TD  <D  LfLeÏ   R¦¸>S¦¸>
 @          R       R   ]C  Ø   D r W a t s o n   C A D     0 5   0 7   2 0 0 3   0 8   2 3   1 2   1 3 6   c 0 0 0 0 0 0 5   7 7 8 8 2 1 E 1   R t l E n t e r C r i t i c a l S e c t i o n   

Anwendungsausnahme aufgetreten:
        Anwendung:  (pid=1060)
        Wann: 07.05.2003 @ 08:23:12.136
        Ausnahmenummer: c0000005 (Zugriffsverletzung)

*----> Systeminformationen <----*
        Computername: CAD
        Benutzername: Administrator
        Prozessoranzahl: 1
        Prozessortyp: x86 Family 6 Model 5 Stepping 2
        Windows 2000-Version: 5.0
        Aktuelles Build: 2195
        Service Pack: 2
        Aktueller Typ: Uniprocessor Free
        Firma: UWB 700.441
        Besitzer: Stadt Bielefeld

*----> Taskliste <----*
   0 Idle.exe
   8 System.exe
 180 smss.exe
 204 csrss.exe
 224 winlogon.exe
 252 services.exe
 264 lsass.exe
 424 svchost.exe
 448 ccEvtMgr.exe
 532 SPOOLSV.exe
 568 svchost.exe
 600 Navapsvc.exe
 624 NPROTECT.exe
 676 regsvc.exe
 748 mstask.exe
 768 winmgmt.exe
 308 explorer.exe
 984 fpdisp4.exe
1084 ccApp.exe
1108 internat.exe
1068 hardcopy.exe
1060 ALWIN.exe
1020 drwtsn32.exe
   0 _Total.exe

(00400000 - 00AC7000) 
(77880000 - 77901000) 
(5D300000 - 5D381000) 
(77C60000 - 77CAA000) 
(77F40000 - 77F7C000) 
(77E70000 - 77F32000) 
(77E00000 - 77E64000) 
(77DA0000 - 77DFB000) 
(77D30000 - 77DA0000) 
(77580000 - 777C8000) 
(77B40000 - 77BC9000) 
(77A40000 - 77B36000) 
(779A0000 - 77A3B000) 
(77F80000 - 77FF3000) 
(77810000 - 77817000) 
(75940000 - 75946000) 
(75000000 - 75010000) 
(76BD0000 - 76C45000) 
(10000000 - 10027000) 
(00230000 - 00288000) 
(00290000 - 002B0000) 
(002B0000 - 0036D000) 
(74FC0000 - 74FC9000) 
(74FA0000 - 74FB3000) 
(78000000 - 78046000) 
(74F90000 - 74F98000) 
(6C230000 - 6C322000) 
(76B00000 - 76B3F000) 
(777F0000 - 7780D000) 
(780C0000 - 78121000) 
(1F7D0000 - 1F804000) 
(75260000 - 75280000) 
(6E330000 - 6E336000) 
(75DF0000 - 75E0A000) 
(017B0000 - 017BE000) 
(6F8E0000 - 6F8F9000) 
(6C1D0000 - 6C1DE000) 
(1F8C0000 - 1F8D9000) 
(01DB0000 - 01EB7000) 
(76830000 - 76870000) 
(767F0000 - 76823000) 
(784A0000 - 78525000) 
(77840000 - 7787D000) 
(77090000 - 770B3000) 
(76DE0000 - 76EA7000) 
(76C50000 - 76D60000) 
(76F70000 - 76F7F000) 
(773B0000 - 773C2000) 
(750E0000 - 7512F000) 
(77BD0000 - 77BDF000) 
(75130000 - 75136000) 
(750C0000 - 750D0000) 
(77940000 - 7796A000) 
(77970000 - 77994000) 

Statusabbild für Threadkennung 0x464

eax=00000020 ebx=00000001 ecx=7ffde000 edx=00000020 esi=00971de8 edi=0012f0fc
eip=778821e1 esp=0012e620 ebp=0012e658 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000202


