Post SP1 error on SBS2003 Standard (icw.exe crashes, but server is otherwise fine)

Hi all -

I recently upgraded an SBS2003 Standard server to SP1 (and Exchange 2003
SP2). The server was running fine before this, and is actually running fine
now, but I can no longer run the CEICW - icw.exe crashes and generates a
drwatson error in the app log. No new icwlog.txt file is generated (I
renamed the old one during troubleshooting as a test) as it seems to puke
before it can write a log.

Everything else seems to be running fine; this was a clean install of SBS
last May, set up via all the wizards (yes, Marina!). To do the updates, I
followed all the instructions on smallbizserver, in the right order. Event
logs are pretty clean outside of the application error when I try to run the
wizard (the first window pops up, I hit next, and it disappears).

Any ideas? This is a server in a remote location so getting there to do any
sort of reinstall may be a pain; I do most of my admin for them remotely.

They're running Trend CSM for SMB 2.0; I had (rather stupidly) installed it
on 8080 as this was before I knew better, but it does seem to be working. If
you think that's related, I suppose I could try fixing that, but it does
seem fine, as does the rest of IIS/sharepoint, honestly.


Below, please find:

....the setup log for SBS 2003 SP1 log (and note; as mentioned, IIS seems to
be OK. I didn't try creating: a test virtual directory or reinstalling IIS
as I was afraid I'd break something else)
and
.....the Drwatson info

Thank you all!

-------------------------------------------------
[Setup run at 16:42:04 on 12/08/05]
Component Name: Server Tools
Version: 5.0
Installation Status: Failure
Error Message: An error occurred while creating virtual directories in
Internet Information Services (IIS). Manually create a test virtual
directory, and then retry installing IIS from Add/Remove Windows Components.

Component Name: Administration
Version: 5.0
Installation Status: Success
Error Message: NA

Component Name: Monitoring
Version: 5.0
Installation Status: Success
Error Message: NA

Component Name: Networking
Version: 5.0
Installation Status: Success
Error Message: NA

Component Name: Intranet
Version: 5.0
Installation Status: Success
Error Message: NA

Component Name: Client Deployment
Version: 5.0
Installation Status: Success
Error Message: NA

Component Name: Microsoft Office Outlook 2003 (Service Pack 1)
Version: 5.0
Installation Status: Success
Error Message: NA

Component Name: Microsoft Search
Version: 2.0
Installation Status: Success
Error Message: NA

Component Name: Server Configuration
Version: NA
Installation Status: Success
Error Message: NA

Component Name: Windows Server 2003 Configuration
Version: 5.2
Installation Status: Success
Error Message: NA

Component Name: Domain Configuration
Version: 5.2
Installation Status: Success
Error Message: NA

Component Name: Networking Configuration
Version: 5.2
Installation Status: Success
Error Message: NA

Component Name: Network Identification
Version: 5.2
Installation Status: Success
Error Message: NA

Component Name: Internet Information Services (IIS)
Version: 5.2
Installation Status: Success
Error Message: NA

Component Name: Windows Small Business Server 2003
Version:
Installation Status: Success
Error Message: NA

--------------------------------------
And here's the output from the DrWatson dump, if anyone is interested - may
be TMI!


Application exception occurred:
App: C:\Program Files\Microsoft Windows Small Business
Server\Networking\icw\icw.exe (pid=2248)
When: 12/8/2005 @ 16:53:37.895
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: DSAM01
User Name: wiggy
Terminal Session Id: 0
Number of Processors: 4
Processor Type: x86 Family 15 Model 4 Stepping 1
Windows Version: 5.2
Current Build: 3790
Service Pack: 1
Current Type: Multiprocessor Free
Registered Organization: Dock Street
Registered Owner: wiggy

