We define abstraction as selective ignorance.



  0: nt!NtAcceptConnectPort (80581302)
  1: nt!NtAccessCheck (8057ab8c)
  2: nt!NtAccessCheckAndAuditAlarm (8058c7ae)
  3: nt!NtAccessCheckByType (805917e4)
  4: nt!NtAccessCheckByTypeAndAuditAlarm (805915fe)
  5: nt!NtAccessCheckByTypeResultList (806387a0)
  6: nt!NtAccessCheckByTypeResultListAndAuditAlarm (8063a931)
  7: nt!NtAccessCheckByTypeResultListAndAuditAlarmByHandle (8063a97a)
  8: nt!NtAddAtom (8057660b)
  9: nt!NtEnumerateBootEntries (806491cf)
 10: nt!NtAdjustGroupsToken (80637f5f)
 11: nt!NtAdjustPrivilegesToken (80590b85)
 12: nt!NtAlertResumeThread (806300a4)
 13: nt!NtAlertThread (8057ce31)
 14: nt!NtAllocateLocallyUniqueId (8058dc26)
 15: nt!NtAllocateUserPhysicalPages (806271bd)
 16: nt!NtAllocateUuids (805ddf20)
 17: nt!NtAllocateVirtualMemory (80569f9d)
 18: nt!NtAreMappedFilesTheSame (805daac1)
 19: nt!NtAssignProcessToJobObject (805a3bb0)
 20: nt!NtCallbackReturn (804e4cb4)
 21: nt!NtModifyBootEntry (806491bb)
 22: nt!NtCancelIoFile (805cb22c)
 23: nt!NtCancelTimer (804f1e28)
 24: nt!NtClearEvent (8056a649)
 25: eeyeh+0x9092 (f4a88092)
 26: nt!NtCloseObjectAuditAlarm (80590ff3)
 27: nt!NtCompactKeys (8064f1c1)
 28: nt!NtCompareTokens (805908f5)
 29: nt!NtCompleteConnectPort (80582225)
 30: nt!NtCompressKey (8064f42f)
 31: nt!NtConnectPort (8058c800)
 32: nt!NtContinue (804e3ff2)
 33: nt!NtCreateDebugObject (8065a184)
 34: nt!NtCreateDirectoryObject (805a3f58)
 35: nt!NtCreateEvent (8056ccb0)
 36: nt!NtCreateEventPair (80649820)
 37: eeyeh+0x93aa (f4a883aa)
 38: nt!NtCreateIoCompletion (80591bef)
 39: nt!NtCreateJobObject (805ac8f6)
 40: nt!NtCreateJobSet (8063054d)
 41: eeyeh+0xe03a (f4a8d03a)
 42: nt!NtCreateMailslotFile (805da9b2)
 43: nt!NtCreateMutant (8057d201)
 44: nt!NtCreateNamedPipeFile (805820a9)
 45: nt!NtCreatePagingFile (805bcf48)
 46: nt!NtCreatePort (805994e1)
 47: nt!NtCreateProcess (805b2aa4)
 48: nt!NtCreateProcessEx (80583e82)
 49: nt!NtCreateProfile (80649e41)
 50: nt!NtCreateSection (8056661b)
 51: nt!NtCreateSemaphore (8057583f)
 52: nt!NtCreateSymbolicLinkObject (805a2c69)
 53: nt!NtCreateThread (8057e4a1)
 54: nt!NtCreateTimer (8059e26a)
 55: nt!NtCreateToken (805aa25d)
 56: nt!NtCreateWaitablePort (805a44ea)
 57: nt!NtDebugActiveProcess (8065b301)
 58: nt!NtDebugContinue (8065b45b)
 59: nt!NtDelayExecution (8056779e)
 60: nt!NtDeleteAtom (8058bdde)
 61: nt!NtModifyBootEntry (806491bb)
 62: nt!NtDeleteFile (805d9397)
 63: eeyeh+0xe53c (f4a8d53c)
 64: nt!NtDeleteObjectAuditAlarm (8063a9d1)
 65: eeyeh+0xe4e6 (f4a8d4e6)
 66: nt!NtDeviceIoControlFile (8057f257)
 67: nt!NtDisplayString (805c0659)
 68: nt!NtDuplicateObject (80574b26)
 69: nt!NtDuplicateToken (8058060e)
 70: nt!NtEnumerateBootEntries (806491cf)
 71: PROCMON12+0x3ede (f92b4ede)
 72: nt!NtEnumerateSystemEnvironmentValuesEx (806491a7)
 73: PROCMON12+0x3e3a (f92b4e3a)
 74: nt!NtExtendSection (80625fe0)
 75: nt!NtFilterToken (805b2287)
 76: nt!NtFindAtom (80591948)
 77: nt!NtFlushBuffersFile (8058bf5b)
 78: nt!NtFlushInstructionCache (805789ea)
 79: PROCMON12+0x3f32 (f92b4f32)
 80: nt!NtFlushVirtualMemory (805dee8e)
 81: nt!NtFlushWriteBuffer (80627a1f)
 82: nt!NtFreeUserPhysicalPages (80627572)
 83: nt!NtFreeVirtualMemory (8056a8c7)
 84: nt!NtFsControlFile (8057cd19)
 85: nt!NtGetContextThread (805e19ad)
 86: nt!NtGetDevicePowerState (8062c88f)
 87: nt!NtGetPlugPlayEvent (805a180c)
 88: nt!NtGetWriteWatch (8053ccb5)
 89: nt!NtImpersonateAnonymousToken (80599505)
 90: nt!NtImpersonateClientOfPort (80590361)
 91: nt!NtImpersonateThread (8057c8ae)
 92: nt!NtInitializeRegistry (805a4fa1)
 93: nt!NtInitiatePowerAction (8062c65b)
 94: nt!NtIsProcessInJob (80630403)
 95: nt!NtIsSystemResumeAutomatic (8062c876)
 96: nt!NtListenPort (805ac566)
 97: nt!NtLoadDriver (805a607a)
 98: PROCMON12+0x443e (f92b543e)
 99: nt!NtLoadKey2 (805b02ce)
100: nt!NtLockFile (8058e466)
101: nt!NtLockProductActivationKeys (805b2457)
102: nt!NtLockRegistryKey (805d5fd3)
103: nt!NtLockVirtualMemory (805b18c4)
104: nt!NtMakePermanentObject (805a2f3a)
105: nt!NtMakeTemporaryObject (805a3127)
106: nt!NtMapUserPhysicalPages (806266a9)
107: nt!NtMapUserPhysicalPagesScatter (80626b7d)
108: nt!NtMapViewOfSection (8057436c)
109: nt!NtModifyBootEntry (806491bb)
110: nt!NtNotifyChangeDirectoryFile (805930cd)
111: nt!NtNotifyChangeKey (80592e16)
112: nt!NtNotifyChangeMultipleKeys (80592edf)
113: nt!NtOpenDirectoryObject (80581f43)
114: nt!NtOpenEvent (80582492)
115: nt!NtOpenEventPair (80649911)
116: eeyeh+0x8eaa (f4a87eaa)
117: nt!NtOpenIoCompletion (806170a7)
118: nt!NtOpenJobObject (806307a5)
119: eeyeh+0xe20e (f4a8d20e)
120: nt!NtOpenMutant (8057d2af)
121: nt!NtOpenObjectAuditAlarm (805a0486)
122: nt!NtOpenProcess (80574d06)
123: nt!NtOpenProcessToken (8056e041)
124: nt!NtOpenProcessTokenEx (8056e23a)
125: nt!NtOpenSection (8057870b)
126: nt!NtOpenSemaphore (805dd062)
127: nt!NtOpenSymbolicLinkObject (80581e0f)
128: nt!NtOpenThread (8058e806)
129: nt!NtOpenThreadToken (8056dade)
130: nt!NtOpenThreadTokenEx (8056da4c)
131: nt!NtOpenTimer (80649747)
132: nt!NtPlugPlayControl (8059b64e)
133: nt!NtPowerInformation (8059f22c)
134: nt!NtPrivilegeCheck (8059d178)
135: nt!NtPrivilegeObjectAuditAlarm (805ddd8f)
136: nt!NtPrivilegedServiceAuditAlarm (805ac69a)
137: nt!NtProtectVirtualMemory (805750b5)
138: nt!NtPulseEvent (805a4442)
139: nt!NtQueryAttributesFile (80572473)
140: nt!NtEnumerateBootEntries (806491cf)
141: nt!NtEnumerateBootEntries (806491cf)
142: nt!NtQueryDebugFilterState (804f9c05)
143: nt!NtQueryDefaultLocale (80567f2a)