Funktion: RtlEnterCriticalSection
        778821d6 648b0d18000000   mov     ecx,fs:[00000018]      fs:00000018=????????
        778821dd 8b542404         mov     edx,[esp+0x4]          ss:00bcbbf3=????????
FEHLER ->778821e1 837a1400         cmp   dword ptr [edx+0x14],0x0 ds:00a9d5f2=77777777
        778821e5 0f85077a0100     jne     strtoul+0x22cd (77899bf2)
        778821eb 90               nop
        778821ec ff4204           inc     dword ptr [edx+0x4]    ds:00a9d5f2=77777777
        778821ef 0f85f6050000     jne     NtWaitForSingleObject+0xe (778827eb)
        778821f5 8b4124           mov     eax,[ecx+0x24]         ds:80a7b5d2=????????
        778821f8 89420c           mov     [edx+0xc],eax          ds:00a9d5f2=77777777
        778821fb c7420801000000   mov    dword ptr [edx+0x8],0x1 ds:00a9d5f2=77777777
        77882202 33c0             xor     eax,eax
        77882204 c20400           ret     0x4

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0012E658 006FBB49 028D8668 00002F08 00000001 00000000 ntdll!RtlEnterCriticalSection 
0012E670 00507844 028D8668 00002F08 00000001 00000000 !<nosymbols> 
0012E68C 0044DE59 02A4F1B8 778C0002 778CB400 0012F0FC !<nosymbols> 
0012E8E4 0044D2DD 02B05960 02848FD0 7803B750 7803B770 !<nosymbols> 
0012EB34 004F19EC 0284DCA8 02A13D00 0012F0FC 00971DE8 !<nosymbols> 
0012EB54 004F0C03 0284DCA8 02A13D00 027D7B08 00000014 !<nosymbols> 
0012EB80 004EFFED 0284DCA8 00000008 0012EBA8 027D7B08 !<nosymbols> 
0012EBAC 004545AC 0284DCA8 00000008 027D7B08 02A58540 !<nosymbols> 
0012EC10 004F06C3 02BE44D8 00000000 00000010 00000000 !<nosymbols> 
0012EC38 004EFFED 0284DCA8 00000005 0012EC60 027D7B08 !<nosymbols> 
0012EC64 004547EC 0284DCA8 00000005 027D7B08 0284BA10 !<nosymbols> 
0012ECC8 0053D93D 02BDA0C8 00000000 0012ED01 78020001 !<nosymbols> 
0012ED3C 004F044D 0284E478 02BDD570 027D7B08 00000009 !<nosymbols> 
0012ED68 004EFFED 0284E478 00000004 0012ED90 027D7B08 !<nosymbols> 
0012ED94 00454996 0284E478 00000004 027D7B08 02BC1F80 !<nosymbols> 
0012EDF8 0053D93D 0284E430 00000000 0012F001 00000001 !<nosymbols> 
0012EE6C 004F044D 0284DE10 02BF8600 027D7B08 00000009 !<nosymbols> 
0012EE98 004EFFED 0284DE10 00000001 0012EEC0 027D7B08 !<nosymbols> 
0012EEC4 00454996 0284DE10 00000001 027D7B08 02815620 !<nosymbols> 
0012EF28 004F06C3 02813E60 00000000 00000010 00000000 !<nosymbols> 
0012EF50 004EFFED 0284DCA8 00000000 0012EF78 027D7B08 !<nosymbols> 
0012EF7C 004547EC 0284DCA8 00000000 027D7B08 01F3CBF8 !<nosymbols> 
0012EFE0 007AA148 02813D00 00000000 01EC0048 00003446 !<nosymbols> 
0012F110 007F919B 0000A413 00000000 01EC0048 0012F138 !<nosymbols> 
0012F124 6C28E506 0000A413 00971DE8 00000111 0012F168 !<nosymbols> 
0012F138 6C2322AE 01EC0048 0000A413 00000000 007F9171 !Ordinal6590 
0012F168 6C232BD3 0000A413 00000000 00000000 00000000 !Ordinal4424 
0012F1A0 0080D8CE 0000A413 00000000 00000000 00000000 !Ordinal4427 
0012F1C8 007F8262 0000A413 00000000 00000000 00000000 !<nosymbols> 
0012F1E4 6C232976 0000A413 00000000 00000000 00000000 !<nosymbols> 
0012F234 6C2329D7 00000000 00000000 01EC0048 01EC0048 !Ordinal4441 
0012F2CC 6C231CEA 00000111 0000A413 00000000 0012F2E8 !Ordinal4436 