*----> Task List <----*
0 System Process
4 System
568 smss.exe
732 csrss.exe
780 winlogon.exe
888 services.exe
916 lsass.exe
1168 svchost.exe
1404 svchost.exe
1460 svchost.exe
1496 svchost.exe
1564 svchost.exe
1184 spoolsv.exe
1524 pbeagent.exe
1540 PBESER~1.EXE
1652 Dfssvc.exe
1748 DUEngine.exe
1892 dns.exe
1932 svchost.exe
292 inetinfo.exe
320 llssrv.exe
344 sqlservr.exe
620 sqlservr.exe
804 ntfrs.exe
2076 ntrtscan.exe
2096 ofcservice.exe
2168 svchost.exe
2180 sbscrexe.exe
2256 InstMon.exe
2272 DbServer.exe
2280 NSAgent.exe
2312 snmp.exe
2432 OWSTIMER.EXE
2528 tmlisten.exe
2600 wins.exe
2948 tcpsvcs.exe
2968 exmgmt.exe
2996 RMonitor.exe
3092 RMonUI.exe
3360 mad.exe
3440 mssearch.exe
3540 svchost.exe
3784 InstRTS.exe
4008 store.exe
396 SmexVS.exe
1032 SMEXMA.exe
364 InstWeb.exe
2252 SmexHS.exe
3036 wmiprvse.exe
1308 ofcdog.exe
4184 wmiprvse.exe
4496 cm_smex.exe
4772 w3wp.exe
5008 svchost.exe
5264 msdtc.exe
4396 Explorer.EXE
3044 pccntmon.exe
3964 sqlmangr.exe
5720 iexplore.exe
5880 mmc.exe
5556 mmc.exe
2248 icw.exe
6032 drwtsn32.exe

*----> Module List <----*
0000000000400000 - 0000000000423000: C:\Program Files\Microsoft Windows
Small Business Server\Networking\icw\icw.exe
0000000039800000 - 000000003983d000: C:\Program Files\Microsoft Windows
Small Business Server\Networking\ICW\wizemail.dll
000000003b400000 - 000000003b421000: C:\Program Files\Microsoft Windows
Small Business Server\Networking\ICW\wizcert.dll
000000003c000000 - 000000003c059000: C:\Program Files\Microsoft Windows
Small Business Server\Networking\ICW\wizinet.dll
000000003d800000 - 000000003d817000: C:\Program Files\Windows for Small
Business Server\Administration\wizchain.dll
0000000047c00000 - 0000000047c39000: C:\Program Files\Microsoft Windows
Small Business Server\Networking\ICW\wizrfire.dll
000000004b750000 - 000000004b7d9000: C:\WINDOWS\system32\hhctrl.ocx
000000004e7c0000 - 000000004e81c000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.WinHTTP_6595b64144ccf1df_5.1.3790.1830_x-ww_74150EFB\WINHTTP.dll
000000005ccf0000 - 000000005ccff000: C:\WINDOWS\system32\SAMLIB.dll
000000005f270000 - 000000005f2c9000: C:\WINDOWS\system32\hnetcfg.dll
0000000067150000 - 0000000067159000: C:\WINDOWS\system32\HTTPAPI.dll
000000006c620000 - 000000006c62a000: C:\WINDOWS\system32\DSAUTH.dll
000000006d230000 - 000000006d246000: C:\WINDOWS\system32\DHCPSAPI.DLL
0000000071ae0000 - 0000000071ae8000: C:\WINDOWS\System32\wshtcpip.dll
0000000071b20000 - 0000000071b61000: C:\WINDOWS\system32\mswsock.dll
0000000071b70000 - 0000000071ba6000: C:\WINDOWS\system32\UxTheme.dll
0000000071bf0000 - 0000000071bf8000: C:\WINDOWS\system32\WS2HELP.dll
0000000071c00000 - 0000000071c17000: C:\WINDOWS\system32\WS2_32.dll
0000000071c40000 - 0000000071c98000: C:\WINDOWS\system32\NETAPI32.dll
00000000753e0000 - 0000000075488000: C:\WINDOWS\system32\RASDLG.dll
0000000076190000 - 00000000761a2000: C:\WINDOWS\system32\MSASN1.dll
00000000761b0000 - 0000000076243000: C:\WINDOWS\system32\CRYPT32.dll
0000000076290000 - 00000000762ad000: C:\WINDOWS\system32\IMM32.dll
00000000762b0000 - 00000000762fa000: C:\WINDOWS\system32\comdlg32.dll
00000000766f0000 - 0000000076705000: C:\WINDOWS\system32\NTDSAPI.dll
0000000076a80000 - 0000000076a98000: C:\WINDOWS\system32\ATL.DLL
0000000076aa0000 - 0000000076acd000: C:\WINDOWS\system32\WINMM.dll
0000000076b70000 - 0000000076b7b000: C:\WINDOWS\system32\PSAPI.DLL
0000000076b80000 - 0000000076bae000: C:\WINDOWS\system32\credui.dll
0000000076cd0000 - 0000000076ce9000: C:\WINDOWS\system32\MPRAPI.dll
0000000076cf0000 - 0000000076d0a000: C:\WINDOWS\system32\iphlpapi.dll
0000000076dc0000 - 0000000076de7000: C:\WINDOWS\system32\adsldpc.dll
0000000076df0000 - 0000000076e23000: C:\WINDOWS\system32\ACTIVEDS.dll
0000000076e30000 - 0000000076e3c000: C:\WINDOWS\system32\rtutils.dll
0000000076e40000 - 0000000076e52000: C:\WINDOWS\system32\rasman.dll
0000000076e60000 - 0000000076e8f000: C:\WINDOWS\system32\TAPI32.dll
0000000076e90000 - 0000000076ecf000: C:\WINDOWS\system32\RASAPI32.dll
0000000076ed0000 - 0000000076ef9000: C:\WINDOWS\system32\DNSAPI.dll
0000000076f10000 - 0000000076f3e000: C:\WINDOWS\system32\WLDAP32.dll
0000000076f50000 - 0000000076f63000: C:\WINDOWS\system32\Secur32.dll
0000000077010000 - 00000000770d6000: C:\WINDOWS\system32\COMRes.dll
00000000770e0000 - 00000000771ea000: C:\WINDOWS\system32\SETUPAPI.dll
0000000077210000 - 00000000772b8000: C:\WINDOWS\system32\WININET.dll
0000000077380000 - 0000000077412000: C:\WINDOWS\system32\USER32.dll
0000000077420000 - 0000000077523000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF\comctl32.dll
0000000077530000 - 00000000775c7000:
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_5.82.3790.1830_x-ww_1B6F474A\COMCTL32.dll
0000000077670000 - 00000000777a4000: C:\WINDOWS\system32\ole32.dll
00000000777b0000 - 0000000077833000: C:\WINDOWS\system32\CLBCatQ.DLL
0000000077b90000 - 0000000077b98000: C:\WINDOWS\system32\VERSION.dll
0000000077ba0000 - 0000000077bfa000: C:\WINDOWS\system32\msvcrt.dll
0000000077c00000 - 0000000077c48000: C:\WINDOWS\system32\GDI32.dll
0000000077c50000 - 0000000077cef000: C:\WINDOWS\system32\RPCRT4.dll
0000000077d00000 - 0000000077d8c000: C:\WINDOWS\system32\OLEAUT32.dll
0000000077da0000 - 0000000077df2000: C:\WINDOWS\system32\SHLWAPI.dll
0000000077e40000 - 0000000077f42000: C:\WINDOWS\system32\kernel32.dll
0000000077f50000 - 0000000077fec000: C:\WINDOWS\system32\ADVAPI32.dll
00000000780c0000 - 0000000078121000: C:\WINDOWS\system32\MSVCP60.dll
000000007c800000 - 000000007c8c0000: C:\WINDOWS\system32\ntdll.dll
000000007c8d0000 - 000000007d0d3000: C:\WINDOWS\system32\SHELL32.dll

