c20fSFrederick Mayle (version) = "5.1.2600.2180" 245*9712c20fSFrederick Mayle 246*9712c20fSFrederick Maylemodule[2] 247*9712c20fSFrederick MayleMDRawModule 248*9712c20fSFrederick Mayle base_of_image = 0x7c800000 249*9712c20fSFrederick Mayle size_of_image = 0xf4000 250*9712c20fSFrederick Mayle checksum = 0xf724d 251*9712c20fSFrederick Mayle time_date_stamp = 0x44ab9a84 2006-07-05 10:55:00 252*9712c20fSFrederick Mayle module_name_rva = 0x7ee 253*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 254*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 255*9712c20fSFrederick Mayle version_info.file_version = 0x50001:0xa280b81 256*9712c20fSFrederick Mayle version_info.product_version = 0x50001:0xa280b81 257*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 258*9712c20fSFrederick Mayle version_info.file_flags = 0x0 259*9712c20fSFrederick Mayle version_info.file_os = 0x40004 260*9712c20fSFrederick Mayle version_info.file_type = 0x2 261*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 262*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 263*9712c20fSFrederick Mayle cv_record.data_size = 37 264*9712c20fSFrederick Mayle cv_record.rva = 0x1376 265*9712c20fSFrederick Mayle misc_record.data_size = 0 266*9712c20fSFrederick Mayle misc_record.rva = 0x0 267*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\kernel32.dll" 268*9712c20fSFrederick Mayle (code_identifier) = "44AB9A84f4000" 269*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 270*9712c20fSFrederick Mayle (cv_record).signature = bce8785c-57b4-4245-a669-896b6a19b954 271*9712c20fSFrederick Mayle (cv_record).age = 2 272*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "kernel32.pdb" 273*9712c20fSFrederick Mayle (misc_record) = (null) 274*9712c20fSFrederick Mayle (debug_file) = "kernel32.pdb" 275*9712c20fSFrederick Mayle (debug_identifier) = "BCE8785C57B44245A669896B6A19B9542" 276*9712c20fSFrederick Mayle (version) = "5.1.2600.2945" 277*9712c20fSFrederick Mayle 278*9712c20fSFrederick Maylemodule[3] 279*9712c20fSFrederick MayleMDRawModule 280*9712c20fSFrederick Mayle base_of_image = 0x774e0000 281*9712c20fSFrederick Mayle size_of_image = 0x13d000 282*9712c20fSFrederick Mayle checksum = 0x13dc6b 283*9712c20fSFrederick Mayle time_date_stamp = 0x42e5be93 2005-07-26 04:39:47 284*9712c20fSFrederick Mayle module_name_rva = 0x834 285*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 286*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 287*9712c20fSFrederick Mayle version_info.file_version = 0x50001:0xa280aa6 288*9712c20fSFrederick Mayle version_info.product_version = 0x50001:0xa280aa6 289*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 290*9712c20fSFrederick Mayle version_info.file_flags = 0x0 291*9712c20fSFrederick Mayle version_info.file_os = 0x40004 292*9712c20fSFrederick Mayle version_info.file_type = 0x2 293*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 294*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 295*9712c20fSFrederick Mayle cv_record.data_size = 34 296*9712c20fSFrederick Mayle cv_record.rva = 0x139b 297*9712c20fSFrederick Mayle misc_record.data_size = 0 298*9712c20fSFrederick Mayle misc_record.rva = 0x0 299*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\ole32.dll" 300*9712c20fSFrederick Mayle (code_identifier) = "42E5BE9313d000" 301*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 302*9712c20fSFrederick Mayle (cv_record).signature = 683b65b2-46f4-4187-96d2-ee6d4c55eb11 303*9712c20fSFrederick Mayle (cv_record).age = 2 304*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "ole32.pdb" 305*9712c20fSFrederick Mayle (misc_record) = (null) 306*9712c20fSFrederick Mayle (debug_file) = "ole32.pdb" 307*9712c20fSFrederick Mayle (debug_identifier) = "683B65B246F4418796D2EE6D4C55EB112" 308*9712c20fSFrederick Mayle (version) = "5.1.2600.2726" 309*9712c20fSFrederick Mayle 310*9712c20fSFrederick Maylemodule[4] 311*9712c20fSFrederick MayleMDRawModule 312*9712c20fSFrederick Mayle base_of_image = 0x77dd0000 313*9712c20fSFrederick Mayle size_of_image = 0x9b000 314*9712c20fSFrederick Mayle checksum = 0xa0de4 315*9712c20fSFrederick Mayle time_date_stamp = 0x411096a7 2004-08-04 07:56:23 316*9712c20fSFrederick Mayle module_name_rva = 0x874 317*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 318*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 319*9712c20fSFrederick Mayle version_info.file_version = 0x50001:0xa280884 320*9712c20fSFrederick Mayle version_info.product_version = 0x50001:0xa280884 321*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 322*9712c20fSFrederick Mayle version_info.file_flags = 0x0 323*9712c20fSFrederick Mayle version_info.file_os = 0x40004 324*9712c20fSFrederick Mayle version_info.file_type = 0x2 325*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 326*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 327*9712c20fSFrederick Mayle cv_record.data_size = 37 328*9712c20fSFrederick Mayle cv_record.rva = 0x13bd 329*9712c20fSFrederick Mayle misc_record.data_size = 0 330*9712c20fSFrederick Mayle misc_record.rva = 0x0 331*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\advapi32.dll" 332*9712c20fSFrederick Mayle (code_identifier) = "411096A79b000" 333*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 334*9712c20fSFrederick Mayle (cv_record).signature = 455d6c5f-184d-45bb-b5c5-f30f82975114 335*9712c20fSFrederick Mayle (cv_record).age = 2 336*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "advapi32.pdb" 337*9712c20fSFrederick Mayle (misc_record) = (null) 338*9712c20fSFrederick Mayle (debug_file) = "advapi32.pdb" 339*9712c20fSFrederick Mayle (debug_identifier) = "455D6C5F184D45BBB5C5F30F829751142" 340*9712c20fSFrederick Mayle (version) = "5.1.2600.2180" 341*9712c20fSFrederick Mayle 342*9712c20fSFrederick Maylemodule[5] 343*9712c20fSFrederick MayleMDRawModule 344*9712c20fSFrederick Mayle base_of_image = 0x77e70000 345*9712c20fSFrederick Mayle size_of_image = 0x91000 346*9712c20fSFrederick Mayle checksum = 0x9c482 347*9712c20fSFrederick Mayle time_date_stamp = 0x411096ae 2004-08-04 07:56:30 348*9712c20fSFrederick Mayle module_name_rva = 0x8ba 349*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 350*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 351*9712c20fSFrederick Mayle version_info.file_version = 0x50001:0xa280884 352*9712c20fSFrederick Mayle version_info.product_version = 0x50001:0xa280884 353*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 354*9712c20fSFrederick Mayle version_info.file_flags = 0x0 355*9712c20fSFrederick Mayle version_info.file_os = 0x40004 356*9712c20fSFrederick Mayle version_info.file_type = 0x2 357*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 358*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 359*9712c20fSFrederick Mayle cv_record.data_size = 35 360*9712c20fSFrederick Mayle cv_record.rva = 0x13e2 361*9712c20fSFrederick Mayle misc_record.data_size = 0 362*9712c20fSFrederick Mayle misc_record.rva = 0x0 363*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\rpcrt4.dll" 364*9712c20fSFrederick Mayle (code_identifier) = "411096AE91000" 365*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 366*9712c20fSFrederick Mayle (cv_record).signature = bea45a72-1da1-41da-a3ba-86b3a2031153 367*9712c20fSFrederick Mayle (cv_record).age = 2 368*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "rpcrt4.pdb" 369*9712c20fSFrederick Mayle (misc_record) = (null) 370*9712c20fSFrederick Mayle (debug_file) = "rpcrt4.pdb" 371*9712c20fSFrederick Mayle (debug_identifier) = "BEA45A721DA141DAA3BA86B3A20311532" 372*9712c20fSFrederick Mayle (version) = "5.1.2600.2180" 373*9712c20fSFrederick Mayle 374*9712c20fSFrederick Maylemodule[6] 375*9712c20fSFrederick MayleMDRawModule 376*9712c20fSFrederick Mayle base_of_image = 0x77f10000 377*9712c20fSFrederick Mayle size_of_image = 0x47000 378*9712c20fSFrederick Mayle checksum = 0x4d0d0 379*9712c20fSFrederick Mayle time_date_stamp = 0x43b34feb 2005-12-29 02:54:35 380*9712c20fSFrederick Mayle module_name_rva = 0x8fc 381*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 382*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 383*9712c20fSFrederick Mayle version_info.file_version = 0x50001:0xa280b02 384*9712c20fSFrederick Mayle version_info.product_version = 0x50001:0xa280b02 385*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 386*9712c20fSFrederick Mayle version_info.file_flags = 0x0 387*9712c20fSFrederick Mayle