| Is the BugCheck (STOP) described in the attached Note a known
problem with Windows NT V4.0 Service Pack2? If so, when can we
expect to see a solution? If not, to whom should I submit the
Alpha PC QAR so the problem can be resolved? Thank you.
Greg Opp
Alpha PC System Integration Group, HLO 2-3/D11
<<< RICKS::SYS$SYSDEVICE:[NOTES$LIBRARY]APC164.NOTE;1 >>>
-< AlphaPC164 >-
================================================================================
Note 79.0 QAR 042: WNT BugCheck via CD Player eject 2 replies
GREGOR::OPP 1773 lines 11-APR-1997 11:48
--------------------------------------------------------------------------------
System Type: PC164LX QAR Number: 039
Entered by: Greg Opp Date Entered: 11-APR-1997
Software: WNT V4.0 SP2 First Observed: 10-APR-1997
Firmware: AlphaBIOS 5.60 Proto System: PERKED, 466 MHz, 128 MB
Hardware: Motherboard Rev. B01 SROM: 2.1-23
S/N: KA711VLNPJ
Problem Summary
While using the Multimedia CD Player and attempting to unload an
audio CD, I accidentally doubled-clicked on the eject button. The
CD drawer opened and then immediately closed. So, I clicked the
virtual eject button a third time. Soon afterwards, PERKED crashed
with a PANIC_STACK_SWITCH STOP error.
According to Des Gordon's "Interpreting System Crashes on Windows
NT", this crash message:
indicates a panic switch to the kernel stack because of stack
overflow. This error may be caused by the kernel-mode driver
using too much stack space. Or data corruption has occurred
in the kernel.
While other SIG engineers have observed this behavior and attributed
it to specific models of CD-ROM drives, this crash strongly suggests
that a Windows NT driver deficiency is also involved.
Test Description
There are no additions to the description provided in the Problem
Summary.
Problem Description
When PERKED crashed, the following "blue screen of death" informa-
tion was recorded in the system log book.
STOP 0x0000002B (0x80082428, 0x00000003, 0xF173BFF0, 0xF1740000)
PANIC_STACK_SWITCH Microsoft Windows NT [0xf000565]
Machine State at call to BugCheck PC: 800BBE04 PSR: 1E
Callee SP Return RA DLL Base Name
--------- --------- -------- ---------------------
806CDE00 800BBE04 80080000 ntoskrnl.exe
806CE000 8008242C 80080000 ntoskrnl.exe
806CE010 F1045008 80080000 ntoskrnl.exe
806CE050 00000000 F1040000 Cdfs.sys
806CE050 00000004 00000000
806CE050 00000004 00000000
806CE050 00000004 00000000
806CE050 00000004 00000000
IRQL: 7 DPC Active: False
Tentative Conclusion
This crash appears to be caused by the CDFS.SYS driver consuming all
the available stack space. However, since the system apparently
"paniced" and switched to the kernel stack, the stack overflow is not
obvious (but presumably retained in the dump file). If it's not the
CD file system driver, then some other component of the Windows NT
operating system is presumably responsible for this failure, since
hardware does not directly use the stack.
Attachments & References
A WinDbg log file from a crash dump analysis session is attached.
It clearly shows the final stages of the progression to BugCheck and
the registers and current process at that time.
WinDbg Crash Dump Log
---------------------
KDalpha> *
KDalpha> * registers
KDalpha> *
KDalpha> r
v0=ffffffff806d6000 t0=0000000000000000 t1=0000000000000000
t2=fffffffff173bff0 t3=0000000000000000 t4=0000000000000000
t5=fffffffff1042060 t6=0000000000000001 t7=fffffffffffffc50
s0=000000000000002b s1=ffffffff80082428 s2=0000000000000003
s3=fffffffff173bff0 s4=fffffffff1740000 s5=fffffffff1045230
fp=ffffffff806cde00 a0=ffffffff806d6060 a1=ffffffff80082428
a2=0000000000000003 a3=fffffffff173bff0 a4=fffffffff1740000
a5=0000000000000000 t8=0000000000000000 t9=000000000000001e
t10=000000000000001f t11=0000000000000000 ra=ffffffff800b44a0
t12=ffffffff800ddfb0 at=ffffffff80097a80 gp=ffffffff800f79e0
sp=ffffffff806cd8d0 fir=ffffffff800b44a0 psr=0000001e
KDalpha> *
KDalpha> * stack trace
KDalpha> *
KDalpha> KB
FramePtr RetAddr Param1 Param2 Param3 Function Name
806cd8d0 800bbe00 806d6060 80082428 00000003 NT!KeBugCheckEx+0x58
806cde00 80082428 806d6060 80082428 00000003 NT!KiPanicException+0x8
806ce000 f1045004 00000000 80082428 00000003 NT!ExReleaseResourceLite+0x8
806ce010 fffffffc 00000000 80082428 00000003 CDFS!CdRemoveClose+0x2a4
806ce050 00000000 00000000 80082428 00000003 0xfffffffc
KDalpha> ****** Quick look at the stack
KDalpha> *
KDalpha> DD 806cd8d0 L1
0x806CD8D0 f1740000 ..t.
KDalpha> DD 806cde00 L1
0x806CDE00 806ce000 ..l.
KDalpha> DD 806ce000 L1
0x806CE000 00060085 ....
KDalpha> DD 806ce010 L1
0x806CE010 00000000 ....
KDalpha> DD 806ce050 L1
0x806CE050 00000000 ....
KDalpha> *
KDalpha> U 800bbe04-20 L30
NT!KiPanicDispatch+0x4:
0x800bbde4 b75e0040 stq ra,0x40(sp)
0x800bbde8 b75e0008 stq ra,0x8(sp)
0x800bbdec b5fe0018 stq fp,0x18(sp)
0x800bbdf0 b7be0048 stq gp,0x48(sp)
0x800bbdf4 47de040f bis sp,sp,fp
NT!KiPanicException+0x0:
0x800bbdf8 b74f0040 stq ra,0x40(fp)
0x800bbdfc d35ffd64 bsr ra,KiGenerateTrapFrame ;0x800bb390
0x800bbe00 c35fe191 br ra,KeBugCheckEx ;0x800b4448
0x800bbe04 2ffe0000 ldq_u zero,0x0(sp)
0x800bbe08 47ff041f bis zero,zero,zero
0x800bbe0c 2ffe0000 ldq_u zero,0x0(sp)
NT!KiBreakinBreakpoint+0x0:
0x800bbe10 201f0019 lda v0,0x19(zero)
KDalpha> * This is the panic exception handler, who's main job
KDalpha> * appears to be to establish a frame and then BugCheck.
KDalpha> *
KDalpha> U 8008242c-20 L30
NT!`string'+0x24c:
0x8008240c 00000000 halt
0x80082410 00000000 halt
0x80082414 00000000 halt
0x80082418 00000000 halt
0x8008241c 00000000 halt
NT!ExReleaseResourceLite+0x0:
0x80082420 23defff0 lda sp,-0x10(sp)
0x80082424 47f00401 bis zero,a0,t0
0x80082428 b75e0000 stq ra,0x0(sp)
0x8008242c 47e05410 bis zero,#0x2,a0
0x80082430 00000006 swpirql
0x80082434 a081000c ldl t3,0xc(t0)
0x80082438 47e00402 bis zero,v0,t1
KDalpha> * implies fault while executing either stq ra,0x0(sp)
KDalpha> * or bis zero,#0x2,a0. Since the Store Quadword references
* memory, it's much more likely to fault.
KDalpha> DD 806ce000 L1
0x806CE000 00060085 ....
KDalpha> * stack appears corrupt, since 60085 is not in kernel or
* stack address space.
KDalpha> DD 0x60085 L1
0x00060085 00000000 ....
KDalpha> r ra ! last value stored in ra, not ReleaseResource
ra: ffffffff800b44a0
KDalpha> *
KDalpha> U f1045008-20 L30
CDFS!CdRemoveClose+0x288:
0xf1044fe8 a0630060 ldl t2,0x60(t2)
0xf1044fec a00a0000 ldl v0,0x0(s1)
0xf1044ff0 22030010 lda a0,0x10(t2)
0xf1044ff4 6b404000 jsr ra,(v0),0x0
0xf1044ff8 a1690074 ldl s2,0x74(s0)
0xf1044ffc a00a0000 ldl v0,0x0(s1)
0xf1045000 220b0050 lda a0,0x50(s2)
0xf1045004 6b404000 jsr ra,(v0),0x0
0xf1045008 a20c0000 ldl a0,0x0(s3)
0xf104500c a2490094 ldl a2,0x94(s0)
0xf1045010 a22900a4 ldl a1,0xa4(s0)
0xf1045014 d35feefe bsr ra,CdCompleteRequest ;0xf1040c10
KDalpha> r v0
v0: ffffffff806d6000
KDalpha> r s1
s1: ffffffff80082428
KDalpha> dd 80082428 l1
0x80082428 b75e0000 ..^.