*----> State Dump for Thread Id 0xa10 <----*

eax=000a41e8 ebx=7739c5b9 ecx=00259820 edx=7c82ed01 esi=00259820
edi=00060464
eip=000a41e8 esp=0006e8d4 ebp=0006e904 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246

function: <nosymbols>
No prior disassembly possible
000a41e8 c7442404b8872500 mov dword ptr [esp+0x4],0x2587b8
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\Program Files\Microsoft Windows Small Business
Server\Networking\ICW\wizinet.dll -
000a41f0 e93ffff63b jmp wizinet!DllUnregisterServer+0x2383
(3c014134)
000a41f5 0000 add [eax],al
000a41f7 0003 add [ebx],al
000a41f9 0003 add [ebx],al
000a41fb 00ba010c0001 add [edx+0x1000c01],bh
000a4201 0100 add [eax],eax
000a4203 0000 add [eax],al
000a4205 0000 add [eax],al
FAULT ->000a41e8 c7442404b8872500 mov dword ptr [esp+0x4],0x2587b8
ss:0023:0006e8d8=00060464
000a41f0 e93ffff63b jmp wizinet!DllUnregisterServer+0x2383
(3c014134)
000a41f5 0000 add [eax],al
000a41f7 0003 add [ebx],al
000a41f9 0003 add [ebx],al
000a41fb 00ba010c0001 add [edx+0x1000c01],bh
000a4201 0100 add [eax],eax
000a4203 0000 add [eax],al
000a4205 0000 add [eax],al
000a4207 0512000000 add eax,0x12
000a420c 2002 and [edx],al

*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\Program Files\Windows for Small Business
Server\Administration\wizchain.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\USER32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF\comctl32.dll
-
*** ERROR: Module load completed but symbols could not be loaded for
C:\Program Files\Microsoft Windows Small Business
Server\Networking\icw\icw.exe
ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
0006e8d0 3d805c8d 00060464 00000110 00000000 0xa41e8
0006e904 7739c3b7 00060464 00000110 00000000 wizchain+0x5c8d
0006e930 77394db3 3d805b7d 00060464 00000110 USER32!EnableMenuItem+0x4cd4
0006e9ac 77394c56 00089bfc 3d805b7d 00060464 USER32!SetWindowLongW+0x47f
0006e9f4 7738ff24 00000000 00000110 00000000 USER32!SetWindowLongW+0x322
0006ea24 7738fd7e 00584ba8 00580e08 00000000 USER32!GetDesktopWindow+0x94d
0006eadc 77389ade 3d800000 00584ba8 00000144 USER32!GetDesktopWindow+0x7a7
0006eb00 773a463b 3d800000 3c044ba0 00210456
USER32!CreateDialogIndirectParamAorW+0x33
0006eb20 774279a5 3d800000 3c044ba0 00210456
USER32!CreateDialogIndirectParamW+0x1b
0006eb70 77427a4d 000ad280 000a8990 00210456
comctl32!DestroyPropertySheetPage+0x12c
0006eb90 77429d12 000ad280 000a8990 00210456
comctl32!DestroyPropertySheetPage+0x1d4
0006edac 7742a2d7 000ad280 00000001 000ad280 comctl32!Ordinal164+0x4fb
0006edc8 7742a333 000ad280 00000000 00000001 comctl32!Ordinal164+0xac0
0006ede8 7742bf05 000ad280 ffffff31 00003024 comctl32!Ordinal164+0xb1c
0006ee04 7742c42c 000ad280 00003024 0007047c comctl32!Ordinal164+0x26ee
0006ee7c 7739c3b7 00210456 00000111 00003024 comctl32!Ordinal164+0x2c15
0006eea8 77394db3 7742bf7b 00210456 00000111 USER32!EnableMenuItem+0x4cd4
0006ef24 77394c56 0008823c 7742bf7b 00210456 USER32!SetWindowLongW+0x47f
0006ef6c 7738b294 00000000 00000111 00003024 USER32!SetWindowLongW+0x322
0006ef9c 7739d005 005832a0 00580e08 00003024 USER32!IsDlgButtonChecked+0x1b5
0006efbc 77448778 00210456 00000111 00003024 USER32!SendMessageW+0x49
0006efdc 7744885a 000a8f38 00000000 0011001f comctl32!Ordinal384+0xc8f9
0006eff8 7744ab5f 000a8f38 00000001 0006f100 comctl32!Ordinal384+0xc9db
0006f088 7739c3b7 0007047c 00000202 00000000 comctl32!Ordinal384+0xece0
0006f0b4 7739c484 7744a2d8 0007047c 00000202 USER32!EnableMenuItem+0x4cd4
0006f12c 77395563 0008823c 7744a2d8 0007047c USER32!EnableMenuItem+0x4da1
0006f15c 77395589 7744a2d8 0007047c 00000202 USER32!CopyRect+0x78
0006f17c 7743181f 7744a2d8 0007047c 00000202 USER32!CallWindowProcW+0x1b
0006f198 77431b72 0007047c 00000202 00000000 comctl32!Ordinal234+0x22e
0006f1f4 77431d34 000ad998 0007047c 00000202
comctl32!RemoveWindowSubclass+0x17e
0006f218 77428411 0007047c 00000202 00000000 comctl32!DefSubclassProc+0x46
0006f234 77431b72 0007047c 00000202 00000000
comctl32!CreatePropertySheetPageA+0x7ff
0006f290 77431d97 000ad998 0007047c 00000202
comctl32!RemoveWindowSubclass+0x17e
0006f2e4 7739c3b7 0007047c 00000202 00000000 comctl32!DefSubclassProc+0xa9
0006f310 7739c484 77431d43 0007047c 00000202 USER32!EnableMenuItem+0x4cd4
0006f388 7739c73c 0008823c 77431d43 0007047c USER32!EnableMenuItem+0x4da1
0006f3f0 7739c778 0006f45c 00000000 0006f424 USER32!GetWindowLongW+0x183
0006f400 773929e5 0006f45c 00000000 0006f45c USER32!DispatchMessageW+0xf
0006f424 7742a4b3 00210456 00583880 000ad510 USER32!IsDialogMessageW+0xdb
0006f440 7742caff 000ad280 0006f45c 000ad378 comctl32!Ordinal164+0xc9c
0006f498 7742ccea 00000000 00000000 00257ab4 comctl32!Ordinal164+0x32e8
0006f4b0 7742cd05 0006f510 00000000 0006f4f8 comctl32!Ordinal164+0x34d3
0006f4c0 3d804435 0006f510 0006f544 00257ab4 comctl32!PropertySheetW+0xf
0006f4f8 3d8063e8 0006f510 00000001 00000000 wizchain+0x4435
0006f58c 0040a4b4 00000000 0006f634 00000000 wizchain+0x63e8
0006fcd4 0040b3e3 0125c444 0025ba1c 00000072 icw+0xa4b4
0006fd88 00000000 00000000 00000000 00000000 icw+0xb3e3

