2008-04-09

エクスプローラがお亡くなりになる

最近よくエクスプローラがお亡くなりになるので、デバッガで見てみた。

0:028> ~22kb
ChildEBP RetAddr  Args to Child
04fef428 7c94e9ab 7c86372c 00000002 04fef570 ntdll!KiFastSystemCallRet
04fef42c 7c86372c 00000002 04fef570 00000001 ntdll!ZwWaitForMultipleObjects+0xc
04fefb6c 7c83ab20 04fefb94 7c839b09 04fefb9c kernel32!UnhandledExceptionFilter+0x8e4
04fefb74 7c839b09 04fefb9c 00000000 04fefb9c kernel32!BaseThreadStart+0x4d
04fefb9c 7c9437bf 04fefc88 04feffdc 04fefca4 kernel32!_except_handler3+0x61
04fefbc0 7c94378b 04fefc88 04feffdc 04fefca4 ntdll!ExecuteHandler2+0x26
04fefc70 7c94eafa 00000000 04fefca4 04fefc88 ntdll!ExecuteHandler+0x24
04fefc70 045ec171 00000000 04fefca4 04fefc88 ntdll!KiUserExceptionDispatcher+0xe
04feff9c 045f13fc 04078f80 89526a98 00230022 ivimp3en!DriverProc+0xa5096
04feffb4 7c80b683 04078f80 0407b378 00230022 ivimp3en!DriverProc+0xaa321
04feffec 00000000 045f1380 04078f80 00000000 kernel32!BaseThreadStart+0x37

0:028> dd 04fefb94 l2
04fefb94  04fefc88 04fefca4

0:028> .exr 04fefc88
ExceptionAddress: 045ec171 (ivimp3en!DriverProc+0x000a5096)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000008
   Parameter[1]: 045ec171
Attempt to execute non-executable address 045ec171

0:028> .cxr 04fefca4
eax=00000000 ebx=00000002 ecx=00000000 edx=00000000 esi=04079380 edi=00000360
eip=045ec171 esp=04feff70 ebp=04feff9c iopl=0         nv up ei ng nz ac po cy
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010297
ivimp3en!DriverProc+0xa5096:
045ec171 0000             add     [eax],al                ds:0023:00000000=??

0:028> lmvm ivimp3en
start    end        module name
04540000 04613000   ivimp3en   (export symbols)       C:\WINDOWS\system32\ivimp3en.acm
    Loaded symbol image file: C:\WINDOWS\system32\ivimp3en.acm
    Image path: C:\WINDOWS\system32\ivimp3en.acm
    Image name: ivimp3en.acm
    Timestamp:        Sat Nov 10 10:02:22 2001 (3BEC7C9E)
    CheckSum:         0005E7D5
    ImageSize:        000D3000
    File version:     1.1.0.0
    Product version:  1.1.0.0
    File flags:       A (Mask 30003F) Pre-release Private
    File OS:          10001 DOS Win16
    File type:        3.8 Driver
    File date:        00000000.00000000
    Translations:     0409.04e4 0411.04e4
    CompanyName:      Intervideo Inc.
    ProductName:      InterVideo MP3 ACM CODEC
    InternalName:     IviMp3En.acm
    OriginalFilename: IviMp3En.acm
    ProductVersion:   1.10
    FileVersion:      1.10
    PrivateBuild:
    SpecialBuild:
    FileDescription:  InterVideo MP3 ACM CODEC
    LegalCopyright:   Copyright 2001 Intervideo Inc.
    LegalTrademarks:
    Comments:

WinDVDのCodecかぁ。はずしてみて、様子見てみるかなぁ。WinDVDアップグレードするのもばからしいし。

0 件のコメント: