Application exception occurred:
        App:  (pid=308)
        When: 11/28/2005 @ 20:39:22.796
        Exception number: c0000005 (access violation)

*----> System Information <----*
        Computer Name: P424
        User Name: Allison
        Number of Processors: 1
        Processor Type: x86 Family 15 Model 2 Stepping 9
        Windows 2000 Version: 5.0
        Current Build: 2195
        Service Pack: 4
        Current Type: Uniprocessor Free
        Registered Organization: 
        Registered Owner: Allison

*----> Task List <----*
   0 Idle.exe
   8 System.exe
 168 smss.exe
 192 csrss.exe
 212 WINLOGON.exe
 240 SERVICES.exe
 252 LSASS.exe
 504 svchost.exe
 528 spoolsv.exe
 572 CCPROXY.exe
 584 CCSETMGR.exe
 600 svchost.exe
 644 ISSVC.exe
 672 NAVAPSVC.exe
 736 nvsvc32.exe
 780 regsvc.exe
 804 mstask.exe
 820 SNDSrvc.exe
 904 SMAgent.exe
 936 SPBBCSvc.exe
1000 stisvc.exe
1004 explorer.exe
1028 symlcsvc.exe
1052 winmgmt.exe
1056 svchost.exe
1172 SMTray.exe
1148 type32.exe
1184 point32.exe
1188 InCD.exe
1268 CCAPP.exe
1364 jusched.exe
1372 CCEVTMGR.exe
1300 iTunesHelper.ex.exe
1508 DeLSerial.exe
1516 VspStartup.exe
 772 iPodService.exe
 308 Civilization4.e.exe
1416 ~e5.0001.exe
 872 taskmgr.exe
1636 drwtsn32.exe
   0 _Total.exe

(00400000 - 00DE4000) 
(77F80000 - 77FFC000) 
(7C570000 - 7C623000) 
(7C2D0000 - 7C335000) 
(77D30000 - 77DA8000) 
(77F40000 - 77F7F000) 
(77E10000 - 77E79000) 
(77820000 - 77827000) 
(759B0000 - 759B6000) 
(10000000 - 1002B000) 
(1E000000 - 1E1CA000) 
(7CF30000 - 7D186000) 
(71710000 - 71794000) 
(70A70000 - 70AD6000) 
(78000000 - 78045000) 
(7C340000 - 7C396000) 
(7C3A0000 - 7C41B000) 
(00230000 - 0023E000) 
(75030000 - 75044000) 
(75020000 - 75028000) 
(00240000 - 00253000) 
(18000000 - 18038000) 
(77570000 - 775A0000) 
(75050000 - 75058000) 
(7CE20000 - 7CF21000) 
(779B0000 - 77A4B000) 
(00DF0000 - 0103A000) 
(21100000 - 2118C000) 
(51080000 - 510E1000) 
(6BD00000 - 6BD0D000) 
(66700000 - 667F5000) 
(69BF0000 - 69C0D000) 
(77800000 - 7781E000) 
(76620000 - 76631000) 
(77950000 - 7797B000) 
(75150000 - 75160000) 
(77BF0000 - 77C01000) 
(77980000 - 779A4000) 
(7CDC0000 - 7CE13000) 
(751C0000 - 751C6000) 
(01BC0000 - 01BCF000) 
(67330000 - 6735F000) 
(61220000 - 61232000) 
(7C950000 - 7C9E0000) 
(77840000 - 7787E000) 
(770C0000 - 770E3000) 
(76710000 - 76719000) 
(76FA0000 - 76FAF000) 
(773E0000 - 773F5000) 
(02750000 - 02AC2000) 
(745E0000 - 748A6000) 
(02BE0000 - 02D02000) 
(4FF90000 - 4FFE4000) 
(655E0000 - 655E7000) 
(66640000 - 6664A000) 
(77530000 - 77552000) 
(77880000 - 7790E000) 
(7C0F0000 - 7C154000) 
(65780000 - 6578D000) 
(68A80000 - 68A8B000) 
(77320000 - 77337000) 
(773B0000 - 773DF000) 
(77380000 - 773A3000) 
(77830000 - 7783E000) 
(77560000 - 77568000) 
(77400000 - 77408000) 
(77410000 - 77423000) 
(26F00000 - 26F2E000) 
(26400000 - 2643A000) 
(23000000 - 2300A000) 
(22300000 - 2230C000) 
(24100000 - 2411E000) 
(18090000 - 180B0000) 
(180C0000 - 180CD000) 
(7CA00000 - 7CA23000) 
(7C740000 - 7C7CC000) 
(77430000 - 77441000) 
(1A5F0000 - 1A799000) 
(1A7A0000 - 1A7A5000) 
(782C0000 - 782CC000) 
(77340000 - 77353000) 
(77520000 - 77525000) 
(774E0000 - 77514000) 
(774C0000 - 774D1000) 
(77360000 - 77379000) 
(777E0000 - 777E8000) 
(777F0000 - 777F5000) 
(74FD0000 - 74FEE000) 
(75010000 - 75017000) 