*----> Raw Stack Dump <----*
000000000006e8d4 8d 5c 80 3d 64 04 06 00 - 10 01 00 00 00 00 00 00
..\.=d...........
000000000006e8e4 20 98 25 00 7c e9 06 00 - 7d 5b 80 3d 00 00 00 00
..%.|...}[.=....
000000000006e8f4 00 00 00 00 de 0a 0a 2e - 7d 5b 80 3d 48 eb 00 00
.........}[.=H...
000000000006e904 30 e9 06 00 b7 c3 39 77 - 64 04 06 00 10 01 00 00
0.....9wd.......
000000000006e914 00 00 00 00 98 89 0a 00 - 7d 5b 80 3d cd ab ba dc
.........}[.=....
000000000006e924 00 00 00 00 7c e9 06 00 - 7d 5b 80 3d ac e9 06 00
.....|...}[.=....
000000000006e934 b3 4d 39 77 7d 5b 80 3d - 64 04 06 00 10 01 00 00
..M9w}[.=d.......
000000000006e944 00 00 00 00 98 89 0a 00 - 10 01 00 00 64 04 06 00
.............d...
000000000006e954 a8 4b 58 00 24 00 00 00 - 01 00 00 00 d0 73 08 00
..KX.$........s..
000000000006e964 fc 9b 08 00 30 00 00 00 - 2f 8c f7 ff 03 64 f7 ff
.....0.../....d..
000000000006e974 69 4d 39 77 00 00 00 00 - 00 00 00 00 01 00 00 00
iM9w............
000000000006e984 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
000000000006e994 4c e9 06 00 00 e5 06 00 - 60 eb 06 00 87 39 3b 77
L.......`....9;w
000000000006e9a4 d8 4d 39 77 00 00 00 00 - f4 e9 06 00 56 4c 39 77
..M9w........VL9w
000000000006e9b4 fc 9b 08 00 7d 5b 80 3d - 64 04 06 00 10 01 00 00
.....}[.=d.......
000000000006e9c4 00 00 00 00 98 89 0a 00 - bc 4b 58 00 fc e9 06 00
..........KX.....
000000000006e9d4 10 01 00 00 a8 4b 58 00 - 38 07 00 00 87 00 00 00
......KX.8.......
000000000006e9e4 00 00 00 00 00 00 00 00 - dc 4e 58 00 64 04 06 00
..........NX.d...
000000000006e9f4 24 ea 06 00 24 ff 38 77 - 00 00 00 00 10 01 00 00
$...$.8w........
000000000006ea04 00 00 00 00 98 89 0a 00 - 00 00 00 00 00 00 00 00
.................

