• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1MDRawHeader
2  signature            = 0x504d444d
3  version              = 0x5128a793
4  stream_count         = 9
5  stream_directory_rva = 0x20
6  checksum             = 0x0
7  time_date_stamp      = 0x45d35f73 2007-02-14 19:13:55
8  flags                = 0x0
9
10mDirectory[0]
11MDRawDirectory
12  stream_type        = 0x3 (MD_THREAD_LIST_STREAM)
13  location.data_size = 100
14  location.rva       = 0x184
15
16mDirectory[1]
17MDRawDirectory
18  stream_type        = 0x4 (MD_MODULE_LIST_STREAM)
19  location.data_size = 1408
20  location.rva       = 0x1e8
21
22mDirectory[2]
23MDRawDirectory
24  stream_type        = 0x5 (MD_MEMORY_LIST_STREAM)
25  location.data_size = 52
26  location.rva       = 0x1505
27
28mDirectory[3]
29MDRawDirectory
30  stream_type        = 0x6 (MD_EXCEPTION_STREAM)
31  location.data_size = 168
32  location.rva       = 0xdc
33
34mDirectory[4]
35MDRawDirectory
36  stream_type        = 0x7 (MD_SYSTEM_INFO_STREAM)
37  location.data_size = 56
38  location.rva       = 0x8c
39
40mDirectory[5]
41MDRawDirectory
42  stream_type        = 0xf (MD_MISC_INFO_STREAM)
43  location.data_size = 24
44  location.rva       = 0xc4
45
46mDirectory[6]
47MDRawDirectory
48  stream_type        = 0x47670001 (MD_BREAKPAD_INFO_STREAM)
49  location.data_size = 12
50  location.rva       = 0x14f9
51
52mDirectory[7]
53MDRawDirectory
54  stream_type        = 0x0 (MD_UNUSED_STREAM)
55  location.data_size = 0
56  location.rva       = 0x0
57
58mDirectory[8]
59MDRawDirectory
60  stream_type        = 0x0 (MD_UNUSED_STREAM)
61  location.data_size = 0
62  location.rva       = 0x0
63
64Streams:
65  stream type 0x0 (MD_UNUSED_STREAM) at index 8
66  stream type 0x3 (MD_THREAD_LIST_STREAM) at index 0
67  stream type 0x4 (MD_MODULE_LIST_STREAM) at index 1
68  stream type 0x5 (MD_MEMORY_LIST_STREAM) at index 2
69  stream type 0x6 (MD_EXCEPTION_STREAM) at index 3
70  stream type 0x7 (MD_SYSTEM_INFO_STREAM) at index 4
71  stream type 0xf (MD_MISC_INFO_STREAM) at index 5
72  stream type 0x47670001 (MD_BREAKPAD_INFO_STREAM) at index 6
73
74MinidumpThreadList
75  thread_count = 2
76
77thread[0]
78MDRawThread
79  thread_id                   = 0xbf4
80  suspend_count               = 0
81  priority_class              = 0x0
82  priority                    = 0x0
83  teb                         = 0x7ffdf000
84  stack.start_of_memory_range = 0x12f31c
85  stack.memory.data_size      = 0xce4
86  stack.memory.rva            = 0x1639
87  thread_context.data_size    = 0x2cc
88  thread_context.rva          = 0xd94
89
90MDRawContextX86
91  context_flags                = 0x1003f
92  dr0                          = 0x0
93  dr1                          = 0x0
94  dr2                          = 0x0
95  dr3                          = 0x0
96  dr6                          = 0x0
97  dr7                          = 0x0
98  float_save.control_word      = 0xffff027f
99  float_save.status_word       = 0xffff0000
100  float_save.tag_word          = 0xffffffff
101  float_save.error_offset      = 0x0
102  float_save.error_selector    = 0x220000
103  float_save.data_offset       = 0x0
104  float_save.data_selector     = 0xffff0000
105  float_save.register_area[80] = 0x0000000018b72200000118b72200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
106  float_save.cr0_npx_state     = 0x0
107  gs                           = 0x0
108  fs                           = 0x3b
109  es                           = 0x23
110  ds                           = 0x23
111  edi                          = 0x0
112  esi                          = 0x7b8
113  ebx                          = 0x7c883780
114  edx                          = 0x7c97c0d8
115  ecx                          = 0x7c80b46e
116  eax                          = 0x400000
117  ebp                          = 0x12f384
118  eip                          = 0x7c90eb94
119  cs                           = 0x1b
120  eflags                       = 0x246