version_info.file_os = 0x40004 388*9712c20fSFrederick Mayle version_info.file_type = 0x2 389*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 390*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 391*9712c20fSFrederick Mayle cv_record.data_size = 34 392*9712c20fSFrederick Mayle cv_record.rva = 0x1405 393*9712c20fSFrederick Mayle misc_record.data_size = 0 394*9712c20fSFrederick Mayle misc_record.rva = 0x0 395*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\gdi32.dll" 396*9712c20fSFrederick Mayle (code_identifier) = "43B34FEB47000" 397*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 398*9712c20fSFrederick Mayle (cv_record).signature = c0ea66be-00a6-4bd7-aef7-9e443a91869c 399*9712c20fSFrederick Mayle (cv_record).age = 2 400*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "gdi32.pdb" 401*9712c20fSFrederick Mayle (misc_record) = (null) 402*9712c20fSFrederick Mayle (debug_file) = "gdi32.pdb" 403*9712c20fSFrederick Mayle (debug_identifier) = "C0EA66BE00A64BD7AEF79E443A91869C2" 404*9712c20fSFrederick Mayle (version) = "5.1.2600.2818" 405*9712c20fSFrederick Mayle 406*9712c20fSFrederick Maylemodule[7] 407*9712c20fSFrederick MayleMDRawModule 408*9712c20fSFrederick Mayle base_of_image = 0x77d40000 409*9712c20fSFrederick Mayle size_of_image = 0x90000 410*9712c20fSFrederick Mayle checksum = 0x9505c 411*9712c20fSFrederick Mayle time_date_stamp = 0x42260159 2005-03-02 18:09:29 412*9712c20fSFrederick Mayle module_name_rva = 0x93c 413*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 414*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 415*9712c20fSFrederick Mayle version_info.file_version = 0x50001:0xa280a3e 416*9712c20fSFrederick Mayle version_info.product_version = 0x50001:0xa280a3e 417*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 418*9712c20fSFrederick Mayle version_info.file_flags = 0x0 419*9712c20fSFrederick Mayle version_info.file_os = 0x40004 420*9712c20fSFrederick Mayle version_info.file_type = 0x2 421*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 422*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 423*9712c20fSFrederick Mayle cv_record.data_size = 35 424*9712c20fSFrederick Mayle cv_record.rva = 0x1427 425*9712c20fSFrederick Mayle misc_record.data_size = 0 426*9712c20fSFrederick Mayle misc_record.rva = 0x0 427*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\user32.dll" 428*9712c20fSFrederick Mayle (code_identifier) = "4226015990000" 429*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 430*9712c20fSFrederick Mayle (cv_record).signature = ee2b714d-83a3-4c9d-8802-7621272f8326 431*9712c20fSFrederick Mayle (cv_record).age = 2 432*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "user32.pdb" 433*9712c20fSFrederick Mayle (misc_record) = (null) 434*9712c20fSFrederick Mayle (debug_file) = "user32.pdb" 435*9712c20fSFrederick Mayle (debug_identifier) = "EE2B714D83A34C9D88027621272F83262" 436*9712c20fSFrederick Mayle (version) = "5.1.2600.2622" 437*9712c20fSFrederick Mayle 438*9712c20fSFrederick Maylemodule[8] 439*9712c20fSFrederick MayleMDRawModule 440*9712c20fSFrederick Mayle base_of_image = 0x77c10000 441*9712c20fSFrederick Mayle size_of_image = 0x58000 442*9712c20fSFrederick Mayle checksum = 0x57cd3 443*9712c20fSFrederick Mayle time_date_stamp = 0x41109752 2004-08-04 07:59:14 444*9712c20fSFrederick Mayle module_name_rva = 0x97e 445*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 446*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 447*9712c20fSFrederick Mayle version_info.file_version = 0x70000:0xa280884 448*9712c20fSFrederick Mayle version_info.product_version = 0x60001:0x21be0884 449*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 450*9712c20fSFrederick Mayle version_info.file_flags = 0x0 451*9712c20fSFrederick Mayle version_info.file_os = 0x40004 452*9712c20fSFrederick Mayle version_info.file_type = 0x1 453*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 454*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 455*9712c20fSFrederick Mayle cv_record.data_size = 35 456*9712c20fSFrederick Mayle cv_record.rva = 0x144a 457*9712c20fSFrederick Mayle misc_record.data_size = 0 458*9712c20fSFrederick Mayle misc_record.rva = 0x0 