KDalpha> U f1044fe8-288 L30 ! beginning of RemoveClose routine
CDFS!CdRemoveClose+0x0:
0xf1044d60 23deffd0 lda sp,-0x30(sp)
0xf1044d64 b53e0000 stq s0,0x0(sp)
0xf1044d68 b55e0008 stq s1,0x8(sp)
0xf1044d6c b57e0010 stq s2,0x10(sp)
0xf1044d70 b59e0018 stq s3,0x18(sp)
0xf1044d74 b75e0020 stq ra,0x20(sp)
0xf1044d78 47f00409 bis zero,a0,s0
0xf1044d7c 261ff104 ldah a0,-0xefc(zero)
0xf1044d80 257ff104 ldah s2,-0xefc(zero)
0xf1044d84 a01002b0 ldl v0,0x2b0(a0)
0xf1044d88 216b21f0 lda s2,0x21f0(s2)
0xf1044d8c 218b0048 lda s3,0x48(s2)
KDalpha> *
KDalpha> * loaded software modules
KDalpha> *
KDalpha> LM
Segmented Modules:
No modules found
Flat Modules:
Base Limit Name
-------- -------- ------------
77F00000 - 77F96000 NTDLL (symbol loading deferred)
J:\winnt40\system32\NTDLL.DLL
80080000 - 801B1300 NT (symbols converted & loaded)
J:\winnt40\symbols\exe\NTOSKRNL.DBG
802D0000 - 8034A000 NTFS (symbol loading deferred) NTFS.SYS
8064E000 - 80662000 HAL (symbol loading deferred) HAL
80662000 - 8066A7E0 QL10WNT (symbol loading deferred) QL10WNT.SYS
8066C000 - 8066DB40 DISKPERF (symbol loading deferred)
DISKPERF.SYS
8069E000 - 806AA000 AIC78XX (symbol loading deferred)
AIC78XX.SYS
806AA000 - 806B6000 SCSIPORT (symbol loading deferred)
SCSIPORT.SYS
806B6000 - 806BBBE0 DISK (symbol loading deferred)
DISK.SYS
806BC000 - 806C17A0 CLASS2 (symbol loading deferred)
CLASS2.SYS
DE000000 - DE1E4000 WIN32K (symbol loading deferred)
J:\winnt40\system32\WIN32K.SYS
F1020000 - F103A000 MGA_MIL (symbol loading deferred)
MGA_MIL.SYS
F1040000 - F105A000 CDFS (symbols converted & loaded)
J:\winnt40\symbols\SYS\CDFS.DBG
F1060000 - F107C000 AFD (symbol loading deferred) AFD.SYS
F1080000 - F109E000 MUP (symbol loading deferred) MUP.SYS
F1512000 - F151C000 CQL10WNT (symbol loading deferred) CQL10WNT
F1536000 - F1540000 CDROM (symbol loading deferred) CDROM.SYS
F1590000 - F159A000 I8042PRT (symbol loading deferred)
I8042PRT.SYS
F15C6000 - F15D0000 MSFS (symbol loading deferred) MSFS.SYS
F15D8000 - F15EA000 NPFS (symbol loading deferred) NPFS.SYS
F1668000 - F1678000 DC21X4 (symbol loading deferred) DC21X4.SYS
F16C2000 - F16D0000 NETBIOS (symbol loading deferred) NETBIOS.SYS
F1752000 - F1764000 SERIAL (symbol loading deferred) SERIAL.SYS
F190C000 - F1912000 DISKDUMP (symbol loading deferred)
DISKDUMP.SYS
F1924000 - F192C000 FLOPPY (symbol loading deferred) FLOPPY.SYS
F196C000 - F1974000 VIDEOPRT (symbol loading deferred)
VIDEOPRT.SYS
F1984000 - F198A000 VGA (symbol loading deferred) VGA.SYS
F1A80000 - F1A84000 KSECDD (symbol loading deferred) KSECDD.SYS
F1A88000 - F1A8C000 MOUCLASS (symbol loading deferred)
MOUCLASS.SYS
F1A90000 - F1A94000 KBDCLASS (symbol loading deferred)
KBDCLASS.SYS
F1ABC000 - F1AC0000 TDI (symbol loading deferred) TDI.SYS
F1ACC000 - F1AD0000 PARPORT (symbol loading deferred) PARPORT.SYS
F1ADC000 - F1AE0000 PARVDM (symbol loading deferred) PARVDM.SYS
F1BF4000 - F1BF6000 NULL (symbol loading deferred) NULL.SYS
F1BF6000 - F1BF8000 BEEP (symbol loading deferred) BEEP.SYS
FA892000 - FA902000 SRV (symbol loading deferred) SRV.SYS
FA902000 - FA97C000 RDR (symbol loading deferred) RDR.SYS
FA9CC000 - FAA02000 NETBT (symbol loading deferred) NETBT.SYS
FAA02000 - FAA40000 TCPIP (symbol loading deferred) TCPIP.SYS
FAA40000 - FAA6E000 NBF (symbol loading deferred) NBF.SYS
FAABE000 - FAAFA000 FASTFAT (symbol loading deferred) FASTFAT.SYS
FAB92000 - FAB98000 PARALLEL (symbol loading deferred)
PARALLEL.SYS
FB39A000 - FB3C4000 MGA (symbol loading deferred)
J:\winnt40\system32\MGA.DLL
FB3C4000 - FB3FC000 NDIS (symbol loading deferred) NDIS.SYS
KDalpha> *
KDalpha> *
KDalpha> * drivers loaded in memory
KDalpha> *
KDalpha> !drivers
Loaded System Driver Summary
Base Code Size Data Size Driver Name Creation Time
80080000 111a00 (1094 kb) 1f5c0 ( 125 kb) ntoskrnl.exe Fri Dec 13 20:44:19 1996
8064e000 d9e0 ( 54 kb) 7860 ( 30 kb) hal.dll Mon Mar 17 13:29:49 1997
8069e000 9220 ( 36 kb) 2c00 ( 11 kb) aic78xx.sys Thu Nov 21 15:20:43 1996
806aa000 a340 ( 40 kb) 2220 ( 8 kb) SCSIPORT.SYS Fri Nov 15 15:48:13 1996
80662000 2e00 ( 11 kb) 5760 ( 21 kb) ql10wnt.sys Wed Jul 17 11:29:06 1996
806b6000 4c60 ( 19 kb) d00 ( 3 kb) Disk.sys Mon Nov 18 15:37:19 1996
806bc000 4580 ( 17 kb) f80 ( 3 kb) CLASS2.SYS Fri Dec 06 14:27:52 1996
8066c000 1200 ( 4 kb) 700 ( 1 kb) Diskperf.sys Wed Jul 17 00:30:38 1996
802d0000 73700 ( 461 kb) 122a0 ( 72 kb) Ntfs.sys Fri Dec 06 14:28:50 1996
f1924000 6280 ( 24 kb) 12e0 ( 4 kb) Floppy.SYS Wed Jul 17 00:30:39 1996
f1536000 86e0 ( 33 kb) 1460 ( 5 kb) Cdrom.SYS Wed Jul 17 00:30:52 1996
f1bf4000 4a0 ( 1 kb) 4a0 ( 1 kb) Null.SYS Wed Jul 17 00:30:46 1996
f1a80000 26a0 ( 9 kb) 1000 ( 4 kb) KSecDD.SYS Wed Jul 17 20:34:22 1996
f1bf6000 b40 ( 2 kb) 660 ( 1 kb) Beep.SYS Wed Jul 17 00:30:29 1996
f1590000 7340 ( 28 kb) 1d00 ( 7 kb) i8042prt.sys Mon Aug 05 20:19:26 1996
f1a88000 24c0 ( 9 kb) dc0 ( 3 kb) mouclass.sys Mon Aug 05 20:19:38 1996
f1a90000 24c0 ( 9 kb) dc0 ( 3 kb) kbdclass.sys Wed Jul 17 00:30:44 1996
f196c000 4c20 ( 19 kb) 1da0 ( 7 kb) VIDEOPRT.SYS Tue Jul 23 13:08:52 1996
f1020000 e420 ( 57 kb) a380 ( 40 kb) mga_mil.SYS Wed Jul 17 00:30:20 1996
f1984000 4260 ( 16 kb) 1300 ( 4 kb) vga.sys Wed Jul 17 00:30:23 1996
f15c6000 6fc0 ( 27 kb) 2080 ( 8 kb) Msfs.SYS Wed Jul 17 00:31:22 1996
f15d8000 d860 ( 54 kb) 2c40 ( 11 kb) Npfs.SYS Wed Jul 17 00:31:21 1996
fb3c4000 2ccc0 ( 179 kb) 9c00 ( 39 kb) NDIS.SYS Mon Dec 16 13:15:49 1996
de000000 195d60 (1623 kb) 4d020 ( 308 kb) win32k.sys Fri Dec 13 17:03:47 1996
fb39a000 229a0 ( 138 kb) 5440 ( 21 kb) mga.dll Thu Nov 21 16:38:07 1996
f1040000 15200 ( 84 kb) 3b80 ( 14 kb) Cdfs.SYS Tue Nov 26 13:09:05 1996
faabe000 31940 ( 198 kb) 87a0 ( 33 kb) Fastfat.SYS Wed Oct 30 00:16:37 1996
f1abc000 2340 ( 8 kb) 10a0 ( 4 kb) TDI.SYS Wed Jul 17 11:31:28 1996
faa40000 26dc0 ( 155 kb) 5a00 ( 22 kb) nbf.sys Wed Sep 25 20:53:07 1996
faa02000 32f40 ( 203 kb) 9f40 ( 39 kb) tcpip.sys Mon Nov 18 15:59:57 1996
fa9cc000 2bfc0 ( 175 kb) 82c0 ( 32 kb) netbt.sys Sat Dec 14 13:43:26 1996
f1668000 d0e0 ( 52 kb) 20e0 ( 8 kb) DC21X4.sys Thu Jul 18 20:49:38 1996
f1060000 16ac0 ( 90 kb) 44a0 ( 17 kb) afd.sys Tue Dec 10 14:44:43 1996
f16c2000 b780 ( 45 kb) 1e40 ( 7 kb) netbios.sys Tue Nov 26 14:23:50 1996
f1acc000 28a0 ( 10 kb) f20 ( 3 kb) Parport.SYS Wed Jul 17 00:30:48 1996
fab92000 4640 ( 17 kb) 1120 ( 4 kb) Parallel.SYS Wed Jul 17 00:30:49 1996
f1adc000 1640 ( 5 kb) a20 ( 2 kb) ParVdm.SYS Wed Jul 17 00:30:49 1996
f1752000 dc40 ( 55 kb) 33e0 ( 12 kb) Serial.SYS Wed Jul 17 00:31:06 1996
fa902000 67be0 ( 414 kb) 11ba0 ( 70 kb) rdr.sys Tue Nov 26 14:22:07 1996
fa892000 5f380 ( 380 kb) 10180 ( 64 kb) srv.sys Tue Dec 10 16:04:24 1996
f1080000 16d60 ( 91 kb) 6200 ( 24 kb) mup.sys Mon Nov 18 15:10:25 1996
TOTAL: 5d39c0 (5966 kb) 1166a0 (1113 kb) ( 0 kb 0 kb)
KDalpha> *
KDalpha> * virtual memory usage
KDalpha> *
KDalpha> !vm
*** Virtual Memory Usage ***
Physical Memory: 16368 (130944 Kb)
Available Pages: 8366 ( 66928 Kb)
Modified Pages: 760 ( 6080 Kb)
NonPagedPool Usage: 233 ( 1864 Kb)
PagedPool 0 Usage: 1355 ( 10840 Kb)
PagedPool 1 Usage: 139 ( 1112 Kb)
PagedPool 2 Usage: 139 ( 1112 Kb)
PagedPool Usage: 1633 ( 13064 Kb)
Shared Commit: 118 ( 944 Kb)
Shared Process: 500 ( 4000 Kb)
Total Private: 3433 ( 27464 Kb)
ntvdm.exe 1408 ( 11264 Kb)
SPOOLSS.EXE 266 ( 2128 Kb)
services.exe 207 ( 1656 Kb)
inetinfo.exe 179 ( 1432 Kb)
lsass.exe 143 ( 1144 Kb)
EXPLORER.EXE 118 ( 944 Kb)
RPCSS.EXE 115 ( 920 Kb)
winfile.exe 112 ( 896 Kb)
SNMP.EXE 103 ( 824 Kb)
eventvwr.exe 91 ( 728 Kb)
winmsd.exe 88 ( 704 Kb)
WINLOGON.EXE 87 ( 696 Kb)
TCPSVCS.EXE 81 ( 648 Kb)
cdplayer.exe 74 ( 592 Kb)
csrss.exe 73 ( 584 Kb)
perfmon.exe 70 ( 560 Kb)
CMD.EXE 65 ( 520 Kb)
TASKMGR.EXE 59 ( 472 Kb)
nddeagnt.exe 53 ( 424 Kb)
smss.exe 34 ( 272 Kb)
System 7 ( 56 Kb)
PagedPool Commit: 1633 ( 13064 Kb)
Driver Commit: 357 ( 2856 Kb)
Committed pages: 6044 ( 48352 Kb)
Commit limit: 55192 (441536 Kb)
KDalpha> *
KDalpha> * NonPaged pool summary
KDalpha> *
KDalpha> !frag
NonPaged Pool Fragmentation
Number of fragments: 155 consuming 36896 bytes
NonPagedPool Usage: 1908736 bytes
KDalpha> *
KDalpha> * error log left in memory
KDalpha> *
KDalpha> !errlog
errorlog is empty
KDalpha> * IRP usage (in pool)
KDalpha> *
KDalpha> !irpfind
Searching NonPaged pool (8093a000 : 83914000) for Tag: Irp
80b432a8 Thread 80bd3600 current stack belongs to \Driver\Afd
80b4d928 Thread 00000000 current stack belongs to \Driver\Cdrom
80b58008 Thread 00000000 current stack belongs to \Driver\Cdrom
80b5c008 Thread 80b5e020 current stack belongs to \FileSystem\Ntfs
80b5e848 Thread 80b5e020 current stack belongs to \FileSystem\Ntfs
80b5f148 Thread 80b5e020 current stack belongs to \FileSystem\Ntfs
80b604e8 Thread 80b5e020 current stack belongs to \FileSystem\Ntfs
80b62368 Thread 80b5e020 current stack belongs to \FileSystem\Ntfs
80b76c08 Thread 80c5ca40 current stack belongs to \Driver\Kbdclass
80b835e8 Thread 80b3a020 current stack belongs to \FileSystem\Cdfs
80b85228 Thread 00000000 Irp is complete (CurrentLocation 3 > StackCount 2)
80b89da8 Thread 80b87700 current stack belongs to \Driver\NetBT
80b8a008 Thread 80c66d80 current stack belongs to \FileSystem\Cdfs
80b8c888 Thread 80d078e0 current stack belongs to \FileSystem\Cdfs
80b92568 Thread 00000000 Irp is complete (CurrentLocation 3 > StackCount 2)
80b93ec8 Thread 00000000 current stack belongs to \Driver\Cdrom
80b9c528 Thread 80c470c0 current stack belongs to \FileSystem\Msfs
80b9c648 Thread 80bbfd20 current stack belongs to \Driver\Afd
80ba2348 Thread 80bb0020 current stack belongs to \Driver\Afd
80ba7068 Thread 80bb22a0 current stack belongs to \Driver\Afd
80bce6c8 Thread 80bb3180 current stack belongs to \FileSystem\Npfs
80bcf1e8 Thread 80baeda0 current stack belongs to \Driver\Afd
80bcf508 Thread 80bb7b80 current stack belongs to \Driver\Afd
80bd1288 Thread 80bb2600 current stack belongs to \Driver\Afd
80bd51a8 Thread 00000000 current stack belongs to \Driver\Cdrom
80be3ec8 Thread 80c5c360 current stack belongs to \Driver\Mouclass
80c44008 Thread 80bb2600 current stack belongs to \Driver\Afd
80c4a608 Thread 80babb40 current stack belongs to \FileSystem\Npfs
80c4cda8 Thread 80be2020 current stack belongs to \FileSystem\Npfs
80c4f508 Thread 80c46760 current stack belongs to \FileSystem\Npfs
80c59248 Thread 00000000 current stack belongs to \Driver\Cdrom
80c6fc88 Thread 80badca0 current stack belongs to \FileSystem\Npfs
80c6fda8 Thread 80c5a7c0 current stack belongs to \FileSystem\Npfs
80c6fec8 Thread 80bb22a0 current stack belongs to \Driver\Afd
80c703c8 Thread 80bb2600 current stack belongs to \Driver\Afd
80ca1748 Thread 00000000 current stack belongs to \Driver\Cdrom
80ce5648 Thread 00000000 current stack belongs to \Driver\Cdrom
80cf7a28 Thread 80bd891c Irp is complete (CurrentLocation 3 > StackCount 1)
38 active irps
KDalpha> *
KDalpha> * process active at time of STOP
KDalpha> *
KDalpha> !process
PROCESS 80c6afe0 Cid: 001c Peb: 7ffde000 ParentCid: 0014
DirBase: 0029e405 ObjectTable: 80c6b348 TableSize: 206.