121  esp                          = 0x12f320
122  ss                           = 0x23
123  extended_registers[512]      = 0x7f0200000000220000000000000000000000000000000000801f0000ffff00000000000018b72200000100000000000018b72200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004509917c4e09917c38b622002400020024b42200020000009041917c0070fd7f0510907cccb22200000000009cb3220018ee907c7009917cc0e4977c6f3e917c623e917c08020000dcb62200b4b622001e000000000000000000000000000000000000002eb42200000000000f000000020000001e00200000fcfd7f2f63796764726976652f632f444f43554d457e312f4d4d454e544f7e312f4c4f43414c537e312f54656d7000000000000000000130b422000000004300000000000000001efcfd7f4509917c4e09917c5ad9000008b32200b4b62200
124
125Stack
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
127
128thread[1]
129MDRawThread
130  thread_id                   = 0x11c0
131  suspend_count               = 0
132  priority_class              = 0x0
133  priority                    = 0x0
134  teb                         = 0x7ffde000
135  stack.start_of_memory_range = 0x97f6e8
136  stack.memory.data_size      = 0x918
137  stack.memory.rva            = 0x231d
138  thread_context.data_size    = 0x2cc
139  thread_context.rva          = 0x1060
140
141MDRawContextX86
142  context_flags                = 0x1003f
143  dr0                          = 0x0
144  dr1                          = 0x0
145  dr2                          = 0x0
146  dr3                          = 0x0
147  dr6                          = 0x0
148  dr7                          = 0x0
149  float_save.control_word      = 0xffff027f
150  float_save.status_word       = 0xffff0000
151  float_save.tag_word          = 0xffffffff
152  float_save.error_offset      = 0x0
153  float_save.error_selector    = 0x870000
154  float_save.data_offset       = 0x0
155  float_save.data_selector     = 0xffff0000
156  float_save.register_area[80] = 0x84fb120000001400320778071400000014000000f4fe1200a0fd120018eeb0fd12003815917c961534ff120034ff12000000e7712a0f2a0000005400ccfb120068514000584d540000002a000000f4fe
157  float_save.cr0_npx_state     = 0x0
158  gs                           = 0x0
159  fs                           = 0x3b
160  es                           = 0x23
161  ds                           = 0x23
162  edi                          = 0x145b00
163  esi                          = 0x145aa8
164  ebx                          = 0x145ad0
165  edx                          = 0x7c90eb94
166  ecx                          = 0x7
167  eax                          = 0xa80000
168  ebp                          = 0x97f6fc
169  eip                          = 0x7c90eb94
170  cs                           = 0x1b
171  eflags                       = 0x246
172  esp                          = 0x97f6ec
173  ss                           = 0x23
174  extended_registers[512]      = 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
175
176Stack
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
178
179MinidumpModuleList
180  module_count = 13
181
182module[0]
183MDRawModule
184  base_of_image                   = 0x400000
185  size_of_image                   = 0x2d000
186  checksum                        = 0x0
187  time_date_stamp                 = 0x45d35f6c 2007-02-14 19:13:48
188  module_name_rva                 = 0x78a
189  version_info.signature          = 0x0
190  version_info.struct_version     = 0x0
191  version_info.file_version       = 0x0:0x0
192  version_info.product_version    = 0x0:0x0
193  version_info.file_flags_mask    = 0x0
194  version_info.file_flags         = 0x0
195  version_info.file_os            = 0x0
196  version_info.file_type          = 0x0
197  version_info.file_subtype       = 0x0
198  version_info.file_date          = 0x0:0x0
199  cv_record.data_size             = 40
200  cv_record.rva                   = 0x132c
201  misc_record.data_size           = 0
202  misc_record.rva                 = 0x0
203  (code_file)                     = "c:\test_app.exe"