State Dump for Thread Id 0x7f8

eax=00000000 ebx=306bb1d8 ecx=0000000c edx=00000020 esi=00000000 edi=00000000
eip=009d0458 esp=0012fa00 ebp=0000000c iopl=0         nv up ei pl nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000206


function: <nosymbols>
        009d042e eb63             jmp     009d8793
        009d0430 83bc24cc01000000 cmp  dword ptr [esp+0x1cc],0x0 ss:0012fbcc=000000de
        009d0438 8b8424d0010000   mov     eax,[esp+0x1d0]        ss:0012fbd0=00000000
        009d043f 8bcd             mov     ecx,ebp
        009d0441 7650             jbe     009d8f93
        009d0443 8bb424cc010000   mov     esi,[esp+0x1cc]        ss:0012fbcc=000000de
        009d044a 89742418         mov     [esp+0x18],esi         ss:00bb98e7=8426c000
        009d044e 8bff             mov     edi,edi
        009d0450 8b3d8c05c800     mov     edi,[00c8058c]         ds:00c8058c=00000000
        009d0456 8bf0             mov     esi,eax
FAULT ->009d0458 893e             mov     [esi],edi              ds:00000000=????????
        009d045a 8b3d9005c800     mov     edi,[00c80590]         ds:00c80590=00000000
        009d0460 897e04           mov     [esi+0x4],edi          ds:00a89ee6=89520424
        009d0463 8b3d9405c800     mov     edi,[00c80594]         ds:00c80594=00000000
        009d0469 897e08           mov     [esi+0x8],edi          ds:00a89ee6=89520424
        009d046c 8b3d8c05c800     mov     edi,[00c8058c]         ds:00c8058c=00000000
        009d0472 8bf1             mov     esi,ecx
        009d0474 893e             mov     [esi],edi              ds:00000000=????????
        009d0476 8b3d9005c800     mov     edi,[00c80590]         ds:00c80590=00000000
        009d047c 897e04           mov     [esi+0x4],edi          ds:00a89ee6=89520424
        009d047f 8b3d9405c800     mov     edi,[00c80594]         ds:00c80594=00000000
        009d0485 03c2             add     eax,edx

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0000000C 00000000 00000000 00000000 00000000 00000000 !<nosymbols> 

*----> Raw Stack Dump <----*
0012fa00  00 00 00 00 90 81 71 30 - c8 74 28 19 ff 0f 00 00  ......q0.t(.....
0012fa10  02 00 00 00 f4 fc 76 30 - de 00 00 00 38 04 71 30  ......v0....8.q0
0012fa20  e1 4e 2f 3f 8e 6f 05 3e - 8d 8c 37 bf 94 fa 12 00  .N/?.o.>..7.....
0012fa30  02 00 00 00 a8 01 77 30 - 00 00 80 3f 00 00 00 00  ......w0...?....
0012fa40  00 00 00 00 00 00 00 00 - 00 00 80 3f 00 00 00 00  ...........?....
0012fa50  00 00 00 00 00 00 00 00 - 00 00 80 3f 00 d0 b6 45  ...........?...E
0012fa60  00 c0 a8 44 00 00 ba c2 - 00 00 80 3f 18 fc 12 00  ...D.......?....
0012fa70  40 5d 1e 00 30 fe 6f 32 - 96 b5 74 3f 80 86 e1 bd  @]..0.o2..t?....
0012fa80  61 68 8b be 40 08 44 3c - b0 dd 70 3f 9c 52 ad be  ah..@.D<..p?.R..
0012fa90  ad 40 96 3e ae 02 a4 3e - 82 94 66 3f 44 5d 1e 00  .@.>...>..f?D]..
0012faa0  8e 6f 05 3e 8d 8c 37 bf - 04 00 00 00 10 51 c7 1b  .o.>..7......Q..
0012fab0  15 81 ef 00 50 a4 c3 01 - c6 ea 61 1a 68 44 40 08  ....P.....a.hD@.
0012fac0  ea 43 40 06 60 d6 22 00 - fc ed 07 34 00 ee 07 34  .C@.`."....4...4
0012fad0  77 fb 61 1a ac 3a 40 0c - e8 fa 12 00 70 d4 7e 2c  w.a..:@.....p.~,
0012fae0  44 fb 12 00 c8 74 28 19 - 00 fb 12 00 4b 5e 69 1a  D....t(.....K^i.
0012faf0  00 00 80 3f 00 00 00 00 - 00 00 00 00 00 00 00 00  ...?............
0012fb00  00 00 80 3f 00 00 00 00 - 00 00 00 00 00 00 00 00  ...?............
0012fb10  00 00 80 3f 00 d0 b6 45 - 00 c0 a8 44 00 00 ba c2  ...?...E...D....
0012fb20  00 00 80 3f 00 00 80 3f - 00 00 00 00 00 00 00 00  ...?...?........
0012fb30  00 00 00 00 00 00 80 3f - 00 00 00 00 00 00 00 00  .......?........

State Dump for Thread Id 0x4d0

eax=7c3494f6 ebx=01be8f28 ecx=026b0ae0 edx=16010219 esi=00000000 edi=00c34600
eip=7c57b700 esp=01edfffc ebp=00000000 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000200


function: MulDiv
        7c57b6eb d1f9             sar     ecx,1
        7c57b6ed 03c1             add     eax,ecx
        7c57b6ef 83d200           adc     edx,0x0
        7c57b6f2 59               pop     ecx
        7c57b6f3 3bd1             cmp     edx,ecx
        7c57b6f5 73d3             jnb     PrivCopyFileExW+0x10a9 (7c58aeca)
        7c57b6f7 f7f1             div     ecx
        7c57b6f9 f7d8             neg     eax
        7c57b6fb 7fcd             jg      MoveFileWithProgressA+0x14a (7c5879ca)
        7c57b6fd c20c00           ret     0xc
        7c57b700 33ed             xor     ebp,ebp
        7c57b702 53               push    ebx
        7c57b703 50               push    eax
        7c57b704 6a00             push    0x0
        7c57b706 e92bfcffff       jmp     lstrcmpiW+0x65 (7c57b336)
        7c57b70b 90               nop
        7c57b70c 33ed             xor     ebp,ebp
        7c57b70e 50               push    eax
        7c57b70f 6a00             push    0x0
        7c57b711 e936d20100       jmp     ProcessIdToSessionId+0x140 (7c59894c)
        7c57b716 8bff             mov     edi,edi
        7c57b718 8b5c240c         mov     ebx,[esp+0xc]          ss:02969ee3=575602a6

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
00000000 00000000 00000000 00000000 00000000 00000000 kernel32!MulDiv 