0012F2EC 0080DC6E 00000111 0000A413 00000000 00000111 !Ordinal6374 
0012F30C 007F8287 00000111 0000A413 00000000 01EC0048 !<nosymbols> 
0012F324 6C231C73 00000111 0000A413 00000000 00000111 !<nosymbols> 
0012F384 6C231BFB 00000000 001900AC 00000111 0000A413 !Ordinal1109 
0012F3A0 6C231BBA 001900AC 00000111 0000A413 00000000 !Ordinal1578 
0012F3CC 77E02E98 001900AC 00000111 0000A413 00000000 !Ordinal1579 
0012F3EC 77E06A72 6C231B81 001900AC 00000111 0000A413 user32!ScrollDC 
0012F410 77E06AEE 6C231B81 001900AC 00000111 0000A413 user32!VkKeyScanW 
0012F430 00956A92 6C231B81 001900AC 00000111 0000A413 user32!CallWindowProcA 
0012F47C 00956947 001900AC 00000111 0000A413 00000000 !<nosymbols> 
0012F4B4 77E030E0 00956930 001900AC 00000111 0000A413 !<nosymbols> 
0012F540 77E05824 00A705A4 00000001 6C2311CE 00A705A4 user32!ScrollDC 
0012F574 6C231ED5 00000000 00000000 01EC0048 01EC0048 user32!DispatchMessageA 
0012F5F4 6C231CEA 00000464 00000000 00972510 0012F610 !Ordinal5163 
0012F614 0080DC6E 00000464 00000000 00000000 00000464 !Ordinal6374 
0012F634 007F8287 00000464 00000000 00000000 01EC0048 !<nosymbols> 
0012F64C 6C231C73 00000464 00000000 00000000 00000464 !<nosymbols> 
0012F6AC 6C231BFB 00000000 001900AC 00000464 00000000 !Ordinal1109 
0012F6C8 6C231BBA 001900AC 00000464 00000000 00000000 !Ordinal1578 
0012F6F4 77E02E98 001900AC 00000464 00000000 00000000 !Ordinal1579 
0012F714 77E06A72 6C231B81 001900AC 00000464 00000000 user32!ScrollDC 
0012F738 77E06AEE 6C231B81 001900AC 00000464 00000000 user32!VkKeyScanW 
0012F758 00956A92 6C231B81 001900AC 00000464 00000000 user32!CallWindowProcA 
0012F7A4 00956947 001900AC 00000464 00000000 00000000 !<nosymbols> 
0012F7DC 77E039A3 00956930 001900AC 00000464 00000000 !<nosymbols> 
0012F7F8 77E0395F 00C6EBC8 00000464 00000000 00000000 user32!GetQueueStatus 
0012F820 778A032F 0012F830 00000018 00C6EBC8 00000464 user32!GetQueueStatus 
0012F87C 77E05709 00C6EBC8 00000464 00000000 00000000 ntdll!KiUserCallbackDispatcher 
0012F89C 00777BD6 001900AC 00000464 00000000 00000000 user32!SendMessageA 
0012F8D8 00788F35 01F79356 00A70570 DCBA004E 00120000 !<nosymbols> 
0012FA10 006CBFE6 02813D00 02BF52A8 02810001 0012FA34 !<nosymbols> 
0012FA24 00513CC0 02813D00 02BF52A8 0012FC88 0048BB66 !<nosymbols> 
0012FA34 0048BB66 02813D00 02BF52A8 00000000 009C006F !<nosymbols> 
0012FC88 004F050E 027D7FD8 02805238 027D7B08 00000000 !<nosymbols> 
0012FCBC 004EFFED 027D7FD8 00000000 0012FCE4 027D7B08 !<nosymbols> 
0012FCE8 0045735C 027D7FD8 00A90000 027D7B08 6C2C2D82 !<nosymbols> 
0012FE1C 004F1A1E 027D7F90 00000000 027D7B08 00A70570 !<nosymbols> 
0012FE40 004F0C03 027D7F90 00000000 027D7B08 00000028 !<nosymbols> 
0012FE6C 004EFFED 027D7F90 00000000 0012FE94 027D7B08 !<nosymbols> 
0012FE98 0041C229 027D7F90 00000000 027D7B08 00000002 !<nosymbols> 
0012FEB0 0041C511 00000002 00000000 027D7F90 027D7B08 !<nosymbols> 
0012FEE0 007A91B5 00000004 00A899C0 01010101 0012FF00 !<nosymbols> 
0012FEF4 007F60D8 00A70570 0012FFC0 6C23B4FE 00000006 !<nosymbols> 
0012FF00 6C23B4FE 00000006 0013406F 00000000 008052F9 !<nosymbols> 
0012FFC0 77E87D08 00000006 00000002 7FFDF000 C0000005 !Ordinal1576 
0012FFF0 00000000 008047B4 00000000 000000C8 00000100 kernel32!CreateProcessW 