459*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\msvcrt.dll" 460*9712c20fSFrederick Mayle (code_identifier) = "4110975258000" 461*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 462*9712c20fSFrederick Mayle (cv_record).signature = a678f3c3-0ded-426b-8390-32b996987e38 463*9712c20fSFrederick Mayle (cv_record).age = 1 464*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "msvcrt.pdb" 465*9712c20fSFrederick Mayle (misc_record) = (null) 466*9712c20fSFrederick Mayle (debug_file) = "msvcrt.pdb" 467*9712c20fSFrederick Mayle (debug_identifier) = "A678F3C30DED426B839032B996987E381" 468*9712c20fSFrederick Mayle (version) = "7.0.2600.2180" 469*9712c20fSFrederick Mayle 470*9712c20fSFrederick Maylemodule[9] 471*9712c20fSFrederick MayleMDRawModule 472*9712c20fSFrederick Mayle base_of_image = 0x76390000 473*9712c20fSFrederick Mayle size_of_image = 0x1d000 474*9712c20fSFrederick Mayle checksum = 0x2a024 475*9712c20fSFrederick Mayle time_date_stamp = 0x411096ae 2004-08-04 07:56:30 476*9712c20fSFrederick Mayle module_name_rva = 0x9c0 477*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 478*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 479*9712c20fSFrederick Mayle version_info.file_version = 0x50001:0xa280884 480*9712c20fSFrederick Mayle version_info.product_version = 0x50001:0xa280884 481*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 482*9712c20fSFrederick Mayle version_info.file_flags = 0x0 483*9712c20fSFrederick Mayle version_info.file_os = 0x40004 484*9712c20fSFrederick Mayle version_info.file_type = 0x2 485*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 486*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 487*9712c20fSFrederick Mayle cv_record.data_size = 34 488*9712c20fSFrederick Mayle cv_record.rva = 0x146d 489*9712c20fSFrederick Mayle misc_record.data_size = 0 490*9712c20fSFrederick Mayle misc_record.rva = 0x0 491*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\imm32.dll" 492*9712c20fSFrederick Mayle (code_identifier) = "411096AE1d000" 493*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 494*9712c20fSFrederick Mayle (cv_record).signature = 2c17a49c-251b-4c8e-b9e2-ad13d7d9ea16 495*9712c20fSFrederick Mayle (cv_record).age = 2 496*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "imm32.pdb" 497*9712c20fSFrederick Mayle (misc_record) = (null) 498*9712c20fSFrederick Mayle (debug_file) = "imm32.pdb" 499*9712c20fSFrederick Mayle (debug_identifier) = "2C17A49C251B4C8EB9E2AD13D7D9EA162" 500*9712c20fSFrederick Mayle (version) = "5.1.2600.2180" 501*9712c20fSFrederick Mayle 502*9712c20fSFrederick Maylemodule[10] 503*9712c20fSFrederick MayleMDRawModule 504*9712c20fSFrederick Mayle base_of_image = 0x59a60000 505*9712c20fSFrederick Mayle size_of_image = 0xa1000 506*9712c20fSFrederick Mayle checksum = 0xa8824 507*9712c20fSFrederick Mayle time_date_stamp = 0x4110969a 2004-08-04 07:56:10 508*9712c20fSFrederick Mayle module_name_rva = 0xa00 509*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 510*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 511*9712c20fSFrederick Mayle version_info.file_version = 0x50001:0xa280884 512*9712c20fSFrederick Mayle version_info.product_version = 0x50001:0xa280884 513*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 514*9712c20fSFrederick Mayle version_info.file_flags = 0x0 515*9712c20fSFrederick Mayle version_info.file_os = 0x40004 516*9712c20fSFrederick Mayle version_info.file_type = 0x2 517*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 518*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 519*9712c20fSFrederick Mayle cv_record.data_size = 36 520*9712c20fSFrederick Mayle cv_record.rva = 0x148f 521*9712c20fSFrederick Mayle misc_record.data_size = 0 522*9712c20fSFrederick Mayle misc_record.rva = 0x0 523*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\dbghelp.dll" 524*9712c20fSFrederick Mayle (code_identifier) = "4110969Aa1000" 525*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 526*9712c20fSFrederick Mayle (cv_record).signature = 39559573-e21b-46f2-8e28-6923be9e6a76 527*9712c20fSFrederick Mayle (cv_record).age = 1 528*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "dbghelp.pdb" 529*9712c20fSFrederick Mayle (misc_record) = (null) 