Image: csrss.exe
VadRoot 80b748a8 Clone 0 Private 63. Modified 86. Locked 0.
80C6B18C MutantState Signalled OwningThread 0
Token e132b230
ElapsedTime 0:19:25.0851
UserTime 0:00:00.0117
KernelTime 0:00:00.0382
QuotaPoolUsage[PagedPool] 21659
QuotaPoolUsage[NonPagedPool] 3692
Working Set Sizes (now,min,max) (260, 50, 345) (2080KB, 400KB, 2760KB)
PeakWorkingSetSize 260
VirtualSize 25 Mb
PeakVirtualSize 27 Mb
PageFaultCount 679
MemoryPriority BACKGROUND
BasePriority 13
CommitCharge 73
THREAD 80c66d80 Cid 1c.1d Teb: 7ffda000 Win32Thread: e1337e88 RUNNING
THREAD 80c63da0 Cid 1c.1e Teb: 7ffd8000 Win32Thread: e1341c08 WAIT: (WrLpcReceive) UserMode Non-Alertable
80c71608 Semaphore Limit 0x7fffffff
THREAD 80c63b40 Cid 1c.1f Teb: 7ffd6000 Win32Thread: 00000000 WAIT: (WrLpcReceive) UserMode Non-Alertable
80c6e828 Semaphore Limit 0x7fffffff
THREAD 80c638e0 Cid 1c.20 Teb: 7ffae000 Win32Thread: 00000000 WAIT: (WrLpcReceive) UserMode Non-Alertable
80c6c548 Semaphore Limit 0x7fffffff
THREAD 80c5f140 Cid 1c.23 Teb: 7ffdc000 Win32Thread: e13472c8 WAIT: (WrLpcReceive) UserMode Non-Alertable
80c71608 Semaphore Limit 0x7fffffff
THREAD 80b77ac0 Cid 1c.7f Teb: 7ffac000 Win32Thread: e1cbc5e8 WAIT: (WrLpcReceive) UserMode Non-Alertable
80c71608 Semaphore Limit 0x7fffffff
THREAD 80b70020 Cid 1c.84 Teb: 7ffaa000 Win32Thread: e137b6c8 WAIT: (WrUserRequest) UserMode Non-Alertable
80b74160 SynchronizationEvent
KDalpha> * NT system services process = Client Server Runtime SubSystem
KDalpha> *
KDalpha> * more details about NonPaged Pool
KDalpha> *
KDalpha> !frag 1
NonPaged Pool Fragmentation
index: 0 number of fragments: 57 bytes: 1824
index: 1 number of fragments: 28 bytes: 1792
index: 2 number of fragments: 3 bytes: 288
index: 3 number of fragments: 3 bytes: 384
index: 4 number of fragments: 3 bytes: 480
index: 5 number of fragments: 3 bytes: 576
index: 6 number of fragments: 5 bytes: 1120
index: 7 number of fragments: 2 bytes: 512
index: 8 number of fragments: 41 bytes: 13504
index: 9 number of fragments: 6 bytes: 3936
index: 10 number of fragments: 2 bytes: 2656
index: 11 number of fragments: 0 bytes: 0
index: 12 number of fragments: 0 bytes: 0
index: 13 number of fragments: 0 bytes: 0
index: 14 number of fragments: 0 bytes: 0
index: 15 number of fragments: 0 bytes: 0
index: 16 number of fragments: 0 bytes: 0
index: 17 number of fragments: 1 bytes: 4608
index: 18 number of fragments: 1 bytes: 5216
index: 19 number of fragments: 0 bytes: 0
index: 20 number of fragments: 0 bytes: 0
index: 21 number of fragments: 0 bytes: 0
index: 22 number of fragments: 0 bytes: 0
index: 23 number of fragments: 0 bytes: 0
index: 24 number of fragments: 0 bytes: 0
Number of fragments: 155 consuming 36896 bytes
NonPagedPool Usage: 1908736 bytes
KDalpha> * lock usage
KDalpha> *
KDalpha> !locks
**** DUMP OF ALL RESOURCE OBJECTS ****
KD: Scanning for held locks..........
Resource @ CDFS!CdData (0xf1042258) Exclusively owned
Threads: 80d078e0-01
KD: Scanning for held locks..........................
Resource @ 0x80b4b5e0 Exclusively owned
Contention Count = 31
NumberOfExclusiveWaiters = 1
Threads: 80c66d80-01
KD: Scanning for held locks..
Resource @ 0x80d01dc0 Shared 1 owning threads
Threads: 80d07680-01
Resource @ 0x80b78b48 Shared 1 owning threads
Threads: 80d07680-01
Resource @ 0x80d01cc0 Shared 1 owning threads
Threads: 80d07680-01
Resource @ 0x80d00dc0 Shared 1 owning threads
Threads: 80d07b40-01
Resource @ 0x80d01bc0 Shared 1 owning threads
Threads: 80d07680-01
Resource @ 0x80d009c0 Shared 1 owning threads
Threads: 80d07680-01
Resource @ 0x80d007c0 Shared 1 owning threads
Threads: 80d07680-01
Resource @ 0x80d010c0 Shared 1 owning threads
Threads: 80d078e0-01
KD: Scanning for held locks.
1177 total locks, 10 locks currently held
KDalpha> * memory usage
KDalpha> * memory usage
KDalpha> *
KDalpha> !memusage
loading PFN database.......................................................................................................
..............................................................................................
Zeroed: 3443 ( 27544 kb)
Free: 6 ( 48 kb)
Standby: 4917 ( 39336 kb)
Modified: 760 ( 6080 kb)
ModifiedNoWrite: 0 ( 0 kb)
Active/Valid: 7258 ( 58064 kb)
Transition: 0 ( 0 kb)
Unknown: 0 ( 0 kb)
TOTAL: 16384 (131072 kb)
Usage Summary in KiloBytes (Kb):
Control Valid Standby Dirty Shared Locked PageTables name
unable to get subsection 6e006f00
80246695 21216 0 5008 440 0 0 Name Not Available
80ca33a8 1240 0 0 0 0 0 No Name for File
80c95b68 8 0 0 0 0 0 No Name for File
80b4f248 160 88 0 0 0 0 mapped_file( perfmon.exe )
80b5a588 0 136 0 0 0 0 mapped_file( CMD.EXE )
80b6dc08 16 0 0 0 0 0 mapped_file( wfwnet.drv )
80c77288 560 488 0 88 0 0 mapped_file( SHELL32.DLL )
80b428e8 0 8 0 0 0 0 mapped_file( Test Manager.lnk )
80c66868 0 128 0 0 0 0 mapped_file( acledit.dll )
80c94948 104 0 0 0 0 0 No Name for File
80c88868 128 0 0 0 0 0 No Name for File
80c8a488 32 0 0 0 0 0 No Name for File
80b521a8 0 8 0 0 0 0 mapped_file( sortsym.lnk )
80b4eb88 8 0 0 0 0 0 No Name for File
80b61588 0 56 0 0 0 0 mapped_file( setup.exe )
80c7a7c8 120 128 0 120 0 0 mapped_file( gdi32.dll )
80ca0488 0 584 0 0 0 0 mapped_file( NTDLL.DLL )
80c4e1c8 0 8 0 0 0 0 No Name for File
80ce47a8 1040 0 0 0 0 0 No Name for File
80c99908 128 0 0 0 0 0 No Name for File
80c93288 64 0 0 0 0 0 No Name for File
80b5c6e8 232 88 0 0 0 0 mapped_file( CMD.EXE )
80b59dc8 24 16 0 0 0 0 mapped_file( mcicda.dll )
80c77ce8 200 168 0 176 0 0 mapped_file( ADVAPI32.DLL )
80b612a8 0 216 0 0 0 0 mapped_file( ShellIconCache )
80ca02a8 392 112 0 360 0 0 mapped_file( NTDLL.DLL )
80c8e4a8 0 504 0 0 0 0 mapped_file( AUTOCHK.EXE )
80ca3c48 8 0 0 0 0 0 No Name for File
80c75048 240 248 0 176 0 0 mapped_file( COMCTL32.DLL )
80b42228 0 8 0 0 0 0 mapped_file( Calculator.lnk )
80c8da48 8 0 0 0 0 0 No Name for File
80c955a8 8 0 0 0 0 0 No Name for File
80b61688 0 32 0 0 0 0 mapped_file( rundll32.exe )
80b5d1c8 24 24 0 0 0 0 mapped_file( linkinfo.dll )
80c971e8 128 0 0 0 0 0 No Name for File
80c8fc28 40 24 0 0 0 0 mapped_file( smss.exe )
80c984a8 72 0 0 0 0 0 No Name for File
80b462e8 0 8 0 0 0 0 mapped_file( Peer Web Services Setup.lnk )
80b43888 0 8 0 0 0 0 mapped_file( User Manager.lnk )
80b41a68 0 8 0 0 0 0 mapped_file( Chat.lnk )
80c5fea8 176 136 0 88 0 0 mapped_file( netapi32.dll )
80b56e08 40 104 0 0 0 0 mapped_file( eventvwr.exe )
80b75768 904 1568 0 0 0 0 mapped_file( ntvdm.exe )
80b80628 168 152 0 0 0 0 mapped_file( EXPLORER.EXE )
80c85f88 72 0 0 0 0 0 No Name for File
80c684c8 0 312 0 0 0 0 mapped_file( WINSRV.DLL )
80b5db68 0 200 0 0 0 0 mapped_file( url.dll )
80c892e8 80 0 0 0 0 0 No Name for File
80b3cee8 0 152 0 0 0 0 mapped_file( ULIB.DLL )
80b620a8 0 216 0 0 0 0 mapped_file( SYSSETUP.DLL )
80b55588 0 336 0 0 0 0 mapped_file( winfile.exe )
80b4e628 0 8 0 0 0 0 mapped_file( Process Walker.lnk )
80c82ca8 72 0 0 0 0 0 No Name for File
80c92188 96 0 0 0 0 0 No Name for File
80c8d1a8 0 304 0 0 0 0 mapped_file( gdi32.dll )
80c8d9e8 0 568 0 0 0 0 mapped_file( USER32.DLL )
80c6fba8 8 0 0 0 0 0 No Name for File
80cf3088 96 0 0 0 0 0 No Name for File
80c94f08 0 528 0 0 0 0 mapped_file( RPCRT4.DLL )
80c41a48 64 64 0 8 0 0 mapped_file( SysEvent.Evt )
80c76008 408 72 0 336 0 0 mapped_file( RPCRT4.DLL )
80c987c8 0 408 0 0 0 0 mapped_file( ADVAPI32.DLL )
80c8d2e8 0 576 0 0 0 0 mapped_file( KERNEL32.DLL )
80c69708 16 104 0 16 0 0 mapped_file( locale.nls )
80c7b468 392 80 0 360 0 0 mapped_file( KERNEL32.DLL )
80b40088 0 8 0 0 0 0 mapped_file( Phone Dialer.lnk )
80b63008 48 16 0 0 0 0 mapped_file( ntshrui.dll )
80ca2ea8 160 0 0 0 0 0 No Name for File
80c99b28 0 8 0 0 0 0 No Name for File