204  (code_identifier)               = "45D35F6C2d000"
205  (cv_record).cv_signature        = 0x53445352
206  (cv_record).signature           = 5a9832e5-2872-41c1-838e-d98914e9b7ff
207  (cv_record).age                 = 1
208  (cv_record).pdb_file_name       = "c:\test_app.pdb"
209  (misc_record)                   = (null)
210  (debug_file)                    = "c:\test_app.pdb"
211  (debug_identifier)              = "5A9832E5287241C1838ED98914E9B7FF1"
212  (version)                       = ""
213
214module[1]
215MDRawModule
216  base_of_image                   = 0x7c900000
217  size_of_image                   = 0xb0000
218  checksum                        = 0xaf2f7
219  time_date_stamp                 = 0x411096b4 2004-08-04 07:56:36
220  module_name_rva                 = 0x7ae
221  version_info.signature          = 0xfeef04bd
222  version_info.struct_version     = 0x10000
223  version_info.file_version       = 0x50001:0xa280884
224  version_info.product_version    = 0x50001:0xa280884
225  version_info.file_flags_mask    = 0x3f
226  version_info.file_flags         = 0x0
227  version_info.file_os            = 0x40004
228  version_info.file_type          = 0x2
229  version_info.file_subtype       = 0x0
230  version_info.file_date          = 0x0:0x0
231  cv_record.data_size             = 34
232  cv_record.rva                   = 0x1354
233  misc_record.data_size           = 0
234  misc_record.rva                 = 0x0
235  (code_file)                     = "C:\WINDOWS\system32\ntdll.dll"
236  (code_identifier)               = "411096B4b0000"
237  (cv_record).cv_signature        = 0x53445352
238  (cv_record).signature           = 36515fb5-d043-45e4-91f6-72fa2e2878c0
239  (cv_record).age                 = 2
240  (cv_record).pdb_file_name       = "ntdll.pdb"
241  (misc_record)                   = (null)
242  (debug_file)                    = "ntdll.pdb"
243  (debug_identifier)              = "36515FB5D04345E491F672FA2E2878C02"
244  (version)                       = "5.1.2600.2180"
245
246module[2]
247MDRawModule
248  base_of_image                   = 0x7c800000
249  size_of_image                   = 0xf4000
250  checksum                        = 0xf724d
251  time_date_stamp                 = 0x44ab9a84 2006-07-05 10:55:00
252  module_name_rva                 = 0x7ee
253  version_info.signature          = 0xfeef04bd
254  version_info.struct_version     = 0x10000
255  version_info.file_version       = 0x50001:0xa280b81
256  version_info.product_version    = 0x50001:0xa280b81
257  version_info.file_flags_mask    = 0x3f
258  version_info.file_flags         = 0x0
259  version_info.file_os            = 0x40004
260  version_info.file_type          = 0x2
261  version_info.file_subtype       = 0x0
262  version_info.file_date          = 0x0:0x0
263  cv_record.data_size             = 37
264  cv_record.rva                   = 0x1376
265  misc_record.data_size           = 0
266  misc_record.rva                 = 0x0
267  (code_file)                     = "C:\WINDOWS\system32\kernel32.dll"
268  (code_identifier)               = "44AB9A84f4000"
269  (cv_record).cv_signature        = 0x53445352
270  (cv_record).signature           = bce8785c-57b4-4245-a669-896b6a19b954
271  (cv_record).age                 = 2
272  (cv_record).pdb_file_name       = "kernel32.pdb"
273  (misc_record)                   = (null)
274  (debug_file)                    = "kernel32.pdb"
275  (debug_identifier)              = "BCE8785C57B44245A669896B6A19B9542"
276  (version)                       = "5.1.2600.2945"
277
278module[3]
279MDRawModule
280  base_of_image                   = 0x774e0000
281  size_of_image                   = 0x13d000
282  checksum                        = 0x13dc6b
283  time_date_stamp                 = 0x42e5be93 2005-07-26 04:39:47
284  module_name_rva                 = 0x834
285  version_info.signature          = 0xfeef04bd
286  version_info.struct_version     = 0x10000