530*9712c20fSFrederick Mayle (debug_file) = "dbghelp.pdb" 531*9712c20fSFrederick Mayle (debug_identifier) = "39559573E21B46F28E286923BE9E6A761" 532*9712c20fSFrederick Mayle (version) = "5.1.2600.2180" 533*9712c20fSFrederick Mayle 534*9712c20fSFrederick Maylemodule[11] 535*9712c20fSFrederick MayleMDRawModule 536*9712c20fSFrederick Mayle base_of_image = 0x77c00000 537*9712c20fSFrederick Mayle size_of_image = 0x8000 538*9712c20fSFrederick Mayle checksum = 0x11d78 539*9712c20fSFrederick Mayle time_date_stamp = 0x411096b7 2004-08-04 07:56:39 540*9712c20fSFrederick Mayle module_name_rva = 0xa44 541*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 542*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 543*9712c20fSFrederick Mayle version_info.file_version = 0x50001:0xa280884 544*9712c20fSFrederick Mayle version_info.product_version = 0x50001:0xa280884 545*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 546*9712c20fSFrederick Mayle version_info.file_flags = 0x0 547*9712c20fSFrederick Mayle version_info.file_os = 0x40004 548*9712c20fSFrederick Mayle version_info.file_type = 0x2 549*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 550*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 551*9712c20fSFrederick Mayle cv_record.data_size = 36 552*9712c20fSFrederick Mayle cv_record.rva = 0x14b3 553*9712c20fSFrederick Mayle misc_record.data_size = 0 554*9712c20fSFrederick Mayle misc_record.rva = 0x0 555*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\version.dll" 556*9712c20fSFrederick Mayle (code_identifier) = "411096B78000" 557*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 558*9712c20fSFrederick Mayle (cv_record).signature = 180a90c4-0384-463e-82dd-c45b2c8ab76e 559*9712c20fSFrederick Mayle (cv_record).age = 2 560*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "version.pdb" 561*9712c20fSFrederick Mayle (misc_record) = (null) 562*9712c20fSFrederick Mayle (debug_file) = "version.pdb" 563*9712c20fSFrederick Mayle (debug_identifier) = "180A90C40384463E82DDC45B2C8AB76E2" 564*9712c20fSFrederick Mayle (version) = "5.1.2600.2180" 565*9712c20fSFrederick Mayle 566*9712c20fSFrederick Maylemodule[12] 567*9712c20fSFrederick MayleMDRawModule 568*9712c20fSFrederick Mayle base_of_image = 0x76bf0000 569*9712c20fSFrederick Mayle size_of_image = 0xb000 570*9712c20fSFrederick Mayle checksum = 0xa29b 571*9712c20fSFrederick Mayle time_date_stamp = 0x411096ca 2004-08-04 07:56:58 572*9712c20fSFrederick Mayle module_name_rva = 0xa88 573*9712c20fSFrederick Mayle version_info.signature = 0xfeef04bd 574*9712c20fSFrederick Mayle version_info.struct_version = 0x10000 575*9712c20fSFrederick Mayle version_info.file_version = 0x50001:0xa280884 576*9712c20fSFrederick Mayle version_info.product_version = 0x50001:0xa280884 577*9712c20fSFrederick Mayle version_info.file_flags_mask = 0x3f 578*9712c20fSFrederick Mayle version_info.file_flags = 0x0 579*9712c20fSFrederick Mayle version_info.file_os = 0x40004 580*9712c20fSFrederick Mayle version_info.file_type = 0x2 581*9712c20fSFrederick Mayle version_info.file_subtype = 0x0 582*9712c20fSFrederick Mayle version_info.file_date = 0x0:0x0 583*9712c20fSFrederick Mayle cv_record.data_size = 34 584*9712c20fSFrederick Mayle cv_record.rva = 0x14d7 585*9712c20fSFrederick Mayle misc_record.data_size = 0 586*9712c20fSFrederick Mayle misc_record.rva = 0x0 587*9712c20fSFrederick Mayle (code_file) = "C:\WINDOWS\system32\psapi.dll" 588*9712c20fSFrederick Mayle (code_identifier) = "411096CAb000" 589*9712c20fSFrederick Mayle (cv_record).cv_signature = 0x53445352 590*9712c20fSFrederick Mayle (cv_record).signature = a5c3a1f9-689f-43d8-ad22-8a0929388970 591*9712c20fSFrederick Mayle (cv_record).age = 2 592*9712c20fSFrederick Mayle (cv_record).pdb_file_name = "psapi.pdb" 593*9712c20fSFrederick Mayle (misc_record) = (null) 594*9712c20fSFrederick Mayle (debug_file) = "psapi.pdb" 595*9712c20fSFrederick Mayle (debug_identifier) = "A5C3A1F9689F43D8AD228A09293889702" 596*9712c20fSFrederick Mayle (version) = "5.1.2600.2180" 597*9712c20fSFrederick Mayle 598*9712c20fSFrederick MayleMinidumpMemoryList 599*9712c20fSFrederick Mayle region_count = 3 600*9712c20fSFrederick Mayle 601*9712c20fSFrederick Mayleregion[0] 