80c99c68 0 8 0 0 0 0 No Name for File
80c90988 0 336 0 0 0 0 mapped_file( crtdll.dll )
80c97f88 160 0 0 0 0 0 No Name for File
80c93aa8 0 1824 0 0 0 0 mapped_file( SHELL32.DLL )
80c8db48 0 8 0 0 0 0 No Name for File
80c95068 0 8 0 0 0 0 No Name for File
80c98908 0 8 0 0 0 0 No Name for File
80c99968 0 8 0 0 0 0 No Name for File
80c93dc8 0 8 0 0 0 0 No Name for File
80c97888 0 8 0 0 0 0 No Name for File
80c97748 0 152 0 0 0 0 mapped_file( olecli32.dll )
80c79108 384 96 0 352 0 0 mapped_file( USER32.DLL )
80c915a8 0 1184 0 0 0 0 mapped_file( OLE32.DLL )
80c98ec8 0 360 0 0 0 0 mapped_file( COMDLG32.DLL )
80c779a8 40 176 0 40 0 0 mapped_file( COMDLG32.DLL )
80c91608 0 8 0 0 0 0 No Name for File
80c93be8 0 8 0 0 0 0 No Name for File
80c93588 0 24 0 0 0 0 mapped_file( lz32.dll )
80c76ee8 16 8 0 16 0 0 mapped_file( lz32.dll )
80ca0828 0 8 0 0 0 0 No Name for File
80c977a8 0 8 0 0 0 0 No Name for File
80b602c8 0 56 0 0 0 0 mapped_file( systray.exe )
80c75688 0 144 0 0 0 0 mapped_file( olethk32.dll )
80c75488 0 8 0 0 0 0 mapped_file( olethk32.dll )
80c75228 0 576 0 0 0 0 mapped_file( COMCTL32.DLL )
80ca3128 0 960 0 0 0 0 mapped_file( OLEAUT32.DLL )
80c960e8 0 8 0 0 0 0 No Name for File
80c77628 0 8 0 0 0 0 mapped_file( crtdll.dll )
80c97448 0 64 0 0 0 0 mapped_file( version.dll )
80c76448 24 40 0 24 0 0 mapped_file( version.dll )
80c81688 0 64 0 0 0 0 mapped_file( OLECNV32.DLL )
80c742c8 0 2632 0 0 0 0 mapped_file( ntvdm.exe )
80c74d28 0 104 0 0 0 0 mapped_file( MPR.DLL )
80c74b28 32 56 0 32 0 0 mapped_file( MPR.DLL )
80c74808 0 568 0 0 0 0 mapped_file( msvcrt.dll )
80c76b68 0 8 0 0 0 0 mapped_file( olecli32.dll )
80ca06e8 0 56 0 0 0 0 mapped_file( olesvr32.dll )
80c767c8 0 8 0 0 0 0 mapped_file( olesvr32.dll )
80c75cc8 0 8 0 0 0 0 mapped_file( OLEAUT32.DLL )
80c758e8 0 8 0 0 0 0 mapped_file( OLECNV32.DLL )
80c73ec8 0 568 0 0 0 0 mapped_file( WOW32.DLL )
80c74008 368 224 0 216 0 0 mapped_file( OLE32.DLL )
80b3e3a8 0 8 0 0 0 0 mapped_file( Volume Control.lnk )
80c745e8 296 184 0 280 0 0 mapped_file( msvcrt.dll )
80c81bc8 0 8 0 0 0 0 No Name for File
80c755a8 0 8 0 0 0 0 No Name for File
80c6d2e8 0 1936 0 0 0 0 mapped_file( WIN32K.SYS )
80b3c388 0 8 0 0 0 0 mapped_file( Freecell.lnk )
80c8b3e8 0 8 0 0 0 0 No Name for File
80c759e8 0 8 0 0 0 0 No Name for File
80c75148 0 8 0 0 0 0 No Name for File
80c74c48 0 8 0 0 0 0 No Name for File
80c74728 0 8 0 0 0 0 No Name for File
80c85508 96 0 0 0 0 0 No Name for File
80b6e888 0 32 0 0 0 0 mapped_file( ntdos.sys )
80c92288 80 0 0 0 0 0 No Name for File
80c6d1a8 1464 288 0 0 0 0 mapped_file( WIN32K.SYS )
80c73ce8 208 104 0 0 0 0 mapped_file( WOW32.DLL )
80c6ede8 8 0 0 0 0 0 No Name for File
80c6daa8 0 8 0 0 0 0 No Name for File
80c84a68 16 0 0 0 0 0 No Name for File
80c737e8 8 0 0 0 0 0 No Name for File
80c82208 32 0 0 0 0 0 No Name for File
80ca21c8 8 0 0 0 0 0 No Name for File
80c682c8 240 40 0 0 0 0 mapped_file( WINSRV.DLL )
80ca2c28 8 0 0 0 0 0 No Name for File
80c6c8e8 0 8 0 0 0 0 No Name for File
80c6c7c8 8 0 0 0 0 0 mapped_file( vgasys.fon )
80c6c4e8 0 8 0 0 0 0 No Name for File
80c6c3c8 8 0 0 0 0 0 mapped_file( vgaoem.fon )
80c6c0e8 0 8 0 0 0 0 No Name for File
80c6dd48 0 8 0 0 0 0 No Name for File
80c6d768 0 8 0 0 0 0 No Name for File
80c69ac8 32 56 0 32 0 0 mapped_file( unicode.nls )
80c74128 0 8 0 0 0 0 No Name for File
80c87d48 32 0 0 0 0 0 No Name for File
80c73de8 8 0 0 0 0 0 No Name for File
80c6a088 0 56 0 0 0 0 mapped_file( BASESRV.DLL )
80c6b1e8 8 8 0 0 0 0 mapped_file( csrss.exe )
80c67308 0 168 0 0 0 0 mapped_file( MGA.DLL )
80c6d828 8 0 0 0 0 0 No Name for File
80c6bf88 0 8 0 0 0 0 mapped_file( vgafix.fon )
80c6a5a8 32 24 0 0 0 0 mapped_file( csrsrv.dll )
80c69e68 40 24 0 0 0 0 mapped_file( BASESRV.DLL )
80c67448 0 168 0 0 0 0 mapped_file( MGA.DLL )
80c5e7a8 112 128 0 0 0 0 mapped_file( winmm.dll )
80c6b508 0 8 0 0 0 0 No Name for File
80c6a968 0 8 0 0 0 0 No Name for File
80c6a248 0 8 0 0 0 0 No Name for File
80c69468 0 8 0 0 0 0 No Name for File
80c690a8 0 8 0 0 0 0 No Name for File
80c68ce8 0 8 0 0 0 0 No Name for File
80c67e48 0 8 0 0 0 0 No Name for File
80c67568 0 8 0 0 0 0 No Name for File
80c5f908 32 8 0 24 0 0 mapped_file( netrap.dll )
80c5f388 48 24 0 16 0 0 mapped_file( samlib.dll )
80c6a7a8 0 56 0 0 0 0 mapped_file( csrsrv.dll )
80ca2628 472 0 0 0 0 0 No Name for File
80c67c88 24 0 0 0 0 0 mapped_file( marlett.ttf )
80c5e008 0 8 0 0 0 0 No Name for File
80c5faa8 0 8 0 0 0 0 No Name for File
80c634a8 0 216 0 0 0 0 mapped_file( WINLOGON.EXE )
80c5d648 0 8 0 0 0 0 No Name for File
80c5e228 0 32 0 0 0 0 mapped_file( mmdrv.dll )
80c65c08 32 8 0 0 0 0 mapped_file( dosapp.fon )
80c65328 0 8 0 0 0 0 mapped_file( ega80woa.fon )
80c64de8 8 8 0 0 0 0 mapped_file( ega40woa.fon )
80c648e8 8 0 0 0 0 0 mapped_file( cga80woa.fon )
80c69f88 0 8 0 0 0 0 No Name for File
80c69828 0 8 0 0 0 0 No Name for File
80c651c8 0 104 0 0 0 0 mapped_file( CDFS.SYS )
80c64f48 0 104 0 0 0 0 mapped_file( CDFS.SYS )
80c5ab88 16 16 0 16 0 0 mapped_file( rpclts1.dll )
80c68bc8 16 0 0 16 0 0 mapped_file( sorttbls.nls )
80c93d08 64 0 0 0 0 0 No Name for File
80c67608 0 8 0 0 0 0 No Name for File
80c64d08 0 8 0 0 0 0 No Name for File
80c645a8 0 8 0 0 0 0 No Name for File
80c62a08 0 8 0 0 0 0 No Name for File
80c62848 0 8 0 0 0 0 No Name for File
80c626c8 32 72 0 0 0 0 mapped_file( USERENV.DLL )
80c663c8 0 8 0 0 0 0 No Name for File
80c5d828 0 8 0 0 0 0 mapped_file( $winnt$.inf )
80c58d08 88 48 0 0 0 0 mapped_file( UMPNPMGR.DLL )
80c5d488 0 8 0 0 0 0 No Name for File
80c5dd88 0 16 0 0 0 0 mapped_file( KBDUS.DLL )
80c5d328 0 24 0 0 0 0 mapped_file( coure.fon )
80c5ce88 24 40 0 0 0 0 mapped_file( sserife.fon )
80c683e8 0 8 0 0 0 0 No Name for File
80c61b08 176 32 0 0 0 0 mapped_file( LSASRV.DLL )
80c60708 0 144 0 0 0 0 mapped_file( arial.ttf )
80c60048 0 8 0 0 0 0 No Name for File
80c64a48 0 8 0 0 0 0 No Name for File
80c5e3a8 0 8 0 0 0 0 No Name for File
80c4ef28 0 184 0 0 0 0 mapped_file( couri.ttf )
80c59e68 176 24 0 0 0 0 mapped_file( services.exe )
80c5bc68 0 8 0 0 0 0 No Name for File
80c5cfc8 0 16 0 0 0 0 mapped_file( KBDUS.DLL )
80c5b7e8 0 160 0 0 0 0 mapped_file( winnt256.bmp )
80c64348 8 0 0 0 0 0 mapped_file( cga40woa.fon )
80c5b188 0 152 0 0 0 0 mapped_file( MSGINA.DLL )
80c557e8 0 8 0 0 0 0 No Name for File
80c6f328 0 16 0 0 0 0 mapped_file( roman.fon )
80c6f2c8 0 16 0 0 0 0 mapped_file( script.fon )
80c60fc8 0 32 0 0 0 0 mapped_file( smalle.fon )
80c546c8 40 104 0 0 0 0 mapped_file( NETLOGON.DLL )
80c55688 0 144 0 0 0 0 mapped_file( arialbd.ttf )
80c66368 0 8 0 0 0 0 mapped_file( system.ini )
80c66208 0 8 0 0 0 0 No Name for File
80c65d88 16 0 0 0 0 0 No Name for File
80c65928 0 8 0 0 0 0 No Name for File
80c65448 0 8 0 0 0 0 No Name for File
80c65768 0 8 0 0 0 0 No Name for File
80c540a8 0 144 0 0 0 0 mapped_file( ariali.ttf )
80c530c8 0 176 0 0 0 0 mapped_file( cour.ttf )
80c5e968 0 8 0 0 0 0 No Name for File
80c4c848 88 96 0 0 0 0 mapped_file( timesbd.ttf )
80c50608 0 8 0 0 0 0 No Name for File
80c4de08 0 112 0 0 0 0 mapped_file( lucon.ttf )
80c5bbe8 8 0 0 0 0 0 No Name for File
80c6d8e8 0 8 0 0 0 0 No Name for File
80c5b328 0 8 0 0 0 0 No Name for File
80c6fb48 0 8 0 0 0 0 No Name for File
80ca2ca8 0 8 0 0 0 0 No Name for File
80c6f388 0 8 0 0 0 0 No Name for File
80c6f268 0 8 0 0 0 0 No Name for File
80c6f1a8 0 8 0 0 0 0 No Name for File
80c61888 0 8 0 0 0 0 No Name for File
80c60c88 0 8 0 0 0 0 No Name for File
80c4e0a8 0 240 0 0 0 0 mapped_file( FASTFAT.SYS )
80c585a8 8 8 0 0 0 0 mapped_file( lsass.exe )
80c6f488 0 64 0 0 0 0 mapped_file( serife.fon )
80c611c8 0 16 0 0 0 0 mapped_file( modern.fon )
80c53b28 40 24 0 0 0 0 mapped_file( MSV1_0.DLL )
