Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Crashes on Windows 7 64bit #14

Closed
parkerlreed opened this issue Mar 12, 2015 · 10 comments
Closed

Crashes on Windows 7 64bit #14

parkerlreed opened this issue Mar 12, 2015 · 10 comments

Comments

@parkerlreed
Copy link

Problem signature:
  Problem Event Name:   APPCRASH
  Application Name: flinux.exe
  Application Version:  0.0.0.0
  Application Timestamp:    54ffc6b7
  Fault Module Name:    flinux.exe
  Fault Module Version: 0.0.0.0
  Fault Module Timestamp:   54ffc6b7
  Exception Code:   c0000005
  Exception Offset: 00001407
  OS Version:   6.1.7601.2.1.0.256.48
  Locale ID:    1033
  Additional Information 1: 0a9e
  Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
  Additional Information 3: 0a9e
  Additional Information 4: 0a9e372d3b4ad19135b953a78882e789

Happy to provide any additional info.

EDIT: This is using the prebuilt Arch root folder.

@wishstudio
Copy link
Owner

Please run flog.exe first, then run flinux.
Then post the log in flog window here so we can investigate. Thanks.

@binbibi
Copy link

binbibi commented Mar 13, 2015

win7 x64 ,crash too;here is log from flog.exe:
2015-03-13_142544

@ljani
Copy link

ljani commented Mar 13, 2015

c0000005 is Access denied. Run as admin or use a directory where you have the correct permissions. Worked fine for me.

@j-selby
Copy link

j-selby commented Mar 13, 2015

I'm crashing as well, unfortunately. Only custom thing there I see is Bitdefender (could that be the cause?). I am running this on a alternate disk drive, if that helps.

Gist: https://gist.github.com/j-selby/6e7f68edecb6916fcb24

@wishstudio
Copy link
Owner

@j-selby : Your log seems like a different story.
At line 114 it says the entrypoint address is 62060d61 which is obviously a wrong value.