144: nt!NtQueryDefaultUILanguage (80582d8d)
145: nt!NtQueryDirectoryFile (80575515)
146: nt!NtQueryDirectoryObject (805889af)
147: nt!NtQueryEaFile (80617530)
148: nt!NtQueryEvent (80581fc0)
149: nt!NtQueryFullAttributesFile (8057b981)
150: nt!NtQueryInformationAtom (805d8dc0)
151: nt!NtQueryInformationFile (8057347e)
152: nt!NtQueryInformationJobObject (80584f6b)
153: nt!NtQueryInformationPort (80623ab3)
154: nt!NtQueryInformationProcess (8056dc7c)
155: nt!NtQueryInformationThread (80568477)
156: nt!NtQueryInformationToken (8056e7ab)
157: nt!NtQueryInstallUILanguage (805826a2)
158: nt!NtQueryIntervalProfile (8064a2f3)
159: nt!NtQueryIoCompletion (80617168)
160: PROCMON12+0x3b2a (f92b4b2a)
161: nt!NtQueryMultipleValueKey (8064ebe4)
162: nt!NtQueryMutant (80649c7a)
163: nt!NtQueryObject (805836c4)
164: nt!NtQueryOpenSubKeys (8064edea)
165: nt!NtQueryPerformanceCounter (805687b1)
166: nt!NtQueryQuotaInformationFile (80617dfb)
167: nt!NtQuerySection (8057bd99)
168: nt!NtQuerySecurityObject (8059d013)
169: nt!NtQuerySemaphore (80648a73)
170: nt!NtQuerySymbolicLinkObject (80581c80)
171: nt!NtQuerySystemEnvironmentValue (806491f7)
172: nt!NtQuerySystemEnvironmentValueEx (80649194)
173: nt!NtQuerySystemInformation (8057f786)
174: nt!NtQuerySystemTime (80591ad0)
175: nt!NtQueryTimer (80592857)
176: nt!NtQueryTimerResolution (805881f3)
177: PROCMON12+0x3bc2 (f92b4bc2)
178: nt!NtQueryVirtualMemory (8056e338)
179: nt!NtQueryVolumeInformationFile (80571e3b)
180: nt!NtQueueApcThread (8059168f)
181: nt!NtRaiseException (804e403a)
182: nt!NtRaiseHardError (806487af)
183: nt!NtReadFile (805720d8)
184: nt!NtReadFileScatter (805dbe6c)
185: nt!NtReadRequestData (805906a6)
186: nt!NtReadVirtualMemory (8057c545)
187: nt!NtRegisterThreadTerminatePort (8057ebee)
188: nt!NtReleaseMutant (80567809)
189: nt!NtReleaseSemaphore (8058c492)
190: nt!NtRemoveIoCompletion (80568272)
191: nt!NtRemoveProcessDebug (8065b3d6)
192: nt!NtRenameKey (8064f029)
193: nt!NtReplaceKey (8064f51e)
194: nt!NtReplyPort (80580307)
195: nt!NtReplyWaitReceivePort (8056be96)
196: nt!NtReplyWaitReceivePortEx (8056b9ae)
197: nt!NtReplyWaitReplyPort (80623b92)
198: nt!NtRequestDeviceWakeup (8062c803)
199: nt!NtRequestPort (8058ba2c)
200: nt!NtRequestWaitReplyPort (80577f2a)
201: nt!NtRequestWakeupLatency (8062c5fc)
202: nt!NtResetEvent (8059e753)
203: nt!NtResetWriteWatch (8053d14a)
204: nt!NtRestoreKey (8064e042)
205: nt!NtResumeProcess (80630044)
206: nt!NtResumeThread (8057eb14)
207: nt!NtSaveKey (8064e0e9)
208: nt!NtSaveKeyEx (8064e17f)
209: nt!NtSaveMergedKeys (8064e251)
210: nt!NtSecureConnectPort (805809ee)
211: nt!NtEnumerateBootEntries (806491cf)
212: nt!NtEnumerateBootEntries (806491cf)
213: nt!NtSetContextThread (8062e403)
214: nt!NtSetDebugFilterState (8065cf20)