*----> Raw Stack Dump <----*
01edfffc  00 00 00 00 00 00 04 00 - 01 00 00 00 01 00 00 00  ................
01ee000c  1a 00 01 00 05 00 00 00 - 00 00 00 00 00 00 00 00  ................
01ee001c  00 00 00 00 00 00 00 00 - 5c 00 5c 00 3f 00 5c 00  ........\.\.?.\.
01ee002c  70 00 63 00 69 00 23 00 - 76 00 65 00 6e 00 5f 00  p.c.i.#.v.e.n._.
01ee003c  38 00 30 00 38 00 36 00 - 26 00 64 00 65 00 76 00  8.0.8.6.&.d.e.v.
01ee004c  5f 00 32 00 34 00 63 00 - 35 00 26 00 73 00 75 00  _.2.4.c.5.&.s.u.
01ee005c  62 00 73 00 79 00 73 00 - 5f 00 38 00 30 00 62 00  b.s.y.s._.8.0.b.
01ee006c  30 00 31 00 30 00 34 00 - 33 00 26 00 72 00 65 00  0.1.0.4.3.&.r.e.
01ee007c  76 00 5f 00 30 00 32 00 - 23 00 33 00 26 00 36 00  v._.0.2.#.3.&.6.
01ee008c  31 00 61 00 61 00 61 00 - 30 00 31 00 26 00 30 00  1.a.a.a.0.1.&.0.
01ee009c  26 00 66 00 64 00 23 00 - 7b 00 36 00 39 00 39 00  &.f.d.#.{.6.9.9.
01ee00ac  34 00 61 00 64 00 30 00 - 34 00 2d 00 39 00 33 00  4.a.d.0.4.-.9.3.
01ee00bc  65 00 66 00 2d 00 31 00 - 31 00 64 00 30 00 2d 00  e.f.-.1.1.d.0.-.
01ee00cc  61 00 33 00 63 00 63 00 - 2d 00 30 00 30 00 61 00  a.3.c.c.-.0.0.a.
01ee00dc  30 00 63 00 39 00 32 00 - 32 00 33 00 31 00 39 00  0.c.9.2.2.3.1.9.
01ee00ec  36 00 7d 00 5c 00 74 00 - 6f 00 70 00 6f 00 6c 00  6.}.\.t.o.p.o.l.
01ee00fc  6f 00 67 00 79 00 00 00 - 00 00 00 00 00 00 00 00  o.g.y...........
01ee010c  00 00 00 00 00 00 00 00 - 5c 00 5c 00 3f 00 5c 00  ........\.\.?.\.
01ee011c  70 00 63 00 69 00 23 00 - 76 00 65 00 6e 00 5f 00  p.c.i.#.v.e.n._.
01ee012c  38 00 30 00 38 00 36 00 - 26 00 64 00 65 00 76 00  8.0.8.6.&.d.e.v.

State Dump for Thread Id 0x7c0

eax=77562bda ebx=00000002 ecx=0000001c edx=00000000 esi=77f88ef8 edi=00000002
eip=77f88f03 esp=0035ff24 ebp=0035ff70 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: NtWaitForMultipleObjects
        77f88ef8 b8e9000000       mov     eax,0xe9
        77f88efd 8d542404         lea     edx,[esp+0x4]          ss:00de9e0b=????????
        77f88f01 cd2e             int     2e
        77f88f03 c21400           ret     0x14
        77f88f06 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0035FF70 7C59A10E 0035FF48 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects 
0035FFB4 7C57B388 00000000 00132790 7FFDEBF8 00000000 kernel32!WaitForMultipleObjects 
0035FFEC 00000000 77562BDA 00000000 00000000 00010000 kernel32!lstrcmpiW 

*----> Raw Stack Dump <----*
0035ff24  fb a1 59 7c 02 00 00 00 - 48 ff 35 00 01 00 00 00  ..Y|....H.5.....
0035ff34  00 00 00 00 00 00 00 00 - 90 27 13 00 00 00 00 00  .........'......
0035ff44  00 00 00 00 e0 02 00 00 - d0 02 00 00 80 81 a0 83  ................
0035ff54  d4 4b 06 80 00 00 00 00 - 00 00 00 00 00 00 00 00  .K..............
0035ff64  00 00 00 00 00 00 00 00 - b0 9c ba ae b4 ff 35 00  ..............5.
0035ff74  0e a1 59 7c 48 ff 35 00 - 01 00 00 00 00 00 00 00  ..Y|H.5.........
0035ff84  00 00 00 00 00 00 00 00 - 1a 2c 56 77 02 00 00 00  .........,Vw....
0035ff94  a4 ff 35 00 00 00 00 00 - ff ff ff ff f8 eb fd 7f  ..5.............
0035ffa4  e0 02 00 00 d0 02 00 00 - 00 00 00 00 00 00 00 00  ................
0035ffb4  ec ff 35 00 88 b3 57 7c - 00 00 00 00 90 27 13 00  ..5...W|.....'..
0035ffc4  f8 eb fd 7f 00 00 00 00 - 00 a0 fd 7f 1c 00 00 00  ................
0035ffd4  c0 ff 35 00 1c 00 00 00 - ff ff ff ff 54 1f 5c 7c  ..5.........T.\|
0035ffe4  08 2b 57 7c 00 00 00 00 - 00 00 00 00 00 00 00 00  .+W|............
0035fff4  da 2b 56 77 00 00 00 00 - 00 00 00 00 00 00 01 00  .+Vw............
00360004  02 00 00 00 02 00 03 00 - 04 00 05 00 06 00 04 00  ................
00360014  06 00 07 00 08 00 09 00 - 0a 00 08 00 0a 00 0b 00  ................
00360024  0c 00 0d 00 0e 00 0c 00 - 0e 00 0f 00 10 00 11 00  ................
00360034  12 00 10 00 12 00 13 00 - 14 00 15 00 16 00 14 00  ................
00360044  16 00 17 00 18 00 19 00 - 1a 00 18 00 1a 00 1b 00  ................
00360054  1c 00 1d 00 1e 00 1c 00 - 1e 00 1f 00 20 00 21 00  ............ .!.