602*9712c20fSFrederick MayleMDMemoryDescriptor 603*9712c20fSFrederick Mayle start_of_memory_range = 0x7c90eb14 604*9712c20fSFrederick Mayle memory.data_size = 0x100 605*9712c20fSFrederick Mayle memory.rva = 0x1539 606*9712c20fSFrederick MayleMemory 607*9712c20fSFrederick Mayle0xff83c4ec890424c744240401000000895c2408c74424100000000054e877000000c208009090909090558bec83ec508944240c64a1180000008b80a4010000890424c744240400000000c744240800000000c74424100000000054e8380000008b04248be55dc3908da424000000008d490090909090908bd40f349090909090c38da424000000008d64240090909090908d542408cd2ec3558bec9c81ecd00200008985dcfdffff898dd8fdffff8b45088b4d0489480c8d852cfdffff8988b80000008998a40000008990a800000089b0a000000089b89c0000008d4d0c8988c40000008b4d008988b40000008b4dfc8988c00000008c88bc0000008c989800 608*9712c20fSFrederick Mayle 609*9712c20fSFrederick Mayleregion[1] 610*9712c20fSFrederick MayleMDMemoryDescriptor 611*9712c20fSFrederick Mayle start_of_memory_range = 0x12f31c 612*9712c20fSFrederick Mayle memory.data_size = 0xce4 613*9712c20fSFrederick Mayle memory.rva = 0x1639 614*9712c20fSFrederick MayleMemory 615*9712c20fSFrederick Mayle0x00000000c0e9907ccb25807cb8070000000000000000000034ff1200b0fe12008037887c140000000100000000000000000000001000000027e0907c2e39917c0050fd7f00f0fd7f000000000400000034f312006947c788d4f31200a89a837cf825807c0000000098f312003225807cb8070000ffffffff00000000e4f31200ff1d4000b8070000ffffffffa8fa12008037887c0e1c4000a8fa120000000000ff792a0f64f91200b01b400000004000b0fe12000040020070fa1200084042000000000080fa120080fa12004e30867ca8fa12000000000000000000000000000018000002100000e3ef907c0000000079d900000000000048f41200000014003207917c0500000078071400000014000000000020f412003207917ca05f140018ee907cfa00000074f61200000000009615917ceb06917cf00298000100000000000000384f14009615917ceb06917c7801140008000000404f14000000a659985f1400080000000000000018ee907c90fea700400698003815917c184f1400eb06917c00000000800000000000a65988f69f0090f51200a569917cf8f41200d95c878880f5120043ef907c480485000500000090f5120088fea700a8212400000000000000000080f512002469917cf8fbfd7fa821240008000000f500000000000000384d850078019800a8fa120004000000a05f140096d4917c00000000b0d4917c0000000008069800184f140000000000104f140000000000184f140000004000000000010040020063003a005c0074006500730074005f006100700070002e006500780065000000000000002f00000028000000184f1400780185007801140028000000000000000000140084f3120010000000d8f5120018ee907cf006917cffffffffeb06917ce619917c88e6a7003003000001030000ff1b917c0000980080e6a70080069800400698000000980080e6a70000000000000000000000000080e6a7000818000088e6a700d759927c78019800081800000210000000009800f8f31200280a0000dcf6120018ee907cf006917cffffffffeb06917c0859927c00009800080000005859927c00000000000001000000a659000000005a6202000010000068fe030001000000dffe03000000010000000100fffffe7f0100000001c0c27700008500000000002dc0c27700000000684aaf590000a659241a917c80c0977c0000000000000000cd5c927c0050fd7f0000a65900000100080000004550fd7f0000000000000000000000000050fd7fcd5c927c05000000d4f61200f45c927c80e4977c05000000010000000050fd7f18f712007009917cc0e4977c172e817cff2d817c000000000000a6590000a6590210000000f0fd7f05000000e8f612000806980064f81200a89a837c002e817cffffffffff2d817cc8242400dd8ea75901000000000000004cf712003608a9590000a65901000000000000000100000060f71200e407a9596cf7120000004000000000010040020063003a005c0074006500730074005f006100700070002e0065007800650000006d05917c905f140000000000440d020000000000604f14000c0000007801140000000000a04e1400d84d8700400687004509917c0800000000000000000000004000000078011400a8038700404f14000510907c000000000000000078011400980387000800000008000000c0e4977cd04d8700f835887c7801140010000000a0e7ae591600000030fd1200d39b917c44000000620000000000a65950e9ae59d8eaae59a80387000100000014040000000000000100000002000000f800a659c003870001000000780114009508917c0000a659091b917c020000000900000040000000a2fd12009cfd1200404f1400a2fd1200d04d8700640187000000000000000000d04d870010000000d84d8700384f1400a803870010000000c00300000000870074fb1200404f14006cfe120018ee907cf006917cffffffffeb06917ca09d400000008700000000000400000000000000ffffff3fc04d8700ccfd12009c4d400004000000fa19917cb84d870064018700c04d8700063440000400000018000000c04d870079d90000c0038700fa31400000000000c04d8