287  version_info.file_version       = 0x50001:0xa280aa6
288  version_info.product_version    = 0x50001:0xa280aa6
289  version_info.file_flags_mask    = 0x3f
290  version_info.file_flags         = 0x0
291  version_info.file_os            = 0x40004
292  version_info.file_type          = 0x2
293  version_info.file_subtype       = 0x0
294  version_info.file_date          = 0x0:0x0
295  cv_record.data_size             = 34
296  cv_record.rva                   = 0x139b
297  misc_record.data_size           = 0
298  misc_record.rva                 = 0x0
299  (code_file)                     = "C:\WINDOWS\system32\ole32.dll"
300  (code_identifier)               = "42E5BE9313d000"
301  (cv_record).cv_signature        = 0x53445352
302  (cv_record).signature           = 683b65b2-46f4-4187-96d2-ee6d4c55eb11
303  (cv_record).age                 = 2
304  (cv_record).pdb_file_name       = "ole32.pdb"
305  (misc_record)                   = (null)
306  (debug_file)                    = "ole32.pdb"
307  (debug_identifier)              = "683B65B246F4418796D2EE6D4C55EB112"
308  (version)                       = "5.1.2600.2726"
309
310module[4]
311MDRawModule
312  base_of_image                   = 0x77dd0000
313  size_of_image                   = 0x9b000
314  checksum                        = 0xa0de4
315  time_date_stamp                 = 0x411096a7 2004-08-04 07:56:23
316  module_name_rva                 = 0x874
317  version_info.signature          = 0xfeef04bd
318  version_info.struct_version     = 0x10000
319  version_info.file_version       = 0x50001:0xa280884
320  version_info.product_version    = 0x50001:0xa280884
321  version_info.file_flags_mask    = 0x3f
322  version_info.file_flags         = 0x0
323  version_info.file_os            = 0x40004
324  version_info.file_type          = 0x2
325  version_info.file_subtype       = 0x0
326  version_info.file_date          = 0x0:0x0
327  cv_record.data_size             = 37
328  cv_record.rva                   = 0x13bd
329  misc_record.data_size           = 0
330  misc_record.rva                 = 0x0
331  (code_file)                     = "C:\WINDOWS\system32\advapi32.dll"
332  (code_identifier)               = "411096A79b000"
333  (cv_record).cv_signature        = 0x53445352
334  (cv_record).signature           = 455d6c5f-184d-45bb-b5c5-f30f82975114
335  (cv_record).age                 = 2
336  (cv_record).pdb_file_name       = "advapi32.pdb"
337  (misc_record)                   = (null)
338  (debug_file)                    = "advapi32.pdb"
339  (debug_identifier)              = "455D6C5F184D45BBB5C5F30F829751142"
340  (version)                       = "5.1.2600.2180"
341
342module[5]
343MDRawModule
344  base_of_image                   = 0x77e70000
345  size_of_image                   = 0x91000
346  checksum                        = 0x9c482
347  time_date_stamp                 = 0x411096ae 2004-08-04 07:56:30
348  module_name_rva                 = 0x8ba
349  version_info.signature          = 0xfeef04bd
350  version_info.struct_version     = 0x10000
351  version_info.file_version       = 0x50001:0xa280884
352  version_info.product_version    = 0x50001:0xa280884
353  version_info.file_flags_mask    = 0x3f
354  version_info.file_flags         = 0x0
355  version_info.file_os            = 0x40004
356  version_info.file_type          = 0x2
357  version_info.file_subtype       = 0x0
358  version_info.file_date          = 0x0:0x0
359  cv_record.data_size             = 35
360  cv_record.rva                   = 0x13e2
361  misc_record.data_size           = 0
362  misc_record.rva                 = 0x0
363  (code_file)                     = "C:\WINDOWS\system32\rpcrt4.dll"
364  (code_identifier)               = "411096AE91000"
365  (cv_record).cv_signature        = 0x53445352
366  (cv_record).signature           = bea45a72-1da1-41da-a3ba-86b3a2031153
367  (cv_record).age                 = 2
368  (cv_record).pdb_file_name       = "rpcrt4.pdb"