State Dump for Thread Id 0x3b4

eax=01a3ef18 ebx=00000001 ecx=00000000 edx=00000000 esi=77f88ef8 edi=00000001
eip=77f88f03 esp=0213fde4 ebp=0213fe30 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: NtWaitForMultipleObjects
        77f88ef8 b8e9000000       mov     eax,0xe9
        77f88efd 8d542404         lea     edx,[esp+0x4]          ss:02bc9ccb=5946f800
        77f88f01 cd2e             int     2e
        77f88f03 c21400           ret     0x14
        77f88f06 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0213FE30 7C59A10E 0213FE08 00000001 00000000 0213FE28 ntdll!NtWaitForMultipleObjects 
0213FE60 510C2E51 00000001 000001F4 00000000 0213FE80 kernel32!WaitForMultipleObjects 
0213FF80 510A2329 000001F4 00000000 00000000 00000000 !<nosymbols> 
0213FFB4 7C57B388 01A31EFC 00000000 00001003 01A31EFC !<nosymbols> 
0213FFEC 00000000 510C38EB 01A31EFC 00000000 000000C1 kernel32!lstrcmpiW 

*----> Raw Stack Dump <----*
0213fde4  fb a1 59 7c 01 00 00 00 - 08 fe 13 02 01 00 00 00  ..Y|............
0213fdf4  00 00 00 00 28 fe 13 02 - 00 00 00 00 01 00 00 00  ....(...........
0213fe04  01 00 00 00 0c 04 00 00 - c2 b7 fc 77 48 07 a3 01  ...........wH...
0213fe14  44 fe 13 02 30 ad a3 01 - 8a 2c fb 77 00 00 a3 01  D...0....,.w....
0213fe24  28 ad a3 01 c0 b4 b3 ff - ff ff ff ff 60 fe 13 02  (...........`...
0213fe34  0e a1 59 7c 08 fe 13 02 - 01 00 00 00 00 00 00 00  ..Y|............
0213fe44  28 fe 13 02 00 00 00 00 - 00 2b 0c 51 01 00 00 00  (........+.Q....
0213fe54  80 fe 13 02 00 00 00 00 - f4 01 00 00 80 ff 13 02  ................
0213fe64  51 2e 0c 51 01 00 00 00 - f4 01 00 00 00 00 00 00  Q..Q............
0213fe74  80 fe 13 02 fc 1e a3 01 - fc 1e a3 01 0c 04 00 00  ................
0213fe84  00 00 00 00 18 ef a3 01 - 18 00 00 00 00 00 00 00  ................
0213fe94  20 d6 ea 17 ac fe 13 02 - 21 95 0c 51 2c d6 ea 17   .......!..Q,...
0213fea4  18 ef a3 01 0c 00 00 00 - c0 fe 13 02 00 00 a3 01  ................
0213feb4  04 00 00 00 00 ef a3 01 - 0c 00 00 00 d8 fe 13 02  ................
0213fec4  7f 13 0a 51 01 d6 ea 17 - 18 ef a3 01 54 fe 13 02  ...Q........T...
0213fed4  30 ad a3 01 dc ff 13 02 - 64 7e fb 77 78 16 f8 77  0.......d~.wx..w
0213fee4  ff ff ff ff fc fe 13 02 - 43 9e 09 51 00 00 a3 01  ........C..Q....
0213fef4  30 89 59 7c 00 00 00 00 - fb a1 59 7c 01 00 00 00  0.Y|......Y|....
0213ff04  20 ff 13 02 01 00 00 00 - 00 00 00 00 40 ff 13 02   ...........@...
0213ff14  00 00 00 00 fc 1e a3 01 - fc 1e a3 01 0c 04 00 00  ................

