<core_client_version>7.6.33</core_client_version>
<![CDATA[
<message>
(unknown error) - exit code -1073741819 (0xc0000005)
</message>
<stderr_txt>
14:22:33 (13316): start_timer_thread(): CreateThread() failed, errno 0
14:22:35 (6984): start_timer_thread(): CreateThread() failed, errno 0
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Suspended CPDN Monitor - Suspend request from BOINC...
Unhandled Exception Detected...
- Unhandled Exception Record -
Reason: Access Violation (0xc0000005) at address 0x00463007 read attempt to address 0x020183AC
Engaging BOINC Windows Runtime Debugger...
********************
BOINC Windows Runtime Debugger Version 7.7.0
Dump Timestamp : 05/01/19 00:24:52
Install Directory :
Data Directory : D:\Boinc
Project Symstore :
LoadLibraryA( D:\Boinc\dbghelp.dll ): GetLastError = 126
Loaded Library : dbghelp.dll
LoadLibraryA( D:\Boinc\symsrv.dll ): GetLastError = 126
LoadLibraryA( symsrv.dll ): GetLastError = 126
LoadLibraryA( D:\Boinc\srcsrv.dll ): GetLastError = 126
LoadLibraryA( srcsrv.dll ): GetLastError = 126
LoadLibraryA( D:\Boinc\version.dll ): GetLastError = 126
Loaded Library : version.dll
Debugger Engine : 4.0.5.0
Symbol Search Path: D:\Boinc\slots\3;D:\Boinc\projects\climateprediction.net
ModLoad: 0000000000400000 0000000000152000 D:\Boinc\projects\climateprediction.net\wah2_8.24_windows_intelx86.exe (-nosymbols- Symbols Loaded)
Linked PDB Filename :
ModLoad: 0000000077a90000 000000000019a000 C:\WINDOWS\SYSTEM32\ntdll.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : wntdll.pdb
File Version : 10.0.18362.140 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.140
ModLoad: 00000000773d0000 00000000000e0000 C:\WINDOWS\System32\KERNEL32.DLL (6.2.18362.53) (-exported- Symbols Loaded)
Linked PDB Filename : wkernel32.pdb
File Version : 10.0.18362.140 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.140
ModLoad: 00000000771d0000 00000000001fc000 C:\WINDOWS\System32\KERNELBASE.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : wkernelbase.pdb
File Version : 10.0.18362.140 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.140
ModLoad: 00000000754d0000 0000000000195000 C:\WINDOWS\System32\USER32.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : wuser32.pdb
File Version : 10.0.18362.140 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.140
ModLoad: 0000000077090000 0000000000017000 C:\WINDOWS\System32\win32u.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : wwin32u.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
ModLoad: 0000000075e10000 0000000000021000 C:\WINDOWS\System32\GDI32.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : wgdi32.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
ModLoad: 0000000075c30000 000000000015a000 C:\WINDOWS\System32\gdi32full.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : wgdi32full.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
ModLoad: 0000000075280000 000000000007c000 C:\WINDOWS\System32\msvcp_win.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : msvcp_win.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
ModLoad: 0000000075810000 000000000011f000 C:\WINDOWS\System32\ucrtbase.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : ucrtbase.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
ModLoad: 0000000075fc0000 0000000000079000 C:\WINDOWS\System32\ADVAPI32.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : advapi32.pdb
File Version : 10.0.18362.140 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.140
ModLoad: 00000000768e0000 00000000000bf000 C:\WINDOWS\System32\msvcrt.dll (7.0.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : msvcrt.pdb
File Version : 7.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 7.0.18362.1
ModLoad: 00000000761b0000 0000000000076000 C:\WINDOWS\System32\sechost.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : sechost.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
ModLoad: 00000000769a0000 00000000000bb000 C:\WINDOWS\System32\RPCRT4.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : wrpcrt4.pdb
File Version : 10.0.18362.140 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.140
ModLoad: 0000000075260000 0000000000020000 C:\WINDOWS\System32\SspiCli.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : wsspicli.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
ModLoad: 0000000075250000 000000000000a000 C:\WINDOWS\System32\CRYPTBASE.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : cryptbase.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
ModLoad: 0000000076a60000 000000000005f000 C:\WINDOWS\System32\bcryptPrimitives.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : bcryptprimitives.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
ModLoad: 0000000072180000 0000000000134000 C:\WINDOWS\System32\tmumh\20019\AddOn\8.10.0.1054\TmUmEvt.dll (8.10.0.1054) (-exported- Symbols Loaded)
Linked PDB Filename : D:\Eyes_8.1\src\user\output\Release\TmUmEvt.pdb
File Version : 8.10.0.1054
Company Name : Trend Micro Inc.