369  (misc_record)                   = (null)
370  (debug_file)                    = "rpcrt4.pdb"
371  (debug_identifier)              = "BEA45A721DA141DAA3BA86B3A20311532"
372  (version)                       = "5.1.2600.2180"
373
374module[6]
375MDRawModule
376  base_of_image                   = 0x77f10000
377  size_of_image                   = 0x47000
378  checksum                        = 0x4d0d0
379  time_date_stamp                 = 0x43b34feb 2005-12-29 02:54:35
380  module_name_rva                 = 0x8fc
381  version_info.signature          = 0xfeef04bd
382  version_info.struct_version     = 0x10000
383  version_info.file_version       = 0x50001:0xa280b02
384  version_info.product_version    = 0x50001:0xa280b02
385  version_info.file_flags_mask    = 0x3f
386  version_info.file_flags         = 0x0
387  version_info.file_os            = 0x40004
388  version_info.file_type          = 0x2
389  version_info.file_subtype       = 0x0
390  version_info.file_date          = 0x0:0x0
391  cv_record.data_size             = 34
392  cv_record.rva                   = 0x1405
393  misc_record.data_size           = 0
394  misc_record.rva                 = 0x0
395  (code_file)                     = "C:\WINDOWS\system32\gdi32.dll"
396  (code_identifier)               = "43B34FEB47000"
397  (cv_record).cv_signature        = 0x53445352
398  (cv_record).signature           = c0ea66be-00a6-4bd7-aef7-9e443a91869c
399  (cv_record).age                 = 2
400  (cv_record).pdb_file_name       = "gdi32.pdb"
401  (misc_record)                   = (null)
402  (debug_file)                    = "gdi32.pdb"
403  (debug_identifier)              = "C0EA66BE00A64BD7AEF79E443A91869C2"
404  (version)                       = "5.1.2600.2818"
405
406module[7]
407MDRawModule
408  base_of_image                   = 0x77d40000
409  size_of_image                   = 0x90000
410  checksum                        = 0x9505c
411  time_date_stamp                 = 0x42260159 2005-03-02 18:09:29
412  module_name_rva                 = 0x93c
413  version_info.signature          = 0xfeef04bd
414  version_info.struct_version     = 0x10000
415  version_info.file_version       = 0x50001:0xa280a3e
416  version_info.product_version    = 0x50001:0xa280a3e
417  version_info.file_flags_mask    = 0x3f
418  version_info.file_flags         = 0x0
419  version_info.file_os            = 0x40004
420  version_info.file_type          = 0x2
421  version_info.file_subtype       = 0x0
422  version_info.file_date          = 0x0:0x0
423  cv_record.data_size             = 35
424  cv_record.rva                   = 0x1427
425  misc_record.data_size           = 0
426  misc_record.rva                 = 0x0
427  (code_file)                     = "C:\WINDOWS\system32\user32.dll"
428  (code_identifier)               = "4226015990000"
429  (cv_record).cv_signature        = 0x53445352
430  (cv_record).signature           = ee2b714d-83a3-4c9d-8802-7621272f8326
431  (cv_record).age                 = 2
432  (cv_record).pdb_file_name       = "user32.pdb"
433  (misc_record)                   = (null)
434  (debug_file)                    = "user32.pdb"
435  (debug_identifier)              = "EE2B714D83A34C9D88027621272F83262"
436  (version)                       = "5.1.2600.2622"
437
438module[8]
439MDRawModule
440  base_of_image                   = 0x77c10000
441  size_of_image                   = 0x58000
442  checksum                        = 0x57cd3
443  time_date_stamp                 = 0x41109752 2004-08-04 07:59:14
444  module_name_rva                 = 0x97e
445  version_info.signature          = 0xfeef04bd
446  version_info.struct_version     = 0x10000
447  version_info.file_version       = 0x70000:0xa280884
448  version_info.product_version    = 0x60001:0x21be0884
449  version_info.file_flags_mask    = 0x3f
450  version_info.file_flags         = 0x0
451  version_info.file_os            = 0x40004
452  version_info.file_type          = 0x1