State Dump for Thread Id 0x800

eax=510c38eb ebx=00000040 ecx=77f8651b edx=00000000 esi=77f88ef8 edi=00000040
eip=77f88f03 esp=0ff7fddc ebp=0ff7fe28 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: NtWaitForMultipleObjects
        77f88ef8 b8e9000000       mov     eax,0xe9
        77f88efd 8d542404         lea     edx,[esp+0x4]          ss:10a09cc3=56fb7fcb
        77f88f01 cd2e             int     2e
        77f88f03 c21400           ret     0x14
        77f88f06 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0FF7FE28 7C59A10E 00185688 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects 
0FF7FE58 510C2E51 00000040 FFFFFFFF 00000000 0FF7FE78 kernel32!WaitForMultipleObjects 
0FF7FF78 510C362B FFFFFFFF 0000003F 01A3CA70 0FF7FF94 !<nosymbols> 
0FF7FF98 510C30C4 0000020A 01A3CA24 510C3144 0000020A !<nosymbols> 
0FF7FFB4 7C57B388 01A3CA24 0000020A 0000020A 01A3CA24 !<nosymbols> 
0FF7FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!lstrcmpiW 

State Dump for Thread Id 0x498

eax=00000000 ebx=181dff7c ecx=00000002 edx=00000000 esi=77f88f08 edi=00000588
eip=77f88f13 esp=181dff60 ebp=181dff84 iopl=0         nv up ei ng nz ac po cy
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000297


function: ZwWaitForSingleObject
        77f88f08 b8ea000000       mov     eax,0xea
        77f88f0d 8d542404         lea     edx,[esp+0x4]          ss:18c69e47=20007300
        77f88f11 cd2e             int     2e
        77f88f13 c20c00           ret     0xc
        77f88f16 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
181DFF84 7C57B3DB 00000588 00000005 00000000 211015C1 ntdll!ZwWaitForSingleObject 
181DFFEC 00000000 00000000 00000000 00000000 00000000 kernel32!WaitForSingleObject 

State Dump for Thread Id 0x7e8

eax=3266fe6c ebx=182dff84 ecx=00000000 edx=00000000 esi=77f88f08 edi=0000058c
eip=77f88f13 esp=182dff68 ebp=182dff8c iopl=0         nv up ei ng nz ac po cy
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000297


function: ZwWaitForSingleObject
        77f88f08 b8ea000000       mov     eax,0xea
        77f88f0d 8d542404         lea     edx,[esp+0x4]          ss:18d69e4f=6f002000
        77f88f11 cd2e             int     2e
        77f88f13 c20c00           ret     0xc
        77f88f16 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
182DFF8C 7C57B3DB 0000058C 00000008 00000000 2110FF1A ntdll!ZwWaitForSingleObject 
182DFFEC 00000000 2110FE90 00000000 00000000 00000380 kernel32!WaitForSingleObject 

*----> Raw Stack Dump <----*
182dff68  30 a0 59 7c 8c 05 00 00 - 00 00 00 00 84 ff 2d 18  0.Y|..........-.
182dff78  02 00 00 00 00 00 00 00 - cc b3 57 7c 80 c7 fe ff  ..........W|....
182dff88  ff ff ff ff ec ff 2d 18 - db b3 57 7c 8c 05 00 00  ......-...W|....
182dff98  08 00 00 00 00 00 00 00 - 1a ff 10 21 8c 05 00 00  ...........!....
182dffa8  08 00 00 00 f4 03 00 00 - 4c f7 12 00 00 00 00 00  ........L.......
182dffb8  88 b3 57 7c 00 00 00 00 - f4 03 00 00 4c f7 12 00  ..W|........L...
182dffc8  00 00 00 00 00 50 fd 7f - 08 07 16 21 c0 ff 2d 18  .....P.....!..-.
182dffd8  08 07 16 21 ff ff ff ff - 54 1f 5c 7c 08 2b 57 7c  ...!....T.\|.+W|
182dffe8  00 00 00 00 00 00 00 00 - 00 00 00 00 90 fe 10 21  ...............!
182dfff8  00 00 00 00 00 00 00 00 - 80 03 00 00 00 10 00 00  ................
182e0008  0e 00 00 00 50 00 00 00 - 00 00 00 00 a8 03 00 00  ....P...........
182e0018  72 66 00 00 89 08 00 00 - 22 00 00 00 17 00 00 00  rf......".......
182e0028  30 0e 2e 18 30 00 2e 18 - 00 00 00 00 00 00 00 00  0...0...........
182e0038  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
182e0048  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
182e0058  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
182e0068  b8 ca 3a 31 00 00 00 00 - 00 00 00 00 00 00 00 00  ..:1............
182e0078  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
182e0088  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
182e0098  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................