@parkerlreed
Copy link
Author

Here's mine

(II) heap subsystem initializating...
(II) Allocated memory: [70fc0000, 70fc1000)
(II) IP: 0x0040964f
(II) Handling page fault at address 70fc0000 (page 00070fc0)
(II) On demand block 0x000070fc loaded.
(II) heap subsystem initialized.
(II) vfs subsystem initializing...
(II) Allocated memory: [70900000, 70903000)
(II) Initializing console shared memory region.
(II) Console shared memory region successfully initialized.
(II) Allocated memory: [71000000, 71010000)
(II) IP: 0x0040979f
(II) Handling page fault at address 71000000 (page 00071000)
(II) On demand block 0x00007100 loaded.
(II) IP: 0x0040f007
(II) Handling page fault at address 70900000 (page 00070900)
(II) On demand block 0x00007090 loaded.
(II) Allocated memory: [71010000, 71020000)
(II) IP: 0x0040979f
(II) Handling page fault at address 71010000 (page 00071010)
(II) On demand block 0x00007101 loaded.
(II) Allocated memory: [71020000, 71030000)
(II) IP: 0x0040979f
(II) Handling page fault at address 71020000 (page 00071020)
(II) On demand block 0x00007102 loaded.
(II) vfs subsystem initialized.
(II) Allocated memory: [70fd0000, 70fd1000)
(II) IP: 0x0040ecc9
(II) Handling page fault at address 70fd0084 (page 00070fd0)
(II) On demand block 0x000070fd loaded.
(II) Allocated kernel TLS entry, entry: 0, slot: 1, fs offset 0xe14
(II) Allocated kernel TLS entry, entry: 1, slot: 2, fs offset 0xe18
(II) Allocated kernel TLS entry, entry: 2, slot: 3, fs offset 0xe1c
(II) Initializing dbt subsystem...
(EE) VirtualAlloc() for dbt_cache failed.
(II) IP: 0x00401407
(II) Handling page fault at address 72880000 (page 00072880)
(EE) Block 0x00007288 not mapped.
(EE) Page fault(write): 72880000 at 00401407
(II) Application crashed, dumping debug information...
(II) Current memory mappings...
(II) 0x70900000 - 0x70902000: PROT: 3
(II) 0x70fc0000 - 0x70fc0000: PROT: 3
(II) 0x70fd0000 - 0x70fd0000: PROT: 7
(II) 0x71000000 - 0x7100f000: PROT: 3
(II) 0x71010000 - 0x7101f000: PROT: 3
(II) 0x71020000 - 0x7102f000: PROT: 3
(II) Windows memory mappings...
(II) 0x00010000 - 0x00020000 [RW-]
(II) 0x00020000 - 0x00030000 [RW-]
(II) 0x00040000 - 0x00041000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\apisetschema.dll
(II) 0x00050000 - 0x00089000 [res]
(II) 0x00089000 - 0x0008c000 [RW-]
(II) 0x0008c000 - 0x00090000 [RW-]
(II) 0x00090000 - 0x00189000 [res]
(II) 0x00189000 - 0x0018a000 [RW-]
(II) 0x0018a000 - 0x00190000 [RW-]
(II) 0x00190000 - 0x00194000 [R--]
(II) 0x001a0000 - 0x001a1000 [R--]
(II) 0x001b0000 - 0x001b1000 [RW-]
(II) 0x001c0000 - 0x00227000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\locale.nls
(II) 0x002d0000 - 0x002d6000 [RW-]
(II) 0x002d6000 - 0x00350000 [res]
(II) 0x00400000 - 0x00401000 [R--] <--- \Device\HarddiskVolume2\Users\Parker\Documents\flinux-0.1\flinux.exe
(II) 0x00401000 - 0x0041d000 [R-X] <--- \Device\HarddiskVolume2\Users\Parker\Documents\flinux-0.1\flinux.exe
(II) 0x0041d000 - 0x0042b000 [R--] <--- \Device\HarddiskVolume2\Users\Parker\Documents\flinux-0.1\flinux.exe
(II) 0x0042b000 - 0x0042c000 [RC-] <--- \Device\HarddiskVolume2\Users\Parker\Documents\flinux-0.1\flinux.exe
(II) 0x0042c000 - 0x0042d000 [RW-] <--- \Device\HarddiskVolume2\Users\Parker\Documents\flinux-0.1\flinux.exe
(II) 0x0042d000 - 0x0042f000 [RC-] <--- \Device\HarddiskVolume2\Users\Parker\Documents\flinux-0.1\flinux.exe
(II) 0x0042f000 - 0x00430000 [RW-] <--- \Device\HarddiskVolume2\Users\Parker\Documents\flinux-0.1\flinux.exe
(II) 0x00430000 - 0x00431000 [R--] <--- \Device\HarddiskVolume2\Users\Parker\Documents\flinux-0.1\flinux.exe
(II) 0x00550000 - 0x00554000 [RW-]
(II) 0x00554000 - 0x00650000 [res]
(II) 0x70000000 - 0x70180000 [RW-]
(II) 0x70210000 - 0x70220000 [RW-]
(II) 0x70800000 - 0x70805000 [RW-]
(II) 0x70900000 - 0x70903000 [RW-]
(II) 0x70903000 - 0x70910000 [RWX]
(II) 0x70fb0000 - 0x70fb1000 [RW-]
(II) 0x70fc0000 - 0x70fc1000 [RW-]
(II) 0x70fc1000 - 0x70fd0000 [RWX]
(II) 0x70fd0000 - 0x70fe0000 [RWX]
(II) 0x70ff0000 - 0x71000000 [RW-]
(II) 0x71000000 - 0x71010000 [RW-]
(II) 0x71010000 - 0x71020000 [RW-]
(II) 0x71020000 - 0x71030000 [RW-]
(II) 0x72000000 - 0x72800000 [RW-]
(II) 0x72880000 - 0x72890000 [RWX]
(II) 0x72cb0000 - 0x72cb1000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64cpu.dll
(II) 0x72cb1000 - 0x72cb4000 [R-X] <--- \Device\HarddiskVolume2\Windows\System32\wow64cpu.dll
(II) 0x72cb4000 - 0x72cb5000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\wow64cpu.dll
(II) 0x72cb5000 - 0x72cb8000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64cpu.dll
(II) 0x72cc0000 - 0x72cc1000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll
(II) 0x72cc1000 - 0x72d0e000 [R-X] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll
(II) 0x72d0e000 - 0x72d0f000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll
(II) 0x72d0f000 - 0x72d12000 [RC-] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll
(II) 0x72d12000 - 0x72d13000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll
(II) 0x72d13000 - 0x72d1c000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll
(II) 0x72d20000 - 0x72d21000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64.dll
(II) 0x72d21000 - 0x72d59000 [R-X] <--- \Device\HarddiskVolume2\Windows\System32\wow64.dll