80c68f88 8 56 0 8 0 0 mapped_file( sortkey.nls )
80c53a28 0 8 0 0 0 0 No Name for File
80c52788 0 176 0 0 0 0 mapped_file( courbd.ttf )
80c60ae8 200 24 0 0 0 0 mapped_file( SAMSRV.DLL )
80c4d9c8 0 304 0 0 0 0 mapped_file( l_10646.ttf )
80c4f328 0 8 0 0 0 0 No Name for File
80c95e28 80 88 0 80 0 0 mapped_file( SCHANNEL.DLL )
80c490e8 0 168 0 0 0 0 mapped_file( timesbi.ttf )
80c4ad48 0 184 0 0 0 0 mapped_file( timesi.ttf )
80c4a2a8 0 72 0 0 0 0 mapped_file( wingding.ttf )
80c45568 0 64 0 0 0 0 mapped_file( symbol.ttf )
80c44d48 0 56 0 0 0 0 mapped_file( symbole.fon )
80c5a228 0 8 0 0 0 0 No Name for File
80c593a8 0 8 0 0 0 0 No Name for File
80c4cd08 88 104 0 0 0 0 mapped_file( times.ttf )
80c4d768 24 0 0 0 0 0 No Name for File
80c55148 24 24 0 0 0 0 mapped_file( MSPRIVS.DLL )
80c54bc8 0 168 0 0 0 0 mapped_file( arialbi.ttf )
80c4dee8 0 240 0 0 0 0 mapped_file( FASTFAT.SYS )
80c52328 0 176 0 0 0 0 mapped_file( courbi.ttf )
80c50a48 0 8 0 0 0 0 No Name for File
80c42f08 0 8 0 0 0 0 No Name for File
80c42d68 80 16 0 80 0 0 mapped_file( ws2_32.dll )
80c4dd28 0 8 0 0 0 0 No Name for File
80c40a28 32 16 0 32 0 0 mapped_file( msnsspc.dll )
80c954a8 56 16 0 0 0 0 mapped_file( EVENTLOG.DLL )
80c426c8 16 112 0 8 0 0 mapped_file( SecEvent.Evt )
80c6f3e8 0 8 0 0 0 0 No Name for File
80c4e328 0 8 0 0 0 0 No Name for File
80c55488 0 8 0 0 0 0 No Name for File
80c549c8 0 8 0 0 0 0 No Name for File
80c49788 16 0 0 0 0 0 No Name for File
80c956e8 56 0 0 0 0 0 No Name for File
80c53e28 0 8 0 0 0 0 No Name for File
80c52988 0 8 0 0 0 0 No Name for File
80c469a8 48 32 0 48 0 0 mapped_file( SECURITY.DLL )
80c47608 0 248 0 0 0 0 mapped_file( TCPIP.SYS )
80c41928 0 8 0 0 0 0 No Name for File
80c957c8 24 0 0 24 0 0 mapped_file( wsock32.dll )
80c40d68 0 8 0 0 0 0 No Name for File
80c41ee8 16 8 0 16 0 0 mapped_file( WS2HELP.DLL )
80c4c1a8 0 40 0 0 0 0 mapped_file( netevent.dll )
80c612e8 0 8 0 0 0 0 No Name for File
80c3fce8 0 8 0 0 0 0 No Name for File
80be1988 24 128 0 0 0 0 mapped_file( imagehlp.dll )
80c4d548 0 8 0 0 0 0 No Name for File
80c49168 24 0 0 0 0 0 No Name for File
80c41088 0 184 0 0 0 0 mapped_file( NBF.SYS )
80c52608 16 16 0 16 0 0 mapped_file( rpcltc1.dll )
80c4af08 8 0 0 0 0 0 No Name for File
80c40ea8 0 184 0 0 0 0 mapped_file( NBF.SYS )
80c4e768 24 0 0 0 0 0 No Name for File
80c4a3c8 0 8 0 0 0 0 No Name for File
80c49608 16 0 0 0 0 0 No Name for File
80c3a0a8 0 216 0 0 0 0 mapped_file( NETBT.SYS )
80c42548 8 56 0 0 0 0 mapped_file( AppEvent.Evt )
80c3fec8 0 216 0 0 0 0 mapped_file( NETBT.SYS )
80c3e968 0 64 0 0 0 0 mapped_file( DC21X4.SYS )
80c4c388 16 0 0 0 0 0 No Name for File
80b96aa8 0 8 0 0 0 0 mapped_file( Font Editor.lnk )
80c53488 0 8 0 0 0 0 mapped_file( M Editor.lnk )
80c48008 24 0 0 0 0 0 No Name for File
80c482a8 8 0 0 0 0 0 No Name for File
80c4bbc8 0 8 0 0 0 0 No Name for File
80be81a8 0 112 0 0 0 0 mapped_file( AFD.SYS )
80be7f28 0 112 0 0 0 0 mapped_file( AFD.SYS )
80c4a768 0 24 0 0 0 0 No Name for File
80c45ee8 0 8 0 0 0 0 No Name for File
80c45488 0 24 0 0 0 0 No Name for File
80c45148 8 0 0 0 0 0 No Name for File
80c442a8 8 0 0 0 0 0 No Name for File
80c47e48 32 0 0 0 0 0 No Name for File
80c47be8 8 0 0 0 0 0 No Name for File
80c402c8 0 248 0 0 0 0 mapped_file( TCPIP.SYS )
80c46488 0 8 0 0 0 0 No Name for File
80c43ee8 0 8 0 0 0 0 No Name for File
80c463c8 0 8 0 0 0 0 No Name for File
80bdfaa8 0 72 0 0 0 0 mapped_file( serial.sys )
80c42928 0 8 0 0 0 0 No Name for File
80be5228 48 32 0 0 0 0 mapped_file( SPOOLSS.DLL )
80c40e08 0 8 0 0 0 0 No Name for File
80c56208 0 8 0 0 0 0 No Name for File
80c3a4e8 0 8 0 0 0 0 No Name for File
80c3fa08 0 64 0 0 0 0 mapped_file( DC21X4.SYS )
80bd5b28 0 488 0 0 0 0 mapped_file( RDR.SYS )
80be84c8 0 8 0 0 0 0 No Name for File
80c55228 0 8 0 0 0 0 No Name for File
80c55008 0 8 0 0 0 0 No Name for File
80be2ca8 120 96 0 0 0 0 mapped_file( LOCALSPL.DLL )
80be6988 0 8 0 0 0 0 No Name for File
80c52aa8 0 8 0 0 0 0 No Name for File
80be2b48 0 8 0 0 0 0 No Name for File
80c45b88 0 8 0 0 0 0 No Name for File
80c44e68 8 0 0 0 0 0 No Name for File
80c95cc8 32 0 0 0 0 0 No Name for File
80be1f88 0 24 0 0 0 0 mapped_file( parallel.sys )
80be1548 0 16 0 0 0 0 mapped_file( parvdm.sys )
80c46248 0 8 0 0 0 0 No Name for File
80bdcb08 96 56 0 0 0 0 mapped_file( RPCSS.EXE )
80c70f48 8 0 0 0 0 0 No Name for File
80be6ea8 32 32 0 0 0 0 mapped_file( SPOOLSS.EXE )
80bda8a8 80 24 0 8 0 0 mapped_file( MSWSOCK.DLL )
80bd5908 0 8 0 0 0 0 No Name for File
80be09c8 24 104 0 16 0 0 mapped_file( winspool.drv )
80be7b48 0 8 0 0 0 0 No Name for File
80be08c8 16 16 0 0 0 0 mapped_file( LOCALMON.DLL )
80bdd4c8 16 16 0 0 0 0 mapped_file( pjlmon.dll )
80be71e8 0 8 0 0 0 0 No Name for File
80bda5a8 24 120 0 0 0 0 mapped_file( XACTSRV.DLL )
80bdba08 32 8 0 0 0 0 mapped_file( winprint.dll )
80bd9c68 56 16 0 0 0 0 mapped_file( BROWSER.DLL )
80bd7d88 80 16 0 0 0 0 mapped_file( WKSSVC.DLL )
80c45648 16 0 0 0 0 0 No Name for File
80c47348 0 16 0 0 0 0 mapped_file( tdi.sys )
80c47888 0 16 0 0 0 0 mapped_file( tdi.sys )
80c44c68 8 0 0 0 0 0 No Name for File
80be75c8 0 56 0 0 0 0 mapped_file( NETBIOS.SYS )
80be2e48 0 16 0 0 0 0 mapped_file( parport.sys )
80be35c8 0 16 0 0 0 0 mapped_file( parport.sys )
80be2fa8 0 24 0 0 0 0 mapped_file( parallel.sys )
80c48328 0 8 0 0 0 0 No Name for File
80be13e8 0 16 0 0 0 0 mapped_file( parvdm.sys )
80bdfda8 0 72 0 0 0 0 mapped_file( serial.sys )
80c6f4e8 0 8 0 0 0 0 No Name for File
80bd2188 0 488 0 0 0 0 mapped_file( RDR.SYS )
80bdbec8 112 16 0 0 0 0 mapped_file( srvsvc.dll )
80bce668 0 448 0 0 0 0 mapped_file( SRV.SYS )
80bd7c68 48 16 0 48 0 0 mapped_file( RNR20.DLL )
80be3488 0 8 0 0 0 0 No Name for File
80be3168 0 8 0 0 0 0 No Name for File
80bd72e8 16 40 0 0 0 0 mapped_file( TCPSVCS.EXE )
80bcc588 48 80 0 0 0 0 mapped_file( WIN32SPL.DLL )
80bd3b48 32 24 0 0 0 0 mapped_file( NTLMSSPS.DLL )
80be22e8 0 8 0 0 0 0 No Name for File
80be7708 0 56 0 0 0 0 mapped_file( NETBIOS.SYS )
80be0688 0 8 0 0 0 0 No Name for File
80bd4168 0 400 0 0 0 0 mapped_file( setupapi.dll )
80be07a8 0 24 0 0 0 0 mapped_file( scsiprnt.sys )
80be04c8 0 24 0 0 0 0 mapped_file( scsiprnt.sys )
80bdedc8 0 8 0 0 0 0 No Name for File
80bded68 0 8 0 0 0 0 No Name for File
80be6a48 0 8 0 0 0 0 No Name for File
80bd98e8 0 8 0 0 0 0 No Name for File
80bd61a8 0 8 0 0 0 0 No Name for File
80bd2f28 24 16 0 0 0 0 mapped_file( SIMPTCP.DLL )
80bd3e68 32 24 0 16 0 0 mapped_file( RPCLTSCM.DLL )
80bb8b48 16 16 0 0 0 0 mapped_file( gdmib.dll )
80bb8888 16 8 0 0 0 0 mapped_file( gdapi.dll )
80bb8488 16 16 0 0 0 0 mapped_file( ftpmib.dll )
80bb6008 16 8 0 0 0 0 mapped_file( ftpsapi2.dll )
80c496e8 0 8 0 0 0 0 No Name for File
80bdacc8 8 16 0 0 0 0 mapped_file( ntlsapi.dll )
80bcd5c8 0 448 0 0 0 0 mapped_file( SRV.SYS )
80bdfe08 0 8 0 0 0 0 No Name for File
80be2ae8 0 8 0 0 0 0 No Name for File
80bc5508 0 120 0 0 0 0 mapped_file( MUP.SYS )
80bd1448 0 80 0 0 0 0 mapped_file( cfgmgr32.dll )
80bdb188 0 8 0 0 0 0 No Name for File
80bdb268 0 8 0 0 0 0 No Name for File
80bda6c8 0 8 0 0 0 0 No Name for File
80bd5608 0 8 0 0 0 0 No Name for File
80bce4c8 64 16 0 64 0 0 mapped_file( MSAFD.DLL )
80bcc468 32 8 0 32 0 0 mapped_file( wshtcpip.dll )
80bc02c8 0 24 0 0 0 0 mapped_file( msmouse.PNF )
80bc3aa8 0 80 0 0 0 0 mapped_file( vet_serv.exe )
80bac008 48 32 0 0 0 0 mapped_file( RPCLTCCM.DLL )
80bd52c8 0 8 0 0 0 0 No Name for File
80bd08c8 0 8 0 0 0 0 No Name for File
80bcf988 0 8 0 0 0 0 No Name for File
80be3ce8 0 8 0 0 0 0 No Name for File
80bd2e08 0 88 0 0 0 0 mapped_file( netmsg.dll )
80be0c88 0 8 0 0 0 0 No Name for File
80bc47a8 0 120 0 0 0 0 mapped_file( MUP.SYS )
80c70788 8 0 0 0 0 0 No Name for File