State Dump for Thread Id 0x148

eax=7c3494f6 ebx=01be5a18 ecx=0000002c edx=00000003 esi=00000020 edi=00c34600
eip=7c57b700 esp=0202fffc ebp=00000028 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000200


function: MulDiv
        7c57b6eb d1f9             sar     ecx,1
        7c57b6ed 03c1             add     eax,ecx
        7c57b6ef 83d200           adc     edx,0x0
        7c57b6f2 59               pop     ecx
        7c57b6f3 3bd1             cmp     edx,ecx
        7c57b6f5 73d3             jnb     PrivCopyFileExW+0x10a9 (7c58aeca)
        7c57b6f7 f7f1             div     ecx
        7c57b6f9 f7d8             neg     eax
        7c57b6fb 7fcd             jg      MoveFileWithProgressA+0x14a (7c5879ca)
        7c57b6fd c20c00           ret     0xc
        7c57b700 33ed             xor     ebp,ebp
        7c57b702 53               push    ebx
        7c57b703 50               push    eax
        7c57b704 6a00             push    0x0
        7c57b706 e92bfcffff       jmp     lstrcmpiW+0x65 (7c57b336)
        7c57b70b 90               nop
        7c57b70c 33ed             xor     ebp,ebp
        7c57b70e 50               push    eax
        7c57b70f 6a00             push    0x0
        7c57b711 e936d20100       jmp     ProcessIdToSessionId+0x140 (7c59894c)
        7c57b716 8bff             mov     edi,edi
        7c57b718 8b5c240c         mov     ebx,[esp+0xc]          ss:02ab9ee3=00000000

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
00000028 00000000 00000000 00000000 00000000 00000000 kernel32!MulDiv 

*----> Raw Stack Dump <----*
0202fffc  00 00 00 00 c8 00 00 00 - 00 01 00 00 ff ee ff ee  ................
0203000c  02 10 00 00 00 00 00 00 - 00 fe 00 00 00 00 10 00  ................
0203001c  00 20 00 00 00 02 00 00 - 00 20 00 00 1d 00 00 00  . ....... ......
0203002c  ff ef fd 7f 0b 00 08 06 - 00 00 00 00 00 00 00 00  ................
0203003c  00 00 00 00 00 00 00 00 - 98 05 03 02 0f 00 00 00  ................
0203004c  f8 ff ff ff 50 00 03 02 - 50 00 03 02 40 06 03 02  ....P...P...@...
0203005c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0203006c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0203007c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0203008c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0203009c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
020300ac  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
020300bc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
020300cc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
020300dc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
020300ec  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
020300fc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0203010c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0203011c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0203012c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................

State Dump for Thread Id 0x3c8

eax=00000000 ebx=00000040 ecx=00000101 edx=00000000 esi=77f88ef8 edi=00000040
eip=77f88f03 esp=1be1fddc ebp=1be1fe28 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: NtWaitForMultipleObjects
        77f88ef8 b8e9000000       mov     eax,0xe9
        77f88efd 8d542404         lea     edx,[esp+0x4]          ss:1c8a9cc3=bba78fff
        77f88f01 cd2e             int     2e
        77f88f03 c21400           ret     0x14
        77f88f06 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
1BE1FE28 7C59A10E 0014B390 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects 
1BE1FE58 510C2E51 00000040 FFFFFFFF 00000000 1BE1FE78 kernel32!WaitForMultipleObjects 
1BE1FF78 510C362B FFFFFFFF 0000003F 01A34BE0 1BE1FF94 !<nosymbols> 
1BE1FF98 510C30C4 0000020A 01A339AC 510C3144 0000020A !<nosymbols> 
1BE1FFB4 7C57B388 01A339AC 0000020A 0000020A 01A339AC !<nosymbols> 
1BE1FFEC 00000000 510C38EB 01A339AC 00000000 1BED0000 kernel32!lstrcmpiW 