453  version_info.file_subtype       = 0x0
454  version_info.file_date          = 0x0:0x0
455  cv_record.data_size             = 35
456  cv_record.rva                   = 0x144a
457  misc_record.data_size           = 0
458  misc_record.rva                 = 0x0
459  (code_file)                     = "C:\WINDOWS\system32\msvcrt.dll"
460  (code_identifier)               = "4110975258000"
461  (cv_record).cv_signature        = 0x53445352
462  (cv_record).signature           = a678f3c3-0ded-426b-8390-32b996987e38
463  (cv_record).age                 = 1
464  (cv_record).pdb_file_name       = "msvcrt.pdb"
465  (misc_record)                   = (null)
466  (debug_file)                    = "msvcrt.pdb"
467  (debug_identifier)              = "A678F3C30DED426B839032B996987E381"
468  (version)                       = "7.0.2600.2180"
469
470module[9]
471MDRawModule
472  base_of_image                   = 0x76390000
473  size_of_image                   = 0x1d000
474  checksum                        = 0x2a024
475  time_date_stamp                 = 0x411096ae 2004-08-04 07:56:30
476  module_name_rva                 = 0x9c0
477  version_info.signature          = 0xfeef04bd
478  version_info.struct_version     = 0x10000
479  version_info.file_version       = 0x50001:0xa280884
480  version_info.product_version    = 0x50001:0xa280884
481  version_info.file_flags_mask    = 0x3f
482  version_info.file_flags         = 0x0
483  version_info.file_os            = 0x40004
484  version_info.file_type          = 0x2
485  version_info.file_subtype       = 0x0
486  version_info.file_date          = 0x0:0x0
487  cv_record.data_size             = 34
488  cv_record.rva                   = 0x146d
489  misc_record.data_size           = 0
490  misc_record.rva                 = 0x0
491  (code_file)                     = "C:\WINDOWS\system32\imm32.dll"
492  (code_identifier)               = "411096AE1d000"
493  (cv_record).cv_signature        = 0x53445352
494  (cv_record).signature           = 2c17a49c-251b-4c8e-b9e2-ad13d7d9ea16
495  (cv_record).age                 = 2
496  (cv_record).pdb_file_name       = "imm32.pdb"
497  (misc_record)                   = (null)
498  (debug_file)                    = "imm32.pdb"
499  (debug_identifier)              = "2C17A49C251B4C8EB9E2AD13D7D9EA162"
500  (version)                       = "5.1.2600.2180"
501
502module[10]
503MDRawModule
504  base_of_image                   = 0x59a60000
505  size_of_image                   = 0xa1000
506  checksum                        = 0xa8824
507  time_date_stamp                 = 0x4110969a 2004-08-04 07:56:10
508  module_name_rva                 = 0xa00
509  version_info.signature          = 0xfeef04bd
510  version_info.struct_version     = 0x10000
511  version_info.file_version       = 0x50001:0xa280884
512  version_info.product_version    = 0x50001:0xa280884
513  version_info.file_flags_mask    = 0x3f
514  version_info.file_flags         = 0x0
515  version_info.file_os            = 0x40004
516  version_info.file_type          = 0x2
517  version_info.file_subtype       = 0x0
518  version_info.file_date          = 0x0:0x0
519  cv_record.data_size             = 36
520  cv_record.rva                   = 0x148f
521  misc_record.data_size           = 0
522  misc_record.rva                 = 0x0
523  (code_file)                     = "C:\WINDOWS\system32\dbghelp.dll"
524  (code_identifier)               = "4110969Aa1000"
525  (cv_record).cv_signature        = 0x53445352
526  (cv_record).signature           = 39559573-e21b-46f2-8e28-6923be9e6a76
527  (cv_record).age                 = 1
528  (cv_record).pdb_file_name       = "dbghelp.pdb"
529  (misc_record)                   = (null)
530  (debug_file)                    = "dbghelp.pdb"
531  (debug_identifier)              = "39559573E21B46F28E286923BE9E6A761"
532  (version)                       = "5.1.2600.2180"
533
534module[11]
535MDRawModule
536  base_of_image                   = 0x77c00000