700c04d87000000000001000000b0fe120082294000c04d87000000000000000000c04d870048fe12008cfe120000000000e224400040fe12008cfe1200c04d8700d84d8700b0fe12008600817c54fa1200d8f9120000000000160018005479420079d90000000000000757917c00000200a4f91200a4f91200a4f91200020000000200000000000000c4f912000000000079d9000014fb12004cfa120014fb1200005a917c00fa1200a0fb120001000000655a917ca405817c74c1977ce705817c00000000f4fd120098fb120000000000a0fb12000000000090fb12000000800070fa120000000000000000000000000016001800547942000000000001000000000000000000000000000000000000003308917ca89a837c0000807c0000807ce800807c2cfa12001fe2907c11fa877cffffffffe06f817c000000006cfa12001c0000000f000000e06f817c8fc60000f0f312000060817cc8fa1200a89a837c7039867cfffffffff0ff1200da36847ca8fa1200099b837cb0fa120000000000b0fa12000000000000000000000000009cfb1200b8fb1200d4fa1200bf37907c9cfb1200e0ff1200b8fb120070fb1200b0ff1200d837907ce0ff120084fb12008b37907c9cfb1200e0ff1200b8fb120070fb1200a89a837c010000009cfb1200e0ff12006078937c9cfb1200e0ff1200b8fb120070fb1200a89a837c280a00009cfb12000200000018ee907c9032917cffffffff8832917c3364917c68fb1200000087003207917c02000000dc31917c1232917c8132917c8832917c1e000000c01e2400080200003807917c54fb12003207917cc4fb120018ee907c9032917c0000130000d01200beb4800088fe1200faea907c00000000b8fb12009cfb1200b8fb1200050000c000000000000000009e4240000200000001000000450000003f0001000000000000000000000000000000000000000000000000007f02ffff0000ffffffffffff0000000000002200000000000000ffff0000000018b72200000118b7220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b0000002300000023000000280a000002000000c1ab807c58bc420094fe12004500000088fe12009e4240001b0000004602010084fe1200230000007f0200000000220000000000000000000000000000000000801f0000ffff00000000000018b72200000100000000000018b72200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004509917c4e09917c38b622002400020024b42200020000009041917c0070fd7f0510907cccb22200000000009cb3220018ee907c7009917cc0e4977c6f3e917c623e917c08020000dcb62200b4b622001e000000000000000000000000000000000000002eb42200000000000f000000020000001e00200000fcfd7f2f63796764726976652f632f444f43554d457e312f4d4d454e544f7e312f4c4f43414c537e312f54656d7000000000000000000130b422000000004300000000000000001efcfd7f4509917c4e09917c5ad9000008b32200b4b622004500000070ff120000424000b8278700dc31917c00000000004c870000000020040000000000000007000000000000004042400000000000000000002e000000000000000cff12007b434100010000000700000084434100004d87002e39917cffffffff24000000240000002700000000000000584d870004000000b1944000244c87002a0000002f000000c0fe1200004d8700584d87000000a659b0b9a859015d400015aa400000000000b4070000784e14000000000001000000f40b00000000000000000000bc070000b8070000f40b0000a8fa120000000000009c4000599c400094b240004f752a0fc0ff1200ec534000010000003039870050398700ff752a0f00002400a02024000050fd7f050000c00100000005000000000000000000240084ff1200acfa1200e0ff1200d06f4000a70b7a0f00000000f0ff1200d76f817c00002400a02024000050fd7f050000c0c8ff1200a8fa1200ffffffffa89a837ce06f817c0000000000000000000000004354400000000000 616*9712c20fSFrederick Mayle 617*9712c20fSFrederick Mayleregion[2] 618*9712c20fSFrederick MayleMDMemoryDescriptor 619*9712c20fSFrederick Mayle start_of_memory_range = 0x97f6e8 620*9712c20fSFrederick Mayle memory.data_size = 0x918 621*9712c20fSFrederick Mayle memory.rva = 0x231d 622*9712c20fSFrederick MayleMemory 623*9712c20fSFrederick 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 624*9712c20fSFrederick Mayle 625*9712c20fSFrederick MayleMDException 626*9712c20fSFrederick Mayle thread_id = 0xbf4 627*9712c20fSFrederick Mayle exception_record.exception_code = 0xc0000005 628*9712c20fSFrederick Mayle exception_record.exception_flags = 0x0 629*9712c20fSFrederick Mayle exception_record.exception_record = 0x0 630*9712c20fSFrederick Mayle exception_record.exception_address = 0x40429e 631*9712c20fSFrederick Mayle exception_record.number_parameters = 2 632*9712c20fSFrederick Mayle exception_record.exception_information[ 0] = 0x1 633*9712c20fSFrederick Mayle exception_record.exception_information[ 1] = 0x45 634*9712c20fSFrederick Mayle thread_context.data_size = 716 635*9712c20fSFrederick Mayle thread_context.rva = 0xac8 636*9712c20fSFrederick Mayle 637*9712c20fSFrederick