*----> Raw Stack Dump <----*
1be1fddc  fb a1 59 7c 40 00 00 00 - 90 b3 14 00 01 00 00 00  ..Y|@...........
1be1fdec  00 00 00 00 00 00 00 00 - 00 00 00 00 40 00 00 00  ............@...
1be1fdfc  01 00 00 00 e0 4f 80 85 - d0 cf ca e2 00 00 00 00  .....O..........
1be1fe0c  08 9f a3 81 00 00 00 00 - 20 9f a3 81 40 af a8 81  ........ ...@...
1be1fe1c  e0 2a a4 81 00 27 54 fc - c0 26 54 fc 58 fe e1 1b  .*...'T..&T.X...
1be1fe2c  0e a1 59 7c 90 b3 14 00 - 01 00 00 00 00 00 00 00  ..Y|............
1be1fe3c  00 00 00 00 00 00 00 00 - 00 2b 0c 51 40 00 00 00  .........+.Q@...
1be1fe4c  78 fe e1 1b 00 00 00 00 - ff ff ff ff 78 ff e1 1b  x...........x...
1be1fe5c  51 2e 0c 51 40 00 00 00 - ff ff ff ff 00 00 00 00  Q..Q@...........
1be1fe6c  78 fe e1 1b ac 39 a3 01 - ac 39 a3 01 f4 02 00 00  x....9...9......
1be1fe7c  e4 03 00 00 e8 02 00 00 - f4 03 00 00 ec 02 00 00  ................
1be1fe8c  dc 03 00 00 d8 03 00 00 - d4 03 00 00 d0 03 00 00  ................
1be1fe9c  cc 03 00 00 c8 03 00 00 - c4 03 00 00 c0 03 00 00  ................
1be1feac  bc 03 00 00 b8 03 00 00 - b4 03 00 00 b0 03 00 00  ................
1be1febc  ac 03 00 00 a8 03 00 00 - a4 03 00 00 a0 03 00 00  ................
1be1fecc  9c 03 00 00 98 03 00 00 - 94 03 00 00 90 03 00 00  ................
1be1fedc  8c 03 00 00 88 03 00 00 - 84 03 00 00 80 03 00 00  ................
1be1feec  7c 03 00 00 78 03 00 00 - 74 03 00 00 70 03 00 00  |...x...t...p...
1be1fefc  6c 03 00 00 68 03 00 00 - 64 03 00 00 60 03 00 00  l...h...d...`...
1be1ff0c  5c 03 00 00 58 03 00 00 - 54 03 00 00 50 03 00 00  \...X...T...P...

State Dump for Thread Id 0x7d0

eax=778321fe ebx=00000003 ecx=0012ed74 edx=00000000 esi=77f88ef8 edi=00000003
eip=77f88f03 esp=1c69fd24 ebp=1c69fd70 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: NtWaitForMultipleObjects
        77f88ef8 b8e9000000       mov     eax,0xe9
        77f88efd 8d542404         lea     edx,[esp+0x4]          ss:1d129c0b=????????
        77f88f01 cd2e             int     2e
        77f88f03 c21400           ret     0x14
        77f88f06 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
1C69FD70 7C59A10E 1C69FD48 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects 
1C69FFB4 7C57B388 00000004 000B000A 7C3280D0 1D828118 kernel32!WaitForMultipleObjects 
1C69FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!lstrcmpiW 

State Dump for Thread Id 0x6c4

eax=00000102 ebx=80064bd4 ecx=80064bd4 edx=00000000 esi=0013c978 edi=0013c9b8
eip=77f88b37 esp=3c14fe28 ebp=3c14ff74 iopl=0         nv up ei pl nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000206


function: ZwReplyWaitReceivePortEx
        77f88b2c b8ac000000       mov     eax,0xac
        77f88b31 8d542404         lea     edx,[esp+0x4]          ss:3cbd9d0f=????????
        77f88b35 cd2e             int     2e
        77f88b37 c21400           ret     0x14
        77f88b3a 8bff             mov     edi,edi

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
3C14FF74 77D4E0C0 77D4E003 0013C978 00000200 0259FC5C ntdll!ZwReplyWaitReceivePortEx 
3C14FFA8 77D4AF16 1A7F35F8 3C14FFEC 7C57B388 33C0AC28 rpcrt4!UuidCreate 
3C14FFB4 7C57B388 33C0AC28 00000200 0259FC5C 33C0AC28 rpcrt4!RpcMgmtSetCancelTimeout 
3C14FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!lstrcmpiW