Josef,
Thanks for those great links, and the sentiment behind them.
Looks like kwatson.com is a fully-accreditied FBN-affilate site. Must have taken them months of effort.
The last link gave me some trouble, though, especially when I went up a level to josef.com
("Josef International... is dedicated to providing you with the finest in cosmetics and hair care products.")
Seems my dear uncle Dr. Watson (.exe) took exception to something on that page, he did a "State Dump" and then took a "Raw Stack Dump" - peeee-uuuuuuw!!!
Look at this stuff! I tried to figure it out myself, but when I add the BL1 base register address to the iopl, and divide by the dword ptr, I get an address in Cleveland. In fact the only part of this "log" that makes any sense at all is:
>ss:0103caca=????????<
State Dump for Thread Id 0x51
eax=00000000 ebx=004b042a ecx=00000000 edx=00000000 esi=06871f50 edi=00400000
eip=0041a316 esp=0012df88 ebp=0012e0c4 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00010246
function: <nosymbols>
0041a2fd 56 push esi
0041a2fe e8ebfcffff call 00419fee
0041a303 83c40c add esp,0xc
0041a306 8d45f0 lea eax,[ebp-0x10] ss:0103caca=????????
0041a309 50 push eax
0041a30a e881d0ffff call 00417390
0041a30f 59 pop ecx
0041a310 8bc8 mov ecx,eax
0041a312 53 push ebx
0041a313 ff75fc push dword ptr [ebp-0x4] ss:0103caca=????????
FAULT ->0041a316 8b4114 mov eax,[ecx+0x14] ds:00f0ea06=????????
0041a319 bb64000000 mov ebx,0x64
0041a31e 99 cdq
0041a31f f7fb idiv ebx
0041a321 52 push edx
0041a322 ff710c push dword ptr [ecx+0xc] ds:00f0ea06=????????
0041a325 8b4110 mov eax,[ecx+0x10] ds:00f0ea06=????????
0041a328 40 inc eax
0041a329 50 push eax
0041a32a 68ee034b00 push 0x4b03ee
0041a32f 8d85d8feffff lea eax,[ebp+0xfffffed8] ss:0012df9c=203a7942
0041a335 50 push eax
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0012e0c4 00419fab 06871f50 00000003 00400000 00000003 <nosymbols>
*----> Raw Stack Dump <----*
0012df88 22 04 4b 00 2a 04 4b 00 - 00 00 40 00 03 00 00 00 ".K.*.K...@.....
0012df98 50 1f 87 06 42 79 3a 20 - 55 6e 6b 6e 6f 77 6e 20 P...By: Unknown
0012dfa8 20 20 20 20 20 20 20 20 - 54 6f 3a 20 55 6e 6b 6e To: Unkn
0012dfb8 6f 77 6e 20 20 20 20 20 - 20 20 20 53 74 61 74 75 own Statu
0012dfc8 73 3a 20 4f 70 65 6e 20 - 20 20 20 20 20 00 13 02 s: Open ...
0012dfd8 6e 01 10 00 0f 00 00 00 - 00 00 00 00 00 00 00 00 n...............
0012dfe8 ec 7d 13 02 0c e0 12 00 - 9a 28 e7 77 83 e4 58 00 .}.......(.w..X.
0012dff8 6e 01 10 00 0f 00 00 00 - 00 00 00 00 00 00 00 00 n...............
0012e008 01 00 00 00 3c e0 12 00 - 3d f7 57 00 83 e4 58 00 ....<...=.W...X.
0012e018 6e 01 10 00 0f 00 00 00 - 00 00 00 00 00 00 00 00 n...............
0012e028 02 00 00 00 03 00 00 00 - ec 7d 13 02 47 00 00 00 .........}..G...
0012e038 44 62 13 02 54 e0 12 00 - 17 13 e7 77 6e 01 10 00 Db..T......wn...
0012e048 0f 00 00 00 00 00 00 00 - 00 00 00 00 7c e0 12 00 ............|...
0012e058 8c 24 e7 77 70 d6 81 00 - 0f 00 00 00 84 e0 12 00 .$.wp...........
0012e068 7f 76 27 00 20 16 13 02 - 04 00 00 00 80 e0 12 00 .v'. ...........
0012e078 70 5b 13 02 ff ff ff ff - 94 e0 12 00 62 76 27 00 p[..........bv'.
0012e088 20 16 13 02 03 00 00 00 - a8 e0 12 00 ac e0 12 00 ...............
0012e098 05 de 57 00 01 00 00 00 - 3e 12 12 08 03 e0 12 00 ..W.....>.......
0012e0a8 c1 00 00 00 00 e0 12 00 - 96 ea 57 00 00 00 00 00 ..........W.....
0012e0b8 2a 04 4b 00 2a 04 4b 00 - 22 04 4b 00 ec e0 12 00 *.K.*.K.".K..... |