215: nt!NtSetDefaultHardErrorPort (805d6d2f)
216: nt!NtSetDefaultLocale (805aff8d)
217: nt!NtSetDefaultUILanguage (805aff34)
218: nt!NtSetEaFile (80617a7f)
219: nt!NtSetEvent (8056a698)
220: nt!NtSetEventBoostPriority (80576bbe)
221: nt!NtSetHighEventPair (80649c05)
222: nt!NtSetHighWaitLowEventPair (80649b29)
223: nt!NtSetInformationDebugObject (8065ad75)
224: nt!NtSetInformationFile (80578e9c)
225: nt!NtSetInformationJobObject (805aca4a)
226: nt!NtSetInformationKey (8064e747)
227: nt!NtSetInformationObject (805825c7)
228: nt!NtSetInformationProcess (8056dd4d)
229: nt!NtSetInformationThread (805767a6)
230: nt!NtSetInformationToken (805a9df5)
231: nt!NtSetIntervalProfile (80649e1f)
232: nt!NtSetIoCompletion (80578d51)
233: nt!NtSetLdtEntries (8062f127)
234: nt!NtSetLowEventPair (80649b9b)
235: nt!NtSetLowWaitHighEventPair (80649ab7)
236: nt!NtSetQuotaInformationFile (80617dd3)
237: nt!NtSetSecurityObject (8059d831)
238: nt!NtSetSystemEnvironmentValue (80649494)
239: nt!NtQuerySystemEnvironmentValueEx (80649194)
240: nt!NtSetSystemInformation (805a4664)
241: nt!NtSetSystemPowerState (80667827)
242: nt!NtSetSystemTime (806480f7)
243: nt!NtSetThreadExecutionState (805e171c)
244: nt!NtSetTimer (804e779b)
245: nt!NtSetTimerResolution (805e1da2)
246: nt!NtSetUuidSeed (805ac846)
247: eeyeh+0xe386 (f4a8d386)
248: nt!NtSetVolumeInformationFile (80618315)
249: nt!NtShutdownSystem (80647843)
250: nt!NtSignalAndWaitForSingleObject (805192d9)
251: nt!NtStartProfile (8064a088)
252: nt!NtStopProfile (8064a241)
253: nt!NtSuspendProcess (8062ffe9)
254: nt!NtSuspendThread (805e1a18)
255: nt!NtSystemDebugControl (8064a3a1)
256: nt!NtTerminateJobObject (8063091f)
257: eeyeh+0xa64a (f4a8964a)
258: nt!NtTerminateThread (8057dbba)
259: nt!NtTestAlert (8057e5fb)
260: nt!NtTraceEvent (80546fe0)
261: nt!NtTranslateFilePath (806491e3)
262: nt!NtUnloadDriver (8061a730)
263: PROCMON12+0x458e (f92b558e)
264: nt!NtUnloadKeyEx (8064e514)
265: nt!NtUnlockFile (8058e5c6)
266: nt!NtUnlockVirtualMemory (80627a95)
267: nt!NtUnmapViewOfSection (80573ef1)
268: nt!NtVdmControl (805b90b0)
269: nt!NtWaitForDebugEvent (8065aac0)
270: nt!NtWaitForMultipleObjects (80567a6e)
271: nt!NtWaitForSingleObject (8056750a)
272: nt!NtWaitHighEventPair (80649a4d)
273: nt!NtWaitLowEventPair (806499e3)
274: nt!NtWriteFile (80579145)
275: nt!NtWriteFileGather (805dbaa2)
276: nt!NtWriteRequestData (80590893)
277: eeyeh+0xa374 (f4a89374)
278: nt!NtYieldExecution (804fab8d)
279: nt!NtCreateKeyedEvent (805cd49d)
280: nt!NtOpenKeyedEvent (805858f0)
281: nt!NtReleaseKeyedEvent (8064a815)
282: nt!NtWaitForKeyedEvent (8064aab0)
283: nt!NtQueryPortInformationProcess (8062dbe9)


HOME Windows Crash Dump Analysis Basics


Copyright©Takashi Toyota 2004- 2012
It is 2012-05-20 today.