*----> State Dump for Thread Id 0x1708 <----*

eax=00000000 ebx=00000000 ecx=00000000 edx=00000002 esi=00adfdc0
edi=00000000
eip=7c82ed54 esp=00adfd80 ebp=00adfd9c iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\ntdll.dll -
function: ntdll!KiFastSystemCallRet
7c82ed36 e82c000000 call ntdll!RtlRaiseException (7c82ed67)
7c82ed3b 8b0424 mov eax,[esp]
7c82ed3e 8be5 mov esp,ebp
7c82ed40 5d pop ebp
7c82ed41 c3 ret
7c82ed42 8da42400000000 lea esp,[esp]
7c82ed49 8da42400000000 lea esp,[esp]
ntdll!KiFastSystemCall:
7c82ed50 8bd4 mov edx,esp
7c82ed52 0f34 sysenter
ntdll!KiFastSystemCallRet:
7c82ed54 c3 ret
7c82ed55 8da42400000000 lea esp,[esp]
7c82ed5c 8d642400 lea esp,[esp]
ntdll!KiIntSystemCall:
7c82ed60 8d542408 lea edx,[esp+0x8]
7c82ed64 cd2e int 2e
7c82ed66 c3 ret
ntdll!RtlRaiseException:
7c82ed67 55 push ebp
7c82ed68 8bec mov ebp,esp
7c82ed6a 8da42430fdffff lea esp,[esp-0x2d0]

*----> Stack Back Trace <----*
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be
wrong.
00adfd9c 3c038a4c 00adfdc0 00000000 00000000 ntdll!KiFastSystemCallRet
00adfe40 00000000 00000000 00000000 00000000 wizinet!AddPortA+0x15f54

*----> Raw Stack Dump <----*
0000000000adfd80 8d c7 39 77 c0 c7 39 77 - c0 fd ad 00 00 00 00 00
...9w..9w........
0000000000adfd90 00 00 00 00 00 00 00 00 - 95 c7 39 77 40 fe ad 00
...........9w@...
0000000000adfda0 4c 8a 03 3c c0 fd ad 00 - 00 00 00 00 00 00 00 00
L..<............
0000000000adfdb0 00 00 00 00 00 00 00 00 - d8 78 25 00 40 78 25 00
..........x%.@x%.
0000000000adfdc0 54 04 19 00 ea 07 00 00 - 00 00 00 00 00 00 00 00
T...............
0000000000adfdd0 5f 0e 05 00 1d 01 00 00 - 35 01 00 00 00 00 00 00
_.......5.......
0000000000adfde0 d8 82 25 00 00 00 00 00 - 01 00 00 00 01 00 00 00
...%.............
0000000000adfdf0 01 01 02 02 57 69 6e 53 - 6f 63 6b 20 32 2e 30 00
.....WinSock 2.0.
0000000000adfe00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000000adfe10 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000000adfe20 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000000adfe30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000000adfe40 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000000adfe50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000000adfe60 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000000adfe70 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000000adfe80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000000adfe90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000000adfea0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................
0000000000adfeb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
.................