Product Name : Trend Micro Eyes
Product Version : 8.10
ModLoad: 0000000075e00000 0000000000006000 C:\WINDOWS\System32\PSAPI.DLL (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : psapi.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
ModLoad: 0000000076810000 0000000000044000 C:\WINDOWS\System32\SHLWAPI.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : shlwapi.pdb
File Version : 10.0.18362.140 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.140
ModLoad: 0000000075930000 0000000000276000 C:\WINDOWS\System32\combase.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : combase.pdb
File Version : 10.0.18362.140 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.140
ModLoad: 0000000072030000 0000000000150000 C:\WINDOWS\System32\tmumh\20019\TmMon\2.7.0.1050\tmmon.dll (2.7.0.1050) (-nosymbols- Symbols Loaded)
Linked PDB Filename : D:\TMUMH_2.7\src\binWin32\Release\tmmon.pdb
File Version : 2.7.0.1050
Company Name : Trend Micro Inc.
Product Name : Trend Micro User Mode Hooking
Product Version : 2.7
ModLoad: 0000000075200000 0000000000008000 C:\WINDOWS\System32\version.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : version.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
ModLoad: 0000000072b90000 0000000000029000 C:\WINDOWS\SYSTEM32\ntmarta.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : ntmarta.pdb
File Version : 10.0.18362.140 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.140
ModLoad: 0000000075070000 000000000018f000 C:\WINDOWS\SYSTEM32\dbghelp.dll (6.2.18362.1) (-exported- Symbols Loaded)
Linked PDB Filename : dbghelp.pdb
File Version : 10.0.18362.1 (WinBuild.160101.0800)
Company Name : Microsoft Corporation
Product Name : MicrosoftR WindowsR Operating System
Product Version : 10.0.18362.1
*** Dump of the Process Statistics: ***
- I/O Operations Counters -
Read: 17521, Write: 0, Other 79248
- I/O Transfers Counters -
Read: 0, Write: 2828, Other 0
- Paged Pool Usage -
QuotaPagedPoolUsage: 226312, QuotaPeakPagedPoolUsage: 226712
QuotaNonPagedPoolUsage: 12432, QuotaPeakNonPagedPoolUsage: 13128
- Virtual Memory Usage -
VirtualSize: 124985344, PeakVirtualSize: 126341120
- Pagefile Usage -
PagefileUsage: 5537792, PeakPagefileUsage: 5537792
- Working Set Size -
WorkingSetSize: 3850240, PeakWorkingSetSize: 82739200, PageFaultCount: 21951
*** Dump of thread ID 7200 (state: Waiting): ***
- Information -
Status: Wait Reason: UserRequest, , Kernel Time: 156250.000000, User Time: 0.000000, Wait Time: 17512860.000000
- Unhandled Exception Record -
Reason: Access Violation (0xc0000005) at address 0x00463007 read attempt to address 0x020183AC
- Registers -
eax=00000015 ebx=fffffffe ecx=00000000 edx=0e4354ba esi=01f48020 edi=00000000
eip=00463007 esp=0085fe6c ebp=0085fe70
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010216
- Callstack -
ChildEBP RetAddr Args to Child
0085fe70 0044826f 01f48020 00000000 01f48020 fffffffe wah2_8.24_windows_intelx86!+0x0
0085fe88 0044fa68 01f48020 00000000 0051d6b0 0085fed8 wah2_8.24_windows_intelx86!+0x0
0085fe9c 004856fc 00000015 2475ba5b 00000006 0048566c wah2_8.24_windows_intelx86!+0x0
0085fed8 77369023 00000006 eaf6de79 77368e60 77368e60 wah2_8.24_windows_intelx86!+0x0
0085ff70 773e6359 80000006 773e6340 0085ffdc 77af7a94 KERNELBASE!CtrlRoutine+0x0
0085ff80 77af7a94 80000006 6dcb8d36 00000000 00000000 KERNEL32!BaseThreadInitThunk+0x0
0085ffdc 77af7a64 ffffffff 77b18e11 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0
0085ffec 00000000 77368e60 80000006 00000000 00001357 ntdll!RtlGetAppContainerNamedObjectPath+0x0
*** Dump of thread ID 17388 (state: Waiting): ***
- Information -
Status: Wait Reason: ExecutionDelay, , Kernel Time: 23593750.000000, User Time: 50312500.000000, Wait Time: 17512856.000000
- Registers -
eax=00000000 ebx=00000041 ecx=00000000 edx=00000000 esi=00000000 edi=0019ed68
eip=77b01fdc esp=0019ed28 ebp=0019ed8c
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000206
- Callstack -
ChildEBP RetAddr Args to Child
0019ed8c 772de61f 000000c8 00000000 0019edb0 00468ec1 ntdll!NtDelayExecution+0x0
0019ed9c 00468ec1 000000c8 000000c8 00000000 0019ede8 KERNELBASE!Sleep+0x0
0019edb0 00407a89 a0000000 027f9999 00000000 004d0c50 wah2_8.24_windows_intelx86!+0x0