537  size_of_image                   = 0x8000
538  checksum                        = 0x11d78
539  time_date_stamp                 = 0x411096b7 2004-08-04 07:56:39
540  module_name_rva                 = 0xa44
541  version_info.signature          = 0xfeef04bd
542  version_info.struct_version     = 0x10000
543  version_info.file_version       = 0x50001:0xa280884
544  version_info.product_version    = 0x50001:0xa280884
545  version_info.file_flags_mask    = 0x3f
546  version_info.file_flags         = 0x0
547  version_info.file_os            = 0x40004
548  version_info.file_type          = 0x2
549  version_info.file_subtype       = 0x0
550  version_info.file_date          = 0x0:0x0
551  cv_record.data_size             = 36
552  cv_record.rva                   = 0x14b3
553  misc_record.data_size           = 0
554  misc_record.rva                 = 0x0
555  (code_file)                     = "C:\WINDOWS\system32\version.dll"
556  (code_identifier)               = "411096B78000"
557  (cv_record).cv_signature        = 0x53445352
558  (cv_record).signature           = 180a90c4-0384-463e-82dd-c45b2c8ab76e
559  (cv_record).age                 = 2
560  (cv_record).pdb_file_name       = "version.pdb"
561  (misc_record)                   = (null)
562  (debug_file)                    = "version.pdb"
563  (debug_identifier)              = "180A90C40384463E82DDC45B2C8AB76E2"
564  (version)                       = "5.1.2600.2180"
565
566module[12]
567MDRawModule
568  base_of_image                   = 0x76bf0000
569  size_of_image                   = 0xb000
570  checksum                        = 0xa29b
571  time_date_stamp                 = 0x411096ca 2004-08-04 07:56:58
572  module_name_rva                 = 0xa88
573  version_info.signature          = 0xfeef04bd
574  version_info.struct_version     = 0x10000
575  version_info.file_version       = 0x50001:0xa280884
576  version_info.product_version    = 0x50001:0xa280884
577  version_info.file_flags_mask    = 0x3f
578  version_info.file_flags         = 0x0
579  version_info.file_os            = 0x40004
580  version_info.file_type          = 0x2
581  version_info.file_subtype       = 0x0
582  version_info.file_date          = 0x0:0x0
583  cv_record.data_size             = 34
584  cv_record.rva                   = 0x14d7
585  misc_record.data_size           = 0
586  misc_record.rva                 = 0x0
587  (code_file)                     = "C:\WINDOWS\system32\psapi.dll"
588  (code_identifier)               = "411096CAb000"
589  (cv_record).cv_signature        = 0x53445352
590  (cv_record).signature           = a5c3a1f9-689f-43d8-ad22-8a0929388970
591  (cv_record).age                 = 2
592  (cv_record).pdb_file_name       = "psapi.pdb"
593  (misc_record)                   = (null)
594  (debug_file)                    = "psapi.pdb"
595  (debug_identifier)              = "A5C3A1F9689F43D8AD228A09293889702"
596  (version)                       = "5.1.2600.2180"
597
598MinidumpMemoryList
599  region_count = 3
600
601region[0]
602MDMemoryDescriptor
603  start_of_memory_range = 0x7c90eb14
604  memory.data_size      = 0x100
605  memory.rva            = 0x1539
606Memory
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
608
609region[1]
610MDMemoryDescriptor
611  start_of_memory_range = 0x12f31c
612  memory.data_size      = 0xce4
613  memory.rva            = 0x1639
614Memory
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
616
617region[2]
618MDMemoryDescriptor
619  start_of_memory_range = 0x97f6e8
620  memory.data_size      = 0x918
621  memory.rva            = 0x231d
622Memory
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
624
625MDException
626  thread_id                                  = 0xbf4
627  exception_record.exception_code            = 0xc0000005
628  exception_record.exception_flags           = 0x0
629  exception_record.exception_record          = 0x0
630  exception_record.exception_address         = 0x40429e