80bccea8 0 16 0 0 0 0 mapped_file( keyboard.PNF )
80bbc448 0 32 0 0 0 0 mapped_file( WSHNETBS.DLL )
80bb8ec8 16 16 0 0 0 0 mapped_file( httpmib.dll )
80bd18c8 0 8 0 0 0 0 No Name for File
80bad5a8 48 40 0 0 0 0 mapped_file( FTPSVC2.DLL )
80bce168 0 8 0 0 0 0 No Name for File
80bacbe8 104 48 0 0 0 0 mapped_file( W3SVC.DLL )
80bd0a08 32 0 0 0 0 0 No Name for File
80be1448 0 8 0 0 0 0 No Name for File
80bdf408 0 8 0 0 0 0 No Name for File
80ba1208 0 40 0 0 0 0 mapped_file( SSPIFILT.DLL )
80bd5e48 0 8 0 0 0 0 mapped_file( SERVICES )
80bcee88 16 16 0 0 0 0 mapped_file( SNMP.EXE )
80bbf768 24 24 0 0 0 0 mapped_file( LMMIB2.DLL )
80bc3688 32 32 0 0 0 0 mapped_file( INETMIB1.DLL )
80bb8d08 16 8 0 0 0 0 mapped_file( w3svapi.dll )
80bcd788 0 8 0 0 0 0 No Name for File
80bcd168 0 8 0 0 0 0 No Name for File
80bdea88 0 8 0 0 0 0 No Name for File
80bc1228 8 0 0 0 0 0 No Name for File
80bd90e8 0 8 0 0 0 0 No Name for File
80ca1ae8 0 8 0 0 0 0 No Name for File
80bd0fc8 24 16 0 0 0 0 mapped_file( SNMPAPI.DLL )
80c69348 8 0 0 8 0 0 mapped_file( ctype.nls )
80bb36a8 8 16 0 0 0 0 mapped_file( inetinfo.exe )
80bccd68 0 8 0 0 0 0 No Name for File
80b9c148 48 16 0 0 0 0 mapped_file( msgsvc.dll )
80ce55e8 0 8 0 0 0 0 No Name for File
80bb1ca8 40 24 0 0 0 0 mapped_file( GOPHERD.DLL )
80bc4e48 8 0 0 0 0 0 No Name for File
80bc4ae8 8 0 0 0 0 0 No Name for File
80bc1a68 0 8 0 0 0 0 No Name for File
80bc30a8 0 8 0 0 0 0 No Name for File
80bc4888 8 0 0 0 0 0 mapped_file( QUOTES )
80bb1888 176 16 0 0 0 0 mapped_file( INFOCOMM.DLL )
80b921e8 16 16 0 0 0 0 mapped_file( ICMP.DLL )
80bd6fa8 0 8 0 0 0 0 No Name for File
80bc49e8 8 0 0 0 0 0 No Name for File
80bc32c8 0 8 0 0 0 0 No Name for File
80bb12a8 32 16 0 0 0 0 mapped_file( inetsloc.dll )
80bb0f88 16 16 0 0 0 0 mapped_file( gdspace.dll )
80b92308 16 16 0 0 0 0 mapped_file( LMHSVC.DLL )
80bc59a8 0 8 0 0 0 0 No Name for File
80bc56a8 8 0 0 0 0 0 No Name for File
80bb0628 0 8 0 0 0 0 No Name for File
80bab588 8 0 0 0 0 0 No Name for File
80bd8548 0 8 0 0 0 0 No Name for File
80b70aa8 0 360 0 0 0 0 mapped_file( netui1.dll )
80bcf768 0 8 0 0 0 0 No Name for File
80b739e8 0 112 0 0 0 0 mapped_file( mprui.dll )
80b77868 8 32 0 0 0 0 mapped_file( nddeapi.dll )
80b73628 56 384 0 0 0 0 mapped_file( NETUI2.DLL )
80b79d68 0 24 0 0 0 0 mapped_file( nddeagnt.exe )
80b79888 0 32 0 0 0 0 mapped_file( mmdrv.dll )
80b7b5c8 0 56 0 0 0 0 mapped_file( win.com )
80b71068 0 120 0 0 0 0 mapped_file( netui0.dll )
80ba1b68 0 8 0 0 0 0 No Name for File
80b702a8 0 8 0 0 0 0 No Name for File
80b7ea68 0 264 0 0 0 0 mapped_file( mmsys.cpl )
80b79988 0 264 0 0 0 0 mapped_file( winmm.dll )
80b90708 0 64 0 0 0 0 mapped_file( userinit.exe )
80b713c8 0 64 0 0 0 0 mapped_file( NTLANMAN.DLL )
80b84d68 0 8 0 0 0 0 No Name for File
80b75268 0 8 0 0 0 0 No Name for File
80b7d8e8 0 8 0 0 0 0 No Name for File
80b70608 0 8 0 0 0 0 mapped_file( _DEFAULT.PIF )
80b692e8 0 8 0 0 0 0 No Name for File
80b68728 0 8 0 0 0 0 mapped_file( WIN.INI )
80b74ec8 0 8 0 0 0 0 No Name for File
80b6ef08 0 8 0 0 0 0 mapped_file( CONFIG.NT )
80b6bc68 0 8 0 0 0 0 mapped_file( system.drv )
80b6b708 0 8 0 0 0 0 mapped_file( keyboard.drv )
80b68f08 0 48 0 0 0 0 mapped_file( USER.EXE )
80b92508 0 8 0 0 0 0 No Name for File
80b72008 0 8 0 0 0 0 No Name for File
80b73448 0 32 0 0 0 0 mapped_file( bios1.rom )
80b6edc8 0 40 0 0 0 0 mapped_file( NTIO.SYS )
80b6e1c8 0 8 0 0 0 0 No Name for File
80b6e048 8 0 0 0 0 0 No Name for File
80ca1d88 8 0 0 0 0 0 No Name for File
80b6cec8 0 8 0 0 0 0 mapped_file( AUTOEXEC.NT )
80bd53e8 0 96 0 0 0 0 mapped_file( KRNL386.EXE )
80b683e8 8 0 0 0 0 0 No Name for File
80b7e6c8 0 8 0 0 0 0 No Name for File
80b90208 0 8 0 0 0 0 No Name for File
80b6f8a8 0 16 0 0 0 0 mapped_file( comm.drv )
80b6a108 8 0 0 0 0 0 No Name for File
80b6c868 0 24 0 0 0 0 mapped_file( gdi.exe )
80b8f5e8 8 0 0 0 0 0 mapped_file( shell.dll )
80b82c08 0 8 0 0 0 0 No Name for File
80b7e328 0 8 0 0 0 0 No Name for File
80b777c8 0 8 0 0 0 0 No Name for File
80b74c28 0 8 0 0 0 0 No Name for File
80b6f028 0 8 0 0 0 0 No Name for File
80b6eae8 0 8 0 0 0 0 No Name for File
80b6e5a8 0 8 0 0 0 0 No Name for File
80b6fdc8 0 8 0 0 0 0 No Name for File
80b69f88 0 32 0 0 0 0 mapped_file( country.sys )
80b6d828 0 56 0 0 0 0 mapped_file( command.com )
80b6d2c8 0 8 0 0 0 0 No Name for File
80b6bd88 8 0 0 0 0 0 No Name for File
80b6b2c8 8 0 0 0 0 0 No Name for File
80b6ad68 8 0 0 0 0 0 No Name for File
80b6a808 8 0 0 0 0 0 No Name for File
80b6a6e8 0 8 0 0 0 0 mapped_file( sound.drv )
80b6dac8 8 0 0 0 0 0 No Name for File
80bc18e8 8 0 0 0 0 0 No Name for File
80ca16e8 8 8 0 0 0 0 mapped_file( wowexec.exe )
80b65708 24 40 0 0 0 0 mapped_file( mmsystem.dll )
80b6f9c8 0 8 0 0 0 0 No Name for File
80b6f768 0 8 0 0 0 0 mapped_file( bios4.rom )
80b6c808 0 8 0 0 0 0 mapped_file( mscdexnt.exe )
80b6c668 0 8 0 0 0 0 No Name for File
80b69988 0 8 0 0 0 0 No Name for File
80b69728 0 32 0 0 0 0 mapped_file( dosx.exe )
80b69248 0 8 0 0 0 0 No Name for File
80b62c08 0 8 0 0 0 0 No Name for File
80b624a8 0 16 0 0 0 0 No Name for File
80b6cd28 8 0 0 0 0 0 No Name for File
80b5b748 0 8 0 0 0 0 No Name for File
80b833a8 0 8 0 0 0 0 No Name for File
80b67908 0 8 0 0 0 0 No Name for File
80b6c548 0 8 0 0 0 0 No Name for File
80b6ca68 0 8 0 0 0 0 No Name for File
80b70568 0 8 0 0 0 0 No Name for File
80b5d7e8 0 8 0 0 0 0 No Name for File
80b6b828 8 0 0 0 0 0 No Name for File
80b5c8e8 0 8 0 0 0 0 mapped_file( Command Prompt AutoStart.lnk )
80b6b1a8 0 8 0 0 0 0 mapped_file( mouse.drv )
80b941c8 0 16 0 0 0 0 mapped_file( control.exe )
80b64b88 8 0 0 0 0 0 No Name for File
80b56728 0 8 0 0 0 0 mapped_file( PERKED_65hour_3net_allpart_11error.lnk )
80b74da8 0 8 0 0 0 0 No Name for File
80bd6588 0 8 0 0 0 0 No Name for File
80b611c8 8 0 0 0 0 0 No Name for File
80b585c8 0 176 0 0 0 0 mapped_file( winmsd.exe )
80b5d3e8 0 8 0 0 0 0 No Name for File
80b5c628 8 0 0 0 0 0 No Name for File
80b68f68 0 8 0 0 0 0 No Name for File
80b6c948 8 0 0 0 0 0 No Name for File
80b635e8 0 8 0 0 0 0 mapped_file( Command Prompt.lnk )
80b64fc8 8 0 0 0 0 0 mapped_file( timer.drv )
80b5bbe8 0 8 0 0 0 0 mapped_file( Event Viewer AutoStart.lnk )
80b531e8 8 0 0 0 0 0 No Name for File
80b560e8 0 8 0 0 0 0 No Name for File
80b7f7c8 0 8 0 0 0 0 mapped_file( DDESpy.lnk )
80b7b828 0 24 0 0 0 0 mapped_file( v7vga.rom )
80bdadc8 0 8 0 0 0 0 No Name for File
80b51308 0 8 0 0 0 0 mapped_file( stress.lnk )
80b63508 0 8 0 0 0 0 No Name for File
80b5c388 8 0 0 0 0 0 No Name for File
80b5ce28 0 8 0 0 0 0 No Name for File
80b5a528 0 8 0 0 0 0 mapped_file( MAPI Readme.lnk )
80b51728 48 72 0 0 0 0 mapped_file( TASKMGR.EXE )
80b69c68 0 8 0 0 0 0 mapped_file( redir.exe )
80b557c8 0 8 0 0 0 0 mapped_file( PERKED_36hour_3net_allpart.lnk )
80b53ca8 0 8 0 0 0 0 mapped_file( DataObject Viewer.lnk )
80b503e8 0 8 0 0 0 0 mapped_file( DocFile Viewer.lnk )
80b3c708 8 0 0 0 0 0 No Name for File
80b3b968 0 8 0 0 0 0 mapped_file( Solitaire.lnk )
80bca3a8 0 8 0 0 0 0 No Name for File
80b6c188 0 8 0 0 0 0 No Name for File
80b4d388 0 8 0 0 0 0 mapped_file( PortTool.lnk )
80b63f88 8 0 0 0 0 0 No Name for File
80b86168 0 8 0 0 0 0 mapped_file( desktop.ini )
80b4df88 0 8 0 0 0 0 mapped_file( PStat.lnk )
80b49e08 0 8 0 0 0 0 mapped_file( Readme.lnk )
80b49a68 0 8 0 0 0 0 mapped_file( ROT Viewer.lnk )
80b5bb68 0 8 0 0 0 0 No Name for File
80b4f8c8 8 40 0 0 0 0 mapped_file( VDMDBG.DLL )
80b57348 8 0 0 0 0 0 No Name for File
80b53d68 0 8 0 0 0 0 No Name for File
80b4a008 104 24 0 0 0 0 mapped_file( cdplayer.exe )
80b4cd08 0 32 0 0 0 0 mapped_file( welcome.exe )
80b5c948 0 8 0 0 0 0 mapped_file( Task Manager AutoStart.lnk )
80b4d448 8 0 0 0 0 0 No Name for File