0019ede8 004092c5 00000000 24e9b9b3 00485cce 00000000 wah2_8.24_windows_intelx86!+0x0
0019fd30 004094b7 0019fee0 00409535 004d1370 0019fd50 wah2_8.24_windows_intelx86!+0x0
0019fd38 00409535 004d1370 0019fd50 009031c0 0019fd50 wah2_8.24_windows_intelx86!+0x0
0019fee0 00485c7b 00400000 00000000 009031fe 0000000a wah2_8.24_windows_intelx86!+0x0
0019ff70 773e6359 003e8000 773e6340 0019ffdc 77af7a94 wah2_8.24_windows_intelx86!+0x0
0019ff80 77af7a94 003e8000 6d578d36 00000000 00000000 KERNEL32!BaseThreadInitThunk+0x0
0019ffdc 77af7a64 ffffffff 77b18e11 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0
0019ffec 00000000 00485cce 003e8000 00000000 8b55ff8b ntdll!RtlGetAppContainerNamedObjectPath+0x0
*** Dump of thread ID 2920 (state: Waiting): ***
- Information -
Status: Wait Reason: UserRequest, , Kernel Time: 0.000000, User Time: 0.000000, Wait Time: 15203146.000000
- Registers -
eax=00000000 ebx=00000000 ecx=00000000 edx=00000000 esi=00000003 edi=00000003
eip=77b0224c esp=0178fd1c ebp=0178feac
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
- Callstack -
ChildEBP RetAddr Args to Child
0178feac 772db778 00000003 0178fee0 00000000 ffffffff ntdll!ZwWaitForMultipleObjects+0x0
0178fec8 7204753d 00000003 0178fee0 00000000 ffffffff KERNELBASE!WaitForMultipleObjects+0x0
0178ff2c 720b87ec 00000000 0f7c2964 720b8898 009537d8 tmmon!+0x0
0178ff64 720b8914 720b8898 0178ff80 773e6359 009170d0 tmmon!+0x0
0178ff70 773e6359 009170d0 773e6340 0178ffdc 77af7a94 tmmon!+0x0
0178ff80 77af7a94 009170d0 6c368d36 00000000 00000000 KERNEL32!BaseThreadInitThunk+0x0
0178ffdc 77af7a64 ffffffff 77b18e11 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0
0178ffec 00000000 720b8898 009170d0 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0
*** Dump of thread ID 17704 (state: Waiting): ***
- Information -
Status: Wait Reason: UserRequest, , Kernel Time: 468750.000000, User Time: 156250.000000, Wait Time: 17512796.000000
- Registers -
eax=c0000034 ebx=00000000 ecx=00000000 edx=00000000 esi=00000003 edi=00000003
eip=77b0224c esp=0199fcec ebp=0199fe7c
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
- Callstack -
ChildEBP RetAddr Args to Child
0199fe7c 772db778 00000003 0199fedc 00000000 000003e8 ntdll!ZwWaitForMultipleObjects+0x0
0199fe98 721f217a 00000003 0199fedc 00000000 000003e8 KERNELBASE!WaitForMultipleObjects+0x0
0199febc 721f24f6 00000003 0199fedc 0199fef0 000003e8 TmUmEvt!TmmonDestoryAddonObject+0x0
0199ff08 72077baf 00000000 000001c0 721f2370 00000000 TmUmEvt!TmmonDestoryAddonObject+0x0
0199ff2c 720b87ec 0090e778 0f9d2964 720b8898 009170d0 tmmon!+0x0
0199ff64 720b8914 720b8898 0199ff80 773e6359 0094d948 tmmon!+0x0
0199ff70 773e6359 0094d948 773e6340 0199ffdc 77af7a94 tmmon!+0x0
0199ff80 77af7a94 0094d948 6cd78d36 00000000 00000000 KERNEL32!BaseThreadInitThunk+0x0
0199ffdc 77af7a64 ffffffff 77b18e11 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0
0199ffec 00000000 720b8898 0094d948 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0
*** Dump of thread ID 1896 (state: Waiting): ***
- Information -
Status: Wait Reason: ExecutionDelay, , Kernel Time: 1093750.000000, User Time: 1562500.000000, Wait Time: 17512860.000000
- Registers -
eax=c0000022 ebx=00000000 ecx=00000000 edx=00000000 esi=00000000 edi=01f3fd0c
eip=77b01fdc esp=01f3fccc ebp=01f3fd30
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000206
- Callstack -
ChildEBP RetAddr Args to Child
01f3fd30 772de61f 00000064 00000000 01f3ff70 00478b44 ntdll!NtDelayExecution+0x0
01f3fd40 00478b44 00000064 00478b20 00478b20 00000000 KERNELBASE!Sleep+0x0
01f3ff70 773e6359 00000000 773e6340 01f3ffdc 77af7a94 wah2_8.24_windows_intelx86!+0x0
01f3ff80 77af7a94 00000000 6cbd8d36 00000000 00000000 KERNEL32!BaseThreadInitThunk+0x0
01f3ffdc 77af7a64 ffffffff 77b18e11 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0
01f3ffec 00000000 00478b20 00000000 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0
*** Debug Message Dump ****
*** Foreground Window Data ***
Window Name :
Window Class :
Window Process ID: 0
Window Thread ID : 0
Exiting...
Regional Worker:: CPDN process is not running, exiting, bRetVal = 1, checkPID=13316, selfPID=6984, iMonCtr=1
Global Worker:: CPDN process is not running, exiting, bRetVal = 1, checkPID=13316, selfPID=13316, iMonCtr=1
</stderr_txt>
]]>