(II) 0x72d59000 - 0x72d5b000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\wow64.dll
(II) 0x72d5b000 - 0x72d5f000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64.dll
(II) 0x754b0000 - 0x754b1000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll
(II) 0x754b1000 - 0x754c0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll
(II) 0x754c0000 - 0x75581000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll
(II) 0x75581000 - 0x75590000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll
(II) 0x75590000 - 0x75591000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll
(II) 0x75591000 - 0x75592000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll
(II) 0x75592000 - 0x755a0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll
(II) 0x755a0000 - 0x755a1000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll
(II) 0x755a1000 - 0x755b0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll
(II) 0x755b0000 - 0x755bb000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll
(II) 0x755bb000 - 0x755c0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll
(II) 0x756f0000 - 0x756f1000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\KernelBase.dll
(II) 0x756f1000 - 0x75730000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\KernelBase.dll
(II) 0x75730000 - 0x75732000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\KernelBase.dll
(II) 0x75732000 - 0x75736000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\KernelBase.dll
(II) 0x77050000 - 0x7716f000 [res]
(II) 0x77170000 - 0x7726a000 [res]
(II) 0x77270000 - 0x77271000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x77271000 - 0x77373000 [R-X] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x77373000 - 0x773a2000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x773a2000 - 0x773a3000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x773a3000 - 0x773a4000 [RC-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x773a4000 - 0x773a5000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x773a5000 - 0x773a7000 [RC-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x773a7000 - 0x773a8000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x773a8000 - 0x773a9000 [RC-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x773a9000 - 0x773ab000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x773ab000 - 0x773ae000 [RC-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x773ae000 - 0x77419000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll
(II) 0x77450000 - 0x77451000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77451000 - 0x77460000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77460000 - 0x77536000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77536000 - 0x77540000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77540000 - 0x77541000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77541000 - 0x77550000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77550000 - 0x77551000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77551000 - 0x77552000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77552000 - 0x77553000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77553000 - 0x77554000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77554000 - 0x77557000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77557000 - 0x77559000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77559000 - 0x77560000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x77560000 - 0x775b7000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x775b7000 - 0x775c0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x775c0000 - 0x775c5000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x775c5000 - 0x775d0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll
(II) 0x7efb0000 - 0x7efd3000 [R--]
(II) 0x7efdb000 - 0x7efde000 [RW-]
(II) 0x7efde000 - 0x7efdf000 [RW-]
(II) 0x7efdf000 - 0x7efe0000 [RW-]
(II) 0x7efe0000 - 0x7efe5000 [R--]
(II) 0x7efe5000 - 0x7f0e0000 [res]
(II) 0x7f0e0000 - 0x7ffe0000 [res]
(II) 0x7ffe0000 - 0x7ffe1000 [R--]
(II) 0x7ffe1000 - 0x7fff0000 [---]
(II) Stack trace:
(II) ESP: 0x0018ff64
0018ff60 2f 15 40 00 e9 15 40 00 e9 9c 40 00 00 00 00 00 
0018ff70 00 00 00 00 00 e0 fd 7e 00 00 00 00 00 00 00 00 
0018ff80 00 00 00 00 00 00 00 00 94 ff 18 00 ca 33 4c 75 
0018ff90 00 e0 fd 7e d4 ff 18 00 d2 9e 48 77 00 e0 fd 7e 
0018ffa0 a6 6e 6e 7f 00 00 00 00 00 00 00 00 00 e0 fd 7e 
0018ffb0 00 00 00 00 00 00 00 00 00 00 00 00 a0 ff 18 00 
0018ffc0 00 00 00 00 ff ff ff ff cd 1e 4c 77 52 54 31 08 
0018ffd0 00 00 00 00 ec ff 18 00 a5 9e 48 77 b0 9c 40 00 
0018ffe0 00 e0 fd 7e 00 00 00 00 00 00 00 00 00 00 00 00 
0018fff0 00 00 00 00 b0 9c 40 00 00 e0 fd 7e 00 00 00 00 
00190000 41 63 74 78 20 00 00 00 01 00 00 00 0c 33 00 00 
00190010 dc 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 
00190020 14 00 00 00 01 00 00 00 07 00 00 00 34 00 00 00 
00190030 7c 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 
00190040 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 
00190050 4e ef 26 1a 98 02 00 00 44 00 00 00 e0 02 00 00 
(II) EAX: 0x72880000
(II) ECX: 0x72880000
(II) EDX: 0x7080401c
(II) EBX: 0x7efde000
(II) ESP: 0x0018ff64
(II) EBP: 0x0018ff88
(II) ESI: 0x00000000
(II) EDI: 0x00000000