80b473e8 0 8 0 0 0 0 mapped_file( Win32 SDK Help.lnk )
80b46a08 0 8 0 0 0 0 mapped_file( Internet Service Manager.lnk )
80b6ac48 0 8 0 0 0 0 mapped_file( vga.drv )
80b453c8 0 8 0 0 0 0 mapped_file( DEC VET Help.lnk )
80b57848 0 8 0 0 0 0 mapped_file( Windows Messaging.lnk )
80b57448 0 8 0 0 0 0 mapped_file( Windows NT Explorer.lnk )
80b58a88 0 8 0 0 0 0 mapped_file( PERKED_23hour_1net_1cdrom_9error.lnk )
80b62fa8 0 8 0 0 0 0 mapped_file( NT Diagnostics AutoStart.lnk )
80b60988 0 8 0 0 0 0 mapped_file( PERKED_71hour_3net_all_part.lnk )
80b50fc8 0 8 0 0 0 0 mapped_file( uptime_plus_pagefile (2).lnk )
80b7f008 0 80 0 0 0 0 mapped_file( more.com )
80b5a4c8 0 8 0 0 0 0 mapped_file( Dialog Editor.lnk )
80b5c888 0 8 0 0 0 0 No Name for File
80c6d948 8 0 0 0 0 0 No Name for File
80c983c8 0 8 0 0 0 0 No Name for File
80b62828 0 72 0 0 0 0 mapped_file( cdplayer.exe )
80b52ba8 0 8 0 0 0 0 No Name for File
80b49368 0 8 0 0 0 0 mapped_file( Spy.lnk )
80b49008 0 8 0 0 0 0 mapped_file( WinDbg.lnk )
80b48ca8 0 8 0 0 0 0 mapped_file( WinDiff.lnk )
80b48348 8 0 0 0 0 0 No Name for File
80b434e8 0 8 0 0 0 0 mapped_file( Windows NT Diagnostics.lnk )
80b46d88 8 0 0 0 0 0 No Name for File
80b5b408 0 8 0 0 0 0 No Name for File
80b45708 0 8 0 0 0 0 mapped_file( DEC VET Console.lnk )
80b45028 0 8 0 0 0 0 mapped_file( DEC VET.lnk )
80b44cc8 8 0 0 0 0 0 No Name for File
80b4dc48 0 8 0 0 0 0 mapped_file( Imaging.lnk )
80b59388 0 8 0 0 0 0 mapped_file( dbg.lnk )
80b58de8 0 8 0 0 0 0 mapped_file( PERKED_11min_2fast_net.lnk )
80b3f8e8 0 8 0 0 0 0 mapped_file( WordPad.lnk )
80b55dc8 0 8 0 0 0 0 No Name for File
80b3ce48 0 8 0 0 0 0 mapped_file( MCI Mail.ht )
80b7e288 8 0 0 0 0 0 No Name for File
80b53128 0 8 0 0 0 0 mapped_file( PERKED_RevB_mother_466MHz.lnk )
80b50c88 0 8 0 0 0 0 mapped_file( uptime_plus_pagefile.lnk )
80bca348 0 8 0 0 0 0 No Name for File
80c94288 8 0 0 0 0 0 No Name for File
80b54448 0 8 0 0 0 0 No Name for File
80b9b268 0 8 0 0 0 0 No Name for File
80b4d108 0 8 0 0 0 0 mapped_file( OLE - COM Object Viewer.lnk )
80b5e968 8 0 0 0 0 0 No Name for File
80b67328 0 8 0 0 0 0 mapped_file( PView.lnk )
80b48948 0 8 0 0 0 0 mapped_file( WinPerf.lnk )
80b485e8 0 8 0 0 0 0 mapped_file( Zoom Utility.lnk )
80b47f88 0 8 0 0 0 0 mapped_file( Getting Started.lnk )
80b47c08 0 8 0 0 0 0 mapped_file( OLE Tools Reference.lnk )
80b45e08 0 8 0 0 0 0 mapped_file( Product Documentation.lnk )
80b44948 0 8 0 0 0 0 mapped_file( Backup.lnk )
80b43f88 0 8 0 0 0 0 mapped_file( Performance Monitor.lnk )
80b43c28 0 8 0 0 0 0 mapped_file( Remote Access Admin.lnk )
80b425a8 8 0 0 0 0 0 No Name for File
80b57168 0 8 0 0 0 0 No Name for File
80b409a8 0 8 0 0 0 0 mapped_file( Notepad.lnk )
80b3f4a8 0 8 0 0 0 0 mapped_file( Inbox Repair Tool.lnk )
80b58528 0 8 0 0 0 0 mapped_file( File Manager AutoStart.lnk )
80b58268 0 8 0 0 0 0 mapped_file( PERKED_36hour_1net_allparts_6error.lnk )
80b3dca8 0 8 0 0 0 0 mapped_file( AT&T Mail.ht )
80b3d928 0 8 0 0 0 0 mapped_file( CompuServe.ht )
80b3d1e8 0 8 0 0 0 0 mapped_file( HyperTerminal.lnk )
80b3bca8 0 8 0 0 0 0 mapped_file( Pinball.lnk )
80b541c8 0 8 0 0 0 0 mapped_file( PERKED_65hour_3net_all_part_11error.lnk )
80b53e08 0 8 0 0 0 0 mapped_file( PERKED_NTdiags_09apr97.lnk )
80c881e8 8 0 0 0 0 0 No Name for File
80b54e88 0 8 0 0 0 0 mapped_file( Performance Monitor AutoStart.lnk )
80b52288 0 8 0 0 0 0 mapped_file( show_system_diskload_20feb97.lnk )
80c97248 8 0 0 0 0 0 No Name for File
80c89b88 8 0 0 0 0 0 No Name for File
80c86848 8 0 0 0 0 0 No Name for File
80b49708 0 8 0 0 0 0 mapped_file( Set Win32 Environment.lnk )
80c92128 8 0 0 0 0 0 No Name for File
80b47b68 0 8 0 0 0 0 mapped_file( Service Provider Documentation.lnk )
80b474c8 0 8 0 0 0 0 mapped_file( UI Style Guide.lnk )
80b45a88 8 0 0 0 0 0 No Name for File
80b84fe8 0 8 0 0 0 0 mapped_file( Event Viewer.lnk )
80b3f128 8 0 0 0 0 0 No Name for File
80b3e708 0 8 0 0 0 0 mapped_file( Sound Recorder.lnk )
80b3e188 8 0 0 0 0 0 No Name for File
80b3d588 0 8 0 0 0 0 mapped_file( HyperTerminal BBS.ht )
80b3caa8 0 8 0 0 0 0 mapped_file( Microsoft BBS.ht )
80b7d488 8 0 0 0 0 0 No Name for File
80bb4268 0 8 0 0 0 0 mapped_file( Image Editor.lnk )
80c6d888 8 0 0 0 0 0 No Name for File
80b445c8 0 8 0 0 0 0 mapped_file( Disk Administrator.lnk )
80b413a8 0 8 0 0 0 0 mapped_file( Clock.lnk )
80b5c9a8 0 16 0 0 0 0 mapped_file( Perked_diskload_timestamps.log )
80b41048 0 8 0 0 0 0 mapped_file( Dial-Up Networking.lnk )
80b40608 0 8 0 0 0 0 mapped_file( Object Packager.lnk )
80b3fc88 0 8 0 0 0 0 mapped_file( Telnet.lnk )
80b3c188 0 8 0 0 0 0 mapped_file( Minesweeper.lnk )
80c84d48 8 0 0 0 0 0 No Name for File
80b731c8 0 8 0 0 0 0 No Name for File
80b7ec68 0 8 0 0 0 0 No Name for File
80b56528 0 8 0 0 0 0 No Name for File
80b41708 0 8 0 0 0 0 mapped_file( Clipboard Viewer.lnk )
80b402a8 0 8 0 0 0 0 mapped_file( Paint.lnk )
80b3eda8 0 8 0 0 0 0 mapped_file( CD Player.lnk )
80b3ea68 0 8 0 0 0 0 mapped_file( Media Player.lnk )
80b3b9e8 8 0 0 0 0 0 No Name for File
80b843a8 0 8 0 0 0 0 No Name for File
80b6da48 0 8 0 0 0 0 mapped_file( himem.sys )
80b46688 0 8 0 0 0 0 mapped_file( Key Manager.lnk )
80c83548 8 0 0 0 0 0 No Name for File
80b41dc8 0 8 0 0 0 0 mapped_file( Character Map.lnk )
80c93b08 8 0 0 0 0 0 No Name for File
80ca0ca8 8 0 0 0 0 0 No Name for File
Extension function faulted addr=0x70ff2708, ec=0xc0000005
KDalpha> * kernel mode heap (pool I believe)
KDalpha> *
KDalpha> !pool
Paged Pool: e1000000 .. e6ffffff
e1000000: 2000 - busy
e1002000: 2000 - busy
e1004000: 2000 - busy
e1006000: 2000 - busy
e1008000: 2000 - busy
e100a000: 2000 - busy
e100c000: 2000 - busy
e100e000: 2000 - busy
e1010000: 2000 - busy
e1012000: 2000 - busy
e1014000: 2000 - busy
e1016000: 2000 - busy
e1018000: 2000 - busy
e101a000: 2000 - busy
e101c000: 2000 - busy
e101e000: 2000 - busy
e1020000: 2000 - busy
e1022000: 2000 - busy
e1024000: 2000 - busy
e1026000: 2000 - busy
e1028000: 2000 - busy
e102a000: 2000 - busy
e102c000: 2000 - busy
e102e000: 2000 - busy
e1030000: 2000 - busy
e1032000: 2000 - busy
e1034000: 2000 - busy
e1036000: 2000 - busy
e1038000: 2000 - busy
e103a000: 2000 - busy
e103c000: 2000 - busy
e103e000: 2000 - busy
e1040000: 2000 - busy
e1042000: 2000 - busy
e1044000: 2000 - busy
e1046000: 2000 - busy
e1048000: 2000 - busy
e104a000: 2000 - busy
e104c000: 2000 - busy
e104e000: 2000 - busy
e1050000: 2000 - busy
e1052000: 2000 - busy
e1054000: 2000 - busy
e1056000: 2000 - busy
e1058000: 2000 - busy
e105a000: 2000 - busy
e105c000: 2000 - busy
e105e000: 2000 - busy
e1060000: 2000 - busy
e1062000: 2000 - busy
e1064000: 2000 - busy
e1066000: 2000 - busy
e1068000: 2000 - busy
e106a000: 2000 - busy
e106c000: 2000 - busy
e106e000: 2000 - busy
e1070000: 2000 - busy
e1072000: 2000 - busy
e1074000: 2000 - busy
e1076000: 2000 - busy
e1078000: 2000 - busy
e107a000: 2000 - busy
e107c000: 2000 - busy
e107e000: 2000 - busy
e1080000: 2000 - busy
e1082000: 12000 - busy
e1094000: 2000 - busy
e1096000: 2000 - busy
e1098000: 4000 - busy
e109c000: 2000 - busy
e109e000: 2000 - busy
e10a0000: 2000 - busy
e10a2000: 2000 - busy
e10a4000: c000 - busy
e10b0000: 4000 - busy
e10b4000: 2000 - busy
e10b6000: 2000 - busy
e10b8000: 2000 - busy
e10ba000: 2000 - busy
e10bc000: 2000 - busy
e10be000: 2000 - busy
e10c0000: 2000 - busy
e10c2000: 4000 - free
e10c6000: 2000 - busy
e10c8000: 2000 - busy
e10ca000: 2000 - busy
e10cc000: 2000 - busy
e10ce000: 2000 - busy
e10d0000: 2000 - busy
e10d2000: 2000 - busy
e10d4000: 2000 - busy
e10d6000: 3c000 - free
e1112000: 4000 - free
e1116000: 2000 - busy
e1118000: 4000 - free
e111c000: 4000 - free
e1120000: 2000 - busy
e1122000: 2000 - busy
e1124000: 4000 - free
e1128000: 2000 - busy
e112a000: 2000 - busy
e112c000: 2000 - busy
e112e000: 2000 - busy
e1130000: 2000 - busy
e1132000: 4000 - free
e1136000: 4000 - free
e113a000: 2000 - busy
e113c000: 2000 - busy
e113e000: 60000 - free
e119e000: 2000 - busy
e11a0000: 2000 - busy
e11a2000: 2000 - busy
e11a4000: 2000 - busy
e11a6000: 6000 - free
e11ac000: 2000 - busy
e11ae000: 2000 - busy
e11b0000: 6000 - free
e11b6000: 2000 - busy
e11b8000: 20000 - busy
e11d8000: 2000 - busy
e11da000: 2000 - busy
e11dc000: 2000 - busy
e11de000: 2000 - busy
e11e0000: 2000 - busy
e11e2000: 2000 - busy
e11e4000: 2000 - busy
e11e6000: 2000 - busy
e11e8000: 2000 - busy
e11ea000: 2000 - busy
e11ec000: 4000 - free
e11f0000: 2000 - busy
e11f2000: 2000 - busy
e11f4000: 2000 - busy
e11f6000: 2000 - busy
e11f8000: 2000 - busy
e11fa000: 6000 - free
e1200000: 2000 - busy
e1202000: 2000 - busy
e1204000: 2000 - busy
e1206000: 6000 - free
e120c000: 6000 - free
e1212000: 6000 - free
e1218000: 2000 - busy
e121a000: 6000 - free
e1220000: 10000 - busy
e1230000: 2000 - busy
e1232000: 8000 - free
e123a000: 8000 - free
e1242000: 2000 - busy
e1244000: 2000 - busy
e1246000: 2000 - busy
e1248000: 2000 - busy
e124a000: 2000 - busy
e124c000: 2000 - busy
e124e000: 6000 - busy
e1254000: 2000 - busy
e1256000: 2000 - busy
e1258000: ba000 - busy
e1312000: 2000 - busy
e1314000: a000 - busy
e131e000: 8000 - busy
e1326000: 2000 - busy
e1328000: 2000 - busy
e132a000: 2000 - busy
e132c000: 2000 - busy
e132e000: 2000 - busy
e1330000: 2000 - busy
e1332000: 2000 - busy
e1334000: 2000 - busy
e1336000: 2000 - busy
e1338000: 2000 - busy
e133a000: 2000 - busy
e133c000: 2000 - busy
e133e000: 2000 - busy
e1340000: 2000 - busy
e1342000: 2000 - busy
e1344000: 2000 - busy
e1346000: 2000 - busy
e1348000: 2000 - busy
e134a000: 2000 - busy
e134c000: 2000 - busy
e134e000: 2000 - busy
e1350000: 2000 - busy
e1352000: 2000 - busy
e1354000: 2000 - busy
e1356000: 8000 - busy
e135e000: 4000 - busy
e1362000: 2000 - busy
e1364000: 2000 - busy
e1366000: 2000 - busy
e1368000: 2000 - busy
e136a000: 2000 - busy
e136c000: 2000 - busy
e136e000: 2000 - busy
e1370000: 2000 - busy
e1372000: 2000 - busy
e1374000: 2000 - busy
e1376000: 2000 - busy
e1378000: 2000 - busy
e137a000: 2000 - busy
e137c000: 2000 - busy
e137e000: 2000 - busy
e1380000: 2000 - busy
e1382000: 2000 - busy
e1384000: 2000 - busy
e1386000: 2000 - busy
e1388000: 2000 - busy
e138a000: 2000 - busy
e138c000: 2000 - busy
e138e000: 2000 - busy
e1390000: 2000 - busy
e1392000: 2000 - busy
e1394000: 2000 - busy
e1396000: 2000 - busy
e1398000: 2000 - busy
e139a000: 2000 - busy
e139c000: 2000 - busy
e139e000: 2000 - busy
e13a0000: 4000 - busy
e13a4000: 20000 - busy
e13c4000: 2000 - busy
e13c6000: 2000 - busy
e13c8000: 2000 - busy
e13ca000: 2000 - busy
e13cc000: 2000 - busy
e13ce000: 2000 - busy
e13d0000: 2000 - busy
e13d2000: 2000 - busy
e13d4000: 2000 - busy
e13d6000: 2000 - busy
e13d8000: 2000 - busy
e13da000: 2000 - busy
e13dc000: 2000 - busy
e13de000: 2000 - busy
e13e0000: 2000 - busy
e13e2000: 2000 - busy
e13e4000: 2000 - busy
e13e6000: 2000 - busy
e13e8000: 2000 - busy
e13ea000: 2000 - busy
e13ec000: 2000 - busy
e13ee000: 2000 - busy
e13f0000: 2000 - busy
e13f2000: 2000 - busy
e13f4000: 2000 - busy
e13f6000: 2000 - busy
e13f8000: 2000 - busy
e13fa000: 2000 - busy
e13fc000: 2000 - busy
e13fe000: 2000 - busy
e1400000: 2000 - busy
e1402000: 2000 - busy
e1404000: 2000 - busy
e1406000: 2000 - busy
e1408000: 2000 - busy
e140a000: 2000 - busy
e140c000: 2000 - busy
e140e000: 2000 - busy
e1410000: 2000 - busy
e1412000: 2000 - busy
e1414000: 2000 - busy
e1416000: 2000 - busy
e1418000: 2000 - busy
e141a000: 2000 - busy
e141c000: 2000 - busy
e141e000: 2000 - busy
e1420000: 2000 - busy
e1422000: 2000 - busy
e1424000: 2000 - busy
e1426000: 2000 - busy
e1428000: 2000 - busy
e142a000: 2000 - busy
e142c000: 2000 - busy
e142e000: 2000 - busy
e1430000: 2000 - busy
e1432000: 2000 - busy
e1434000: 2000 - busy
e1436000: 2000 - busy
e1438000: 2000 - busy
e143a000: 2000 - busy
e143c000: 2000 - busy
e143e000: 2000 - busy
e1440000: 2000 - busy
e1442000: 2000 - busy
e1444000: 2000 - busy
e1446000: 2000 - busy
e1448000: 2000 - busy
e144a000: 2000 - busy
e144c000: 2000 - busy
e144e000: 2000 - busy
e1450000: 2000 - busy
e1452000: 2000 - busy
e1454000: 2000 - busy
e1456000: 2000 - busy
e1458000: 2000 - busy
e145a000: 2000 - busy
e145c000: 2000 - busy
e145e000: 2000 - busy
e1460000: 2000 - busy
e1462000: 2000 - busy
e1464000: 2000 - busy
e1466000: 2000 - busy
e1468000: 2000 - busy
e146a000: 2000 - busy
e146c000: 2000 - busy
e146e000: 2000 - busy
e1470000: 2000 - busy
e1472000: 2000 - busy
e1474000: 2000 - busy
e1476000: 2000 - busy
e1478000: 2000 - busy
e147a000: 2000 - busy
e147c000: 2000 - busy
e147e000: 2000 - busy
e1480000: 2000 - busy
e1482000: 2000 - busy
e1484000: 80a000 - busy
e1c8e000: 2000 - busy
e1c90000: 2000 - busy
e1c92000: 2000 - busy
e1c94000: 2000 - busy
e1c96000: 2000 - busy
e1c98000: 6000 - busy
e1c9e000: 2000 - busy
e1ca0000: 2000 - busy
e1ca2000: 6000 - busy
e1ca8000: 2000 - busy
e1caa000: 2000 - busy
e1cac000: 2000 - busy
e1cae000: 2000 - busy
e1cb0000: 2000 - busy
e1cb2000: 2000 - busy
e1cb4000: 2000 - busy
e1cb6000: 2000 - busy
e1cb8000: 2000 - busy
e1cba000: 2000 - busy
e1cbc000: 2000 - busy
e1cbe000: 2000 - busy
e1cc0000: 2000 - busy
e1cc2000: 2000 - busy
e1cc4000: 2000 - busy
e1cc6000: 2000 - busy
e1cc8000: 2000 - busy
e1cca000: 2000 - busy
e1ccc000: 2000 - busy
e1cce000: 2000 - busy
e1cd0000: 2000 - busy
e1cd2000: 2000 - busy
e1cd4000: 2000 - busy
e1cd6000: 2000 - busy
e1cd8000: 2000 - busy
e1cda000: 2000 - busy
e1cdc000: 2000 - busy
e1cde000: 2000 - busy
e1ce0000: 2000 - busy
e1ce2000: 2000 - busy
e1ce4000: 2000 - busy
e1ce6000: 2000 - busy
e1ce8000: 2000 - busy
e1cea000: 2000 - busy
e1cec000: 2000 - busy
e1cee000: 2000 - busy
e1cf0000: 8000 - busy
e1cf8000: 2000 - busy
e1cfa000: 2000 - busy
e1cfc000: 2000 - busy
e1cfe000: 2000 - busy
e1d00000: 2000 - busy
e1d02000: 2000 - busy
e1d04000: 2000 - busy
e1d06000: 2000 - busy
e1d08000: 2000 - busy
e1d0a000: 2000 - busy
e1d0c000: 2000 - busy
e1d0e000: 2000 - busy
e1d10000: 2000 - busy
e1d12000: 2000 - busy
e1d14000: 2000 - busy
e1d16000: 2000 - busy
e1d18000: 2000 - busy
e1d1a000: 2000 - busy
e1d1c000: 2000 - busy
e1d1e000: 2000 - busy
e1d20000: 2000 - busy
e1d22000: 2000 - busy
e1d24000: 2000 - busy
e1d26000: 2000 - busy
e1d28000: 2000 - busy
e1d2a000: 2000 - busy
e1d2c000: 2000 - busy
e1d2e000: 2000 - busy
e1d30000: 2000 - busy
e1d32000: 2000 - busy
e1d34000: 2000 - busy
e1d36000: 2000 - busy
e1d38000: 2000 - busy
e1d3a000: 2000 - busy
e1d3c000: 2000 - busy
e1d3e000: 2000 - busy
e1d40000: 2000 - busy
e1d42000: 2000 - busy
e1d44000: 2000 - busy
e1d46000: 2000 - busy
e1d48000: 2000 - busy
e1d4a000: 2000 - busy
e1d4c000: 2000 - busy
e1d4e000: 2000 - busy
e1d50000: 2000 - busy
e1d52000: 2000 - busy
e1d54000: 2000 - busy
e1d56000: 2000 - busy
e1d58000: 2000 - busy
e1d5a000: 2000 - busy
e1d5c000: 2000 - busy
e1d5e000: 2000 - busy
e1d60000: 2000 - busy
e1d62000: 2000 - busy
e1d64000: 2000 - busy
e1d66000: 2000 - busy
e1d68000: 2000 - busy
e1d6a000: 2000 - busy
e1d6c000: 2000 - busy
e1d6e000: 2000 - busy
e1d70000: 2000 - busy
e1d72000: 2000 - busy
e1d74000: 2000 - busy
e1d76000: 2000 - busy
e1d78000: 2000 - busy
e1d7a000: 2000 - busy
e1d7c000: 2000 - busy
e1d7e000: 2000 - busy
e1d80000: 2000 - busy
e1d82000: 2000 - busy
e1d84000: 2000 - busy
e1d86000: 2000 - busy
e1d88000: 2000 - busy
e1d8a000: 2000 - busy
e1d8c000: 2000 - busy
e1d8e000: 6000 - free
e1d94000: 4000 - free
e1d98000: 5268000 - free
KDalpha> !time
Extension function faulted addr=0x775f0340, ec=0xc0000094
KDalpha> .LOGCLOSE
|