*----> State Dump for Thread Id 0x171c <----*

eax=71b23e4b ebx=c0000000 ecx=00000000 edx=00000000 esi=00000000
edi=71b593b8
eip=7c82ed54 esp=00b5ff80 ebp=00b5ffb8 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246

function: ntdll!KiFastSystemCallRet
7c82ed36 e82c000000 call ntdll!RtlRaiseException (7c82ed67)
7c82ed3b 8b0424 mov eax,[esp]
7c82ed3e 8be5 mov esp,ebp
7c82ed40 5d pop ebp
7c82ed41 c3 ret
7c82ed42 8da42400000000 lea esp,[esp]
7c82ed49 8da42400000000 lea esp,[esp]
ntdll!KiFastSystemCall:
7c82ed50 8bd4 mov edx,esp
7c82ed52 0f34 sysenter
ntdll!KiFastSystemCallRet:
7c82ed54 c3 ret
7c82ed55 8da42400000000 lea esp,[esp]
7c82ed5c 8d642400 lea esp,[esp]
ntdll!KiIntSystemCall:
7c82ed60 8d542408 lea edx,[esp+0x8]
7c82ed64 cd2e int 2e
7c82ed66 c3 ret
ntdll!RtlRaiseException:
7c82ed67 55 push ebp
7c82ed68 8bec mov ebp,esp
7c82ed6a 8da42430fdffff lea esp,[esp-0x2d0]

*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\kernel32.dll -
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be
wrong.
00b5ffb8 77e66063 71b2f85e 00000000 00000000 ntdll!KiFastSystemCallRet
00b5ffec 00000000 71b23e4b 000a41b8 00000000
kernel32!GetModuleFileNameA+0xeb

*----> Raw Stack Dump <----*
0000000000b5ff80 f4 1b 82 7c b4 3e b2 71 - e0 01 00 00 c0 ff b5 00
....|.>.q........
0000000000b5ff90 b4 ff b5 00 a8 ff b5 00 - 00 3f b2 71 00 00 00 00
..........?.q....
0000000000b5ffa0 00 00 00 00 b8 41 0a 00 - 00 00 00 00 1c 00 00 00
......A..........
0000000000b5ffb0 00 00 b2 71 78 26 ae 00 - ec ff b5 00 63 60 e6 77
....qx&......c`.w
0000000000b5ffc0 5e f8 b2 71 00 00 00 00 - 00 00 00 00 b8 41 0a 00
^..q.........A..
0000000000b5ffd0 e0 77 39 8a c4 ff b5 00 - b8 9d 5d 88 ff ff ff ff
..w9.......].....
0000000000b5ffe0 98 b7 e6 77 70 60 e6 77 - 00 00 00 00 00 00 00 00
....wp`.w........
0000000000b5fff0 00 00 00 00 4b 3e b2 71 - b8 41 0a 00 00 00 00 00
.....K>.q.A......
0000000000b60000 01 00 00 00 f0 72 0a 00 - 10 00 b6 00 00 00 00 00
......r..........
0000000000b60010 18 00 b6 00 00 00 00 00 - 20 00 b6 00 00 00 00 00
......... .......
0000000000b60020 28 00 b6 00 00 00 00 00 - 30 00 b6 00 00 00 00 00
(.......0.......
0000000000b60030 38 00 b6 00 00 00 00 00 - 40 00 b6 00 00 00 00 00
8.......@.......
0000000000b60040 48 00 b6 00 00 00 00 00 - 50 00 b6 00 00 00 00 00
H.......P.......
0000000000b60050 58 00 b6 00 00 00 00 00 - 60 00 b6 00 00 00 00 00
X.......`.......
0000000000b60060 68 00 b6 00 00 00 00 00 - 70 00 b6 00 00 00 00 00
h.......p.......
0000000000b60070 78 00 b6 00 00 00 00 00 - 80 00 b6 00 00 00 00 00
x...............
0000000000b60080 88 00 b6 00 00 00 00 00 - 90 00 b6 00 00 00 00 00
.................
0000000000b60090 98 00 b6 00 00 00 00 00 - a0 00 b6 00 00 00 00 00
.................
0000000000b600a0 a8 00 b6 00 00 00 00 00 - b0 00 b6 00 00 00 00 00
.................
0000000000b600b0 b8 00 b6 00 00 00 00 00 - c0 00 b6 00 00 00 00 00
.................



.

Quantcast