631  exception_record.number_parameters         = 2
632  exception_record.exception_information[ 0] = 0x1
633  exception_record.exception_information[ 1] = 0x45
634  thread_context.data_size                   = 716
635  thread_context.rva                         = 0xac8
636
637MDRawContextX86
638  context_flags                = 0x1003f
639  dr0                          = 0x0
640  dr1                          = 0x0
641  dr2                          = 0x0
642  dr3                          = 0x0
643  dr6                          = 0x0
644  dr7                          = 0x0
645  float_save.control_word      = 0xffff027f
646  float_save.status_word       = 0xffff0000
647  float_save.tag_word          = 0xffffffff
648  float_save.error_offset      = 0x0
649  float_save.error_selector    = 0x220000
650  float_save.data_offset       = 0x0
651  float_save.data_selector     = 0xffff0000
652  float_save.register_area[80] = 0x0000000018b72200000118b72200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
653  float_save.cr0_npx_state     = 0x0
654  gs                           = 0x0
655  fs                           = 0x3b
656  es                           = 0x23
657  ds                           = 0x23
658  edi                          = 0xa28
659  esi                          = 0x2
660  ebx                          = 0x7c80abc1
661  edx                          = 0x42bc58
662  ecx                          = 0x12fe94
663  eax                          = 0x45
664  ebp                          = 0x12fe88
665  eip                          = 0x40429e
666  cs                           = 0x1b
667  eflags                       = 0x10246
668  esp                          = 0x12fe84
669  ss                           = 0x23
670  extended_registers[512]      = 0x7f0200000000220000000000000000000000000000000000801f0000ffff00000000000018b72200000100000000000018b72200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004509917c4e09917c38b622002400020024b42200020000009041917c0070fd7f0510907cccb22200000000009cb3220018ee907c7009917cc0e4977c6f3e917c623e917c08020000dcb62200b4b622001e000000000000000000000000000000000000002eb42200000000000f000000020000001e00200000fcfd7f2f63796764726976652f632f444f43554d457e312f4d4d454e544f7e312f4c4f43414c537e312f54656d7000000000000000000130b422000000004300000000000000001efcfd7f4509917c4e09917c5ad9000008b32200b4b62200
671
672MDRawSystemInfo
673  processor_architecture                     = 0x0
674  processor_level                            = 6
675  processor_revision                         = 0xd08
676  number_of_processors                       = 1
677  product_type                               = 1
678  major_version                              = 5
679  minor_version                              = 1
680  build_number                               = 2600
681  platform_id                                = 0x2
682  csd_version_rva                            = 0x768
683  suite_mask                                 = 0x100
684  cpu.x86_cpu_info (valid):
685  cpu.x86_cpu_info.vendor_id[0]              = 0x756e6547
686  cpu.x86_cpu_info.vendor_id[1]              = 0x49656e69
687  cpu.x86_cpu_info.vendor_id[2]              = 0x6c65746e
688  cpu.x86_cpu_info.version_information       = 0x6d8
689  cpu.x86_cpu_info.feature_information       = 0xafe9fbff
690  cpu.x86_cpu_info.amd_extended_cpu_features = 0xffffffff
691  (csd_version)                              = "Service Pack 2"
692  (cpu_vendor)                               = "GenuineIntel"
693
694MDRawMiscInfo
695  size_of_info                 = 24
696  flags1                       = 0x3
697  process_id                   = 3932
698  process_create_time          = 0x45d35f73 2007-02-14 19:13:55
699  process_user_time            = 0
700  process_kernel_time          = 0
701
702MDRawBreakpadInfo
703  validity             = 0x3
704  dump_thread_id       = 0x11c0
705  requesting_thread_id = 0xbf4
706
707