*----> Raw Stack Dump <----*
0012e620  04 05 01 78 20 00 00 00 - c7 40 02 78 00 00 00 00  ...x ....@.x....
0012e630  fc f0 12 00 e8 1d 97 00 - 01 00 00 00 fc f0 12 00  ................
0012e640  3c 54 6e 00 6c e2 12 00 - 94 f1 12 00 11 db 00 78  <Tn.l..........x
0012e650  d8 54 03 78 ff ff ff ff - 70 e6 12 00 49 bb 6f 00  .T.x....p...I.o.
0012e660  68 86 8d 02 08 2f 00 00 - 01 00 00 00 00 00 00 00  h..../..........
0012e670  8c e6 12 00 44 78 50 00 - 68 86 8d 02 08 2f 00 00  ....DxP.h..../..
0012e680  01 00 00 00 00 00 00 00 - 68 86 8d 02 e4 e8 12 00  ........h.......
0012e690  59 de 44 00 b8 f1 a4 02 - 02 00 8c 77 00 b4 8c 77  Y.D........w...w
0012e6a0  fc f0 12 00 10 b7 03 78 - 01 00 00 00 bc e6 12 00  .......x........
0012e6b0  01 00 00 00 05 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012e6c0  64 16 00 78 34 e7 12 00 - 11 db 00 78 88 4e 03 78  d..x4......x.N.x
0012e6d0  78 46 a1 02 08 a0 aa 02 - 11 51 02 78 42 5c b0 02  xF.......Q.xB\..
0012e6e0  02 80 00 00 40 00 00 00 - a4 01 00 00 fc 00 12 00  ....@...........
0012e6f0  e8 1d 97 00 01 00 00 00 - b2 16 00 78 a0 e4 f9 01  ...........x....
0012e700  44 e7 12 00 83 39 00 78 - 21 00 00 00 c0 1b 02 78  D....9.x!......x
0012e710  10 b7 03 78 a6 1b 02 78 - fc f0 12 00 e8 1d 97 00  ...x...x........
0012e720  01 00 00 00 10 b7 03 78 - 10 b7 03 78 01 00 00 00  .......x...x....
0012e730  00 00 8f 01 01 00 00 00 - 60 e7 12 00 1d 28 00 78  ........`....(.x
0012e740  00 00 00 00 fc f0 12 00 - e8 1d 97 00 c8 37 01 78  .............7.x
0012e750  f5 cb 6c 00 59 00 00 00 - 03 00 00 78 03 00 12 00  ..l.Y......x....

Statusabbild für Threadkennung 0x46c

eax=77d40c62 ebx=00165c58 ecx=00165afc edx=00000000 esi=00165b40 edi=00000100
eip=77882a84 esp=0218fe28 ebp=0218ff74 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000202


Funktion: ZwReplyWaitReceivePortEx
        77882a79 b8ac000000       mov     eax,0xac
        77882a7e 8d542404         lea     edx,[esp+0x4]          ss:02c2d3fb=21206863
        77882a82 cd2e             int     2e
        77882a84 c21400           ret     0x14

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0218FF74 77D40781 77D40D7F 00165B40 00000000 40165640 ntdll!ZwReplyWaitReceivePortEx 
0218FFA8 77D40C7A 001649E8 0218FFEC 77E7758A 00165C58 rpcrt4!RpcBindingSetOption 
0218FFB4 77E7758A 00165C58 00000000 40165640 00165C58 rpcrt4!RpcBindingSetOption 
0218FFEC 00000000 77D40C62 00165C58 00000000 00000000 kernel32!SetFilePointer 

*----> Raw Stack Dump <----*
0218fe28  2d 09 d4 77 bc 00 00 00 - 54 ff 18 02 00 00 00 00  -..w....T.......
0218fe38  20 81 16 00 58 ff 18 02 - 08 d3 13 00 e8 49 16 00   ...X........I..
0218fe48  58 5c 16 00 5b d3 44 80 - 37 08 00 00 30 4e 37 fe  X\..[.D.7...0N7.
0218fe58  00 a0 fa 7f fc 07 30 c0 - 00 00 00 00 1f 08 00 00  ......0.........
0218fe68  37 08 00 00 1f 08 00 00 - 00 00 00 00 01 00 00 00  7...............
0218fe78  00 00 00 00 00 b0 fa 7f - fc 07 30 c0 38 fc 0c f2  ..........0.8...
0218fe88  e2 d1 44 80 00 a0 fa 7f - 00 00 00 00 00 00 00 00  ..D.............
0218fe98  00 a0 fa 7f c8 2f 56 ff - 01 4e 37 fe 00 00 00 00  ...../V..N7.....
0218fea8  a8 fe 1f c0 5b d3 44 80 - 3a 08 00 00 30 4e 37 fe  ....[.D.:...0N7.
0218feb8  00 f0 11 08 80 00 30 c0 - 00 00 00 00 e8 bd 56 ff  ......0.......V.
0218fec8  3a 08 00 00 00 8c 05 c0 - 00 00 00 00 01 00 00 00  :...............
0218fed8  00 00 00 00 00 00 12 08 - 80 00 30 c0 00 a0 fa 7f  ..........0.....
0218fee8  e2 d1 44 80 00 f0 11 08 - 00 00 00 00 60 bb 6d ff  ..D.........`.m.
0218fef8  01 00 00 00 90 99 39 fe - 20 cd 39 fe 60 4d 37 fe  ......9. .9.`M7.
0218ff08  d8 b0 ec e1 1b 51 45 80 - 00 00 00 82 00 00 00 02  .....QE.........
0218ff18  64 fc 0c f2 15 26 4a 80 - 08 40 50 fe 20 75 39 fe  d....&J..@P. u9.
0218ff28  a0 47 4c ff 00 69 4a ff - a0 2d 4d ff 00 00 00 00  .GL..iJ..-M.....
0218ff38  30 2f 4d ff 60 fc 0c f2 - 46 02 00 00 ec d8 42 80  0/M.`...F.....B.
0218ff48  10 2f 06 80 00 2f 4d ff - a0 2d 4d ff 70 fc 0c f2  ./.../M..-M.p...
0218ff58  00 a2 2f 4d ff ff ff ff - 50 fe 18 02 ff ff ff ff  ../M....P.......

Statusabbild für Threadkennung 0x318

eax=00000004 ebx=00000002 ecx=0019abbc edx=00000000 esi=7788281e edi=00000002
eip=77882829 esp=030ffe5c ebp=030ffea8 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


Funktion: NtWaitForMultipleObjects
        7788281e b8e9000000       mov     eax,0xe9
        77882823 8d542404         lea     edx,[esp+0x4]          ss:03b9d42f=????????
        77882827 cd2e             int     2e
        77882829 c21400           ret     0x14

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
030FFEA8 77E0375E 030FFE80 00000001 00000000 030FFEA0 ntdll!NtWaitForMultipleObjects 
030FFF04 77E0382B 030FFED0 77CA4158 0000EA60 00000041 user32!MsgWaitForMultipleObjectsEx 
030FFF20 77C61A5C 00000001 77CA4158 00000000 0000EA60 user32!MsgWaitForMultipleObjects 
030FFF74 77C68020 030FFFA0 030FFFA4 030FFFA8 030FFF9C shlwapi!Ordinal240 
030FFFAC 77C67FA8 00000000 77E7758A 00000000 00000000 shlwapi!SHGetValueA 
030FFFEC 00000000 77C67F7F 00000000 00000000 000000C8 shlwapi!SHGetValueA 

*----> Raw Stack Dump <----*
030ffe5c  da 6d e7 77 02 00 00 00 - 80 fe 0f 03 01 00 00 00  .m.w............
030ffe6c  00 00 00 00 a0 fe 0f 03 - 00 00 00 00 00 00 00 00  ................
030ffe7c  02 00 00 00 5c 01 00 00 - 64 01 00 00 cc fe 0f 03  ....\...d.......
030ffe8c  bf 73 88 77 00 00 00 00 - cc fe 0f 03 db 73 88 77  .s.w.........s.w
030ffe9c  18 2d 13 00 00 ba 3c dc - ff ff ff ff 04 ff 0f 03  .-....<.........
030ffeac  5e 37 e0 77 80 fe 0f 03 - 01 00 00 00 00 00 00 00  ^7.w............
030ffebc  a0 fe 0f 03 00 00 00 00 - 60 ea 00 00 38 41 ca 77  ........`...8A.w
030ffecc  00 00 00 00 5c 01 00 00 - 64 01 00 00 a5 45 88 77  ....\...d....E.w
030ffedc  00 00 00 00 38 41 ca 77 - 00 00 de 76 00 00 00 00  ....8A.w...v....
030ffeec  00 c0 fd 7f 8b 4f a4 77 - 00 00 00 00 cc c6 fd 7f  .....O.w........
030ffefc  00 00 00 00 64 01 00 00 - 20 ff 0f 03 2b 38 e0 77  ....d... ...+8.w
030fff0c  d0 fe 0f 03 58 41 ca 77 - 60 ea 00 00 41 00 00 00  ....XA.w`...A...
030fff1c  00 00 00 00 74 ff 0f 03 - 5c 1a c6 77 01 00 00 00  ....t...\..w....
030fff2c  58 41 ca 77 00 00 00 00 - 60 ea 00 00 41 00 00 00  XA.w....`...A...
030fff3c  00 00 00 00 38 41 ca 77 - 07 22 88 77 48 ff 0f 03  ....8A.w.".wH...
030fff4c  48 ff 0f 03 30 1f 13 00 - 00 00 00 00 00 f0 fd 7f  H...0...........
030fff5c  dc fe 0f 03 01 00 00 00 - 50 f4 71 0a 38 41 ca 77  ........P.q.8A.w
030fff6c  60 ea 00 00 01 00 00 00 - ac ff 0f 03 20 80 c6 77  `........... ..w
030fff7c  a0 ff 0f 03 a4 ff 0f 03 - a8 ff 0f 03 9c ff 0f 03  ................
030fff8c  60 ea 00 00 00 00 00 00 - 00 00 c6 77 00 00 00 00  `..........w....

Statusabbild für Threadkennung 0x204

eax=00000002 ebx=00000002 ecx=0324fc48 edx=00000000 esi=7788281e edi=00000002
eip=77882829 esp=0324fe5c ebp=0324fea8 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


Funktion: NtWaitForMultipleObjects
        7788281e b8e9000000       mov     eax,0xe9
        77882823 8d542404         lea     edx,[esp+0x4]          ss:03ced42f=????????
        77882827 cd2e             int     2e
        77882829 c21400           ret     0x14

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0324FEA8 77E0375E 0324FE80 00000001 00000000 0324FEA0 ntdll!NtWaitForMultipleObjects 
0324FF04 77E0382B 0324FED0 77CA4158 0000EA60 00000041 user32!MsgWaitForMultipleObjectsEx 
0324FF20 77C61A5C 00000001 77CA4158 00000000 0000EA60 user32!MsgWaitForMultipleObjects 
0324FF74 77C68020 0324FFA0 0324FFA4 0324FFA8 0324FF9C shlwapi!Ordinal240 
0324FFAC 77C67FA8 00000000 77E7758A 00000000 00000000 shlwapi!SHGetValueA 
0324FFEC 00000000 00000000 00000000 00000000 00000000 shlwapi!SHGetValueA 

   <D  (   """"3333DDDD0   ¨ Ð   
   (