MayleMDRawContextX86 638*9712c20fSFrederick Mayle context_flags = 0x1003f 639*9712c20fSFrederick Mayle dr0 = 0x0 640*9712c20fSFrederick Mayle dr1 = 0x0 641*9712c20fSFrederick Mayle dr2 = 0x0 642*9712c20fSFrederick Mayle dr3 = 0x0 643*9712c20fSFrederick Mayle dr6 = 0x0 644*9712c20fSFrederick Mayle dr7 = 0x0 645*9712c20fSFrederick Mayle float_save.control_word = 0xffff027f 646*9712c20fSFrederick Mayle float_save.status_word = 0xffff0000 647*9712c20fSFrederick Mayle float_save.tag_word = 0xffffffff 648*9712c20fSFrederick Mayle float_save.error_offset = 0x0 649*9712c20fSFrederick Mayle float_save.error_selector = 0x220000 650*9712c20fSFrederick Mayle float_save.data_offset = 0x0 651*9712c20fSFrederick Mayle float_save.data_selector = 0xffff0000 652*9712c20fSFrederick Mayle float_save.register_area[80] = 0x0000000018b72200000118b72200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 653*9712c20fSFrederick Mayle float_save.cr0_npx_state = 0x0 654*9712c20fSFrederick Mayle gs = 0x0 655*9712c20fSFrederick Mayle fs = 0x3b 656*9712c20fSFrederick Mayle es = 0x23 657*9712c20fSFrederick Mayle ds = 0x23 658*9712c20fSFrederick Mayle edi = 0xa28 659*9712c20fSFrederick Mayle esi = 0x2 660*9712c20fSFrederick Mayle ebx = 0x7c80abc1 661*9712c20fSFrederick Mayle edx = 0x42bc58 662*9712c20fSFrederick Mayle ecx = 0x12fe94 663*9712c20fSFrederick Mayle eax = 0x45 664*9712c20fSFrederick Mayle ebp = 0x12fe88 665*9712c20fSFrederick Mayle eip = 0x40429e 666*9712c20fSFrederick Mayle cs = 0x1b 667*9712c20fSFrederick Mayle eflags = 0x10246 668*9712c20fSFrederick Mayle esp = 0x12fe84 669*9712c20fSFrederick Mayle ss = 0x23 670*9712c20fSFrederick Mayle extended_registers[512] = 0x7f0200000000220000000000000000000000000000000000801f0000ffff00000000000018b72200000100000000000018b72200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004509917c4e09917c38b622002400020024b42200020000009041917c0070fd7f0510907cccb22200000000009cb3220018ee907c7009917cc0e4977c6f3e917c623e917c08020000dcb62200b4b622001e000000000000000000000000000000000000002eb42200000000000f000000020000001e00200000fcfd7f2f63796764726976652f632f444f43554d457e312f4d4d454e544f7e312f4c4f43414c537e312f54656d7000000000000000000130b422000000004300000000000000001efcfd7f4509917c4e09917c5ad9000008b32200b4b62200 671*9712c20fSFrederick Mayle 672*9712c20fSFrederick MayleMDRawSystemInfo 673*9712c20fSFrederick Mayle processor_architecture = 0x0 (x86) 674*9712c20fSFrederick Mayle processor_level = 6 675*9712c20fSFrederick Mayle processor_revision = 0xd08 676*9712c20fSFrederick Mayle number_of_processors = 1 677*9712c20fSFrederick Mayle product_type = 1 678*9712c20fSFrederick Mayle major_version = 5 679*9712c20fSFrederick Mayle minor_version = 1 680*9712c20fSFrederick Mayle build_number = 2600 681*9712c20fSFrederick Mayle platform_id = 0x2 (windows) 682*9712c20fSFrederick Mayle csd_version_rva = 0x768 683*9712c20fSFrederick Mayle suite_mask = 0x100 684*9712c20fSFrederick Mayle cpu.x86_cpu_info (valid): 685*9712c20fSFrederick Mayle cpu.x86_cpu_info.vendor_id[0] = 0x756e6547 686*9712c20fSFrederick Mayle cpu.x86_cpu_info.vendor_id[1] = 0x49656e69 687*9712c20fSFrederick Mayle cpu.x86_cpu_info.vendor_id[2] = 0x6c65746e 688*9712c20fSFrederick Mayle cpu.x86_cpu_info.version_information = 0x6d8 689*9712c20fSFrederick Mayle cpu.x86_cpu_info.feature_information = 0xafe9fbff 690*9712c20fSFrederick Mayle cpu.x86_cpu_info.amd_extended_cpu_features = 0xffffffff 691*9712c20fSFrederick Mayle (csd_version) = "Service Pack 2" 692*9712c20fSFrederick Mayle (cpu_vendor) = "GenuineIntel" 693*9712c20fSFrederick Mayle 694*9712c20fSFrederick MayleMDRawMiscInfo 695*9712c20fSFrederick Mayle size_of_info = 24 696*9712c20fSFrederick Mayle flags1 = 0x3 697*9712c20fSFrederick Mayle process_id = 3932 698*9712c20fSFrederick Mayle process_create_time = 0x45d35f73 2007-02-14 19:13:55 699*9712c20fSFrederick Mayle process_user_time = 0 700*9712c20fSFrederick Mayle process_kernel_time = 0 701*9712c20fSFrederick Mayle 702*9712c20fSFrederick MayleMDRawBreakpadInfo 703*9712c20fSFrederick Mayle validity = 0x3 704*9712c20fSFrederick Mayle dump_thread_id = 0x11c0 705*9712c20fSFrederick Mayle requesting_thread_id = 0xbf4 706*9712c20fSFrederick Mayle 707