@jjishin
Copy link

jjishin commented Mar 19, 2015

Hi,

I also have the same issue. please find the flog output

(II) heap subsystem initializating... (II) Allocated memory: [70fc0000, 70fc1000) (II) IP: 0x0040964f (II) Handling page fault at address 70fc0000 (page 00070fc0) (II) On demand block 0x000070fc loaded. (II) heap subsystem initialized. (II) vfs subsystem initializing... (II) Allocated memory: [70900000, 70903000) (II) Initializing console shared memory region. (II) Console shared memory region successfully initialized. (II) Allocated memory: [71000000, 71010000) (II) IP: 0x0040979f (II) Handling page fault at address 71000000 (page 00071000) (II) On demand block 0x00007100 loaded. (II) IP: 0x0040f007 (II) Handling page fault at address 70900000 (page 00070900) (II) On demand block 0x00007090 loaded. (II) Allocated memory: [71010000, 71020000) (II) IP: 0x0040979f (II) Handling page fault at address 71010000 (page 00071010) (II) On demand block 0x00007101 loaded. (II) Allocated memory: [71020000, 71030000) (II) IP: 0x0040979f (II) Handling page fault at address 71020000 (page 00071020) (II) On demand block 0x00007102 loaded. (II) vfs subsystem initialized. (II) Allocated memory: [70fd0000, 70fd1000) (II) IP: 0x0040ecc9 (II) Handling page fault at address 70fd0084 (page 00070fd0) (II) On demand block 0x000070fd loaded. (II) Allocated kernel TLS entry, entry: 0, slot: 4, fs offset 0xe20 (II) Allocated kernel TLS entry, entry: 1, slot: 5, fs offset 0xe24 (II) Allocated kernel TLS entry, entry: 2, slot: 6, fs offset 0xe28 (II) Initializing dbt subsystem... (EE) VirtualAlloc() for dbt_cache failed. (II) IP: 0x00401407 (II) Handling page fault at address 72880000 (page 00072880) (EE) Block 0x00007288 not mapped. (EE) Page fault(write): 72880000 at 00401407 (II) Application crashed, dumping debug information... (II) Current memory mappings... (II) 0x70900000 - 0x70902000: PROT: 3 (II) 0x70fc0000 - 0x70fc0000: PROT: 3 (II) 0x70fd0000 - 0x70fd0000: PROT: 7 (II) 0x71000000 - 0x7100f000: PROT: 3 (II) 0x71010000 - 0x7101f000: PROT: 3 (II) 0x71020000 - 0x7102f000: PROT: 3 (II) Windows memory mappings... (II) 0x00010000 - 0x00020000 [RW-] (II) 0x00020000 - 0x00030000 [RW-] (II) 0x00030000 - 0x00040000 [R-X] (II) 0x00040000 - 0x00041000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\apisetschema.dll (II) 0x00050000 - 0x00089000 [res] (II) 0x00089000 - 0x0008c000 [RW-] (II) 0x0008c000 - 0x00090000 [RW-] (II) 0x00090000 - 0x00189000 [res] (II) 0x00189000 - 0x0018a000 [RW-] (II) 0x0018a000 - 0x00190000 [RW-] (II) 0x00190000 - 0x001a0000 [RWX] (II) 0x001a0000 - 0x001a4000 [R--] (II) 0x001b0000 - 0x001b1000 [R--] (II) 0x001c0000 - 0x001c1000 [RW-] (II) 0x001d0000 - 0x00237000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\locale.nls (II) 0x00240000 - 0x00250000 [R-X] (II) 0x00270000 - 0x00277000 [RW-] (II) 0x00277000 - 0x00280000 [res] (II) 0x002b0000 - 0x002b3000 [RW-] (II) 0x002b3000 - 0x002c0000 [res] (II) 0x002c0000 - 0x002fa000 [RW-] (II) 0x002fa000 - 0x00340000 [res] (II) 0x00400000 - 0x00401000 [R--] <--- \Device\HarddiskVolume2\Programs\flinux-0.1\flinux.exe (II) 0x00401000 - 0x0041d000 [R-X] <--- \Device\HarddiskVolume2\Programs\flinux-0.1\flinux.exe (II) 0x0041d000 - 0x0042b000 [R--] <--- \Device\HarddiskVolume2\Programs\flinux-0.1\flinux.exe (II) 0x0042b000 - 0x0042c000 [RC-] <--- \Device\HarddiskVolume2\Programs\flinux-0.1\flinux.exe (II) 0x0042c000 - 0x0042d000 [RW-] <--- \Device\HarddiskVolume2\Programs\flinux-0.1\flinux.exe (II) 0x0042d000 - 0x0042f000 [RC-] <--- \Device\HarddiskVolume2\Programs\flinux-0.1\flinux.exe (II) 0x0042f000 - 0x00430000 [RW-] <--- \Device\HarddiskVolume2\Programs\flinux-0.1\flinux.exe (II) 0x00430000 - 0x00431000 [R--] <--- \Device\HarddiskVolume2\Programs\flinux-0.1\flinux.exe (II) 0x00530000 - 0x00575000 [RW-] (II) 0x00575000 - 0x00630000 [res] (II) 0x00630000 - 0x00669000 [RW-] (II) 0x00669000 - 0x00730000 [res] (II) 0x70000000 - 0x70180000 [RW-] (II) 0x70210000 - 0x70220000 [RW-] (II) 0x70800000 - 0x70805000 [RW-] (II) 0x70900000 - 0x70903000 [RW-] (II) 0x70903000 - 0x70910000 [RWX] (II) 0x70fb0000 - 0x70fb1000 [RW-] (II) 0x70fc0000 - 0x70fc1000 [RW-] (II) 0x70fc1000 - 0x70fd0000 [RWX] (II) 0x70fd0000 - 0x70fe0000 [RWX] (II) 0x70ff0000 - 0x71000000 [RW-] (II) 0x71000000 - 0x71010000 [RW-] (II) 0x71010000 - 0x71020000 [RW-] (II) 0x71020000 - 0x71030000 [RW-] (II) 0x72000000 - 0x72800000 [RW-] (II) 0x72880000 - 0x72890000 [RWX] (II) 0x72fd0000 - 0x72fd1000 [R--] <--- \Device\HarddiskVolume2\Program Files (x86)\F-Secure\HIPS\fshook32.dll (II) 0x72fd1000 - 0x72ffb000 [R-X] <--- \Device\HarddiskVolume2\Program Files (x86)\F-Secure\HIPS\fshook32.dll (II) 0x72ffb000 - 0x73003000 [R--] <--- \Device\HarddiskVolume2\Program Files (x86)\F-Secure\HIPS\fshook32.dll (II) 0x73003000 - 0x73005000 [RW-] <--- \Device\HarddiskVolume2\Program Files (x86)\F-Secure\HIPS\fshook32.dll (II) 0x73005000 - 0x73025000 [RC-] <--- \Device\HarddiskVolume2\Program Files (x86)\F-Secure\HIPS\fshook32.dll (II) 0x73025000 - 0x7302b000 [RW-] <--- \Device\HarddiskVolume2\Program Files (x86)\F-Secure\HIPS\fshook32.dll (II) 0x7302b000 - 0x73031000 [R--] <--- \Device\HarddiskVolume2\Program Files (x86)\F-Secure\HIPS\fshook32.dll (II) 0x74ac0000 - 0x74ac1000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64cpu.dll (II) 0x74ac1000 - 0x74ac4000 [R-X] <--- \Device\HarddiskVolume2\Windows\System32\wow64cpu.dll (II) 0x74ac4000 - 0x74ac5000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\wow64cpu.dll (II) 0x74ac5000 - 0x74ac8000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64cpu.dll (II) 0x74ad0000 - 0x74ad1000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll (II) 0x74ad1000 - 0x74b1e000 [R-X] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll (II) 0x74b1e000 - 0x74b1f000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll (II) 0x74b1f000 - 0x74b22000 [RC-] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll (II) 0x74b22000 - 0x74b23000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll (II) 0x74b23000 - 0x74b2c000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64win.dll (II) 0x74b30000 - 0x74b31000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64.dll (II) 0x74b31000 - 0x74b69000 [R-X] <--- \Device\HarddiskVolume2\Windows\System32\wow64.dll (II) 0x74b69000 - 0x74b6b000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\wow64.dll (II) 0x74b6b000 - 0x74b6f000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\wow64.dll (II) 0x74b90000 - 0x74b91000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\cryptbase.dll (II) 0x74b91000 - 0x74b99000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\cryptbase.dll (II) 0x74b99000 - 0x74b9a000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\cryptbase.dll (II) 0x74b9a000 - 0x74b9c000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\cryptbase.dll (II) 0x74ba0000 - 0x74ba1000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sspicli.dll (II) 0x74ba1000 - 0x74bb0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sspicli.dll (II) 0x74bb0000 - 0x74bc6000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sspicli.dll (II) 0x74bc6000 - 0x74bd0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sspicli.dll (II) 0x74bd0000 - 0x74bd1000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sspicli.dll (II) 0x74bd1000 - 0x74be0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sspicli.dll (II) 0x74be0000 - 0x74be1000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sspicli.dll (II) 0x74be1000 - 0x74bf0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sspicli.dll (II) 0x74bf0000 - 0x74bf2000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sspicli.dll (II) 0x74bf2000 - 0x74c00000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sspicli.dll (II) 0x74e50000 - 0x74e51000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\advapi32.dll (II) 0x74e51000 - 0x74ec3000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\advapi32.dll (II) 0x74ec3000 - 0x74ec4000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\advapi32.dll (II) 0x74ec4000 - 0x74ec7000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\advapi32.dll (II) 0x74ec7000 - 0x74ef0000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\advapi32.dll (II) 0x74fa0000 - 0x74fa1000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x74fa1000 - 0x74fb0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x74fb0000 - 0x75046000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x75046000 - 0x75050000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x75050000 - 0x75053000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x75053000 - 0x75060000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x75060000 - 0x75061000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x75061000 - 0x75070000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x75070000 - 0x75074000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x75074000 - 0x75080000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x75080000 - 0x75085000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x75085000 - 0x75090000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\rpcrt4.dll (II) 0x751a0000 - 0x751b0000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll (II) 0x751b0000 - 0x75271000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll (II) 0x75271000 - 0x75280000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll (II) 0x75280000 - 0x75281000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll (II) 0x75281000 - 0x75282000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll (II) 0x75282000 - 0x75290000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll (II) 0x75290000 - 0x75291000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll (II) 0x75291000 - 0x752a0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll (II) 0x752a0000 - 0x752ab000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll (II) 0x752ab000 - 0x752b0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll (II) 0x752b0000 - 0x752b1000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\KernelBase.dll (II) 0x752b1000 - 0x752f1000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\KernelBase.dll (II) 0x752f1000 - 0x752f3000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\KernelBase.dll (II) 0x752f3000 - 0x752f7000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\KernelBase.dll (II) 0x75af0000 - 0x75af1000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\msvcrt.dll (II) 0x75af1000 - 0x75b90000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\msvcrt.dll (II) 0x75b90000 - 0x75b91000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\msvcrt.dll (II) 0x75b91000 - 0x75b92000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\msvcrt.dll (II) 0x75b92000 - 0x75b94000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\msvcrt.dll (II) 0x75b94000 - 0x75b97000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\msvcrt.dll (II) 0x75b97000 - 0x75b9c000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\msvcrt.dll (II) 0x75ba0000 - 0x75ba1000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sechost.dll (II) 0x75ba1000 - 0x75bb4000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sechost.dll (II) 0x75bb4000 - 0x75bb5000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sechost.dll (II) 0x75bb5000 - 0x75bb7000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sechost.dll (II) 0x75bb7000 - 0x75bb9000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\sechost.dll (II) 0x76d60000 - 0x76e7f000 [res] (II) 0x76e80000 - 0x76f7a000 [res] (II) 0x77300000 - 0x77301000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x77301000 - 0x77403000 [R-X] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x77403000 - 0x77432000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x77432000 - 0x77433000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x77433000 - 0x77434000 [RC-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x77434000 - 0x77435000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x77435000 - 0x77437000 [RC-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x77437000 - 0x77438000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x77438000 - 0x77439000 [RC-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x77439000 - 0x7743b000 [RW-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x7743b000 - 0x7743e000 [RC-] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x7743e000 - 0x774a9000 [R--] <--- \Device\HarddiskVolume2\Windows\System32\ntdll.dll (II) 0x774b0000 - 0x774b1000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\psapi.dll (II) 0x774b1000 - 0x774b2000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\psapi.dll (II) 0x774b2000 - 0x774b3000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\psapi.dll (II) 0x774b3000 - 0x774b5000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\psapi.dll (II) 0x774e0000 - 0x774e1000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x774e1000 - 0x774f0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x774f0000 - 0x775c6000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x775c6000 - 0x775d0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x775d0000 - 0x775d1000 [R-X] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x775d1000 - 0x775e0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x775e0000 - 0x775e1000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x775e1000 - 0x775e2000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x775e2000 - 0x775e3000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x775e3000 - 0x775e4000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x775e4000 - 0x775e7000 [RW-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x775e7000 - 0x775e9000 [RC-] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x775e9000 - 0x775f0000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x775f0000 - 0x77647000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x77647000 - 0x77650000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x77650000 - 0x77655000 [R--] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x77655000 - 0x77660000 [res] <--- \Device\HarddiskVolume2\Windows\SysWOW64\ntdll.dll (II) 0x7efb0000 - 0x7efd3000 [R--] (II) 0x7efdb000 - 0x7efde000 [RW-] (II) 0x7efde000 - 0x7efdf000 [RW-] (II) 0x7efdf000 - 0x7efe0000 [RW-] (II) 0x7efe0000 - 0x7efe5000 [R--] (II) 0x7efe5000 - 0x7f0e0000 [res] (II) 0x7f0e0000 - 0x7ffe0000 [res] (II) 0x7ffe0000 - 0x7ffe1000 [R--] (II) 0x7ffe1000 - 0x7fff0000 [---] (II) Stack trace: (II) ESP: 0x0018ff64 0018ff60 2f 15 40 00 e9 15 40 00 e9 9c 40 00 e8 01 4f 77 0018ff70 78 41 4f 77 a2 01 19 00 b0 d9 1c 75 1c 80 53 77 0018ff80 f3 48 1b 75 00 00 1a 75 94 ff 18 00 8a 33 1b 75 0018ff90 00 e0 fd 7e d4 ff 18 00 72 9f 51 77 00 e0 fd 7e 0018ffa0 6b 49 06 77 00 00 00 00 00 00 00 00 00 e0 fd 7e 0018ffb0 00 00 00 00 00 00 00 00 00 00 00 00 a0 ff 18 00 0018ffc0 00 00 00 00 ff ff ff ff f5 71 55 77 ef 73 4e 00 0018ffd0 00 00 00 00 ec ff 18 00 45 9f 51 77 b0 9c 40 00 0018ffe0 00 e0 fd 7e 00 00 00 00 00 00 00 00 00 00 00 00 0018fff0 00 00 00 00 b0 9c 40 00 00 e0 fd 7e 00 00 00 00 00190000 c8 24 00 00 e8 00 00 00 00 5b 81 c3 99 01 00 00 00190010 89 5d e4 64 8b 35 30 00 00 00 8b 76 0c 8d 7e 1c 00190020 8b 76 1c 8d 46 1c e8 35 01 00 00 3d 53 91 bf c5 00190030 75 06 8b 5e 08 89 5d e0 3d e5 17 ee 8c 75 06 8b 00190040 5e 08 89 5d fc 8b 36 3b f7 75 d8 8b 5d fc 8b 73 00190050 3c 8d 74 1e 18 8b 7e 60 03 fb 8b 4f 18 8b 77 20 (II) EAX: 0x72880000 (II) ECX: 0x72880000 (II) EDX: 0x7080401c (II) EBX: 0x001901a2 (II) ESP: 0x0018ff64 (II) EBP: 0x0018ff88 (II) ESI: 0x774f4178 (II) EDI: 0x774f01e8

@wishstudio
Copy link
Owner

Please test the latest commit, thanks.

@parkerlreed
Copy link
Author

That worked! Used the 602fbf6 binary

@binbibi
Copy link

binbibi commented Apr 17, 2015

work too

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants